@aglyn/plugins-commerce 1.0.0-beta.234 → 1.0.0-beta.235

package/src/lib/server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/plugins/commerce/src/lib/server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n\n/**\n * Server half of the commerce plugin (AGL-396): the site-facing storefront\n * API handlers, registered with the plugin API registry and served by the\n * tenant dispatcher at their unchanged `/api/commerce/*` URLs. This module\n * pulls in firebase-admin + Stripe, so it is NOT re-exported from the client\n * barrel — apps import `@aglyn/plugins-commerce/server` only from their\n * (server-only) API dispatcher registration.\n */\n\nimport {\n  registerBillingWebhookHandler,\n  registerPluginApiRoute,\n  registerPluginJob,\n  registerSitePageEnricher,\n  registerSitePageResolver,\n  registerPluginPermissions,\n  registerPluginConfigSchema,\n} from '@aglyn/aglyn/server'\nimport { isEmailConfigured } from '@aglyn/shared-util-email'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { registerCommerceMediaPublishGuard } from './server/media-publish-guard'\nimport { registerCommerceRecurringCharges } from './server/recurring-charges'\nimport { registerProductCardReader } from './server/product-card'\nimport { registerProductAiCapability } from './server/product-ai-capability'\nimport { registerProductDraftWriter } from './server/product-drafts'\nimport { registerCommerceTaxProfile } from './server/tax-profile'\nimport { registerTaxReturnSource } from '@aglyn/aglyn/plugin-manager/plugin-tax-return-sources'\nimport { commerceTaxReturnSource } from './server/tax-return-source'\nimport { taxSummaryHandler } from './server/tax-summary'\nimport { registerRevenueSource } from '@aglyn/aglyn/plugin-manager/plugin-revenue-sources'\nimport { commerceRevenueSource } from './server/revenue-source'\nimport { commerceBillingWebhookHandler } from './server/billing-webhook'\nimport { registerOrderFigureReaders } from './server/order-figures'\nimport { COMMERCE_PERMISSIONS } from './model/plugin-permissions'\nimport { COMMERCE_CONFIG_SCHEMA } from './plugin-config'\nimport { commerceSitePageEnricher } from './server/site-page-enricher'\nimport { commerceSitePageResolver } from './server/site-page-resolver'\nimport { cartCheckoutHandler } from './server/cart-checkout'\nimport { cartHandler } from './server/cart'\nimport { cartExtrasHandler } from './server/checkout-extras'\nimport { catalogHandler } from './server/catalog'\nimport { checkoutHandler } from './server/checkout'\nimport { downloadHandler } from './server/download'\nimport { newsletterHandler } from './server/newsletter'\nimport { notifyRestockHandler } from './server/notify-restock'\nimport { productHandler } from './server/product'\nimport { relatedHandler } from './server/related'\nimport { reservationAvailabilityHandler } from './server/reservation-availability'\nimport { gateHandler } from './server/gate'\nimport { memberFeedHandler } from './server/member-feed'\nimport { membershipAccountHandler } from './server/membership-account'\nimport { membershipAdminPasswordHandler } from './server/membership-admin-password'\nimport { membershipAdminRemoveHandler } from './server/membership-admin-remove'\nimport { membershipContentHandler } from './server/membership-content'\nimport { membershipLoginHandler } from './server/membership-login'\nimport { membershipLogoutHandler } from './server/membership-logout'\nimport { membershipRecoverHandler } from './server/membership-recover'\nimport { membershipRegisterHandler } from './server/membership-register'\nimport { membershipResetHandler } from './server/membership-reset'\nimport { membershipWishlistHandler } from './server/membership-wishlist'\nimport { reserveHandler } from './server/reserve'\nimport { streamHandler } from './server/stream'\nimport { subscriptionPortalHandler } from './server/subscription-portal'\nimport { reviewsHandler } from './server/reviews'\nimport { connectHandler } from './server/connect'\nimport { cancelOrderHandler } from './server/cancel-order'\nimport { carrierRatesAvailabilityHandler } from './server/carrier-rates-availability'\nimport { collectionMembershipHandler } from './server/collection-membership'\nimport { draftOrderHandler } from './server/draft-order'\nimport { fulfillOrderHandler } from './server/fulfill-order'\nimport { orderReceiptSendHandler } from './server/order-receipt-send'\nimport { orderStatusHandler, registerOrderStatusActions } from './server/order-status'\nimport { returnRequestStatusAction } from './server/return-status-action'\nimport { giftCardsHandler } from './server/gift-cards'\nimport { memberPostHandler } from './server/member-post'\nimport { orderAnalyticsHandler } from './server/order-analytics'\nimport { checkoutStatusHandler } from './server/checkout-status'\nimport { posOrderHandler } from './server/pos-order'\nimport { printersHandler } from './server/printers'\nimport { posPaymentHandler } from './server/pos-payment'\nimport { posReadersHandler } from './server/pos-readers'\nimport { posTerminalConnectionTokenHandler } from './server/pos-terminal-connection-token'\nimport { posDisplayHandler } from './server/pos-display'\nimport { posKioskHandler } from './server/pos-kiosk'\nimport { registerPosOpsRoutes } from './server/pos-ops-routes'\nimport {\n  processAbandonedHandler,\n  scanAbandonedCheckouts,\n} from './server/process-abandoned'\nimport { processRestockHandler, scanRestockAlerts } from './server/process-restock'\nimport { scanStockDecrements } from './server/reconcile-stock'\nimport { refundHandler } from './server/refund'\nimport { orderWebhooksHandler } from './server/order-webhooks'\nimport { returnRequestHandler, returnsHandler } from './server/returns'\nimport { scanSupplierDeliveries } from './server/supplier-outbox'\nimport { supplierUpdateHandler } from './server/supplier-update'\n\n/**\n * The two commerce beats (AGL-2227).\n *\n * `commerce/process-abandoned` and `commerce/process-restock` have existed\n * since AGL-323/326 as `x-cron-secret` HTTP doors, and `registerCommerceConsoleApi`\n * below has called them \"the scheduler-driven jobs\" in a comment that whole\n * time. **Nothing scheduled them.** Not `scheduled-crons.yml` (its table names\n * 11 paths; neither of these), not `vercel.json` (no `crons` key at all), not\n * `registerPluginJob` — the only two registrations in the repo were scheduled\n * publishing and the bookings hold-expiry.\n *\n * The cost was a Pro-tier entitlement (`abandonedCart`) that had never sent an\n * email, and a storefront \"notify me when it's back\" form writing into a queue\n * with no drain. AGL-1793 had already added the collection-group indexes these\n * two scans need, which is the clearest evidence they were always meant to run.\n *\n * Module scope, like the bookings job beside it: the runner route reaches jobs\n * through `ensureAll(['tenantApi'])`, and a registration inside a `register*`\n * function would depend on which entry point happened to be loaded.\n *\n * 15 minutes, not 1: `process-abandoned` will not remind a checkout younger\n * than an hour and `process-restock` only mails alerts whose product already\n * has stock, so a tighter beat buys nothing and costs two collection-group\n * scans a minute. Both are bounded (200 docs) and idempotent — each pass\n * stamps what it sent — so an overlapping or repeated beat cannot double-send.\n */\nconst RECOVERY_JOB_INTERVAL_MINUTES = 15\n\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'abandoned-checkout-recovery',\n  intervalMinutes: RECOVERY_JOB_INTERVAL_MINUTES,\n  description:\n    'Email one recovery reminder per stalled checkout (abandonedCart plans).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    // Quietly, not as an error: email is optional per deployment, and a beat\n    // that logs every minute on a self-host without Resend buries everything\n    // else in the log.\n    if (!isEmailConfigured()) return\n    const { sent } = await scanAbandonedCheckouts(gate)\n    if (sent) console.info(`commerce: sent ${sent} abandoned-cart reminders`)\n  },\n})\n\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'back-in-stock-alerts',\n  intervalMinutes: RECOVERY_JOB_INTERVAL_MINUTES,\n  description: 'Email shoppers whose requested product is in stock again.',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    if (!isEmailConfigured()) return\n    const { sent } = await scanRestockAlerts(gate)\n    if (sent) console.info(`commerce: sent ${sent} back-in-stock alerts`)\n  },\n})\n\n/**\n * The missing-decrement detector (AGL-2358).\n *\n * HOURLY, not on the 15-minute recovery beat: it is a detector for a rare\n * process death, not a queue drain, and nothing it finds gets less true for\n * waiting an hour. The cost of the beat is what sets the interval — one\n * collection-group read of the platform's most recent orders, plus two\n * queries per host that has any — and an hour keeps that off the same tick as\n * the two scans above.\n *\n * NOT gated on `isEmailConfigured()`, unlike its two neighbours. Those send\n * mail; this writes a console notification and a log line, both of which work\n * on a self-host with no mail provider at all — and a stock count that is\n * silently wrong is exactly what a self-hoster least wants suppressed by a\n * setting about email.\n */\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'stock-decrement-reconciliation',\n  intervalMinutes: 60,\n  description:\n    'Report paid orders whose stock decrement never landed (AGL-2358).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    const scan = await scanStockDecrements(gate)\n    if (scan.missingLines || scan.truncatedHosts) {\n      console.warn(\n        `commerce: ${scan.missingLines} order lines across ${scan.hosts} ` +\n          `sites have no sale ledger row (${scan.reportedOrders} newly ` +\n          `reported, ${scan.truncatedHosts} sites' ledger window truncated)`,\n      )\n    }\n  },\n})\n\n/**\n * The dropship supplier outbox drain (AGL-2473).\n *\n * EVERY MINUTE, unlike the three above, and the interval is the point rather\n * than an oversight. This is the only one of the four that a BUYER is waiting\n * on: the row it drains is a paid order that has not been routed to whoever\n * ships it, and every minute it sits is a minute the parcel is not moving. The\n * first backoff step is also 60s, so a supplier that blipped is retried on the\n * next tick.\n *\n * The cost that set fifteen minutes for the recovery pair does not apply. Those\n * are collection-GROUP scans across every site on the platform; this is one\n * ordinary equality query against a top-level collection that is EMPTY in the\n * ordinary case — an empty result bills a single read, so the whole beat is\n * ~1,440 reads a day whether or not anyone is dropshipping.\n *\n * Not gated on `isEmailConfigured()`. The supplier notification is an HTTP POST\n * to the merchant's own supplier, and a self-host with no mail provider still\n * has dropship orders to route.\n */\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'supplier-webhook-delivery',\n  intervalMinutes: 1,\n  description:\n    'Deliver queued dropship supplier notifications, with backoff and a ' +\n    'dead letter that tells the merchant (AGL-2473).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    const scan = await scanSupplierDeliveries(gate)\n    if (scan.deadLettered) {\n      console.warn(\n        `commerce: ${scan.deadLettered} dropship orders could not be routed ` +\n          `to their supplier and have been reported on the order`,\n      )\n    }\n  },\n})\n\n/**\n * Stripe payment method domains for every connected custom domain (AGL-3629).\n *\n * The backfill for domains connected before registration existed, and the\n * repair for a connect whose event was lost, in one daily pass. A domain\n * already registered costs a document read and no Stripe call, so the beat is\n * cheap; a day's delay costs only the Apple Pay button on a domain connected\n * while Stripe was unreachable, and the first in-page checkout there registers\n * it anyway.\n */\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'payment-method-domains',\n  intervalMinutes: 24 * 60,\n  description:\n    'Register connected custom domains with Stripe so Apple Pay, Google Pay ' +\n    'and Link show on them (AGL-3629).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    if (!process.env.STRIPE_SECRET_KEY) return\n    const { reconcileCustomDomains } = await import('./server/payment-method-domains')\n    const result = await reconcileCustomDomains(gate)\n    if (result.registered || result.failed) {\n      console.info(\n        `commerce: payment method domains — ${result.registered} registered, ` +\n          `${result.failed} failed across ${result.hosts} sites`,\n      )\n    }\n  },\n})\n\n/**\n * A visitor's payment door: it opens a Stripe Checkout Session for whoever\n * calls it, so the dispatcher holds it to the card-testing counters\n * (AGL-3363). Declared here, beside the registration, so the door cannot\n * exist without it.\n */\nconst CARD_PAYMENT_DOOR = { cardPayment: true } as const\n\n/** Registers the commerce plugin's storefront API routes. */\nexport function registerCommerceApi(): void {\n  registerProductCardReader()\n  // The merchant's tax rule, for every plugin that prices a charge here.\n  registerCommerceTaxProfile()\n  registerPluginPermissions(COMMERCE_PERMISSIONS)\n  // Merchant-settable register discount ceiling (AGL-2161). Registered on\n  // BOTH surfaces, like the permissions above: the POS route reads it\n  // server-side, and the settings card renders it from the same schema.\n  registerPluginConfigSchema(COMMERCE_CONFIG_SCHEMA)\n  // PDP/PLP template pages (AGL-418): /products/* + /collections/*.\n  registerSitePageResolver(commerceSitePageResolver)\n  // Seeds product grids on ordinary screens (AGL-659) — the resolver above\n  // only covers /products/* and /collections/*, so /products itself, and any\n  // designed page with a grid on it, needed this to render server-side.\n  registerSitePageEnricher(commerceSitePageEnricher)\n  registerPluginApiRoute('commerce/cart-checkout', cartCheckoutHandler, CARD_PAYMENT_DOOR)\n  registerPluginApiRoute('commerce/cart', cartHandler)\n  // What the cart offers besides shipping (AGL-3624): pickup locations, and\n  // local delivery's fee, minimum and windows for a postal code.\n  registerPluginApiRoute('commerce/local-fulfillment-options', async (req, res) =>\n    (await import('./server/local-fulfillment')).localFulfillmentOptionsHandler(req, res),\n  )\n  // Optional lines another plugin offers at the cart (AGL-3635).\n  registerPluginApiRoute('commerce/cart-extras', cartExtrasHandler)\n  registerPluginApiRoute('commerce/catalog', catalogHandler)\n  registerPluginApiRoute('commerce/checkout', checkoutHandler, CARD_PAYMENT_DOOR)\n  registerPluginApiRoute('commerce/download', downloadHandler)\n  // The pre-channels Google feed address (AGL-299), now written by the\n  // catalog's feed publisher (AGL-3637); the module loads with a fetch.\n  registerPluginApiRoute('commerce/feed', {\n    web: async (request) => (await import('./server/legacy-feed')).legacyFeedRoute(request),\n  })\n  registerPluginApiRoute('commerce/newsletter', newsletterHandler)\n  registerPluginApiRoute('commerce/notify-restock', notifyRestockHandler)\n  // GA-safe order projection for the storefront `purchase` (AGL-1641).\n  registerPluginApiRoute('commerce/order-analytics', orderAnalyticsHandler)\n  // The guest order-status page's data (AGL-3610), behind the signed link in\n  // every buyer email — a recipient link, so it outlives the site's gates.\n  registerPluginApiRoute('commerce/order-status', orderStatusHandler, { recipientLink: true })\n  // …and its \"Request a return\" button (AGL-3611), on an order that can\n  // still send something back.\n  registerOrderStatusActions(returnRequestStatusAction)\n  // What became of a session the shopper was returned from (AGL-3606).\n  registerPluginApiRoute('commerce/checkout-status', checkoutStatusHandler)\n  registerPluginApiRoute('commerce/product', productHandler)\n  registerPluginApiRoute('commerce/related', relatedHandler)\n  registerPluginApiRoute('commerce/reservation-availability', reservationAvailabilityHandler)\n  registerPluginApiRoute('commerce/reserve', reserveHandler, CARD_PAYMENT_DOOR)\n  registerPluginApiRoute('commerce/gate', gateHandler)\n  registerPluginApiRoute('commerce/member-feed', memberFeedHandler)\n  registerPluginApiRoute('commerce/stream', streamHandler)\n  registerPluginApiRoute('commerce/subscription-portal', subscriptionPortalHandler)\n  registerPluginApiRoute('commerce/reviews', reviewsHandler)\n  // A buyer's return request (AGL-3611), from their account or the signed\n  // order-status link.\n  registerPluginApiRoute('commerce/return-request', returnRequestHandler)\n  registerPluginApiRoute('membership/account', membershipAccountHandler)\n  registerPluginApiRoute('membership/content', membershipContentHandler)\n  registerPluginApiRoute('membership/login', membershipLoginHandler)\n  registerPluginApiRoute('membership/logout', membershipLogoutHandler)\n  // Password recovery pair (AGL-552): request + complete.\n  registerPluginApiRoute('membership/recover', membershipRecoverHandler)\n  registerPluginApiRoute('membership/register', membershipRegisterHandler)\n  registerPluginApiRoute('membership/reset', membershipResetHandler)\n  registerPluginApiRoute('membership/wishlist', membershipWishlistHandler)\n}\n\n/**\n * Registers the commerce plugin's console-side API routes (AGL-396):\n * merchant/staff operations (Connect onboarding, refunds, draft & POS\n * orders, member posts), the supplier tracking callback, and the HTTP doors\n * for the abandoned-cart / restock passes.\n *\n * Those last two are NOT what schedules them — the `registerPluginJob` calls\n * above are (AGL-2227). This comment used to call them \"the scheduler-driven\n * jobs\", which is how they stayed dark for months: it asserted the wiring\n * instead of having it.\n */\nexport function registerCommerceConsoleApi(): void {\n  // The register's gate (`managePos`) is resolved on THIS surface: every POS\n  // route below runs in the console, and a key no surface registered here is\n  // absent from the resolved map, which reads as refused — the site's own\n  // owner was answered 403 at the register.\n  registerPluginPermissions(COMMERCE_PERMISSIONS)\n  // What a product looks like to a surface that is not this plugin's — a\n  // campaign email that features one asks here rather than importing the model.\n  registerProductCardReader()\n  // …and a draft product another plugin asks for by name (AGL-3616): an AI\n  // build setting a store up from a brief, unpriced unless the brief priced it.\n  // The console runs AI jobs (AGL-3026).\n  registerProductDraftWriter()\n  // …and the operation an AI build plans for it, which that writer executes.\n  registerProductAiCapability()\n  // …and why a file somebody is SELLING may not be made public (AGL-3080).\n  // The media library asks before it hands an asset its permanent CDN URL\n  // back; what a product is, and which of its fields hold paid media, is\n  // this plugin's to know.\n  registerCommerceMediaPublishGuard()\n  // …and which memberships a site sells, for a security lockdown to pause\n  // (AGL-3364). The lockdown route runs on this surface.\n  registerCommerceRecurringCharges()\n  // …and the tax rule, for the webhook that confirms what they charged.\n  registerCommerceTaxProfile()\n  // …and its sales on the operator's own sales tax return (AGL-3080): the\n  // tax a storefront checkout collected under the platform's registrations.\n  // The staff return awaits this surface before it asks, and refuses to be\n  // filed without this source — commerce declares `taxReturnSource`.\n  registerTaxReturnSource(commerceTaxReturnSource, { pluginId: BUNDLE_ID })\n  // …and the take its orders earn the operator, on the staff revenue report\n  // (AGL-3080) — commerce declares `revenueSource`, so the report names this\n  // source as unread rather than counting it as zero if it is missing.\n  registerRevenueSource(commerceRevenueSource, { pluginId: BUNDLE_ID })\n  // Stripe webhook sections (AGL-418): orders/carts/drafts/reservations/\n  // subscriptions ride the platform webhook via the hook registry.\n  registerBillingWebhookHandler(commerceBillingWebhookHandler)\n  // Cancel + stock release in one transaction (AGL-1808). Server-side because\n  // the release depends on the transition rule, and a client write could not\n  // re-ask it under the same lock that flips the status.\n  registerPluginApiRoute('commerce/cancel-order', cancelOrderHandler)\n  // Whether live carrier rates can be offered on this site (AGL-3612).\n  registerPluginApiRoute('commerce/shipping/carrier-rates', carrierRatesAvailabilityHandler)\n  registerPluginApiRoute('commerce/connect', connectHandler)\n  registerPluginApiRoute('commerce/draft-order', draftOrderHandler)\n  // Fulfil + mark-delivered with the transition re-asked under the write\n  // (AGL-1819) — the same stale-dialog hole cancel-order closes, minus the\n  // stock release those two transitions never had. The customer REST API's\n  // `PATCH /v1/sites/{id}/orders/{id}` records a shipment through the same\n  // transaction (`server/api-v1/orders-and-products.ts`).\n  registerPluginApiRoute('commerce/fulfill-order', fulfillOrderHandler)\n  // Pickup and local delivery steps (AGL-3624) — ready, picked up, out for\n  // delivery, delivered — from the console queue, the order dialog and the\n  // native Aglyn app. Loaded on first call.\n  registerPluginApiRoute('commerce/local-fulfillment', async (req, res) =>\n    (await import('./server/local-fulfillment-status')).localFulfillmentHandler(req, res),\n  )\n  // \"Resend receipt\" from the order dialog (AGL-3610): by email, or by text\n  // when the platform's SMS provider is configured. Rate-limited per member\n  // and per order.\n  registerPluginApiRoute('commerce/order-receipt-send', orderReceiptSendHandler)\n  // The product editor's save and Adjust stock for the native apps (AGL-3652):\n  // the console's own product-write computation under the rules' gate. Loaded\n  // on first call.\n  registerPluginApiRoute('commerce/products/save', async (req, res) =>\n    (await import('./server/products-write')).productSaveHandler(req, res),\n  )\n  registerPluginApiRoute('commerce/products/stock', async (req, res) =>\n    (await import('./server/products-write')).productStockHandler(req, res),\n  )\n  // Issue / void store credit (AGL-2226). Server-side because the host\n  // catch-all in the Firestore rules would otherwise let a client write\n  // its own `balanceCents`, which checkout applies as amount-off.\n  registerPluginApiRoute('commerce/gift-cards', giftCardsHandler)\n  // The merchant's own storefront sales tax, by who owes it (AGL-2440): the\n  // same rows and classifier the operator's return reads, fenced to one site.\n  registerPluginApiRoute('commerce/tax-summary', { web: taxSummaryHandler })\n  // The payment methods card (AGL-3629): toggles, the platform's offer, the\n  // payout account's capabilities and the site's wallet domains. Loaded with\n  // the first request, so a console that never opens Settings never imports it.\n  registerPluginApiRoute('commerce/payment-methods', {\n    web: async (request) =>\n      (await import('./server/payment-methods')).paymentMethodsHandler(request),\n  })\n  // A smart collection's rules changed or it was deleted: re-stamp which\n  // products it holds (AGL-3321), the membership the storefront queries.\n  registerPluginApiRoute('commerce/collection-membership', collectionMembershipHandler)\n  // A site member's password help (AGL-914) and removal (AGL-3308), from the\n  // Users page drawer and the Inbox. Console-auth, not the visitor cookie the\n  // storefront's `membership/*` routes take, so they are served where the\n  // console posts: the console's own dispatcher loads this surface only.\n  registerPluginApiRoute(\n    'membership/admin-password',\n    membershipAdminPasswordHandler,\n  )\n  registerPluginApiRoute('membership/admin-remove', membershipAdminRemoveHandler)\n  registerPluginApiRoute('commerce/member-post', memberPostHandler)\n  registerPluginApiRoute('commerce/pos-order', posOrderHandler)\n  // A register's cloud receipt printers and the jobs a manager sends them\n  // (AGL-3619), and the two doors the printers themselves poll. The doors are\n  // MACHINE routes: a printer is no member and names no site cookie, so it\n  // authenticates with the per-printer secret in its URL and its own device id,\n  // and the route asks the plan before it hands over a job. Loaded with the\n  // first poll, so a console that has no printers never imports them.\n  registerPluginApiRoute('commerce/printers', printersHandler)\n  registerPluginApiRoute(\n    'commerce/cloudprnt/:hostId/:printerId/:secret',\n    {\n      web: async (request, context) =>\n        (await import('./server/printer-poll')).cloudPrntRoute(request, context),\n    },\n    { machine: true },\n  )\n  registerPluginApiRoute(\n    'commerce/epson-sdp/:hostId/:printerId/:secret',\n    {\n      web: async (request, context) =>\n        (await import('./server/printer-poll')).epsonServerDirectPrintRoute(request, context),\n    },\n    { machine: true },\n  )\n  // The register's tenders against an open sale, its Stripe Terminal card\n  // readers, and the paired customer display (AGL-3607, AGL-3608). The\n  // display's `pair`/`poll`/`respond` take a display token and no console\n  // session; every other action is gated like a sale.\n  registerPluginApiRoute('commerce/pos-payment', posPaymentHandler)\n  registerPluginApiRoute('commerce/pos-readers', posReadersHandler)\n  registerPluginApiRoute('commerce/pos-display', posDisplayHandler)\n  // The self-service kiosk (AGL-3623): a register's paired screen where the\n  // customer orders and pays. Its device token, never a staff session; the\n  // register's queue of \"pay at counter\" orders is gated like a sale.\n  registerPluginApiRoute('commerce/pos-kiosk', posKioskHandler)\n  // Shifts, staff PINs, the customer lookup and returns (AGL-3609).\n  registerPosOpsRoutes()\n  // The offline register (AGL-3625): the kit a register caches to sell cash\n  // while the connection is down, and the sync that records those sales once.\n  // Gated like a sale; loaded with its first call.\n  registerPluginApiRoute('commerce/pos-offline-sync', async (req, res) =>\n    (await import('./server/pos-offline-sync')).posOfflineSyncHandler(req, res),\n  )\n  // The native Aglyn POS app's Stripe Terminal SDK: a connection token scoped\n  // to the site's Location, and the Location itself (AGL-3618). Gated like a\n  // sale.\n  registerPluginApiRoute('commerce/pos-terminal-connection-token', posTerminalConnectionTokenHandler)\n  registerPluginApiRoute('commerce/process-abandoned', processAbandonedHandler)\n  registerPluginApiRoute('commerce/process-restock', processRestockHandler)\n  registerPluginApiRoute('commerce/refund', refundHandler)\n  // Returns (AGL-3611): approve, decline, receive with restock, refund\n  // through the route above, a label from a shipping plugin.\n  registerPluginApiRoute('commerce/returns', returnsHandler)\n  // The merchant's outbound order webhooks (AGL-3611): endpoints, secrets,\n  // a test ping and a resend from the delivery log.\n  registerPluginApiRoute('commerce/order-webhooks', orderWebhooksHandler)\n  registerPluginApiRoute('commerce/supplier-update', supplierUpdateHandler)\n  // Stamps the open orders that predate the shipping fields, before an\n  // export for shipping (AGL-3613).\n  registerPluginApiRoute('commerce/orders-shipping-prepare', async (req, res) =>\n    (await import('./server/orders-shipping-prepare')).ordersShippingPrepareHandler(req, res),\n  )\n  // ShipStation's Custom Store endpoint (AGL-3613): ShipStation's servers\n  // pull the order feed and post shipments back with the site's own Basic\n  // credentials, so it is a MACHINE's route and asks the site's commerce,\n  // plan, release and lockdown gates itself once the credentials prove the\n  // site. Loaded on its first call, never with the console API surface.\n  registerPluginApiRoute(\n    'commerce/shipstation/:hostId',\n    {\n      web: async (request, context) =>\n        (await import('./server/shipstation')).shipStationRoute(request, context),\n    },\n    { machine: true },\n  )\n  // ShippingEasy's shipment callback (AGL-3633): ShippingEasy's servers post\n  // each label bought for an order this store sent them, signed with the\n  // merchant's own API secret, so it is a MACHINE's route like ShipStation's\n  // above and asks the same gates once the signature proves the site.\n  registerPluginApiRoute(\n    'commerce/shippingeasy/:hostId',\n    {\n      web: async (request, context) =>\n        (await import('./server/shippingeasy')).shippingEasyRoute(request, context),\n    },\n    { machine: true },\n  )\n  // The ShipStation and ShippingEasy cards' connect, show, new password,\n  // send open orders and disconnect.\n  registerPluginApiRoute('commerce/shipping-connectors', async (req, res) =>\n    (await import('./server/shipping-connectors')).shippingConnectorsHandler(req, res),\n  )\n  // The store's sales as figure tables (AGL-2915), for the AI plugin's\n  // insights to read by id rather than by reading orders. The console runs\n  // insight jobs, so the console surface registers them.\n  registerOrderFigureReaders(() => firebaseAdmin.app().firestore())\n}\n\n// Shared with the (still app-side) membership/account route.\nexport { mintDownloadToken } from './server/download'\n\n// Site-member session primitives, shared with the (still app-side)\n// membership/* routes until those migrate too (AGL-396).\nexport * from './server/membership'\n\n// Type-only (AGL-3080): the plugin's entitlement keys, declared by module\n// augmentation, for every program that loads this entry point.\nexport type { commercePlanEntitlements } from './plan-entitlements'\n"],"names":["registerBillingWebhookHandler","registerPluginApiRoute","registerPluginJob","registerSitePageEnricher","registerSitePageResolver","registerPluginPermissions","registerPluginConfigSchema","isEmailConfigured","firebaseAdmin","BUNDLE_ID","registerCommerceMediaPublishGuard","registerCommerceRecurringCharges","registerProductCardReader","registerProductAiCapability","registerProductDraftWriter","registerCommerceTaxProfile","registerTaxReturnSource","commerceTaxReturnSource","taxSummaryHandler","registerRevenueSource","commerceRevenueSource","commerceBillingWebhookHandler","registerOrderFigureReaders","COMMERCE_PERMISSIONS","COMMERCE_CONFIG_SCHEMA","commerceSitePageEnricher","commerceSitePageResolver","cartCheckoutHandler","cartHandler","cartExtrasHandler","catalogHandler","checkoutHandler","downloadHandler","newsletterHandler","notifyRestockHandler","productHandler","relatedHandler","reservationAvailabilityHandler","gateHandler","memberFeedHandler","membershipAccountHandler","membershipAdminPasswordHandler","membershipAdminRemoveHandler","membershipContentHandler","membershipLoginHandler","membershipLogoutHandler","membershipRecoverHandler","membershipRegisterHandler","membershipResetHandler","membershipWishlistHandler","reserveHandler","streamHandler","subscriptionPortalHandler","reviewsHandler","connectHandler","cancelOrderHandler","carrierRatesAvailabilityHandler","collectionMembershipHandler","draftOrderHandler","fulfillOrderHandler","orderReceiptSendHandler","orderStatusHandler","registerOrderStatusActions","returnRequestStatusAction","giftCardsHandler","memberPostHandler","orderAnalyticsHandler","checkoutStatusHandler","posOrderHandler","printersHandler","posPaymentHandler","posReadersHandler","posTerminalConnectionTokenHandler","posDisplayHandler","posKioskHandler","registerPosOpsRoutes","processAbandonedHandler","scanAbandonedCheckouts","processRestockHandler","scanRestockAlerts","scanStockDecrements","refundHandler","orderWebhooksHandler","returnRequestHandler","returnsHandler","scanSupplierDeliveries","supplierUpdateHandler","RECOVERY_JOB_INTERVAL_MINUTES","pluginId","name","intervalMinutes","description","lockdown","scope","handler","gate","sent","console","info","scan","missingLines","truncatedHosts","warn","hosts","reportedOrders","deadLettered","process","env","STRIPE_SECRET_KEY","reconcileCustomDomains","result","registered","failed","CARD_PAYMENT_DOOR","cardPayment","registerCommerceApi","req","res","localFulfillmentOptionsHandler","web","request","legacyFeedRoute","recipientLink","registerCommerceConsoleApi","localFulfillmentHandler","productSaveHandler","productStockHandler","paymentMethodsHandler","context","cloudPrntRoute","machine","epsonServerDirectPrintRoute","posOfflineSyncHandler","ordersShippingPrepareHandler","shipStationRoute","shippingEasyRoute","shippingConnectorsHandler","app","firestore","mintDownloadToken"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAGD;;;;;;;CAOC,GAED,SACEA,6BAA6B,EAC7BC,sBAAsB,EACtBC,iBAAiB,EACjBC,wBAAwB,EACxBC,wBAAwB,EACxBC,yBAAyB,EACzBC,0BAA0B,QACrB,sBAAqB;AAC5B,SAASC,iBAAiB,QAAQ,2BAA0B;AAC5D,SAASC,aAAa,QAAQ,2BAA0B;AACxD,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,iCAAiC,QAAQ,kCAA8B;AAChF,SAASC,gCAAgC,QAAQ,gCAA4B;AAC7E,SAASC,yBAAyB,QAAQ,2BAAuB;AACjE,SAASC,2BAA2B,QAAQ,oCAAgC;AAC5E,SAASC,0BAA0B,QAAQ,6BAAyB;AACpE,SAASC,0BAA0B,QAAQ,0BAAsB;AACjE,SAASC,uBAAuB,QAAQ,wDAAuD;AAC/F,SAASC,uBAAuB,QAAQ,gCAA4B;AACpE,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,qBAAqB,QAAQ,qDAAoD;AAC1F,SAASC,qBAAqB,QAAQ,6BAAyB;AAC/D,SAASC,6BAA6B,QAAQ,8BAA0B;AACxE,SAASC,0BAA0B,QAAQ,4BAAwB;AACnE,SAASC,oBAAoB,QAAQ,gCAA4B;AACjE,SAASC,sBAAsB,QAAQ,qBAAiB;AACxD,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,mBAAmB,QAAQ,4BAAwB;AAC5D,SAASC,WAAW,QAAQ,mBAAe;AAC3C,SAASC,iBAAiB,QAAQ,8BAA0B;AAC5D,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,eAAe,QAAQ,uBAAmB;AACnD,SAASC,eAAe,QAAQ,uBAAmB;AACnD,SAASC,iBAAiB,QAAQ,yBAAqB;AACvD,SAASC,oBAAoB,QAAQ,6BAAyB;AAC9D,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,8BAA8B,QAAQ,uCAAmC;AAClF,SAASC,WAAW,QAAQ,mBAAe;AAC3C,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,8BAA8B,QAAQ,wCAAoC;AACnF,SAASC,4BAA4B,QAAQ,sCAAkC;AAC/E,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,sBAAsB,QAAQ,+BAA2B;AAClE,SAASC,uBAAuB,QAAQ,gCAA4B;AACpE,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,yBAAyB,QAAQ,kCAA8B;AACxE,SAASC,sBAAsB,QAAQ,+BAA2B;AAClE,SAASC,yBAAyB,QAAQ,kCAA8B;AACxE,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,aAAa,QAAQ,qBAAiB;AAC/C,SAASC,yBAAyB,QAAQ,kCAA8B;AACxE,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,kBAAkB,QAAQ,2BAAuB;AAC1D,SAASC,+BAA+B,QAAQ,yCAAqC;AACrF,SAASC,2BAA2B,QAAQ,oCAAgC;AAC5E,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,mBAAmB,QAAQ,4BAAwB;AAC5D,SAASC,uBAAuB,QAAQ,iCAA6B;AACrE,SAASC,kBAAkB,EAAEC,0BAA0B,QAAQ,2BAAuB;AACtF,SAASC,yBAAyB,QAAQ,mCAA+B;AACzE,SAASC,gBAAgB,QAAQ,yBAAqB;AACtD,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,qBAAqB,QAAQ,8BAA0B;AAChE,SAASC,qBAAqB,QAAQ,8BAA0B;AAChE,SAASC,eAAe,QAAQ,wBAAoB;AACpD,SAASC,eAAe,QAAQ,uBAAmB;AACnD,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,iCAAiC,QAAQ,4CAAwC;AAC1F,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,eAAe,QAAQ,wBAAoB;AACpD,SAASC,oBAAoB,QAAQ,6BAAyB;AAC9D,SACEC,uBAAuB,EACvBC,sBAAsB,QACjB,gCAA4B;AACnC,SAASC,qBAAqB,EAAEC,iBAAiB,QAAQ,8BAA0B;AACnF,SAASC,mBAAmB,QAAQ,8BAA0B;AAC9D,SAASC,aAAa,QAAQ,qBAAiB;AAC/C,SAASC,oBAAoB,QAAQ,6BAAyB;AAC9D,SAASC,oBAAoB,EAAEC,cAAc,QAAQ,sBAAkB;AACvE,SAASC,sBAAsB,QAAQ,8BAA0B;AACjE,SAASC,qBAAqB,QAAQ,8BAA0B;AAEhE;;;;;;;;;;;;;;;;;;;;;;;;;CAyBC,GACD,MAAMC,gCAAgC;AAEtCrF,kBAAkB;IAChBsF,UAAU/E;IACVgF,MAAM;IACNC,iBAAiBH;IACjBI,aACE;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,yEAAyE;QACzE,yEAAyE;QACzE,mBAAmB;QACnB,IAAI,CAACxF,qBAAqB;QAC1B,MAAM,EAAEyF,IAAI,EAAE,GAAG,MAAMnB,uBAAuBkB;QAC9C,IAAIC,MAAMC,QAAQC,IAAI,CAAC,CAAC,eAAe,EAAEF,KAAK,yBAAyB,CAAC;IAC1E;AACF;AAEA9F,kBAAkB;IAChBsF,UAAU/E;IACVgF,MAAM;IACNC,iBAAiBH;IACjBI,aAAa;IACbC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,IAAI,CAACxF,qBAAqB;QAC1B,MAAM,EAAEyF,IAAI,EAAE,GAAG,MAAMjB,kBAAkBgB;QACzC,IAAIC,MAAMC,QAAQC,IAAI,CAAC,CAAC,eAAe,EAAEF,KAAK,qBAAqB,CAAC;IACtE;AACF;AAEA;;;;;;;;;;;;;;;CAeC,GACD9F,kBAAkB;IAChBsF,UAAU/E;IACVgF,MAAM;IACNC,iBAAiB;IACjBC,aACE;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,MAAMI,OAAO,MAAMnB,oBAAoBe;QACvC,IAAII,KAAKC,YAAY,IAAID,KAAKE,cAAc,EAAE;YAC5CJ,QAAQK,IAAI,CACV,CAAC,UAAU,EAAEH,KAAKC,YAAY,CAAC,oBAAoB,EAAED,KAAKI,KAAK,CAAC,CAAC,CAAC,GAChE,CAAC,+BAA+B,EAAEJ,KAAKK,cAAc,CAAC,OAAO,CAAC,GAC9D,CAAC,UAAU,EAAEL,KAAKE,cAAc,CAAC,gCAAgC,CAAC;QAExE;IACF;AACF;AAEA;;;;;;;;;;;;;;;;;;;CAmBC,GACDnG,kBAAkB;IAChBsF,UAAU/E;IACVgF,MAAM;IACNC,iBAAiB;IACjBC,aACE,wEACA;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,MAAMI,OAAO,MAAMd,uBAAuBU;QAC1C,IAAII,KAAKM,YAAY,EAAE;YACrBR,QAAQK,IAAI,CACV,CAAC,UAAU,EAAEH,KAAKM,YAAY,CAAC,qCAAqC,CAAC,GACnE,CAAC,qDAAqD,CAAC;QAE7D;IACF;AACF;AAEA;;;;;;;;;CASC,GACDvG,kBAAkB;IAChBsF,UAAU/E;IACVgF,MAAM;IACNC,iBAAiB,KAAK;IACtBC,aACE,4EACA;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,IAAI,CAACW,QAAQC,GAAG,CAACC,iBAAiB,EAAE;QACpC,MAAM,EAAEC,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC;QAChD,MAAMC,SAAS,MAAMD,uBAAuBd;QAC5C,IAAIe,OAAOC,UAAU,IAAID,OAAOE,MAAM,EAAE;YACtCf,QAAQC,IAAI,CACV,CAAC,mCAAmC,EAAEY,OAAOC,UAAU,CAAC,aAAa,CAAC,GACpE,GAAGD,OAAOE,MAAM,CAAC,eAAe,EAAEF,OAAOP,KAAK,CAAC,MAAM,CAAC;QAE5D;IACF;AACF;AAEA;;;;;CAKC,GACD,MAAMU,oBAAoB;IAAEC,aAAa;AAAK;AAE9C,2DAA2D,GAC3D,OAAO,SAASC;IACdvG;IACA,uEAAuE;IACvEG;IACAV,0BAA0BkB;IAC1B,wEAAwE;IACxE,oEAAoE;IACpE,sEAAsE;IACtEjB,2BAA2BkB;IAC3B,kEAAkE;IAClEpB,yBAAyBsB;IACzB,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtEvB,yBAAyBsB;IACzBxB,uBAAuB,0BAA0B0B,qBAAqBsF;IACtEhH,uBAAuB,iBAAiB2B;IACxC,0EAA0E;IAC1E,+DAA+D;IAC/D3B,uBAAuB,sCAAsC,OAAOmH,KAAKC,MACvE,AAAC,CAAA,MAAM,MAAM,CAAC,gCAA4B,EAAGC,8BAA8B,CAACF,KAAKC;IAEnF,+DAA+D;IAC/DpH,uBAAuB,wBAAwB4B;IAC/C5B,uBAAuB,oBAAoB6B;IAC3C7B,uBAAuB,qBAAqB8B,iBAAiBkF;IAC7DhH,uBAAuB,qBAAqB+B;IAC5C,qEAAqE;IACrE,sEAAsE;IACtE/B,uBAAuB,iBAAiB;QACtCsH,KAAK,OAAOC,UAAY,AAAC,CAAA,MAAM,MAAM,CAAC,0BAAsB,EAAGC,eAAe,CAACD;IACjF;IACAvH,uBAAuB,uBAAuBgC;IAC9ChC,uBAAuB,2BAA2BiC;IAClD,qEAAqE;IACrEjC,uBAAuB,4BAA4BiE;IACnD,2EAA2E;IAC3E,yEAAyE;IACzEjE,uBAAuB,yBAAyB4D,oBAAoB;QAAE6D,eAAe;IAAK;IAC1F,sEAAsE;IACtE,6BAA6B;IAC7B5D,2BAA2BC;IAC3B,qEAAqE;IACrE9D,uBAAuB,4BAA4BkE;IACnDlE,uBAAuB,oBAAoBkC;IAC3ClC,uBAAuB,oBAAoBmC;IAC3CnC,uBAAuB,qCAAqCoC;IAC5DpC,uBAAuB,oBAAoBiD,gBAAgB+D;IAC3DhH,uBAAuB,iBAAiBqC;IACxCrC,uBAAuB,wBAAwBsC;IAC/CtC,uBAAuB,mBAAmBkD;IAC1ClD,uBAAuB,gCAAgCmD;IACvDnD,uBAAuB,oBAAoBoD;IAC3C,wEAAwE;IACxE,qBAAqB;IACrBpD,uBAAuB,2BAA2BkF;IAClDlF,uBAAuB,sBAAsBuC;IAC7CvC,uBAAuB,sBAAsB0C;IAC7C1C,uBAAuB,oBAAoB2C;IAC3C3C,uBAAuB,qBAAqB4C;IAC5C,wDAAwD;IACxD5C,uBAAuB,sBAAsB6C;IAC7C7C,uBAAuB,uBAAuB8C;IAC9C9C,uBAAuB,oBAAoB+C;IAC3C/C,uBAAuB,uBAAuBgD;AAChD;AAEA;;;;;;;;;;CAUC,GACD,OAAO,SAAS0E;IACd,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,0CAA0C;IAC1CtH,0BAA0BkB;IAC1B,uEAAuE;IACvE,8EAA8E;IAC9EX;IACA,yEAAyE;IACzE,8EAA8E;IAC9E,uCAAuC;IACvCE;IACA,2EAA2E;IAC3ED;IACA,yEAAyE;IACzE,wEAAwE;IACxE,uEAAuE;IACvE,yBAAyB;IACzBH;IACA,wEAAwE;IACxE,uDAAuD;IACvDC;IACA,sEAAsE;IACtEI;IACA,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,mEAAmE;IACnEC,wBAAwBC,yBAAyB;QAAEuE,UAAU/E;IAAU;IACvE,0EAA0E;IAC1E,2EAA2E;IAC3E,qEAAqE;IACrEU,sBAAsBC,uBAAuB;QAAEoE,UAAU/E;IAAU;IACnE,uEAAuE;IACvE,iEAAiE;IACjET,8BAA8BqB;IAC9B,4EAA4E;IAC5E,2EAA2E;IAC3E,uDAAuD;IACvDpB,uBAAuB,yBAAyBsD;IAChD,qEAAqE;IACrEtD,uBAAuB,mCAAmCuD;IAC1DvD,uBAAuB,oBAAoBqD;IAC3CrD,uBAAuB,wBAAwByD;IAC/C,uEAAuE;IACvE,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,wDAAwD;IACxDzD,uBAAuB,0BAA0B0D;IACjD,yEAAyE;IACzE,yEAAyE;IACzE,0CAA0C;IAC1C1D,uBAAuB,8BAA8B,OAAOmH,KAAKC,MAC/D,AAAC,CAAA,MAAM,MAAM,CAAC,uCAAmC,EAAGO,uBAAuB,CAACR,KAAKC;IAEnF,0EAA0E;IAC1E,0EAA0E;IAC1E,iBAAiB;IACjBpH,uBAAuB,+BAA+B2D;IACtD,6EAA6E;IAC7E,4EAA4E;IAC5E,iBAAiB;IACjB3D,uBAAuB,0BAA0B,OAAOmH,KAAKC,MAC3D,AAAC,CAAA,MAAM,MAAM,CAAC,6BAAyB,EAAGQ,kBAAkB,CAACT,KAAKC;IAEpEpH,uBAAuB,2BAA2B,OAAOmH,KAAKC,MAC5D,AAAC,CAAA,MAAM,MAAM,CAAC,6BAAyB,EAAGS,mBAAmB,CAACV,KAAKC;IAErE,qEAAqE;IACrE,sEAAsE;IACtE,gEAAgE;IAChEpH,uBAAuB,uBAAuB+D;IAC9C,0EAA0E;IAC1E,4EAA4E;IAC5E/D,uBAAuB,wBAAwB;QAAEsH,KAAKrG;IAAkB;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,8EAA8E;IAC9EjB,uBAAuB,4BAA4B;QACjDsH,KAAK,OAAOC,UACV,AAAC,CAAA,MAAM,MAAM,CAAC,8BAA0B,EAAGO,qBAAqB,CAACP;IACrE;IACA,uEAAuE;IACvE,uEAAuE;IACvEvH,uBAAuB,kCAAkCwD;IACzD,2EAA2E;IAC3E,4EAA4E;IAC5E,wEAAwE;IACxE,uEAAuE;IACvExD,uBACE,6BACAwC;IAEFxC,uBAAuB,2BAA2ByC;IAClDzC,uBAAuB,wBAAwBgE;IAC/ChE,uBAAuB,sBAAsBmE;IAC7C,wEAAwE;IACxE,4EAA4E;IAC5E,yEAAyE;IACzE,8EAA8E;IAC9E,0EAA0E;IAC1E,oEAAoE;IACpEnE,uBAAuB,qBAAqBoE;IAC5CpE,uBACE,iDACA;QACEsH,KAAK,OAAOC,SAASQ,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,2BAAuB,EAAGC,cAAc,CAACT,SAASQ;IACpE,GACA;QAAEE,SAAS;IAAK;IAElBjI,uBACE,iDACA;QACEsH,KAAK,OAAOC,SAASQ,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,2BAAuB,EAAGG,2BAA2B,CAACX,SAASQ;IACjF,GACA;QAAEE,SAAS;IAAK;IAElB,wEAAwE;IACxE,qEAAqE;IACrE,wEAAwE;IACxE,oDAAoD;IACpDjI,uBAAuB,wBAAwBqE;IAC/CrE,uBAAuB,wBAAwBsE;IAC/CtE,uBAAuB,wBAAwBwE;IAC/C,0EAA0E;IAC1E,yEAAyE;IACzE,oEAAoE;IACpExE,uBAAuB,sBAAsByE;IAC7C,kEAAkE;IAClEC;IACA,0EAA0E;IAC1E,4EAA4E;IAC5E,iDAAiD;IACjD1E,uBAAuB,6BAA6B,OAAOmH,KAAKC,MAC9D,AAAC,CAAA,MAAM,MAAM,CAAC,+BAA2B,EAAGe,qBAAqB,CAAChB,KAAKC;IAEzE,4EAA4E;IAC5E,2EAA2E;IAC3E,QAAQ;IACRpH,uBAAuB,0CAA0CuE;IACjEvE,uBAAuB,8BAA8B2E;IACrD3E,uBAAuB,4BAA4B6E;IACnD7E,uBAAuB,mBAAmBgF;IAC1C,qEAAqE;IACrE,2DAA2D;IAC3DhF,uBAAuB,oBAAoBmF;IAC3C,yEAAyE;IACzE,kDAAkD;IAClDnF,uBAAuB,2BAA2BiF;IAClDjF,uBAAuB,4BAA4BqF;IACnD,qEAAqE;IACrE,kCAAkC;IAClCrF,uBAAuB,oCAAoC,OAAOmH,KAAKC,MACrE,AAAC,CAAA,MAAM,MAAM,CAAC,sCAAkC,EAAGgB,4BAA4B,CAACjB,KAAKC;IAEvF,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtEpH,uBACE,gCACA;QACEsH,KAAK,OAAOC,SAASQ,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,0BAAsB,EAAGM,gBAAgB,CAACd,SAASQ;IACrE,GACA;QAAEE,SAAS;IAAK;IAElB,2EAA2E;IAC3E,uEAAuE;IACvE,2EAA2E;IAC3E,oEAAoE;IACpEjI,uBACE,iCACA;QACEsH,KAAK,OAAOC,SAASQ,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,2BAAuB,EAAGO,iBAAiB,CAACf,SAASQ;IACvE,GACA;QAAEE,SAAS;IAAK;IAElB,uEAAuE;IACvE,mCAAmC;IACnCjI,uBAAuB,gCAAgC,OAAOmH,KAAKC,MACjE,AAAC,CAAA,MAAM,MAAM,CAAC,kCAA8B,EAAGmB,yBAAyB,CAACpB,KAAKC;IAEhF,qEAAqE;IACrE,yEAAyE;IACzE,uDAAuD;IACvD/F,2BAA2B,IAAMd,cAAciI,GAAG,GAAGC,SAAS;AAChE;AAEA,6DAA6D;AAC7D,SAASC,iBAAiB,QAAQ,uBAAmB;AAErD,mEAAmE;AACnE,yDAAyD;AACzD,cAAc,yBAAqB"}
+{"version":3,"sources":["../../../../../../libs/plugins/commerce/src/lib/server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n\n/**\n * Server half of the commerce plugin (AGL-396): the site-facing storefront\n * API handlers, registered with the plugin API registry and served by the\n * tenant dispatcher at their unchanged `/api/commerce/*` URLs. This module\n * pulls in firebase-admin + Stripe, so it is NOT re-exported from the client\n * barrel — apps import `@aglyn/plugins-commerce/server` only from their\n * (server-only) API dispatcher registration.\n */\n\nimport {\n  registerBillingWebhookHandler,\n  registerPluginApiRoute,\n  registerPluginJob,\n  registerSitePageEnricher,\n  registerSitePageResolver,\n  registerPluginPermissions,\n  registerPluginConfigSchema,\n} from '@aglyn/aglyn/server'\nimport { isEmailConfigured } from '@aglyn/shared-util-email'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { registerCommerceMediaPublishGuard } from './server/media-publish-guard'\nimport { registerCommerceRecurringCharges } from './server/recurring-charges'\nimport { registerProductCardReader } from './server/product-card'\nimport { registerProductAiCapability } from './server/product-ai-capability'\nimport { registerProductDraftWriter } from './server/product-drafts'\nimport { registerCommerceTaxProfile } from './server/tax-profile'\nimport { registerTaxReturnSource } from '@aglyn/aglyn/plugin-manager/plugin-tax-return-sources'\nimport { commerceTaxReturnSource } from './server/tax-return-source'\nimport { taxSummaryHandler } from './server/tax-summary'\nimport { registerRevenueSource } from '@aglyn/aglyn/plugin-manager/plugin-revenue-sources'\nimport { commerceRevenueSource } from './server/revenue-source'\nimport { commerceBillingWebhookHandler } from './server/billing-webhook'\nimport { registerOrderFigureReaders } from './server/order-figures'\nimport { COMMERCE_PERMISSIONS } from './model/plugin-permissions'\nimport { COMMERCE_CONFIG_SCHEMA } from './plugin-config'\nimport { commerceSitePageEnricher } from './server/site-page-enricher'\nimport { commerceSitePageResolver } from './server/site-page-resolver'\nimport { cartCheckoutHandler } from './server/cart-checkout'\nimport { cartHandler } from './server/cart'\nimport { cartExtrasHandler } from './server/checkout-extras'\nimport { catalogHandler } from './server/catalog'\nimport { checkoutHandler } from './server/checkout'\nimport { downloadHandler } from './server/download'\nimport { newsletterHandler } from './server/newsletter'\nimport { notifyRestockHandler } from './server/notify-restock'\nimport { productHandler } from './server/product'\nimport { relatedHandler } from './server/related'\nimport { reservationAvailabilityHandler } from './server/reservation-availability'\nimport { gateHandler } from './server/gate'\nimport { memberFeedHandler } from './server/member-feed'\nimport { membershipAccountHandler } from './server/membership-account'\nimport { membershipAdminPasswordHandler } from './server/membership-admin-password'\nimport { membershipAdminRemoveHandler } from './server/membership-admin-remove'\nimport { membershipContentHandler } from './server/membership-content'\nimport { membershipLoginHandler } from './server/membership-login'\nimport { membershipLogoutHandler } from './server/membership-logout'\nimport { membershipRecoverHandler } from './server/membership-recover'\nimport { membershipRegisterHandler } from './server/membership-register'\nimport { membershipResetHandler } from './server/membership-reset'\nimport { membershipWishlistHandler } from './server/membership-wishlist'\nimport { reserveHandler } from './server/reserve'\nimport { streamHandler } from './server/stream'\nimport { subscriptionPortalHandler } from './server/subscription-portal'\nimport { reviewsHandler } from './server/reviews'\nimport { connectHandler } from './server/connect'\nimport { cancelOrderHandler } from './server/cancel-order'\nimport { carrierRatesAvailabilityHandler } from './server/carrier-rates-availability'\nimport { collectionMembershipHandler } from './server/collection-membership'\nimport { draftOrderHandler } from './server/draft-order'\nimport { fulfillOrderHandler } from './server/fulfill-order'\nimport { orderReceiptSendHandler } from './server/order-receipt-send'\nimport { orderStatusHandler, registerOrderStatusActions } from './server/order-status'\nimport { returnRequestStatusAction } from './server/return-status-action'\nimport { giftCardsHandler } from './server/gift-cards'\nimport { memberPostHandler } from './server/member-post'\nimport { orderAnalyticsHandler } from './server/order-analytics'\nimport { checkoutStatusHandler } from './server/checkout-status'\nimport { posOrderHandler } from './server/pos-order'\nimport { printersHandler } from './server/printers'\nimport { posPaymentHandler } from './server/pos-payment'\nimport { posReadersHandler } from './server/pos-readers'\nimport { posTerminalConnectionTokenHandler } from './server/pos-terminal-connection-token'\nimport { posDisplayHandler } from './server/pos-display'\nimport { posKioskHandler } from './server/pos-kiosk'\nimport { registerPosOpsRoutes } from './server/pos-ops-routes'\nimport {\n  processAbandonedHandler,\n  scanAbandonedCheckouts,\n} from './server/process-abandoned'\nimport { processRestockHandler, scanRestockAlerts } from './server/process-restock'\nimport { scanStockDecrements } from './server/reconcile-stock'\nimport { refundHandler } from './server/refund'\nimport { orderWebhooksHandler } from './server/order-webhooks'\nimport { returnRequestHandler, returnsHandler } from './server/returns'\nimport { scanSupplierDeliveries } from './server/supplier-outbox'\nimport { supplierUpdateHandler } from './server/supplier-update'\n\n/**\n * The two commerce beats (AGL-2227).\n *\n * `commerce/process-abandoned` and `commerce/process-restock` have existed\n * since AGL-323/326 as `x-cron-secret` HTTP doors, and `registerCommerceConsoleApi`\n * below has called them \"the scheduler-driven jobs\" in a comment that whole\n * time. **Nothing scheduled them.** Not `scheduled-crons.yml` (its table names\n * 11 paths; neither of these), not `vercel.json` (no `crons` key at all), not\n * `registerPluginJob` — the only two registrations in the repo were scheduled\n * publishing and the bookings hold-expiry.\n *\n * The cost was a Pro-tier entitlement (`abandonedCart`) that had never sent an\n * email, and a storefront \"notify me when it's back\" form writing into a queue\n * with no drain. AGL-1793 had already added the collection-group indexes these\n * two scans need, which is the clearest evidence they were always meant to run.\n *\n * Module scope, like the bookings job beside it: the runner route reaches jobs\n * through `ensureAll(['tenantApi'])`, and a registration inside a `register*`\n * function would depend on which entry point happened to be loaded.\n *\n * 15 minutes, not 1: `process-abandoned` will not remind a checkout younger\n * than an hour and `process-restock` only mails alerts whose product already\n * has stock, so a tighter beat buys nothing and costs two collection-group\n * scans a minute. Both are bounded (200 docs) and idempotent — each pass\n * stamps what it sent — so an overlapping or repeated beat cannot double-send.\n */\nconst RECOVERY_JOB_INTERVAL_MINUTES = 15\n\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'abandoned-checkout-recovery',\n  intervalMinutes: RECOVERY_JOB_INTERVAL_MINUTES,\n  description:\n    'Email one recovery reminder per stalled checkout (abandonedCart plans).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    // Quietly, not as an error: email is optional per deployment, and a beat\n    // that logs every minute on a self-host without Resend buries everything\n    // else in the log.\n    if (!isEmailConfigured()) return\n    const { sent } = await scanAbandonedCheckouts(gate)\n    if (sent) console.info(`commerce: sent ${sent} abandoned-cart reminders`)\n  },\n})\n\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'back-in-stock-alerts',\n  intervalMinutes: RECOVERY_JOB_INTERVAL_MINUTES,\n  description: 'Email shoppers whose requested product is in stock again.',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    if (!isEmailConfigured()) return\n    const { sent } = await scanRestockAlerts(gate)\n    if (sent) console.info(`commerce: sent ${sent} back-in-stock alerts`)\n  },\n})\n\n/**\n * The missing-decrement detector (AGL-2358).\n *\n * HOURLY, not on the 15-minute recovery beat: it is a detector for a rare\n * process death, not a queue drain, and nothing it finds gets less true for\n * waiting an hour. The cost of the beat is what sets the interval — one\n * collection-group read of the platform's most recent orders, plus two\n * queries per host that has any — and an hour keeps that off the same tick as\n * the two scans above.\n *\n * NOT gated on `isEmailConfigured()`, unlike its two neighbours. Those send\n * mail; this writes a console notification and a log line, both of which work\n * on a self-host with no mail provider at all — and a stock count that is\n * silently wrong is exactly what a self-hoster least wants suppressed by a\n * setting about email.\n */\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'stock-decrement-reconciliation',\n  intervalMinutes: 60,\n  description:\n    'Report paid orders whose stock decrement never landed (AGL-2358).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    const scan = await scanStockDecrements(gate)\n    if (scan.missingLines || scan.truncatedHosts) {\n      console.warn(\n        `commerce: ${scan.missingLines} order lines across ${scan.hosts} ` +\n          `sites have no sale ledger row (${scan.reportedOrders} newly ` +\n          `reported, ${scan.truncatedHosts} sites' ledger window truncated)`,\n      )\n    }\n  },\n})\n\n/**\n * The dropship supplier outbox drain (AGL-2473).\n *\n * EVERY MINUTE, unlike the three above, and the interval is the point rather\n * than an oversight. This is the only one of the four that a BUYER is waiting\n * on: the row it drains is a paid order that has not been routed to whoever\n * ships it, and every minute it sits is a minute the parcel is not moving. The\n * first backoff step is also 60s, so a supplier that blipped is retried on the\n * next tick.\n *\n * The cost that set fifteen minutes for the recovery pair does not apply. Those\n * are collection-GROUP scans across every site on the platform; this is one\n * ordinary equality query against a top-level collection that is EMPTY in the\n * ordinary case — an empty result bills a single read, so the whole beat is\n * ~1,440 reads a day whether or not anyone is dropshipping.\n *\n * Not gated on `isEmailConfigured()`. The supplier notification is an HTTP POST\n * to the merchant's own supplier, and a self-host with no mail provider still\n * has dropship orders to route.\n */\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'supplier-webhook-delivery',\n  intervalMinutes: 1,\n  description:\n    'Deliver queued dropship supplier notifications, with backoff and a ' +\n    'dead letter that tells the merchant (AGL-2473).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    const scan = await scanSupplierDeliveries(gate)\n    if (scan.deadLettered) {\n      console.warn(\n        `commerce: ${scan.deadLettered} dropship orders could not be routed ` +\n          `to their supplier and have been reported on the order`,\n      )\n    }\n  },\n})\n\n/**\n * Stripe payment method domains for every connected custom domain (AGL-3629).\n *\n * The backfill for domains connected before registration existed, and the\n * repair for a connect whose event was lost, in one daily pass. A domain\n * already registered costs a document read and no Stripe call, so the beat is\n * cheap; a day's delay costs only the Apple Pay button on a domain connected\n * while Stripe was unreachable, and the first in-page checkout there registers\n * it anyway.\n */\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'payment-method-domains',\n  intervalMinutes: 24 * 60,\n  description:\n    'Register connected custom domains with Stripe so Apple Pay, Google Pay ' +\n    'and Link show on them (AGL-3629).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    if (!process.env.STRIPE_SECRET_KEY) return\n    const { reconcileCustomDomains } = await import('./server/payment-method-domains')\n    const result = await reconcileCustomDomains(gate)\n    if (result.registered || result.failed) {\n      console.info(\n        `commerce: payment method domains — ${result.registered} registered, ` +\n          `${result.failed} failed across ${result.hosts} sites`,\n      )\n    }\n  },\n})\n\n/**\n * A visitor's payment door: it opens a Stripe Checkout Session for whoever\n * calls it, so the dispatcher holds it to the card-testing counters\n * (AGL-3363). Declared here, beside the registration, so the door cannot\n * exist without it.\n */\nconst CARD_PAYMENT_DOOR = { cardPayment: true } as const\n\n/** Registers the commerce plugin's storefront API routes. */\nexport function registerCommerceApi(): void {\n  registerProductCardReader()\n  // The merchant's tax rule, for every plugin that prices a charge here.\n  registerCommerceTaxProfile()\n  registerPluginPermissions(COMMERCE_PERMISSIONS)\n  // Merchant-settable register discount ceiling (AGL-2161). Registered on\n  // BOTH surfaces, like the permissions above: the POS route reads it\n  // server-side, and the settings card renders it from the same schema.\n  registerPluginConfigSchema(COMMERCE_CONFIG_SCHEMA)\n  // PDP/PLP template pages (AGL-418): /products/* + /collections/*.\n  registerSitePageResolver(commerceSitePageResolver)\n  // Seeds product grids on ordinary screens (AGL-659) — the resolver above\n  // only covers /products/* and /collections/*, so /products itself, and any\n  // designed page with a grid on it, needed this to render server-side.\n  registerSitePageEnricher(commerceSitePageEnricher)\n  registerPluginApiRoute('commerce/cart-checkout', cartCheckoutHandler, CARD_PAYMENT_DOOR)\n  registerPluginApiRoute('commerce/cart', cartHandler)\n  // What the cart offers besides shipping (AGL-3624): pickup locations, and\n  // local delivery's fee, minimum and windows for a postal code.\n  registerPluginApiRoute('commerce/local-fulfillment-options', async (req, res) =>\n    (await import('./server/local-fulfillment')).localFulfillmentOptionsHandler(req, res),\n  )\n  // Optional lines another plugin offers at the cart (AGL-3635).\n  registerPluginApiRoute('commerce/cart-extras', cartExtrasHandler)\n  registerPluginApiRoute('commerce/catalog', catalogHandler)\n  registerPluginApiRoute('commerce/checkout', checkoutHandler, CARD_PAYMENT_DOOR)\n  registerPluginApiRoute('commerce/download', downloadHandler)\n  // The pre-channels Google feed address (AGL-299), now written by the\n  // catalog's feed publisher (AGL-3637); the module loads with a fetch.\n  registerPluginApiRoute('commerce/feed', {\n    web: async (request) => (await import('./server/legacy-feed')).legacyFeedRoute(request),\n  })\n  registerPluginApiRoute('commerce/newsletter', newsletterHandler)\n  registerPluginApiRoute('commerce/notify-restock', notifyRestockHandler)\n  // GA-safe order projection for the storefront `purchase` (AGL-1641).\n  registerPluginApiRoute('commerce/order-analytics', orderAnalyticsHandler)\n  // The guest order-status page's data (AGL-3610), behind the signed link in\n  // every buyer email — a recipient link, so it outlives the site's gates.\n  registerPluginApiRoute('commerce/order-status', orderStatusHandler, { recipientLink: true })\n  // …and its \"Request a return\" button (AGL-3611), on an order that can\n  // still send something back.\n  registerOrderStatusActions(returnRequestStatusAction)\n  // What became of a session the shopper was returned from (AGL-3606).\n  registerPluginApiRoute('commerce/checkout-status', checkoutStatusHandler)\n  registerPluginApiRoute('commerce/product', productHandler)\n  registerPluginApiRoute('commerce/related', relatedHandler)\n  registerPluginApiRoute('commerce/reservation-availability', reservationAvailabilityHandler)\n  registerPluginApiRoute('commerce/reserve', reserveHandler, CARD_PAYMENT_DOOR)\n  registerPluginApiRoute('commerce/gate', gateHandler)\n  registerPluginApiRoute('commerce/member-feed', memberFeedHandler)\n  registerPluginApiRoute('commerce/stream', streamHandler)\n  registerPluginApiRoute('commerce/subscription-portal', subscriptionPortalHandler)\n  registerPluginApiRoute('commerce/reviews', reviewsHandler)\n  // A buyer's return request (AGL-3611), from their account or the signed\n  // order-status link.\n  registerPluginApiRoute('commerce/return-request', returnRequestHandler)\n  registerPluginApiRoute('membership/account', membershipAccountHandler)\n  registerPluginApiRoute('membership/content', membershipContentHandler)\n  registerPluginApiRoute('membership/login', membershipLoginHandler)\n  registerPluginApiRoute('membership/logout', membershipLogoutHandler)\n  // Password recovery pair (AGL-552): request + complete.\n  registerPluginApiRoute('membership/recover', membershipRecoverHandler)\n  registerPluginApiRoute('membership/register', membershipRegisterHandler)\n  registerPluginApiRoute('membership/reset', membershipResetHandler)\n  registerPluginApiRoute('membership/wishlist', membershipWishlistHandler)\n}\n\n/**\n * Registers the commerce plugin's console-side API routes (AGL-396):\n * merchant/staff operations (Connect onboarding, refunds, draft & POS\n * orders, member posts), the supplier tracking callback, and the HTTP doors\n * for the abandoned-cart / restock passes.\n *\n * Those last two are NOT what schedules them — the `registerPluginJob` calls\n * above are (AGL-2227). This comment used to call them \"the scheduler-driven\n * jobs\", which is how they stayed dark for months: it asserted the wiring\n * instead of having it.\n */\nexport function registerCommerceConsoleApi(): void {\n  // The register's gate (`managePos`) is resolved on THIS surface: every POS\n  // route below runs in the console, and a key no surface registered here is\n  // absent from the resolved map, which reads as refused — the site's own\n  // owner was answered 403 at the register.\n  registerPluginPermissions(COMMERCE_PERMISSIONS)\n  // What a product looks like to a surface that is not this plugin's — a\n  // campaign email that features one asks here rather than importing the model.\n  registerProductCardReader()\n  // …and a draft product another plugin asks for by name (AGL-3616): an AI\n  // build setting a store up from a brief, unpriced unless the brief priced it.\n  // The console runs AI jobs (AGL-3026).\n  registerProductDraftWriter()\n  // …and the operation an AI build plans for it, which that writer executes.\n  registerProductAiCapability()\n  // …and why a file somebody is SELLING may not be made public (AGL-3080).\n  // The media library asks before it hands an asset its permanent CDN URL\n  // back; what a product is, and which of its fields hold paid media, is\n  // this plugin's to know.\n  registerCommerceMediaPublishGuard()\n  // …and which memberships a site sells, for a security lockdown to pause\n  // (AGL-3364). The lockdown route runs on this surface.\n  registerCommerceRecurringCharges()\n  // …and the tax rule, for the webhook that confirms what they charged.\n  registerCommerceTaxProfile()\n  // …and its sales on the operator's own sales tax return (AGL-3080): the\n  // tax a storefront checkout collected under the platform's registrations.\n  // The staff return awaits this surface before it asks, and refuses to be\n  // filed without this source — commerce declares `taxReturnSource`.\n  registerTaxReturnSource(commerceTaxReturnSource, { pluginId: BUNDLE_ID })\n  // …and the take its orders earn the operator, on the staff revenue report\n  // (AGL-3080) — commerce declares `revenueSource`, so the report names this\n  // source as unread rather than counting it as zero if it is missing.\n  registerRevenueSource(commerceRevenueSource, { pluginId: BUNDLE_ID })\n  // Stripe webhook sections (AGL-418): orders/carts/drafts/reservations/\n  // subscriptions ride the platform webhook via the hook registry.\n  registerBillingWebhookHandler(commerceBillingWebhookHandler)\n  // Cancel + stock release in one transaction (AGL-1808). Server-side because\n  // the release depends on the transition rule, and a client write could not\n  // re-ask it under the same lock that flips the status.\n  registerPluginApiRoute('commerce/cancel-order', cancelOrderHandler)\n  // Whether live carrier rates can be offered on this site (AGL-3612).\n  registerPluginApiRoute('commerce/shipping/carrier-rates', carrierRatesAvailabilityHandler)\n  registerPluginApiRoute('commerce/connect', connectHandler)\n  registerPluginApiRoute('commerce/draft-order', draftOrderHandler)\n  // Fulfil + mark-delivered with the transition re-asked under the write\n  // (AGL-1819) — the same stale-dialog hole cancel-order closes, minus the\n  // stock release those two transitions never had. The customer REST API's\n  // `PATCH /v1/sites/{id}/orders/{id}` records a shipment through the same\n  // transaction (`server/api-v1/orders-and-products.ts`).\n  registerPluginApiRoute('commerce/fulfill-order', fulfillOrderHandler)\n  // Pickup and local delivery steps (AGL-3624) — ready, picked up, out for\n  // delivery, delivered — from the console queue, the order dialog and the\n  // native Aglyn app. Loaded on first call.\n  registerPluginApiRoute('commerce/local-fulfillment', async (req, res) =>\n    (await import('./server/local-fulfillment-status')).localFulfillmentHandler(req, res),\n  )\n  // \"Resend receipt\" from the order dialog (AGL-3610): by email, or by text\n  // when the platform's SMS provider is configured. Rate-limited per member\n  // and per order.\n  registerPluginApiRoute('commerce/order-receipt-send', orderReceiptSendHandler)\n  // The product editor's save and Adjust stock for the native apps (AGL-3652):\n  // the console's own product-write computation under the rules' gate. Loaded\n  // on first call.\n  registerPluginApiRoute('commerce/products/save', async (req, res) =>\n    (await import('./server/products-write')).productSaveHandler(req, res),\n  )\n  registerPluginApiRoute('commerce/products/stock', async (req, res) =>\n    (await import('./server/products-write')).productStockHandler(req, res),\n  )\n  // The order dialog's note and restock answer for the native apps\n  // (AGL-3651, AGL-3652): the console's own timeline computation, in one\n  // transaction on the stored order. Loaded on first call.\n  registerPluginApiRoute('commerce/order-note', async (req, res) =>\n    (await import('./server/order-annotations')).orderNoteHandler(req, res),\n  )\n  registerPluginApiRoute('commerce/order-restock-answer', async (req, res) =>\n    (await import('./server/order-annotations')).orderRestockAnswerHandler(req, res),\n  )\n  // Issue / void store credit (AGL-2226). Server-side because the host\n  // catch-all in the Firestore rules would otherwise let a client write\n  // its own `balanceCents`, which checkout applies as amount-off.\n  registerPluginApiRoute('commerce/gift-cards', giftCardsHandler)\n  // The merchant's own storefront sales tax, by who owes it (AGL-2440): the\n  // same rows and classifier the operator's return reads, fenced to one site.\n  registerPluginApiRoute('commerce/tax-summary', { web: taxSummaryHandler })\n  // The payment methods card (AGL-3629): toggles, the platform's offer, the\n  // payout account's capabilities and the site's wallet domains. Loaded with\n  // the first request, so a console that never opens Settings never imports it.\n  registerPluginApiRoute('commerce/payment-methods', {\n    web: async (request) =>\n      (await import('./server/payment-methods')).paymentMethodsHandler(request),\n  })\n  // A smart collection's rules changed or it was deleted: re-stamp which\n  // products it holds (AGL-3321), the membership the storefront queries.\n  registerPluginApiRoute('commerce/collection-membership', collectionMembershipHandler)\n  // A site member's password help (AGL-914) and removal (AGL-3308), from the\n  // Users page drawer and the Inbox. Console-auth, not the visitor cookie the\n  // storefront's `membership/*` routes take, so they are served where the\n  // console posts: the console's own dispatcher loads this surface only.\n  registerPluginApiRoute(\n    'membership/admin-password',\n    membershipAdminPasswordHandler,\n  )\n  registerPluginApiRoute('membership/admin-remove', membershipAdminRemoveHandler)\n  registerPluginApiRoute('commerce/member-post', memberPostHandler)\n  registerPluginApiRoute('commerce/pos-order', posOrderHandler)\n  // A register's cloud receipt printers and the jobs a manager sends them\n  // (AGL-3619), and the two doors the printers themselves poll. The doors are\n  // MACHINE routes: a printer is no member and names no site cookie, so it\n  // authenticates with the per-printer secret in its URL and its own device id,\n  // and the route asks the plan before it hands over a job. Loaded with the\n  // first poll, so a console that has no printers never imports them.\n  registerPluginApiRoute('commerce/printers', printersHandler)\n  registerPluginApiRoute(\n    'commerce/cloudprnt/:hostId/:printerId/:secret',\n    {\n      web: async (request, context) =>\n        (await import('./server/printer-poll')).cloudPrntRoute(request, context),\n    },\n    { machine: true },\n  )\n  registerPluginApiRoute(\n    'commerce/epson-sdp/:hostId/:printerId/:secret',\n    {\n      web: async (request, context) =>\n        (await import('./server/printer-poll')).epsonServerDirectPrintRoute(request, context),\n    },\n    { machine: true },\n  )\n  // The register's tenders against an open sale, its Stripe Terminal card\n  // readers, and the paired customer display (AGL-3607, AGL-3608). The\n  // display's `pair`/`poll`/`respond` take a display token and no console\n  // session; every other action is gated like a sale.\n  registerPluginApiRoute('commerce/pos-payment', posPaymentHandler)\n  registerPluginApiRoute('commerce/pos-readers', posReadersHandler)\n  registerPluginApiRoute('commerce/pos-display', posDisplayHandler)\n  // The self-service kiosk (AGL-3623): a register's paired screen where the\n  // customer orders and pays. Its device token, never a staff session; the\n  // register's queue of \"pay at counter\" orders is gated like a sale.\n  registerPluginApiRoute('commerce/pos-kiosk', posKioskHandler)\n  // Shifts, staff PINs, the customer lookup and returns (AGL-3609).\n  registerPosOpsRoutes()\n  // The offline register (AGL-3625): the kit a register caches to sell cash\n  // while the connection is down, and the sync that records those sales once.\n  // Gated like a sale; loaded with its first call.\n  registerPluginApiRoute('commerce/pos-offline-sync', async (req, res) =>\n    (await import('./server/pos-offline-sync')).posOfflineSyncHandler(req, res),\n  )\n  // The native Aglyn POS app's Stripe Terminal SDK: a connection token scoped\n  // to the site's Location, and the Location itself (AGL-3618). Gated like a\n  // sale.\n  registerPluginApiRoute('commerce/pos-terminal-connection-token', posTerminalConnectionTokenHandler)\n  registerPluginApiRoute('commerce/process-abandoned', processAbandonedHandler)\n  registerPluginApiRoute('commerce/process-restock', processRestockHandler)\n  registerPluginApiRoute('commerce/refund', refundHandler)\n  // Returns (AGL-3611): approve, decline, receive with restock, refund\n  // through the route above, a label from a shipping plugin.\n  registerPluginApiRoute('commerce/returns', returnsHandler)\n  // The merchant's outbound order webhooks (AGL-3611): endpoints, secrets,\n  // a test ping and a resend from the delivery log.\n  registerPluginApiRoute('commerce/order-webhooks', orderWebhooksHandler)\n  registerPluginApiRoute('commerce/supplier-update', supplierUpdateHandler)\n  // Stamps the open orders that predate the shipping fields, before an\n  // export for shipping (AGL-3613).\n  registerPluginApiRoute('commerce/orders-shipping-prepare', async (req, res) =>\n    (await import('./server/orders-shipping-prepare')).ordersShippingPrepareHandler(req, res),\n  )\n  // ShipStation's Custom Store endpoint (AGL-3613): ShipStation's servers\n  // pull the order feed and post shipments back with the site's own Basic\n  // credentials, so it is a MACHINE's route and asks the site's commerce,\n  // plan, release and lockdown gates itself once the credentials prove the\n  // site. Loaded on its first call, never with the console API surface.\n  registerPluginApiRoute(\n    'commerce/shipstation/:hostId',\n    {\n      web: async (request, context) =>\n        (await import('./server/shipstation')).shipStationRoute(request, context),\n    },\n    { machine: true },\n  )\n  // ShippingEasy's shipment callback (AGL-3633): ShippingEasy's servers post\n  // each label bought for an order this store sent them, signed with the\n  // merchant's own API secret, so it is a MACHINE's route like ShipStation's\n  // above and asks the same gates once the signature proves the site.\n  registerPluginApiRoute(\n    'commerce/shippingeasy/:hostId',\n    {\n      web: async (request, context) =>\n        (await import('./server/shippingeasy')).shippingEasyRoute(request, context),\n    },\n    { machine: true },\n  )\n  // The ShipStation and ShippingEasy cards' connect, show, new password,\n  // send open orders and disconnect.\n  registerPluginApiRoute('commerce/shipping-connectors', async (req, res) =>\n    (await import('./server/shipping-connectors')).shippingConnectorsHandler(req, res),\n  )\n  // The store's sales as figure tables (AGL-2915), for the AI plugin's\n  // insights to read by id rather than by reading orders. The console runs\n  // insight jobs, so the console surface registers them.\n  registerOrderFigureReaders(() => firebaseAdmin.app().firestore())\n}\n\n// Shared with the (still app-side) membership/account route.\nexport { mintDownloadToken } from './server/download'\n\n// Site-member session primitives, shared with the (still app-side)\n// membership/* routes until those migrate too (AGL-396).\nexport * from './server/membership'\n\n// Type-only (AGL-3080): the plugin's entitlement keys, declared by module\n// augmentation, for every program that loads this entry point.\nexport type { commercePlanEntitlements } from './plan-entitlements'\n"],"names":["registerBillingWebhookHandler","registerPluginApiRoute","registerPluginJob","registerSitePageEnricher","registerSitePageResolver","registerPluginPermissions","registerPluginConfigSchema","isEmailConfigured","firebaseAdmin","BUNDLE_ID","registerCommerceMediaPublishGuard","registerCommerceRecurringCharges","registerProductCardReader","registerProductAiCapability","registerProductDraftWriter","registerCommerceTaxProfile","registerTaxReturnSource","commerceTaxReturnSource","taxSummaryHandler","registerRevenueSource","commerceRevenueSource","commerceBillingWebhookHandler","registerOrderFigureReaders","COMMERCE_PERMISSIONS","COMMERCE_CONFIG_SCHEMA","commerceSitePageEnricher","commerceSitePageResolver","cartCheckoutHandler","cartHandler","cartExtrasHandler","catalogHandler","checkoutHandler","downloadHandler","newsletterHandler","notifyRestockHandler","productHandler","relatedHandler","reservationAvailabilityHandler","gateHandler","memberFeedHandler","membershipAccountHandler","membershipAdminPasswordHandler","membershipAdminRemoveHandler","membershipContentHandler","membershipLoginHandler","membershipLogoutHandler","membershipRecoverHandler","membershipRegisterHandler","membershipResetHandler","membershipWishlistHandler","reserveHandler","streamHandler","subscriptionPortalHandler","reviewsHandler","connectHandler","cancelOrderHandler","carrierRatesAvailabilityHandler","collectionMembershipHandler","draftOrderHandler","fulfillOrderHandler","orderReceiptSendHandler","orderStatusHandler","registerOrderStatusActions","returnRequestStatusAction","giftCardsHandler","memberPostHandler","orderAnalyticsHandler","checkoutStatusHandler","posOrderHandler","printersHandler","posPaymentHandler","posReadersHandler","posTerminalConnectionTokenHandler","posDisplayHandler","posKioskHandler","registerPosOpsRoutes","processAbandonedHandler","scanAbandonedCheckouts","processRestockHandler","scanRestockAlerts","scanStockDecrements","refundHandler","orderWebhooksHandler","returnRequestHandler","returnsHandler","scanSupplierDeliveries","supplierUpdateHandler","RECOVERY_JOB_INTERVAL_MINUTES","pluginId","name","intervalMinutes","description","lockdown","scope","handler","gate","sent","console","info","scan","missingLines","truncatedHosts","warn","hosts","reportedOrders","deadLettered","process","env","STRIPE_SECRET_KEY","reconcileCustomDomains","result","registered","failed","CARD_PAYMENT_DOOR","cardPayment","registerCommerceApi","req","res","localFulfillmentOptionsHandler","web","request","legacyFeedRoute","recipientLink","registerCommerceConsoleApi","localFulfillmentHandler","productSaveHandler","productStockHandler","orderNoteHandler","orderRestockAnswerHandler","paymentMethodsHandler","context","cloudPrntRoute","machine","epsonServerDirectPrintRoute","posOfflineSyncHandler","ordersShippingPrepareHandler","shipStationRoute","shippingEasyRoute","shippingConnectorsHandler","app","firestore","mintDownloadToken"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAGD;;;;;;;CAOC,GAED,SACEA,6BAA6B,EAC7BC,sBAAsB,EACtBC,iBAAiB,EACjBC,wBAAwB,EACxBC,wBAAwB,EACxBC,yBAAyB,EACzBC,0BAA0B,QACrB,sBAAqB;AAC5B,SAASC,iBAAiB,QAAQ,2BAA0B;AAC5D,SAASC,aAAa,QAAQ,2BAA0B;AACxD,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,iCAAiC,QAAQ,kCAA8B;AAChF,SAASC,gCAAgC,QAAQ,gCAA4B;AAC7E,SAASC,yBAAyB,QAAQ,2BAAuB;AACjE,SAASC,2BAA2B,QAAQ,oCAAgC;AAC5E,SAASC,0BAA0B,QAAQ,6BAAyB;AACpE,SAASC,0BAA0B,QAAQ,0BAAsB;AACjE,SAASC,uBAAuB,QAAQ,wDAAuD;AAC/F,SAASC,uBAAuB,QAAQ,gCAA4B;AACpE,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,qBAAqB,QAAQ,qDAAoD;AAC1F,SAASC,qBAAqB,QAAQ,6BAAyB;AAC/D,SAASC,6BAA6B,QAAQ,8BAA0B;AACxE,SAASC,0BAA0B,QAAQ,4BAAwB;AACnE,SAASC,oBAAoB,QAAQ,gCAA4B;AACjE,SAASC,sBAAsB,QAAQ,qBAAiB;AACxD,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,mBAAmB,QAAQ,4BAAwB;AAC5D,SAASC,WAAW,QAAQ,mBAAe;AAC3C,SAASC,iBAAiB,QAAQ,8BAA0B;AAC5D,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,eAAe,QAAQ,uBAAmB;AACnD,SAASC,eAAe,QAAQ,uBAAmB;AACnD,SAASC,iBAAiB,QAAQ,yBAAqB;AACvD,SAASC,oBAAoB,QAAQ,6BAAyB;AAC9D,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,8BAA8B,QAAQ,uCAAmC;AAClF,SAASC,WAAW,QAAQ,mBAAe;AAC3C,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,8BAA8B,QAAQ,wCAAoC;AACnF,SAASC,4BAA4B,QAAQ,sCAAkC;AAC/E,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,sBAAsB,QAAQ,+BAA2B;AAClE,SAASC,uBAAuB,QAAQ,gCAA4B;AACpE,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,yBAAyB,QAAQ,kCAA8B;AACxE,SAASC,sBAAsB,QAAQ,+BAA2B;AAClE,SAASC,yBAAyB,QAAQ,kCAA8B;AACxE,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,aAAa,QAAQ,qBAAiB;AAC/C,SAASC,yBAAyB,QAAQ,kCAA8B;AACxE,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,kBAAkB,QAAQ,2BAAuB;AAC1D,SAASC,+BAA+B,QAAQ,yCAAqC;AACrF,SAASC,2BAA2B,QAAQ,oCAAgC;AAC5E,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,mBAAmB,QAAQ,4BAAwB;AAC5D,SAASC,uBAAuB,QAAQ,iCAA6B;AACrE,SAASC,kBAAkB,EAAEC,0BAA0B,QAAQ,2BAAuB;AACtF,SAASC,yBAAyB,QAAQ,mCAA+B;AACzE,SAASC,gBAAgB,QAAQ,yBAAqB;AACtD,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,qBAAqB,QAAQ,8BAA0B;AAChE,SAASC,qBAAqB,QAAQ,8BAA0B;AAChE,SAASC,eAAe,QAAQ,wBAAoB;AACpD,SAASC,eAAe,QAAQ,uBAAmB;AACnD,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,iCAAiC,QAAQ,4CAAwC;AAC1F,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,eAAe,QAAQ,wBAAoB;AACpD,SAASC,oBAAoB,QAAQ,6BAAyB;AAC9D,SACEC,uBAAuB,EACvBC,sBAAsB,QACjB,gCAA4B;AACnC,SAASC,qBAAqB,EAAEC,iBAAiB,QAAQ,8BAA0B;AACnF,SAASC,mBAAmB,QAAQ,8BAA0B;AAC9D,SAASC,aAAa,QAAQ,qBAAiB;AAC/C,SAASC,oBAAoB,QAAQ,6BAAyB;AAC9D,SAASC,oBAAoB,EAAEC,cAAc,QAAQ,sBAAkB;AACvE,SAASC,sBAAsB,QAAQ,8BAA0B;AACjE,SAASC,qBAAqB,QAAQ,8BAA0B;AAEhE;;;;;;;;;;;;;;;;;;;;;;;;;CAyBC,GACD,MAAMC,gCAAgC;AAEtCrF,kBAAkB;IAChBsF,UAAU/E;IACVgF,MAAM;IACNC,iBAAiBH;IACjBI,aACE;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,yEAAyE;QACzE,yEAAyE;QACzE,mBAAmB;QACnB,IAAI,CAACxF,qBAAqB;QAC1B,MAAM,EAAEyF,IAAI,EAAE,GAAG,MAAMnB,uBAAuBkB;QAC9C,IAAIC,MAAMC,QAAQC,IAAI,CAAC,CAAC,eAAe,EAAEF,KAAK,yBAAyB,CAAC;IAC1E;AACF;AAEA9F,kBAAkB;IAChBsF,UAAU/E;IACVgF,MAAM;IACNC,iBAAiBH;IACjBI,aAAa;IACbC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,IAAI,CAACxF,qBAAqB;QAC1B,MAAM,EAAEyF,IAAI,EAAE,GAAG,MAAMjB,kBAAkBgB;QACzC,IAAIC,MAAMC,QAAQC,IAAI,CAAC,CAAC,eAAe,EAAEF,KAAK,qBAAqB,CAAC;IACtE;AACF;AAEA;;;;;;;;;;;;;;;CAeC,GACD9F,kBAAkB;IAChBsF,UAAU/E;IACVgF,MAAM;IACNC,iBAAiB;IACjBC,aACE;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,MAAMI,OAAO,MAAMnB,oBAAoBe;QACvC,IAAII,KAAKC,YAAY,IAAID,KAAKE,cAAc,EAAE;YAC5CJ,QAAQK,IAAI,CACV,CAAC,UAAU,EAAEH,KAAKC,YAAY,CAAC,oBAAoB,EAAED,KAAKI,KAAK,CAAC,CAAC,CAAC,GAChE,CAAC,+BAA+B,EAAEJ,KAAKK,cAAc,CAAC,OAAO,CAAC,GAC9D,CAAC,UAAU,EAAEL,KAAKE,cAAc,CAAC,gCAAgC,CAAC;QAExE;IACF;AACF;AAEA;;;;;;;;;;;;;;;;;;;CAmBC,GACDnG,kBAAkB;IAChBsF,UAAU/E;IACVgF,MAAM;IACNC,iBAAiB;IACjBC,aACE,wEACA;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,MAAMI,OAAO,MAAMd,uBAAuBU;QAC1C,IAAII,KAAKM,YAAY,EAAE;YACrBR,QAAQK,IAAI,CACV,CAAC,UAAU,EAAEH,KAAKM,YAAY,CAAC,qCAAqC,CAAC,GACnE,CAAC,qDAAqD,CAAC;QAE7D;IACF;AACF;AAEA;;;;;;;;;CASC,GACDvG,kBAAkB;IAChBsF,UAAU/E;IACVgF,MAAM;IACNC,iBAAiB,KAAK;IACtBC,aACE,4EACA;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,IAAI,CAACW,QAAQC,GAAG,CAACC,iBAAiB,EAAE;QACpC,MAAM,EAAEC,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC;QAChD,MAAMC,SAAS,MAAMD,uBAAuBd;QAC5C,IAAIe,OAAOC,UAAU,IAAID,OAAOE,MAAM,EAAE;YACtCf,QAAQC,IAAI,CACV,CAAC,mCAAmC,EAAEY,OAAOC,UAAU,CAAC,aAAa,CAAC,GACpE,GAAGD,OAAOE,MAAM,CAAC,eAAe,EAAEF,OAAOP,KAAK,CAAC,MAAM,CAAC;QAE5D;IACF;AACF;AAEA;;;;;CAKC,GACD,MAAMU,oBAAoB;IAAEC,aAAa;AAAK;AAE9C,2DAA2D,GAC3D,OAAO,SAASC;IACdvG;IACA,uEAAuE;IACvEG;IACAV,0BAA0BkB;IAC1B,wEAAwE;IACxE,oEAAoE;IACpE,sEAAsE;IACtEjB,2BAA2BkB;IAC3B,kEAAkE;IAClEpB,yBAAyBsB;IACzB,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtEvB,yBAAyBsB;IACzBxB,uBAAuB,0BAA0B0B,qBAAqBsF;IACtEhH,uBAAuB,iBAAiB2B;IACxC,0EAA0E;IAC1E,+DAA+D;IAC/D3B,uBAAuB,sCAAsC,OAAOmH,KAAKC,MACvE,AAAC,CAAA,MAAM,MAAM,CAAC,gCAA4B,EAAGC,8BAA8B,CAACF,KAAKC;IAEnF,+DAA+D;IAC/DpH,uBAAuB,wBAAwB4B;IAC/C5B,uBAAuB,oBAAoB6B;IAC3C7B,uBAAuB,qBAAqB8B,iBAAiBkF;IAC7DhH,uBAAuB,qBAAqB+B;IAC5C,qEAAqE;IACrE,sEAAsE;IACtE/B,uBAAuB,iBAAiB;QACtCsH,KAAK,OAAOC,UAAY,AAAC,CAAA,MAAM,MAAM,CAAC,0BAAsB,EAAGC,eAAe,CAACD;IACjF;IACAvH,uBAAuB,uBAAuBgC;IAC9ChC,uBAAuB,2BAA2BiC;IAClD,qEAAqE;IACrEjC,uBAAuB,4BAA4BiE;IACnD,2EAA2E;IAC3E,yEAAyE;IACzEjE,uBAAuB,yBAAyB4D,oBAAoB;QAAE6D,eAAe;IAAK;IAC1F,sEAAsE;IACtE,6BAA6B;IAC7B5D,2BAA2BC;IAC3B,qEAAqE;IACrE9D,uBAAuB,4BAA4BkE;IACnDlE,uBAAuB,oBAAoBkC;IAC3ClC,uBAAuB,oBAAoBmC;IAC3CnC,uBAAuB,qCAAqCoC;IAC5DpC,uBAAuB,oBAAoBiD,gBAAgB+D;IAC3DhH,uBAAuB,iBAAiBqC;IACxCrC,uBAAuB,wBAAwBsC;IAC/CtC,uBAAuB,mBAAmBkD;IAC1ClD,uBAAuB,gCAAgCmD;IACvDnD,uBAAuB,oBAAoBoD;IAC3C,wEAAwE;IACxE,qBAAqB;IACrBpD,uBAAuB,2BAA2BkF;IAClDlF,uBAAuB,sBAAsBuC;IAC7CvC,uBAAuB,sBAAsB0C;IAC7C1C,uBAAuB,oBAAoB2C;IAC3C3C,uBAAuB,qBAAqB4C;IAC5C,wDAAwD;IACxD5C,uBAAuB,sBAAsB6C;IAC7C7C,uBAAuB,uBAAuB8C;IAC9C9C,uBAAuB,oBAAoB+C;IAC3C/C,uBAAuB,uBAAuBgD;AAChD;AAEA;;;;;;;;;;CAUC,GACD,OAAO,SAAS0E;IACd,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,0CAA0C;IAC1CtH,0BAA0BkB;IAC1B,uEAAuE;IACvE,8EAA8E;IAC9EX;IACA,yEAAyE;IACzE,8EAA8E;IAC9E,uCAAuC;IACvCE;IACA,2EAA2E;IAC3ED;IACA,yEAAyE;IACzE,wEAAwE;IACxE,uEAAuE;IACvE,yBAAyB;IACzBH;IACA,wEAAwE;IACxE,uDAAuD;IACvDC;IACA,sEAAsE;IACtEI;IACA,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,mEAAmE;IACnEC,wBAAwBC,yBAAyB;QAAEuE,UAAU/E;IAAU;IACvE,0EAA0E;IAC1E,2EAA2E;IAC3E,qEAAqE;IACrEU,sBAAsBC,uBAAuB;QAAEoE,UAAU/E;IAAU;IACnE,uEAAuE;IACvE,iEAAiE;IACjET,8BAA8BqB;IAC9B,4EAA4E;IAC5E,2EAA2E;IAC3E,uDAAuD;IACvDpB,uBAAuB,yBAAyBsD;IAChD,qEAAqE;IACrEtD,uBAAuB,mCAAmCuD;IAC1DvD,uBAAuB,oBAAoBqD;IAC3CrD,uBAAuB,wBAAwByD;IAC/C,uEAAuE;IACvE,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,wDAAwD;IACxDzD,uBAAuB,0BAA0B0D;IACjD,yEAAyE;IACzE,yEAAyE;IACzE,0CAA0C;IAC1C1D,uBAAuB,8BAA8B,OAAOmH,KAAKC,MAC/D,AAAC,CAAA,MAAM,MAAM,CAAC,uCAAmC,EAAGO,uBAAuB,CAACR,KAAKC;IAEnF,0EAA0E;IAC1E,0EAA0E;IAC1E,iBAAiB;IACjBpH,uBAAuB,+BAA+B2D;IACtD,6EAA6E;IAC7E,4EAA4E;IAC5E,iBAAiB;IACjB3D,uBAAuB,0BAA0B,OAAOmH,KAAKC,MAC3D,AAAC,CAAA,MAAM,MAAM,CAAC,6BAAyB,EAAGQ,kBAAkB,CAACT,KAAKC;IAEpEpH,uBAAuB,2BAA2B,OAAOmH,KAAKC,MAC5D,AAAC,CAAA,MAAM,MAAM,CAAC,6BAAyB,EAAGS,mBAAmB,CAACV,KAAKC;IAErE,iEAAiE;IACjE,uEAAuE;IACvE,yDAAyD;IACzDpH,uBAAuB,uBAAuB,OAAOmH,KAAKC,MACxD,AAAC,CAAA,MAAM,MAAM,CAAC,gCAA4B,EAAGU,gBAAgB,CAACX,KAAKC;IAErEpH,uBAAuB,iCAAiC,OAAOmH,KAAKC,MAClE,AAAC,CAAA,MAAM,MAAM,CAAC,gCAA4B,EAAGW,yBAAyB,CAACZ,KAAKC;IAE9E,qEAAqE;IACrE,sEAAsE;IACtE,gEAAgE;IAChEpH,uBAAuB,uBAAuB+D;IAC9C,0EAA0E;IAC1E,4EAA4E;IAC5E/D,uBAAuB,wBAAwB;QAAEsH,KAAKrG;IAAkB;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,8EAA8E;IAC9EjB,uBAAuB,4BAA4B;QACjDsH,KAAK,OAAOC,UACV,AAAC,CAAA,MAAM,MAAM,CAAC,8BAA0B,EAAGS,qBAAqB,CAACT;IACrE;IACA,uEAAuE;IACvE,uEAAuE;IACvEvH,uBAAuB,kCAAkCwD;IACzD,2EAA2E;IAC3E,4EAA4E;IAC5E,wEAAwE;IACxE,uEAAuE;IACvExD,uBACE,6BACAwC;IAEFxC,uBAAuB,2BAA2ByC;IAClDzC,uBAAuB,wBAAwBgE;IAC/ChE,uBAAuB,sBAAsBmE;IAC7C,wEAAwE;IACxE,4EAA4E;IAC5E,yEAAyE;IACzE,8EAA8E;IAC9E,0EAA0E;IAC1E,oEAAoE;IACpEnE,uBAAuB,qBAAqBoE;IAC5CpE,uBACE,iDACA;QACEsH,KAAK,OAAOC,SAASU,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,2BAAuB,EAAGC,cAAc,CAACX,SAASU;IACpE,GACA;QAAEE,SAAS;IAAK;IAElBnI,uBACE,iDACA;QACEsH,KAAK,OAAOC,SAASU,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,2BAAuB,EAAGG,2BAA2B,CAACb,SAASU;IACjF,GACA;QAAEE,SAAS;IAAK;IAElB,wEAAwE;IACxE,qEAAqE;IACrE,wEAAwE;IACxE,oDAAoD;IACpDnI,uBAAuB,wBAAwBqE;IAC/CrE,uBAAuB,wBAAwBsE;IAC/CtE,uBAAuB,wBAAwBwE;IAC/C,0EAA0E;IAC1E,yEAAyE;IACzE,oEAAoE;IACpExE,uBAAuB,sBAAsByE;IAC7C,kEAAkE;IAClEC;IACA,0EAA0E;IAC1E,4EAA4E;IAC5E,iDAAiD;IACjD1E,uBAAuB,6BAA6B,OAAOmH,KAAKC,MAC9D,AAAC,CAAA,MAAM,MAAM,CAAC,+BAA2B,EAAGiB,qBAAqB,CAAClB,KAAKC;IAEzE,4EAA4E;IAC5E,2EAA2E;IAC3E,QAAQ;IACRpH,uBAAuB,0CAA0CuE;IACjEvE,uBAAuB,8BAA8B2E;IACrD3E,uBAAuB,4BAA4B6E;IACnD7E,uBAAuB,mBAAmBgF;IAC1C,qEAAqE;IACrE,2DAA2D;IAC3DhF,uBAAuB,oBAAoBmF;IAC3C,yEAAyE;IACzE,kDAAkD;IAClDnF,uBAAuB,2BAA2BiF;IAClDjF,uBAAuB,4BAA4BqF;IACnD,qEAAqE;IACrE,kCAAkC;IAClCrF,uBAAuB,oCAAoC,OAAOmH,KAAKC,MACrE,AAAC,CAAA,MAAM,MAAM,CAAC,sCAAkC,EAAGkB,4BAA4B,CAACnB,KAAKC;IAEvF,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtEpH,uBACE,gCACA;QACEsH,KAAK,OAAOC,SAASU,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,0BAAsB,EAAGM,gBAAgB,CAAChB,SAASU;IACrE,GACA;QAAEE,SAAS;IAAK;IAElB,2EAA2E;IAC3E,uEAAuE;IACvE,2EAA2E;IAC3E,oEAAoE;IACpEnI,uBACE,iCACA;QACEsH,KAAK,OAAOC,SAASU,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,2BAAuB,EAAGO,iBAAiB,CAACjB,SAASU;IACvE,GACA;QAAEE,SAAS;IAAK;IAElB,uEAAuE;IACvE,mCAAmC;IACnCnI,uBAAuB,gCAAgC,OAAOmH,KAAKC,MACjE,AAAC,CAAA,MAAM,MAAM,CAAC,kCAA8B,EAAGqB,yBAAyB,CAACtB,KAAKC;IAEhF,qEAAqE;IACrE,yEAAyE;IACzE,uDAAuD;IACvD/F,2BAA2B,IAAMd,cAAcmI,GAAG,GAAGC,SAAS;AAChE;AAEA,6DAA6D;AAC7D,SAASC,iBAAiB,QAAQ,uBAAmB;AAErD,mEAAmE;AACnE,yDAAyD;AACzD,cAAc,yBAAqB"}

package/src/lib/utils/use-storefront-purchase-event.js

@@ -13,7 +13,8 @@
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  * See the License for the specific language governing permissions and
  * limitations under the License.
- */ import { trackEvent } from "@aglyn/aglyn/app-utils/analytics-events";
+ */ import { merchantAdvertisingTagsResident } from "@aglyn/aglyn/app-utils/advertising-events";
+import { trackEvent } from "@aglyn/aglyn/app-utils/analytics-events";
 import { recordSiteJourneyStep } from "@aglyn/aglyn/app-utils/site-journey";
 import { useEffect } from "react";
 import { buildStorefrontPurchaseParams } from "../model/purchase-analytics.js";
@@ -122,8 +123,13 @@ const sleep = (ms)=>new Promise((resolve)=>setTimeout(resolve, ms));
             recordSiteJourneyStep('order');
             // `trackEvent` no-ops when `window.gtag` is absent and never queues, so
             // waiting for the tag IS the delivery mechanism here.
+            //
+            // A site's own advertising tags count as a destination too (AGL-3694):
+            // a store running a Meta, TikTok or Pinterest tag and no Google tag
+            // still reports its purchase, through the same call, which hands it to
+            // whichever of them the visitor's consent let load.
             for(let attempt = 0; attempt < GTAG_ATTEMPTS && active; attempt += 1){
-                if (typeof window.gtag === 'function') {
+                if (typeof window.gtag === 'function' || merchantAdvertisingTagsResident()) {
                     trackEvent('purchase', purchase);
                     markReported(sessionId);
                     return;

package/src/lib/utils/use-storefront-purchase-event.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/utils/use-storefront-purchase-event.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { trackEvent } from '@aglyn/aglyn/app-utils/analytics-events'\nimport { recordSiteJourneyStep } from '@aglyn/aglyn/app-utils/site-journey'\nimport { useEffect } from 'react'\nimport { buildStorefrontPurchaseParams } from '../model/purchase-analytics'\n\n/** How long to wait out the `checkout.session.completed` webhook. */\nconst MAX_ATTEMPTS = 8\nconst RETRY_MS = 1_500\n/** How long to wait for the consent-gated gtag script to exist. */\nconst GTAG_ATTEMPTS = 20\nconst GTAG_MS = 250\n\n/**\n * Once per browser session per order, across both mount points. `sessionStorage`\n * survives the reload; the in-memory set covers a page carrying BOTH a Cart and\n * a ProductDetail, which would otherwise race before either had written.\n */\nconst reported = new Set<string>()\nconst STORAGE_PREFIX = 'aglyn:purchase-reported:'\n\nfunction alreadyReported(sessionId: string): boolean {\n  if (reported.has(sessionId)) return true\n  try {\n    return window.sessionStorage.getItem(STORAGE_PREFIX + sessionId) === '1'\n  } catch {\n    // Private mode / storage disabled. GA4's own de-duplication on\n    // `transaction_id` is the real guarantee; this is only the cheap half.\n    return false\n  }\n}\n\nfunction markReported(sessionId: string): void {\n  reported.add(sessionId)\n  try {\n    window.sessionStorage.setItem(STORAGE_PREFIX + sessionId, '1')\n  } catch {\n    /* see above */\n  }\n}\n\nconst sleep = (ms: number) =>\n  new Promise<void>((resolve) => setTimeout(resolve, ms))\n\n/**\n * Report a completed storefront order to the MERCHANT's GA4 property\n * (AGL-1641).\n *\n * ## Why this exists at all\n *\n * The commerce plugin instrumented `view_item`, `add_to_cart` and\n * `begin_checkout` and then stopped. GA4's built-in ecommerce reports and the\n * shopping-behaviour funnel are all terminated by `purchase`, so without it a\n * merchant's property did not merely lack one number — it rendered an\n * authoritative-looking 0% conversion rate and zero revenue. The console's own\n * commerce analytics card meanwhile promised merchants that `purchase` already\n * mirrored into their Google Analytics.\n *\n * ## Client-side, deliberately — the opposite of the call made for OUR revenue\n *\n * Aglyn's own `purchase` is sent server-side over the Measurement Protocol,\n * because a lost hit there is lost revenue reporting on our books. This one is\n * client-side, and the reasoning inverts with the consequence: server-side\n * would require collecting, encrypting and supporting a per-host Measurement\n * Protocol API secret we have nowhere to store, to buy accuracy against\n * closed tabs and ad blockers that every storefront on the internet already\n * accepts. For a merchant's product analytics that is the industry norm; for\n * our revenue it would not have been.\n *\n * ## Where it fires\n *\n * On the page Stripe returns the shopper to, which is the page they left —\n * there is no order-confirmation surface on a tenant storefront. That is the\n * Cart for a cart checkout and the ProductDetail for a single-product buy,\n * which is exactly why both call this hook.\n *\n * ## The two waits\n *\n * The order is written by the webhook, which can land AFTER the shopper is\n * back, so the lookup retries. And `window.gtag` only exists once the visitor\n * has granted analytics consent and the consent-gated script has loaded\n * post-hydration, so the send waits for it — otherwise the event would be\n * built correctly and dropped on the floor. Both waits are bounded; an\n * ungranted visitor simply times out, which is the consent gate working.\n */\nexport function useStorefrontPurchaseEvent(\n  hostId: string,\n  /** `Aglyn.useSiteFetch()`. A GET, so preview mode passes it straight through. */\n  siteFetch: typeof fetch = fetch,\n): void {\n  useEffect(() => {\n    if (typeof window === 'undefined' || !hostId) return\n\n    const params = new URLSearchParams(window.location.search)\n    if (params.get('order') !== 'success') return\n    const sessionId = params.get('session_id') ?? ''\n    if (!sessionId || alreadyReported(sessionId)) return\n\n    let active = true\n    // Claimed up front so a sibling mount in the same document cannot start a\n    // second poll for the same order. Persisted only once the hit is sent.\n    reported.add(sessionId)\n\n    void (async () => {\n      let source: Parameters<typeof buildStorefrontPurchaseParams>[0] | null =\n        null\n      for (let attempt = 0; attempt < MAX_ATTEMPTS && active; attempt += 1) {\n        try {\n          const response = await siteFetch(\n            `/api/commerce/order-analytics?hostId=${encodeURIComponent(\n              hostId,\n            )}&sessionId=${encodeURIComponent(sessionId)}`,\n          )\n          if (response.ok) {\n            source = await response.json()\n            break\n          }\n          // 404 means the webhook has not written the order yet; anything\n          // else is terminal and retrying it would only add load.\n          if (response.status !== 404) return\n        } catch {\n          // Network blip — treated like the race and retried.\n        }\n        await sleep(RETRY_MS)\n      }\n      if (!active || !source) return\n\n      const purchase = buildStorefrontPurchaseParams(source)\n      if (!purchase) return\n      // A funnel step (AGL-3605), recorded before the wait for the tag: the\n      // journey has its own consent gate and does not need GA on the page.\n      recordSiteJourneyStep('order')\n\n      // `trackEvent` no-ops when `window.gtag` is absent and never queues, so\n      // waiting for the tag IS the delivery mechanism here.\n      for (let attempt = 0; attempt < GTAG_ATTEMPTS && active; attempt += 1) {\n        if (typeof (window as any).gtag === 'function') {\n          trackEvent('purchase', purchase)\n          markReported(sessionId)\n          return\n        }\n        await sleep(GTAG_MS)\n      }\n    })()\n\n    return () => {\n      active = false\n    }\n    // `siteFetch` is deliberately out of the dep list: it is a `useCallback`\n    // that changes identity on a preview toggle, and re-running this effect\n    // would restart a poll that has already claimed its session id.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [hostId])\n}\n"],"names":["trackEvent","recordSiteJourneyStep","useEffect","buildStorefrontPurchaseParams","MAX_ATTEMPTS","RETRY_MS","GTAG_ATTEMPTS","GTAG_MS","reported","Set","STORAGE_PREFIX","alreadyReported","sessionId","has","window","sessionStorage","getItem","markReported","add","setItem","sleep","ms","Promise","resolve","setTimeout","useStorefrontPurchaseEvent","hostId","siteFetch","fetch","params","URLSearchParams","location","search","get","active","source","attempt","response","encodeURIComponent","ok","json","status","purchase","gtag"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,UAAU,QAAQ,0CAAyC;AACpE,SAASC,qBAAqB,QAAQ,sCAAqC;AAC3E,SAASC,SAAS,QAAQ,QAAO;AACjC,SAASC,6BAA6B,QAAQ,iCAA6B;AAE3E,mEAAmE,GACnE,MAAMC,eAAe;AACrB,MAAMC,WAAW;AACjB,iEAAiE,GACjE,MAAMC,gBAAgB;AACtB,MAAMC,UAAU;AAEhB;;;;CAIC,GACD,MAAMC,WAAW,IAAIC;AACrB,MAAMC,iBAAiB;AAEvB,SAASC,gBAAgBC,SAAiB;IACxC,IAAIJ,SAASK,GAAG,CAACD,YAAY,OAAO;IACpC,IAAI;QACF,OAAOE,OAAOC,cAAc,CAACC,OAAO,CAACN,iBAAiBE,eAAe;IACvE,EAAE,eAAM;QACN,+DAA+D;QAC/D,uEAAuE;QACvE,OAAO;IACT;AACF;AAEA,SAASK,aAAaL,SAAiB;IACrCJ,SAASU,GAAG,CAACN;IACb,IAAI;QACFE,OAAOC,cAAc,CAACI,OAAO,CAACT,iBAAiBE,WAAW;IAC5D,EAAE,eAAM;IACN,aAAa,GACf;AACF;AAEA,MAAMQ,QAAQ,CAACC,KACb,IAAIC,QAAc,CAACC,UAAYC,WAAWD,SAASF;AAErD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwCC,GACD,OAAO,SAASI,2BACdC,MAAc,EACd,+EAA+E,GAC/EC,YAA0BC,KAAK;IAE/B1B,UAAU;YAKU2B;QAJlB,IAAI,OAAOf,WAAW,eAAe,CAACY,QAAQ;QAE9C,MAAMG,SAAS,IAAIC,gBAAgBhB,OAAOiB,QAAQ,CAACC,MAAM;QACzD,IAAIH,OAAOI,GAAG,CAAC,aAAa,WAAW;QACvC,MAAMrB,aAAYiB,cAAAA,OAAOI,GAAG,CAAC,yBAAXJ,cAA4B;QAC9C,IAAI,CAACjB,aAAaD,gBAAgBC,YAAY;QAE9C,IAAIsB,SAAS;QACb,0EAA0E;QAC1E,uEAAuE;QACvE1B,SAASU,GAAG,CAACN;QAEb,KAAK,AAAC,CAAA;YACJ,IAAIuB,SACF;YACF,IAAK,IAAIC,UAAU,GAAGA,UAAUhC,gBAAgB8B,QAAQE,WAAW,EAAG;gBACpE,IAAI;oBACF,MAAMC,WAAW,MAAMV,UACrB,CAAC,qCAAqC,EAAEW,mBACtCZ,QACA,WAAW,EAAEY,mBAAmB1B,YAAY;oBAEhD,IAAIyB,SAASE,EAAE,EAAE;wBACfJ,SAAS,MAAME,SAASG,IAAI;wBAC5B;oBACF;oBACA,gEAAgE;oBAChE,wDAAwD;oBACxD,IAAIH,SAASI,MAAM,KAAK,KAAK;gBAC/B,EAAE,eAAM;gBACN,oDAAoD;gBACtD;gBACA,MAAMrB,MAAMf;YACd;YACA,IAAI,CAAC6B,UAAU,CAACC,QAAQ;YAExB,MAAMO,WAAWvC,8BAA8BgC;YAC/C,IAAI,CAACO,UAAU;YACf,sEAAsE;YACtE,qEAAqE;YACrEzC,sBAAsB;YAEtB,wEAAwE;YACxE,sDAAsD;YACtD,IAAK,IAAImC,UAAU,GAAGA,UAAU9B,iBAAiB4B,QAAQE,WAAW,EAAG;gBACrE,IAAI,OAAO,AAACtB,OAAe6B,IAAI,KAAK,YAAY;oBAC9C3C,WAAW,YAAY0C;oBACvBzB,aAAaL;oBACb;gBACF;gBACA,MAAMQ,MAAMb;YACd;QACF,CAAA;QAEA,OAAO;YACL2B,SAAS;QACX;IACA,yEAAyE;IACzE,wEAAwE;IACxE,gEAAgE;IAChE,uDAAuD;IACzD,GAAG;QAACR;KAAO;AACb"}
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/utils/use-storefront-purchase-event.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { merchantAdvertisingTagsResident } from '@aglyn/aglyn/app-utils/advertising-events'\nimport { trackEvent } from '@aglyn/aglyn/app-utils/analytics-events'\nimport { recordSiteJourneyStep } from '@aglyn/aglyn/app-utils/site-journey'\nimport { useEffect } from 'react'\nimport { buildStorefrontPurchaseParams } from '../model/purchase-analytics'\n\n/** How long to wait out the `checkout.session.completed` webhook. */\nconst MAX_ATTEMPTS = 8\nconst RETRY_MS = 1_500\n/** How long to wait for the consent-gated gtag script to exist. */\nconst GTAG_ATTEMPTS = 20\nconst GTAG_MS = 250\n\n/**\n * Once per browser session per order, across both mount points. `sessionStorage`\n * survives the reload; the in-memory set covers a page carrying BOTH a Cart and\n * a ProductDetail, which would otherwise race before either had written.\n */\nconst reported = new Set<string>()\nconst STORAGE_PREFIX = 'aglyn:purchase-reported:'\n\nfunction alreadyReported(sessionId: string): boolean {\n  if (reported.has(sessionId)) return true\n  try {\n    return window.sessionStorage.getItem(STORAGE_PREFIX + sessionId) === '1'\n  } catch {\n    // Private mode / storage disabled. GA4's own de-duplication on\n    // `transaction_id` is the real guarantee; this is only the cheap half.\n    return false\n  }\n}\n\nfunction markReported(sessionId: string): void {\n  reported.add(sessionId)\n  try {\n    window.sessionStorage.setItem(STORAGE_PREFIX + sessionId, '1')\n  } catch {\n    /* see above */\n  }\n}\n\nconst sleep = (ms: number) =>\n  new Promise<void>((resolve) => setTimeout(resolve, ms))\n\n/**\n * Report a completed storefront order to the MERCHANT's GA4 property\n * (AGL-1641).\n *\n * ## Why this exists at all\n *\n * The commerce plugin instrumented `view_item`, `add_to_cart` and\n * `begin_checkout` and then stopped. GA4's built-in ecommerce reports and the\n * shopping-behaviour funnel are all terminated by `purchase`, so without it a\n * merchant's property did not merely lack one number — it rendered an\n * authoritative-looking 0% conversion rate and zero revenue. The console's own\n * commerce analytics card meanwhile promised merchants that `purchase` already\n * mirrored into their Google Analytics.\n *\n * ## Client-side, deliberately — the opposite of the call made for OUR revenue\n *\n * Aglyn's own `purchase` is sent server-side over the Measurement Protocol,\n * because a lost hit there is lost revenue reporting on our books. This one is\n * client-side, and the reasoning inverts with the consequence: server-side\n * would require collecting, encrypting and supporting a per-host Measurement\n * Protocol API secret we have nowhere to store, to buy accuracy against\n * closed tabs and ad blockers that every storefront on the internet already\n * accepts. For a merchant's product analytics that is the industry norm; for\n * our revenue it would not have been.\n *\n * ## Where it fires\n *\n * On the page Stripe returns the shopper to, which is the page they left —\n * there is no order-confirmation surface on a tenant storefront. That is the\n * Cart for a cart checkout and the ProductDetail for a single-product buy,\n * which is exactly why both call this hook.\n *\n * ## The two waits\n *\n * The order is written by the webhook, which can land AFTER the shopper is\n * back, so the lookup retries. And `window.gtag` only exists once the visitor\n * has granted analytics consent and the consent-gated script has loaded\n * post-hydration, so the send waits for it — otherwise the event would be\n * built correctly and dropped on the floor. Both waits are bounded; an\n * ungranted visitor simply times out, which is the consent gate working.\n */\nexport function useStorefrontPurchaseEvent(\n  hostId: string,\n  /** `Aglyn.useSiteFetch()`. A GET, so preview mode passes it straight through. */\n  siteFetch: typeof fetch = fetch,\n): void {\n  useEffect(() => {\n    if (typeof window === 'undefined' || !hostId) return\n\n    const params = new URLSearchParams(window.location.search)\n    if (params.get('order') !== 'success') return\n    const sessionId = params.get('session_id') ?? ''\n    if (!sessionId || alreadyReported(sessionId)) return\n\n    let active = true\n    // Claimed up front so a sibling mount in the same document cannot start a\n    // second poll for the same order. Persisted only once the hit is sent.\n    reported.add(sessionId)\n\n    void (async () => {\n      let source: Parameters<typeof buildStorefrontPurchaseParams>[0] | null =\n        null\n      for (let attempt = 0; attempt < MAX_ATTEMPTS && active; attempt += 1) {\n        try {\n          const response = await siteFetch(\n            `/api/commerce/order-analytics?hostId=${encodeURIComponent(\n              hostId,\n            )}&sessionId=${encodeURIComponent(sessionId)}`,\n          )\n          if (response.ok) {\n            source = await response.json()\n            break\n          }\n          // 404 means the webhook has not written the order yet; anything\n          // else is terminal and retrying it would only add load.\n          if (response.status !== 404) return\n        } catch {\n          // Network blip — treated like the race and retried.\n        }\n        await sleep(RETRY_MS)\n      }\n      if (!active || !source) return\n\n      const purchase = buildStorefrontPurchaseParams(source)\n      if (!purchase) return\n      // A funnel step (AGL-3605), recorded before the wait for the tag: the\n      // journey has its own consent gate and does not need GA on the page.\n      recordSiteJourneyStep('order')\n\n      // `trackEvent` no-ops when `window.gtag` is absent and never queues, so\n      // waiting for the tag IS the delivery mechanism here.\n      //\n      // A site's own advertising tags count as a destination too (AGL-3694):\n      // a store running a Meta, TikTok or Pinterest tag and no Google tag\n      // still reports its purchase, through the same call, which hands it to\n      // whichever of them the visitor's consent let load.\n      for (let attempt = 0; attempt < GTAG_ATTEMPTS && active; attempt += 1) {\n        if (typeof (window as any).gtag === 'function' || merchantAdvertisingTagsResident()) {\n          trackEvent('purchase', purchase)\n          markReported(sessionId)\n          return\n        }\n        await sleep(GTAG_MS)\n      }\n    })()\n\n    return () => {\n      active = false\n    }\n    // `siteFetch` is deliberately out of the dep list: it is a `useCallback`\n    // that changes identity on a preview toggle, and re-running this effect\n    // would restart a poll that has already claimed its session id.\n    // eslint-disable-next-line react-hooks/exhaustive-deps\n  }, [hostId])\n}\n"],"names":["merchantAdvertisingTagsResident","trackEvent","recordSiteJourneyStep","useEffect","buildStorefrontPurchaseParams","MAX_ATTEMPTS","RETRY_MS","GTAG_ATTEMPTS","GTAG_MS","reported","Set","STORAGE_PREFIX","alreadyReported","sessionId","has","window","sessionStorage","getItem","markReported","add","setItem","sleep","ms","Promise","resolve","setTimeout","useStorefrontPurchaseEvent","hostId","siteFetch","fetch","params","URLSearchParams","location","search","get","active","source","attempt","response","encodeURIComponent","ok","json","status","purchase","gtag"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,+BAA+B,QAAQ,4CAA2C;AAC3F,SAASC,UAAU,QAAQ,0CAAyC;AACpE,SAASC,qBAAqB,QAAQ,sCAAqC;AAC3E,SAASC,SAAS,QAAQ,QAAO;AACjC,SAASC,6BAA6B,QAAQ,iCAA6B;AAE3E,mEAAmE,GACnE,MAAMC,eAAe;AACrB,MAAMC,WAAW;AACjB,iEAAiE,GACjE,MAAMC,gBAAgB;AACtB,MAAMC,UAAU;AAEhB;;;;CAIC,GACD,MAAMC,WAAW,IAAIC;AACrB,MAAMC,iBAAiB;AAEvB,SAASC,gBAAgBC,SAAiB;IACxC,IAAIJ,SAASK,GAAG,CAACD,YAAY,OAAO;IACpC,IAAI;QACF,OAAOE,OAAOC,cAAc,CAACC,OAAO,CAACN,iBAAiBE,eAAe;IACvE,EAAE,eAAM;QACN,+DAA+D;QAC/D,uEAAuE;QACvE,OAAO;IACT;AACF;AAEA,SAASK,aAAaL,SAAiB;IACrCJ,SAASU,GAAG,CAACN;IACb,IAAI;QACFE,OAAOC,cAAc,CAACI,OAAO,CAACT,iBAAiBE,WAAW;IAC5D,EAAE,eAAM;IACN,aAAa,GACf;AACF;AAEA,MAAMQ,QAAQ,CAACC,KACb,IAAIC,QAAc,CAACC,UAAYC,WAAWD,SAASF;AAErD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwCC,GACD,OAAO,SAASI,2BACdC,MAAc,EACd,+EAA+E,GAC/EC,YAA0BC,KAAK;IAE/B1B,UAAU;YAKU2B;QAJlB,IAAI,OAAOf,WAAW,eAAe,CAACY,QAAQ;QAE9C,MAAMG,SAAS,IAAIC,gBAAgBhB,OAAOiB,QAAQ,CAACC,MAAM;QACzD,IAAIH,OAAOI,GAAG,CAAC,aAAa,WAAW;QACvC,MAAMrB,aAAYiB,cAAAA,OAAOI,GAAG,CAAC,yBAAXJ,cAA4B;QAC9C,IAAI,CAACjB,aAAaD,gBAAgBC,YAAY;QAE9C,IAAIsB,SAAS;QACb,0EAA0E;QAC1E,uEAAuE;QACvE1B,SAASU,GAAG,CAACN;QAEb,KAAK,AAAC,CAAA;YACJ,IAAIuB,SACF;YACF,IAAK,IAAIC,UAAU,GAAGA,UAAUhC,gBAAgB8B,QAAQE,WAAW,EAAG;gBACpE,IAAI;oBACF,MAAMC,WAAW,MAAMV,UACrB,CAAC,qCAAqC,EAAEW,mBACtCZ,QACA,WAAW,EAAEY,mBAAmB1B,YAAY;oBAEhD,IAAIyB,SAASE,EAAE,EAAE;wBACfJ,SAAS,MAAME,SAASG,IAAI;wBAC5B;oBACF;oBACA,gEAAgE;oBAChE,wDAAwD;oBACxD,IAAIH,SAASI,MAAM,KAAK,KAAK;gBAC/B,EAAE,eAAM;gBACN,oDAAoD;gBACtD;gBACA,MAAMrB,MAAMf;YACd;YACA,IAAI,CAAC6B,UAAU,CAACC,QAAQ;YAExB,MAAMO,WAAWvC,8BAA8BgC;YAC/C,IAAI,CAACO,UAAU;YACf,sEAAsE;YACtE,qEAAqE;YACrEzC,sBAAsB;YAEtB,wEAAwE;YACxE,sDAAsD;YACtD,EAAE;YACF,uEAAuE;YACvE,oEAAoE;YACpE,uEAAuE;YACvE,oDAAoD;YACpD,IAAK,IAAImC,UAAU,GAAGA,UAAU9B,iBAAiB4B,QAAQE,WAAW,EAAG;gBACrE,IAAI,OAAO,AAACtB,OAAe6B,IAAI,KAAK,cAAc5C,mCAAmC;oBACnFC,WAAW,YAAY0C;oBACvBzB,aAAaL;oBACb;gBACF;gBACA,MAAMQ,MAAMb;YACd;QACF,CAAA;QAEA,OAAO;YACL2B,SAAS;QACX;IACA,yEAAyE;IACzE,wEAAwE;IACxE,gEAAgE;IAChE,uDAAuD;IACzD,GAAG;QAACR;KAAO;AACb"}