@aglyn/plugins-commerce 1.0.0-beta.260 → 1.0.0-beta.262

package/src/lib/server.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/plugins/commerce/src/lib/server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n\n/**\n * Server half of the commerce plugin (AGL-396): the site-facing storefront\n * API handlers, registered with the plugin API registry and served by the\n * tenant dispatcher at their unchanged `/api/commerce/*` URLs. This module\n * pulls in firebase-admin + Stripe, so it is NOT re-exported from the client\n * barrel — apps import `@aglyn/plugins-commerce/server` only from their\n * (server-only) API dispatcher registration.\n */\n\nimport {\n  registerBillingWebhookHandler,\n  registerPluginApiRoute,\n  registerPluginJob,\n  registerSitePageEnricher,\n  registerSitePageResolver,\n  registerPluginPermissions,\n  registerPluginConfigSchema,\n} from '@aglyn/aglyn/server'\nimport { isEmailConfigured } from '@aglyn/shared-util-email'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { registerCommerceMediaPublishGuard } from './server/media-publish-guard'\nimport { registerCommerceRecurringCharges } from './server/recurring-charges'\nimport { registerProductCardReader } from './server/product-card'\nimport { registerProductAiCapability } from './server/product-ai-capability'\nimport { registerStoreSetupAiCapabilities } from './server/store-setup-ai-capability'\nimport { registerStoreSetupAiWriter } from './server/store-setup-ai-writer.console'\nimport { registerProductDraftWriter } from './server/product-drafts'\nimport { registerCommerceTaxProfile } from './server/tax-profile'\nimport { registerTaxReturnSource } from '@aglyn/aglyn/plugin-manager/plugin-tax-return-sources'\nimport { commerceTaxReturnSource } from './server/tax-return-source'\nimport { taxSummaryHandler } from './server/tax-summary'\nimport { registerRevenueSource } from '@aglyn/aglyn/plugin-manager/plugin-revenue-sources'\nimport { commerceRevenueSource } from './server/revenue-source'\nimport { commerceBillingWebhookHandler } from './server/billing-webhook'\nimport { registerOrderFigureReaders } from './server/order-figures'\nimport { COMMERCE_PERMISSIONS } from './model/plugin-permissions'\nimport { COMMERCE_CONFIG_SCHEMA } from './plugin-config'\nimport { commerceSitePageEnricher } from './server/site-page-enricher'\nimport { commerceSitePageResolver } from './server/site-page-resolver'\nimport { cartCheckoutHandler } from './server/cart-checkout'\nimport { cartHandler } from './server/cart'\nimport { cartExtrasHandler } from './server/checkout-extras'\nimport { catalogHandler } from './server/catalog'\nimport { checkoutHandler } from './server/checkout'\nimport { downloadHandler } from './server/download'\nimport { newsletterHandler } from './server/newsletter'\nimport { notifyRestockHandler } from './server/notify-restock'\nimport { productHandler } from './server/product'\nimport { relatedHandler } from './server/related'\nimport { reservationAvailabilityHandler } from './server/reservation-availability'\nimport { gateHandler } from './server/gate'\nimport { memberFeedHandler } from './server/member-feed'\nimport { membershipAccountHandler } from './server/membership-account'\nimport { membershipAdminPasswordHandler } from './server/membership-admin-password'\nimport { membershipAdminRemoveHandler } from './server/membership-admin-remove'\nimport { membershipContentHandler } from './server/membership-content'\nimport { membershipLoginHandler } from './server/membership-login'\nimport { membershipLogoutHandler } from './server/membership-logout'\nimport { membershipRecoverHandler } from './server/membership-recover'\nimport { membershipRegisterHandler } from './server/membership-register'\nimport { membershipResetHandler } from './server/membership-reset'\nimport { membershipWishlistHandler } from './server/membership-wishlist'\nimport { reserveHandler } from './server/reserve'\nimport { streamHandler } from './server/stream'\nimport { subscriptionPortalHandler } from './server/subscription-portal'\nimport { reviewsHandler } from './server/reviews'\nimport { connectHandler } from './server/connect'\nimport { cancelOrderHandler } from './server/cancel-order'\nimport { carrierRatesAvailabilityHandler } from './server/carrier-rates-availability'\nimport { collectionMembershipHandler } from './server/collection-membership'\nimport { draftOrderHandler } from './server/draft-order'\nimport { fulfillOrderHandler } from './server/fulfill-order'\nimport { orderReceiptSendHandler } from './server/order-receipt-send'\nimport { orderStatusHandler, registerOrderStatusActions } from './server/order-status'\nimport { returnRequestStatusAction } from './server/return-status-action'\nimport { giftCardsHandler } from './server/gift-cards'\nimport { memberPostHandler } from './server/member-post'\nimport { orderAnalyticsHandler } from './server/order-analytics'\nimport { checkoutStatusHandler } from './server/checkout-status'\nimport { posOrderHandler } from './server/pos-order'\nimport { printersHandler } from './server/printers'\nimport { posPaymentHandler } from './server/pos-payment'\nimport { posReadersHandler } from './server/pos-readers'\nimport { posTerminalConnectionTokenHandler } from './server/pos-terminal-connection-token'\nimport { posDisplayHandler } from './server/pos-display'\nimport { posKioskHandler } from './server/pos-kiosk'\nimport { registerPosOpsRoutes } from './server/pos-ops-routes'\nimport {\n  processAbandonedHandler,\n  scanAbandonedCheckouts,\n} from './server/process-abandoned'\nimport { processRestockHandler, scanRestockAlerts } from './server/process-restock'\nimport { scanStockDecrements } from './server/reconcile-stock'\nimport { refundHandler } from './server/refund'\nimport { orderWebhooksHandler } from './server/order-webhooks'\nimport { returnRequestHandler, returnsHandler } from './server/returns'\nimport { scanSupplierDeliveries } from './server/supplier-outbox'\nimport { supplierUpdateHandler } from './server/supplier-update'\n\n/**\n * The two commerce beats (AGL-2227).\n *\n * `commerce/process-abandoned` and `commerce/process-restock` have existed\n * since AGL-323/326 as `x-cron-secret` HTTP doors, and `registerCommerceConsoleApi`\n * below has called them \"the scheduler-driven jobs\" in a comment that whole\n * time. **Nothing scheduled them.** Not `scheduled-crons.yml` (its table names\n * 11 paths; neither of these), not `vercel.json` (no `crons` key at all), not\n * `registerPluginJob` — the only two registrations in the repo were scheduled\n * publishing and the bookings hold-expiry.\n *\n * The cost was a Pro-tier entitlement (`abandonedCart`) that had never sent an\n * email, and a storefront \"notify me when it's back\" form writing into a queue\n * with no drain. AGL-1793 had already added the collection-group indexes these\n * two scans need, which is the clearest evidence they were always meant to run.\n *\n * Module scope, like the bookings job beside it: the runner route reaches jobs\n * through `ensureAll(['tenantApi'])`, and a registration inside a `register*`\n * function would depend on which entry point happened to be loaded.\n *\n * 15 minutes, not 1: `process-abandoned` will not remind a checkout younger\n * than an hour and `process-restock` only mails alerts whose product already\n * has stock, so a tighter beat buys nothing and costs two collection-group\n * scans a minute. Both are bounded (200 docs) and idempotent — each pass\n * stamps what it sent — so an overlapping or repeated beat cannot double-send.\n */\nconst RECOVERY_JOB_INTERVAL_MINUTES = 15\n\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'abandoned-checkout-recovery',\n  intervalMinutes: RECOVERY_JOB_INTERVAL_MINUTES,\n  description:\n    'Email one recovery reminder per stalled checkout (abandonedCart plans).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    // Quietly, not as an error: email is optional per deployment, and a beat\n    // that logs every minute on a self-host without Resend buries everything\n    // else in the log.\n    if (!isEmailConfigured()) return\n    const { sent } = await scanAbandonedCheckouts(gate)\n    if (sent) console.info(`commerce: sent ${sent} abandoned-cart reminders`)\n  },\n})\n\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'back-in-stock-alerts',\n  intervalMinutes: RECOVERY_JOB_INTERVAL_MINUTES,\n  description: 'Email shoppers whose requested product is in stock again.',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    if (!isEmailConfigured()) return\n    const { sent } = await scanRestockAlerts(gate)\n    if (sent) console.info(`commerce: sent ${sent} back-in-stock alerts`)\n  },\n})\n\n/**\n * The review-request email (AGL-3736). HOURLY: a request is owed days after\n * fulfilment, so an hour's lateness is invisible, and the scan is one\n * collection-group range query over `reviewRequestDueAtMs` — a field only\n * orders still owed a request carry, so an empty beat costs one read.\n */\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'review-request-emails',\n  intervalMinutes: 60,\n  description:\n    'Email each buyer one review request, with a single-use link per product, ' +\n    'days after their order is fulfilled (AGL-3736).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    if (!isEmailConfigured()) return\n    const { scanReviewRequests } = await import('./server/review-requests')\n    const { sent } = await scanReviewRequests(gate)\n    if (sent) console.info(`commerce: sent ${sent} review requests`)\n  },\n})\n\n/**\n * The missing-decrement detector (AGL-2358).\n *\n * HOURLY, not on the 15-minute recovery beat: it is a detector for a rare\n * process death, not a queue drain, and nothing it finds gets less true for\n * waiting an hour. The cost of the beat is what sets the interval — one\n * collection-group read of the platform's most recent orders, plus two\n * queries per host that has any — and an hour keeps that off the same tick as\n * the two scans above.\n *\n * NOT gated on `isEmailConfigured()`, unlike its two neighbours. Those send\n * mail; this writes a console notification and a log line, both of which work\n * on a self-host with no mail provider at all — and a stock count that is\n * silently wrong is exactly what a self-hoster least wants suppressed by a\n * setting about email.\n */\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'stock-decrement-reconciliation',\n  intervalMinutes: 60,\n  description:\n    'Report paid orders whose stock decrement never landed (AGL-2358).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    const scan = await scanStockDecrements(gate)\n    if (scan.missingLines || scan.truncatedHosts) {\n      console.warn(\n        `commerce: ${scan.missingLines} order lines across ${scan.hosts} ` +\n          `sites have no sale ledger row (${scan.reportedOrders} newly ` +\n          `reported, ${scan.truncatedHosts} sites' ledger window truncated)`,\n      )\n    }\n  },\n})\n\n/**\n * The dropship supplier outbox drain (AGL-2473).\n *\n * EVERY MINUTE, unlike the three above, and the interval is the point rather\n * than an oversight. This is the only one of the four that a BUYER is waiting\n * on: the row it drains is a paid order that has not been routed to whoever\n * ships it, and every minute it sits is a minute the parcel is not moving. The\n * first backoff step is also 60s, so a supplier that blipped is retried on the\n * next tick.\n *\n * The cost that set fifteen minutes for the recovery pair does not apply. Those\n * are collection-GROUP scans across every site on the platform; this is one\n * ordinary equality query against a top-level collection that is EMPTY in the\n * ordinary case — an empty result bills a single read, so the whole beat is\n * ~1,440 reads a day whether or not anyone is dropshipping.\n *\n * Not gated on `isEmailConfigured()`. The supplier notification is an HTTP POST\n * to the merchant's own supplier, and a self-host with no mail provider still\n * has dropship orders to route.\n */\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'supplier-webhook-delivery',\n  intervalMinutes: 1,\n  description:\n    'Deliver queued dropship supplier notifications, with backoff and a ' +\n    'dead letter that tells the merchant (AGL-2473).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    const scan = await scanSupplierDeliveries(gate)\n    if (scan.deadLettered) {\n      console.warn(\n        `commerce: ${scan.deadLettered} dropship orders could not be routed ` +\n          `to their supplier and have been reported on the order`,\n      )\n    }\n  },\n})\n\n/**\n * Stripe payment method domains for every connected custom domain (AGL-3629).\n *\n * The backfill for domains connected before registration existed, and the\n * repair for a connect whose event was lost, in one daily pass. A domain\n * already registered costs a document read and no Stripe call, so the beat is\n * cheap; a day's delay costs only the Apple Pay button on a domain connected\n * while Stripe was unreachable, and the first in-page checkout there registers\n * it anyway.\n */\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'payment-method-domains',\n  intervalMinutes: 24 * 60,\n  description:\n    'Register connected custom domains with Stripe so Apple Pay, Google Pay ' +\n    'and Link show on them (AGL-3629).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    if (!process.env.STRIPE_SECRET_KEY) return\n    const { reconcileCustomDomains } = await import('./server/payment-method-domains')\n    const result = await reconcileCustomDomains(gate)\n    if (result.registered || result.failed) {\n      console.info(\n        `commerce: payment method domains — ${result.registered} registered, ` +\n          `${result.failed} failed across ${result.hosts} sites`,\n      )\n    }\n  },\n})\n\n/**\n * A visitor's payment door: it opens a Stripe Checkout Session for whoever\n * calls it, so the dispatcher holds it to the card-testing counters\n * (AGL-3363). Declared here, beside the registration, so the door cannot\n * exist without it.\n */\nconst CARD_PAYMENT_DOOR = { cardPayment: true } as const\n\n/** Registers the commerce plugin's storefront API routes. */\nexport function registerCommerceApi(): void {\n  registerProductCardReader()\n  // The merchant's tax rule, for every plugin that prices a charge here.\n  registerCommerceTaxProfile()\n  registerPluginPermissions(COMMERCE_PERMISSIONS)\n  // Merchant-settable register discount ceiling (AGL-2161). Registered on\n  // BOTH surfaces, like the permissions above: the POS route reads it\n  // server-side, and the settings card renders it from the same schema.\n  registerPluginConfigSchema(COMMERCE_CONFIG_SCHEMA)\n  // PDP/PLP template pages (AGL-418): /products/* + /collections/*.\n  registerSitePageResolver(commerceSitePageResolver)\n  // Seeds product grids on ordinary screens (AGL-659) — the resolver above\n  // only covers /products/* and /collections/*, so /products itself, and any\n  // designed page with a grid on it, needed this to render server-side.\n  registerSitePageEnricher(commerceSitePageEnricher)\n  registerPluginApiRoute('commerce/cart-checkout', cartCheckoutHandler, CARD_PAYMENT_DOOR)\n  registerPluginApiRoute('commerce/cart', cartHandler)\n  // What the cart offers besides shipping (AGL-3624): pickup locations, and\n  // local delivery's fee, minimum and windows for a postal code.\n  registerPluginApiRoute('commerce/local-fulfillment-options', async (req, res) =>\n    (await import('./server/local-fulfillment')).localFulfillmentOptionsHandler(req, res),\n  )\n  // Optional lines another plugin offers at the cart (AGL-3635).\n  registerPluginApiRoute('commerce/cart-extras', cartExtrasHandler)\n  registerPluginApiRoute('commerce/catalog', catalogHandler)\n  registerPluginApiRoute('commerce/checkout', checkoutHandler, CARD_PAYMENT_DOOR)\n  registerPluginApiRoute('commerce/download', downloadHandler)\n  // The pre-channels Google feed address (AGL-299), now written by the\n  // catalog's feed publisher (AGL-3637); the module loads with a fetch.\n  registerPluginApiRoute('commerce/feed', {\n    web: async (request) => (await import('./server/legacy-feed')).legacyFeedRoute(request),\n  })\n  registerPluginApiRoute('commerce/newsletter', newsletterHandler)\n  registerPluginApiRoute('commerce/notify-restock', notifyRestockHandler)\n  // GA-safe order projection for the storefront `purchase` (AGL-1641).\n  registerPluginApiRoute('commerce/order-analytics', orderAnalyticsHandler)\n  // The guest order-status page's data (AGL-3610), behind the signed link in\n  // every buyer email — a recipient link, so it outlives the site's gates.\n  registerPluginApiRoute('commerce/order-status', orderStatusHandler, { recipientLink: true })\n  // …and its \"Request a return\" button (AGL-3611), on an order that can\n  // still send something back.\n  registerOrderStatusActions(returnRequestStatusAction)\n  // What became of a session the shopper was returned from (AGL-3606).\n  registerPluginApiRoute('commerce/checkout-status', checkoutStatusHandler)\n  registerPluginApiRoute('commerce/product', productHandler)\n  registerPluginApiRoute('commerce/related', relatedHandler)\n  registerPluginApiRoute('commerce/reservation-availability', reservationAvailabilityHandler)\n  registerPluginApiRoute('commerce/reserve', reserveHandler, CARD_PAYMENT_DOOR)\n  registerPluginApiRoute('commerce/gate', gateHandler)\n  registerPluginApiRoute('commerce/member-feed', memberFeedHandler)\n  registerPluginApiRoute('commerce/stream', streamHandler)\n  registerPluginApiRoute('commerce/subscription-portal', subscriptionPortalHandler)\n  registerPluginApiRoute('commerce/reviews', reviewsHandler)\n  // A buyer's return request (AGL-3611), from their account or the signed\n  // order-status link.\n  registerPluginApiRoute('commerce/return-request', returnRequestHandler)\n  registerPluginApiRoute('membership/account', membershipAccountHandler)\n  registerPluginApiRoute('membership/content', membershipContentHandler)\n  registerPluginApiRoute('membership/login', membershipLoginHandler)\n  registerPluginApiRoute('membership/logout', membershipLogoutHandler)\n  // Password recovery pair (AGL-552): request + complete.\n  registerPluginApiRoute('membership/recover', membershipRecoverHandler)\n  registerPluginApiRoute('membership/register', membershipRegisterHandler)\n  registerPluginApiRoute('membership/reset', membershipResetHandler)\n  registerPluginApiRoute('membership/wishlist', membershipWishlistHandler)\n}\n\n/**\n * Registers the commerce plugin's console-side API routes (AGL-396):\n * merchant/staff operations (Connect onboarding, refunds, draft & POS\n * orders, member posts), the supplier tracking callback, and the HTTP doors\n * for the abandoned-cart / restock passes.\n *\n * Those last two are NOT what schedules them — the `registerPluginJob` calls\n * above are (AGL-2227). This comment used to call them \"the scheduler-driven\n * jobs\", which is how they stayed dark for months: it asserted the wiring\n * instead of having it.\n */\nexport function registerCommerceConsoleApi(): void {\n  // The register's gate (`managePos`) is resolved on THIS surface: every POS\n  // route below runs in the console, and a key no surface registered here is\n  // absent from the resolved map, which reads as refused — the site's own\n  // owner was answered 403 at the register.\n  registerPluginPermissions(COMMERCE_PERMISSIONS)\n  // What a product looks like to a surface that is not this plugin's — a\n  // campaign email that features one asks here rather than importing the model.\n  registerProductCardReader()\n  // …and a draft product another plugin asks for by name (AGL-3616): an AI\n  // build setting a store up from a brief, unpriced unless the brief priced it.\n  // The console runs AI jobs (AGL-3026).\n  registerProductDraftWriter()\n  // …and the operation an AI build plans for it, which that writer executes.\n  registerProductAiCapability()\n  // …and the store's shipping, pickup, local delivery and tax settings an AI\n  // build sets up (AGL-3749), written live as the console's cards write them,\n  // with the four operations that writer executes.\n  registerStoreSetupAiWriter()\n  registerStoreSetupAiCapabilities()\n  // …and why a file somebody is SELLING may not be made public (AGL-3080).\n  // The media library asks before it hands an asset its permanent CDN URL\n  // back; what a product is, and which of its fields hold paid media, is\n  // this plugin's to know.\n  registerCommerceMediaPublishGuard()\n  // …and which memberships a site sells, for a security lockdown to pause\n  // (AGL-3364). The lockdown route runs on this surface.\n  registerCommerceRecurringCharges()\n  // …and the tax rule, for the webhook that confirms what they charged.\n  registerCommerceTaxProfile()\n  // …and its sales on the operator's own sales tax return (AGL-3080): the\n  // tax a storefront checkout collected under the platform's registrations.\n  // The staff return awaits this surface before it asks, and refuses to be\n  // filed without this source — commerce declares `taxReturnSource`.\n  registerTaxReturnSource(commerceTaxReturnSource, { pluginId: BUNDLE_ID })\n  // …and the take its orders earn the operator, on the staff revenue report\n  // (AGL-3080) — commerce declares `revenueSource`, so the report names this\n  // source as unread rather than counting it as zero if it is missing.\n  registerRevenueSource(commerceRevenueSource, { pluginId: BUNDLE_ID })\n  // Stripe webhook sections (AGL-418): orders/carts/drafts/reservations/\n  // subscriptions ride the platform webhook via the hook registry.\n  registerBillingWebhookHandler(commerceBillingWebhookHandler)\n  // Cancel + stock release in one transaction (AGL-1808). Server-side because\n  // the release depends on the transition rule, and a client write could not\n  // re-ask it under the same lock that flips the status.\n  registerPluginApiRoute('commerce/cancel-order', cancelOrderHandler)\n  // Whether live carrier rates can be offered on this site (AGL-3612).\n  registerPluginApiRoute('commerce/shipping/carrier-rates', carrierRatesAvailabilityHandler)\n  registerPluginApiRoute('commerce/connect', connectHandler)\n  registerPluginApiRoute('commerce/draft-order', draftOrderHandler)\n  // Fulfil + mark-delivered with the transition re-asked under the write\n  // (AGL-1819) — the same stale-dialog hole cancel-order closes, minus the\n  // stock release those two transitions never had. The customer REST API's\n  // `PATCH /v1/sites/{id}/orders/{id}` records a shipment through the same\n  // transaction (`server/api-v1/orders-and-products.ts`).\n  registerPluginApiRoute('commerce/fulfill-order', fulfillOrderHandler)\n  // Pickup and local delivery steps (AGL-3624) — ready, picked up, out for\n  // delivery, delivered — from the console queue, the order dialog and the\n  // native Aglyn app. Loaded on first call.\n  registerPluginApiRoute('commerce/local-fulfillment', async (req, res) =>\n    (await import('./server/local-fulfillment-status')).localFulfillmentHandler(req, res),\n  )\n  // \"Resend receipt\" from the order dialog (AGL-3610): by email, or by text\n  // when the platform's SMS provider is configured. Rate-limited per member\n  // and per order.\n  registerPluginApiRoute('commerce/order-receipt-send', orderReceiptSendHandler)\n  // The product editor's save and Adjust stock for the native apps (AGL-3652):\n  // the console's own product-write computation under the rules' gate. Loaded\n  // on first call.\n  registerPluginApiRoute('commerce/products/save', async (req, res) =>\n    (await import('./server/products-write')).productSaveHandler(req, res),\n  )\n  registerPluginApiRoute('commerce/products/stock', async (req, res) =>\n    (await import('./server/products-write')).productStockHandler(req, res),\n  )\n  // The order dialog's note and restock answer for the native apps\n  // (AGL-3651, AGL-3652): the console's own timeline computation, in one\n  // transaction on the stored order. Loaded on first call.\n  registerPluginApiRoute('commerce/order-note', async (req, res) =>\n    (await import('./server/order-annotations')).orderNoteHandler(req, res),\n  )\n  registerPluginApiRoute('commerce/order-restock-answer', async (req, res) =>\n    (await import('./server/order-annotations')).orderRestockAnswerHandler(req, res),\n  )\n  // Issue / void store credit (AGL-2226). Server-side because the host\n  // catch-all in the Firestore rules would otherwise let a client write\n  // its own `balanceCents`, which checkout applies as amount-off.\n  registerPluginApiRoute('commerce/gift-cards', giftCardsHandler)\n  // The merchant's own storefront sales tax, by who owes it (AGL-2440): the\n  // same rows and classifier the operator's return reads, fenced to one site.\n  registerPluginApiRoute('commerce/tax-summary', { web: taxSummaryHandler })\n  // The payment methods card (AGL-3629): toggles, the platform's offer, the\n  // payout account's capabilities and the site's wallet domains. Loaded with\n  // the first request, so a console that never opens Settings never imports it.\n  registerPluginApiRoute('commerce/payment-methods', {\n    web: async (request) =>\n      (await import('./server/payment-methods')).paymentMethodsHandler(request),\n  })\n  // A smart collection's rules changed or it was deleted: re-stamp which\n  // products it holds (AGL-3321), the membership the storefront queries.\n  registerPluginApiRoute('commerce/collection-membership', collectionMembershipHandler)\n  // A site member's password help (AGL-914) and removal (AGL-3308), from the\n  // Users page drawer and the Inbox. Console-auth, not the visitor cookie the\n  // storefront's `membership/*` routes take, so they are served where the\n  // console posts: the console's own dispatcher loads this surface only.\n  registerPluginApiRoute(\n    'membership/admin-password',\n    membershipAdminPasswordHandler,\n  )\n  registerPluginApiRoute('membership/admin-remove', membershipAdminRemoveHandler)\n  registerPluginApiRoute('commerce/member-post', memberPostHandler)\n  registerPluginApiRoute('commerce/pos-order', posOrderHandler)\n  // A register's cloud receipt printers and the jobs a manager sends them\n  // (AGL-3619), and the two doors the printers themselves poll. The doors are\n  // MACHINE routes: a printer is no member and names no site cookie, so it\n  // authenticates with the per-printer secret in its URL and its own device id,\n  // and the route asks the plan before it hands over a job. Loaded with the\n  // first poll, so a console that has no printers never imports them.\n  registerPluginApiRoute('commerce/printers', printersHandler)\n  registerPluginApiRoute(\n    'commerce/cloudprnt/:hostId/:printerId/:secret',\n    {\n      web: async (request, context) =>\n        (await import('./server/printer-poll')).cloudPrntRoute(request, context),\n    },\n    { machine: true },\n  )\n  registerPluginApiRoute(\n    'commerce/epson-sdp/:hostId/:printerId/:secret',\n    {\n      web: async (request, context) =>\n        (await import('./server/printer-poll')).epsonServerDirectPrintRoute(request, context),\n    },\n    { machine: true },\n  )\n  // The register's tenders against an open sale, its Stripe Terminal card\n  // readers, and the paired customer display (AGL-3607, AGL-3608). The\n  // display's `pair`/`poll`/`respond` take a display token and no console\n  // session; every other action is gated like a sale.\n  registerPluginApiRoute('commerce/pos-payment', posPaymentHandler)\n  registerPluginApiRoute('commerce/pos-readers', posReadersHandler)\n  registerPluginApiRoute('commerce/pos-display', posDisplayHandler)\n  // The self-service kiosk (AGL-3623): a register's paired screen where the\n  // customer orders and pays. Its device token, never a staff session; the\n  // register's queue of \"pay at counter\" orders is gated like a sale.\n  registerPluginApiRoute('commerce/pos-kiosk', posKioskHandler)\n  // Shifts, staff PINs, the customer lookup and returns (AGL-3609).\n  registerPosOpsRoutes()\n  // The offline register (AGL-3625): the kit a register caches to sell cash\n  // while the connection is down, and the sync that records those sales once.\n  // Gated like a sale; loaded with its first call.\n  registerPluginApiRoute('commerce/pos-offline-sync', async (req, res) =>\n    (await import('./server/pos-offline-sync')).posOfflineSyncHandler(req, res),\n  )\n  // The native Aglyn POS app's Stripe Terminal SDK: a connection token scoped\n  // to the site's Location, and the Location itself (AGL-3618). Gated like a\n  // sale.\n  registerPluginApiRoute('commerce/pos-terminal-connection-token', posTerminalConnectionTokenHandler)\n  registerPluginApiRoute('commerce/process-abandoned', processAbandonedHandler)\n  registerPluginApiRoute('commerce/process-restock', processRestockHandler)\n  registerPluginApiRoute('commerce/refund', refundHandler)\n  // Returns (AGL-3611): approve, decline, receive with restock, refund\n  // through the route above, a label from a shipping plugin.\n  registerPluginApiRoute('commerce/returns', returnsHandler)\n  // The merchant's outbound order webhooks (AGL-3611): endpoints, secrets,\n  // a test ping and a resend from the delivery log.\n  registerPluginApiRoute('commerce/order-webhooks', orderWebhooksHandler)\n  registerPluginApiRoute('commerce/supplier-update', supplierUpdateHandler)\n  // Stamps the open orders that predate the shipping fields, before an\n  // export for shipping (AGL-3613).\n  registerPluginApiRoute('commerce/orders-shipping-prepare', async (req, res) =>\n    (await import('./server/orders-shipping-prepare')).ordersShippingPrepareHandler(req, res),\n  )\n  // ShipStation's Custom Store endpoint (AGL-3613): ShipStation's servers\n  // pull the order feed and post shipments back with the site's own Basic\n  // credentials, so it is a MACHINE's route and asks the site's commerce,\n  // plan, release and lockdown gates itself once the credentials prove the\n  // site. Loaded on its first call, never with the console API surface.\n  registerPluginApiRoute(\n    'commerce/shipstation/:hostId',\n    {\n      web: async (request, context) =>\n        (await import('./server/shipstation')).shipStationRoute(request, context),\n    },\n    { machine: true },\n  )\n  // ShippingEasy's shipment callback (AGL-3633): ShippingEasy's servers post\n  // each label bought for an order this store sent them, signed with the\n  // merchant's own API secret, so it is a MACHINE's route like ShipStation's\n  // above and asks the same gates once the signature proves the site.\n  registerPluginApiRoute(\n    'commerce/shippingeasy/:hostId',\n    {\n      web: async (request, context) =>\n        (await import('./server/shippingeasy')).shippingEasyRoute(request, context),\n    },\n    { machine: true },\n  )\n  // The ShipStation and ShippingEasy cards' connect, show, new password,\n  // send open orders and disconnect.\n  registerPluginApiRoute('commerce/shipping-connectors', async (req, res) =>\n    (await import('./server/shipping-connectors')).shippingConnectorsHandler(req, res),\n  )\n  // The store's sales as figure tables (AGL-2915), for the AI plugin's\n  // insights to read by id rather than by reading orders. The console runs\n  // insight jobs, so the console surface registers them.\n  registerOrderFigureReaders(() => firebaseAdmin.app().firestore())\n}\n\n// Shared with the (still app-side) membership/account route.\nexport { mintDownloadToken } from './server/download'\n\n// Site-member session primitives, shared with the (still app-side)\n// membership/* routes until those migrate too (AGL-396).\nexport * from './server/membership'\n\n// Type-only (AGL-3080): the plugin's entitlement keys, declared by module\n// augmentation, for every program that loads this entry point.\nexport type { commercePlanEntitlements } from './plan-entitlements'\n"],"names":["registerBillingWebhookHandler","registerPluginApiRoute","registerPluginJob","registerSitePageEnricher","registerSitePageResolver","registerPluginPermissions","registerPluginConfigSchema","isEmailConfigured","firebaseAdmin","BUNDLE_ID","registerCommerceMediaPublishGuard","registerCommerceRecurringCharges","registerProductCardReader","registerProductAiCapability","registerStoreSetupAiCapabilities","registerStoreSetupAiWriter","registerProductDraftWriter","registerCommerceTaxProfile","registerTaxReturnSource","commerceTaxReturnSource","taxSummaryHandler","registerRevenueSource","commerceRevenueSource","commerceBillingWebhookHandler","registerOrderFigureReaders","COMMERCE_PERMISSIONS","COMMERCE_CONFIG_SCHEMA","commerceSitePageEnricher","commerceSitePageResolver","cartCheckoutHandler","cartHandler","cartExtrasHandler","catalogHandler","checkoutHandler","downloadHandler","newsletterHandler","notifyRestockHandler","productHandler","relatedHandler","reservationAvailabilityHandler","gateHandler","memberFeedHandler","membershipAccountHandler","membershipAdminPasswordHandler","membershipAdminRemoveHandler","membershipContentHandler","membershipLoginHandler","membershipLogoutHandler","membershipRecoverHandler","membershipRegisterHandler","membershipResetHandler","membershipWishlistHandler","reserveHandler","streamHandler","subscriptionPortalHandler","reviewsHandler","connectHandler","cancelOrderHandler","carrierRatesAvailabilityHandler","collectionMembershipHandler","draftOrderHandler","fulfillOrderHandler","orderReceiptSendHandler","orderStatusHandler","registerOrderStatusActions","returnRequestStatusAction","giftCardsHandler","memberPostHandler","orderAnalyticsHandler","checkoutStatusHandler","posOrderHandler","printersHandler","posPaymentHandler","posReadersHandler","posTerminalConnectionTokenHandler","posDisplayHandler","posKioskHandler","registerPosOpsRoutes","processAbandonedHandler","scanAbandonedCheckouts","processRestockHandler","scanRestockAlerts","scanStockDecrements","refundHandler","orderWebhooksHandler","returnRequestHandler","returnsHandler","scanSupplierDeliveries","supplierUpdateHandler","RECOVERY_JOB_INTERVAL_MINUTES","pluginId","name","intervalMinutes","description","lockdown","scope","handler","gate","sent","console","info","scanReviewRequests","scan","missingLines","truncatedHosts","warn","hosts","reportedOrders","deadLettered","process","env","STRIPE_SECRET_KEY","reconcileCustomDomains","result","registered","failed","CARD_PAYMENT_DOOR","cardPayment","registerCommerceApi","req","res","localFulfillmentOptionsHandler","web","request","legacyFeedRoute","recipientLink","registerCommerceConsoleApi","localFulfillmentHandler","productSaveHandler","productStockHandler","orderNoteHandler","orderRestockAnswerHandler","paymentMethodsHandler","context","cloudPrntRoute","machine","epsonServerDirectPrintRoute","posOfflineSyncHandler","ordersShippingPrepareHandler","shipStationRoute","shippingEasyRoute","shippingConnectorsHandler","app","firestore","mintDownloadToken"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAGD;;;;;;;CAOC,GAED,SACEA,6BAA6B,EAC7BC,sBAAsB,EACtBC,iBAAiB,EACjBC,wBAAwB,EACxBC,wBAAwB,EACxBC,yBAAyB,EACzBC,0BAA0B,QACrB,sBAAqB;AAC5B,SAASC,iBAAiB,QAAQ,2BAA0B;AAC5D,SAASC,aAAa,QAAQ,2BAA0B;AACxD,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,iCAAiC,QAAQ,kCAA8B;AAChF,SAASC,gCAAgC,QAAQ,gCAA4B;AAC7E,SAASC,yBAAyB,QAAQ,2BAAuB;AACjE,SAASC,2BAA2B,QAAQ,oCAAgC;AAC5E,SAASC,gCAAgC,QAAQ,wCAAoC;AACrF,SAASC,0BAA0B,QAAQ,4CAAwC;AACnF,SAASC,0BAA0B,QAAQ,6BAAyB;AACpE,SAASC,0BAA0B,QAAQ,0BAAsB;AACjE,SAASC,uBAAuB,QAAQ,wDAAuD;AAC/F,SAASC,uBAAuB,QAAQ,gCAA4B;AACpE,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,qBAAqB,QAAQ,qDAAoD;AAC1F,SAASC,qBAAqB,QAAQ,6BAAyB;AAC/D,SAASC,6BAA6B,QAAQ,8BAA0B;AACxE,SAASC,0BAA0B,QAAQ,4BAAwB;AACnE,SAASC,oBAAoB,QAAQ,gCAA4B;AACjE,SAASC,sBAAsB,QAAQ,qBAAiB;AACxD,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,mBAAmB,QAAQ,4BAAwB;AAC5D,SAASC,WAAW,QAAQ,mBAAe;AAC3C,SAASC,iBAAiB,QAAQ,8BAA0B;AAC5D,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,eAAe,QAAQ,uBAAmB;AACnD,SAASC,eAAe,QAAQ,uBAAmB;AACnD,SAASC,iBAAiB,QAAQ,yBAAqB;AACvD,SAASC,oBAAoB,QAAQ,6BAAyB;AAC9D,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,8BAA8B,QAAQ,uCAAmC;AAClF,SAASC,WAAW,QAAQ,mBAAe;AAC3C,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,8BAA8B,QAAQ,wCAAoC;AACnF,SAASC,4BAA4B,QAAQ,sCAAkC;AAC/E,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,sBAAsB,QAAQ,+BAA2B;AAClE,SAASC,uBAAuB,QAAQ,gCAA4B;AACpE,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,yBAAyB,QAAQ,kCAA8B;AACxE,SAASC,sBAAsB,QAAQ,+BAA2B;AAClE,SAASC,yBAAyB,QAAQ,kCAA8B;AACxE,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,aAAa,QAAQ,qBAAiB;AAC/C,SAASC,yBAAyB,QAAQ,kCAA8B;AACxE,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,kBAAkB,QAAQ,2BAAuB;AAC1D,SAASC,+BAA+B,QAAQ,yCAAqC;AACrF,SAASC,2BAA2B,QAAQ,oCAAgC;AAC5E,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,mBAAmB,QAAQ,4BAAwB;AAC5D,SAASC,uBAAuB,QAAQ,iCAA6B;AACrE,SAASC,kBAAkB,EAAEC,0BAA0B,QAAQ,2BAAuB;AACtF,SAASC,yBAAyB,QAAQ,mCAA+B;AACzE,SAASC,gBAAgB,QAAQ,yBAAqB;AACtD,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,qBAAqB,QAAQ,8BAA0B;AAChE,SAASC,qBAAqB,QAAQ,8BAA0B;AAChE,SAASC,eAAe,QAAQ,wBAAoB;AACpD,SAASC,eAAe,QAAQ,uBAAmB;AACnD,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,iCAAiC,QAAQ,4CAAwC;AAC1F,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,eAAe,QAAQ,wBAAoB;AACpD,SAASC,oBAAoB,QAAQ,6BAAyB;AAC9D,SACEC,uBAAuB,EACvBC,sBAAsB,QACjB,gCAA4B;AACnC,SAASC,qBAAqB,EAAEC,iBAAiB,QAAQ,8BAA0B;AACnF,SAASC,mBAAmB,QAAQ,8BAA0B;AAC9D,SAASC,aAAa,QAAQ,qBAAiB;AAC/C,SAASC,oBAAoB,QAAQ,6BAAyB;AAC9D,SAASC,oBAAoB,EAAEC,cAAc,QAAQ,sBAAkB;AACvE,SAASC,sBAAsB,QAAQ,8BAA0B;AACjE,SAASC,qBAAqB,QAAQ,8BAA0B;AAEhE;;;;;;;;;;;;;;;;;;;;;;;;;CAyBC,GACD,MAAMC,gCAAgC;AAEtCvF,kBAAkB;IAChBwF,UAAUjF;IACVkF,MAAM;IACNC,iBAAiBH;IACjBI,aACE;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,yEAAyE;QACzE,yEAAyE;QACzE,mBAAmB;QACnB,IAAI,CAAC1F,qBAAqB;QAC1B,MAAM,EAAE2F,IAAI,EAAE,GAAG,MAAMnB,uBAAuBkB;QAC9C,IAAIC,MAAMC,QAAQC,IAAI,CAAC,CAAC,eAAe,EAAEF,KAAK,yBAAyB,CAAC;IAC1E;AACF;AAEAhG,kBAAkB;IAChBwF,UAAUjF;IACVkF,MAAM;IACNC,iBAAiBH;IACjBI,aAAa;IACbC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,IAAI,CAAC1F,qBAAqB;QAC1B,MAAM,EAAE2F,IAAI,EAAE,GAAG,MAAMjB,kBAAkBgB;QACzC,IAAIC,MAAMC,QAAQC,IAAI,CAAC,CAAC,eAAe,EAAEF,KAAK,qBAAqB,CAAC;IACtE;AACF;AAEA;;;;;CAKC,GACDhG,kBAAkB;IAChBwF,UAAUjF;IACVkF,MAAM;IACNC,iBAAiB;IACjBC,aACE,8EACA;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,IAAI,CAAC1F,qBAAqB;QAC1B,MAAM,EAAE8F,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC;QAC5C,MAAM,EAAEH,IAAI,EAAE,GAAG,MAAMG,mBAAmBJ;QAC1C,IAAIC,MAAMC,QAAQC,IAAI,CAAC,CAAC,eAAe,EAAEF,KAAK,gBAAgB,CAAC;IACjE;AACF;AAEA;;;;;;;;;;;;;;;CAeC,GACDhG,kBAAkB;IAChBwF,UAAUjF;IACVkF,MAAM;IACNC,iBAAiB;IACjBC,aACE;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,MAAMK,OAAO,MAAMpB,oBAAoBe;QACvC,IAAIK,KAAKC,YAAY,IAAID,KAAKE,cAAc,EAAE;YAC5CL,QAAQM,IAAI,CACV,CAAC,UAAU,EAAEH,KAAKC,YAAY,CAAC,oBAAoB,EAAED,KAAKI,KAAK,CAAC,CAAC,CAAC,GAChE,CAAC,+BAA+B,EAAEJ,KAAKK,cAAc,CAAC,OAAO,CAAC,GAC9D,CAAC,UAAU,EAAEL,KAAKE,cAAc,CAAC,gCAAgC,CAAC;QAExE;IACF;AACF;AAEA;;;;;;;;;;;;;;;;;;;CAmBC,GACDtG,kBAAkB;IAChBwF,UAAUjF;IACVkF,MAAM;IACNC,iBAAiB;IACjBC,aACE,wEACA;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,MAAMK,OAAO,MAAMf,uBAAuBU;QAC1C,IAAIK,KAAKM,YAAY,EAAE;YACrBT,QAAQM,IAAI,CACV,CAAC,UAAU,EAAEH,KAAKM,YAAY,CAAC,qCAAqC,CAAC,GACnE,CAAC,qDAAqD,CAAC;QAE7D;IACF;AACF;AAEA;;;;;;;;;CASC,GACD1G,kBAAkB;IAChBwF,UAAUjF;IACVkF,MAAM;IACNC,iBAAiB,KAAK;IACtBC,aACE,4EACA;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,IAAI,CAACY,QAAQC,GAAG,CAACC,iBAAiB,EAAE;QACpC,MAAM,EAAEC,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC;QAChD,MAAMC,SAAS,MAAMD,uBAAuBf;QAC5C,IAAIgB,OAAOC,UAAU,IAAID,OAAOE,MAAM,EAAE;YACtChB,QAAQC,IAAI,CACV,CAAC,mCAAmC,EAAEa,OAAOC,UAAU,CAAC,aAAa,CAAC,GACpE,GAAGD,OAAOE,MAAM,CAAC,eAAe,EAAEF,OAAOP,KAAK,CAAC,MAAM,CAAC;QAE5D;IACF;AACF;AAEA;;;;;CAKC,GACD,MAAMU,oBAAoB;IAAEC,aAAa;AAAK;AAE9C,2DAA2D,GAC3D,OAAO,SAASC;IACd1G;IACA,uEAAuE;IACvEK;IACAZ,0BAA0BoB;IAC1B,wEAAwE;IACxE,oEAAoE;IACpE,sEAAsE;IACtEnB,2BAA2BoB;IAC3B,kEAAkE;IAClEtB,yBAAyBwB;IACzB,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtEzB,yBAAyBwB;IACzB1B,uBAAuB,0BAA0B4B,qBAAqBuF;IACtEnH,uBAAuB,iBAAiB6B;IACxC,0EAA0E;IAC1E,+DAA+D;IAC/D7B,uBAAuB,sCAAsC,OAAOsH,KAAKC,MACvE,AAAC,CAAA,MAAM,MAAM,CAAC,gCAA4B,EAAGC,8BAA8B,CAACF,KAAKC;IAEnF,+DAA+D;IAC/DvH,uBAAuB,wBAAwB8B;IAC/C9B,uBAAuB,oBAAoB+B;IAC3C/B,uBAAuB,qBAAqBgC,iBAAiBmF;IAC7DnH,uBAAuB,qBAAqBiC;IAC5C,qEAAqE;IACrE,sEAAsE;IACtEjC,uBAAuB,iBAAiB;QACtCyH,KAAK,OAAOC,UAAY,AAAC,CAAA,MAAM,MAAM,CAAC,0BAAsB,EAAGC,eAAe,CAACD;IACjF;IACA1H,uBAAuB,uBAAuBkC;IAC9ClC,uBAAuB,2BAA2BmC;IAClD,qEAAqE;IACrEnC,uBAAuB,4BAA4BmE;IACnD,2EAA2E;IAC3E,yEAAyE;IACzEnE,uBAAuB,yBAAyB8D,oBAAoB;QAAE8D,eAAe;IAAK;IAC1F,sEAAsE;IACtE,6BAA6B;IAC7B7D,2BAA2BC;IAC3B,qEAAqE;IACrEhE,uBAAuB,4BAA4BoE;IACnDpE,uBAAuB,oBAAoBoC;IAC3CpC,uBAAuB,oBAAoBqC;IAC3CrC,uBAAuB,qCAAqCsC;IAC5DtC,uBAAuB,oBAAoBmD,gBAAgBgE;IAC3DnH,uBAAuB,iBAAiBuC;IACxCvC,uBAAuB,wBAAwBwC;IAC/CxC,uBAAuB,mBAAmBoD;IAC1CpD,uBAAuB,gCAAgCqD;IACvDrD,uBAAuB,oBAAoBsD;IAC3C,wEAAwE;IACxE,qBAAqB;IACrBtD,uBAAuB,2BAA2BoF;IAClDpF,uBAAuB,sBAAsByC;IAC7CzC,uBAAuB,sBAAsB4C;IAC7C5C,uBAAuB,oBAAoB6C;IAC3C7C,uBAAuB,qBAAqB8C;IAC5C,wDAAwD;IACxD9C,uBAAuB,sBAAsB+C;IAC7C/C,uBAAuB,uBAAuBgD;IAC9ChD,uBAAuB,oBAAoBiD;IAC3CjD,uBAAuB,uBAAuBkD;AAChD;AAEA;;;;;;;;;;CAUC,GACD,OAAO,SAAS2E;IACd,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,0CAA0C;IAC1CzH,0BAA0BoB;IAC1B,uEAAuE;IACvE,8EAA8E;IAC9Eb;IACA,yEAAyE;IACzE,8EAA8E;IAC9E,uCAAuC;IACvCI;IACA,2EAA2E;IAC3EH;IACA,2EAA2E;IAC3E,4EAA4E;IAC5E,iDAAiD;IACjDE;IACAD;IACA,yEAAyE;IACzE,wEAAwE;IACxE,uEAAuE;IACvE,yBAAyB;IACzBJ;IACA,wEAAwE;IACxE,uDAAuD;IACvDC;IACA,sEAAsE;IACtEM;IACA,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,mEAAmE;IACnEC,wBAAwBC,yBAAyB;QAAEuE,UAAUjF;IAAU;IACvE,0EAA0E;IAC1E,2EAA2E;IAC3E,qEAAqE;IACrEY,sBAAsBC,uBAAuB;QAAEoE,UAAUjF;IAAU;IACnE,uEAAuE;IACvE,iEAAiE;IACjET,8BAA8BuB;IAC9B,4EAA4E;IAC5E,2EAA2E;IAC3E,uDAAuD;IACvDtB,uBAAuB,yBAAyBwD;IAChD,qEAAqE;IACrExD,uBAAuB,mCAAmCyD;IAC1DzD,uBAAuB,oBAAoBuD;IAC3CvD,uBAAuB,wBAAwB2D;IAC/C,uEAAuE;IACvE,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,wDAAwD;IACxD3D,uBAAuB,0BAA0B4D;IACjD,yEAAyE;IACzE,yEAAyE;IACzE,0CAA0C;IAC1C5D,uBAAuB,8BAA8B,OAAOsH,KAAKC,MAC/D,AAAC,CAAA,MAAM,MAAM,CAAC,uCAAmC,EAAGO,uBAAuB,CAACR,KAAKC;IAEnF,0EAA0E;IAC1E,0EAA0E;IAC1E,iBAAiB;IACjBvH,uBAAuB,+BAA+B6D;IACtD,6EAA6E;IAC7E,4EAA4E;IAC5E,iBAAiB;IACjB7D,uBAAuB,0BAA0B,OAAOsH,KAAKC,MAC3D,AAAC,CAAA,MAAM,MAAM,CAAC,6BAAyB,EAAGQ,kBAAkB,CAACT,KAAKC;IAEpEvH,uBAAuB,2BAA2B,OAAOsH,KAAKC,MAC5D,AAAC,CAAA,MAAM,MAAM,CAAC,6BAAyB,EAAGS,mBAAmB,CAACV,KAAKC;IAErE,iEAAiE;IACjE,uEAAuE;IACvE,yDAAyD;IACzDvH,uBAAuB,uBAAuB,OAAOsH,KAAKC,MACxD,AAAC,CAAA,MAAM,MAAM,CAAC,gCAA4B,EAAGU,gBAAgB,CAACX,KAAKC;IAErEvH,uBAAuB,iCAAiC,OAAOsH,KAAKC,MAClE,AAAC,CAAA,MAAM,MAAM,CAAC,gCAA4B,EAAGW,yBAAyB,CAACZ,KAAKC;IAE9E,qEAAqE;IACrE,sEAAsE;IACtE,gEAAgE;IAChEvH,uBAAuB,uBAAuBiE;IAC9C,0EAA0E;IAC1E,4EAA4E;IAC5EjE,uBAAuB,wBAAwB;QAAEyH,KAAKtG;IAAkB;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,8EAA8E;IAC9EnB,uBAAuB,4BAA4B;QACjDyH,KAAK,OAAOC,UACV,AAAC,CAAA,MAAM,MAAM,CAAC,8BAA0B,EAAGS,qBAAqB,CAACT;IACrE;IACA,uEAAuE;IACvE,uEAAuE;IACvE1H,uBAAuB,kCAAkC0D;IACzD,2EAA2E;IAC3E,4EAA4E;IAC5E,wEAAwE;IACxE,uEAAuE;IACvE1D,uBACE,6BACA0C;IAEF1C,uBAAuB,2BAA2B2C;IAClD3C,uBAAuB,wBAAwBkE;IAC/ClE,uBAAuB,sBAAsBqE;IAC7C,wEAAwE;IACxE,4EAA4E;IAC5E,yEAAyE;IACzE,8EAA8E;IAC9E,0EAA0E;IAC1E,oEAAoE;IACpErE,uBAAuB,qBAAqBsE;IAC5CtE,uBACE,iDACA;QACEyH,KAAK,OAAOC,SAASU,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,2BAAuB,EAAGC,cAAc,CAACX,SAASU;IACpE,GACA;QAAEE,SAAS;IAAK;IAElBtI,uBACE,iDACA;QACEyH,KAAK,OAAOC,SAASU,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,2BAAuB,EAAGG,2BAA2B,CAACb,SAASU;IACjF,GACA;QAAEE,SAAS;IAAK;IAElB,wEAAwE;IACxE,qEAAqE;IACrE,wEAAwE;IACxE,oDAAoD;IACpDtI,uBAAuB,wBAAwBuE;IAC/CvE,uBAAuB,wBAAwBwE;IAC/CxE,uBAAuB,wBAAwB0E;IAC/C,0EAA0E;IAC1E,yEAAyE;IACzE,oEAAoE;IACpE1E,uBAAuB,sBAAsB2E;IAC7C,kEAAkE;IAClEC;IACA,0EAA0E;IAC1E,4EAA4E;IAC5E,iDAAiD;IACjD5E,uBAAuB,6BAA6B,OAAOsH,KAAKC,MAC9D,AAAC,CAAA,MAAM,MAAM,CAAC,+BAA2B,EAAGiB,qBAAqB,CAAClB,KAAKC;IAEzE,4EAA4E;IAC5E,2EAA2E;IAC3E,QAAQ;IACRvH,uBAAuB,0CAA0CyE;IACjEzE,uBAAuB,8BAA8B6E;IACrD7E,uBAAuB,4BAA4B+E;IACnD/E,uBAAuB,mBAAmBkF;IAC1C,qEAAqE;IACrE,2DAA2D;IAC3DlF,uBAAuB,oBAAoBqF;IAC3C,yEAAyE;IACzE,kDAAkD;IAClDrF,uBAAuB,2BAA2BmF;IAClDnF,uBAAuB,4BAA4BuF;IACnD,qEAAqE;IACrE,kCAAkC;IAClCvF,uBAAuB,oCAAoC,OAAOsH,KAAKC,MACrE,AAAC,CAAA,MAAM,MAAM,CAAC,sCAAkC,EAAGkB,4BAA4B,CAACnB,KAAKC;IAEvF,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtEvH,uBACE,gCACA;QACEyH,KAAK,OAAOC,SAASU,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,0BAAsB,EAAGM,gBAAgB,CAAChB,SAASU;IACrE,GACA;QAAEE,SAAS;IAAK;IAElB,2EAA2E;IAC3E,uEAAuE;IACvE,2EAA2E;IAC3E,oEAAoE;IACpEtI,uBACE,iCACA;QACEyH,KAAK,OAAOC,SAASU,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,2BAAuB,EAAGO,iBAAiB,CAACjB,SAASU;IACvE,GACA;QAAEE,SAAS;IAAK;IAElB,uEAAuE;IACvE,mCAAmC;IACnCtI,uBAAuB,gCAAgC,OAAOsH,KAAKC,MACjE,AAAC,CAAA,MAAM,MAAM,CAAC,kCAA8B,EAAGqB,yBAAyB,CAACtB,KAAKC;IAEhF,qEAAqE;IACrE,yEAAyE;IACzE,uDAAuD;IACvDhG,2BAA2B,IAAMhB,cAAcsI,GAAG,GAAGC,SAAS;AAChE;AAEA,6DAA6D;AAC7D,SAASC,iBAAiB,QAAQ,uBAAmB;AAErD,mEAAmE;AACnE,yDAAyD;AACzD,cAAc,yBAAqB"}
+{"version":3,"sources":["../../../../../../libs/plugins/commerce/src/lib/server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n\n/**\n * Server half of the commerce plugin (AGL-396): the site-facing storefront\n * API handlers, registered with the plugin API registry and served by the\n * tenant dispatcher at their unchanged `/api/commerce/*` URLs. This module\n * pulls in firebase-admin + Stripe, so it is NOT re-exported from the client\n * barrel — apps import `@aglyn/plugins-commerce/server` only from their\n * (server-only) API dispatcher registration.\n */\n\nimport {\n  registerBillingWebhookHandler,\n  registerPluginApiRoute,\n  registerPluginJob,\n  registerSitePageEnricher,\n  registerSitePageResolver,\n  registerPluginPermissions,\n  registerPluginConfigSchema,\n} from '@aglyn/aglyn/server'\nimport { isEmailConfigured } from '@aglyn/shared-util-email'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { registerCommerceMediaPublishGuard } from './server/media-publish-guard'\nimport { registerCommerceRecurringCharges } from './server/recurring-charges'\nimport { registerProductCardReader } from './server/product-card'\nimport { registerProductAiCapability } from './server/product-ai-capability'\nimport { registerStoreSetupAiCapabilities } from './server/store-setup-ai-capability'\nimport { registerStoreSetupAiWriter } from './server/store-setup-ai-writer.console'\nimport { registerProductDraftWriter } from './server/product-drafts'\nimport { registerCommerceTaxProfile } from './server/tax-profile'\nimport { registerTaxReturnSource } from '@aglyn/aglyn/plugin-manager/plugin-tax-return-sources'\nimport { commerceTaxReturnSource } from './server/tax-return-source'\nimport { taxSummaryHandler } from './server/tax-summary'\nimport { registerRevenueSource } from '@aglyn/aglyn/plugin-manager/plugin-revenue-sources'\nimport { commerceRevenueSource } from './server/revenue-source'\nimport { commerceBillingWebhookHandler } from './server/billing-webhook'\nimport { registerOrderFigureReaders } from './server/order-figures'\nimport { COMMERCE_PERMISSIONS } from './model/plugin-permissions'\nimport { COMMERCE_CONFIG_SCHEMA } from './plugin-config'\nimport { commerceSitePageEnricher } from './server/site-page-enricher'\nimport { commerceSitePageResolver } from './server/site-page-resolver'\nimport { cartCheckoutHandler } from './server/cart-checkout'\nimport { cartHandler } from './server/cart'\nimport { cartExtrasHandler } from './server/checkout-extras'\nimport { catalogHandler } from './server/catalog'\nimport { checkoutHandler } from './server/checkout'\nimport { downloadHandler } from './server/download'\nimport { newsletterHandler } from './server/newsletter'\nimport { notifyRestockHandler } from './server/notify-restock'\nimport { productHandler } from './server/product'\nimport { relatedHandler } from './server/related'\nimport { reservationAvailabilityHandler } from './server/reservation-availability'\nimport { gateHandler } from './server/gate'\nimport { memberFeedHandler } from './server/member-feed'\nimport { membershipAccountHandler } from './server/membership-account'\nimport { membershipAdminPasswordHandler } from './server/membership-admin-password'\nimport { membershipAdminRemoveHandler } from './server/membership-admin-remove'\nimport { membershipContentHandler } from './server/membership-content'\nimport { membershipLoginHandler } from './server/membership-login'\nimport { membershipLogoutHandler } from './server/membership-logout'\nimport { membershipRecoverHandler } from './server/membership-recover'\nimport { membershipRegisterHandler } from './server/membership-register'\nimport { membershipResetHandler } from './server/membership-reset'\nimport { membershipWishlistHandler } from './server/membership-wishlist'\nimport { reserveHandler } from './server/reserve'\nimport { streamHandler } from './server/stream'\nimport { subscriptionPortalHandler } from './server/subscription-portal'\nimport { reviewsHandler } from './server/reviews'\nimport { connectHandler } from './server/connect'\nimport { cancelOrderHandler } from './server/cancel-order'\nimport { carrierRatesAvailabilityHandler } from './server/carrier-rates-availability'\nimport { collectionMembershipHandler } from './server/collection-membership'\nimport { draftOrderHandler } from './server/draft-order'\nimport { fulfillOrderHandler } from './server/fulfill-order'\nimport { orderReceiptSendHandler } from './server/order-receipt-send'\nimport { orderStatusHandler, registerOrderStatusActions } from './server/order-status'\nimport { returnRequestStatusAction } from './server/return-status-action'\nimport { giftCardsHandler } from './server/gift-cards'\nimport { memberPostHandler } from './server/member-post'\nimport { orderAnalyticsHandler } from './server/order-analytics'\nimport { checkoutStatusHandler } from './server/checkout-status'\nimport { posOrderHandler } from './server/pos-order'\nimport { printersHandler } from './server/printers'\nimport { posPaymentHandler } from './server/pos-payment'\nimport { posReadersHandler } from './server/pos-readers'\nimport { posTerminalConnectionTokenHandler } from './server/pos-terminal-connection-token'\nimport { posDisplayHandler } from './server/pos-display'\nimport { posKioskHandler } from './server/pos-kiosk'\nimport { registerPosOpsRoutes } from './server/pos-ops-routes'\nimport {\n  processAbandonedHandler,\n  scanAbandonedCheckouts,\n} from './server/process-abandoned'\nimport { processRestockHandler, scanRestockAlerts } from './server/process-restock'\nimport { scanStockDecrements } from './server/reconcile-stock'\nimport { refundHandler } from './server/refund'\nimport { orderWebhooksHandler } from './server/order-webhooks'\nimport { returnRequestHandler, returnsHandler } from './server/returns'\nimport { scanSupplierDeliveries } from './server/supplier-outbox'\nimport { supplierUpdateHandler } from './server/supplier-update'\n\n/**\n * The two commerce beats (AGL-2227).\n *\n * `commerce/process-abandoned` and `commerce/process-restock` have existed\n * since AGL-323/326 as `x-cron-secret` HTTP doors, and `registerCommerceConsoleApi`\n * below has called them \"the scheduler-driven jobs\" in a comment that whole\n * time. **Nothing scheduled them.** Not `scheduled-crons.yml` (its table names\n * 11 paths; neither of these), not `vercel.json` (no `crons` key at all), not\n * `registerPluginJob` — the only two registrations in the repo were scheduled\n * publishing and the bookings hold-expiry.\n *\n * The cost was a Pro-tier entitlement (`abandonedCart`) that had never sent an\n * email, and a storefront \"notify me when it's back\" form writing into a queue\n * with no drain. AGL-1793 had already added the collection-group indexes these\n * two scans need, which is the clearest evidence they were always meant to run.\n *\n * Module scope, like the bookings job beside it: the runner route reaches jobs\n * through `ensureAll(['tenantApi'])`, and a registration inside a `register*`\n * function would depend on which entry point happened to be loaded.\n *\n * 15 minutes, not 1: `process-abandoned` will not remind a checkout younger\n * than an hour and `process-restock` only mails alerts whose product already\n * has stock, so a tighter beat buys nothing and costs two collection-group\n * scans a minute. Both are bounded (200 docs) and idempotent — each pass\n * stamps what it sent — so an overlapping or repeated beat cannot double-send.\n */\nconst RECOVERY_JOB_INTERVAL_MINUTES = 15\n\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'abandoned-checkout-recovery',\n  intervalMinutes: RECOVERY_JOB_INTERVAL_MINUTES,\n  description:\n    'Email one recovery reminder per stalled checkout (abandonedCart plans).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    // Quietly, not as an error: email is optional per deployment, and a beat\n    // that logs every minute on a self-host without Resend buries everything\n    // else in the log.\n    if (!isEmailConfigured()) return\n    const { sent } = await scanAbandonedCheckouts(gate)\n    if (sent) console.info(`commerce: sent ${sent} abandoned-cart reminders`)\n  },\n})\n\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'back-in-stock-alerts',\n  intervalMinutes: RECOVERY_JOB_INTERVAL_MINUTES,\n  description: 'Email shoppers whose requested product is in stock again.',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    if (!isEmailConfigured()) return\n    const { sent } = await scanRestockAlerts(gate)\n    if (sent) console.info(`commerce: sent ${sent} back-in-stock alerts`)\n  },\n})\n\n/**\n * The review-request email (AGL-3736). HOURLY: a request is owed days after\n * fulfilment, so an hour's lateness is invisible, and the scan is one\n * collection-group range query over `reviewRequestDueAtMs` — a field only\n * orders still owed a request carry, so an empty beat costs one read.\n */\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'review-request-emails',\n  intervalMinutes: 60,\n  description:\n    'Email each buyer one review request, with a single-use link per product, ' +\n    'days after their order is fulfilled (AGL-3736).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    if (!isEmailConfigured()) return\n    const { scanReviewRequests } = await import('./server/review-requests')\n    const { sent } = await scanReviewRequests(gate)\n    if (sent) console.info(`commerce: sent ${sent} review requests`)\n  },\n})\n\n/**\n * The missing-decrement detector (AGL-2358).\n *\n * HOURLY, not on the 15-minute recovery beat: it is a detector for a rare\n * process death, not a queue drain, and nothing it finds gets less true for\n * waiting an hour. The cost of the beat is what sets the interval — one\n * collection-group read of the platform's most recent orders, plus two\n * queries per host that has any — and an hour keeps that off the same tick as\n * the two scans above.\n *\n * NOT gated on `isEmailConfigured()`, unlike its two neighbours. Those send\n * mail; this writes a console notification and a log line, both of which work\n * on a self-host with no mail provider at all — and a stock count that is\n * silently wrong is exactly what a self-hoster least wants suppressed by a\n * setting about email.\n */\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'stock-decrement-reconciliation',\n  intervalMinutes: 60,\n  description:\n    'Report paid orders whose stock decrement never landed (AGL-2358).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    const scan = await scanStockDecrements(gate)\n    if (scan.missingLines || scan.truncatedHosts) {\n      console.warn(\n        `commerce: ${scan.missingLines} order lines across ${scan.hosts} ` +\n          `sites have no sale ledger row (${scan.reportedOrders} newly ` +\n          `reported, ${scan.truncatedHosts} sites' ledger window truncated)`,\n      )\n    }\n  },\n})\n\n/**\n * The dropship supplier outbox drain (AGL-2473).\n *\n * EVERY MINUTE, unlike the three above, and the interval is the point rather\n * than an oversight. This is the only one of the four that a BUYER is waiting\n * on: the row it drains is a paid order that has not been routed to whoever\n * ships it, and every minute it sits is a minute the parcel is not moving. The\n * first backoff step is also 60s, so a supplier that blipped is retried on the\n * next tick.\n *\n * The cost that set fifteen minutes for the recovery pair does not apply. Those\n * are collection-GROUP scans across every site on the platform; this is one\n * ordinary equality query against a top-level collection that is EMPTY in the\n * ordinary case — an empty result bills a single read, so the whole beat is\n * ~1,440 reads a day whether or not anyone is dropshipping.\n *\n * Not gated on `isEmailConfigured()`. The supplier notification is an HTTP POST\n * to the merchant's own supplier, and a self-host with no mail provider still\n * has dropship orders to route.\n */\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'supplier-webhook-delivery',\n  intervalMinutes: 1,\n  description:\n    'Deliver queued dropship supplier notifications, with backoff and a ' +\n    'dead letter that tells the merchant (AGL-2473).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    const scan = await scanSupplierDeliveries(gate)\n    if (scan.deadLettered) {\n      console.warn(\n        `commerce: ${scan.deadLettered} dropship orders could not be routed ` +\n          `to their supplier and have been reported on the order`,\n      )\n    }\n  },\n})\n\n/**\n * Stripe payment method domains for every connected custom domain (AGL-3629).\n *\n * The backfill for domains connected before registration existed, and the\n * repair for a connect whose event was lost, in one daily pass. A domain\n * already registered costs a document read and no Stripe call, so the beat is\n * cheap; a day's delay costs only the Apple Pay button on a domain connected\n * while Stripe was unreachable, and the first in-page checkout there registers\n * it anyway.\n */\nregisterPluginJob({\n  pluginId: BUNDLE_ID,\n  name: 'payment-method-domains',\n  intervalMinutes: 24 * 60,\n  description:\n    'Register connected custom domains with Stripe so Apple Pay, Google Pay ' +\n    'and Link show on them (AGL-3629).',\n  lockdown: { scope: 'per-host' },\n  handler: async (gate) => {\n    if (!process.env.STRIPE_SECRET_KEY) return\n    const { reconcileCustomDomains } = await import('./server/payment-method-domains')\n    const result = await reconcileCustomDomains(gate)\n    if (result.registered || result.failed) {\n      console.info(\n        `commerce: payment method domains — ${result.registered} registered, ` +\n          `${result.failed} failed across ${result.hosts} sites`,\n      )\n    }\n  },\n})\n\n/**\n * A visitor's payment door: it opens a Stripe Checkout Session for whoever\n * calls it, so the dispatcher holds it to the card-testing counters\n * (AGL-3363). Declared here, beside the registration, so the door cannot\n * exist without it.\n */\nconst CARD_PAYMENT_DOOR = { cardPayment: true } as const\n\n/** Registers the commerce plugin's storefront API routes. */\nexport function registerCommerceApi(): void {\n  registerProductCardReader()\n  // The merchant's tax rule, for every plugin that prices a charge here.\n  registerCommerceTaxProfile()\n  registerPluginPermissions(COMMERCE_PERMISSIONS)\n  // Merchant-settable register discount ceiling (AGL-2161). Registered on\n  // BOTH surfaces, like the permissions above: the POS route reads it\n  // server-side, and the settings card renders it from the same schema.\n  registerPluginConfigSchema(COMMERCE_CONFIG_SCHEMA)\n  // PDP/PLP template pages (AGL-418): /products/* + /collections/*.\n  registerSitePageResolver(commerceSitePageResolver)\n  // Seeds product grids on ordinary screens (AGL-659) — the resolver above\n  // only covers /products/* and /collections/*, so /products itself, and any\n  // designed page with a grid on it, needed this to render server-side.\n  registerSitePageEnricher(commerceSitePageEnricher)\n  registerPluginApiRoute('commerce/cart-checkout', cartCheckoutHandler, CARD_PAYMENT_DOOR)\n  registerPluginApiRoute('commerce/cart', cartHandler)\n  // What the cart offers besides shipping (AGL-3624): pickup locations, and\n  // local delivery's fee, minimum and windows for a postal code.\n  registerPluginApiRoute('commerce/local-fulfillment-options', async (req, res) =>\n    (await import('./server/local-fulfillment')).localFulfillmentOptionsHandler(req, res),\n  )\n  // Optional lines another plugin offers at the cart (AGL-3635).\n  registerPluginApiRoute('commerce/cart-extras', cartExtrasHandler)\n  registerPluginApiRoute('commerce/catalog', catalogHandler)\n  registerPluginApiRoute('commerce/checkout', checkoutHandler, CARD_PAYMENT_DOOR)\n  registerPluginApiRoute('commerce/download', downloadHandler)\n  // The pre-channels Google feed address (AGL-299), now written by the\n  // catalog's feed publisher (AGL-3637); the module loads with a fetch.\n  registerPluginApiRoute('commerce/feed', {\n    web: async (request) => (await import('./server/legacy-feed')).legacyFeedRoute(request),\n  })\n  registerPluginApiRoute('commerce/newsletter', newsletterHandler)\n  registerPluginApiRoute('commerce/notify-restock', notifyRestockHandler)\n  // GA-safe order projection for the storefront `purchase` (AGL-1641).\n  registerPluginApiRoute('commerce/order-analytics', orderAnalyticsHandler)\n  // The guest order-status page's data (AGL-3610), behind the signed link in\n  // every buyer email — a recipient link, so it outlives the site's gates.\n  registerPluginApiRoute('commerce/order-status', orderStatusHandler, { recipientLink: true })\n  // …and its \"Request a return\" button (AGL-3611), on an order that can\n  // still send something back.\n  registerOrderStatusActions(returnRequestStatusAction)\n  // What became of a session the shopper was returned from (AGL-3606).\n  registerPluginApiRoute('commerce/checkout-status', checkoutStatusHandler)\n  registerPluginApiRoute('commerce/product', productHandler)\n  registerPluginApiRoute('commerce/related', relatedHandler)\n  registerPluginApiRoute('commerce/reservation-availability', reservationAvailabilityHandler)\n  registerPluginApiRoute('commerce/reserve', reserveHandler, CARD_PAYMENT_DOOR)\n  registerPluginApiRoute('commerce/gate', gateHandler)\n  registerPluginApiRoute('commerce/member-feed', memberFeedHandler)\n  registerPluginApiRoute('commerce/stream', streamHandler)\n  registerPluginApiRoute('commerce/subscription-portal', subscriptionPortalHandler)\n  registerPluginApiRoute('commerce/reviews', reviewsHandler)\n  // A buyer's return request (AGL-3611), from their account or the signed\n  // order-status link.\n  registerPluginApiRoute('commerce/return-request', returnRequestHandler)\n  registerPluginApiRoute('membership/account', membershipAccountHandler)\n  registerPluginApiRoute('membership/content', membershipContentHandler)\n  registerPluginApiRoute('membership/login', membershipLoginHandler)\n  registerPluginApiRoute('membership/logout', membershipLogoutHandler)\n  // Password recovery pair (AGL-552): request + complete.\n  registerPluginApiRoute('membership/recover', membershipRecoverHandler)\n  registerPluginApiRoute('membership/register', membershipRegisterHandler)\n  registerPluginApiRoute('membership/reset', membershipResetHandler)\n  registerPluginApiRoute('membership/wishlist', membershipWishlistHandler)\n}\n\n/**\n * Registers the commerce plugin's console-side API routes (AGL-396):\n * merchant/staff operations (Connect onboarding, refunds, draft & POS\n * orders, member posts), the supplier tracking callback, and the HTTP doors\n * for the abandoned-cart / restock passes.\n *\n * Those last two are NOT what schedules them — the `registerPluginJob` calls\n * above are (AGL-2227). This comment used to call them \"the scheduler-driven\n * jobs\", which is how they stayed dark for months: it asserted the wiring\n * instead of having it.\n */\nexport function registerCommerceConsoleApi(): void {\n  // The register's gate (`managePos`) is resolved on THIS surface: every POS\n  // route below runs in the console, and a key no surface registered here is\n  // absent from the resolved map, which reads as refused — the site's own\n  // owner was answered 403 at the register.\n  registerPluginPermissions(COMMERCE_PERMISSIONS)\n  // What a product looks like to a surface that is not this plugin's — a\n  // campaign email that features one asks here rather than importing the model.\n  registerProductCardReader()\n  // …and a draft product another plugin asks for by name (AGL-3616): an AI\n  // build setting a store up from a brief, unpriced unless the brief priced it.\n  // The console runs AI jobs (AGL-3026).\n  registerProductDraftWriter()\n  // …and the operation an AI build plans for it, which that writer executes.\n  registerProductAiCapability()\n  // …and the store's shipping, pickup, local delivery and tax settings an AI\n  // build sets up (AGL-3749), written live as the console's cards write them,\n  // with the four operations that writer executes.\n  registerStoreSetupAiWriter()\n  registerStoreSetupAiCapabilities()\n  // …and why a file somebody is SELLING may not be made public (AGL-3080).\n  // The media library asks before it hands an asset its permanent CDN URL\n  // back; what a product is, and which of its fields hold paid media, is\n  // this plugin's to know.\n  registerCommerceMediaPublishGuard()\n  // …and which memberships a site sells, for a security lockdown to pause\n  // (AGL-3364). The lockdown route runs on this surface.\n  registerCommerceRecurringCharges()\n  // …and the tax rule, for the webhook that confirms what they charged.\n  registerCommerceTaxProfile()\n  // …and its sales on the operator's own sales tax return (AGL-3080): the\n  // tax a storefront checkout collected under the platform's registrations.\n  // The staff return awaits this surface before it asks, and refuses to be\n  // filed without this source — commerce declares `taxReturnSource`.\n  registerTaxReturnSource(commerceTaxReturnSource, { pluginId: BUNDLE_ID })\n  // …and the take its orders earn the operator, on the staff revenue report\n  // (AGL-3080) — commerce declares `revenueSource`, so the report names this\n  // source as unread rather than counting it as zero if it is missing.\n  registerRevenueSource(commerceRevenueSource, { pluginId: BUNDLE_ID })\n  // Stripe webhook sections (AGL-418): orders/carts/drafts/reservations/\n  // subscriptions ride the platform webhook via the hook registry.\n  registerBillingWebhookHandler(commerceBillingWebhookHandler)\n  // Cancel + stock release in one transaction (AGL-1808). Server-side because\n  // the release depends on the transition rule, and a client write could not\n  // re-ask it under the same lock that flips the status.\n  registerPluginApiRoute('commerce/cancel-order', cancelOrderHandler)\n  // Whether live carrier rates can be offered on this site (AGL-3612).\n  registerPluginApiRoute('commerce/shipping/carrier-rates', carrierRatesAvailabilityHandler)\n  registerPluginApiRoute('commerce/connect', connectHandler)\n  registerPluginApiRoute('commerce/draft-order', draftOrderHandler)\n  // Fulfil + mark-delivered with the transition re-asked under the write\n  // (AGL-1819) — the same stale-dialog hole cancel-order closes, minus the\n  // stock release those two transitions never had. The customer REST API's\n  // `PATCH /v1/sites/{id}/orders/{id}` records a shipment through the same\n  // transaction (`server/api-v1/orders-and-products.ts`).\n  registerPluginApiRoute('commerce/fulfill-order', fulfillOrderHandler)\n  // Pickup and local delivery steps (AGL-3624) — ready, picked up, out for\n  // delivery, delivered — from the console queue, the order dialog and the\n  // native Aglyn app. Loaded on first call.\n  registerPluginApiRoute('commerce/local-fulfillment', async (req, res) =>\n    (await import('./server/local-fulfillment-status')).localFulfillmentHandler(req, res),\n  )\n  // \"Resend receipt\" from the order dialog (AGL-3610): by email, or by text\n  // when the platform's SMS provider is configured. Rate-limited per member\n  // and per order.\n  registerPluginApiRoute('commerce/order-receipt-send', orderReceiptSendHandler)\n  // The product editor's save and Adjust stock for the native apps (AGL-3652):\n  // the console's own product-write computation under the rules' gate. Loaded\n  // on first call.\n  registerPluginApiRoute('commerce/products/save', async (req, res) =>\n    (await import('./server/products-write')).productSaveHandler(req, res),\n  )\n  registerPluginApiRoute('commerce/products/stock', async (req, res) =>\n    (await import('./server/products-write')).productStockHandler(req, res),\n  )\n  // The products list's Duplicate and Delete for the native apps (AGL-3841):\n  // the console's own copy and soft delete, with the site-wide cache drop.\n  registerPluginApiRoute('commerce/products/duplicate', async (req, res) =>\n    (await import('./server/products-write')).productDuplicateHandler(req, res),\n  )\n  registerPluginApiRoute('commerce/products/delete', async (req, res) =>\n    (await import('./server/products-write')).productDeleteHandler(req, res),\n  )\n  // The order dialog's note and restock answer for the native apps\n  // (AGL-3651, AGL-3652): the console's own timeline computation, in one\n  // transaction on the stored order. Loaded on first call.\n  registerPluginApiRoute('commerce/order-note', async (req, res) =>\n    (await import('./server/order-annotations')).orderNoteHandler(req, res),\n  )\n  registerPluginApiRoute('commerce/order-restock-answer', async (req, res) =>\n    (await import('./server/order-annotations')).orderRestockAnswerHandler(req, res),\n  )\n  // The order dialog's Packing slip and Invoice for the native apps\n  // (AGL-3841): the console's own two pages over the stored order, which the\n  // apps print on the device's print sheet. Loaded on first call.\n  registerPluginApiRoute('commerce/order-print', async (req, res) =>\n    (await import('./server/order-print')).orderPrintHandler(req, res),\n  )\n  // Issue / void store credit (AGL-2226). Server-side because the host\n  // catch-all in the Firestore rules would otherwise let a client write\n  // its own `balanceCents`, which checkout applies as amount-off.\n  registerPluginApiRoute('commerce/gift-cards', giftCardsHandler)\n  // The merchant's own storefront sales tax, by who owes it (AGL-2440): the\n  // same rows and classifier the operator's return reads, fenced to one site.\n  registerPluginApiRoute('commerce/tax-summary', { web: taxSummaryHandler })\n  // The payment methods card (AGL-3629): toggles, the platform's offer, the\n  // payout account's capabilities and the site's wallet domains. Loaded with\n  // the first request, so a console that never opens Settings never imports it.\n  registerPluginApiRoute('commerce/payment-methods', {\n    web: async (request) =>\n      (await import('./server/payment-methods')).paymentMethodsHandler(request),\n  })\n  // A smart collection's rules changed or it was deleted: re-stamp which\n  // products it holds (AGL-3321), the membership the storefront queries.\n  registerPluginApiRoute('commerce/collection-membership', collectionMembershipHandler)\n  // A site member's password help (AGL-914) and removal (AGL-3308), from the\n  // Users page drawer and the Inbox. Console-auth, not the visitor cookie the\n  // storefront's `membership/*` routes take, so they are served where the\n  // console posts: the console's own dispatcher loads this surface only.\n  registerPluginApiRoute(\n    'membership/admin-password',\n    membershipAdminPasswordHandler,\n  )\n  registerPluginApiRoute('membership/admin-remove', membershipAdminRemoveHandler)\n  registerPluginApiRoute('commerce/member-post', memberPostHandler)\n  registerPluginApiRoute('commerce/pos-order', posOrderHandler)\n  // A register's cloud receipt printers and the jobs a manager sends them\n  // (AGL-3619), and the two doors the printers themselves poll. The doors are\n  // MACHINE routes: a printer is no member and names no site cookie, so it\n  // authenticates with the per-printer secret in its URL and its own device id,\n  // and the route asks the plan before it hands over a job. Loaded with the\n  // first poll, so a console that has no printers never imports them.\n  registerPluginApiRoute('commerce/printers', printersHandler)\n  registerPluginApiRoute(\n    'commerce/cloudprnt/:hostId/:printerId/:secret',\n    {\n      web: async (request, context) =>\n        (await import('./server/printer-poll')).cloudPrntRoute(request, context),\n    },\n    { machine: true },\n  )\n  registerPluginApiRoute(\n    'commerce/epson-sdp/:hostId/:printerId/:secret',\n    {\n      web: async (request, context) =>\n        (await import('./server/printer-poll')).epsonServerDirectPrintRoute(request, context),\n    },\n    { machine: true },\n  )\n  // The register's tenders against an open sale, its Stripe Terminal card\n  // readers, and the paired customer display (AGL-3607, AGL-3608). The\n  // display's `pair`/`poll`/`respond` take a display token and no console\n  // session; every other action is gated like a sale.\n  registerPluginApiRoute('commerce/pos-payment', posPaymentHandler)\n  registerPluginApiRoute('commerce/pos-readers', posReadersHandler)\n  registerPluginApiRoute('commerce/pos-display', posDisplayHandler)\n  // The self-service kiosk (AGL-3623): a register's paired screen where the\n  // customer orders and pays. Its device token, never a staff session; the\n  // register's queue of \"pay at counter\" orders is gated like a sale.\n  registerPluginApiRoute('commerce/pos-kiosk', posKioskHandler)\n  // Shifts, staff PINs, the customer lookup and returns (AGL-3609).\n  registerPosOpsRoutes()\n  // The offline register (AGL-3625): the kit a register caches to sell cash\n  // while the connection is down, and the sync that records those sales once.\n  // Gated like a sale; loaded with its first call.\n  registerPluginApiRoute('commerce/pos-offline-sync', async (req, res) =>\n    (await import('./server/pos-offline-sync')).posOfflineSyncHandler(req, res),\n  )\n  // The native Aglyn POS app's Stripe Terminal SDK: a connection token scoped\n  // to the site's Location, and the Location itself (AGL-3618). Gated like a\n  // sale.\n  registerPluginApiRoute('commerce/pos-terminal-connection-token', posTerminalConnectionTokenHandler)\n  registerPluginApiRoute('commerce/process-abandoned', processAbandonedHandler)\n  registerPluginApiRoute('commerce/process-restock', processRestockHandler)\n  registerPluginApiRoute('commerce/refund', refundHandler)\n  // Returns (AGL-3611): approve, decline, receive with restock, refund\n  // through the route above, a label from a shipping plugin.\n  registerPluginApiRoute('commerce/returns', returnsHandler)\n  // The merchant's outbound order webhooks (AGL-3611): endpoints, secrets,\n  // a test ping and a resend from the delivery log.\n  registerPluginApiRoute('commerce/order-webhooks', orderWebhooksHandler)\n  registerPluginApiRoute('commerce/supplier-update', supplierUpdateHandler)\n  // Stamps the open orders that predate the shipping fields, before an\n  // export for shipping (AGL-3613).\n  registerPluginApiRoute('commerce/orders-shipping-prepare', async (req, res) =>\n    (await import('./server/orders-shipping-prepare')).ordersShippingPrepareHandler(req, res),\n  )\n  // ShipStation's Custom Store endpoint (AGL-3613): ShipStation's servers\n  // pull the order feed and post shipments back with the site's own Basic\n  // credentials, so it is a MACHINE's route and asks the site's commerce,\n  // plan, release and lockdown gates itself once the credentials prove the\n  // site. Loaded on its first call, never with the console API surface.\n  registerPluginApiRoute(\n    'commerce/shipstation/:hostId',\n    {\n      web: async (request, context) =>\n        (await import('./server/shipstation')).shipStationRoute(request, context),\n    },\n    { machine: true },\n  )\n  // ShippingEasy's shipment callback (AGL-3633): ShippingEasy's servers post\n  // each label bought for an order this store sent them, signed with the\n  // merchant's own API secret, so it is a MACHINE's route like ShipStation's\n  // above and asks the same gates once the signature proves the site.\n  registerPluginApiRoute(\n    'commerce/shippingeasy/:hostId',\n    {\n      web: async (request, context) =>\n        (await import('./server/shippingeasy')).shippingEasyRoute(request, context),\n    },\n    { machine: true },\n  )\n  // The ShipStation and ShippingEasy cards' connect, show, new password,\n  // send open orders and disconnect.\n  registerPluginApiRoute('commerce/shipping-connectors', async (req, res) =>\n    (await import('./server/shipping-connectors')).shippingConnectorsHandler(req, res),\n  )\n  // The store's sales as figure tables (AGL-2915), for the AI plugin's\n  // insights to read by id rather than by reading orders. The console runs\n  // insight jobs, so the console surface registers them.\n  registerOrderFigureReaders(() => firebaseAdmin.app().firestore())\n}\n\n// Shared with the (still app-side) membership/account route.\nexport { mintDownloadToken } from './server/download'\n\n// Site-member session primitives, shared with the (still app-side)\n// membership/* routes until those migrate too (AGL-396).\nexport * from './server/membership'\n\n// Type-only (AGL-3080): the plugin's entitlement keys, declared by module\n// augmentation, for every program that loads this entry point.\nexport type { commercePlanEntitlements } from './plan-entitlements'\n"],"names":["registerBillingWebhookHandler","registerPluginApiRoute","registerPluginJob","registerSitePageEnricher","registerSitePageResolver","registerPluginPermissions","registerPluginConfigSchema","isEmailConfigured","firebaseAdmin","BUNDLE_ID","registerCommerceMediaPublishGuard","registerCommerceRecurringCharges","registerProductCardReader","registerProductAiCapability","registerStoreSetupAiCapabilities","registerStoreSetupAiWriter","registerProductDraftWriter","registerCommerceTaxProfile","registerTaxReturnSource","commerceTaxReturnSource","taxSummaryHandler","registerRevenueSource","commerceRevenueSource","commerceBillingWebhookHandler","registerOrderFigureReaders","COMMERCE_PERMISSIONS","COMMERCE_CONFIG_SCHEMA","commerceSitePageEnricher","commerceSitePageResolver","cartCheckoutHandler","cartHandler","cartExtrasHandler","catalogHandler","checkoutHandler","downloadHandler","newsletterHandler","notifyRestockHandler","productHandler","relatedHandler","reservationAvailabilityHandler","gateHandler","memberFeedHandler","membershipAccountHandler","membershipAdminPasswordHandler","membershipAdminRemoveHandler","membershipContentHandler","membershipLoginHandler","membershipLogoutHandler","membershipRecoverHandler","membershipRegisterHandler","membershipResetHandler","membershipWishlistHandler","reserveHandler","streamHandler","subscriptionPortalHandler","reviewsHandler","connectHandler","cancelOrderHandler","carrierRatesAvailabilityHandler","collectionMembershipHandler","draftOrderHandler","fulfillOrderHandler","orderReceiptSendHandler","orderStatusHandler","registerOrderStatusActions","returnRequestStatusAction","giftCardsHandler","memberPostHandler","orderAnalyticsHandler","checkoutStatusHandler","posOrderHandler","printersHandler","posPaymentHandler","posReadersHandler","posTerminalConnectionTokenHandler","posDisplayHandler","posKioskHandler","registerPosOpsRoutes","processAbandonedHandler","scanAbandonedCheckouts","processRestockHandler","scanRestockAlerts","scanStockDecrements","refundHandler","orderWebhooksHandler","returnRequestHandler","returnsHandler","scanSupplierDeliveries","supplierUpdateHandler","RECOVERY_JOB_INTERVAL_MINUTES","pluginId","name","intervalMinutes","description","lockdown","scope","handler","gate","sent","console","info","scanReviewRequests","scan","missingLines","truncatedHosts","warn","hosts","reportedOrders","deadLettered","process","env","STRIPE_SECRET_KEY","reconcileCustomDomains","result","registered","failed","CARD_PAYMENT_DOOR","cardPayment","registerCommerceApi","req","res","localFulfillmentOptionsHandler","web","request","legacyFeedRoute","recipientLink","registerCommerceConsoleApi","localFulfillmentHandler","productSaveHandler","productStockHandler","productDuplicateHandler","productDeleteHandler","orderNoteHandler","orderRestockAnswerHandler","orderPrintHandler","paymentMethodsHandler","context","cloudPrntRoute","machine","epsonServerDirectPrintRoute","posOfflineSyncHandler","ordersShippingPrepareHandler","shipStationRoute","shippingEasyRoute","shippingConnectorsHandler","app","firestore","mintDownloadToken"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAGD;;;;;;;CAOC,GAED,SACEA,6BAA6B,EAC7BC,sBAAsB,EACtBC,iBAAiB,EACjBC,wBAAwB,EACxBC,wBAAwB,EACxBC,yBAAyB,EACzBC,0BAA0B,QACrB,sBAAqB;AAC5B,SAASC,iBAAiB,QAAQ,2BAA0B;AAC5D,SAASC,aAAa,QAAQ,2BAA0B;AACxD,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,iCAAiC,QAAQ,kCAA8B;AAChF,SAASC,gCAAgC,QAAQ,gCAA4B;AAC7E,SAASC,yBAAyB,QAAQ,2BAAuB;AACjE,SAASC,2BAA2B,QAAQ,oCAAgC;AAC5E,SAASC,gCAAgC,QAAQ,wCAAoC;AACrF,SAASC,0BAA0B,QAAQ,4CAAwC;AACnF,SAASC,0BAA0B,QAAQ,6BAAyB;AACpE,SAASC,0BAA0B,QAAQ,0BAAsB;AACjE,SAASC,uBAAuB,QAAQ,wDAAuD;AAC/F,SAASC,uBAAuB,QAAQ,gCAA4B;AACpE,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,qBAAqB,QAAQ,qDAAoD;AAC1F,SAASC,qBAAqB,QAAQ,6BAAyB;AAC/D,SAASC,6BAA6B,QAAQ,8BAA0B;AACxE,SAASC,0BAA0B,QAAQ,4BAAwB;AACnE,SAASC,oBAAoB,QAAQ,gCAA4B;AACjE,SAASC,sBAAsB,QAAQ,qBAAiB;AACxD,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,mBAAmB,QAAQ,4BAAwB;AAC5D,SAASC,WAAW,QAAQ,mBAAe;AAC3C,SAASC,iBAAiB,QAAQ,8BAA0B;AAC5D,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,eAAe,QAAQ,uBAAmB;AACnD,SAASC,eAAe,QAAQ,uBAAmB;AACnD,SAASC,iBAAiB,QAAQ,yBAAqB;AACvD,SAASC,oBAAoB,QAAQ,6BAAyB;AAC9D,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,8BAA8B,QAAQ,uCAAmC;AAClF,SAASC,WAAW,QAAQ,mBAAe;AAC3C,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,8BAA8B,QAAQ,wCAAoC;AACnF,SAASC,4BAA4B,QAAQ,sCAAkC;AAC/E,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,sBAAsB,QAAQ,+BAA2B;AAClE,SAASC,uBAAuB,QAAQ,gCAA4B;AACpE,SAASC,wBAAwB,QAAQ,iCAA6B;AACtE,SAASC,yBAAyB,QAAQ,kCAA8B;AACxE,SAASC,sBAAsB,QAAQ,+BAA2B;AAClE,SAASC,yBAAyB,QAAQ,kCAA8B;AACxE,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,aAAa,QAAQ,qBAAiB;AAC/C,SAASC,yBAAyB,QAAQ,kCAA8B;AACxE,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,cAAc,QAAQ,sBAAkB;AACjD,SAASC,kBAAkB,QAAQ,2BAAuB;AAC1D,SAASC,+BAA+B,QAAQ,yCAAqC;AACrF,SAASC,2BAA2B,QAAQ,oCAAgC;AAC5E,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,mBAAmB,QAAQ,4BAAwB;AAC5D,SAASC,uBAAuB,QAAQ,iCAA6B;AACrE,SAASC,kBAAkB,EAAEC,0BAA0B,QAAQ,2BAAuB;AACtF,SAASC,yBAAyB,QAAQ,mCAA+B;AACzE,SAASC,gBAAgB,QAAQ,yBAAqB;AACtD,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,qBAAqB,QAAQ,8BAA0B;AAChE,SAASC,qBAAqB,QAAQ,8BAA0B;AAChE,SAASC,eAAe,QAAQ,wBAAoB;AACpD,SAASC,eAAe,QAAQ,uBAAmB;AACnD,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,iCAAiC,QAAQ,4CAAwC;AAC1F,SAASC,iBAAiB,QAAQ,0BAAsB;AACxD,SAASC,eAAe,QAAQ,wBAAoB;AACpD,SAASC,oBAAoB,QAAQ,6BAAyB;AAC9D,SACEC,uBAAuB,EACvBC,sBAAsB,QACjB,gCAA4B;AACnC,SAASC,qBAAqB,EAAEC,iBAAiB,QAAQ,8BAA0B;AACnF,SAASC,mBAAmB,QAAQ,8BAA0B;AAC9D,SAASC,aAAa,QAAQ,qBAAiB;AAC/C,SAASC,oBAAoB,QAAQ,6BAAyB;AAC9D,SAASC,oBAAoB,EAAEC,cAAc,QAAQ,sBAAkB;AACvE,SAASC,sBAAsB,QAAQ,8BAA0B;AACjE,SAASC,qBAAqB,QAAQ,8BAA0B;AAEhE;;;;;;;;;;;;;;;;;;;;;;;;;CAyBC,GACD,MAAMC,gCAAgC;AAEtCvF,kBAAkB;IAChBwF,UAAUjF;IACVkF,MAAM;IACNC,iBAAiBH;IACjBI,aACE;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,yEAAyE;QACzE,yEAAyE;QACzE,mBAAmB;QACnB,IAAI,CAAC1F,qBAAqB;QAC1B,MAAM,EAAE2F,IAAI,EAAE,GAAG,MAAMnB,uBAAuBkB;QAC9C,IAAIC,MAAMC,QAAQC,IAAI,CAAC,CAAC,eAAe,EAAEF,KAAK,yBAAyB,CAAC;IAC1E;AACF;AAEAhG,kBAAkB;IAChBwF,UAAUjF;IACVkF,MAAM;IACNC,iBAAiBH;IACjBI,aAAa;IACbC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,IAAI,CAAC1F,qBAAqB;QAC1B,MAAM,EAAE2F,IAAI,EAAE,GAAG,MAAMjB,kBAAkBgB;QACzC,IAAIC,MAAMC,QAAQC,IAAI,CAAC,CAAC,eAAe,EAAEF,KAAK,qBAAqB,CAAC;IACtE;AACF;AAEA;;;;;CAKC,GACDhG,kBAAkB;IAChBwF,UAAUjF;IACVkF,MAAM;IACNC,iBAAiB;IACjBC,aACE,8EACA;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,IAAI,CAAC1F,qBAAqB;QAC1B,MAAM,EAAE8F,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC;QAC5C,MAAM,EAAEH,IAAI,EAAE,GAAG,MAAMG,mBAAmBJ;QAC1C,IAAIC,MAAMC,QAAQC,IAAI,CAAC,CAAC,eAAe,EAAEF,KAAK,gBAAgB,CAAC;IACjE;AACF;AAEA;;;;;;;;;;;;;;;CAeC,GACDhG,kBAAkB;IAChBwF,UAAUjF;IACVkF,MAAM;IACNC,iBAAiB;IACjBC,aACE;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,MAAMK,OAAO,MAAMpB,oBAAoBe;QACvC,IAAIK,KAAKC,YAAY,IAAID,KAAKE,cAAc,EAAE;YAC5CL,QAAQM,IAAI,CACV,CAAC,UAAU,EAAEH,KAAKC,YAAY,CAAC,oBAAoB,EAAED,KAAKI,KAAK,CAAC,CAAC,CAAC,GAChE,CAAC,+BAA+B,EAAEJ,KAAKK,cAAc,CAAC,OAAO,CAAC,GAC9D,CAAC,UAAU,EAAEL,KAAKE,cAAc,CAAC,gCAAgC,CAAC;QAExE;IACF;AACF;AAEA;;;;;;;;;;;;;;;;;;;CAmBC,GACDtG,kBAAkB;IAChBwF,UAAUjF;IACVkF,MAAM;IACNC,iBAAiB;IACjBC,aACE,wEACA;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,MAAMK,OAAO,MAAMf,uBAAuBU;QAC1C,IAAIK,KAAKM,YAAY,EAAE;YACrBT,QAAQM,IAAI,CACV,CAAC,UAAU,EAAEH,KAAKM,YAAY,CAAC,qCAAqC,CAAC,GACnE,CAAC,qDAAqD,CAAC;QAE7D;IACF;AACF;AAEA;;;;;;;;;CASC,GACD1G,kBAAkB;IAChBwF,UAAUjF;IACVkF,MAAM;IACNC,iBAAiB,KAAK;IACtBC,aACE,4EACA;IACFC,UAAU;QAAEC,OAAO;IAAW;IAC9BC,SAAS,OAAOC;QACd,IAAI,CAACY,QAAQC,GAAG,CAACC,iBAAiB,EAAE;QACpC,MAAM,EAAEC,sBAAsB,EAAE,GAAG,MAAM,MAAM,CAAC;QAChD,MAAMC,SAAS,MAAMD,uBAAuBf;QAC5C,IAAIgB,OAAOC,UAAU,IAAID,OAAOE,MAAM,EAAE;YACtChB,QAAQC,IAAI,CACV,CAAC,mCAAmC,EAAEa,OAAOC,UAAU,CAAC,aAAa,CAAC,GACpE,GAAGD,OAAOE,MAAM,CAAC,eAAe,EAAEF,OAAOP,KAAK,CAAC,MAAM,CAAC;QAE5D;IACF;AACF;AAEA;;;;;CAKC,GACD,MAAMU,oBAAoB;IAAEC,aAAa;AAAK;AAE9C,2DAA2D,GAC3D,OAAO,SAASC;IACd1G;IACA,uEAAuE;IACvEK;IACAZ,0BAA0BoB;IAC1B,wEAAwE;IACxE,oEAAoE;IACpE,sEAAsE;IACtEnB,2BAA2BoB;IAC3B,kEAAkE;IAClEtB,yBAAyBwB;IACzB,yEAAyE;IACzE,2EAA2E;IAC3E,sEAAsE;IACtEzB,yBAAyBwB;IACzB1B,uBAAuB,0BAA0B4B,qBAAqBuF;IACtEnH,uBAAuB,iBAAiB6B;IACxC,0EAA0E;IAC1E,+DAA+D;IAC/D7B,uBAAuB,sCAAsC,OAAOsH,KAAKC,MACvE,AAAC,CAAA,MAAM,MAAM,CAAC,gCAA4B,EAAGC,8BAA8B,CAACF,KAAKC;IAEnF,+DAA+D;IAC/DvH,uBAAuB,wBAAwB8B;IAC/C9B,uBAAuB,oBAAoB+B;IAC3C/B,uBAAuB,qBAAqBgC,iBAAiBmF;IAC7DnH,uBAAuB,qBAAqBiC;IAC5C,qEAAqE;IACrE,sEAAsE;IACtEjC,uBAAuB,iBAAiB;QACtCyH,KAAK,OAAOC,UAAY,AAAC,CAAA,MAAM,MAAM,CAAC,0BAAsB,EAAGC,eAAe,CAACD;IACjF;IACA1H,uBAAuB,uBAAuBkC;IAC9ClC,uBAAuB,2BAA2BmC;IAClD,qEAAqE;IACrEnC,uBAAuB,4BAA4BmE;IACnD,2EAA2E;IAC3E,yEAAyE;IACzEnE,uBAAuB,yBAAyB8D,oBAAoB;QAAE8D,eAAe;IAAK;IAC1F,sEAAsE;IACtE,6BAA6B;IAC7B7D,2BAA2BC;IAC3B,qEAAqE;IACrEhE,uBAAuB,4BAA4BoE;IACnDpE,uBAAuB,oBAAoBoC;IAC3CpC,uBAAuB,oBAAoBqC;IAC3CrC,uBAAuB,qCAAqCsC;IAC5DtC,uBAAuB,oBAAoBmD,gBAAgBgE;IAC3DnH,uBAAuB,iBAAiBuC;IACxCvC,uBAAuB,wBAAwBwC;IAC/CxC,uBAAuB,mBAAmBoD;IAC1CpD,uBAAuB,gCAAgCqD;IACvDrD,uBAAuB,oBAAoBsD;IAC3C,wEAAwE;IACxE,qBAAqB;IACrBtD,uBAAuB,2BAA2BoF;IAClDpF,uBAAuB,sBAAsByC;IAC7CzC,uBAAuB,sBAAsB4C;IAC7C5C,uBAAuB,oBAAoB6C;IAC3C7C,uBAAuB,qBAAqB8C;IAC5C,wDAAwD;IACxD9C,uBAAuB,sBAAsB+C;IAC7C/C,uBAAuB,uBAAuBgD;IAC9ChD,uBAAuB,oBAAoBiD;IAC3CjD,uBAAuB,uBAAuBkD;AAChD;AAEA;;;;;;;;;;CAUC,GACD,OAAO,SAAS2E;IACd,2EAA2E;IAC3E,2EAA2E;IAC3E,wEAAwE;IACxE,0CAA0C;IAC1CzH,0BAA0BoB;IAC1B,uEAAuE;IACvE,8EAA8E;IAC9Eb;IACA,yEAAyE;IACzE,8EAA8E;IAC9E,uCAAuC;IACvCI;IACA,2EAA2E;IAC3EH;IACA,2EAA2E;IAC3E,4EAA4E;IAC5E,iDAAiD;IACjDE;IACAD;IACA,yEAAyE;IACzE,wEAAwE;IACxE,uEAAuE;IACvE,yBAAyB;IACzBJ;IACA,wEAAwE;IACxE,uDAAuD;IACvDC;IACA,sEAAsE;IACtEM;IACA,wEAAwE;IACxE,0EAA0E;IAC1E,yEAAyE;IACzE,mEAAmE;IACnEC,wBAAwBC,yBAAyB;QAAEuE,UAAUjF;IAAU;IACvE,0EAA0E;IAC1E,2EAA2E;IAC3E,qEAAqE;IACrEY,sBAAsBC,uBAAuB;QAAEoE,UAAUjF;IAAU;IACnE,uEAAuE;IACvE,iEAAiE;IACjET,8BAA8BuB;IAC9B,4EAA4E;IAC5E,2EAA2E;IAC3E,uDAAuD;IACvDtB,uBAAuB,yBAAyBwD;IAChD,qEAAqE;IACrExD,uBAAuB,mCAAmCyD;IAC1DzD,uBAAuB,oBAAoBuD;IAC3CvD,uBAAuB,wBAAwB2D;IAC/C,uEAAuE;IACvE,yEAAyE;IACzE,yEAAyE;IACzE,yEAAyE;IACzE,wDAAwD;IACxD3D,uBAAuB,0BAA0B4D;IACjD,yEAAyE;IACzE,yEAAyE;IACzE,0CAA0C;IAC1C5D,uBAAuB,8BAA8B,OAAOsH,KAAKC,MAC/D,AAAC,CAAA,MAAM,MAAM,CAAC,uCAAmC,EAAGO,uBAAuB,CAACR,KAAKC;IAEnF,0EAA0E;IAC1E,0EAA0E;IAC1E,iBAAiB;IACjBvH,uBAAuB,+BAA+B6D;IACtD,6EAA6E;IAC7E,4EAA4E;IAC5E,iBAAiB;IACjB7D,uBAAuB,0BAA0B,OAAOsH,KAAKC,MAC3D,AAAC,CAAA,MAAM,MAAM,CAAC,6BAAyB,EAAGQ,kBAAkB,CAACT,KAAKC;IAEpEvH,uBAAuB,2BAA2B,OAAOsH,KAAKC,MAC5D,AAAC,CAAA,MAAM,MAAM,CAAC,6BAAyB,EAAGS,mBAAmB,CAACV,KAAKC;IAErE,2EAA2E;IAC3E,yEAAyE;IACzEvH,uBAAuB,+BAA+B,OAAOsH,KAAKC,MAChE,AAAC,CAAA,MAAM,MAAM,CAAC,6BAAyB,EAAGU,uBAAuB,CAACX,KAAKC;IAEzEvH,uBAAuB,4BAA4B,OAAOsH,KAAKC,MAC7D,AAAC,CAAA,MAAM,MAAM,CAAC,6BAAyB,EAAGW,oBAAoB,CAACZ,KAAKC;IAEtE,iEAAiE;IACjE,uEAAuE;IACvE,yDAAyD;IACzDvH,uBAAuB,uBAAuB,OAAOsH,KAAKC,MACxD,AAAC,CAAA,MAAM,MAAM,CAAC,gCAA4B,EAAGY,gBAAgB,CAACb,KAAKC;IAErEvH,uBAAuB,iCAAiC,OAAOsH,KAAKC,MAClE,AAAC,CAAA,MAAM,MAAM,CAAC,gCAA4B,EAAGa,yBAAyB,CAACd,KAAKC;IAE9E,kEAAkE;IAClE,2EAA2E;IAC3E,gEAAgE;IAChEvH,uBAAuB,wBAAwB,OAAOsH,KAAKC,MACzD,AAAC,CAAA,MAAM,MAAM,CAAC,0BAAsB,EAAGc,iBAAiB,CAACf,KAAKC;IAEhE,qEAAqE;IACrE,sEAAsE;IACtE,gEAAgE;IAChEvH,uBAAuB,uBAAuBiE;IAC9C,0EAA0E;IAC1E,4EAA4E;IAC5EjE,uBAAuB,wBAAwB;QAAEyH,KAAKtG;IAAkB;IACxE,0EAA0E;IAC1E,2EAA2E;IAC3E,8EAA8E;IAC9EnB,uBAAuB,4BAA4B;QACjDyH,KAAK,OAAOC,UACV,AAAC,CAAA,MAAM,MAAM,CAAC,8BAA0B,EAAGY,qBAAqB,CAACZ;IACrE;IACA,uEAAuE;IACvE,uEAAuE;IACvE1H,uBAAuB,kCAAkC0D;IACzD,2EAA2E;IAC3E,4EAA4E;IAC5E,wEAAwE;IACxE,uEAAuE;IACvE1D,uBACE,6BACA0C;IAEF1C,uBAAuB,2BAA2B2C;IAClD3C,uBAAuB,wBAAwBkE;IAC/ClE,uBAAuB,sBAAsBqE;IAC7C,wEAAwE;IACxE,4EAA4E;IAC5E,yEAAyE;IACzE,8EAA8E;IAC9E,0EAA0E;IAC1E,oEAAoE;IACpErE,uBAAuB,qBAAqBsE;IAC5CtE,uBACE,iDACA;QACEyH,KAAK,OAAOC,SAASa,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,2BAAuB,EAAGC,cAAc,CAACd,SAASa;IACpE,GACA;QAAEE,SAAS;IAAK;IAElBzI,uBACE,iDACA;QACEyH,KAAK,OAAOC,SAASa,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,2BAAuB,EAAGG,2BAA2B,CAAChB,SAASa;IACjF,GACA;QAAEE,SAAS;IAAK;IAElB,wEAAwE;IACxE,qEAAqE;IACrE,wEAAwE;IACxE,oDAAoD;IACpDzI,uBAAuB,wBAAwBuE;IAC/CvE,uBAAuB,wBAAwBwE;IAC/CxE,uBAAuB,wBAAwB0E;IAC/C,0EAA0E;IAC1E,yEAAyE;IACzE,oEAAoE;IACpE1E,uBAAuB,sBAAsB2E;IAC7C,kEAAkE;IAClEC;IACA,0EAA0E;IAC1E,4EAA4E;IAC5E,iDAAiD;IACjD5E,uBAAuB,6BAA6B,OAAOsH,KAAKC,MAC9D,AAAC,CAAA,MAAM,MAAM,CAAC,+BAA2B,EAAGoB,qBAAqB,CAACrB,KAAKC;IAEzE,4EAA4E;IAC5E,2EAA2E;IAC3E,QAAQ;IACRvH,uBAAuB,0CAA0CyE;IACjEzE,uBAAuB,8BAA8B6E;IACrD7E,uBAAuB,4BAA4B+E;IACnD/E,uBAAuB,mBAAmBkF;IAC1C,qEAAqE;IACrE,2DAA2D;IAC3DlF,uBAAuB,oBAAoBqF;IAC3C,yEAAyE;IACzE,kDAAkD;IAClDrF,uBAAuB,2BAA2BmF;IAClDnF,uBAAuB,4BAA4BuF;IACnD,qEAAqE;IACrE,kCAAkC;IAClCvF,uBAAuB,oCAAoC,OAAOsH,KAAKC,MACrE,AAAC,CAAA,MAAM,MAAM,CAAC,sCAAkC,EAAGqB,4BAA4B,CAACtB,KAAKC;IAEvF,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtEvH,uBACE,gCACA;QACEyH,KAAK,OAAOC,SAASa,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,0BAAsB,EAAGM,gBAAgB,CAACnB,SAASa;IACrE,GACA;QAAEE,SAAS;IAAK;IAElB,2EAA2E;IAC3E,uEAAuE;IACvE,2EAA2E;IAC3E,oEAAoE;IACpEzI,uBACE,iCACA;QACEyH,KAAK,OAAOC,SAASa,UACnB,AAAC,CAAA,MAAM,MAAM,CAAC,2BAAuB,EAAGO,iBAAiB,CAACpB,SAASa;IACvE,GACA;QAAEE,SAAS;IAAK;IAElB,uEAAuE;IACvE,mCAAmC;IACnCzI,uBAAuB,gCAAgC,OAAOsH,KAAKC,MACjE,AAAC,CAAA,MAAM,MAAM,CAAC,kCAA8B,EAAGwB,yBAAyB,CAACzB,KAAKC;IAEhF,qEAAqE;IACrE,yEAAyE;IACzE,uDAAuD;IACvDhG,2BAA2B,IAAMhB,cAAcyI,GAAG,GAAGC,SAAS;AAChE;AAEA,6DAA6D;AAC7D,SAASC,iBAAiB,QAAQ,uBAAmB;AAErD,mEAAmE;AACnE,yDAAyD;AACzD,cAAc,yBAAqB"}

package/src/lib/transfer/shipping-presets.d.ts

@@ -21,3 +21,19 @@ export declare const EASYPOST_ORDER_PRESET: TransferResourcePreset;
 export declare const GENERIC_SHIPPING_ORDER_PRESET: TransferResourcePreset;
 /** The shipping presets, in the order the export dialog lists them. */
 export declare const ORDER_SHIPPING_PRESETS: readonly TransferResourcePreset[];
+/** One of the shipping exports as the apps list it: the preset's id, its name and what it is for. */
+export interface ShippingPresetChoice {
+    id: string;
+    label: string;
+    description?: string;
+}
+/** The shipping exports the orders list's "Export for shipping" offers, as the apps list them. */
+export declare const ORDER_SHIPPING_PRESET_CHOICES: readonly ShippingPresetChoice[];
+/** What the shipping export's filter is called in "The current filter: …". */
+export declare const ORDERS_TO_SHIP_FILTER_LABEL = "orders still to ship";
+/**
+ * The orders still to ship (AGL-3613): paid or partly fulfilled orders that
+ * need shipping, newest first, as the orders resource's `readPage` reads a
+ * filter.
+ */
+export declare const ORDERS_TO_SHIP_FILTER_VALUE: unknown;

package/src/lib/transfer/shipping-presets.js

@@ -13,7 +13,8 @@
  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  * See the License for the specific language governing permissions and
  * limitations under the License.
- */ /*
+ */ import { _ as _extends } from "@swc/helpers/_/_extends";
+/*
  * THE SHIPPING PRESETS (AGL-3613): the orders a label tool still has to ship,
  * laid out under each tool's own column names so the file uploads without
  * remapping. Verified 2026-10-06 against each tool's help:
@@ -152,5 +153,37 @@ export const GENERIC_SHIPPING_ORDER_PRESET = {
     EASYPOST_ORDER_PRESET,
     GENERIC_SHIPPING_ORDER_PRESET
 ];
+/** The shipping exports the orders list's "Export for shipping" offers, as the apps list them. */ export const ORDER_SHIPPING_PRESET_CHOICES = ORDER_SHIPPING_PRESETS.map(({ id, label, description })=>_extends({
+        id,
+        label
+    }, description ? {
+        description
+    } : {}));
+/** What the shipping export's filter is called in "The current filter: …". */ export const ORDERS_TO_SHIP_FILTER_LABEL = 'orders still to ship';
+/**
+ * The orders still to ship (AGL-3613): paid or partly fulfilled orders that
+ * need shipping, newest first, as the orders resource's `readPage` reads a
+ * filter.
+ */ export const ORDERS_TO_SHIP_FILTER_VALUE = {
+    filters: [
+        {
+            path: 'requiresShipping',
+            op: '==',
+            value: true
+        },
+        {
+            path: 'status',
+            op: 'in',
+            value: [
+                'paid',
+                'partially_fulfilled'
+            ]
+        }
+    ],
+    orderBy: {
+        path: 'createdAtMs',
+        direction: 'desc'
+    }
+};
 
 //# sourceMappingURL=shipping-presets.js.map

package/src/lib/transfer/shipping-presets.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/transfer/shipping-presets.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { TransferResourcePreset } from '@aglyn/aglyn/data-transfer'\n\n/*\n * THE SHIPPING PRESETS (AGL-3613): the orders a label tool still has to ship,\n * laid out under each tool's own column names so the file uploads without\n * remapping. Verified 2026-10-06 against each tool's help:\n *\n * - Pirate Ship takes any spreadsheet and maps its columns on the first\n *   upload; weight in ounces OR pounds, numbers only.\n * - Shippo's order CSV template (`shippo_sample_csv_v3.csv`).\n * - EasyPost's label CSV: `to_address.*`, `parcel.weight_oz`, `reference`.\n *   It also needs the sender, carrier and service, which a store's export\n *   cannot know; the guide says to add them before uploading.\n */\nexport const PIRATE_SHIP_ORDER_PRESET: TransferResourcePreset = {\n  id: 'pirate-ship',\n  label: 'Pirate Ship',\n  description: 'Pirate Ship’s spreadsheet upload: one row per order to ship, weight in ounces.',\n  fieldIds: ['orderRef', 'shipName', 'shipEmail', 'shipPhone', 'shipLine1', 'shipLine2', 'shipCity', 'shipState', 'shipPostalCode', 'shipCountry', 'weightOz', 'itemsToShip'],\n  headers: {\n    orderRef: 'Order ID',\n    shipName: 'Name',\n    shipEmail: 'Email',\n    shipPhone: 'Phone',\n    shipLine1: 'Address 1',\n    shipLine2: 'Address 2',\n    shipCity: 'City',\n    shipState: 'State',\n    shipPostalCode: 'Zip',\n    shipCountry: 'Country',\n    weightOz: 'Ounces',\n    itemsToShip: 'Items',\n  },\n}\n\nexport const SHIPPO_ORDER_PRESET: TransferResourcePreset = {\n  id: 'shippo',\n  label: 'Shippo',\n  description: 'Shippo’s order CSV: its column names, with the order weight in ounces.',\n  fieldIds: ['orderRef', 'shipName', 'shipEmail', 'shipPhone', 'shipLine1', 'shipLine2', 'shipCity', 'shipState', 'shipPostalCode', 'shipCountry', 'weightOz', 'weightUnit', 'itemsToShip'],\n  headers: {\n    orderRef: 'Order Number',\n    shipName: 'Recipient Name',\n    shipEmail: 'Email',\n    shipPhone: 'Phone',\n    shipLine1: 'Street Line 1',\n    shipLine2: 'Street Line 2',\n    shipCity: 'City',\n    shipState: 'State/Province',\n    shipPostalCode: 'Zip/Postal Code',\n    shipCountry: 'Country',\n    weightOz: 'Order Weight',\n    weightUnit: 'Order Weight Unit',\n    itemsToShip: 'Item Title',\n  },\n}\n\nexport const EASYPOST_ORDER_PRESET: TransferResourcePreset = {\n  id: 'easypost',\n  label: 'EasyPost',\n  description: 'EasyPost’s label CSV: the recipient and the parcel weight. Add your from address, carrier and service before uploading.',\n  fieldIds: ['orderRef', 'shipName', 'shipPhone', 'shipEmail', 'shipLine1', 'shipLine2', 'shipCity', 'shipState', 'shipPostalCode', 'shipCountry', 'weightOz'],\n  headers: {\n    orderRef: 'reference',\n    shipName: 'to_address.name',\n    shipPhone: 'to_address.phone',\n    shipEmail: 'to_address.email',\n    shipLine1: 'to_address.street1',\n    shipLine2: 'to_address.street2',\n    shipCity: 'to_address.city',\n    shipState: 'to_address.state',\n    shipPostalCode: 'to_address.zip',\n    shipCountry: 'to_address.country',\n    weightOz: 'parcel.weight_oz',\n  },\n}\n\nexport const GENERIC_SHIPPING_ORDER_PRESET: TransferResourcePreset = {\n  id: 'shipping',\n  label: 'Shipping (any tool)',\n  description: 'Every shipping column under its own name, for any tool that maps columns on upload.',\n  fieldIds: ['orderRef', 'date', 'shipName', 'shipEmail', 'shipPhone', 'shipLine1', 'shipLine2', 'shipCity', 'shipState', 'shipPostalCode', 'shipCountry', 'itemsToShip', 'unitsToShip', 'weightOz', 'weightLb', 'total'],\n}\n\n/** The shipping presets, in the order the export dialog lists them. */\nexport const ORDER_SHIPPING_PRESETS: readonly TransferResourcePreset[] = [\n  PIRATE_SHIP_ORDER_PRESET,\n  SHIPPO_ORDER_PRESET,\n  EASYPOST_ORDER_PRESET,\n  GENERIC_SHIPPING_ORDER_PRESET,\n]\n"],"names":["PIRATE_SHIP_ORDER_PRESET","id","label","description","fieldIds","headers","orderRef","shipName","shipEmail","shipPhone","shipLine1","shipLine2","shipCity","shipState","shipPostalCode","shipCountry","weightOz","itemsToShip","SHIPPO_ORDER_PRESET","weightUnit","EASYPOST_ORDER_PRESET","GENERIC_SHIPPING_ORDER_PRESET","ORDER_SHIPPING_PRESETS"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAID;;;;;;;;;;;CAWC,GACD,OAAO,MAAMA,2BAAmD;IAC9DC,IAAI;IACJC,OAAO;IACPC,aAAa;IACbC,UAAU;QAAC;QAAY;QAAY;QAAa;QAAa;QAAa;QAAa;QAAY;QAAa;QAAkB;QAAe;QAAY;KAAc;IAC3KC,SAAS;QACPC,UAAU;QACVC,UAAU;QACVC,WAAW;QACXC,WAAW;QACXC,WAAW;QACXC,WAAW;QACXC,UAAU;QACVC,WAAW;QACXC,gBAAgB;QAChBC,aAAa;QACbC,UAAU;QACVC,aAAa;IACf;AACF,EAAC;AAED,OAAO,MAAMC,sBAA8C;IACzDjB,IAAI;IACJC,OAAO;IACPC,aAAa;IACbC,UAAU;QAAC;QAAY;QAAY;QAAa;QAAa;QAAa;QAAa;QAAY;QAAa;QAAkB;QAAe;QAAY;QAAc;KAAc;IACzLC,SAAS;QACPC,UAAU;QACVC,UAAU;QACVC,WAAW;QACXC,WAAW;QACXC,WAAW;QACXC,WAAW;QACXC,UAAU;QACVC,WAAW;QACXC,gBAAgB;QAChBC,aAAa;QACbC,UAAU;QACVG,YAAY;QACZF,aAAa;IACf;AACF,EAAC;AAED,OAAO,MAAMG,wBAAgD;IAC3DnB,IAAI;IACJC,OAAO;IACPC,aAAa;IACbC,UAAU;QAAC;QAAY;QAAY;QAAa;QAAa;QAAa;QAAa;QAAY;QAAa;QAAkB;QAAe;KAAW;IAC5JC,SAAS;QACPC,UAAU;QACVC,UAAU;QACVE,WAAW;QACXD,WAAW;QACXE,WAAW;QACXC,WAAW;QACXC,UAAU;QACVC,WAAW;QACXC,gBAAgB;QAChBC,aAAa;QACbC,UAAU;IACZ;AACF,EAAC;AAED,OAAO,MAAMK,gCAAwD;IACnEpB,IAAI;IACJC,OAAO;IACPC,aAAa;IACbC,UAAU;QAAC;QAAY;QAAQ;QAAY;QAAa;QAAa;QAAa;QAAa;QAAY;QAAa;QAAkB;QAAe;QAAe;QAAe;QAAY;QAAY;KAAQ;AACzN,EAAC;AAED,qEAAqE,GACrE,OAAO,MAAMkB,yBAA4D;IACvEtB;IACAkB;IACAE;IACAC;CACD,CAAA"}
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/transfer/shipping-presets.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { TransferResourcePreset } from '@aglyn/aglyn/data-transfer'\n\n/*\n * THE SHIPPING PRESETS (AGL-3613): the orders a label tool still has to ship,\n * laid out under each tool's own column names so the file uploads without\n * remapping. Verified 2026-10-06 against each tool's help:\n *\n * - Pirate Ship takes any spreadsheet and maps its columns on the first\n *   upload; weight in ounces OR pounds, numbers only.\n * - Shippo's order CSV template (`shippo_sample_csv_v3.csv`).\n * - EasyPost's label CSV: `to_address.*`, `parcel.weight_oz`, `reference`.\n *   It also needs the sender, carrier and service, which a store's export\n *   cannot know; the guide says to add them before uploading.\n */\nexport const PIRATE_SHIP_ORDER_PRESET: TransferResourcePreset = {\n  id: 'pirate-ship',\n  label: 'Pirate Ship',\n  description: 'Pirate Ship’s spreadsheet upload: one row per order to ship, weight in ounces.',\n  fieldIds: ['orderRef', 'shipName', 'shipEmail', 'shipPhone', 'shipLine1', 'shipLine2', 'shipCity', 'shipState', 'shipPostalCode', 'shipCountry', 'weightOz', 'itemsToShip'],\n  headers: {\n    orderRef: 'Order ID',\n    shipName: 'Name',\n    shipEmail: 'Email',\n    shipPhone: 'Phone',\n    shipLine1: 'Address 1',\n    shipLine2: 'Address 2',\n    shipCity: 'City',\n    shipState: 'State',\n    shipPostalCode: 'Zip',\n    shipCountry: 'Country',\n    weightOz: 'Ounces',\n    itemsToShip: 'Items',\n  },\n}\n\nexport const SHIPPO_ORDER_PRESET: TransferResourcePreset = {\n  id: 'shippo',\n  label: 'Shippo',\n  description: 'Shippo’s order CSV: its column names, with the order weight in ounces.',\n  fieldIds: ['orderRef', 'shipName', 'shipEmail', 'shipPhone', 'shipLine1', 'shipLine2', 'shipCity', 'shipState', 'shipPostalCode', 'shipCountry', 'weightOz', 'weightUnit', 'itemsToShip'],\n  headers: {\n    orderRef: 'Order Number',\n    shipName: 'Recipient Name',\n    shipEmail: 'Email',\n    shipPhone: 'Phone',\n    shipLine1: 'Street Line 1',\n    shipLine2: 'Street Line 2',\n    shipCity: 'City',\n    shipState: 'State/Province',\n    shipPostalCode: 'Zip/Postal Code',\n    shipCountry: 'Country',\n    weightOz: 'Order Weight',\n    weightUnit: 'Order Weight Unit',\n    itemsToShip: 'Item Title',\n  },\n}\n\nexport const EASYPOST_ORDER_PRESET: TransferResourcePreset = {\n  id: 'easypost',\n  label: 'EasyPost',\n  description: 'EasyPost’s label CSV: the recipient and the parcel weight. Add your from address, carrier and service before uploading.',\n  fieldIds: ['orderRef', 'shipName', 'shipPhone', 'shipEmail', 'shipLine1', 'shipLine2', 'shipCity', 'shipState', 'shipPostalCode', 'shipCountry', 'weightOz'],\n  headers: {\n    orderRef: 'reference',\n    shipName: 'to_address.name',\n    shipPhone: 'to_address.phone',\n    shipEmail: 'to_address.email',\n    shipLine1: 'to_address.street1',\n    shipLine2: 'to_address.street2',\n    shipCity: 'to_address.city',\n    shipState: 'to_address.state',\n    shipPostalCode: 'to_address.zip',\n    shipCountry: 'to_address.country',\n    weightOz: 'parcel.weight_oz',\n  },\n}\n\nexport const GENERIC_SHIPPING_ORDER_PRESET: TransferResourcePreset = {\n  id: 'shipping',\n  label: 'Shipping (any tool)',\n  description: 'Every shipping column under its own name, for any tool that maps columns on upload.',\n  fieldIds: ['orderRef', 'date', 'shipName', 'shipEmail', 'shipPhone', 'shipLine1', 'shipLine2', 'shipCity', 'shipState', 'shipPostalCode', 'shipCountry', 'itemsToShip', 'unitsToShip', 'weightOz', 'weightLb', 'total'],\n}\n\n/** The shipping presets, in the order the export dialog lists them. */\nexport const ORDER_SHIPPING_PRESETS: readonly TransferResourcePreset[] = [\n  PIRATE_SHIP_ORDER_PRESET,\n  SHIPPO_ORDER_PRESET,\n  EASYPOST_ORDER_PRESET,\n  GENERIC_SHIPPING_ORDER_PRESET,\n]\n\n/** One of the shipping exports as the apps list it: the preset's id, its name and what it is for. */\nexport interface ShippingPresetChoice {\n  id: string\n  label: string\n  description?: string\n}\n\n/** The shipping exports the orders list's \"Export for shipping\" offers, as the apps list them. */\nexport const ORDER_SHIPPING_PRESET_CHOICES: readonly ShippingPresetChoice[] = ORDER_SHIPPING_PRESETS.map(\n  ({ id, label, description }) => ({ id, label, ...(description ? { description } : {}) }),\n)\n\n/** What the shipping export's filter is called in \"The current filter: …\". */\nexport const ORDERS_TO_SHIP_FILTER_LABEL = 'orders still to ship'\n\n/**\n * The orders still to ship (AGL-3613): paid or partly fulfilled orders that\n * need shipping, newest first, as the orders resource's `readPage` reads a\n * filter.\n */\nexport const ORDERS_TO_SHIP_FILTER_VALUE: unknown = {\n  filters: [\n    { path: 'requiresShipping', op: '==', value: true },\n    { path: 'status', op: 'in', value: ['paid', 'partially_fulfilled'] },\n  ],\n  orderBy: { path: 'createdAtMs', direction: 'desc' },\n}\n"],"names":["PIRATE_SHIP_ORDER_PRESET","id","label","description","fieldIds","headers","orderRef","shipName","shipEmail","shipPhone","shipLine1","shipLine2","shipCity","shipState","shipPostalCode","shipCountry","weightOz","itemsToShip","SHIPPO_ORDER_PRESET","weightUnit","EASYPOST_ORDER_PRESET","GENERIC_SHIPPING_ORDER_PRESET","ORDER_SHIPPING_PRESETS","ORDER_SHIPPING_PRESET_CHOICES","map","ORDERS_TO_SHIP_FILTER_LABEL","ORDERS_TO_SHIP_FILTER_VALUE","filters","path","op","value","orderBy","direction"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAID;;;;;;;;;;;CAWC,GACD,OAAO,MAAMA,2BAAmD;IAC9DC,IAAI;IACJC,OAAO;IACPC,aAAa;IACbC,UAAU;QAAC;QAAY;QAAY;QAAa;QAAa;QAAa;QAAa;QAAY;QAAa;QAAkB;QAAe;QAAY;KAAc;IAC3KC,SAAS;QACPC,UAAU;QACVC,UAAU;QACVC,WAAW;QACXC,WAAW;QACXC,WAAW;QACXC,WAAW;QACXC,UAAU;QACVC,WAAW;QACXC,gBAAgB;QAChBC,aAAa;QACbC,UAAU;QACVC,aAAa;IACf;AACF,EAAC;AAED,OAAO,MAAMC,sBAA8C;IACzDjB,IAAI;IACJC,OAAO;IACPC,aAAa;IACbC,UAAU;QAAC;QAAY;QAAY;QAAa;QAAa;QAAa;QAAa;QAAY;QAAa;QAAkB;QAAe;QAAY;QAAc;KAAc;IACzLC,SAAS;QACPC,UAAU;QACVC,UAAU;QACVC,WAAW;QACXC,WAAW;QACXC,WAAW;QACXC,WAAW;QACXC,UAAU;QACVC,WAAW;QACXC,gBAAgB;QAChBC,aAAa;QACbC,UAAU;QACVG,YAAY;QACZF,aAAa;IACf;AACF,EAAC;AAED,OAAO,MAAMG,wBAAgD;IAC3DnB,IAAI;IACJC,OAAO;IACPC,aAAa;IACbC,UAAU;QAAC;QAAY;QAAY;QAAa;QAAa;QAAa;QAAa;QAAY;QAAa;QAAkB;QAAe;KAAW;IAC5JC,SAAS;QACPC,UAAU;QACVC,UAAU;QACVE,WAAW;QACXD,WAAW;QACXE,WAAW;QACXC,WAAW;QACXC,UAAU;QACVC,WAAW;QACXC,gBAAgB;QAChBC,aAAa;QACbC,UAAU;IACZ;AACF,EAAC;AAED,OAAO,MAAMK,gCAAwD;IACnEpB,IAAI;IACJC,OAAO;IACPC,aAAa;IACbC,UAAU;QAAC;QAAY;QAAQ;QAAY;QAAa;QAAa;QAAa;QAAa;QAAY;QAAa;QAAkB;QAAe;QAAe;QAAe;QAAY;QAAY;KAAQ;AACzN,EAAC;AAED,qEAAqE,GACrE,OAAO,MAAMkB,yBAA4D;IACvEtB;IACAkB;IACAE;IACAC;CACD,CAAA;AASD,gGAAgG,GAChG,OAAO,MAAME,gCAAiED,uBAAuBE,GAAG,CACtG,CAAC,EAAEvB,EAAE,EAAEC,KAAK,EAAEC,WAAW,EAAE,GAAM;QAAEF;QAAIC;OAAWC,cAAc;QAAEA;IAAY,IAAI,CAAC,IACpF;AAED,4EAA4E,GAC5E,OAAO,MAAMsB,8BAA8B,uBAAsB;AAEjE;;;;CAIC,GACD,OAAO,MAAMC,8BAAuC;IAClDC,SAAS;QACP;YAAEC,MAAM;YAAoBC,IAAI;YAAMC,OAAO;QAAK;QAClD;YAAEF,MAAM;YAAUC,IAAI;YAAMC,OAAO;gBAAC;gBAAQ;aAAsB;QAAC;KACpE;IACDC,SAAS;QAAEH,MAAM;QAAeI,WAAW;IAAO;AACpD,EAAC"}

package/src/lib/utils/order-invoice.d.ts

@@ -37,6 +37,11 @@ export interface OrderInvoiceStore {
     /** The store's terms address, printed at the foot. */
     termsUrl?: string | null;
 }
+/**
+ * The invoice's store from the site's document and its store settings, as
+ * the order dialog's Invoice button and `commerce/order-print` read them.
+ */
+export declare function invoiceStoreFrom(host: Record<string, unknown> | undefined | null, store: Record<string, unknown> | undefined | null): OrderInvoiceStore;
 type InvoiceOrder = Pick<HostOrder, 'number' | 'status' | 'lineItems' | 'totals' | 'refundedCents' | 'customerName' | 'customerEmail' | 'shippingAddress' | 'billingAddress'> & {
     createdAtMs?: number;
     currency?: string;

package/src/lib/utils/order-invoice.js

@@ -15,6 +15,20 @@
  * limitations under the License.
  */ import { formatOrderNumber, orderCreatedAtMs } from "../model/commerce-orders.js";
 import { escapeHtml } from "./escape-html.js";
+/**
+ * The invoice's store from the site's document and its store settings, as
+ * the order dialog's Invoice button and `commerce/order-print` read them.
+ */ export function invoiceStoreFrom(host, store) {
+    var _ref, _ref1, _hostData_businessName, _storeData_currency, _storeData_receiptFooter, _storeData_termsUrl;
+    const hostData = host != null ? host : {};
+    const storeData = store != null ? store : {};
+    return {
+        name: String((_ref = (_ref1 = (_hostData_businessName = hostData['businessName']) != null ? _hostData_businessName : hostData['displayName']) != null ? _ref1 : hostData['name']) != null ? _ref : ''),
+        currency: String((_storeData_currency = storeData['currency']) != null ? _storeData_currency : 'USD'),
+        footer: (_storeData_receiptFooter = storeData['receiptFooter']) != null ? _storeData_receiptFooter : null,
+        termsUrl: (_storeData_termsUrl = storeData['termsUrl']) != null ? _storeData_termsUrl : null
+    };
+}
 /** Money in the order's currency, integer cents in. */ export function invoiceMoney(cents, currency) {
     const amount = (Number(cents) || 0) / 100;
     try {

package/src/lib/utils/order-invoice.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/utils/order-invoice.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  formatOrderNumber,\n  orderCreatedAtMs,\n  type HostOrder,\n  type OrderAddress,\n} from '../model/commerce-orders'\nimport { escapeHtml } from './escape-html'\n\n/**\n * The printable invoice (AGL-3611), beside the packing slip: the order as a\n * bill — who sold it, to whom, each line with its unit price, the totals,\n * what was refunded and what was paid in the end.\n *\n * A string of markup, because it is written into a print popup the way the\n * packing slip is, and the browser's print dialog saves it as a PDF. Every\n * value is escaped: the addresses are typed by the shopper, and the popup\n * inherits the console's origin (AGL-2283). No `<style>` and no `style`\n * attributes, because the popup inherits the console's content security\n * policy; the layout is the table attributes HTML still honors.\n */\n\nexport interface OrderInvoiceStore {\n  /** The business's name, as its emails sign. */\n  name: string\n  /** The store's currency, for an order that does not carry its own. */\n  currency: string\n  /** The receipt footer the store set, printed at the foot. */\n  footer?: string | null\n  /** The store's terms address, printed at the foot. */\n  termsUrl?: string | null\n}\n\ntype InvoiceOrder = Pick<\n  HostOrder,\n  | 'number'\n  | 'status'\n  | 'lineItems'\n  | 'totals'\n  | 'refundedCents'\n  | 'customerName'\n  | 'customerEmail'\n  | 'shippingAddress'\n  | 'billingAddress'\n> & { createdAtMs?: number; currency?: string; amountCents?: number }\n\n/** Money in the order's currency, integer cents in. */\nexport function invoiceMoney(cents: number, currency: string): string {\n  const amount = (Number(cents) || 0) / 100\n  try {\n    return new Intl.NumberFormat('en-US', { style: 'currency', currency: currency || 'USD' }).format(amount)\n  } catch {\n    return `${amount.toFixed(2)} ${String(currency || '').toUpperCase()}`.trim()\n  }\n}\n\nfunction addressLines(address: OrderAddress | undefined | null): string[] {\n  if (!address) return []\n  return [\n    address.name,\n    address.line1,\n    address.line2,\n    [address.city, address.state, address.postalCode].filter(Boolean).join(' '),\n    address.country,\n    address.phone,\n  ]\n    .map((part) => String(part ?? '').trim())\n    .filter(Boolean)\n}\n\n/** What the payment line says. */\nexport function invoicePaymentStatus(order: Pick<InvoiceOrder, 'status' | 'refundedCents' | 'totals' | 'amountCents'>): string {\n  const total = Number(order.totals?.totalCents ?? order.amountCents ?? 0)\n  const refunded = Math.max(0, Number(order.refundedCents ?? 0))\n  const status = String(order.status ?? '')\n  if (status === 'pending' || status === 'draft') return 'Awaiting payment'\n  if (status === 'cancelled') return 'Canceled'\n  if (refunded > 0 && refunded >= total) return 'Refunded'\n  if (refunded > 0) return 'Paid, partially refunded'\n  return 'Paid'\n}\n\n/** The invoice's markup: a full document body, every value escaped. */\nexport function buildOrderInvoiceHtml(input: {\n  order: InvoiceOrder\n  orderId: string\n  store: OrderInvoiceStore\n}): string {\n  const { order, orderId, store } = input\n  const currency = String(order.currency || store.currency || 'USD').toUpperCase()\n  const money = (cents: number) => escapeHtml(invoiceMoney(cents, currency))\n  const number = formatOrderNumber(order, orderId)\n  const createdAt = orderCreatedAtMs(order as never)\n  const totals = order.totals\n  const itemsCents =\n    totals?.itemsCents ??\n    (order.lineItems ?? []).reduce((sum, line) => sum + Number(line.unitAmountCents || 0) * Number(line.quantity || 0), 0)\n  const totalCents = Number(totals?.totalCents ?? order.amountCents ?? itemsCents)\n  const refundedCents = Math.max(0, Number(order.refundedCents ?? 0))\n\n  const billTo = [\n    ...(order.billingAddress ? addressLines(order.billingAddress) : [order.customerName ?? ''].filter(Boolean)),\n    order.customerEmail ?? '',\n  ].filter(Boolean)\n  const shipTo = addressLines(order.shippingAddress)\n\n  const rows = (order.lineItems ?? [])\n    .map((line) => {\n      const quantity = Number(line.quantity) || 0\n      const unit = Number(line.unitAmountCents) || 0\n      const detail = [line.variantLabel ? escapeHtml(line.variantLabel) : '', line.sku ? `SKU ${escapeHtml(line.sku)}` : '']\n        .filter(Boolean)\n        .join(' · ')\n      return (\n        `<tr><td>${escapeHtml(line.name)}${detail ? `<br/><small>${detail}</small>` : ''}</td>` +\n        `<td align=\"right\">${escapeHtml(quantity)}</td>` +\n        `<td align=\"right\">${money(unit)}</td>` +\n        `<td align=\"right\">${money(unit * quantity)}</td></tr>`\n      )\n    })\n    .join('')\n\n  const summary: Array<[string, string]> = [['Subtotal', money(itemsCents)]]\n  if (Number(totals?.discountCents ?? 0) > 0) summary.push(['Discount', `−${money(Number(totals?.discountCents))}`])\n  if (Number(totals?.shippingCents ?? 0) > 0) summary.push(['Shipping', money(Number(totals?.shippingCents))])\n  if (Number(totals?.taxCents ?? 0) > 0) summary.push(['Tax', money(Number(totals?.taxCents))])\n  summary.push(['<b>Total</b>', `<b>${money(totalCents)}</b>`])\n  if (Number(totals?.tipCents ?? 0) > 0) summary.push(['Tip', money(Number(totals?.tipCents))])\n  if (refundedCents > 0) {\n    summary.push(['Refunded', `−${money(refundedCents)}`])\n    summary.push(['<b>Net paid</b>', `<b>${money(Math.max(0, totalCents - refundedCents))}</b>`])\n  }\n\n  const block = (title: string, lines: string[]) =>\n    lines.length ? `<td valign=\"top\"><b>${title}</b><br/>${lines.map((line) => escapeHtml(line)).join('<br/>')}</td>` : ''\n\n  return (\n    `<title>${escapeHtml(`Invoice ${number}`)}</title>` +\n    `<h2>${escapeHtml(store.name || 'Invoice')}</h2>` +\n    `<h3>${escapeHtml(`Invoice ${number}`)}</h3>` +\n    `<p>${createdAt ? `Date: ${escapeHtml(new Date(createdAt).toLocaleDateString('en-US', { year: 'numeric', month: 'long', day: 'numeric' }))}<br/>` : ''}` +\n    `Payment: ${escapeHtml(invoicePaymentStatus(order))}<br/>Currency: ${escapeHtml(currency)}</p>` +\n    `<table width=\"100%\" cellpadding=\"6\"><tr>${block('Bill to', billTo)}${block('Ship to', shipTo)}</tr></table>` +\n    `<table width=\"100%\" cellpadding=\"6\" border=\"1\" cellspacing=\"0\">` +\n    `<tr><th align=\"left\">Item</th><th align=\"right\">Qty</th><th align=\"right\">Unit price</th><th align=\"right\">Amount</th></tr>` +\n    rows +\n    `</table>` +\n    `<table width=\"100%\" cellpadding=\"4\">${summary\n      .map(([label, value]) => `<tr><td align=\"right\" width=\"80%\">${label}</td><td align=\"right\">${value}</td></tr>`)\n      .join('')}</table>` +\n    (store.footer ? `<p>${escapeHtml(store.footer)}</p>` : '') +\n    (store.termsUrl ? `<p><small>Terms: ${escapeHtml(store.termsUrl)}</small></p>` : '')\n  )\n}\n"],"names":["formatOrderNumber","orderCreatedAtMs","escapeHtml","invoiceMoney","cents","currency","amount","Number","Intl","NumberFormat","style","format","toFixed","String","toUpperCase","trim","addressLines","address","name","line1","line2","city","state","postalCode","filter","Boolean","join","country","phone","map","part","invoicePaymentStatus","order","total","totals","totalCents","amountCents","refunded","Math","max","refundedCents","status","buildOrderInvoiceHtml","input","orderId","store","money","number","createdAt","itemsCents","lineItems","reduce","sum","line","unitAmountCents","quantity","billTo","billingAddress","customerName","customerEmail","shipTo","shippingAddress","rows","unit","detail","variantLabel","sku","summary","discountCents","push","shippingCents","taxCents","tipCents","block","title","lines","length","Date","toLocaleDateString","year","month","day","label","value","footer","termsUrl"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,iBAAiB,EACjBC,gBAAgB,QAGX,8BAA0B;AACjC,SAASC,UAAU,QAAQ,mBAAe;AAuC1C,qDAAqD,GACrD,OAAO,SAASC,aAAaC,KAAa,EAAEC,QAAgB;IAC1D,MAAMC,SAAS,AAACC,CAAAA,OAAOH,UAAU,CAAA,IAAK;IACtC,IAAI;QACF,OAAO,IAAII,KAAKC,YAAY,CAAC,SAAS;YAAEC,OAAO;YAAYL,UAAUA,YAAY;QAAM,GAAGM,MAAM,CAACL;IACnG,EAAE,eAAM;QACN,OAAO,GAAGA,OAAOM,OAAO,CAAC,GAAG,CAAC,EAAEC,OAAOR,YAAY,IAAIS,WAAW,IAAI,CAACC,IAAI;IAC5E;AACF;AAEA,SAASC,aAAaC,OAAwC;IAC5D,IAAI,CAACA,SAAS,OAAO,EAAE;IACvB,OAAO;QACLA,QAAQC,IAAI;QACZD,QAAQE,KAAK;QACbF,QAAQG,KAAK;QACb;YAACH,QAAQI,IAAI;YAAEJ,QAAQK,KAAK;YAAEL,QAAQM,UAAU;SAAC,CAACC,MAAM,CAACC,SAASC,IAAI,CAAC;QACvET,QAAQU,OAAO;QACfV,QAAQW,KAAK;KACd,CACEC,GAAG,CAAC,CAACC,OAASjB,OAAOiB,eAAAA,OAAQ,IAAIf,IAAI,IACrCS,MAAM,CAACC;AACZ;AAEA,gCAAgC,GAChC,OAAO,SAASM,qBAAqBC,KAAgF;QAC9FA,aACeA,sBACdA;QAFDA;IAArB,MAAMC,QAAQ1B,QAAOyB,iBAAAA,gBAAAA,MAAME,MAAM,qBAAZF,cAAcG,UAAU,oBAAIH,MAAMI,WAAW,YAA7CJ,OAAiD;IACtE,MAAMK,WAAWC,KAAKC,GAAG,CAAC,GAAGhC,QAAOyB,uBAAAA,MAAMQ,aAAa,YAAnBR,uBAAuB;IAC3D,MAAMS,SAAS5B,QAAOmB,gBAAAA,MAAMS,MAAM,YAAZT,gBAAgB;IACtC,IAAIS,WAAW,aAAaA,WAAW,SAAS,OAAO;IACvD,IAAIA,WAAW,aAAa,OAAO;IACnC,IAAIJ,WAAW,KAAKA,YAAYJ,OAAO,OAAO;IAC9C,IAAII,WAAW,GAAG,OAAO;IACzB,OAAO;AACT;AAEA,qEAAqE,GACrE,OAAO,SAASK,sBAAsBC,KAIrC;cASIX,kBACuBE,cACeF,sBAG0BA,qBACjEA,sBAIYA;IAlBd,MAAM,EAAEA,KAAK,EAAEY,OAAO,EAAEC,KAAK,EAAE,GAAGF;IAClC,MAAMtC,WAAWQ,OAAOmB,MAAM3B,QAAQ,IAAIwC,MAAMxC,QAAQ,IAAI,OAAOS,WAAW;IAC9E,MAAMgC,QAAQ,CAAC1C,QAAkBF,WAAWC,aAAaC,OAAOC;IAChE,MAAM0C,SAAS/C,kBAAkBgC,OAAOY;IACxC,MAAMI,YAAY/C,iBAAiB+B;IACnC,MAAME,SAASF,MAAME,MAAM;IAC3B,MAAMe,qBACJf,0BAAAA,OAAQe,UAAU,mBAClB,EAACjB,mBAAAA,MAAMkB,SAAS,YAAflB,mBAAmB,EAAE,EAAEmB,MAAM,CAAC,CAACC,KAAKC,OAASD,MAAM7C,OAAO8C,KAAKC,eAAe,IAAI,KAAK/C,OAAO8C,KAAKE,QAAQ,IAAI,IAAI;IACtH,MAAMpB,aAAa5B,QAAO2B,iBAAAA,0BAAAA,OAAQC,UAAU,oBAAIH,MAAMI,WAAW,YAAvCF,QAA2Ce;IACrE,MAAMT,gBAAgBF,KAAKC,GAAG,CAAC,GAAGhC,QAAOyB,uBAAAA,MAAMQ,aAAa,YAAnBR,uBAAuB;IAEhE,MAAMwB,SAAS;WACTxB,MAAMyB,cAAc,GAAGzC,aAAagB,MAAMyB,cAAc,IAAI;aAACzB,sBAAAA,MAAM0B,YAAY,YAAlB1B,sBAAsB;SAAG,CAACR,MAAM,CAACC;SAClGO,uBAAAA,MAAM2B,aAAa,YAAnB3B,uBAAuB;KACxB,CAACR,MAAM,CAACC;IACT,MAAMmC,SAAS5C,aAAagB,MAAM6B,eAAe;IAEjD,MAAMC,OAAO,EAAC9B,oBAAAA,MAAMkB,SAAS,YAAflB,oBAAmB,EAAE,EAChCH,GAAG,CAAC,CAACwB;QACJ,MAAME,WAAWhD,OAAO8C,KAAKE,QAAQ,KAAK;QAC1C,MAAMQ,OAAOxD,OAAO8C,KAAKC,eAAe,KAAK;QAC7C,MAAMU,SAAS;YAACX,KAAKY,YAAY,GAAG/D,WAAWmD,KAAKY,YAAY,IAAI;YAAIZ,KAAKa,GAAG,GAAG,CAAC,IAAI,EAAEhE,WAAWmD,KAAKa,GAAG,GAAG,GAAG;SAAG,CACnH1C,MAAM,CAACC,SACPC,IAAI,CAAC;QACR,OACE,CAAC,QAAQ,EAAExB,WAAWmD,KAAKnC,IAAI,IAAI8C,SAAS,CAAC,YAAY,EAAEA,OAAO,QAAQ,CAAC,GAAG,GAAG,KAAK,CAAC,GACvF,CAAC,kBAAkB,EAAE9D,WAAWqD,UAAU,KAAK,CAAC,GAChD,CAAC,kBAAkB,EAAET,MAAMiB,MAAM,KAAK,CAAC,GACvC,CAAC,kBAAkB,EAAEjB,MAAMiB,OAAOR,UAAU,UAAU,CAAC;IAE3D,GACC7B,IAAI,CAAC;IAER,MAAMyC,UAAmC;QAAC;YAAC;YAAYrB,MAAMG;SAAY;KAAC;IAC1E,IAAI1C,gBAAO2B,0BAAAA,OAAQkC,aAAa,oBAAI,KAAK,GAAGD,QAAQE,IAAI,CAAC;QAAC;QAAY,CAAC,CAAC,EAAEvB,MAAMvC,OAAO2B,0BAAAA,OAAQkC,aAAa,IAAI;KAAC;IACjH,IAAI7D,gBAAO2B,0BAAAA,OAAQoC,aAAa,oBAAI,KAAK,GAAGH,QAAQE,IAAI,CAAC;QAAC;QAAYvB,MAAMvC,OAAO2B,0BAAAA,OAAQoC,aAAa;KAAG;IAC3G,IAAI/D,gBAAO2B,0BAAAA,OAAQqC,QAAQ,oBAAI,KAAK,GAAGJ,QAAQE,IAAI,CAAC;QAAC;QAAOvB,MAAMvC,OAAO2B,0BAAAA,OAAQqC,QAAQ;KAAG;IAC5FJ,QAAQE,IAAI,CAAC;QAAC;QAAgB,CAAC,GAAG,EAAEvB,MAAMX,YAAY,IAAI,CAAC;KAAC;IAC5D,IAAI5B,gBAAO2B,0BAAAA,OAAQsC,QAAQ,oBAAI,KAAK,GAAGL,QAAQE,IAAI,CAAC;QAAC;QAAOvB,MAAMvC,OAAO2B,0BAAAA,OAAQsC,QAAQ;KAAG;IAC5F,IAAIhC,gBAAgB,GAAG;QACrB2B,QAAQE,IAAI,CAAC;YAAC;YAAY,CAAC,CAAC,EAAEvB,MAAMN,gBAAgB;SAAC;QACrD2B,QAAQE,IAAI,CAAC;YAAC;YAAmB,CAAC,GAAG,EAAEvB,MAAMR,KAAKC,GAAG,CAAC,GAAGJ,aAAaK,gBAAgB,IAAI,CAAC;SAAC;IAC9F;IAEA,MAAMiC,QAAQ,CAACC,OAAeC,QAC5BA,MAAMC,MAAM,GAAG,CAAC,oBAAoB,EAAEF,MAAM,SAAS,EAAEC,MAAM9C,GAAG,CAAC,CAACwB,OAASnD,WAAWmD,OAAO3B,IAAI,CAAC,SAAS,KAAK,CAAC,GAAG;IAEtH,OACE,CAAC,OAAO,EAAExB,WAAW,CAAC,QAAQ,EAAE6C,QAAQ,EAAE,QAAQ,CAAC,GACnD,CAAC,IAAI,EAAE7C,WAAW2C,MAAM3B,IAAI,IAAI,WAAW,KAAK,CAAC,GACjD,CAAC,IAAI,EAAEhB,WAAW,CAAC,QAAQ,EAAE6C,QAAQ,EAAE,KAAK,CAAC,GAC7C,CAAC,GAAG,EAAEC,YAAY,CAAC,MAAM,EAAE9C,WAAW,IAAI2E,KAAK7B,WAAW8B,kBAAkB,CAAC,SAAS;QAAEC,MAAM;QAAWC,OAAO;QAAQC,KAAK;IAAU,IAAI,KAAK,CAAC,GAAG,IAAI,GACxJ,CAAC,SAAS,EAAE/E,WAAW6B,qBAAqBC,QAAQ,eAAe,EAAE9B,WAAWG,UAAU,IAAI,CAAC,GAC/F,CAAC,wCAAwC,EAAEoE,MAAM,WAAWjB,UAAUiB,MAAM,WAAWb,QAAQ,aAAa,CAAC,GAC7G,CAAC,+DAA+D,CAAC,GACjE,CAAC,2HAA2H,CAAC,GAC7HE,OACA,CAAC,QAAQ,CAAC,GACV,CAAC,oCAAoC,EAAEK,QACpCtC,GAAG,CAAC,CAAC,CAACqD,OAAOC,MAAM,GAAK,CAAC,kCAAkC,EAAED,MAAM,uBAAuB,EAAEC,MAAM,UAAU,CAAC,EAC7GzD,IAAI,CAAC,IAAI,QAAQ,CAAC,GACpBmB,CAAAA,MAAMuC,MAAM,GAAG,CAAC,GAAG,EAAElF,WAAW2C,MAAMuC,MAAM,EAAE,IAAI,CAAC,GAAG,EAAC,IACvDvC,CAAAA,MAAMwC,QAAQ,GAAG,CAAC,iBAAiB,EAAEnF,WAAW2C,MAAMwC,QAAQ,EAAE,YAAY,CAAC,GAAG,EAAC;AAEtF"}
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/utils/order-invoice.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport {\n  formatOrderNumber,\n  orderCreatedAtMs,\n  type HostOrder,\n  type OrderAddress,\n} from '../model/commerce-orders'\nimport { escapeHtml } from './escape-html'\n\n/**\n * The printable invoice (AGL-3611), beside the packing slip: the order as a\n * bill — who sold it, to whom, each line with its unit price, the totals,\n * what was refunded and what was paid in the end.\n *\n * A string of markup, because it is written into a print popup the way the\n * packing slip is, and the browser's print dialog saves it as a PDF. Every\n * value is escaped: the addresses are typed by the shopper, and the popup\n * inherits the console's origin (AGL-2283). No `<style>` and no `style`\n * attributes, because the popup inherits the console's content security\n * policy; the layout is the table attributes HTML still honors.\n */\n\nexport interface OrderInvoiceStore {\n  /** The business's name, as its emails sign. */\n  name: string\n  /** The store's currency, for an order that does not carry its own. */\n  currency: string\n  /** The receipt footer the store set, printed at the foot. */\n  footer?: string | null\n  /** The store's terms address, printed at the foot. */\n  termsUrl?: string | null\n}\n\n/**\n * The invoice's store from the site's document and its store settings, as\n * the order dialog's Invoice button and `commerce/order-print` read them.\n */\nexport function invoiceStoreFrom(\n  host: Record<string, unknown> | undefined | null,\n  store: Record<string, unknown> | undefined | null,\n): OrderInvoiceStore {\n  const hostData = host ?? {}\n  const storeData = store ?? {}\n  return {\n    name: String(hostData['businessName'] ?? hostData['displayName'] ?? hostData['name'] ?? ''),\n    currency: String(storeData['currency'] ?? 'USD'),\n    footer: (storeData['receiptFooter'] as string | undefined) ?? null,\n    termsUrl: (storeData['termsUrl'] as string | undefined) ?? null,\n  }\n}\n\ntype InvoiceOrder = Pick<\n  HostOrder,\n  | 'number'\n  | 'status'\n  | 'lineItems'\n  | 'totals'\n  | 'refundedCents'\n  | 'customerName'\n  | 'customerEmail'\n  | 'shippingAddress'\n  | 'billingAddress'\n> & { createdAtMs?: number; currency?: string; amountCents?: number }\n\n/** Money in the order's currency, integer cents in. */\nexport function invoiceMoney(cents: number, currency: string): string {\n  const amount = (Number(cents) || 0) / 100\n  try {\n    return new Intl.NumberFormat('en-US', { style: 'currency', currency: currency || 'USD' }).format(amount)\n  } catch {\n    return `${amount.toFixed(2)} ${String(currency || '').toUpperCase()}`.trim()\n  }\n}\n\nfunction addressLines(address: OrderAddress | undefined | null): string[] {\n  if (!address) return []\n  return [\n    address.name,\n    address.line1,\n    address.line2,\n    [address.city, address.state, address.postalCode].filter(Boolean).join(' '),\n    address.country,\n    address.phone,\n  ]\n    .map((part) => String(part ?? '').trim())\n    .filter(Boolean)\n}\n\n/** What the payment line says. */\nexport function invoicePaymentStatus(order: Pick<InvoiceOrder, 'status' | 'refundedCents' | 'totals' | 'amountCents'>): string {\n  const total = Number(order.totals?.totalCents ?? order.amountCents ?? 0)\n  const refunded = Math.max(0, Number(order.refundedCents ?? 0))\n  const status = String(order.status ?? '')\n  if (status === 'pending' || status === 'draft') return 'Awaiting payment'\n  if (status === 'cancelled') return 'Canceled'\n  if (refunded > 0 && refunded >= total) return 'Refunded'\n  if (refunded > 0) return 'Paid, partially refunded'\n  return 'Paid'\n}\n\n/** The invoice's markup: a full document body, every value escaped. */\nexport function buildOrderInvoiceHtml(input: {\n  order: InvoiceOrder\n  orderId: string\n  store: OrderInvoiceStore\n}): string {\n  const { order, orderId, store } = input\n  const currency = String(order.currency || store.currency || 'USD').toUpperCase()\n  const money = (cents: number) => escapeHtml(invoiceMoney(cents, currency))\n  const number = formatOrderNumber(order, orderId)\n  const createdAt = orderCreatedAtMs(order as never)\n  const totals = order.totals\n  const itemsCents =\n    totals?.itemsCents ??\n    (order.lineItems ?? []).reduce((sum, line) => sum + Number(line.unitAmountCents || 0) * Number(line.quantity || 0), 0)\n  const totalCents = Number(totals?.totalCents ?? order.amountCents ?? itemsCents)\n  const refundedCents = Math.max(0, Number(order.refundedCents ?? 0))\n\n  const billTo = [\n    ...(order.billingAddress ? addressLines(order.billingAddress) : [order.customerName ?? ''].filter(Boolean)),\n    order.customerEmail ?? '',\n  ].filter(Boolean)\n  const shipTo = addressLines(order.shippingAddress)\n\n  const rows = (order.lineItems ?? [])\n    .map((line) => {\n      const quantity = Number(line.quantity) || 0\n      const unit = Number(line.unitAmountCents) || 0\n      const detail = [line.variantLabel ? escapeHtml(line.variantLabel) : '', line.sku ? `SKU ${escapeHtml(line.sku)}` : '']\n        .filter(Boolean)\n        .join(' · ')\n      return (\n        `<tr><td>${escapeHtml(line.name)}${detail ? `<br/><small>${detail}</small>` : ''}</td>` +\n        `<td align=\"right\">${escapeHtml(quantity)}</td>` +\n        `<td align=\"right\">${money(unit)}</td>` +\n        `<td align=\"right\">${money(unit * quantity)}</td></tr>`\n      )\n    })\n    .join('')\n\n  const summary: Array<[string, string]> = [['Subtotal', money(itemsCents)]]\n  if (Number(totals?.discountCents ?? 0) > 0) summary.push(['Discount', `−${money(Number(totals?.discountCents))}`])\n  if (Number(totals?.shippingCents ?? 0) > 0) summary.push(['Shipping', money(Number(totals?.shippingCents))])\n  if (Number(totals?.taxCents ?? 0) > 0) summary.push(['Tax', money(Number(totals?.taxCents))])\n  summary.push(['<b>Total</b>', `<b>${money(totalCents)}</b>`])\n  if (Number(totals?.tipCents ?? 0) > 0) summary.push(['Tip', money(Number(totals?.tipCents))])\n  if (refundedCents > 0) {\n    summary.push(['Refunded', `−${money(refundedCents)}`])\n    summary.push(['<b>Net paid</b>', `<b>${money(Math.max(0, totalCents - refundedCents))}</b>`])\n  }\n\n  const block = (title: string, lines: string[]) =>\n    lines.length ? `<td valign=\"top\"><b>${title}</b><br/>${lines.map((line) => escapeHtml(line)).join('<br/>')}</td>` : ''\n\n  return (\n    `<title>${escapeHtml(`Invoice ${number}`)}</title>` +\n    `<h2>${escapeHtml(store.name || 'Invoice')}</h2>` +\n    `<h3>${escapeHtml(`Invoice ${number}`)}</h3>` +\n    `<p>${createdAt ? `Date: ${escapeHtml(new Date(createdAt).toLocaleDateString('en-US', { year: 'numeric', month: 'long', day: 'numeric' }))}<br/>` : ''}` +\n    `Payment: ${escapeHtml(invoicePaymentStatus(order))}<br/>Currency: ${escapeHtml(currency)}</p>` +\n    `<table width=\"100%\" cellpadding=\"6\"><tr>${block('Bill to', billTo)}${block('Ship to', shipTo)}</tr></table>` +\n    `<table width=\"100%\" cellpadding=\"6\" border=\"1\" cellspacing=\"0\">` +\n    `<tr><th align=\"left\">Item</th><th align=\"right\">Qty</th><th align=\"right\">Unit price</th><th align=\"right\">Amount</th></tr>` +\n    rows +\n    `</table>` +\n    `<table width=\"100%\" cellpadding=\"4\">${summary\n      .map(([label, value]) => `<tr><td align=\"right\" width=\"80%\">${label}</td><td align=\"right\">${value}</td></tr>`)\n      .join('')}</table>` +\n    (store.footer ? `<p>${escapeHtml(store.footer)}</p>` : '') +\n    (store.termsUrl ? `<p><small>Terms: ${escapeHtml(store.termsUrl)}</small></p>` : '')\n  )\n}\n"],"names":["formatOrderNumber","orderCreatedAtMs","escapeHtml","invoiceStoreFrom","host","store","hostData","storeData","name","String","currency","footer","termsUrl","invoiceMoney","cents","amount","Number","Intl","NumberFormat","style","format","toFixed","toUpperCase","trim","addressLines","address","line1","line2","city","state","postalCode","filter","Boolean","join","country","phone","map","part","invoicePaymentStatus","order","total","totals","totalCents","amountCents","refunded","Math","max","refundedCents","status","buildOrderInvoiceHtml","input","orderId","money","number","createdAt","itemsCents","lineItems","reduce","sum","line","unitAmountCents","quantity","billTo","billingAddress","customerName","customerEmail","shipTo","shippingAddress","rows","unit","detail","variantLabel","sku","summary","discountCents","push","shippingCents","taxCents","tipCents","block","title","lines","length","Date","toLocaleDateString","year","month","day","label","value"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SACEA,iBAAiB,EACjBC,gBAAgB,QAGX,8BAA0B;AACjC,SAASC,UAAU,QAAQ,mBAAe;AA0B1C;;;CAGC,GACD,OAAO,SAASC,iBACdC,IAAgD,EAChDC,KAAiD;QAKlCC,MAAAA,OAAAA,wBACIC,qBACRA,0BACEA;IANb,MAAMD,WAAWF,eAAAA,OAAQ,CAAC;IAC1B,MAAMG,YAAYF,gBAAAA,QAAS,CAAC;IAC5B,OAAO;QACLG,MAAMC,QAAOH,QAAAA,SAAAA,yBAAAA,QAAQ,CAAC,eAAe,YAAxBA,yBAA4BA,QAAQ,CAAC,cAAc,YAAnDA,QAAuDA,QAAQ,CAAC,OAAO,YAAvEA,OAA2E;QACxFI,UAAUD,QAAOF,sBAAAA,SAAS,CAAC,WAAW,YAArBA,sBAAyB;QAC1CI,MAAM,GAAGJ,2BAAAA,SAAS,CAAC,gBAAgB,YAA1BA,2BAAqD;QAC9DK,QAAQ,GAAGL,sBAAAA,SAAS,CAAC,WAAW,YAArBA,sBAAgD;IAC7D;AACF;AAeA,qDAAqD,GACrD,OAAO,SAASM,aAAaC,KAAa,EAAEJ,QAAgB;IAC1D,MAAMK,SAAS,AAACC,CAAAA,OAAOF,UAAU,CAAA,IAAK;IACtC,IAAI;QACF,OAAO,IAAIG,KAAKC,YAAY,CAAC,SAAS;YAAEC,OAAO;YAAYT,UAAUA,YAAY;QAAM,GAAGU,MAAM,CAACL;IACnG,EAAE,eAAM;QACN,OAAO,GAAGA,OAAOM,OAAO,CAAC,GAAG,CAAC,EAAEZ,OAAOC,YAAY,IAAIY,WAAW,IAAI,CAACC,IAAI;IAC5E;AACF;AAEA,SAASC,aAAaC,OAAwC;IAC5D,IAAI,CAACA,SAAS,OAAO,EAAE;IACvB,OAAO;QACLA,QAAQjB,IAAI;QACZiB,QAAQC,KAAK;QACbD,QAAQE,KAAK;QACb;YAACF,QAAQG,IAAI;YAAEH,QAAQI,KAAK;YAAEJ,QAAQK,UAAU;SAAC,CAACC,MAAM,CAACC,SAASC,IAAI,CAAC;QACvER,QAAQS,OAAO;QACfT,QAAQU,KAAK;KACd,CACEC,GAAG,CAAC,CAACC,OAAS5B,OAAO4B,eAAAA,OAAQ,IAAId,IAAI,IACrCQ,MAAM,CAACC;AACZ;AAEA,gCAAgC,GAChC,OAAO,SAASM,qBAAqBC,KAAgF;QAC9FA,aACeA,sBACdA;QAFDA;IAArB,MAAMC,QAAQxB,QAAOuB,iBAAAA,gBAAAA,MAAME,MAAM,qBAAZF,cAAcG,UAAU,oBAAIH,MAAMI,WAAW,YAA7CJ,OAAiD;IACtE,MAAMK,WAAWC,KAAKC,GAAG,CAAC,GAAG9B,QAAOuB,uBAAAA,MAAMQ,aAAa,YAAnBR,uBAAuB;IAC3D,MAAMS,SAASvC,QAAO8B,gBAAAA,MAAMS,MAAM,YAAZT,gBAAgB;IACtC,IAAIS,WAAW,aAAaA,WAAW,SAAS,OAAO;IACvD,IAAIA,WAAW,aAAa,OAAO;IACnC,IAAIJ,WAAW,KAAKA,YAAYJ,OAAO,OAAO;IAC9C,IAAII,WAAW,GAAG,OAAO;IACzB,OAAO;AACT;AAEA,qEAAqE,GACrE,OAAO,SAASK,sBAAsBC,KAIrC;cASIX,kBACuBE,cACeF,sBAG0BA,qBACjEA,sBAIYA;IAlBd,MAAM,EAAEA,KAAK,EAAEY,OAAO,EAAE9C,KAAK,EAAE,GAAG6C;IAClC,MAAMxC,WAAWD,OAAO8B,MAAM7B,QAAQ,IAAIL,MAAMK,QAAQ,IAAI,OAAOY,WAAW;IAC9E,MAAM8B,QAAQ,CAACtC,QAAkBZ,WAAWW,aAAaC,OAAOJ;IAChE,MAAM2C,SAASrD,kBAAkBuC,OAAOY;IACxC,MAAMG,YAAYrD,iBAAiBsC;IACnC,MAAME,SAASF,MAAME,MAAM;IAC3B,MAAMc,qBACJd,0BAAAA,OAAQc,UAAU,mBAClB,EAAChB,mBAAAA,MAAMiB,SAAS,YAAfjB,mBAAmB,EAAE,EAAEkB,MAAM,CAAC,CAACC,KAAKC,OAASD,MAAM1C,OAAO2C,KAAKC,eAAe,IAAI,KAAK5C,OAAO2C,KAAKE,QAAQ,IAAI,IAAI;IACtH,MAAMnB,aAAa1B,QAAOyB,iBAAAA,0BAAAA,OAAQC,UAAU,oBAAIH,MAAMI,WAAW,YAAvCF,QAA2Cc;IACrE,MAAMR,gBAAgBF,KAAKC,GAAG,CAAC,GAAG9B,QAAOuB,uBAAAA,MAAMQ,aAAa,YAAnBR,uBAAuB;IAEhE,MAAMuB,SAAS;WACTvB,MAAMwB,cAAc,GAAGvC,aAAae,MAAMwB,cAAc,IAAI;aAACxB,sBAAAA,MAAMyB,YAAY,YAAlBzB,sBAAsB;SAAG,CAACR,MAAM,CAACC;SAClGO,uBAAAA,MAAM0B,aAAa,YAAnB1B,uBAAuB;KACxB,CAACR,MAAM,CAACC;IACT,MAAMkC,SAAS1C,aAAae,MAAM4B,eAAe;IAEjD,MAAMC,OAAO,EAAC7B,oBAAAA,MAAMiB,SAAS,YAAfjB,oBAAmB,EAAE,EAChCH,GAAG,CAAC,CAACuB;QACJ,MAAME,WAAW7C,OAAO2C,KAAKE,QAAQ,KAAK;QAC1C,MAAMQ,OAAOrD,OAAO2C,KAAKC,eAAe,KAAK;QAC7C,MAAMU,SAAS;YAACX,KAAKY,YAAY,GAAGrE,WAAWyD,KAAKY,YAAY,IAAI;YAAIZ,KAAKa,GAAG,GAAG,CAAC,IAAI,EAAEtE,WAAWyD,KAAKa,GAAG,GAAG,GAAG;SAAG,CACnHzC,MAAM,CAACC,SACPC,IAAI,CAAC;QACR,OACE,CAAC,QAAQ,EAAE/B,WAAWyD,KAAKnD,IAAI,IAAI8D,SAAS,CAAC,YAAY,EAAEA,OAAO,QAAQ,CAAC,GAAG,GAAG,KAAK,CAAC,GACvF,CAAC,kBAAkB,EAAEpE,WAAW2D,UAAU,KAAK,CAAC,GAChD,CAAC,kBAAkB,EAAET,MAAMiB,MAAM,KAAK,CAAC,GACvC,CAAC,kBAAkB,EAAEjB,MAAMiB,OAAOR,UAAU,UAAU,CAAC;IAE3D,GACC5B,IAAI,CAAC;IAER,MAAMwC,UAAmC;QAAC;YAAC;YAAYrB,MAAMG;SAAY;KAAC;IAC1E,IAAIvC,gBAAOyB,0BAAAA,OAAQiC,aAAa,oBAAI,KAAK,GAAGD,QAAQE,IAAI,CAAC;QAAC;QAAY,CAAC,CAAC,EAAEvB,MAAMpC,OAAOyB,0BAAAA,OAAQiC,aAAa,IAAI;KAAC;IACjH,IAAI1D,gBAAOyB,0BAAAA,OAAQmC,aAAa,oBAAI,KAAK,GAAGH,QAAQE,IAAI,CAAC;QAAC;QAAYvB,MAAMpC,OAAOyB,0BAAAA,OAAQmC,aAAa;KAAG;IAC3G,IAAI5D,gBAAOyB,0BAAAA,OAAQoC,QAAQ,oBAAI,KAAK,GAAGJ,QAAQE,IAAI,CAAC;QAAC;QAAOvB,MAAMpC,OAAOyB,0BAAAA,OAAQoC,QAAQ;KAAG;IAC5FJ,QAAQE,IAAI,CAAC;QAAC;QAAgB,CAAC,GAAG,EAAEvB,MAAMV,YAAY,IAAI,CAAC;KAAC;IAC5D,IAAI1B,gBAAOyB,0BAAAA,OAAQqC,QAAQ,oBAAI,KAAK,GAAGL,QAAQE,IAAI,CAAC;QAAC;QAAOvB,MAAMpC,OAAOyB,0BAAAA,OAAQqC,QAAQ;KAAG;IAC5F,IAAI/B,gBAAgB,GAAG;QACrB0B,QAAQE,IAAI,CAAC;YAAC;YAAY,CAAC,CAAC,EAAEvB,MAAML,gBAAgB;SAAC;QACrD0B,QAAQE,IAAI,CAAC;YAAC;YAAmB,CAAC,GAAG,EAAEvB,MAAMP,KAAKC,GAAG,CAAC,GAAGJ,aAAaK,gBAAgB,IAAI,CAAC;SAAC;IAC9F;IAEA,MAAMgC,QAAQ,CAACC,OAAeC,QAC5BA,MAAMC,MAAM,GAAG,CAAC,oBAAoB,EAAEF,MAAM,SAAS,EAAEC,MAAM7C,GAAG,CAAC,CAACuB,OAASzD,WAAWyD,OAAO1B,IAAI,CAAC,SAAS,KAAK,CAAC,GAAG;IAEtH,OACE,CAAC,OAAO,EAAE/B,WAAW,CAAC,QAAQ,EAAEmD,QAAQ,EAAE,QAAQ,CAAC,GACnD,CAAC,IAAI,EAAEnD,WAAWG,MAAMG,IAAI,IAAI,WAAW,KAAK,CAAC,GACjD,CAAC,IAAI,EAAEN,WAAW,CAAC,QAAQ,EAAEmD,QAAQ,EAAE,KAAK,CAAC,GAC7C,CAAC,GAAG,EAAEC,YAAY,CAAC,MAAM,EAAEpD,WAAW,IAAIiF,KAAK7B,WAAW8B,kBAAkB,CAAC,SAAS;QAAEC,MAAM;QAAWC,OAAO;QAAQC,KAAK;IAAU,IAAI,KAAK,CAAC,GAAG,IAAI,GACxJ,CAAC,SAAS,EAAErF,WAAWoC,qBAAqBC,QAAQ,eAAe,EAAErC,WAAWQ,UAAU,IAAI,CAAC,GAC/F,CAAC,wCAAwC,EAAEqE,MAAM,WAAWjB,UAAUiB,MAAM,WAAWb,QAAQ,aAAa,CAAC,GAC7G,CAAC,+DAA+D,CAAC,GACjE,CAAC,2HAA2H,CAAC,GAC7HE,OACA,CAAC,QAAQ,CAAC,GACV,CAAC,oCAAoC,EAAEK,QACpCrC,GAAG,CAAC,CAAC,CAACoD,OAAOC,MAAM,GAAK,CAAC,kCAAkC,EAAED,MAAM,uBAAuB,EAAEC,MAAM,UAAU,CAAC,EAC7GxD,IAAI,CAAC,IAAI,QAAQ,CAAC,GACpB5B,CAAAA,MAAMM,MAAM,GAAG,CAAC,GAAG,EAAET,WAAWG,MAAMM,MAAM,EAAE,IAAI,CAAC,GAAG,EAAC,IACvDN,CAAAA,MAAMO,QAAQ,GAAG,CAAC,iBAAiB,EAAEV,WAAWG,MAAMO,QAAQ,EAAE,YAAY,CAAC,GAAG,EAAC;AAEtF"}

package/src/lib/utils/order-packing-slip.d.ts

@@ -0,0 +1,31 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type HostOrder } from '../model/commerce-orders';
+/**
+ * The packing slip (the order dialog's "Packing slip"): the order's number,
+ * where it ships and each line with its quantity and SKU, as markup for the
+ * print dialog. The console writes it into a print popup; the apps print the
+ * same markup, which `commerce/order-print` sends them.
+ *
+ * ESCAPED (AGL-2283). The console's popup is an `about:blank` document that
+ * INHERITS the console's origin, and `order.shippingAddress` is copied
+ * verbatim from Stripe's `shipping_details`, i.e. typed by the SHOPPER. A
+ * name of `<img src=x onerror=…>` ran script against the merchant's own
+ * authenticated session. Line names and SKUs are merchant-authored and lower
+ * severity, but they are the same construction and get the same treatment.
+ */
+export declare function buildPackingSlipHtml(order: Pick<HostOrder, 'number' | 'lineItems' | 'shippingAddress'>, orderId: string): string;

package/src/lib/utils/order-packing-slip.js

@@ -0,0 +1,46 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { formatOrderNumber } from "../model/commerce-orders.js";
+import { escapeHtml } from "./escape-html.js";
+/**
+ * The packing slip (the order dialog's "Packing slip"): the order's number,
+ * where it ships and each line with its quantity and SKU, as markup for the
+ * print dialog. The console writes it into a print popup; the apps print the
+ * same markup, which `commerce/order-print` sends them.
+ *
+ * ESCAPED (AGL-2283). The console's popup is an `about:blank` document that
+ * INHERITS the console's origin, and `order.shippingAddress` is copied
+ * verbatim from Stripe's `shipping_details`, i.e. typed by the SHOPPER. A
+ * name of `<img src=x onerror=…>` ran script against the merchant's own
+ * authenticated session. Line names and SKUs are merchant-authored and lower
+ * severity, but they are the same construction and get the same treatment.
+ */ export function buildPackingSlipHtml(order, orderId) {
+    var _order_lineItems, _address_city, _address_state, _address_postalCode;
+    const rows = ((_order_lineItems = order.lineItems) != null ? _order_lineItems : []).map((line)=>{
+        var _line_sku;
+        return `<tr><td>${escapeHtml(line.quantity)}×</td><td>${escapeHtml(line.name)}${line.variantLabel ? ` — ${escapeHtml(line.variantLabel)}` : ''}</td><td>${escapeHtml((_line_sku = line.sku) != null ? _line_sku : '')}</td></tr>`;
+    }).join('');
+    const address = order.shippingAddress;
+    return `<h2>Packing slip ${escapeHtml(formatOrderNumber(order, orderId))}</h2>` + (address ? `<p>${[
+        address.name,
+        address.line1,
+        address.line2,
+        `${(_address_city = address.city) != null ? _address_city : ''} ${(_address_state = address.state) != null ? _address_state : ''} ${(_address_postalCode = address.postalCode) != null ? _address_postalCode : ''}`,
+        address.country
+    ].filter(Boolean).map((part)=>escapeHtml(part)).join('<br/>')}</p>` : '') + `<table border="0" cellpadding="6">${rows}</table>`;
+}
+
+//# sourceMappingURL=order-packing-slip.js.map

package/src/lib/utils/order-packing-slip.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/utils/order-packing-slip.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { formatOrderNumber, type HostOrder } from '../model/commerce-orders'\nimport { escapeHtml } from './escape-html'\n\n/**\n * The packing slip (the order dialog's \"Packing slip\"): the order's number,\n * where it ships and each line with its quantity and SKU, as markup for the\n * print dialog. The console writes it into a print popup; the apps print the\n * same markup, which `commerce/order-print` sends them.\n *\n * ESCAPED (AGL-2283). The console's popup is an `about:blank` document that\n * INHERITS the console's origin, and `order.shippingAddress` is copied\n * verbatim from Stripe's `shipping_details`, i.e. typed by the SHOPPER. A\n * name of `<img src=x onerror=…>` ran script against the merchant's own\n * authenticated session. Line names and SKUs are merchant-authored and lower\n * severity, but they are the same construction and get the same treatment.\n */\nexport function buildPackingSlipHtml(\n  order: Pick<HostOrder, 'number' | 'lineItems' | 'shippingAddress'>,\n  orderId: string,\n): string {\n  const rows = (order.lineItems ?? [])\n    .map(\n      (line) =>\n        `<tr><td>${escapeHtml(line.quantity)}×</td><td>${escapeHtml(line.name)}${\n          line.variantLabel ? ` — ${escapeHtml(line.variantLabel)}` : ''\n        }</td><td>${escapeHtml(line.sku ?? '')}</td></tr>`,\n    )\n    .join('')\n  const address = order.shippingAddress\n  return (\n    `<h2>Packing slip ${escapeHtml(formatOrderNumber(order, orderId))}</h2>` +\n    (address\n      ? `<p>${[\n          address.name,\n          address.line1,\n          address.line2,\n          `${address.city ?? ''} ${address.state ?? ''} ${address.postalCode ?? ''}`,\n          address.country,\n        ]\n          .filter(Boolean)\n          .map((part) => escapeHtml(part))\n          .join('<br/>')}</p>`\n      : '') +\n    `<table border=\"0\" cellpadding=\"6\">${rows}</table>`\n  )\n}\n"],"names":["formatOrderNumber","escapeHtml","buildPackingSlipHtml","order","orderId","address","rows","lineItems","map","line","quantity","name","variantLabel","sku","join","shippingAddress","line1","line2","city","state","postalCode","country","filter","Boolean","part"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,iBAAiB,QAAwB,8BAA0B;AAC5E,SAASC,UAAU,QAAQ,mBAAe;AAE1C;;;;;;;;;;;;CAYC,GACD,OAAO,SAASC,qBACdC,KAAkE,EAClEC,OAAe;QAEDD,kBAgBHE,eAAsBA,gBAAuBA;IAhBxD,MAAMC,OAAO,EAACH,mBAAAA,MAAMI,SAAS,YAAfJ,mBAAmB,EAAE,EAChCK,GAAG,CACF,CAACC;YAGwBA;eAFvB,CAAC,QAAQ,EAAER,WAAWQ,KAAKC,QAAQ,EAAE,UAAU,EAAET,WAAWQ,KAAKE,IAAI,IACnEF,KAAKG,YAAY,GAAG,CAAC,GAAG,EAAEX,WAAWQ,KAAKG,YAAY,GAAG,GAAG,GAC7D,SAAS,EAAEX,YAAWQ,YAAAA,KAAKI,GAAG,YAARJ,YAAY,IAAI,UAAU,CAAC;OAErDK,IAAI,CAAC;IACR,MAAMT,UAAUF,MAAMY,eAAe;IACrC,OACE,CAAC,iBAAiB,EAAEd,WAAWD,kBAAkBG,OAAOC,UAAU,KAAK,CAAC,GACvEC,CAAAA,UACG,CAAC,GAAG,EAAE;QACJA,QAAQM,IAAI;QACZN,QAAQW,KAAK;QACbX,QAAQY,KAAK;QACb,IAAGZ,gBAAAA,QAAQa,IAAI,YAAZb,gBAAgB,GAAG,CAAC,GAAEA,iBAAAA,QAAQc,KAAK,YAAbd,iBAAiB,GAAG,CAAC,GAAEA,sBAAAA,QAAQe,UAAU,YAAlBf,sBAAsB,IAAI;QAC1EA,QAAQgB,OAAO;KAChB,CACEC,MAAM,CAACC,SACPf,GAAG,CAAC,CAACgB,OAASvB,WAAWuB,OACzBV,IAAI,CAAC,SAAS,IAAI,CAAC,GACtB,EAAC,IACL,CAAC,kCAAkC,EAAER,KAAK,QAAQ,CAAC;AAEvD"}