@aglyn/plugins-commerce 1.0.0-beta.277 → 1.0.0-beta.282

package/src/lib/server/pos-hardware.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-hardware.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { createHash } from 'crypto'\nimport type { PluginApiHandler } from '@aglyn/aglyn/server'\nimport { firebaseAdmin, readOrgBilling } from '@aglyn/tenant-data-admin'\nimport { hostConsoleUrl } from '@aglyn/tenant-data-admin/server/host-console-link'\nimport {\n  encodePosHardwareLines,\n  isPosHardwareShippingMethod,\n  POS_HARDWARE_ANCHOR,\n  parsePosHardwareConfig,\n  POS_HARDWARE_CURRENCY,\n  POS_HARDWARE_METADATA_TYPE,\n  POS_HARDWARE_ORDERS_COLLECTION,\n  POS_HARDWARE_SALES_COLLECTION,\n  POS_HARDWARE_SHIP_COUNTRIES,\n  POS_HARDWARE_SHIPPING_LABELS,\n  posHardwareOffers,\n  posHardwareSku,\n  pricePosHardwareCart,\n  type PosHardwareConfig,\n  type PosHardwareOrder,\n} from '../model/pos-hardware'\nimport { authorizePosStaff, posIdempotencyKey, posRequestBody } from './pos-auth'\nimport { posStripe, posTerminalAvailable } from './pos-stripe'\n\n/*==========================================\n * `POST /api/commerce/pos-hardware` (AGL-4038): the merchant's half of the\n * POS hardware shop, behind the Hardware card on Products → Point of sale.\n *\n *   catalog   what is on offer and at what price, or `available: false`\n *   checkout  a Stripe Checkout Session for the basket, on the PLATFORM\n *   orders    this site's hardware orders, newest first\n *\n * Gated like the register (`authorizePosStaff`: an admin or editor of the\n * site with `managePos`, on a plan with POS), because the readers it sells\n * are the register's.\n *\n * THE SALE IS THE PLATFORM'S. The session is created with the platform key\n * and NO connected account, `transfer_data` or application fee: the merchant\n * is the buyer here, and the platform is the seller of record that places\n * the order with Stripe. The order document is written by the webhook once\n * Stripe says the session is paid (`pos-hardware-webhook.ts`), never here.\n *=========================================*/\n\n/** The shop's config from this deployment, or `null` while it is hidden. */\nexport function posHardwareConfig(\n  env: Record<string, string | undefined> = process.env,\n): PosHardwareConfig | null {\n  // A reader the platform cannot yet take payments on is not for sale: the\n  // shop opens only where the register offers card readers at all.\n  if (!posTerminalAvailable()) return null\n  return parsePosHardwareConfig(env)\n}\n\n/** The order's id, derived from the attempt so a repeated press is one order. */\nexport function posHardwareOrderId(orgId: string, hostId: string, attemptKey: string): string {\n  return `hw_${createHash('sha256').update(`${orgId}:${hostId}:${attemptKey}`).digest('hex').slice(0, 20)}`\n}\n\n/** The number a person reads: `HW-` and six characters of the id. */\nexport function posHardwareOrderNumber(orderId: string): string {\n  return `HW-${orderId.replace(/^hw_/, '').slice(0, 6).toUpperCase()}`\n}\n\nexport function hardwareOrdersRef(orgId: string) {\n  return firebaseAdmin\n    .app()\n    .firestore()\n    .collection('orgs')\n    .doc(orgId)\n    .collection(POS_HARDWARE_ORDERS_COLLECTION)\n}\n\n/**\n * `posHardwareSales/{orderId}`, the retained sale record beside each order\n * (see `PosHardwareSaleRecord`). Top-level on purpose: the workspace erasure\n * cannot reach it.\n */\nexport function posHardwareSaleRef(orderId: string) {\n  return firebaseAdmin.app().firestore().collection(POS_HARDWARE_SALES_COLLECTION).doc(orderId)\n}\n\n/** An order as the merchant's card shows it: no Stripe ids, no staff notes. */\nexport function merchantHardwareOrderView(id: string, order: PosHardwareOrder) {\n  return {\n    id,\n    number: posHardwareOrderNumber(id),\n    status: order.status,\n    lines: (order.lines ?? []).map((line) => ({\n      sku: line.sku,\n      name: line.name,\n      quantity: line.quantity,\n      unitCents: line.unitCents,\n      lineCents: line.lineCents,\n    })),\n    subtotalCents: order.subtotalCents ?? 0,\n    shippingCents: order.shipping?.cents ?? 0,\n    shippingLabel: order.shipping?.label ?? '',\n    taxCents: order.taxCents ?? 0,\n    totalCents: order.totalCents ?? 0,\n    tracking: order.tracking ?? null,\n    createdAtMs: order.createdAtMs ?? 0,\n    updatedAtMs: order.updatedAtMs ?? order.createdAtMs ?? 0,\n  }\n}\n\nexport type MerchantHardwareOrderView = ReturnType<typeof merchantHardwareOrderView>\n\n/** The POS settings page of a site, as an absolute console URL. */\nexport async function posSettingsUrl(hostId: string): Promise<string> {\n  return hostConsoleUrl(hostId, `/${hostId}/products/pos`)\n}\n\n/** `base` with `query` added before any `#fragment`, then `#hash`. */\nexport function withQueryAndHash(base: string, query: string, hash: string): string {\n  const [path] = base.split('#')\n  const joiner = path.includes('?') ? '&' : '?'\n  return `${path}${joiner}${query}#${hash}`\n}\n\n\nexport const posHardwareHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') return res.status(405).json({ error: 'Method not allowed' })\n  const body = posRequestBody(req)\n  const hostId = String(body['hostId'] ?? '')\n  const gate = await authorizePosStaff(req, hostId)\n  if ('error' in gate) return res.status(gate.status).json({ error: gate.error })\n  const staff = gate.staff\n  const config = posHardwareConfig()\n  const action = String(body['action'] ?? '')\n  try {\n    switch (action) {\n      case 'catalog':\n        if (!config) return res.status(200).json({ available: false })\n        return res.status(200).json({\n          available: true,\n          offers: posHardwareOffers(config),\n          shipping: config.shipping.map((option) => ({\n            method: option.method,\n            label: POS_HARDWARE_SHIPPING_LABELS[option.method],\n            cents: option.cents,\n          })),\n          automaticTax: config.automaticTax,\n          shipCountries: POS_HARDWARE_SHIP_COUNTRIES,\n        })\n      case 'orders': {\n        const snapshot = await hardwareOrdersRef(staff.orgId)\n          .where('hostId', '==', staff.hostId)\n          .orderBy('createdAtMs', 'desc')\n          .limit(50)\n          .get()\n        return res.status(200).json({\n          orders: snapshot.docs.map((doc: any) =>\n            merchantHardwareOrderView(String(doc.id), doc.data() as PosHardwareOrder),\n          ),\n        })\n      }\n      case 'checkout': {\n        if (!config) return res.status(404).json({ error: 'The hardware shop is not available.' })\n        const attemptKey = posIdempotencyKey(req)\n        if (!attemptKey) return res.status(400).json({ error: 'Missing Idempotency-Key' })\n        if (!staff.orgId) return res.status(409).json({ error: 'This site has no workspace.' })\n        const priced = pricePosHardwareCart(config, body['lines'])\n        if ('error' in priced) return res.status(400).json({ error: priced.error })\n        const method = body['shippingMethod']\n        const shipping = isPosHardwareShippingMethod(method)\n          ? config.shipping.find((option) => option.method === method)\n          : undefined\n        if (!shipping) return res.status(400).json({ error: 'Choose a shipping speed.' })\n\n        const orderId = posHardwareOrderId(staff.orgId, staff.hostId, attemptKey)\n        const billing = await readOrgBilling(staff.orgId).catch(() => ({}))\n        const customer = String((billing as { stripeCustomerId?: unknown }).stripeCustomerId ?? '').trim()\n        const base = await posSettingsUrl(staff.hostId)\n        const params: Record<string, string | number | boolean> = {\n          mode: 'payment',\n          client_reference_id: orderId,\n          success_url: withQueryAndHash(base, 'hardwareOrder=placed', POS_HARDWARE_ANCHOR),\n          cancel_url: withQueryAndHash(base, 'hardwareOrder=canceled', POS_HARDWARE_ANCHOR),\n          'payment_method_types[0]': 'card',\n          'shipping_address_collection[allowed_countries][0]': POS_HARDWARE_SHIP_COUNTRIES[0],\n          'phone_number_collection[enabled]': true,\n          'shipping_options[0][shipping_rate_data][type]': 'fixed_amount',\n          'shipping_options[0][shipping_rate_data][display_name]': POS_HARDWARE_SHIPPING_LABELS[shipping.method],\n          'shipping_options[0][shipping_rate_data][fixed_amount][amount]': shipping.cents,\n          'shipping_options[0][shipping_rate_data][fixed_amount][currency]': POS_HARDWARE_CURRENCY,\n          'metadata[type]': POS_HARDWARE_METADATA_TYPE,\n          'metadata[orderId]': orderId,\n          'metadata[orgId]': staff.orgId,\n          'metadata[hostId]': staff.hostId,\n          'metadata[uid]': staff.uid,\n          'metadata[lines]': encodePosHardwareLines(priced.lines),\n          'metadata[shippingMethod]': shipping.method,\n          'metadata[shippingCents]': shipping.cents,\n          'metadata[subtotalCents]': priced.subtotalCents,\n          'payment_intent_data[description]': `Card reader order ${posHardwareOrderNumber(orderId)}`,\n          'payment_intent_data[metadata][type]': POS_HARDWARE_METADATA_TYPE,\n          'payment_intent_data[metadata][orderId]': orderId,\n          'payment_intent_data[metadata][orgId]': staff.orgId,\n          ...(customer ? { customer } : {}),\n          ...(config.automaticTax\n            ? {\n                'automatic_tax[enabled]': true,\n                'shipping_options[0][shipping_rate_data][tax_behavior]': 'exclusive',\n                // A returning workspace's saved address is kept up to date\n                // from what Checkout collects, which automatic tax requires.\n                ...(customer ? { 'customer_update[shipping]': 'auto' } : {}),\n              }\n            : {}),\n        }\n        priced.lines.forEach((line, index) => {\n          const sku = posHardwareSku(line.sku)\n          params[`line_items[${index}][quantity]`] = line.quantity\n          // A literal, not POS_HARDWARE_CURRENCY: check:facilitator-charge-shape\n          // reads Stripe Tax beside a usd line item only when it says so (AGL-1956).\n          params[`line_items[${index}][price_data][currency]`] = 'usd'\n          params[`line_items[${index}][price_data][unit_amount]`] = line.unitCents\n          params[`line_items[${index}][price_data][product_data][name]`] = line.name\n          if (sku) params[`line_items[${index}][price_data][product_data][description]`] = sku.use\n          params[`line_items[${index}][price_data][product_data][metadata][sku]`] = line.sku\n          if (config.automaticTax) params[`line_items[${index}][price_data][tax_behavior]`] = 'exclusive'\n        })\n        const created = await posStripe('POST', 'checkout/sessions', {\n          params,\n          idempotencyKey: `pos-hw-checkout-${orderId}`,\n        })\n        const url = String(created.body?.url ?? '')\n        if (!created.ok || !url) {\n          console.error('[pos-hardware] checkout refused', created.status, created.body?.error?.code)\n          return res.status(502).json({ error: 'Checkout could not be started. Try again in a moment.' })\n        }\n        return res.status(200).json({ url, orderId })\n      }\n      default:\n        return res.status(400).json({ error: 'Unknown action' })\n    }\n  } catch (error) {\n    console.error('[pos-hardware]', action, error)\n    return res.status(500).json({ error: 'The hardware shop could not answer' })\n  }\n}\n"],"names":["createHash","firebaseAdmin","readOrgBilling","hostConsoleUrl","encodePosHardwareLines","isPosHardwareShippingMethod","POS_HARDWARE_ANCHOR","parsePosHardwareConfig","POS_HARDWARE_CURRENCY","POS_HARDWARE_METADATA_TYPE","POS_HARDWARE_ORDERS_COLLECTION","POS_HARDWARE_SALES_COLLECTION","POS_HARDWARE_SHIP_COUNTRIES","POS_HARDWARE_SHIPPING_LABELS","posHardwareOffers","posHardwareSku","pricePosHardwareCart","authorizePosStaff","posIdempotencyKey","posRequestBody","posStripe","posTerminalAvailable","posHardwareConfig","env","process","posHardwareOrderId","orgId","hostId","attemptKey","update","digest","slice","posHardwareOrderNumber","orderId","replace","toUpperCase","hardwareOrdersRef","app","firestore","collection","doc","posHardwareSaleRef","merchantHardwareOrderView","id","order","number","status","lines","map","line","sku","name","quantity","unitCents","lineCents","subtotalCents","shippingCents","shipping","cents","shippingLabel","label","taxCents","totalCents","tracking","createdAtMs","updatedAtMs","posSettingsUrl","withQueryAndHash","base","query","hash","path","split","joiner","includes","posHardwareHandler","req","res","body","method","json","error","String","gate","staff","config","action","available","offers","option","automaticTax","shipCountries","snapshot","where","orderBy","limit","get","orders","docs","data","created","priced","find","undefined","billing","catch","customer","stripeCustomerId","trim","params","mode","client_reference_id","success_url","cancel_url","uid","forEach","index","use","idempotencyKey","url","ok","console","code"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,UAAU,QAAQ,SAAQ;AAEnC,SAASC,aAAa,EAAEC,cAAc,QAAQ,2BAA0B;AACxE,SAASC,cAAc,QAAQ,oDAAmD;AAClF,SACEC,sBAAsB,EACtBC,2BAA2B,EAC3BC,mBAAmB,EACnBC,sBAAsB,EACtBC,qBAAqB,EACrBC,0BAA0B,EAC1BC,8BAA8B,EAC9BC,6BAA6B,EAC7BC,2BAA2B,EAC3BC,4BAA4B,EAC5BC,iBAAiB,EACjBC,cAAc,EACdC,oBAAoB,QAGf,2BAAuB;AAC9B,SAASC,iBAAiB,EAAEC,iBAAiB,EAAEC,cAAc,QAAQ,gBAAY;AACjF,SAASC,SAAS,EAAEC,oBAAoB,QAAQ,kBAAc;AAE9D;;;;;;;;;;;;;;;;;2CAiB2C,GAE3C,0EAA0E,GAC1E,OAAO,SAASC,kBACdC,MAA0CC,QAAQD,GAAG;IAErD,yEAAyE;IACzE,iEAAiE;IACjE,IAAI,CAACF,wBAAwB,OAAO;IACpC,OAAOd,uBAAuBgB;AAChC;AAEA,+EAA+E,GAC/E,OAAO,SAASE,mBAAmBC,KAAa,EAAEC,MAAc,EAAEC,UAAkB;IAClF,OAAO,CAAC,GAAG,EAAE5B,WAAW,UAAU6B,MAAM,CAAC,GAAGH,MAAM,CAAC,EAAEC,OAAO,CAAC,EAAEC,YAAY,EAAEE,MAAM,CAAC,OAAOC,KAAK,CAAC,GAAG,KAAK;AAC3G;AAEA,mEAAmE,GACnE,OAAO,SAASC,uBAAuBC,OAAe;IACpD,OAAO,CAAC,GAAG,EAAEA,QAAQC,OAAO,CAAC,QAAQ,IAAIH,KAAK,CAAC,GAAG,GAAGI,WAAW,IAAI;AACtE;AAEA,OAAO,SAASC,kBAAkBV,KAAa;IAC7C,OAAOzB,cACJoC,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,QACXC,GAAG,CAACd,OACJa,UAAU,CAAC7B;AAChB;AAEA;;;;CAIC,GACD,OAAO,SAAS+B,mBAAmBR,OAAe;IAChD,OAAOhC,cAAcoC,GAAG,GAAGC,SAAS,GAAGC,UAAU,CAAC5B,+BAA+B6B,GAAG,CAACP;AACvF;AAEA,6EAA6E,GAC7E,OAAO,SAASS,0BAA0BC,EAAU,EAAEC,KAAuB;QAKjEA,cAOOA,mCAGLA,iBACEA,mBACFA,iBACGA,oBACAA,OAAAA;QANEA,iBACAA;IAbjB,OAAO;QACLD;QACAE,QAAQb,uBAAuBW;QAC/BG,QAAQF,MAAME,MAAM;QACpBC,OAAO,EAACH,eAAAA,MAAMG,KAAK,YAAXH,eAAe,EAAE,EAAEI,GAAG,CAAC,CAACC,OAAU,CAAA;gBACxCC,KAAKD,KAAKC,GAAG;gBACbC,MAAMF,KAAKE,IAAI;gBACfC,UAAUH,KAAKG,QAAQ;gBACvBC,WAAWJ,KAAKI,SAAS;gBACzBC,WAAWL,KAAKK,SAAS;YAC3B,CAAA;QACAC,aAAa,GAAEX,uBAAAA,MAAMW,aAAa,YAAnBX,uBAAuB;QACtCY,aAAa,WAAEZ,kBAAAA,MAAMa,QAAQ,qBAAdb,gBAAgBc,KAAK,mBAAI;QACxCC,aAAa,YAAEf,mBAAAA,MAAMa,QAAQ,qBAAdb,iBAAgBgB,KAAK,oBAAI;QACxCC,QAAQ,GAAEjB,kBAAAA,MAAMiB,QAAQ,YAAdjB,kBAAkB;QAC5BkB,UAAU,GAAElB,oBAAAA,MAAMkB,UAAU,YAAhBlB,oBAAoB;QAChCmB,QAAQ,GAAEnB,kBAAAA,MAAMmB,QAAQ,YAAdnB,kBAAkB;QAC5BoB,WAAW,GAAEpB,qBAAAA,MAAMoB,WAAW,YAAjBpB,qBAAqB;QAClCqB,WAAW,GAAErB,SAAAA,qBAAAA,MAAMqB,WAAW,YAAjBrB,qBAAqBA,MAAMoB,WAAW,YAAtCpB,QAA0C;IACzD;AACF;AAIA,iEAAiE,GACjE,OAAO,eAAesB,eAAevC,MAAc;IACjD,OAAOxB,eAAewB,QAAQ,CAAC,CAAC,EAAEA,OAAO,aAAa,CAAC;AACzD;AAEA,oEAAoE,GACpE,OAAO,SAASwC,iBAAiBC,IAAY,EAAEC,KAAa,EAAEC,IAAY;IACxE,MAAM,CAACC,KAAK,GAAGH,KAAKI,KAAK,CAAC;IAC1B,MAAMC,SAASF,KAAKG,QAAQ,CAAC,OAAO,MAAM;IAC1C,OAAO,GAAGH,OAAOE,SAASJ,MAAM,CAAC,EAAEC,MAAM;AAC3C;AAGA,OAAO,MAAMK,qBAAuC,OAAOC,KAAKC;QAGxCC,cAKAA;IAPtB,IAAIF,IAAIG,MAAM,KAAK,QAAQ,OAAOF,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;QAAEC,OAAO;IAAqB;IACrF,MAAMH,OAAO3D,eAAeyD;IAC5B,MAAMjD,SAASuD,QAAOJ,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB;IACxC,MAAMK,OAAO,MAAMlE,kBAAkB2D,KAAKjD;IAC1C,IAAI,WAAWwD,MAAM,OAAON,IAAI/B,MAAM,CAACqC,KAAKrC,MAAM,EAAEkC,IAAI,CAAC;QAAEC,OAAOE,KAAKF,KAAK;IAAC;IAC7E,MAAMG,QAAQD,KAAKC,KAAK;IACxB,MAAMC,SAAS/D;IACf,MAAMgE,SAASJ,QAAOJ,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB;IACxC,IAAI;QACF,OAAQQ;YACN,KAAK;gBACH,IAAI,CAACD,QAAQ,OAAOR,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;oBAAEO,WAAW;gBAAM;gBAC5D,OAAOV,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;oBAC1BO,WAAW;oBACXC,QAAQ1E,kBAAkBuE;oBAC1B5B,UAAU4B,OAAO5B,QAAQ,CAACT,GAAG,CAAC,CAACyC,SAAY,CAAA;4BACzCV,QAAQU,OAAOV,MAAM;4BACrBnB,OAAO/C,4BAA4B,CAAC4E,OAAOV,MAAM,CAAC;4BAClDrB,OAAO+B,OAAO/B,KAAK;wBACrB,CAAA;oBACAgC,cAAcL,OAAOK,YAAY;oBACjCC,eAAe/E;gBACjB;YACF,KAAK;gBAAU;oBACb,MAAMgF,WAAW,MAAMxD,kBAAkBgD,MAAM1D,KAAK,EACjDmE,KAAK,CAAC,UAAU,MAAMT,MAAMzD,MAAM,EAClCmE,OAAO,CAAC,eAAe,QACvBC,KAAK,CAAC,IACNC,GAAG;oBACN,OAAOnB,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;wBAC1BiB,QAAQL,SAASM,IAAI,CAAClD,GAAG,CAAC,CAACR,MACzBE,0BAA0BwC,OAAO1C,IAAIG,EAAE,GAAGH,IAAI2D,IAAI;oBAEtD;gBACF;YACA,KAAK;gBAAY;wBAeS;wBAsDLC;oBApEnB,IAAI,CAACf,QAAQ,OAAOR,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;wBAAEC,OAAO;oBAAsC;oBACxF,MAAMrD,aAAaV,kBAAkB0D;oBACrC,IAAI,CAAChD,YAAY,OAAOiD,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;wBAAEC,OAAO;oBAA0B;oBAChF,IAAI,CAACG,MAAM1D,KAAK,EAAE,OAAOmD,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;wBAAEC,OAAO;oBAA8B;oBACrF,MAAMoB,SAASrF,qBAAqBqE,QAAQP,IAAI,CAAC,QAAQ;oBACzD,IAAI,WAAWuB,QAAQ,OAAOxB,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;wBAAEC,OAAOoB,OAAOpB,KAAK;oBAAC;oBACzE,MAAMF,SAASD,IAAI,CAAC,iBAAiB;oBACrC,MAAMrB,WAAWpD,4BAA4B0E,UACzCM,OAAO5B,QAAQ,CAAC6C,IAAI,CAAC,CAACb,SAAWA,OAAOV,MAAM,KAAKA,UACnDwB;oBACJ,IAAI,CAAC9C,UAAU,OAAOoB,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;wBAAEC,OAAO;oBAA2B;oBAE/E,MAAMhD,UAAUR,mBAAmB2D,MAAM1D,KAAK,EAAE0D,MAAMzD,MAAM,EAAEC;oBAC9D,MAAM4E,UAAU,MAAMtG,eAAekF,MAAM1D,KAAK,EAAE+E,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;oBAChE,MAAMC,WAAWxB,QAAO,4BAAA,AAACsB,QAA2CG,gBAAgB,YAA5D,4BAAgE,IAAIC,IAAI;oBAChG,MAAMxC,OAAO,MAAMF,eAAekB,MAAMzD,MAAM;oBAC9C,MAAMkF,SAAoD;wBACxDC,MAAM;wBACNC,qBAAqB9E;wBACrB+E,aAAa7C,iBAAiBC,MAAM,wBAAwB9D;wBAC5D2G,YAAY9C,iBAAiBC,MAAM,0BAA0B9D;wBAC7D,2BAA2B;wBAC3B,qDAAqDM,2BAA2B,CAAC,EAAE;wBACnF,oCAAoC;wBACpC,iDAAiD;wBACjD,yDAAyDC,4BAA4B,CAAC4C,SAASsB,MAAM,CAAC;wBACtG,iEAAiEtB,SAASC,KAAK;wBAC/E,mEAAmElD;wBACnE,kBAAkBC;wBAClB,qBAAqBwB;wBACrB,mBAAmBmD,MAAM1D,KAAK;wBAC9B,oBAAoB0D,MAAMzD,MAAM;wBAChC,iBAAiByD,MAAM8B,GAAG;wBAC1B,mBAAmB9G,uBAAuBiG,OAAOtD,KAAK;wBACtD,4BAA4BU,SAASsB,MAAM;wBAC3C,2BAA2BtB,SAASC,KAAK;wBACzC,2BAA2B2C,OAAO9C,aAAa;wBAC/C,oCAAoC,CAAC,kBAAkB,EAAEvB,uBAAuBC,UAAU;wBAC1F,uCAAuCxB;wBACvC,0CAA0CwB;wBAC1C,wCAAwCmD,MAAM1D,KAAK;uBAC/CgF,WAAW;wBAAEA;oBAAS,IAAI,CAAC,GAC3BrB,OAAOK,YAAY,GACnB;wBACE,0BAA0B;wBAC1B,yDAAyD;uBAGrDgB,WAAW;wBAAE,6BAA6B;oBAAO,IAAI,CAAC,KAE5D,CAAC;oBAEPL,OAAOtD,KAAK,CAACoE,OAAO,CAAC,CAAClE,MAAMmE;wBAC1B,MAAMlE,MAAMnC,eAAekC,KAAKC,GAAG;wBACnC2D,MAAM,CAAC,CAAC,WAAW,EAAEO,MAAM,WAAW,CAAC,CAAC,GAAGnE,KAAKG,QAAQ;wBACxD,uEAAuE;wBACvE,2EAA2E;wBAC3EyD,MAAM,CAAC,CAAC,WAAW,EAAEO,MAAM,uBAAuB,CAAC,CAAC,GAAG;wBACvDP,MAAM,CAAC,CAAC,WAAW,EAAEO,MAAM,0BAA0B,CAAC,CAAC,GAAGnE,KAAKI,SAAS;wBACxEwD,MAAM,CAAC,CAAC,WAAW,EAAEO,MAAM,iCAAiC,CAAC,CAAC,GAAGnE,KAAKE,IAAI;wBAC1E,IAAID,KAAK2D,MAAM,CAAC,CAAC,WAAW,EAAEO,MAAM,wCAAwC,CAAC,CAAC,GAAGlE,IAAImE,GAAG;wBACxFR,MAAM,CAAC,CAAC,WAAW,EAAEO,MAAM,0CAA0C,CAAC,CAAC,GAAGnE,KAAKC,GAAG;wBAClF,IAAImC,OAAOK,YAAY,EAAEmB,MAAM,CAAC,CAAC,WAAW,EAAEO,MAAM,2BAA2B,CAAC,CAAC,GAAG;oBACtF;oBACA,MAAMhB,UAAU,MAAMhF,UAAU,QAAQ,qBAAqB;wBAC3DyF;wBACAS,gBAAgB,CAAC,gBAAgB,EAAErF,SAAS;oBAC9C;oBACA,MAAMsF,MAAMrC,gBAAOkB,gBAAAA,QAAQtB,IAAI,qBAAZsB,cAAcmB,GAAG,mBAAI;oBACxC,IAAI,CAACnB,QAAQoB,EAAE,IAAI,CAACD,KAAK;4BAC0CnB,qBAAAA;wBAAjEqB,QAAQxC,KAAK,CAAC,mCAAmCmB,QAAQtD,MAAM,GAAEsD,iBAAAA,QAAQtB,IAAI,sBAAZsB,sBAAAA,eAAcnB,KAAK,qBAAnBmB,oBAAqBsB,IAAI;wBAC1F,OAAO7C,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;4BAAEC,OAAO;wBAAwD;oBAC/F;oBACA,OAAOJ,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;wBAAEuC;wBAAKtF;oBAAQ;gBAC7C;YACA;gBACE,OAAO4C,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;oBAAEC,OAAO;gBAAiB;QAC1D;IACF,EAAE,OAAOA,OAAO;QACdwC,QAAQxC,KAAK,CAAC,kBAAkBK,QAAQL;QACxC,OAAOJ,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;YAAEC,OAAO;QAAqC;IAC5E;AACF,EAAC"}

package/src/lib/server/pos-offline-card-reconcile.d.ts

@@ -0,0 +1,38 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { BillingWebhookHandler } from '@aglyn/aglyn/server';
+/** What the site keeps about one offline card's PaymentIntent. */
+export interface PosOfflineCardChargeRecord {
+    saleKey: string;
+    paymentIntentId: string;
+    status: string;
+    amountCents: number;
+    registerId: string;
+    livemode: boolean;
+    /** Whether the sale has synced (its order exists). */
+    synced: boolean;
+    lastEvent: string;
+    updatedAtMs: number;
+}
+export declare function reconcilePosOfflineCardEvent(input: {
+    type: string;
+    object: any;
+}, firestore?: FirebaseFirestore.Firestore, now?: () => number): Promise<{
+    hostId: string;
+} | null>;
+/** The platform webhook's handler for offline card intents: claims only its own. */
+export declare const posOfflineCardBillingWebhookHandler: BillingWebhookHandler;

package/src/lib/server/pos-offline-card-reconcile.js

@@ -0,0 +1,58 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { firebaseAdmin } from "@aglyn/tenant-data-admin";
+import { POS_OFFLINE_CARD_INTENT_KIND, posOfflineSaleKeyIsValid } from "../model/commerce-pos-offline.js";
+export async function reconcilePosOfflineCardEvent(input, firestore, now = Date.now) {
+    var _input_object, _intent_metadata, _metadata_hostId, _metadata_saleKey, _intent_id, _intent_status, _intent_amount, _metadata_registerId;
+    if (!input.type.startsWith('payment_intent.')) return null;
+    const intent = (_input_object = input.object) != null ? _input_object : {};
+    const metadata = (_intent_metadata = intent.metadata) != null ? _intent_metadata : {};
+    if (metadata['kind'] !== POS_OFFLINE_CARD_INTENT_KIND) return null;
+    const hostId = String((_metadata_hostId = metadata['hostId']) != null ? _metadata_hostId : '');
+    const saleKey = String((_metadata_saleKey = metadata['saleKey']) != null ? _metadata_saleKey : '');
+    if (!/^[A-Za-z0-9_-]{1,128}$/.test(hostId) || !posOfflineSaleKeyIsValid(saleKey)) return null;
+    const hostRef = (firestore != null ? firestore : firebaseAdmin.app().firestore()).collection('hosts').doc(hostId);
+    const synced = (await hostRef.collection('posOfflineSales').doc(saleKey).get()).exists;
+    const record = {
+        saleKey,
+        paymentIntentId: String((_intent_id = intent.id) != null ? _intent_id : ''),
+        status: String((_intent_status = intent.status) != null ? _intent_status : ''),
+        amountCents: Number((_intent_amount = intent.amount) != null ? _intent_amount : 0),
+        registerId: String((_metadata_registerId = metadata['registerId']) != null ? _metadata_registerId : '').slice(0, 128),
+        livemode: Boolean(intent.livemode),
+        synced,
+        lastEvent: input.type,
+        updatedAtMs: now()
+    };
+    await hostRef.collection('terminal').doc('config').collection('offlineCardCharges').doc(saleKey).set(record, {
+        merge: true
+    });
+    return {
+        hostId
+    };
+}
+/** The platform webhook's handler for offline card intents: claims only its own. */ export const posOfflineCardBillingWebhookHandler = async ({ type, object })=>{
+    const reconciled = await reconcilePosOfflineCardEvent({
+        type,
+        object
+    });
+    return reconciled ? {
+        claimed: true,
+        hostId: reconciled.hostId
+    } : undefined;
+};
+
+//# sourceMappingURL=pos-offline-card-reconcile.js.map

package/src/lib/server/pos-offline-card-reconcile.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-offline-card-reconcile.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { BillingWebhookHandler } from '@aglyn/aglyn/server'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport {\n  POS_OFFLINE_CARD_INTENT_KIND,\n  posOfflineSaleKeyIsValid,\n} from '../model/commerce-pos-offline'\n\n/*==========================================\n * A CARD TAKEN OFFLINE, AS STRIPE REPORTS IT (AGL-4039).\n *\n * The Aglyn POS app creates the PaymentIntent of a card it takes offline, so\n * Stripe can know of a charge before the sale itself reaches the server: the\n * SDK forwards the card the moment a connection returns, and the sale syncs\n * right after, from the same device. Usually seconds apart. If the sale never\n * arrives (the device was lost or wiped between the two), the charge must not\n * be invisible: each event on such an intent is kept on the site, by the\n * sale's key, under the site's server-only Terminal document\n * (`terminal/config/offlineCardCharges/{saleKey}`), beside whether the sale\n * has synced. The sync itself never depends on this: it reads Stripe.\n *\n * Self-selecting: every other event returns `null` untouched. Registered on\n * the platform webhook from the commerce server module, beside the other\n * commerce handlers, rather than as a branch of the storefront sections.\n *=========================================*/\n\n/** What the site keeps about one offline card's PaymentIntent. */\nexport interface PosOfflineCardChargeRecord {\n  saleKey: string\n  paymentIntentId: string\n  status: string\n  amountCents: number\n  registerId: string\n  livemode: boolean\n  /** Whether the sale has synced (its order exists). */\n  synced: boolean\n  lastEvent: string\n  updatedAtMs: number\n}\n\nexport async function reconcilePosOfflineCardEvent(\n  input: { type: string; object: any },\n  firestore?: FirebaseFirestore.Firestore,\n  now: () => number = Date.now,\n): Promise<{ hostId: string } | null> {\n  if (!input.type.startsWith('payment_intent.')) return null\n  const intent = input.object ?? {}\n  const metadata = (intent.metadata ?? {}) as Record<string, string>\n  if (metadata['kind'] !== POS_OFFLINE_CARD_INTENT_KIND) return null\n  const hostId = String(metadata['hostId'] ?? '')\n  const saleKey = String(metadata['saleKey'] ?? '')\n  if (\n    !/^[A-Za-z0-9_-]{1,128}$/.test(hostId) ||\n    !posOfflineSaleKeyIsValid(saleKey)\n  )\n    return null\n  const hostRef = (firestore ?? firebaseAdmin.app().firestore())\n    .collection('hosts')\n    .doc(hostId)\n  const synced = (\n    await hostRef.collection('posOfflineSales').doc(saleKey).get()\n  ).exists\n  const record: PosOfflineCardChargeRecord = {\n    saleKey,\n    paymentIntentId: String(intent.id ?? ''),\n    status: String(intent.status ?? ''),\n    amountCents: Number(intent.amount ?? 0),\n    registerId: String(metadata['registerId'] ?? '').slice(0, 128),\n    livemode: Boolean(intent.livemode),\n    synced,\n    lastEvent: input.type,\n    updatedAtMs: now(),\n  }\n  await hostRef\n    .collection('terminal')\n    .doc('config')\n    .collection('offlineCardCharges')\n    .doc(saleKey)\n    .set(record, { merge: true })\n  return { hostId }\n}\n\n/** The platform webhook's handler for offline card intents: claims only its own. */\nexport const posOfflineCardBillingWebhookHandler: BillingWebhookHandler =\n  async ({ type, object }) => {\n    const reconciled = await reconcilePosOfflineCardEvent({ type, object })\n    return reconciled ? { claimed: true, hostId: reconciled.hostId } : undefined\n  }\n"],"names":["firebaseAdmin","POS_OFFLINE_CARD_INTENT_KIND","posOfflineSaleKeyIsValid","reconcilePosOfflineCardEvent","input","firestore","now","Date","intent","metadata","type","startsWith","object","hostId","String","saleKey","test","hostRef","app","collection","doc","synced","get","exists","record","paymentIntentId","id","status","amountCents","Number","amount","registerId","slice","livemode","Boolean","lastEvent","updatedAtMs","set","merge","posOfflineCardBillingWebhookHandler","reconciled","claimed","undefined"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAGD,SAASA,aAAa,QAAQ,2BAA0B;AACxD,SACEC,4BAA4B,EAC5BC,wBAAwB,QACnB,mCAA+B;AAkCtC,OAAO,eAAeC,6BACpBC,KAAoC,EACpCC,SAAuC,EACvCC,MAAoBC,KAAKD,GAAG;QAGbF,eACGI,kBAEIC,kBACCA,mBAcGD,YACTA,gBACKA,gBACDC;IAtBrB,IAAI,CAACL,MAAMM,IAAI,CAACC,UAAU,CAAC,oBAAoB,OAAO;IACtD,MAAMH,UAASJ,gBAAAA,MAAMQ,MAAM,YAAZR,gBAAgB,CAAC;IAChC,MAAMK,YAAYD,mBAAAA,OAAOC,QAAQ,YAAfD,mBAAmB,CAAC;IACtC,IAAIC,QAAQ,CAAC,OAAO,KAAKR,8BAA8B,OAAO;IAC9D,MAAMY,SAASC,QAAOL,mBAAAA,QAAQ,CAAC,SAAS,YAAlBA,mBAAsB;IAC5C,MAAMM,UAAUD,QAAOL,oBAAAA,QAAQ,CAAC,UAAU,YAAnBA,oBAAuB;IAC9C,IACE,CAAC,yBAAyBO,IAAI,CAACH,WAC/B,CAACX,yBAAyBa,UAE1B,OAAO;IACT,MAAME,UAAU,CAACZ,oBAAAA,YAAaL,cAAckB,GAAG,GAAGb,SAAS,IACxDc,UAAU,CAAC,SACXC,GAAG,CAACP;IACP,MAAMQ,SAAS,AACb,CAAA,MAAMJ,QAAQE,UAAU,CAAC,mBAAmBC,GAAG,CAACL,SAASO,GAAG,EAAC,EAC7DC,MAAM;IACR,MAAMC,SAAqC;QACzCT;QACAU,iBAAiBX,QAAON,aAAAA,OAAOkB,EAAE,YAATlB,aAAa;QACrCmB,QAAQb,QAAON,iBAAAA,OAAOmB,MAAM,YAAbnB,iBAAiB;QAChCoB,aAAaC,QAAOrB,iBAAAA,OAAOsB,MAAM,YAAbtB,iBAAiB;QACrCuB,YAAYjB,QAAOL,uBAAAA,QAAQ,CAAC,aAAa,YAAtBA,uBAA0B,IAAIuB,KAAK,CAAC,GAAG;QAC1DC,UAAUC,QAAQ1B,OAAOyB,QAAQ;QACjCZ;QACAc,WAAW/B,MAAMM,IAAI;QACrB0B,aAAa9B;IACf;IACA,MAAMW,QACHE,UAAU,CAAC,YACXC,GAAG,CAAC,UACJD,UAAU,CAAC,sBACXC,GAAG,CAACL,SACJsB,GAAG,CAACb,QAAQ;QAAEc,OAAO;IAAK;IAC7B,OAAO;QAAEzB;IAAO;AAClB;AAEA,kFAAkF,GAClF,OAAO,MAAM0B,sCACX,OAAO,EAAE7B,IAAI,EAAEE,MAAM,EAAE;IACrB,MAAM4B,aAAa,MAAMrC,6BAA6B;QAAEO;QAAME;IAAO;IACrE,OAAO4B,aAAa;QAAEC,SAAS;QAAM5B,QAAQ2B,WAAW3B,MAAM;IAAC,IAAI6B;AACrE,EAAC"}

package/src/lib/server/pos-offline-sync.d.ts

@@ -19,6 +19,7 @@ import type { PluginApiHandler, PluginApiRequest } from '@aglyn/aglyn/server';
 import * as CommerceModel from '../model';
 import { type PosOfflineFlag, type PosOfflineKit, type PosOfflineStockConflict } from '../model/commerce-pos-offline';
 import { type PosOpsDeps, type PosOpsStaff } from './pos-ops-gate';
+import { type PosOfflineCardIntent } from './pos-terminal';
 import { type StockDecrementOutcome } from './reserve-stock';
 /** The register's sync record: no customer data, only what dedupe and resume need. */
 export interface PosOfflineSyncRecord {
@@ -36,6 +37,8 @@ export interface PosOfflineSyncRecord {
     stockLines: number[];
     stockDone: boolean;
     notified: boolean;
+    /** A card taken offline that was declined or never charged: no receipt and no "paid" for it. */
+    unpaid?: boolean;
 }
 export interface PosOfflineAfterSale {
     hostId: string;
@@ -61,7 +64,36 @@ export interface PosOfflineSyncDeps extends PosOpsDeps {
     }): Promise<StockDecrementOutcome>;
     /** What a completed sale tells the rest of the workspace. Never throws. */
     afterSale(input: PosOfflineAfterSale): Promise<void>;
+    /** Cards taken offline on the app's own reader (AGL-4039); absent, the server takes none. */
+    card?: PosOfflineCardDeps;
 }
+/** The Stripe side of a card taken offline on the app's own reader. */
+export interface PosOfflineCardDeps {
+    /** Whether Terminal readers are offered at all, and the site's Location once one exists. */
+    terminal(hostId: string): Promise<{
+        available: boolean;
+        locationId: string | null;
+    }>;
+    /** The merchant's connected account, when it can take card payments. */
+    merchantAccount(hostId: string, org: Record<string, any> | null): Promise<string | null>;
+    /** Turns Stripe's offline mode on for the site's readers; false when Stripe refused. */
+    enableOffline(hostId: string): Promise<boolean>;
+    retrieve(paymentIntentId: string): Promise<{
+        ok: true;
+        intent: PosOfflineCardIntent;
+    } | {
+        ok: false;
+        error: string;
+    }>;
+    capture(paymentIntentId: string, applicationFeeCents: number, idempotencyKey: string): Promise<{
+        ok: true;
+        intent: PosOfflineCardIntent;
+    } | {
+        ok: false;
+        error: string;
+    }>;
+}
+export declare function defaultPosOfflineCardDeps(): PosOfflineCardDeps;
 export declare function defaultPosOfflineSyncDeps(): PosOfflineSyncDeps;
 type Outcome = {
     status: number;

package/src/lib/server/pos-offline-sync.js

@@ -18,16 +18,30 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
 import recordCapturedContact from "@aglyn/aglyn/plugin-manager/record-captured-contact";
 import { FieldValue } from "firebase-admin/firestore";
 import * as CommerceModel from "../model/index.js";
-import { posOfflineFlagLabels, posOfflineSaleTotals, posOfflineSoldAt, posOfflineTotalsAddUp, POS_OFFLINE_LATE_SYNC_MS, POS_OFFLINE_SYNC_BATCH_MAX, sanitizePosOfflineSale } from "../model/commerce-pos-offline.js";
+import { posOfflineFlagLabels, posOfflineSaleTotals, posOfflineSoldAt, posOfflineTotalsAddUp, POS_OFFLINE_CARD_INTENT_KIND, POS_OFFLINE_LATE_SYNC_MS, POS_OFFLINE_SYNC_BATCH_MAX, sanitizePosOfflineSale } from "../model/commerce-pos-offline.js";
 import { ORDER_PAID_EVENT } from "../model/order-events.js";
-import { posMaxDiscountPct } from "../plugin-config.js";
+import { posMaxDiscountPct, posOfflineCardSettings } from "../plugin-config.js";
 import { alertLowStockCrossing } from "./low-stock.js";
 import { notifyOrderBuyer } from "./order-notifications.js";
 import { raiseOrderEvent } from "./order-events.js";
 import { offlineFeeMonthKey } from "./pos-fee-month.js";
 import { authorizePosOps, defaultPosOpsDeps, posOpsBody, posOpsCleanId, resolvePosStaffAssertion } from "./pos-ops-gate.js";
 import { notifyPosSaleCompleted } from "./pos-sale.js";
+import { POS_CURRENCY, posCardApplicationFeeCents, posTerminalAvailable } from "./pos-stripe.js";
+import { capturePosOfflineCardIntent, ensurePosOfflineCardConfiguration, posMerchantAccount, posTerminalLocationId, retrievePosOfflineCardIntent } from "./pos-terminal.js";
 import { decrementVariantStock } from "./reserve-stock.js";
+export function defaultPosOfflineCardDeps() {
+    return {
+        terminal: async (hostId)=>({
+                available: posTerminalAvailable(),
+                locationId: posTerminalAvailable() ? await posTerminalLocationId(hostId) : null
+            }),
+        merchantAccount: posMerchantAccount,
+        enableOffline: ensurePosOfflineCardConfiguration,
+        retrieve: retrievePosOfflineCardIntent,
+        capture: capturePosOfflineCardIntent
+    };
+}
 export function defaultPosOfflineSyncDeps() {
     const base = defaultPosOpsDeps();
     return _extends({}, base, {
@@ -104,7 +118,8 @@ export function defaultPosOfflineSyncDeps() {
                     orderId: input.orderId,
                     key: 'paid'
                 }));
-        }
+        },
+        card: defaultPosOfflineCardDeps()
     });
 }
 const money = (cents)=>`$${(Math.max(0, cents) / 100).toFixed(2)}`;
@@ -168,6 +183,7 @@ async function readStoreTax(staff) {
         staff.hostRef.collection('settings').doc('store').get()
     ]);
     const tax = posInPersonTax(taxSettings);
+    const card = await buildPosOfflineKitCard(deps, staff, config);
     return _extends({
         v: 1,
         hostId: staff.hostId,
@@ -198,7 +214,10 @@ async function readStoreTax(staff) {
             } : {}, {
                 openShiftId: posOpsCleanId(register.data['openShiftId']) || null
             });
-        }),
+        })
+    }, card ? {
+        card
+    } : {}, {
         receipt: _extends({
             name: String((_host_get = host.get('displayName')) != null ? _host_get : '') || 'Receipt'
         }, typeof host.get('logoUrl') === 'string' && host.get('logoUrl') ? {
@@ -212,6 +231,107 @@ async function readStoreTax(staff) {
         } : {})
     });
 }
+/**
+ * What the app needs to take a card offline on its own reader (AGL-4039), or
+ * why it cannot. Absent where this server takes no offline cards.
+ */ async function buildPosOfflineKitCard(deps, staff, config) {
+    if (!deps.card) return undefined;
+    const settings = posOfflineCardSettings(config);
+    const base = {
+        destination: '',
+        currency: POS_CURRENCY,
+        maxSaleCents: settings.maxSaleCents,
+        maxDeviceDailyCents: settings.maxDeviceDailyCents
+    };
+    const off = (unavailableReason)=>_extends({}, base, {
+            available: false,
+            unavailableReason
+        });
+    if (!settings.enabled) return off('Card sales offline are not turned on in this store’s point of sale settings.');
+    const terminal = await deps.card.terminal(staff.hostId);
+    if (!terminal.available) return off('Card readers are not set up for this store yet.');
+    if (!terminal.locationId) return off('Connect a card reader once while online, then cards keep working offline.');
+    const destination = await deps.card.merchantAccount(staff.hostId, staff.org);
+    if (!destination) return off('Finish connecting Stripe to take cards.');
+    if (!await deps.card.enableOffline(staff.hostId)) {
+        return off('Card sales offline could not be turned on for this store’s readers yet. Try again later.');
+    }
+    return _extends({}, base, {
+        destination,
+        available: true
+    });
+}
+/**
+ * Reads the card of a sale rung offline and settles it: captured with the
+ * platform fee (the card tender's share of the take, by the one tender rule,
+ * plus Stripe's processing cost, exactly as an online reader payment), or
+ * unpaid when the bank declined it or Stripe never took it. Anything Stripe
+ * has not finished yet waits on the register for the next sync.
+ */ async function settleOfflineCard(context, sale, takeFee) {
+    const { deps, staff } = context;
+    const { saleKey } = sale;
+    const card = sale.card;
+    const wait = (error)=>({
+            kind: 'wait',
+            outcome: refused(saleKey, 'failed', error, true)
+        });
+    if (card.forward === 'stored') return wait('The card is still on this register. It syncs once Stripe has it.');
+    if (!deps.card) return wait('Card sales taken offline cannot sync to this store yet.');
+    const details = _extends({}, card.brand ? {
+        brand: card.brand
+    } : {}, card.last4 ? {
+        last4: card.last4
+    } : {});
+    if (!card.paymentIntentId) {
+        return _extends({
+            kind: 'unpaid',
+            flag: card.forward === 'declined' ? 'card-declined' : 'card-not-charged',
+            message: card.declineMessage || 'Stripe did not take the card.'
+        }, details);
+    }
+    const read = await deps.card.retrieve(card.paymentIntentId);
+    if ('error' in read) return wait(`The card payment could not be checked yet: ${read.error}`);
+    let intent = read.intent;
+    if (intent.metadata['kind'] !== POS_OFFLINE_CARD_INTENT_KIND || intent.metadata['saleKey'] !== saleKey || intent.metadata['hostId'] !== staff.hostId || intent.amount !== sale.totals.totalCents || intent.currency !== POS_CURRENCY) {
+        return {
+            kind: 'wait',
+            outcome: refused(saleKey, 'invalid', 'The card payment does not belong to this sale.', false)
+        };
+    }
+    const found = _extends({}, details, intent.brand ? {
+        brand: intent.brand
+    } : {}, intent.last4 ? {
+        last4: intent.last4
+    } : {});
+    const takeShareCents = CommerceModel.posTenderTakeCents('card_present', takeFee);
+    if (intent.status === 'requires_capture') {
+        const feeCents = posCardApplicationFeeCents({
+            takeShareCents,
+            chargeCents: intent.amount
+        });
+        const captured = await deps.card.capture(intent.id, feeCents, `pos-offline-capture:${staff.hostId}:${saleKey}`);
+        if ('error' in captured) return wait(`The card payment could not be captured yet: ${captured.error}`);
+        intent = captured.intent;
+    }
+    if (intent.status === 'succeeded') {
+        return _extends({
+            kind: 'captured',
+            intentId: intent.id,
+            feeCents: intent.applicationFeeCents,
+            takeShareCents,
+            livemode: intent.livemode
+        }, found);
+    }
+    if (intent.status === 'requires_payment_method' || intent.status === 'canceled') {
+        return _extends({
+            kind: 'unpaid',
+            flag: 'card-declined',
+            intentId: intent.id,
+            message: intent.failureMessage || card.declineMessage || 'The card was declined.'
+        }, found);
+    }
+    return wait('The card payment is still processing. It syncs when Stripe finishes.');
+}
 const refused = (saleKey, reason, error, retry)=>({
         saleKey,
         status: 'refused',
@@ -330,6 +450,18 @@ const replayOf = (record)=>({
         }
         if (!stockDone) return current;
     }
+    if (!current.notified && current.unpaid) {
+        // A card that was never paid gets no receipt and no "paid": the order
+        // waits, flagged, for the merchant to collect it another way.
+        current = _extends({}, current, {
+            notified: true,
+            status: 'settled'
+        });
+        await recordRef.update({
+            notified: true,
+            status: 'settled'
+        });
+    }
     if (!current.notified) {
         var _order_customerEmail, _order_customerName;
         const email = String((_order_customerEmail = order.customerEmail) != null ? _order_customerEmail : '');
@@ -486,7 +618,8 @@ async function syncOne(context, raw) {
         flags.add('tax-differs');
     }
     if (sale.discountPct > posMaxDiscountPct(context.config)) flags.add('discount-over-limit');
-    if (sale.cashTenderedCents < totals.totalCents) flags.add('cash-short');
+    const byCard = sale.tender === 'card';
+    if (!byCard && sale.cashTenderedCents < totals.totalCents) flags.add('cash-short');
     // Where it was rung.
     const register = context.registers.get(sale.registerId);
     if (!register) flags.add('unknown-register');
@@ -515,11 +648,22 @@ async function syncOne(context, raw) {
         if (memberUid) cashierId = memberUid;
         else flags.add('cashier-unverified');
     }
-    const takeFee = takeFeeCents(deps, staff, lineItems, totals);
+    // The offline register takes cash only, and cash carries no platform fee
+    // (AGL-4036): the plan's take is worked out and then settled by the one
+    // predicate every tender answers to, so a sale synced from the queue is
+    // charged exactly what the same sale rung online is.
+    const planTake = takeFeeCents(deps, staff, lineItems, totals);
+    // A card taken offline settles with Stripe BEFORE the order is written: a
+    // capture that fails leaves the sale on the register for the next sync,
+    // and a repeat after a lost answer finds the first capture (AGL-4039).
+    const settled = byCard ? await settleOfflineCard(context, sale, planTake) : null;
+    if ((settled == null ? void 0 : settled.kind) === 'wait') return settled.outcome;
+    if ((settled == null ? void 0 : settled.kind) === 'unpaid') flags.add(settled.flag);
+    const takeFee = byCard ? (settled == null ? void 0 : settled.kind) === 'captured' ? settled.takeShareCents : 0 : CommerceModel.posTenderTakeCents('cash', planTake);
     totals = _extends({}, totals, {
         feeCents: takeFee
     });
-    const changeCents = Math.max(0, sale.cashTenderedCents - totals.totalCents);
+    const changeCents = byCard ? 0 : Math.max(0, sale.cashTenderedCents - totals.totalCents);
     const flagList = [
         ...flags
     ];
@@ -553,11 +697,15 @@ async function syncOne(context, raw) {
         }, {
             merge: true
         });
-        const paidDetail = `Cash — received ${money(sale.cashTenderedCents)}, change ${money(changeCents)}. ` + 'Rung while the register was offline.';
+        const cardName = settled ? [
+            settled.brand ? settled.brand.toUpperCase() : 'Card',
+            settled.last4 ? `•••• ${settled.last4}` : ''
+        ].filter(Boolean).join(' ') : '';
+        const paidDetail = !settled ? `Cash — received ${money(sale.cashTenderedCents)}, change ${money(changeCents)}. ` + 'Rung while the register was offline.' : settled.kind === 'captured' ? `${cardName} — ${money(totals.totalCents)}, taken while the register was offline and charged when it reconnected.` : `${cardName} — ${money(totals.totalCents)} taken while the register was offline was not paid: ${settled.message}`.slice(0, 500);
         const timeline = [
             {
                 atMs: soldAt.atMs,
-                event: 'paid',
+                event: (settled == null ? void 0 : settled.kind) === 'unpaid' ? 'payment-failed' : 'paid',
                 detail: paidDetail
             },
             {
@@ -568,7 +716,7 @@ async function syncOne(context, raw) {
         ];
         transaction.create(orderRef, CommerceModel.withOrderListFields(orderRef.id, _extends({
             number,
-            status: 'paid',
+            status: (settled == null ? void 0 : settled.kind) === 'unpaid' ? 'pending' : 'paid',
             channel: 'pos',
             registerId: sale.registerId,
             cashierId
@@ -591,9 +739,34 @@ async function syncOne(context, raw) {
             totals,
             taxMode: 'decision' in context.tax ? CommerceModel.storefrontTaxModeForDecision(context.tax.decision, totals.taxCents) : totals.taxCents > 0 ? 'manual' : 'none'
         }, takeFee > 0 ? {
-            feeCollection: 'invoice'
+            feeCollection: settled ? 'payout' : 'invoice'
         } : {}, {
-            payments: [
+            payments: settled ? [
+                _extends({
+                    id: 'pay_card_offline',
+                    method: 'card_present',
+                    amountCents: totals.totalCents,
+                    status: settled.kind === 'captured' ? 'succeeded' : 'failed',
+                    atMs: soldAt.atMs
+                }, settled.kind === 'captured' ? {
+                    settledAtMs: now,
+                    takeFeeCents: settled.takeShareCents,
+                    feeCents: settled.feeCents,
+                    livemode: settled.livemode
+                } : {
+                    takeFeeCents: 0,
+                    feeCents: 0,
+                    failureMessage: settled.message.slice(0, 300)
+                }, settled.intentId ? {
+                    paymentIntentId: settled.intentId
+                } : {}, settled.brand ? {
+                    cardBrand: settled.brand
+                } : {}, settled.last4 ? {
+                    last4: settled.last4
+                } : {}, {
+                    cashierId
+                })
+            ] : [
                 {
                     id: 'pay_cash',
                     method: 'cash',
@@ -614,7 +787,7 @@ async function syncOne(context, raw) {
             createdAtMs: soldAt.atMs,
             createdAt: FieldValue.serverTimestamp()
         })));
-        const record = {
+        const record = _extends({
             saleKey: sale.saleKey,
             orderId: orderRef.id,
             number,
@@ -628,10 +801,13 @@ async function syncOne(context, raw) {
             stockLines: [],
             stockDone: false,
             notified: false
-        };
+        }, (settled == null ? void 0 : settled.kind) === 'unpaid' ? {
+            unpaid: true
+        } : {});
         transaction.create(recordRef, record);
         // The take accrues with the order, in the same transaction (AGL-2111).
-        if (takeFee > 0 && feeRef) {
+        // A card's share was netted from its payout by the capture instead.
+        if (takeFee > 0 && feeRef && !settled) {
             transaction.set(feeRef, {
                 month: feeMonth,
                 feeCents: FieldValue.increment(takeFee),