@aglyn/plugins-commerce 1.0.0-beta.232 → 1.0.0-beta.233

package/src/lib/server/pos-display.d.ts

@@ -14,7 +14,7 @@
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */
-import type { PluginApiHandler } from '@aglyn/aglyn/server';
+import type { PluginApiHandler, PluginApiRequest } from '@aglyn/aglyn/server';
 import * as CommerceModel from '../model';
 export declare function sha256(value: string): string;
 /** The one state document a register's display reads. */
@@ -47,6 +47,32 @@ export declare function resetPosDisplay(hostId: string, registerId: string): Pro
 export declare function finishPosDisplayReceipt(hostId: string, registerId: string): Promise<void>;
 /** Signs every display of a register out, and forgets its state. */
 export declare function revokePosDisplays(hostId: string, registerId: string): Promise<void>;
+/** The store's name, logo and welcome line, for the idle and thank-you screens. */
+export declare function displayBranding(hostId: string): Promise<{
+    name: string;
+    logoUrl: string;
+    logoDarkUrl: string;
+    message: string;
+}>;
+/** The display token on a request, or ''. */
+export declare function displayToken(req: PluginApiRequest, body: Record<string, any>): string;
+/** What a paired device's token opens. */
+export interface PosDeviceToken {
+    hostId: string;
+    registerId: string;
+    ref: any;
+    /**
+     * A customer display, or a self-service kiosk (AGL-3623). A token minted
+     * before kiosks existed has no mode and is a display.
+     */
+    mode: CommerceModel.PosDeviceMode;
+    /** The staff member whose pairing code opened this device. */
+    createdBy: string;
+    /** The token document, for the caller that keeps device settings on it. */
+    data: Record<string, any>;
+}
+/** The register a live display token opens, or null. */
+export declare function resolveDisplayToken(token: string): Promise<PosDeviceToken | null>;
 /**
  * `POST /api/commerce/pos-display`.
  *

package/src/lib/server/pos-display.js

@@ -135,7 +135,7 @@ async function registerExists(hostId, registerId) {
     if (!/^[A-Za-z0-9_-]{1,128}$/.test(registerId)) return false;
     return (await firebaseAdmin.app().firestore().collection('hosts').doc(hostId).collection('registers').doc(registerId).get()).exists;
 }
-/** The store's name, logo and welcome line, for the idle and thank-you screens. */ async function displayBranding(hostId) {
+/** The store's name, logo and welcome line, for the idle and thank-you screens. */ export async function displayBranding(hostId) {
     var _ref, _host_get, _resolveMediaSrc, _resolveMediaSrc1;
     const firestore = firebaseAdmin.app().firestore();
     const host = await firestore.collection('hosts').doc(hostId).get();
@@ -154,13 +154,13 @@ async function registerExists(hostId, registerId) {
         message: settings.displayMessage || 'Welcome'
     };
 }
-/** The display token on a request, or ''. */ function displayToken(req, body) {
+/** The display token on a request, or ''. */ export function displayToken(req, body) {
     var _req_headers_xposdisplaytoken, _body_token;
     const header = String((_req_headers_xposdisplaytoken = req.headers['x-pos-display-token']) != null ? _req_headers_xposdisplaytoken : '');
     return (header || String((_body_token = body['token']) != null ? _body_token : '')).trim().slice(0, 128);
 }
-/** The register a live display token opens, or null. */ async function resolveDisplayToken(token) {
-    var _snapshot_get, _snapshot_get1, _snapshot_get2;
+/** The register a live display token opens, or null. */ export async function resolveDisplayToken(token) {
+    var _snapshot_get, _snapshot_get1, _snapshot_get2, _snapshot_get3, _snapshot_data;
     if (!/^[A-Za-z0-9_-]{40,128}$/.test(token)) return null;
     const ref = firebaseAdmin.app().firestore().collection(TOKENS).doc(sha256(token));
     const snapshot = await ref.get();
@@ -182,9 +182,15 @@ async function registerExists(hostId, registerId) {
     return {
         hostId,
         registerId,
-        ref
+        ref,
+        mode: snapshot.get('mode') === 'kiosk' ? 'kiosk' : 'display',
+        createdBy: String((_snapshot_get3 = snapshot.get('createdBy')) != null ? _snapshot_get3 : ''),
+        data: (_snapshot_data = snapshot.data()) != null ? _snapshot_data : {}
     };
 }
+/** A token row's mode, `display` for one that predates kiosks. */ function tokenMode(doc) {
+    return doc.get('mode') === 'kiosk' ? 'kiosk' : 'display';
+}
 /**
  * `POST /api/commerce/pos-display`.
  *
@@ -216,11 +222,25 @@ async function registerExists(hostId, registerId) {
                         error: 'This display is not paired.'
                     });
                     if (action === 'forget') {
+                        // A kiosk leaves kiosk mode behind a staff PIN (AGL-3623), through
+                        // `commerce/pos-kiosk`, never by a customer's tap here.
+                        if (display.mode === 'kiosk') {
+                            return res.status(403).json({
+                                error: 'Ask a staff member to unlock this kiosk.'
+                            });
+                        }
                         await display.ref.delete();
                         return res.status(200).json({
                             ok: true
                         });
                     }
+                    // A kiosk is not the register's customer display (AGL-3623): the
+                    // basket the cashier is ringing up belongs to another customer.
+                    if (display.mode === 'kiosk') {
+                        return res.status(403).json({
+                            error: 'This device is a self-service kiosk.'
+                        });
+                    }
                     const snapshot = await stateRef(display.hostId, display.registerId).get();
                     const state = snapshot.exists ? snapshot.data() : null;
                     if (action === 'poll') {
@@ -268,6 +288,9 @@ async function pair(req, body, res) {
         });
     }
     const code = String((_body_code = body['code']) != null ? _body_code : '').replace(/\D/g, '');
+    // The device asks for the kind of screen it is; the code decides. A kiosk
+    // code opens a kiosk, and a display code never does (AGL-3623).
+    const wanted = body['mode'] === 'kiosk' ? 'kiosk' : 'display';
     if (code.length !== 6) return res.status(400).json({
         error: 'Enter the 6-digit code from the register.'
     });
@@ -285,17 +308,25 @@ async function pair(req, body, res) {
         if (!(expiresAtMs > Date.now())) return null;
         const hostId = String((_snapshot_get1 = snapshot.get('hostId')) != null ? _snapshot_get1 : '');
         const registerId = String((_snapshot_get2 = snapshot.get('registerId')) != null ? _snapshot_get2 : '');
+        const mode = snapshot.get('mode') === 'kiosk' ? 'kiosk' : 'display';
+        // The wrong kind of screen leaves the code spent: the register shows a
+        // new one for the device it meant.
+        if (mode !== wanted) return {
+            mismatch: mode
+        };
         transaction.set(firestore.collection(TOKENS).doc(sha256(token)), {
             hostId,
             registerId,
+            mode,
             createdAtMs: Date.now(),
             createdBy: String((_snapshot_get3 = snapshot.get('createdBy')) != null ? _snapshot_get3 : ''),
             lastSeenAtMs: Date.now(),
-            label: String((_body_label = body['label']) != null ? _body_label : '').slice(0, 60) || 'Customer display'
+            label: String((_body_label = body['label']) != null ? _body_label : '').slice(0, 60) || (mode === 'kiosk' ? 'Self-service kiosk' : 'Customer display')
         });
         return {
             hostId,
-            registerId
+            registerId,
+            mode
         };
     });
     if (!paired) {
@@ -303,8 +334,14 @@ async function pair(req, body, res) {
             error: 'That code is not valid. Show a new code on the register.'
         });
     }
+    if ('mismatch' in paired) {
+        return res.status(409).json({
+            error: paired.mismatch === 'kiosk' ? 'That code is for a self-service kiosk. Open the kiosk address, or show a display code on the register.' : 'That code is for a customer display. Choose Self-service kiosk on the register and show a new code.'
+        });
+    }
     return res.status(200).json({
         token,
+        mode: paired.mode,
         branding: await displayBranding(paired.hostId)
     });
 }
@@ -338,7 +375,9 @@ async function staffAction(req, body, action, res) {
                             hostId,
                             registerId,
                             expiresAtMs,
-                            createdBy: gate.staff.uid
+                            createdBy: gate.staff.uid,
+                            // A kiosk code (AGL-3623) opens a self-service kiosk instead.
+                            mode: body['mode'] === 'kiosk' ? 'kiosk' : 'display'
                         });
                         return true;
                     });
@@ -377,9 +416,10 @@ async function staffAction(req, body, action, res) {
                 return res.status(200).json({
                     state,
                     // A display that polled within the last two minutes is "connected".
+                    // A kiosk is not the register's display (AGL-3623).
                     connected: displays.docs.some((doc)=>{
                         var _doc_get;
-                        return Date.now() - Number((_doc_get = doc.get('lastSeenAtMs')) != null ? _doc_get : 0) < 120000;
+                        return tokenMode(doc) === 'display' && Date.now() - Number((_doc_get = doc.get('lastSeenAtMs')) != null ? _doc_get : 0) < 120000;
                     })
                 });
             }
@@ -392,6 +432,7 @@ async function staffAction(req, body, action, res) {
                         return {
                             id: doc.id.slice(0, 16),
                             label: String((_doc_get = doc.get('label')) != null ? _doc_get : 'Customer display'),
+                            mode: tokenMode(doc),
                             createdAtMs: Number((_doc_get1 = doc.get('createdAtMs')) != null ? _doc_get1 : 0),
                             lastSeenAtMs: Number((_doc_get2 = doc.get('lastSeenAtMs')) != null ? _doc_get2 : 0)
                         };

package/src/lib/server/pos-display.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-display.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { createHash, randomBytes, randomInt } from 'crypto'\nimport { consumeRateLimit, firebaseAdmin, getPluginConfig, getOrgForHost } from '@aglyn/tenant-data-admin'\nimport type { PluginApiHandler, PluginApiRequest } from '@aglyn/aglyn/server'\nimport { resolveMediaSrc } from '@aglyn/aglyn/app-utils/media-ref'\nimport { pluginSmsAvailable } from '@aglyn/aglyn/plugin-manager/plugin-sms-messaging'\nimport * as CommerceModel from '../model'\nimport { posRegisterSettings } from '../plugin-config'\nimport { authorizePosStaff, posQueryBody, posRequestBody } from './pos-auth'\nimport { POS_CURRENCY } from './pos-stripe'\n\n/*==========================================\n * THE CUSTOMER DISPLAY (AGL-3608).\n *\n * A second screen — a tablet on a stand facing the customer — that shows the\n * basket, takes the tip and the receipt choice, and hands both back to the\n * cashier. It must work with NO staff sign-in on the customer's device, so it\n * holds nothing but a display token.\n *\n * ## Pairing\n *\n * The register asks for a six-digit code (`pairing-code`), good for ten\n * minutes and usable once. The display sends it (`pair`) and receives a\n * random 256-bit token. Only hashes are stored: `posDisplayPairings/{sha256}`\n * for the code and `posDisplayTokens/{sha256}` for the token, each naming the\n * one site and register it opens. Revoking a display, or removing its\n * register, kills the token. A six-digit space is small, so `pair` is rate\n * limited per address and a code dies at its first use.\n *\n * ## Why polling through this route, not a Firestore listener\n *\n * A Firestore listener needs a Firebase identity the rules can test, which on\n * the customer's device means minting a custom auth session — a credential\n * that would sit on an unattended tablet with the console's own SDK. Polling\n * this route once a second with the display token is the simplest thing that\n * is secure: the token opens exactly one register's display state and\n * nothing else, the state lives in a server-only collection\n * (`posDisplayStates`, denied to every client by the rules) so not even a\n * signed-in site member can read a customer's typed address out of it, and a\n * revoked token stops working on the next poll.\n *=========================================*/\n\nconst PAIRINGS = 'posDisplayPairings'\nconst TOKENS = 'posDisplayTokens'\nconst STATES = 'posDisplayStates'\n\nexport function sha256(value: string): string {\n  return createHash('sha256').update(value).digest('hex')\n}\n\n/** The one state document a register's display reads. */\nexport function posDisplayStateId(hostId: string, registerId: string): string {\n  return `${hostId}__${registerId}`\n}\n\nfunction stateRef(hostId: string, registerId: string) {\n  return firebaseAdmin\n    .app()\n    .firestore()\n    .collection(STATES)\n    .doc(posDisplayStateId(hostId, registerId))\n}\n\n/**\n * The store's currency (`hosts/{hostId}/settings/store.currency`, lower\n * case), which every figure on the customer's screen is formatted in. A\n * store that never chose one is in the currency the register charges.\n */\nexport async function posDisplayCurrency(hostId: string): Promise<string> {\n  const snapshot = await firebaseAdmin\n    .app()\n    .firestore()\n    .collection('hosts')\n    .doc(hostId)\n    .collection('settings')\n    .doc('store')\n    .get()\n    .catch(() => null)\n  const chosen = String(snapshot?.exists ? (snapshot.get('currency') ?? '') : '')\n    .trim()\n    .toLowerCase()\n  return /^[a-z]{3}$/.test(chosen) ? chosen : POS_CURRENCY\n}\n\n/**\n * Writes the display state whole, so nothing from the last prompt lingers —\n * a customer's typed address included. The currency is the store's, stamped\n * here so the screen never formats a figure in one the register made up.\n */\nexport async function writePosDisplayState(\n  hostId: string,\n  registerId: string,\n  state: CommerceModel.PosDisplayState,\n): Promise<void> {\n  await stateRef(hostId, registerId).set({\n    ...state,\n    currency: await posDisplayCurrency(hostId),\n    hostId,\n    registerId,\n  })\n}\n\n/** The register's display returns to the thank-you screen with no customer data. */\nexport async function resetPosDisplay(hostId: string, registerId: string): Promise<void> {\n  await writePosDisplayState(hostId, registerId, { mode: 'thanks', updatedAtMs: Date.now() })\n}\n\n/**\n * Ends the customer's turn once the register has acted on their receipt\n * choice (AGL-3608): a display still on the receipt prompt says thank you,\n * and an answer holding a typed email address or phone number is dropped\n * from the state either way, so no contact detail outlives the sale on the\n * server doc a public screen reads.\n *\n * Conditional, in a transaction, because the receipt can be sent after the\n * cashier has started the next sale: a display already showing the next\n * customer's basket is left alone.\n */\nexport async function finishPosDisplayReceipt(hostId: string, registerId: string): Promise<void> {\n  const firestore = firebaseAdmin.app().firestore()\n  const ref = stateRef(hostId, registerId)\n  const currency = await posDisplayCurrency(hostId)\n  await firestore.runTransaction(async (transaction: any) => {\n    const snapshot = await transaction.get(ref)\n    if (!snapshot.exists) return\n    const state = snapshot.data() as CommerceModel.PosDisplayState\n    if (state.mode === 'receipt') {\n      transaction.set(ref, {\n        mode: 'thanks',\n        updatedAtMs: Date.now(),\n        currency,\n        hostId,\n        registerId,\n      })\n      return\n    }\n    if (state.response && (state.response.email || state.response.phone)) {\n      const rest = { ...state }\n      delete rest.response\n      transaction.set(ref, rest)\n    }\n  })\n}\n\n/** Signs every display of a register out, and forgets its state. */\nexport async function revokePosDisplays(hostId: string, registerId: string): Promise<void> {\n  const firestore = firebaseAdmin.app().firestore()\n  const tokens = await firestore\n    .collection(TOKENS)\n    .where('hostId', '==', hostId)\n    .where('registerId', '==', registerId)\n    .limit(50)\n    .get()\n  await Promise.all(tokens.docs.map((doc: any) => doc.ref.delete()))\n  await stateRef(hostId, registerId).delete().catch(() => undefined)\n}\n\nasync function registerExists(hostId: string, registerId: string): Promise<boolean> {\n  if (!/^[A-Za-z0-9_-]{1,128}$/.test(registerId)) return false\n  return (\n    await firebaseAdmin\n      .app()\n      .firestore()\n      .collection('hosts')\n      .doc(hostId)\n      .collection('registers')\n      .doc(registerId)\n      .get()\n  ).exists\n}\n\n/** The store's name, logo and welcome line, for the idle and thank-you screens. */\nasync function displayBranding(hostId: string) {\n  const firestore = firebaseAdmin.app().firestore()\n  const host = await firestore.collection('hosts').doc(hostId).get()\n  const ownerOrg = await getOrgForHost(hostId).catch(() => null)\n  const settings = posRegisterSettings(\n    await getPluginConfig(ownerOrg?.orgId, 'commerce', { hostId }).catch(() => ({})),\n  )\n  return {\n    name: String(host.get('displayName') ?? host.get('name') ?? '').slice(0, 80) || 'Welcome',\n    logoUrl: resolveMediaSrc(host.get('logoUrl'), { hostId }) ?? null,\n    logoDarkUrl: resolveMediaSrc(host.get('logoDarkUrl'), { hostId }) ?? null,\n    message: settings.displayMessage || 'Welcome',\n  }\n}\n\n/** The display token on a request, or ''. */\nfunction displayToken(req: PluginApiRequest, body: Record<string, any>): string {\n  const header = String(req.headers['x-pos-display-token'] ?? '')\n  return (header || String(body['token'] ?? '')).trim().slice(0, 128)\n}\n\n/** The register a live display token opens, or null. */\nasync function resolveDisplayToken(\n  token: string,\n): Promise<{ hostId: string; registerId: string; ref: any } | null> {\n  if (!/^[A-Za-z0-9_-]{40,128}$/.test(token)) return null\n  const ref = firebaseAdmin.app().firestore().collection(TOKENS).doc(sha256(token))\n  const snapshot = await ref.get()\n  if (!snapshot.exists) return null\n  const hostId = String(snapshot.get('hostId') ?? '')\n  const registerId = String(snapshot.get('registerId') ?? '')\n  if (!hostId || !registerId) return null\n  // A display whose register was removed is dead, even if its token row\n  // somehow outlived the removal.\n  if (!(await registerExists(hostId, registerId))) return null\n  const lastSeen = Number(snapshot.get('lastSeenAtMs') ?? 0)\n  if (Date.now() - lastSeen > 60_000) {\n    await ref.set({ lastSeenAtMs: Date.now() }, { merge: true }).catch(() => undefined)\n  }\n  return { hostId, registerId, ref }\n}\n\n/**\n * `POST /api/commerce/pos-display`.\n *\n * Staff (Firebase token + the register's gate): `pairing-code`, `push`,\n * `state`, `displays`, `revoke`.\n * Display (display token only): `pair`, `poll`, `respond`, `forget`.\n */\nexport const posDisplayHandler: PluginApiHandler = async (req, res) => {\n  // The two polls are GETs: a read is not a console write, so a display and a\n  // register asking once a second do not spend the console's write budget.\n  const body = req.method === 'GET' ? posQueryBody(req) : posRequestBody(req)\n  const action = String(body['action'] ?? '')\n  if (\n    !(req.method === 'POST' || (req.method === 'GET' && (action === 'poll' || action === 'state')))\n  ) {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  res.setHeader('Cache-Control', 'no-store')\n  try {\n    switch (action) {\n      case 'pair':\n        return await pair(req, body, res)\n      case 'poll':\n      case 'respond':\n      case 'forget': {\n        const display = await resolveDisplayToken(displayToken(req, body))\n        if (!display) return res.status(401).json({ error: 'This display is not paired.' })\n        if (action === 'forget') {\n          await display.ref.delete()\n          return res.status(200).json({ ok: true })\n        }\n        const snapshot = await stateRef(display.hostId, display.registerId).get()\n        const state = snapshot.exists ? (snapshot.data() as CommerceModel.PosDisplayState) : null\n        if (action === 'poll') {\n          return res.status(200).json({\n            state: CommerceModel.posDisplayPublicState(state, Date.now()),\n            branding:\n              body['branding'] === true || body['branding'] === 'true'\n                ? await displayBranding(display.hostId)\n                : undefined,\n          })\n        }\n        const response = CommerceModel.sanitizePosDisplayResponse(state, body['response'], Date.now())\n        if (!response) {\n          return res.status(409).json({ error: 'That screen has moved on. Check the display.' })\n        }\n        await stateRef(display.hostId, display.registerId).set({ response }, { merge: true })\n        return res.status(200).json({ ok: true })\n      }\n      default:\n        return await staffAction(req, body, action, res)\n    }\n  } catch (error) {\n    console.error('[pos-display]', action, error)\n    return res.status(500).json({ error: 'The customer display could not be updated' })\n  }\n}\n\nasync function pair(\n  req: PluginApiRequest,\n  body: Record<string, any>,\n  res: Parameters<PluginApiHandler>[1],\n) {\n  const address = String(req.socket?.remoteAddress ?? '') || 'no-address'\n  const rate = await consumeRateLimit(`pos-display-pair:${address}`, {\n    limit: 10,\n    windowMs: 10 * 60 * 1000,\n  })\n  if (!rate.allowed) {\n    return res.status(429).json({ error: 'Too many tries. Wait a few minutes and try again.' })\n  }\n  const code = String(body['code'] ?? '').replace(/\\D/g, '')\n  if (code.length !== 6) return res.status(400).json({ error: 'Enter the 6-digit code from the register.' })\n  const firestore = firebaseAdmin.app().firestore()\n  const pairingRef = firestore.collection(PAIRINGS).doc(sha256(code))\n  const token = randomBytes(32).toString('base64url')\n  // Spent in the same transaction that mints the token: a code opens one\n  // display, once, and a second display racing the first gets nothing.\n  const paired = await firestore.runTransaction(async (transaction: any) => {\n    const snapshot = await transaction.get(pairingRef)\n    if (!snapshot.exists) return null\n    const expiresAtMs = Number(snapshot.get('expiresAtMs') ?? 0)\n    transaction.delete(pairingRef)\n    if (!(expiresAtMs > Date.now())) return null\n    const hostId = String(snapshot.get('hostId') ?? '')\n    const registerId = String(snapshot.get('registerId') ?? '')\n    transaction.set(firestore.collection(TOKENS).doc(sha256(token)), {\n      hostId,\n      registerId,\n      createdAtMs: Date.now(),\n      createdBy: String(snapshot.get('createdBy') ?? ''),\n      lastSeenAtMs: Date.now(),\n      label: String(body['label'] ?? '').slice(0, 60) || 'Customer display',\n    })\n    return { hostId, registerId }\n  })\n  if (!paired) {\n    return res.status(404).json({ error: 'That code is not valid. Show a new code on the register.' })\n  }\n  return res.status(200).json({ token, branding: await displayBranding(paired.hostId) })\n}\n\nasync function staffAction(\n  req: PluginApiRequest,\n  body: Record<string, any>,\n  action: string,\n  res: Parameters<PluginApiHandler>[1],\n) {\n  const hostId = String(body['hostId'] ?? '')\n  const gate = await authorizePosStaff(req, hostId)\n  if ('error' in gate) return res.status(gate.status).json({ error: gate.error })\n  const registerId = String(body['registerId'] ?? '')\n  if (!(await registerExists(hostId, registerId))) {\n    return res.status(404).json({ error: 'Unknown register' })\n  }\n  const firestore = firebaseAdmin.app().firestore()\n  switch (action) {\n    case 'pairing-code': {\n      for (let attempt = 0; attempt < 8; attempt++) {\n        const code = String(randomInt(0, 1_000_000)).padStart(6, '0')\n        const ref = firestore.collection(PAIRINGS).doc(sha256(code))\n        const expiresAtMs = Date.now() + CommerceModel.POS_DISPLAY_PAIRING_TTL_MS\n        const claimed = await firestore.runTransaction(async (transaction: any) => {\n          const existing = await transaction.get(ref)\n          // A live code another register is showing is never overwritten.\n          if (existing.exists && Number(existing.get('expiresAtMs') ?? 0) > Date.now()) return false\n          transaction.set(ref, {\n            hostId,\n            registerId,\n            expiresAtMs,\n            createdBy: gate.staff.uid,\n          })\n          return true\n        })\n        if (claimed) return res.status(200).json({ code, expiresAtMs })\n      }\n      return res.status(503).json({ error: 'Could not make a code. Try again.' })\n    }\n    case 'push': {\n      const state = CommerceModel.sanitizePosDisplayState(body['state'], Date.now())\n      // \"Text\" is never offered on a screen when the store cannot send one.\n      if (state.receipt && !pluginSmsAvailable()) {\n        const channels = state.receipt.channels.filter((channel) => channel !== 'sms')\n        state.receipt.channels = channels.length ? channels : ['print', 'none']\n      }\n      await writePosDisplayState(hostId, registerId, state)\n      return res.status(200).json({ ok: true, promptId: state.promptId ?? null })\n    }\n    case 'state': {\n      const snapshot = await stateRef(hostId, registerId).get()\n      const state = snapshot.exists ? (snapshot.data() as CommerceModel.PosDisplayState) : null\n      const displays = await firestore\n        .collection(TOKENS)\n        .where('hostId', '==', hostId)\n        .where('registerId', '==', registerId)\n        .limit(10)\n        .get()\n      return res.status(200).json({\n        state,\n        // A display that polled within the last two minutes is \"connected\".\n        connected: displays.docs.some(\n          (doc: any) => Date.now() - Number(doc.get('lastSeenAtMs') ?? 0) < 120_000,\n        ),\n      })\n    }\n    case 'displays': {\n      const displays = await firestore\n        .collection(TOKENS)\n        .where('hostId', '==', hostId)\n        .where('registerId', '==', registerId)\n        .limit(10)\n        .get()\n      return res.status(200).json({\n        displays: displays.docs.map((doc: any) => ({\n          id: doc.id.slice(0, 16),\n          label: String(doc.get('label') ?? 'Customer display'),\n          createdAtMs: Number(doc.get('createdAtMs') ?? 0),\n          lastSeenAtMs: Number(doc.get('lastSeenAtMs') ?? 0),\n        })),\n      })\n    }\n    case 'revoke': {\n      const prefix = String(body['displayId'] ?? '')\n      const displays = await firestore\n        .collection(TOKENS)\n        .where('hostId', '==', hostId)\n        .where('registerId', '==', registerId)\n        .limit(10)\n        .get()\n      const doomed = displays.docs.filter(\n        (doc: any) => prefix === '*' || (prefix.length === 16 && doc.id.startsWith(prefix)),\n      )\n      await Promise.all(doomed.map((doc: any) => doc.ref.delete()))\n      return res.status(200).json({ revoked: doomed.length })\n    }\n    default:\n      return res.status(400).json({ error: 'Unknown action' })\n  }\n}\n"],"names":["createHash","randomBytes","randomInt","consumeRateLimit","firebaseAdmin","getPluginConfig","getOrgForHost","resolveMediaSrc","pluginSmsAvailable","CommerceModel","posRegisterSettings","authorizePosStaff","posQueryBody","posRequestBody","POS_CURRENCY","PAIRINGS","TOKENS","STATES","sha256","value","update","digest","posDisplayStateId","hostId","registerId","stateRef","app","firestore","collection","doc","posDisplayCurrency","snapshot","get","catch","chosen","String","exists","trim","toLowerCase","test","writePosDisplayState","state","set","currency","resetPosDisplay","mode","updatedAtMs","Date","now","finishPosDisplayReceipt","ref","runTransaction","transaction","data","response","email","phone","rest","revokePosDisplays","tokens","where","limit","Promise","all","docs","map","delete","undefined","registerExists","displayBranding","host","ownerOrg","settings","orgId","name","slice","logoUrl","logoDarkUrl","message","displayMessage","displayToken","req","body","header","headers","resolveDisplayToken","token","lastSeen","Number","lastSeenAtMs","merge","posDisplayHandler","res","method","action","status","json","error","setHeader","pair","display","ok","posDisplayPublicState","branding","sanitizePosDisplayResponse","staffAction","console","address","socket","remoteAddress","rate","windowMs","allowed","code","replace","length","pairingRef","toString","paired","expiresAtMs","createdAtMs","createdBy","label","gate","attempt","padStart","POS_DISPLAY_PAIRING_TTL_MS","claimed","existing","staff","uid","sanitizePosDisplayState","receipt","channels","filter","channel","promptId","displays","connected","some","id","prefix","doomed","startsWith","revoked"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,UAAU,EAAEC,WAAW,EAAEC,SAAS,QAAQ,SAAQ;AAC3D,SAASC,gBAAgB,EAAEC,aAAa,EAAEC,eAAe,EAAEC,aAAa,QAAQ,2BAA0B;AAE1G,SAASC,eAAe,QAAQ,mCAAkC;AAClE,SAASC,kBAAkB,QAAQ,mDAAkD;AACrF,YAAYC,mBAAmB,oBAAU;AACzC,SAASC,mBAAmB,QAAQ,sBAAkB;AACtD,SAASC,iBAAiB,EAAEC,YAAY,EAAEC,cAAc,QAAQ,gBAAY;AAC5E,SAASC,YAAY,QAAQ,kBAAc;AAE3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2CA6B2C,GAE3C,MAAMC,WAAW;AACjB,MAAMC,SAAS;AACf,MAAMC,SAAS;AAEf,OAAO,SAASC,OAAOC,KAAa;IAClC,OAAOnB,WAAW,UAAUoB,MAAM,CAACD,OAAOE,MAAM,CAAC;AACnD;AAEA,uDAAuD,GACvD,OAAO,SAASC,kBAAkBC,MAAc,EAAEC,UAAkB;IAClE,OAAO,GAAGD,OAAO,EAAE,EAAEC,YAAY;AACnC;AAEA,SAASC,SAASF,MAAc,EAAEC,UAAkB;IAClD,OAAOpB,cACJsB,GAAG,GACHC,SAAS,GACTC,UAAU,CAACX,QACXY,GAAG,CAACP,kBAAkBC,QAAQC;AACnC;AAEA;;;;CAIC,GACD,OAAO,eAAeM,mBAAmBP,MAAc;QAUXQ;IAT1C,MAAMA,WAAW,MAAM3B,cACpBsB,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,SACXC,GAAG,CAACN,QACJK,UAAU,CAAC,YACXC,GAAG,CAAC,SACJG,GAAG,GACHC,KAAK,CAAC,IAAM;IACf,MAAMC,SAASC,OAAOJ,CAAAA,4BAAAA,SAAUK,MAAM,KAAIL,gBAAAA,SAASC,GAAG,CAAC,uBAAbD,gBAA4B,KAAM,IACzEM,IAAI,GACJC,WAAW;IACd,OAAO,aAAaC,IAAI,CAACL,UAAUA,SAASpB;AAC9C;AAEA;;;;CAIC,GACD,OAAO,eAAe0B,qBACpBjB,MAAc,EACdC,UAAkB,EAClBiB,KAAoC;IAEpC,MAAMhB,SAASF,QAAQC,YAAYkB,GAAG,CAAC,aAClCD;QACHE,UAAU,MAAMb,mBAAmBP;QACnCA;QACAC;;AAEJ;AAEA,kFAAkF,GAClF,OAAO,eAAeoB,gBAAgBrB,MAAc,EAAEC,UAAkB;IACtE,MAAMgB,qBAAqBjB,QAAQC,YAAY;QAAEqB,MAAM;QAAUC,aAAaC,KAAKC,GAAG;IAAG;AAC3F;AAEA;;;;;;;;;;CAUC,GACD,OAAO,eAAeC,wBAAwB1B,MAAc,EAAEC,UAAkB;IAC9E,MAAMG,YAAYvB,cAAcsB,GAAG,GAAGC,SAAS;IAC/C,MAAMuB,MAAMzB,SAASF,QAAQC;IAC7B,MAAMmB,WAAW,MAAMb,mBAAmBP;IAC1C,MAAMI,UAAUwB,cAAc,CAAC,OAAOC;QACpC,MAAMrB,WAAW,MAAMqB,YAAYpB,GAAG,CAACkB;QACvC,IAAI,CAACnB,SAASK,MAAM,EAAE;QACtB,MAAMK,QAAQV,SAASsB,IAAI;QAC3B,IAAIZ,MAAMI,IAAI,KAAK,WAAW;YAC5BO,YAAYV,GAAG,CAACQ,KAAK;gBACnBL,MAAM;gBACNC,aAAaC,KAAKC,GAAG;gBACrBL;gBACApB;gBACAC;YACF;YACA;QACF;QACA,IAAIiB,MAAMa,QAAQ,IAAKb,CAAAA,MAAMa,QAAQ,CAACC,KAAK,IAAId,MAAMa,QAAQ,CAACE,KAAK,AAAD,GAAI;YACpE,MAAMC,OAAO,aAAKhB;YAClB,OAAOgB,KAAKH,QAAQ;YACpBF,YAAYV,GAAG,CAACQ,KAAKO;QACvB;IACF;AACF;AAEA,kEAAkE,GAClE,OAAO,eAAeC,kBAAkBnC,MAAc,EAAEC,UAAkB;IACxE,MAAMG,YAAYvB,cAAcsB,GAAG,GAAGC,SAAS;IAC/C,MAAMgC,SAAS,MAAMhC,UAClBC,UAAU,CAACZ,QACX4C,KAAK,CAAC,UAAU,MAAMrC,QACtBqC,KAAK,CAAC,cAAc,MAAMpC,YAC1BqC,KAAK,CAAC,IACN7B,GAAG;IACN,MAAM8B,QAAQC,GAAG,CAACJ,OAAOK,IAAI,CAACC,GAAG,CAAC,CAACpC,MAAaA,IAAIqB,GAAG,CAACgB,MAAM;IAC9D,MAAMzC,SAASF,QAAQC,YAAY0C,MAAM,GAAGjC,KAAK,CAAC,IAAMkC;AAC1D;AAEA,eAAeC,eAAe7C,MAAc,EAAEC,UAAkB;IAC9D,IAAI,CAAC,yBAAyBe,IAAI,CAACf,aAAa,OAAO;IACvD,OAAO,AACL,CAAA,MAAMpB,cACHsB,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,SACXC,GAAG,CAACN,QACJK,UAAU,CAAC,aACXC,GAAG,CAACL,YACJQ,GAAG,EAAC,EACPI,MAAM;AACV;AAEA,iFAAiF,GACjF,eAAeiC,gBAAgB9C,MAAc;QAQ5B+C,MAAAA,WACJ/D,kBACIA;IATf,MAAMoB,YAAYvB,cAAcsB,GAAG,GAAGC,SAAS;IAC/C,MAAM2C,OAAO,MAAM3C,UAAUC,UAAU,CAAC,SAASC,GAAG,CAACN,QAAQS,GAAG;IAChE,MAAMuC,WAAW,MAAMjE,cAAciB,QAAQU,KAAK,CAAC,IAAM;IACzD,MAAMuC,WAAW9D,oBACf,MAAML,gBAAgBkE,4BAAAA,SAAUE,KAAK,EAAE,YAAY;QAAElD;IAAO,GAAGU,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;IAE/E,OAAO;QACLyC,MAAMvC,QAAOmC,QAAAA,YAAAA,KAAKtC,GAAG,CAAC,0BAATsC,YAA2BA,KAAKtC,GAAG,CAAC,mBAApCsC,OAA+C,IAAIK,KAAK,CAAC,GAAG,OAAO;QAChFC,OAAO,GAAErE,mBAAAA,gBAAgB+D,KAAKtC,GAAG,CAAC,YAAY;YAAET;QAAO,cAA9ChB,mBAAoD;QAC7DsE,WAAW,GAAEtE,oBAAAA,gBAAgB+D,KAAKtC,GAAG,CAAC,gBAAgB;YAAET;QAAO,cAAlDhB,oBAAwD;QACrEuE,SAASN,SAASO,cAAc,IAAI;IACtC;AACF;AAEA,2CAA2C,GAC3C,SAASC,aAAaC,GAAqB,EAAEC,IAAyB;QAC9CD,+BACGC;IADzB,MAAMC,SAAShD,QAAO8C,gCAAAA,IAAIG,OAAO,CAAC,sBAAsB,YAAlCH,gCAAsC;IAC5D,OAAO,AAACE,CAAAA,UAAUhD,QAAO+C,cAAAA,IAAI,CAAC,QAAQ,YAAbA,cAAiB,GAAE,EAAG7C,IAAI,GAAGsC,KAAK,CAAC,GAAG;AACjE;AAEA,sDAAsD,GACtD,eAAeU,oBACbC,KAAa;QAMSvD,eACIA,gBAKFA;IAVxB,IAAI,CAAC,0BAA0BQ,IAAI,CAAC+C,QAAQ,OAAO;IACnD,MAAMpC,MAAM9C,cAAcsB,GAAG,GAAGC,SAAS,GAAGC,UAAU,CAACZ,QAAQa,GAAG,CAACX,OAAOoE;IAC1E,MAAMvD,WAAW,MAAMmB,IAAIlB,GAAG;IAC9B,IAAI,CAACD,SAASK,MAAM,EAAE,OAAO;IAC7B,MAAMb,SAASY,QAAOJ,gBAAAA,SAASC,GAAG,CAAC,qBAAbD,gBAA0B;IAChD,MAAMP,aAAaW,QAAOJ,iBAAAA,SAASC,GAAG,CAAC,yBAAbD,iBAA8B;IACxD,IAAI,CAACR,UAAU,CAACC,YAAY,OAAO;IACnC,sEAAsE;IACtE,gCAAgC;IAChC,IAAI,CAAE,MAAM4C,eAAe7C,QAAQC,aAAc,OAAO;IACxD,MAAM+D,WAAWC,QAAOzD,iBAAAA,SAASC,GAAG,CAAC,2BAAbD,iBAAgC;IACxD,IAAIgB,KAAKC,GAAG,KAAKuC,WAAW,OAAQ;QAClC,MAAMrC,IAAIR,GAAG,CAAC;YAAE+C,cAAc1C,KAAKC,GAAG;QAAG,GAAG;YAAE0C,OAAO;QAAK,GAAGzD,KAAK,CAAC,IAAMkC;IAC3E;IACA,OAAO;QAAE5C;QAAQC;QAAY0B;IAAI;AACnC;AAEA;;;;;;CAMC,GACD,OAAO,MAAMyC,oBAAsC,OAAOV,KAAKW;QAIvCV;IAHtB,4EAA4E;IAC5E,yEAAyE;IACzE,MAAMA,OAAOD,IAAIY,MAAM,KAAK,QAAQjF,aAAaqE,OAAOpE,eAAeoE;IACvE,MAAMa,SAAS3D,QAAO+C,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB;IACxC,IACE,CAAED,CAAAA,IAAIY,MAAM,KAAK,UAAWZ,IAAIY,MAAM,KAAK,SAAUC,CAAAA,WAAW,UAAUA,WAAW,OAAM,CAAE,GAC7F;QACA,OAAOF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACAL,IAAIM,SAAS,CAAC,iBAAiB;IAC/B,IAAI;QACF,OAAQJ;YACN,KAAK;gBACH,OAAO,MAAMK,KAAKlB,KAAKC,MAAMU;YAC/B,KAAK;YACL,KAAK;YACL,KAAK;gBAAU;oBACb,MAAMQ,UAAU,MAAMf,oBAAoBL,aAAaC,KAAKC;oBAC5D,IAAI,CAACkB,SAAS,OAAOR,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;wBAAEC,OAAO;oBAA8B;oBACjF,IAAIH,WAAW,UAAU;wBACvB,MAAMM,QAAQlD,GAAG,CAACgB,MAAM;wBACxB,OAAO0B,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;4BAAEK,IAAI;wBAAK;oBACzC;oBACA,MAAMtE,WAAW,MAAMN,SAAS2E,QAAQ7E,MAAM,EAAE6E,QAAQ5E,UAAU,EAAEQ,GAAG;oBACvE,MAAMS,QAAQV,SAASK,MAAM,GAAIL,SAASsB,IAAI,KAAuC;oBACrF,IAAIyC,WAAW,QAAQ;wBACrB,OAAOF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;4BAC1BvD,OAAOhC,cAAc6F,qBAAqB,CAAC7D,OAAOM,KAAKC,GAAG;4BAC1DuD,UACErB,IAAI,CAAC,WAAW,KAAK,QAAQA,IAAI,CAAC,WAAW,KAAK,SAC9C,MAAMb,gBAAgB+B,QAAQ7E,MAAM,IACpC4C;wBACR;oBACF;oBACA,MAAMb,WAAW7C,cAAc+F,0BAA0B,CAAC/D,OAAOyC,IAAI,CAAC,WAAW,EAAEnC,KAAKC,GAAG;oBAC3F,IAAI,CAACM,UAAU;wBACb,OAAOsC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;4BAAEC,OAAO;wBAA+C;oBACtF;oBACA,MAAMxE,SAAS2E,QAAQ7E,MAAM,EAAE6E,QAAQ5E,UAAU,EAAEkB,GAAG,CAAC;wBAAEY;oBAAS,GAAG;wBAAEoC,OAAO;oBAAK;oBACnF,OAAOE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;wBAAEK,IAAI;oBAAK;gBACzC;YACA;gBACE,OAAO,MAAMI,YAAYxB,KAAKC,MAAMY,QAAQF;QAChD;IACF,EAAE,OAAOK,OAAO;QACdS,QAAQT,KAAK,CAAC,iBAAiBH,QAAQG;QACvC,OAAOL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA4C;IACnF;AACF,EAAC;AAED,eAAeE,KACblB,GAAqB,EACrBC,IAAyB,EACzBU,GAAoC;cAUhBV;QARGD;IAAvB,MAAM0B,UAAUxE,gBAAO8C,cAAAA,IAAI2B,MAAM,qBAAV3B,YAAY4B,aAAa,mBAAI,OAAO;IAC3D,MAAMC,OAAO,MAAM3G,iBAAiB,CAAC,iBAAiB,EAAEwG,SAAS,EAAE;QACjE9C,OAAO;QACPkD,UAAU,KAAK,KAAK;IACtB;IACA,IAAI,CAACD,KAAKE,OAAO,EAAE;QACjB,OAAOpB,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAoD;IAC3F;IACA,MAAMgB,OAAO9E,QAAO+C,aAAAA,IAAI,CAAC,OAAO,YAAZA,aAAgB,IAAIgC,OAAO,CAAC,OAAO;IACvD,IAAID,KAAKE,MAAM,KAAK,GAAG,OAAOvB,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAO;IAA4C;IACxG,MAAMtE,YAAYvB,cAAcsB,GAAG,GAAGC,SAAS;IAC/C,MAAMyF,aAAazF,UAAUC,UAAU,CAACb,UAAUc,GAAG,CAACX,OAAO+F;IAC7D,MAAM3B,QAAQrF,YAAY,IAAIoH,QAAQ,CAAC;IACvC,uEAAuE;IACvE,qEAAqE;IACrE,MAAMC,SAAS,MAAM3F,UAAUwB,cAAc,CAAC,OAAOC;YAGxBrB,eAGLA,gBACIA,gBAKNA,gBAEJmD;QAbhB,MAAMnD,WAAW,MAAMqB,YAAYpB,GAAG,CAACoF;QACvC,IAAI,CAACrF,SAASK,MAAM,EAAE,OAAO;QAC7B,MAAMmF,cAAc/B,QAAOzD,gBAAAA,SAASC,GAAG,CAAC,0BAAbD,gBAA+B;QAC1DqB,YAAYc,MAAM,CAACkD;QACnB,IAAI,CAAEG,CAAAA,cAAcxE,KAAKC,GAAG,EAAC,GAAI,OAAO;QACxC,MAAMzB,SAASY,QAAOJ,iBAAAA,SAASC,GAAG,CAAC,qBAAbD,iBAA0B;QAChD,MAAMP,aAAaW,QAAOJ,iBAAAA,SAASC,GAAG,CAAC,yBAAbD,iBAA8B;QACxDqB,YAAYV,GAAG,CAACf,UAAUC,UAAU,CAACZ,QAAQa,GAAG,CAACX,OAAOoE,SAAS;YAC/D/D;YACAC;YACAgG,aAAazE,KAAKC,GAAG;YACrByE,WAAWtF,QAAOJ,iBAAAA,SAASC,GAAG,CAAC,wBAAbD,iBAA6B;YAC/C0D,cAAc1C,KAAKC,GAAG;YACtB0E,OAAOvF,QAAO+C,cAAAA,IAAI,CAAC,QAAQ,YAAbA,cAAiB,IAAIP,KAAK,CAAC,GAAG,OAAO;QACrD;QACA,OAAO;YAAEpD;YAAQC;QAAW;IAC9B;IACA,IAAI,CAAC8F,QAAQ;QACX,OAAO1B,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA2D;IAClG;IACA,OAAOL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEV;QAAOiB,UAAU,MAAMlC,gBAAgBiD,OAAO/F,MAAM;IAAE;AACtF;AAEA,eAAekF,YACbxB,GAAqB,EACrBC,IAAyB,EACzBY,MAAc,EACdF,GAAoC;QAEdV,cAGIA;IAH1B,MAAM3D,SAASY,QAAO+C,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB;IACxC,MAAMyC,OAAO,MAAMhH,kBAAkBsE,KAAK1D;IAC1C,IAAI,WAAWoG,MAAM,OAAO/B,IAAIG,MAAM,CAAC4B,KAAK5B,MAAM,EAAEC,IAAI,CAAC;QAAEC,OAAO0B,KAAK1B,KAAK;IAAC;IAC7E,MAAMzE,aAAaW,QAAO+C,mBAAAA,IAAI,CAAC,aAAa,YAAlBA,mBAAsB;IAChD,IAAI,CAAE,MAAMd,eAAe7C,QAAQC,aAAc;QAC/C,OAAOoE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAmB;IAC1D;IACA,MAAMtE,YAAYvB,cAAcsB,GAAG,GAAGC,SAAS;IAC/C,OAAQmE;QACN,KAAK;YAAgB;gBACnB,IAAK,IAAI8B,UAAU,GAAGA,UAAU,GAAGA,UAAW;oBAC5C,MAAMX,OAAO9E,OAAOjC,UAAU,GAAG,UAAY2H,QAAQ,CAAC,GAAG;oBACzD,MAAM3E,MAAMvB,UAAUC,UAAU,CAACb,UAAUc,GAAG,CAACX,OAAO+F;oBACtD,MAAMM,cAAcxE,KAAKC,GAAG,KAAKvC,cAAcqH,0BAA0B;oBACzE,MAAMC,UAAU,MAAMpG,UAAUwB,cAAc,CAAC,OAAOC;4BAGtB4E;wBAF9B,MAAMA,WAAW,MAAM5E,YAAYpB,GAAG,CAACkB;wBACvC,gEAAgE;wBAChE,IAAI8E,SAAS5F,MAAM,IAAIoD,QAAOwC,gBAAAA,SAAShG,GAAG,CAAC,0BAAbgG,gBAA+B,KAAKjF,KAAKC,GAAG,IAAI,OAAO;wBACrFI,YAAYV,GAAG,CAACQ,KAAK;4BACnB3B;4BACAC;4BACA+F;4BACAE,WAAWE,KAAKM,KAAK,CAACC,GAAG;wBAC3B;wBACA,OAAO;oBACT;oBACA,IAAIH,SAAS,OAAOnC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;wBAAEiB;wBAAMM;oBAAY;gBAC/D;gBACA,OAAO3B,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAO;gBAAoC;YAC3E;QACA,KAAK;YAAQ;oBAQuCxD;gBAPlD,MAAMA,QAAQhC,cAAc0H,uBAAuB,CAACjD,IAAI,CAAC,QAAQ,EAAEnC,KAAKC,GAAG;gBAC3E,sEAAsE;gBACtE,IAAIP,MAAM2F,OAAO,IAAI,CAAC5H,sBAAsB;oBAC1C,MAAM6H,WAAW5F,MAAM2F,OAAO,CAACC,QAAQ,CAACC,MAAM,CAAC,CAACC,UAAYA,YAAY;oBACxE9F,MAAM2F,OAAO,CAACC,QAAQ,GAAGA,SAASlB,MAAM,GAAGkB,WAAW;wBAAC;wBAAS;qBAAO;gBACzE;gBACA,MAAM7F,qBAAqBjB,QAAQC,YAAYiB;gBAC/C,OAAOmD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEK,IAAI;oBAAMmC,QAAQ,GAAE/F,kBAAAA,MAAM+F,QAAQ,YAAd/F,kBAAkB;gBAAK;YAC3E;QACA,KAAK;YAAS;gBACZ,MAAMV,WAAW,MAAMN,SAASF,QAAQC,YAAYQ,GAAG;gBACvD,MAAMS,QAAQV,SAASK,MAAM,GAAIL,SAASsB,IAAI,KAAuC;gBACrF,MAAMoF,WAAW,MAAM9G,UACpBC,UAAU,CAACZ,QACX4C,KAAK,CAAC,UAAU,MAAMrC,QACtBqC,KAAK,CAAC,cAAc,MAAMpC,YAC1BqC,KAAK,CAAC,IACN7B,GAAG;gBACN,OAAO4D,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAC1BvD;oBACA,oEAAoE;oBACpEiG,WAAWD,SAASzE,IAAI,CAAC2E,IAAI,CAC3B,CAAC9G;4BAAiCA;+BAApBkB,KAAKC,GAAG,KAAKwC,QAAO3D,WAAAA,IAAIG,GAAG,CAAC,2BAARH,WAA2B,KAAK;;gBAEtE;YACF;QACA,KAAK;YAAY;gBACf,MAAM4G,WAAW,MAAM9G,UACpBC,UAAU,CAACZ,QACX4C,KAAK,CAAC,UAAU,MAAMrC,QACtBqC,KAAK,CAAC,cAAc,MAAMpC,YAC1BqC,KAAK,CAAC,IACN7B,GAAG;gBACN,OAAO4D,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAC1ByC,UAAUA,SAASzE,IAAI,CAACC,GAAG,CAAC,CAACpC;4BAEbA,UACMA,WACCA;+BAJoB;4BACzC+G,IAAI/G,IAAI+G,EAAE,CAACjE,KAAK,CAAC,GAAG;4BACpB+C,OAAOvF,QAAON,WAAAA,IAAIG,GAAG,CAAC,oBAARH,WAAoB;4BAClC2F,aAAahC,QAAO3D,YAAAA,IAAIG,GAAG,CAAC,0BAARH,YAA0B;4BAC9C4D,cAAcD,QAAO3D,YAAAA,IAAIG,GAAG,CAAC,2BAARH,YAA2B;wBAClD;;gBACF;YACF;QACA,KAAK;YAAU;oBACSqD;gBAAtB,MAAM2D,SAAS1G,QAAO+C,kBAAAA,IAAI,CAAC,YAAY,YAAjBA,kBAAqB;gBAC3C,MAAMuD,WAAW,MAAM9G,UACpBC,UAAU,CAACZ,QACX4C,KAAK,CAAC,UAAU,MAAMrC,QACtBqC,KAAK,CAAC,cAAc,MAAMpC,YAC1BqC,KAAK,CAAC,IACN7B,GAAG;gBACN,MAAM8G,SAASL,SAASzE,IAAI,CAACsE,MAAM,CACjC,CAACzG,MAAagH,WAAW,OAAQA,OAAO1B,MAAM,KAAK,MAAMtF,IAAI+G,EAAE,CAACG,UAAU,CAACF;gBAE7E,MAAM/E,QAAQC,GAAG,CAAC+E,OAAO7E,GAAG,CAAC,CAACpC,MAAaA,IAAIqB,GAAG,CAACgB,MAAM;gBACzD,OAAO0B,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEgD,SAASF,OAAO3B,MAAM;gBAAC;YACvD;QACA;YACE,OAAOvB,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAiB;IAC1D;AACF"}
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-display.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { createHash, randomBytes, randomInt } from 'crypto'\nimport { consumeRateLimit, firebaseAdmin, getPluginConfig, getOrgForHost } from '@aglyn/tenant-data-admin'\nimport type { PluginApiHandler, PluginApiRequest } from '@aglyn/aglyn/server'\nimport { resolveMediaSrc } from '@aglyn/aglyn/app-utils/media-ref'\nimport { pluginSmsAvailable } from '@aglyn/aglyn/plugin-manager/plugin-sms-messaging'\nimport * as CommerceModel from '../model'\nimport { posRegisterSettings } from '../plugin-config'\nimport { authorizePosStaff, posQueryBody, posRequestBody } from './pos-auth'\nimport { POS_CURRENCY } from './pos-stripe'\n\n/*==========================================\n * THE CUSTOMER DISPLAY (AGL-3608).\n *\n * A second screen — a tablet on a stand facing the customer — that shows the\n * basket, takes the tip and the receipt choice, and hands both back to the\n * cashier. It must work with NO staff sign-in on the customer's device, so it\n * holds nothing but a display token.\n *\n * ## Pairing\n *\n * The register asks for a six-digit code (`pairing-code`), good for ten\n * minutes and usable once. The display sends it (`pair`) and receives a\n * random 256-bit token. Only hashes are stored: `posDisplayPairings/{sha256}`\n * for the code and `posDisplayTokens/{sha256}` for the token, each naming the\n * one site and register it opens. Revoking a display, or removing its\n * register, kills the token. A six-digit space is small, so `pair` is rate\n * limited per address and a code dies at its first use.\n *\n * ## Why polling through this route, not a Firestore listener\n *\n * A Firestore listener needs a Firebase identity the rules can test, which on\n * the customer's device means minting a custom auth session — a credential\n * that would sit on an unattended tablet with the console's own SDK. Polling\n * this route once a second with the display token is the simplest thing that\n * is secure: the token opens exactly one register's display state and\n * nothing else, the state lives in a server-only collection\n * (`posDisplayStates`, denied to every client by the rules) so not even a\n * signed-in site member can read a customer's typed address out of it, and a\n * revoked token stops working on the next poll.\n *=========================================*/\n\nconst PAIRINGS = 'posDisplayPairings'\nconst TOKENS = 'posDisplayTokens'\nconst STATES = 'posDisplayStates'\n\nexport function sha256(value: string): string {\n  return createHash('sha256').update(value).digest('hex')\n}\n\n/** The one state document a register's display reads. */\nexport function posDisplayStateId(hostId: string, registerId: string): string {\n  return `${hostId}__${registerId}`\n}\n\nfunction stateRef(hostId: string, registerId: string) {\n  return firebaseAdmin\n    .app()\n    .firestore()\n    .collection(STATES)\n    .doc(posDisplayStateId(hostId, registerId))\n}\n\n/**\n * The store's currency (`hosts/{hostId}/settings/store.currency`, lower\n * case), which every figure on the customer's screen is formatted in. A\n * store that never chose one is in the currency the register charges.\n */\nexport async function posDisplayCurrency(hostId: string): Promise<string> {\n  const snapshot = await firebaseAdmin\n    .app()\n    .firestore()\n    .collection('hosts')\n    .doc(hostId)\n    .collection('settings')\n    .doc('store')\n    .get()\n    .catch(() => null)\n  const chosen = String(snapshot?.exists ? (snapshot.get('currency') ?? '') : '')\n    .trim()\n    .toLowerCase()\n  return /^[a-z]{3}$/.test(chosen) ? chosen : POS_CURRENCY\n}\n\n/**\n * Writes the display state whole, so nothing from the last prompt lingers —\n * a customer's typed address included. The currency is the store's, stamped\n * here so the screen never formats a figure in one the register made up.\n */\nexport async function writePosDisplayState(\n  hostId: string,\n  registerId: string,\n  state: CommerceModel.PosDisplayState,\n): Promise<void> {\n  await stateRef(hostId, registerId).set({\n    ...state,\n    currency: await posDisplayCurrency(hostId),\n    hostId,\n    registerId,\n  })\n}\n\n/** The register's display returns to the thank-you screen with no customer data. */\nexport async function resetPosDisplay(hostId: string, registerId: string): Promise<void> {\n  await writePosDisplayState(hostId, registerId, { mode: 'thanks', updatedAtMs: Date.now() })\n}\n\n/**\n * Ends the customer's turn once the register has acted on their receipt\n * choice (AGL-3608): a display still on the receipt prompt says thank you,\n * and an answer holding a typed email address or phone number is dropped\n * from the state either way, so no contact detail outlives the sale on the\n * server doc a public screen reads.\n *\n * Conditional, in a transaction, because the receipt can be sent after the\n * cashier has started the next sale: a display already showing the next\n * customer's basket is left alone.\n */\nexport async function finishPosDisplayReceipt(hostId: string, registerId: string): Promise<void> {\n  const firestore = firebaseAdmin.app().firestore()\n  const ref = stateRef(hostId, registerId)\n  const currency = await posDisplayCurrency(hostId)\n  await firestore.runTransaction(async (transaction: any) => {\n    const snapshot = await transaction.get(ref)\n    if (!snapshot.exists) return\n    const state = snapshot.data() as CommerceModel.PosDisplayState\n    if (state.mode === 'receipt') {\n      transaction.set(ref, {\n        mode: 'thanks',\n        updatedAtMs: Date.now(),\n        currency,\n        hostId,\n        registerId,\n      })\n      return\n    }\n    if (state.response && (state.response.email || state.response.phone)) {\n      const rest = { ...state }\n      delete rest.response\n      transaction.set(ref, rest)\n    }\n  })\n}\n\n/** Signs every display of a register out, and forgets its state. */\nexport async function revokePosDisplays(hostId: string, registerId: string): Promise<void> {\n  const firestore = firebaseAdmin.app().firestore()\n  const tokens = await firestore\n    .collection(TOKENS)\n    .where('hostId', '==', hostId)\n    .where('registerId', '==', registerId)\n    .limit(50)\n    .get()\n  await Promise.all(tokens.docs.map((doc: any) => doc.ref.delete()))\n  await stateRef(hostId, registerId).delete().catch(() => undefined)\n}\n\nasync function registerExists(hostId: string, registerId: string): Promise<boolean> {\n  if (!/^[A-Za-z0-9_-]{1,128}$/.test(registerId)) return false\n  return (\n    await firebaseAdmin\n      .app()\n      .firestore()\n      .collection('hosts')\n      .doc(hostId)\n      .collection('registers')\n      .doc(registerId)\n      .get()\n  ).exists\n}\n\n/** The store's name, logo and welcome line, for the idle and thank-you screens. */\nexport async function displayBranding(hostId: string) {\n  const firestore = firebaseAdmin.app().firestore()\n  const host = await firestore.collection('hosts').doc(hostId).get()\n  const ownerOrg = await getOrgForHost(hostId).catch(() => null)\n  const settings = posRegisterSettings(\n    await getPluginConfig(ownerOrg?.orgId, 'commerce', { hostId }).catch(() => ({})),\n  )\n  return {\n    name: String(host.get('displayName') ?? host.get('name') ?? '').slice(0, 80) || 'Welcome',\n    logoUrl: resolveMediaSrc(host.get('logoUrl'), { hostId }) ?? null,\n    logoDarkUrl: resolveMediaSrc(host.get('logoDarkUrl'), { hostId }) ?? null,\n    message: settings.displayMessage || 'Welcome',\n  }\n}\n\n/** The display token on a request, or ''. */\nexport function displayToken(req: PluginApiRequest, body: Record<string, any>): string {\n  const header = String(req.headers['x-pos-display-token'] ?? '')\n  return (header || String(body['token'] ?? '')).trim().slice(0, 128)\n}\n\n/** What a paired device's token opens. */\nexport interface PosDeviceToken {\n  hostId: string\n  registerId: string\n  ref: any\n  /**\n   * A customer display, or a self-service kiosk (AGL-3623). A token minted\n   * before kiosks existed has no mode and is a display.\n   */\n  mode: CommerceModel.PosDeviceMode\n  /** The staff member whose pairing code opened this device. */\n  createdBy: string\n  /** The token document, for the caller that keeps device settings on it. */\n  data: Record<string, any>\n}\n\n/** The register a live display token opens, or null. */\nexport async function resolveDisplayToken(token: string): Promise<PosDeviceToken | null> {\n  if (!/^[A-Za-z0-9_-]{40,128}$/.test(token)) return null\n  const ref = firebaseAdmin.app().firestore().collection(TOKENS).doc(sha256(token))\n  const snapshot = await ref.get()\n  if (!snapshot.exists) return null\n  const hostId = String(snapshot.get('hostId') ?? '')\n  const registerId = String(snapshot.get('registerId') ?? '')\n  if (!hostId || !registerId) return null\n  // A display whose register was removed is dead, even if its token row\n  // somehow outlived the removal.\n  if (!(await registerExists(hostId, registerId))) return null\n  const lastSeen = Number(snapshot.get('lastSeenAtMs') ?? 0)\n  if (Date.now() - lastSeen > 60_000) {\n    await ref.set({ lastSeenAtMs: Date.now() }, { merge: true }).catch(() => undefined)\n  }\n  return {\n    hostId,\n    registerId,\n    ref,\n    mode: snapshot.get('mode') === 'kiosk' ? 'kiosk' : 'display',\n    createdBy: String(snapshot.get('createdBy') ?? ''),\n    data: (snapshot.data() ?? {}) as Record<string, any>,\n  }\n}\n\n/** A token row's mode, `display` for one that predates kiosks. */\nfunction tokenMode(doc: any): CommerceModel.PosDeviceMode {\n  return doc.get('mode') === 'kiosk' ? 'kiosk' : 'display'\n}\n\n/**\n * `POST /api/commerce/pos-display`.\n *\n * Staff (Firebase token + the register's gate): `pairing-code`, `push`,\n * `state`, `displays`, `revoke`.\n * Display (display token only): `pair`, `poll`, `respond`, `forget`.\n */\nexport const posDisplayHandler: PluginApiHandler = async (req, res) => {\n  // The two polls are GETs: a read is not a console write, so a display and a\n  // register asking once a second do not spend the console's write budget.\n  const body = req.method === 'GET' ? posQueryBody(req) : posRequestBody(req)\n  const action = String(body['action'] ?? '')\n  if (\n    !(req.method === 'POST' || (req.method === 'GET' && (action === 'poll' || action === 'state')))\n  ) {\n    return res.status(405).json({ error: 'Method not allowed' })\n  }\n  res.setHeader('Cache-Control', 'no-store')\n  try {\n    switch (action) {\n      case 'pair':\n        return await pair(req, body, res)\n      case 'poll':\n      case 'respond':\n      case 'forget': {\n        const display = await resolveDisplayToken(displayToken(req, body))\n        if (!display) return res.status(401).json({ error: 'This display is not paired.' })\n        if (action === 'forget') {\n          // A kiosk leaves kiosk mode behind a staff PIN (AGL-3623), through\n          // `commerce/pos-kiosk`, never by a customer's tap here.\n          if (display.mode === 'kiosk') {\n            return res.status(403).json({ error: 'Ask a staff member to unlock this kiosk.' })\n          }\n          await display.ref.delete()\n          return res.status(200).json({ ok: true })\n        }\n        // A kiosk is not the register's customer display (AGL-3623): the\n        // basket the cashier is ringing up belongs to another customer.\n        if (display.mode === 'kiosk') {\n          return res.status(403).json({ error: 'This device is a self-service kiosk.' })\n        }\n        const snapshot = await stateRef(display.hostId, display.registerId).get()\n        const state = snapshot.exists ? (snapshot.data() as CommerceModel.PosDisplayState) : null\n        if (action === 'poll') {\n          return res.status(200).json({\n            state: CommerceModel.posDisplayPublicState(state, Date.now()),\n            branding:\n              body['branding'] === true || body['branding'] === 'true'\n                ? await displayBranding(display.hostId)\n                : undefined,\n          })\n        }\n        const response = CommerceModel.sanitizePosDisplayResponse(state, body['response'], Date.now())\n        if (!response) {\n          return res.status(409).json({ error: 'That screen has moved on. Check the display.' })\n        }\n        await stateRef(display.hostId, display.registerId).set({ response }, { merge: true })\n        return res.status(200).json({ ok: true })\n      }\n      default:\n        return await staffAction(req, body, action, res)\n    }\n  } catch (error) {\n    console.error('[pos-display]', action, error)\n    return res.status(500).json({ error: 'The customer display could not be updated' })\n  }\n}\n\nasync function pair(\n  req: PluginApiRequest,\n  body: Record<string, any>,\n  res: Parameters<PluginApiHandler>[1],\n) {\n  const address = String(req.socket?.remoteAddress ?? '') || 'no-address'\n  const rate = await consumeRateLimit(`pos-display-pair:${address}`, {\n    limit: 10,\n    windowMs: 10 * 60 * 1000,\n  })\n  if (!rate.allowed) {\n    return res.status(429).json({ error: 'Too many tries. Wait a few minutes and try again.' })\n  }\n  const code = String(body['code'] ?? '').replace(/\\D/g, '')\n  // The device asks for the kind of screen it is; the code decides. A kiosk\n  // code opens a kiosk, and a display code never does (AGL-3623).\n  const wanted: CommerceModel.PosDeviceMode = body['mode'] === 'kiosk' ? 'kiosk' : 'display'\n  if (code.length !== 6) return res.status(400).json({ error: 'Enter the 6-digit code from the register.' })\n  const firestore = firebaseAdmin.app().firestore()\n  const pairingRef = firestore.collection(PAIRINGS).doc(sha256(code))\n  const token = randomBytes(32).toString('base64url')\n  // Spent in the same transaction that mints the token: a code opens one\n  // display, once, and a second display racing the first gets nothing.\n  const paired = await firestore.runTransaction(async (transaction: any) => {\n    const snapshot = await transaction.get(pairingRef)\n    if (!snapshot.exists) return null\n    const expiresAtMs = Number(snapshot.get('expiresAtMs') ?? 0)\n    transaction.delete(pairingRef)\n    if (!(expiresAtMs > Date.now())) return null\n    const hostId = String(snapshot.get('hostId') ?? '')\n    const registerId = String(snapshot.get('registerId') ?? '')\n    const mode: CommerceModel.PosDeviceMode = snapshot.get('mode') === 'kiosk' ? 'kiosk' : 'display'\n    // The wrong kind of screen leaves the code spent: the register shows a\n    // new one for the device it meant.\n    if (mode !== wanted) return { mismatch: mode }\n    transaction.set(firestore.collection(TOKENS).doc(sha256(token)), {\n      hostId,\n      registerId,\n      mode,\n      createdAtMs: Date.now(),\n      createdBy: String(snapshot.get('createdBy') ?? ''),\n      lastSeenAtMs: Date.now(),\n      label:\n        String(body['label'] ?? '').slice(0, 60) ||\n        (mode === 'kiosk' ? 'Self-service kiosk' : 'Customer display'),\n    })\n    return { hostId, registerId, mode }\n  })\n  if (!paired) {\n    return res.status(404).json({ error: 'That code is not valid. Show a new code on the register.' })\n  }\n  if ('mismatch' in paired) {\n    return res.status(409).json({\n      error:\n        paired.mismatch === 'kiosk'\n          ? 'That code is for a self-service kiosk. Open the kiosk address, or show a display code on the register.'\n          : 'That code is for a customer display. Choose Self-service kiosk on the register and show a new code.',\n    })\n  }\n  return res\n    .status(200)\n    .json({ token, mode: paired.mode, branding: await displayBranding(paired.hostId) })\n}\n\nasync function staffAction(\n  req: PluginApiRequest,\n  body: Record<string, any>,\n  action: string,\n  res: Parameters<PluginApiHandler>[1],\n) {\n  const hostId = String(body['hostId'] ?? '')\n  const gate = await authorizePosStaff(req, hostId)\n  if ('error' in gate) return res.status(gate.status).json({ error: gate.error })\n  const registerId = String(body['registerId'] ?? '')\n  if (!(await registerExists(hostId, registerId))) {\n    return res.status(404).json({ error: 'Unknown register' })\n  }\n  const firestore = firebaseAdmin.app().firestore()\n  switch (action) {\n    case 'pairing-code': {\n      for (let attempt = 0; attempt < 8; attempt++) {\n        const code = String(randomInt(0, 1_000_000)).padStart(6, '0')\n        const ref = firestore.collection(PAIRINGS).doc(sha256(code))\n        const expiresAtMs = Date.now() + CommerceModel.POS_DISPLAY_PAIRING_TTL_MS\n        const claimed = await firestore.runTransaction(async (transaction: any) => {\n          const existing = await transaction.get(ref)\n          // A live code another register is showing is never overwritten.\n          if (existing.exists && Number(existing.get('expiresAtMs') ?? 0) > Date.now()) return false\n          transaction.set(ref, {\n            hostId,\n            registerId,\n            expiresAtMs,\n            createdBy: gate.staff.uid,\n            // A kiosk code (AGL-3623) opens a self-service kiosk instead.\n            mode: body['mode'] === 'kiosk' ? 'kiosk' : 'display',\n          })\n          return true\n        })\n        if (claimed) return res.status(200).json({ code, expiresAtMs })\n      }\n      return res.status(503).json({ error: 'Could not make a code. Try again.' })\n    }\n    case 'push': {\n      const state = CommerceModel.sanitizePosDisplayState(body['state'], Date.now())\n      // \"Text\" is never offered on a screen when the store cannot send one.\n      if (state.receipt && !pluginSmsAvailable()) {\n        const channels = state.receipt.channels.filter((channel) => channel !== 'sms')\n        state.receipt.channels = channels.length ? channels : ['print', 'none']\n      }\n      await writePosDisplayState(hostId, registerId, state)\n      return res.status(200).json({ ok: true, promptId: state.promptId ?? null })\n    }\n    case 'state': {\n      const snapshot = await stateRef(hostId, registerId).get()\n      const state = snapshot.exists ? (snapshot.data() as CommerceModel.PosDisplayState) : null\n      const displays = await firestore\n        .collection(TOKENS)\n        .where('hostId', '==', hostId)\n        .where('registerId', '==', registerId)\n        .limit(10)\n        .get()\n      return res.status(200).json({\n        state,\n        // A display that polled within the last two minutes is \"connected\".\n        // A kiosk is not the register's display (AGL-3623).\n        connected: displays.docs.some(\n          (doc: any) =>\n            tokenMode(doc) === 'display' && Date.now() - Number(doc.get('lastSeenAtMs') ?? 0) < 120_000,\n        ),\n      })\n    }\n    case 'displays': {\n      const displays = await firestore\n        .collection(TOKENS)\n        .where('hostId', '==', hostId)\n        .where('registerId', '==', registerId)\n        .limit(10)\n        .get()\n      return res.status(200).json({\n        displays: displays.docs.map((doc: any) => ({\n          id: doc.id.slice(0, 16),\n          label: String(doc.get('label') ?? 'Customer display'),\n          mode: tokenMode(doc),\n          createdAtMs: Number(doc.get('createdAtMs') ?? 0),\n          lastSeenAtMs: Number(doc.get('lastSeenAtMs') ?? 0),\n        })),\n      })\n    }\n    case 'revoke': {\n      const prefix = String(body['displayId'] ?? '')\n      const displays = await firestore\n        .collection(TOKENS)\n        .where('hostId', '==', hostId)\n        .where('registerId', '==', registerId)\n        .limit(10)\n        .get()\n      const doomed = displays.docs.filter(\n        (doc: any) => prefix === '*' || (prefix.length === 16 && doc.id.startsWith(prefix)),\n      )\n      await Promise.all(doomed.map((doc: any) => doc.ref.delete()))\n      return res.status(200).json({ revoked: doomed.length })\n    }\n    default:\n      return res.status(400).json({ error: 'Unknown action' })\n  }\n}\n"],"names":["createHash","randomBytes","randomInt","consumeRateLimit","firebaseAdmin","getPluginConfig","getOrgForHost","resolveMediaSrc","pluginSmsAvailable","CommerceModel","posRegisterSettings","authorizePosStaff","posQueryBody","posRequestBody","POS_CURRENCY","PAIRINGS","TOKENS","STATES","sha256","value","update","digest","posDisplayStateId","hostId","registerId","stateRef","app","firestore","collection","doc","posDisplayCurrency","snapshot","get","catch","chosen","String","exists","trim","toLowerCase","test","writePosDisplayState","state","set","currency","resetPosDisplay","mode","updatedAtMs","Date","now","finishPosDisplayReceipt","ref","runTransaction","transaction","data","response","email","phone","rest","revokePosDisplays","tokens","where","limit","Promise","all","docs","map","delete","undefined","registerExists","displayBranding","host","ownerOrg","settings","orgId","name","slice","logoUrl","logoDarkUrl","message","displayMessage","displayToken","req","body","header","headers","resolveDisplayToken","token","lastSeen","Number","lastSeenAtMs","merge","createdBy","tokenMode","posDisplayHandler","res","method","action","status","json","error","setHeader","pair","display","ok","posDisplayPublicState","branding","sanitizePosDisplayResponse","staffAction","console","address","socket","remoteAddress","rate","windowMs","allowed","code","replace","wanted","length","pairingRef","toString","paired","expiresAtMs","mismatch","createdAtMs","label","gate","attempt","padStart","POS_DISPLAY_PAIRING_TTL_MS","claimed","existing","staff","uid","sanitizePosDisplayState","receipt","channels","filter","channel","promptId","displays","connected","some","id","prefix","doomed","startsWith","revoked"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,UAAU,EAAEC,WAAW,EAAEC,SAAS,QAAQ,SAAQ;AAC3D,SAASC,gBAAgB,EAAEC,aAAa,EAAEC,eAAe,EAAEC,aAAa,QAAQ,2BAA0B;AAE1G,SAASC,eAAe,QAAQ,mCAAkC;AAClE,SAASC,kBAAkB,QAAQ,mDAAkD;AACrF,YAAYC,mBAAmB,oBAAU;AACzC,SAASC,mBAAmB,QAAQ,sBAAkB;AACtD,SAASC,iBAAiB,EAAEC,YAAY,EAAEC,cAAc,QAAQ,gBAAY;AAC5E,SAASC,YAAY,QAAQ,kBAAc;AAE3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2CA6B2C,GAE3C,MAAMC,WAAW;AACjB,MAAMC,SAAS;AACf,MAAMC,SAAS;AAEf,OAAO,SAASC,OAAOC,KAAa;IAClC,OAAOnB,WAAW,UAAUoB,MAAM,CAACD,OAAOE,MAAM,CAAC;AACnD;AAEA,uDAAuD,GACvD,OAAO,SAASC,kBAAkBC,MAAc,EAAEC,UAAkB;IAClE,OAAO,GAAGD,OAAO,EAAE,EAAEC,YAAY;AACnC;AAEA,SAASC,SAASF,MAAc,EAAEC,UAAkB;IAClD,OAAOpB,cACJsB,GAAG,GACHC,SAAS,GACTC,UAAU,CAACX,QACXY,GAAG,CAACP,kBAAkBC,QAAQC;AACnC;AAEA;;;;CAIC,GACD,OAAO,eAAeM,mBAAmBP,MAAc;QAUXQ;IAT1C,MAAMA,WAAW,MAAM3B,cACpBsB,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,SACXC,GAAG,CAACN,QACJK,UAAU,CAAC,YACXC,GAAG,CAAC,SACJG,GAAG,GACHC,KAAK,CAAC,IAAM;IACf,MAAMC,SAASC,OAAOJ,CAAAA,4BAAAA,SAAUK,MAAM,KAAIL,gBAAAA,SAASC,GAAG,CAAC,uBAAbD,gBAA4B,KAAM,IACzEM,IAAI,GACJC,WAAW;IACd,OAAO,aAAaC,IAAI,CAACL,UAAUA,SAASpB;AAC9C;AAEA;;;;CAIC,GACD,OAAO,eAAe0B,qBACpBjB,MAAc,EACdC,UAAkB,EAClBiB,KAAoC;IAEpC,MAAMhB,SAASF,QAAQC,YAAYkB,GAAG,CAAC,aAClCD;QACHE,UAAU,MAAMb,mBAAmBP;QACnCA;QACAC;;AAEJ;AAEA,kFAAkF,GAClF,OAAO,eAAeoB,gBAAgBrB,MAAc,EAAEC,UAAkB;IACtE,MAAMgB,qBAAqBjB,QAAQC,YAAY;QAAEqB,MAAM;QAAUC,aAAaC,KAAKC,GAAG;IAAG;AAC3F;AAEA;;;;;;;;;;CAUC,GACD,OAAO,eAAeC,wBAAwB1B,MAAc,EAAEC,UAAkB;IAC9E,MAAMG,YAAYvB,cAAcsB,GAAG,GAAGC,SAAS;IAC/C,MAAMuB,MAAMzB,SAASF,QAAQC;IAC7B,MAAMmB,WAAW,MAAMb,mBAAmBP;IAC1C,MAAMI,UAAUwB,cAAc,CAAC,OAAOC;QACpC,MAAMrB,WAAW,MAAMqB,YAAYpB,GAAG,CAACkB;QACvC,IAAI,CAACnB,SAASK,MAAM,EAAE;QACtB,MAAMK,QAAQV,SAASsB,IAAI;QAC3B,IAAIZ,MAAMI,IAAI,KAAK,WAAW;YAC5BO,YAAYV,GAAG,CAACQ,KAAK;gBACnBL,MAAM;gBACNC,aAAaC,KAAKC,GAAG;gBACrBL;gBACApB;gBACAC;YACF;YACA;QACF;QACA,IAAIiB,MAAMa,QAAQ,IAAKb,CAAAA,MAAMa,QAAQ,CAACC,KAAK,IAAId,MAAMa,QAAQ,CAACE,KAAK,AAAD,GAAI;YACpE,MAAMC,OAAO,aAAKhB;YAClB,OAAOgB,KAAKH,QAAQ;YACpBF,YAAYV,GAAG,CAACQ,KAAKO;QACvB;IACF;AACF;AAEA,kEAAkE,GAClE,OAAO,eAAeC,kBAAkBnC,MAAc,EAAEC,UAAkB;IACxE,MAAMG,YAAYvB,cAAcsB,GAAG,GAAGC,SAAS;IAC/C,MAAMgC,SAAS,MAAMhC,UAClBC,UAAU,CAACZ,QACX4C,KAAK,CAAC,UAAU,MAAMrC,QACtBqC,KAAK,CAAC,cAAc,MAAMpC,YAC1BqC,KAAK,CAAC,IACN7B,GAAG;IACN,MAAM8B,QAAQC,GAAG,CAACJ,OAAOK,IAAI,CAACC,GAAG,CAAC,CAACpC,MAAaA,IAAIqB,GAAG,CAACgB,MAAM;IAC9D,MAAMzC,SAASF,QAAQC,YAAY0C,MAAM,GAAGjC,KAAK,CAAC,IAAMkC;AAC1D;AAEA,eAAeC,eAAe7C,MAAc,EAAEC,UAAkB;IAC9D,IAAI,CAAC,yBAAyBe,IAAI,CAACf,aAAa,OAAO;IACvD,OAAO,AACL,CAAA,MAAMpB,cACHsB,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,SACXC,GAAG,CAACN,QACJK,UAAU,CAAC,aACXC,GAAG,CAACL,YACJQ,GAAG,EAAC,EACPI,MAAM;AACV;AAEA,iFAAiF,GACjF,OAAO,eAAeiC,gBAAgB9C,MAAc;QAQnC+C,MAAAA,WACJ/D,kBACIA;IATf,MAAMoB,YAAYvB,cAAcsB,GAAG,GAAGC,SAAS;IAC/C,MAAM2C,OAAO,MAAM3C,UAAUC,UAAU,CAAC,SAASC,GAAG,CAACN,QAAQS,GAAG;IAChE,MAAMuC,WAAW,MAAMjE,cAAciB,QAAQU,KAAK,CAAC,IAAM;IACzD,MAAMuC,WAAW9D,oBACf,MAAML,gBAAgBkE,4BAAAA,SAAUE,KAAK,EAAE,YAAY;QAAElD;IAAO,GAAGU,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;IAE/E,OAAO;QACLyC,MAAMvC,QAAOmC,QAAAA,YAAAA,KAAKtC,GAAG,CAAC,0BAATsC,YAA2BA,KAAKtC,GAAG,CAAC,mBAApCsC,OAA+C,IAAIK,KAAK,CAAC,GAAG,OAAO;QAChFC,OAAO,GAAErE,mBAAAA,gBAAgB+D,KAAKtC,GAAG,CAAC,YAAY;YAAET;QAAO,cAA9ChB,mBAAoD;QAC7DsE,WAAW,GAAEtE,oBAAAA,gBAAgB+D,KAAKtC,GAAG,CAAC,gBAAgB;YAAET;QAAO,cAAlDhB,oBAAwD;QACrEuE,SAASN,SAASO,cAAc,IAAI;IACtC;AACF;AAEA,2CAA2C,GAC3C,OAAO,SAASC,aAAaC,GAAqB,EAAEC,IAAyB;QACrDD,+BACGC;IADzB,MAAMC,SAAShD,QAAO8C,gCAAAA,IAAIG,OAAO,CAAC,sBAAsB,YAAlCH,gCAAsC;IAC5D,OAAO,AAACE,CAAAA,UAAUhD,QAAO+C,cAAAA,IAAI,CAAC,QAAQ,YAAbA,cAAiB,GAAE,EAAG7C,IAAI,GAAGsC,KAAK,CAAC,GAAG;AACjE;AAkBA,sDAAsD,GACtD,OAAO,eAAeU,oBAAoBC,KAAa;QAK/BvD,eACIA,gBAKFA,gBASJA,gBACXA;IApBT,IAAI,CAAC,0BAA0BQ,IAAI,CAAC+C,QAAQ,OAAO;IACnD,MAAMpC,MAAM9C,cAAcsB,GAAG,GAAGC,SAAS,GAAGC,UAAU,CAACZ,QAAQa,GAAG,CAACX,OAAOoE;IAC1E,MAAMvD,WAAW,MAAMmB,IAAIlB,GAAG;IAC9B,IAAI,CAACD,SAASK,MAAM,EAAE,OAAO;IAC7B,MAAMb,SAASY,QAAOJ,gBAAAA,SAASC,GAAG,CAAC,qBAAbD,gBAA0B;IAChD,MAAMP,aAAaW,QAAOJ,iBAAAA,SAASC,GAAG,CAAC,yBAAbD,iBAA8B;IACxD,IAAI,CAACR,UAAU,CAACC,YAAY,OAAO;IACnC,sEAAsE;IACtE,gCAAgC;IAChC,IAAI,CAAE,MAAM4C,eAAe7C,QAAQC,aAAc,OAAO;IACxD,MAAM+D,WAAWC,QAAOzD,iBAAAA,SAASC,GAAG,CAAC,2BAAbD,iBAAgC;IACxD,IAAIgB,KAAKC,GAAG,KAAKuC,WAAW,OAAQ;QAClC,MAAMrC,IAAIR,GAAG,CAAC;YAAE+C,cAAc1C,KAAKC,GAAG;QAAG,GAAG;YAAE0C,OAAO;QAAK,GAAGzD,KAAK,CAAC,IAAMkC;IAC3E;IACA,OAAO;QACL5C;QACAC;QACA0B;QACAL,MAAMd,SAASC,GAAG,CAAC,YAAY,UAAU,UAAU;QACnD2D,WAAWxD,QAAOJ,iBAAAA,SAASC,GAAG,CAAC,wBAAbD,iBAA6B;QAC/CsB,IAAI,GAAGtB,iBAAAA,SAASsB,IAAI,cAAbtB,iBAAmB,CAAC;IAC7B;AACF;AAEA,gEAAgE,GAChE,SAAS6D,UAAU/D,GAAQ;IACzB,OAAOA,IAAIG,GAAG,CAAC,YAAY,UAAU,UAAU;AACjD;AAEA;;;;;;CAMC,GACD,OAAO,MAAM6D,oBAAsC,OAAOZ,KAAKa;QAIvCZ;IAHtB,4EAA4E;IAC5E,yEAAyE;IACzE,MAAMA,OAAOD,IAAIc,MAAM,KAAK,QAAQnF,aAAaqE,OAAOpE,eAAeoE;IACvE,MAAMe,SAAS7D,QAAO+C,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB;IACxC,IACE,CAAED,CAAAA,IAAIc,MAAM,KAAK,UAAWd,IAAIc,MAAM,KAAK,SAAUC,CAAAA,WAAW,UAAUA,WAAW,OAAM,CAAE,GAC7F;QACA,OAAOF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAqB;IAC5D;IACAL,IAAIM,SAAS,CAAC,iBAAiB;IAC/B,IAAI;QACF,OAAQJ;YACN,KAAK;gBACH,OAAO,MAAMK,KAAKpB,KAAKC,MAAMY;YAC/B,KAAK;YACL,KAAK;YACL,KAAK;gBAAU;oBACb,MAAMQ,UAAU,MAAMjB,oBAAoBL,aAAaC,KAAKC;oBAC5D,IAAI,CAACoB,SAAS,OAAOR,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;wBAAEC,OAAO;oBAA8B;oBACjF,IAAIH,WAAW,UAAU;wBACvB,mEAAmE;wBACnE,wDAAwD;wBACxD,IAAIM,QAAQzD,IAAI,KAAK,SAAS;4BAC5B,OAAOiD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gCAAEC,OAAO;4BAA2C;wBAClF;wBACA,MAAMG,QAAQpD,GAAG,CAACgB,MAAM;wBACxB,OAAO4B,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;4BAAEK,IAAI;wBAAK;oBACzC;oBACA,iEAAiE;oBACjE,gEAAgE;oBAChE,IAAID,QAAQzD,IAAI,KAAK,SAAS;wBAC5B,OAAOiD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;4BAAEC,OAAO;wBAAuC;oBAC9E;oBACA,MAAMpE,WAAW,MAAMN,SAAS6E,QAAQ/E,MAAM,EAAE+E,QAAQ9E,UAAU,EAAEQ,GAAG;oBACvE,MAAMS,QAAQV,SAASK,MAAM,GAAIL,SAASsB,IAAI,KAAuC;oBACrF,IAAI2C,WAAW,QAAQ;wBACrB,OAAOF,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;4BAC1BzD,OAAOhC,cAAc+F,qBAAqB,CAAC/D,OAAOM,KAAKC,GAAG;4BAC1DyD,UACEvB,IAAI,CAAC,WAAW,KAAK,QAAQA,IAAI,CAAC,WAAW,KAAK,SAC9C,MAAMb,gBAAgBiC,QAAQ/E,MAAM,IACpC4C;wBACR;oBACF;oBACA,MAAMb,WAAW7C,cAAciG,0BAA0B,CAACjE,OAAOyC,IAAI,CAAC,WAAW,EAAEnC,KAAKC,GAAG;oBAC3F,IAAI,CAACM,UAAU;wBACb,OAAOwC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;4BAAEC,OAAO;wBAA+C;oBACtF;oBACA,MAAM1E,SAAS6E,QAAQ/E,MAAM,EAAE+E,QAAQ9E,UAAU,EAAEkB,GAAG,CAAC;wBAAEY;oBAAS,GAAG;wBAAEoC,OAAO;oBAAK;oBACnF,OAAOI,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;wBAAEK,IAAI;oBAAK;gBACzC;YACA;gBACE,OAAO,MAAMI,YAAY1B,KAAKC,MAAMc,QAAQF;QAChD;IACF,EAAE,OAAOK,OAAO;QACdS,QAAQT,KAAK,CAAC,iBAAiBH,QAAQG;QACvC,OAAOL,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA4C;IACnF;AACF,EAAC;AAED,eAAeE,KACbpB,GAAqB,EACrBC,IAAyB,EACzBY,GAAoC;cAUhBZ;QARGD;IAAvB,MAAM4B,UAAU1E,gBAAO8C,cAAAA,IAAI6B,MAAM,qBAAV7B,YAAY8B,aAAa,mBAAI,OAAO;IAC3D,MAAMC,OAAO,MAAM7G,iBAAiB,CAAC,iBAAiB,EAAE0G,SAAS,EAAE;QACjEhD,OAAO;QACPoD,UAAU,KAAK,KAAK;IACtB;IACA,IAAI,CAACD,KAAKE,OAAO,EAAE;QACjB,OAAOpB,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAoD;IAC3F;IACA,MAAMgB,OAAOhF,QAAO+C,aAAAA,IAAI,CAAC,OAAO,YAAZA,aAAgB,IAAIkC,OAAO,CAAC,OAAO;IACvD,0EAA0E;IAC1E,gEAAgE;IAChE,MAAMC,SAAsCnC,IAAI,CAAC,OAAO,KAAK,UAAU,UAAU;IACjF,IAAIiC,KAAKG,MAAM,KAAK,GAAG,OAAOxB,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;QAAEC,OAAO;IAA4C;IACxG,MAAMxE,YAAYvB,cAAcsB,GAAG,GAAGC,SAAS;IAC/C,MAAM4F,aAAa5F,UAAUC,UAAU,CAACb,UAAUc,GAAG,CAACX,OAAOiG;IAC7D,MAAM7B,QAAQrF,YAAY,IAAIuH,QAAQ,CAAC;IACvC,uEAAuE;IACvE,qEAAqE;IACrE,MAAMC,SAAS,MAAM9F,UAAUwB,cAAc,CAAC,OAAOC;YAGxBrB,eAGLA,gBACIA,gBAUNA,gBAGTmD;QAnBX,MAAMnD,WAAW,MAAMqB,YAAYpB,GAAG,CAACuF;QACvC,IAAI,CAACxF,SAASK,MAAM,EAAE,OAAO;QAC7B,MAAMsF,cAAclC,QAAOzD,gBAAAA,SAASC,GAAG,CAAC,0BAAbD,gBAA+B;QAC1DqB,YAAYc,MAAM,CAACqD;QACnB,IAAI,CAAEG,CAAAA,cAAc3E,KAAKC,GAAG,EAAC,GAAI,OAAO;QACxC,MAAMzB,SAASY,QAAOJ,iBAAAA,SAASC,GAAG,CAAC,qBAAbD,iBAA0B;QAChD,MAAMP,aAAaW,QAAOJ,iBAAAA,SAASC,GAAG,CAAC,yBAAbD,iBAA8B;QACxD,MAAMc,OAAoCd,SAASC,GAAG,CAAC,YAAY,UAAU,UAAU;QACvF,uEAAuE;QACvE,mCAAmC;QACnC,IAAIa,SAASwE,QAAQ,OAAO;YAAEM,UAAU9E;QAAK;QAC7CO,YAAYV,GAAG,CAACf,UAAUC,UAAU,CAACZ,QAAQa,GAAG,CAACX,OAAOoE,SAAS;YAC/D/D;YACAC;YACAqB;YACA+E,aAAa7E,KAAKC,GAAG;YACrB2C,WAAWxD,QAAOJ,iBAAAA,SAASC,GAAG,CAAC,wBAAbD,iBAA6B;YAC/C0D,cAAc1C,KAAKC,GAAG;YACtB6E,OACE1F,QAAO+C,cAAAA,IAAI,CAAC,QAAQ,YAAbA,cAAiB,IAAIP,KAAK,CAAC,GAAG,OACpC9B,CAAAA,SAAS,UAAU,uBAAuB,kBAAiB;QAChE;QACA,OAAO;YAAEtB;YAAQC;YAAYqB;QAAK;IACpC;IACA,IAAI,CAAC4E,QAAQ;QACX,OAAO3B,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAA2D;IAClG;IACA,IAAI,cAAcsB,QAAQ;QACxB,OAAO3B,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAC1BC,OACEsB,OAAOE,QAAQ,KAAK,UAChB,2GACA;QACR;IACF;IACA,OAAO7B,IACJG,MAAM,CAAC,KACPC,IAAI,CAAC;QAAEZ;QAAOzC,MAAM4E,OAAO5E,IAAI;QAAE4D,UAAU,MAAMpC,gBAAgBoD,OAAOlG,MAAM;IAAE;AACrF;AAEA,eAAeoF,YACb1B,GAAqB,EACrBC,IAAyB,EACzBc,MAAc,EACdF,GAAoC;QAEdZ,cAGIA;IAH1B,MAAM3D,SAASY,QAAO+C,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB;IACxC,MAAM4C,OAAO,MAAMnH,kBAAkBsE,KAAK1D;IAC1C,IAAI,WAAWuG,MAAM,OAAOhC,IAAIG,MAAM,CAAC6B,KAAK7B,MAAM,EAAEC,IAAI,CAAC;QAAEC,OAAO2B,KAAK3B,KAAK;IAAC;IAC7E,MAAM3E,aAAaW,QAAO+C,mBAAAA,IAAI,CAAC,aAAa,YAAlBA,mBAAsB;IAChD,IAAI,CAAE,MAAMd,eAAe7C,QAAQC,aAAc;QAC/C,OAAOsE,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;YAAEC,OAAO;QAAmB;IAC1D;IACA,MAAMxE,YAAYvB,cAAcsB,GAAG,GAAGC,SAAS;IAC/C,OAAQqE;QACN,KAAK;YAAgB;gBACnB,IAAK,IAAI+B,UAAU,GAAGA,UAAU,GAAGA,UAAW;oBAC5C,MAAMZ,OAAOhF,OAAOjC,UAAU,GAAG,UAAY8H,QAAQ,CAAC,GAAG;oBACzD,MAAM9E,MAAMvB,UAAUC,UAAU,CAACb,UAAUc,GAAG,CAACX,OAAOiG;oBACtD,MAAMO,cAAc3E,KAAKC,GAAG,KAAKvC,cAAcwH,0BAA0B;oBACzE,MAAMC,UAAU,MAAMvG,UAAUwB,cAAc,CAAC,OAAOC;4BAGtB+E;wBAF9B,MAAMA,WAAW,MAAM/E,YAAYpB,GAAG,CAACkB;wBACvC,gEAAgE;wBAChE,IAAIiF,SAAS/F,MAAM,IAAIoD,QAAO2C,gBAAAA,SAASnG,GAAG,CAAC,0BAAbmG,gBAA+B,KAAKpF,KAAKC,GAAG,IAAI,OAAO;wBACrFI,YAAYV,GAAG,CAACQ,KAAK;4BACnB3B;4BACAC;4BACAkG;4BACA/B,WAAWmC,KAAKM,KAAK,CAACC,GAAG;4BACzB,8DAA8D;4BAC9DxF,MAAMqC,IAAI,CAAC,OAAO,KAAK,UAAU,UAAU;wBAC7C;wBACA,OAAO;oBACT;oBACA,IAAIgD,SAAS,OAAOpC,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;wBAAEiB;wBAAMO;oBAAY;gBAC/D;gBACA,OAAO5B,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEC,OAAO;gBAAoC;YAC3E;QACA,KAAK;YAAQ;oBAQuC1D;gBAPlD,MAAMA,QAAQhC,cAAc6H,uBAAuB,CAACpD,IAAI,CAAC,QAAQ,EAAEnC,KAAKC,GAAG;gBAC3E,sEAAsE;gBACtE,IAAIP,MAAM8F,OAAO,IAAI,CAAC/H,sBAAsB;oBAC1C,MAAMgI,WAAW/F,MAAM8F,OAAO,CAACC,QAAQ,CAACC,MAAM,CAAC,CAACC,UAAYA,YAAY;oBACxEjG,MAAM8F,OAAO,CAACC,QAAQ,GAAGA,SAASlB,MAAM,GAAGkB,WAAW;wBAAC;wBAAS;qBAAO;gBACzE;gBACA,MAAMhG,qBAAqBjB,QAAQC,YAAYiB;gBAC/C,OAAOqD,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEK,IAAI;oBAAMoC,QAAQ,GAAElG,kBAAAA,MAAMkG,QAAQ,YAAdlG,kBAAkB;gBAAK;YAC3E;QACA,KAAK;YAAS;gBACZ,MAAMV,WAAW,MAAMN,SAASF,QAAQC,YAAYQ,GAAG;gBACvD,MAAMS,QAAQV,SAASK,MAAM,GAAIL,SAASsB,IAAI,KAAuC;gBACrF,MAAMuF,WAAW,MAAMjH,UACpBC,UAAU,CAACZ,QACX4C,KAAK,CAAC,UAAU,MAAMrC,QACtBqC,KAAK,CAAC,cAAc,MAAMpC,YAC1BqC,KAAK,CAAC,IACN7B,GAAG;gBACN,OAAO8D,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAC1BzD;oBACA,oEAAoE;oBACpE,oDAAoD;oBACpDoG,WAAWD,SAAS5E,IAAI,CAAC8E,IAAI,CAC3B,CAACjH;4BACqDA;+BAApD+D,UAAU/D,SAAS,aAAakB,KAAKC,GAAG,KAAKwC,QAAO3D,WAAAA,IAAIG,GAAG,CAAC,2BAARH,WAA2B,KAAK;;gBAE1F;YACF;QACA,KAAK;YAAY;gBACf,MAAM+G,WAAW,MAAMjH,UACpBC,UAAU,CAACZ,QACX4C,KAAK,CAAC,UAAU,MAAMrC,QACtBqC,KAAK,CAAC,cAAc,MAAMpC,YAC1BqC,KAAK,CAAC,IACN7B,GAAG;gBACN,OAAO8D,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAC1B0C,UAAUA,SAAS5E,IAAI,CAACC,GAAG,CAAC,CAACpC;4BAEbA,UAEMA,WACCA;+BALoB;4BACzCkH,IAAIlH,IAAIkH,EAAE,CAACpE,KAAK,CAAC,GAAG;4BACpBkD,OAAO1F,QAAON,WAAAA,IAAIG,GAAG,CAAC,oBAARH,WAAoB;4BAClCgB,MAAM+C,UAAU/D;4BAChB+F,aAAapC,QAAO3D,YAAAA,IAAIG,GAAG,CAAC,0BAARH,YAA0B;4BAC9C4D,cAAcD,QAAO3D,YAAAA,IAAIG,GAAG,CAAC,2BAARH,YAA2B;wBAClD;;gBACF;YACF;QACA,KAAK;YAAU;oBACSqD;gBAAtB,MAAM8D,SAAS7G,QAAO+C,kBAAAA,IAAI,CAAC,YAAY,YAAjBA,kBAAqB;gBAC3C,MAAM0D,WAAW,MAAMjH,UACpBC,UAAU,CAACZ,QACX4C,KAAK,CAAC,UAAU,MAAMrC,QACtBqC,KAAK,CAAC,cAAc,MAAMpC,YAC1BqC,KAAK,CAAC,IACN7B,GAAG;gBACN,MAAMiH,SAASL,SAAS5E,IAAI,CAACyE,MAAM,CACjC,CAAC5G,MAAamH,WAAW,OAAQA,OAAO1B,MAAM,KAAK,MAAMzF,IAAIkH,EAAE,CAACG,UAAU,CAACF;gBAE7E,MAAMlF,QAAQC,GAAG,CAACkF,OAAOhF,GAAG,CAAC,CAACpC,MAAaA,IAAIqB,GAAG,CAACgB,MAAM;gBACzD,OAAO4B,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;oBAAEiD,SAASF,OAAO3B,MAAM;gBAAC;YACvD;QACA;YACE,OAAOxB,IAAIG,MAAM,CAAC,KAAKC,IAAI,CAAC;gBAAEC,OAAO;YAAiB;IAC1D;AACF"}

package/src/lib/server/pos-kiosk-principal.d.ts

@@ -0,0 +1,29 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PluginApiRequest } from '@aglyn/aglyn/server';
+export interface PosKioskPrincipal {
+    /** The staff member who paired the kiosk; re-checked by the sale route. */
+    uid: string;
+    /** The one register the kiosk was paired to. */
+    registerId: string;
+    /** The kiosk's token hash prefix, for the order's record. */
+    deviceId: string;
+}
+/** A request the sale route reads as the kiosk's. */
+export declare function withPosKioskPrincipal<T extends PluginApiRequest>(req: T, principal: PosKioskPrincipal): T;
+/** The kiosk a request was made for in-process, or null. */
+export declare function posKioskPrincipal(req: PluginApiRequest): PosKioskPrincipal | null;

package/src/lib/server/pos-kiosk-principal.js

@@ -0,0 +1,42 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /*==========================================
+ * A SELF-SERVICE KIOSK'S SALE, AS THE SALE ROUTE SEES IT (AGL-3623).
+ *
+ * The kiosk route (`pos-kiosk.ts`) prices a customer's cart by calling the
+ * register's own sale route in-process, so a kiosk order is priced, taxed,
+ * discounted and fee'd by exactly the code every register sale is. It holds
+ * no Firebase session, so it hands the sale route this principal instead of
+ * an ID token: the staff member whose pairing code opened the kiosk, whose
+ * role, `managePos` and plan the sale route re-checks as it would theirs.
+ *
+ * The principal rides on a module-private Symbol. Nothing that arrives over
+ * HTTP — a header, a query, a JSON body — can carry one, so only code in
+ * this process that imports this module can make a request a kiosk's.
+ *=========================================*/ const PRINCIPAL = Symbol('aglyn.commerce.posKioskPrincipal');
+/** A request the sale route reads as the kiosk's. */ export function withPosKioskPrincipal(req, principal) {
+    Object.defineProperty(req, PRINCIPAL, {
+        value: principal,
+        enumerable: false
+    });
+    return req;
+}
+/** The kiosk a request was made for in-process, or null. */ export function posKioskPrincipal(req) {
+    const value = req[PRINCIPAL];
+    return value && typeof value.uid === 'string' && value.uid ? value : null;
+}
+
+//# sourceMappingURL=pos-kiosk-principal.js.map

package/src/lib/server/pos-kiosk-principal.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-kiosk-principal.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { PluginApiRequest } from '@aglyn/aglyn/server'\n\n/*==========================================\n * A SELF-SERVICE KIOSK'S SALE, AS THE SALE ROUTE SEES IT (AGL-3623).\n *\n * The kiosk route (`pos-kiosk.ts`) prices a customer's cart by calling the\n * register's own sale route in-process, so a kiosk order is priced, taxed,\n * discounted and fee'd by exactly the code every register sale is. It holds\n * no Firebase session, so it hands the sale route this principal instead of\n * an ID token: the staff member whose pairing code opened the kiosk, whose\n * role, `managePos` and plan the sale route re-checks as it would theirs.\n *\n * The principal rides on a module-private Symbol. Nothing that arrives over\n * HTTP — a header, a query, a JSON body — can carry one, so only code in\n * this process that imports this module can make a request a kiosk's.\n *=========================================*/\n\nconst PRINCIPAL = Symbol('aglyn.commerce.posKioskPrincipal')\n\nexport interface PosKioskPrincipal {\n  /** The staff member who paired the kiosk; re-checked by the sale route. */\n  uid: string\n  /** The one register the kiosk was paired to. */\n  registerId: string\n  /** The kiosk's token hash prefix, for the order's record. */\n  deviceId: string\n}\n\n/** A request the sale route reads as the kiosk's. */\nexport function withPosKioskPrincipal<T extends PluginApiRequest>(\n  req: T,\n  principal: PosKioskPrincipal,\n): T {\n  Object.defineProperty(req, PRINCIPAL, { value: principal, enumerable: false })\n  return req\n}\n\n/** The kiosk a request was made for in-process, or null. */\nexport function posKioskPrincipal(req: PluginApiRequest): PosKioskPrincipal | null {\n  const value = (req as unknown as Record<symbol, unknown>)[PRINCIPAL] as PosKioskPrincipal | undefined\n  return value && typeof value.uid === 'string' && value.uid ? value : null\n}\n"],"names":["PRINCIPAL","Symbol","withPosKioskPrincipal","req","principal","Object","defineProperty","value","enumerable","posKioskPrincipal","uid"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAID;;;;;;;;;;;;;2CAa2C,GAE3C,MAAMA,YAAYC,OAAO;AAWzB,mDAAmD,GACnD,OAAO,SAASC,sBACdC,GAAM,EACNC,SAA4B;IAE5BC,OAAOC,cAAc,CAACH,KAAKH,WAAW;QAAEO,OAAOH;QAAWI,YAAY;IAAM;IAC5E,OAAOL;AACT;AAEA,0DAA0D,GAC1D,OAAO,SAASM,kBAAkBN,GAAqB;IACrD,MAAMI,QAAQ,AAACJ,GAA0C,CAACH,UAAU;IACpE,OAAOO,SAAS,OAAOA,MAAMG,GAAG,KAAK,YAAYH,MAAMG,GAAG,GAAGH,QAAQ;AACvE"}

package/src/lib/server/pos-kiosk.d.ts

@@ -0,0 +1,54 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PluginApiHandler, PluginApiRequest } from '@aglyn/aglyn/server';
+import * as CommerceModel from '../model';
+import { type PosDeviceToken } from './pos-display';
+import { type PosLiftedOrder } from './pos-sale';
+type Outcome = {
+    status: number;
+    body: Record<string, unknown>;
+};
+/** The prefix of a token row's id a kiosk's orders are stamped with. */
+export declare function posKioskDeviceId(device: PosDeviceToken): string;
+/**
+ * Whether a product may be sold at a kiosk at all: what the register sells,
+ * less what a customer cannot be handed at a counter — a subscription-only
+ * product, a gift card whose code needs issuing, and a digital download.
+ */
+export declare function posKioskSellable(product: CommerceModel.HostProduct): boolean;
+/** A product as the kiosk may show it: names, prices and choices, nothing else. */
+export declare function posKioskProduct(id: string, product: CommerceModel.HostProduct, hostId: string): CommerceModel.PosKioskProduct;
+/** An order as its kiosk reads it back; null for any order this kiosk did not open. */
+export declare function posKioskSaleView(order: PosLiftedOrder | null, deviceId: string): CommerceModel.PosKioskSale | null;
+/** A short-lived, signed "staff unlocked THIS kiosk". */
+export declare function mintPosKioskUnlock(deviceId: string, memberUid: string, nowMs: number): {
+    unlock: string;
+    expiresAtMs: number;
+};
+/** The member a valid unlock names for this kiosk, or null. */
+export declare function readPosKioskUnlock(token: unknown, deviceId: string, nowMs: number): string | null;
+export interface PosKioskQueueEntry {
+    orderId: string;
+    number: number;
+    queuedAtMs: number;
+    totalCents: number;
+    itemCount: number;
+}
+export declare function handlePosKiosk(req: PluginApiRequest): Promise<Outcome>;
+/** `GET|POST /api/commerce/pos-kiosk`. */
+export declare const posKioskHandler: PluginApiHandler;
+export {};