@aglyn/plugins-commerce 1.0.0-beta.278 → 1.0.0-beta.282

package/src/lib/server/pos-hardware-user-eraser.d.ts

@@ -0,0 +1,26 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PluginUserEraser } from '@aglyn/aglyn/plugin-manager/plugin-user-erasure';
+type Firestore = FirebaseFirestore.Firestore;
+export interface PosHardwareUserEraserDeps {
+    firestore(): Firestore;
+    now?: () => number;
+}
+export declare function createPosHardwareUserEraser(deps: PosHardwareUserEraserDeps): PluginUserEraser;
+/** The eraser over the platform's own Firestore, as the declarations register it. */
+export declare const posHardwareUserEraser: PluginUserEraser;
+export {};

package/src/lib/server/pos-hardware-user-eraser.js

@@ -0,0 +1,67 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { _ as _extends } from "@swc/helpers/_/_extends";
+import { firebaseAdmin } from "@aglyn/tenant-data-admin/server/firebase-admin";
+import { POS_HARDWARE_ORDERS_COLLECTION, POS_HARDWARE_SALES_COLLECTION, posHardwareBuyerErasedPatch, posHardwareSaleRecord } from "../model/pos-hardware.js";
+const LABEL = '[pos-hardware] user eraser';
+export function createPosHardwareUserEraser(deps) {
+    return async ({ uid, orgIds })=>{
+        var _deps_now;
+        if (!uid) return {
+            hardwareOrdersRedacted: 0,
+            formerWorkspacesReached: true
+        };
+        const db = deps.firestore();
+        const now = (_deps_now = deps.now) != null ? _deps_now : Date.now;
+        let refs;
+        let formerWorkspacesReached = true;
+        try {
+            const placed = await db.collectionGroup(POS_HARDWARE_ORDERS_COLLECTION).where('createdBy', '==', uid).get();
+            refs = placed.docs.map((doc)=>doc.ref);
+        } catch (error) {
+            console.error(`${LABEL}: the collection-group query was refused; reading current workspaces only`, error);
+            formerWorkspacesReached = false;
+            refs = [];
+            for (const orgId of orgIds){
+                const placed = await db.collection('orgs').doc(orgId).collection(POS_HARDWARE_ORDERS_COLLECTION).where('createdBy', '==', uid).get();
+                refs.push(...placed.docs.map((doc)=>doc.ref));
+            }
+        }
+        let hardwareOrdersRedacted = 0;
+        for (const ref of refs){
+            const redacted = await db.runTransaction(async (transaction)=>{
+                const snapshot = await transaction.get(ref);
+                const order = snapshot.data();
+                // Gone, or already someone else's: nothing of this person is on it.
+                if (!snapshot.exists || !order || order.createdBy !== uid) return false;
+                const patch = posHardwareBuyerErasedPatch(order, now());
+                transaction.update(ref, patch);
+                transaction.set(db.collection(POS_HARDWARE_SALES_COLLECTION).doc(ref.id), posHardwareSaleRecord(ref.id, _extends({}, order, patch)));
+                return true;
+            });
+            if (redacted) hardwareOrdersRedacted += 1;
+        }
+        return {
+            hardwareOrdersRedacted,
+            formerWorkspacesReached
+        };
+    };
+}
+/** The eraser over the platform's own Firestore, as the declarations register it. */ export const posHardwareUserEraser = (request)=>createPosHardwareUserEraser({
+        firestore: ()=>firebaseAdmin.app().firestore()
+    })(request);
+
+//# sourceMappingURL=pos-hardware-user-eraser.js.map

package/src/lib/server/pos-hardware-user-eraser.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-hardware-user-eraser.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type {\n  PluginUserEraser,\n  PluginUserErasureReport,\n} from '@aglyn/aglyn/plugin-manager/plugin-user-erasure'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin/server/firebase-admin'\nimport {\n  POS_HARDWARE_ORDERS_COLLECTION,\n  POS_HARDWARE_SALES_COLLECTION,\n  posHardwareBuyerErasedPatch,\n  posHardwareSaleRecord,\n  type PosHardwareOrder,\n} from '../model/pos-hardware'\n\n/*==========================================\n * COMMERCE'S SHARE OF AN ACCOUNT ERASURE: HARDWARE ORDERS (AGL-4038).\n *\n * A hardware order is the workspace's purchase and the platform's sale, so\n * an account erasure keeps it and every amount on it, and takes the BUYER\n * off it: who started it, the email, the name, the phone, the street and the\n * tracking (`posHardwareBuyerErasedPatch`). The country, state and postal\n * code stay, because sales tax is sourced by them. The retained sale record\n * (`posHardwareSales/{orderId}`) never held the person, and is rewritten\n * from the redacted order in the same transaction so the two agree.\n *\n * Found by a COLLECTION-GROUP query on `createdBy`, so an order placed in a\n * workspace the person has since left is reached too — the support-thread\n * redaction's shape (AGL-1971). It needs the `hardwareOrders.createdBy`\n * collection-group override in `cloud/firebase-firestore.indexes.json`; where\n * that index is not yet deployed the query is refused, and the eraser falls\n * back to the workspaces the person belonged to when the erasure began and\n * says so (`formerWorkspacesReached: false`), rather than reporting a clean\n * pass over orders it could not see.\n *\n * Idempotent: a redacted order no longer carries the uid, so a second run\n * finds nothing to do.\n *=========================================*/\n\ntype Firestore = FirebaseFirestore.Firestore\n\nexport interface PosHardwareUserEraserDeps {\n  firestore(): Firestore\n  now?: () => number\n}\n\nconst LABEL = '[pos-hardware] user eraser'\n\nexport function createPosHardwareUserEraser(deps: PosHardwareUserEraserDeps): PluginUserEraser {\n  return async ({ uid, orgIds }): Promise<PluginUserErasureReport> => {\n    if (!uid) return { hardwareOrdersRedacted: 0, formerWorkspacesReached: true }\n    const db = deps.firestore()\n    const now = deps.now ?? Date.now\n\n    let refs: FirebaseFirestore.DocumentReference[]\n    let formerWorkspacesReached = true\n    try {\n      const placed = await db.collectionGroup(POS_HARDWARE_ORDERS_COLLECTION).where('createdBy', '==', uid).get()\n      refs = placed.docs.map((doc) => doc.ref)\n    } catch (error) {\n      console.error(`${LABEL}: the collection-group query was refused; reading current workspaces only`, error)\n      formerWorkspacesReached = false\n      refs = []\n      for (const orgId of orgIds) {\n        const placed = await db\n          .collection('orgs')\n          .doc(orgId)\n          .collection(POS_HARDWARE_ORDERS_COLLECTION)\n          .where('createdBy', '==', uid)\n          .get()\n        refs.push(...placed.docs.map((doc) => doc.ref))\n      }\n    }\n\n    let hardwareOrdersRedacted = 0\n    for (const ref of refs) {\n      const redacted = await db.runTransaction(async (transaction) => {\n        const snapshot = await transaction.get(ref)\n        const order = snapshot.data() as PosHardwareOrder | undefined\n        // Gone, or already someone else's: nothing of this person is on it.\n        if (!snapshot.exists || !order || order.createdBy !== uid) return false\n        const patch = posHardwareBuyerErasedPatch(order, now())\n        transaction.update(ref, patch)\n        transaction.set(\n          db.collection(POS_HARDWARE_SALES_COLLECTION).doc(ref.id),\n          posHardwareSaleRecord(ref.id, { ...order, ...patch } as PosHardwareOrder),\n        )\n        return true\n      })\n      if (redacted) hardwareOrdersRedacted += 1\n    }\n    return { hardwareOrdersRedacted, formerWorkspacesReached }\n  }\n}\n\n/** The eraser over the platform's own Firestore, as the declarations register it. */\nexport const posHardwareUserEraser: PluginUserEraser = (request) =>\n  createPosHardwareUserEraser({ firestore: () => firebaseAdmin.app().firestore() })(request)\n"],"names":["firebaseAdmin","POS_HARDWARE_ORDERS_COLLECTION","POS_HARDWARE_SALES_COLLECTION","posHardwareBuyerErasedPatch","posHardwareSaleRecord","LABEL","createPosHardwareUserEraser","deps","uid","orgIds","hardwareOrdersRedacted","formerWorkspacesReached","db","firestore","now","Date","refs","placed","collectionGroup","where","get","docs","map","doc","ref","error","console","orgId","collection","push","redacted","runTransaction","transaction","snapshot","order","data","exists","createdBy","patch","update","set","id","posHardwareUserEraser","request","app"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAMD,SAASA,aAAa,QAAQ,iDAAgD;AAC9E,SACEC,8BAA8B,EAC9BC,6BAA6B,EAC7BC,2BAA2B,EAC3BC,qBAAqB,QAEhB,2BAAuB;AAiC9B,MAAMC,QAAQ;AAEd,OAAO,SAASC,4BAA4BC,IAA+B;IACzE,OAAO,OAAO,EAAEC,GAAG,EAAEC,MAAM,EAAE;YAGfF;QAFZ,IAAI,CAACC,KAAK,OAAO;YAAEE,wBAAwB;YAAGC,yBAAyB;QAAK;QAC5E,MAAMC,KAAKL,KAAKM,SAAS;QACzB,MAAMC,OAAMP,YAAAA,KAAKO,GAAG,YAARP,YAAYQ,KAAKD,GAAG;QAEhC,IAAIE;QACJ,IAAIL,0BAA0B;QAC9B,IAAI;YACF,MAAMM,SAAS,MAAML,GAAGM,eAAe,CAACjB,gCAAgCkB,KAAK,CAAC,aAAa,MAAMX,KAAKY,GAAG;YACzGJ,OAAOC,OAAOI,IAAI,CAACC,GAAG,CAAC,CAACC,MAAQA,IAAIC,GAAG;QACzC,EAAE,OAAOC,OAAO;YACdC,QAAQD,KAAK,CAAC,GAAGpB,MAAM,yEAAyE,CAAC,EAAEoB;YACnGd,0BAA0B;YAC1BK,OAAO,EAAE;YACT,KAAK,MAAMW,SAASlB,OAAQ;gBAC1B,MAAMQ,SAAS,MAAML,GAClBgB,UAAU,CAAC,QACXL,GAAG,CAACI,OACJC,UAAU,CAAC3B,gCACXkB,KAAK,CAAC,aAAa,MAAMX,KACzBY,GAAG;gBACNJ,KAAKa,IAAI,IAAIZ,OAAOI,IAAI,CAACC,GAAG,CAAC,CAACC,MAAQA,IAAIC,GAAG;YAC/C;QACF;QAEA,IAAId,yBAAyB;QAC7B,KAAK,MAAMc,OAAOR,KAAM;YACtB,MAAMc,WAAW,MAAMlB,GAAGmB,cAAc,CAAC,OAAOC;gBAC9C,MAAMC,WAAW,MAAMD,YAAYZ,GAAG,CAACI;gBACvC,MAAMU,QAAQD,SAASE,IAAI;gBAC3B,oEAAoE;gBACpE,IAAI,CAACF,SAASG,MAAM,IAAI,CAACF,SAASA,MAAMG,SAAS,KAAK7B,KAAK,OAAO;gBAClE,MAAM8B,QAAQnC,4BAA4B+B,OAAOpB;gBACjDkB,YAAYO,MAAM,CAACf,KAAKc;gBACxBN,YAAYQ,GAAG,CACb5B,GAAGgB,UAAU,CAAC1B,+BAA+BqB,GAAG,CAACC,IAAIiB,EAAE,GACvDrC,sBAAsBoB,IAAIiB,EAAE,EAAE,aAAKP,OAAUI;gBAE/C,OAAO;YACT;YACA,IAAIR,UAAUpB,0BAA0B;QAC1C;QACA,OAAO;YAAEA;YAAwBC;QAAwB;IAC3D;AACF;AAEA,mFAAmF,GACnF,OAAO,MAAM+B,wBAA0C,CAACC,UACtDrC,4BAA4B;QAAEO,WAAW,IAAMb,cAAc4C,GAAG,GAAG/B,SAAS;IAAG,GAAG8B,SAAQ"}

package/src/lib/server/pos-hardware-webhook.d.ts

@@ -0,0 +1,31 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { BillingWebhookHandler } from '@aglyn/aglyn/server';
+import { type PosHardwareOrder } from '../model/pos-hardware';
+/** The order a paid session describes, or `null` when it is not readable. */
+export declare function posHardwareOrderFromSession(session: any, now?: number): {
+    orderId: string;
+    order: PosHardwareOrder;
+} | null;
+/**
+ * Writes the order once, with its retained sale record. `created` is false
+ * when a delivery already did, so the caller tells people only the first time.
+ */
+export declare function recordPosHardwareOrder(orderId: string, order: PosHardwareOrder): Promise<{
+    created: boolean;
+}>;
+export declare const posHardwareBillingWebhookHandler: BillingWebhookHandler;

package/src/lib/server/pos-hardware-webhook.js

@@ -0,0 +1,176 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { _ as _extends } from "@swc/helpers/_/_extends";
+import { firebaseAdmin } from "@aglyn/tenant-data-admin";
+import { decodePosHardwareLines, isPosHardwareShippingMethod, POS_HARDWARE_CURRENCY, POS_HARDWARE_METADATA_TYPE, POS_HARDWARE_ORDER_ID, POS_HARDWARE_SHIPPING_LABELS, posHardwareSaleRecord } from "../model/pos-hardware.js";
+import { hardwareOrdersRef, posHardwareSaleRef } from "./pos-hardware.js";
+import { raisePosHardwareOrderAlert, sendPosHardwareEmail } from "./pos-hardware-notify.js";
+/*==========================================
+ * A PAID HARDWARE CHECKOUT BECOMES AN ORDER (AGL-4038).
+ *
+ * The platform's Stripe webhook fans every event out to the plugins' handlers
+ * (`registerBillingWebhookHandler`); this one self-selects on a
+ * `checkout.session.completed` whose metadata says it is a POS hardware
+ * order, and writes `orgs/{orgId}/hardwareOrders/{orderId}` and, in the same
+ * transaction, the retained sale record `posHardwareSales/{orderId}` that
+ * outlives the workspace (see `PosHardwareSaleRecord`).
+ *
+ * IDEMPOTENT BY THE ORDER ID. The id was fixed when the session was made
+ * (from the merchant's attempt key), and the write is a transactional
+ * create: a redelivered event finds the document and does nothing, so a
+ * replay never makes a second order, a second email or a second alert.
+ *
+ * NOTHING ON THE WIRE IS TRUSTED FOR WHAT IT NAMES. The lines are re-read
+ * against the catalog; the amounts are Stripe's own totals for the session;
+ * an unreadable session is logged and ignored rather than half-recorded.
+ *=========================================*/ function addressFrom(raw) {
+    var _raw_line1, _raw_city, _raw_postal_code, _raw_country, _raw_line2, _raw_state;
+    if (!raw || typeof raw !== 'object') return null;
+    const line1 = String((_raw_line1 = raw.line1) != null ? _raw_line1 : '').trim();
+    const city = String((_raw_city = raw.city) != null ? _raw_city : '').trim();
+    const postalCode = String((_raw_postal_code = raw.postal_code) != null ? _raw_postal_code : '').trim();
+    const country = String((_raw_country = raw.country) != null ? _raw_country : '').trim().toUpperCase();
+    if (!line1 || !city || !postalCode || !country) return null;
+    const line2 = String((_raw_line2 = raw.line2) != null ? _raw_line2 : '').trim();
+    const state = String((_raw_state = raw.state) != null ? _raw_state : '').trim();
+    return _extends({
+        line1: line1.slice(0, 200)
+    }, line2 ? {
+        line2: line2.slice(0, 200)
+    } : {}, {
+        city: city.slice(0, 100)
+    }, state ? {
+        state: state.slice(0, 100)
+    } : {}, {
+        postalCode: postalCode.slice(0, 20),
+        country: country.slice(0, 2)
+    });
+}
+const cents = (value)=>{
+    const number = Number(value);
+    return Number.isSafeInteger(number) && number >= 0 ? number : 0;
+};
+/** The order a paid session describes, or `null` when it is not readable. */ export function posHardwareOrderFromSession(session, now = Date.now()) {
+    var _ref, _metadata_orderId, _metadata_orgId, _metadata_hostId, _ref1, _ref2, _ref3, _metadata_uid, _ref4, _ref5, _ref6, _ref7, _ref8, _ref9, _ref10;
+    var _session_collected_information, _session_shipping_cost, _session_total_details;
+    const metadata = (_ref = session == null ? void 0 : session.metadata) != null ? _ref : {};
+    if (metadata.type !== POS_HARDWARE_METADATA_TYPE) return null;
+    const orderId = String((_metadata_orderId = metadata.orderId) != null ? _metadata_orderId : '');
+    const orgId = String((_metadata_orgId = metadata.orgId) != null ? _metadata_orgId : '');
+    const hostId = String((_metadata_hostId = metadata.hostId) != null ? _metadata_hostId : '');
+    if (!POS_HARDWARE_ORDER_ID.test(orderId) || !orgId || !hostId) return null;
+    const lines = decodePosHardwareLines(metadata.lines);
+    if (!lines) return null;
+    const method = isPosHardwareShippingMethod(metadata.shippingMethod) ? metadata.shippingMethod : 'standard';
+    // Where the newer API versions keep the shipping details, then the older.
+    const shippingDetails = (_ref1 = (_ref2 = session == null ? void 0 : (_session_collected_information = session.collected_information) == null ? void 0 : _session_collected_information.shipping_details) != null ? _ref2 : session == null ? void 0 : session.shipping_details) != null ? _ref1 : null;
+    const customer = (_ref3 = session == null ? void 0 : session.customer_details) != null ? _ref3 : {};
+    const subtotalCents = lines.reduce((sum, line)=>sum + line.lineCents, 0);
+    const shippingCents = (session == null ? void 0 : (_session_shipping_cost = session.shipping_cost) == null ? void 0 : _session_shipping_cost.amount_total) != null ? cents(session.shipping_cost.amount_total) : cents(metadata.shippingCents);
+    const taxCents = cents(session == null ? void 0 : (_session_total_details = session.total_details) == null ? void 0 : _session_total_details.amount_tax);
+    const totalCents = (session == null ? void 0 : session.amount_total) != null ? cents(session.amount_total) : subtotalCents + shippingCents + taxCents;
+    const paymentIntent = session == null ? void 0 : session.payment_intent;
+    return {
+        orderId,
+        order: {
+            orgId,
+            hostId,
+            createdBy: String((_metadata_uid = metadata.uid) != null ? _metadata_uid : ''),
+            contactEmail: String((_ref4 = customer == null ? void 0 : customer.email) != null ? _ref4 : '').trim() || null,
+            lines,
+            subtotalCents,
+            shipping: {
+                method,
+                label: POS_HARDWARE_SHIPPING_LABELS[method],
+                cents: shippingCents,
+                name: String((_ref5 = (_ref6 = shippingDetails == null ? void 0 : shippingDetails.name) != null ? _ref6 : customer == null ? void 0 : customer.name) != null ? _ref5 : '').trim() || null,
+                phone: String((_ref7 = customer == null ? void 0 : customer.phone) != null ? _ref7 : '').trim() || null,
+                address: addressFrom(shippingDetails == null ? void 0 : shippingDetails.address)
+            },
+            taxCents,
+            totalCents,
+            currency: String((_ref8 = session == null ? void 0 : session.currency) != null ? _ref8 : POS_HARDWARE_CURRENCY),
+            stripeCheckoutSessionId: String((_ref9 = session == null ? void 0 : session.id) != null ? _ref9 : ''),
+            stripePaymentIntentId: (typeof paymentIntent === 'string' ? paymentIntent : String((_ref10 = paymentIntent == null ? void 0 : paymentIntent.id) != null ? _ref10 : '')) || null,
+            stripeHardwareOrderId: null,
+            tracking: null,
+            status: 'paid',
+            livemode: (session == null ? void 0 : session.livemode) === true,
+            createdAtMs: now,
+            updatedAtMs: now,
+            paidAtMs: now
+        }
+    };
+}
+/**
+ * Writes the order once, with its retained sale record. `created` is false
+ * when a delivery already did, so the caller tells people only the first time.
+ */ export async function recordPosHardwareOrder(orderId, order) {
+    const ref = hardwareOrdersRef(order.orgId).doc(orderId);
+    const saleRef = posHardwareSaleRef(orderId);
+    return firebaseAdmin.app().firestore().runTransaction(async (transaction)=>{
+        const existing = await transaction.get(ref);
+        if (existing.exists) return {
+            created: false
+        };
+        transaction.create(ref, order);
+        transaction.set(saleRef, posHardwareSaleRecord(orderId, order));
+        return {
+            created: true
+        };
+    });
+}
+export const posHardwareBillingWebhookHandler = async ({ type, object })=>{
+    var _ref;
+    var _object_metadata, _object_metadata1;
+    if (type !== 'checkout.session.completed') return;
+    if ((object == null ? void 0 : (_object_metadata = object.metadata) == null ? void 0 : _object_metadata.type) !== POS_HARDWARE_METADATA_TYPE) return;
+    const hostId = String((_ref = object == null ? void 0 : (_object_metadata1 = object.metadata) == null ? void 0 : _object_metadata1.hostId) != null ? _ref : '');
+    // A session that is not paid holds nothing to fulfil. Card is the only
+    // method offered, so payment is settled when the session completes.
+    if ((object == null ? void 0 : object.mode) !== 'payment' || (object == null ? void 0 : object.payment_status) !== 'paid') {
+        return _extends({
+            claimed: true
+        }, hostId ? {
+            hostId
+        } : {});
+    }
+    const parsed = posHardwareOrderFromSession(object);
+    if (!parsed) {
+        var _ref1;
+        console.error('[pos-hardware] a paid hardware session could not be read', String((_ref1 = object == null ? void 0 : object.id) != null ? _ref1 : ''));
+        return _extends({
+            claimed: true
+        }, hostId ? {
+            hostId
+        } : {});
+    }
+    // Errors here propagate on purpose: the route answers 500 and Stripe
+    // redelivers, and the create above makes the retry safe.
+    const { created } = await recordPosHardwareOrder(parsed.orderId, parsed.order);
+    if (created) {
+        await Promise.all([
+            sendPosHardwareEmail('received', parsed.orderId, parsed.order),
+            raisePosHardwareOrderAlert(parsed.orderId, parsed.order)
+        ]);
+    }
+    return {
+        claimed: true,
+        hostId: parsed.order.hostId
+    };
+};
+
+//# sourceMappingURL=pos-hardware-webhook.js.map

package/src/lib/server/pos-hardware-webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-hardware-webhook.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { BillingWebhookHandler } from '@aglyn/aglyn/server'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport {\n  decodePosHardwareLines,\n  isPosHardwareShippingMethod,\n  POS_HARDWARE_CURRENCY,\n  POS_HARDWARE_METADATA_TYPE,\n  POS_HARDWARE_ORDER_ID,\n  POS_HARDWARE_SHIPPING_LABELS,\n  posHardwareSaleRecord,\n  type PosHardwareAddress,\n  type PosHardwareOrder,\n} from '../model/pos-hardware'\nimport { hardwareOrdersRef, posHardwareSaleRef } from './pos-hardware'\nimport { raisePosHardwareOrderAlert, sendPosHardwareEmail } from './pos-hardware-notify'\n\n/*==========================================\n * A PAID HARDWARE CHECKOUT BECOMES AN ORDER (AGL-4038).\n *\n * The platform's Stripe webhook fans every event out to the plugins' handlers\n * (`registerBillingWebhookHandler`); this one self-selects on a\n * `checkout.session.completed` whose metadata says it is a POS hardware\n * order, and writes `orgs/{orgId}/hardwareOrders/{orderId}` and, in the same\n * transaction, the retained sale record `posHardwareSales/{orderId}` that\n * outlives the workspace (see `PosHardwareSaleRecord`).\n *\n * IDEMPOTENT BY THE ORDER ID. The id was fixed when the session was made\n * (from the merchant's attempt key), and the write is a transactional\n * create: a redelivered event finds the document and does nothing, so a\n * replay never makes a second order, a second email or a second alert.\n *\n * NOTHING ON THE WIRE IS TRUSTED FOR WHAT IT NAMES. The lines are re-read\n * against the catalog; the amounts are Stripe's own totals for the session;\n * an unreadable session is logged and ignored rather than half-recorded.\n *=========================================*/\n\nfunction addressFrom(raw: any): PosHardwareAddress | null {\n  if (!raw || typeof raw !== 'object') return null\n  const line1 = String(raw.line1 ?? '').trim()\n  const city = String(raw.city ?? '').trim()\n  const postalCode = String(raw.postal_code ?? '').trim()\n  const country = String(raw.country ?? '').trim().toUpperCase()\n  if (!line1 || !city || !postalCode || !country) return null\n  const line2 = String(raw.line2 ?? '').trim()\n  const state = String(raw.state ?? '').trim()\n  return {\n    line1: line1.slice(0, 200),\n    ...(line2 ? { line2: line2.slice(0, 200) } : {}),\n    city: city.slice(0, 100),\n    ...(state ? { state: state.slice(0, 100) } : {}),\n    postalCode: postalCode.slice(0, 20),\n    country: country.slice(0, 2),\n  }\n}\n\nconst cents = (value: unknown): number => {\n  const number = Number(value)\n  return Number.isSafeInteger(number) && number >= 0 ? number : 0\n}\n\n/** The order a paid session describes, or `null` when it is not readable. */\nexport function posHardwareOrderFromSession(\n  session: any,\n  now = Date.now(),\n): { orderId: string; order: PosHardwareOrder } | null {\n  const metadata = session?.metadata ?? {}\n  if (metadata.type !== POS_HARDWARE_METADATA_TYPE) return null\n  const orderId = String(metadata.orderId ?? '')\n  const orgId = String(metadata.orgId ?? '')\n  const hostId = String(metadata.hostId ?? '')\n  if (!POS_HARDWARE_ORDER_ID.test(orderId) || !orgId || !hostId) return null\n  const lines = decodePosHardwareLines(metadata.lines)\n  if (!lines) return null\n  const method = isPosHardwareShippingMethod(metadata.shippingMethod) ? metadata.shippingMethod : 'standard'\n  // Where the newer API versions keep the shipping details, then the older.\n  const shippingDetails =\n    session?.collected_information?.shipping_details ?? session?.shipping_details ?? null\n  const customer = session?.customer_details ?? {}\n  const subtotalCents = lines.reduce((sum, line) => sum + line.lineCents, 0)\n  const shippingCents =\n    session?.shipping_cost?.amount_total != null\n      ? cents(session.shipping_cost.amount_total)\n      : cents(metadata.shippingCents)\n  const taxCents = cents(session?.total_details?.amount_tax)\n  const totalCents =\n    session?.amount_total != null ? cents(session.amount_total) : subtotalCents + shippingCents + taxCents\n  const paymentIntent = session?.payment_intent\n  return {\n    orderId,\n    order: {\n      orgId,\n      hostId,\n      createdBy: String(metadata.uid ?? ''),\n      contactEmail: String(customer?.email ?? '').trim() || null,\n      lines,\n      subtotalCents,\n      shipping: {\n        method,\n        label: POS_HARDWARE_SHIPPING_LABELS[method],\n        cents: shippingCents,\n        name: String(shippingDetails?.name ?? customer?.name ?? '').trim() || null,\n        phone: String(customer?.phone ?? '').trim() || null,\n        address: addressFrom(shippingDetails?.address),\n      },\n      taxCents,\n      totalCents,\n      currency: String(session?.currency ?? POS_HARDWARE_CURRENCY),\n      stripeCheckoutSessionId: String(session?.id ?? ''),\n      stripePaymentIntentId:\n        (typeof paymentIntent === 'string' ? paymentIntent : String(paymentIntent?.id ?? '')) || null,\n      stripeHardwareOrderId: null,\n      tracking: null,\n      status: 'paid',\n      livemode: session?.livemode === true,\n      createdAtMs: now,\n      updatedAtMs: now,\n      paidAtMs: now,\n    },\n  }\n}\n\n/**\n * Writes the order once, with its retained sale record. `created` is false\n * when a delivery already did, so the caller tells people only the first time.\n */\nexport async function recordPosHardwareOrder(\n  orderId: string,\n  order: PosHardwareOrder,\n): Promise<{ created: boolean }> {\n  const ref = hardwareOrdersRef(order.orgId).doc(orderId)\n  const saleRef = posHardwareSaleRef(orderId)\n  return firebaseAdmin\n    .app()\n    .firestore()\n    .runTransaction(async (transaction: any) => {\n      const existing = await transaction.get(ref)\n      if (existing.exists) return { created: false }\n      transaction.create(ref, order)\n      transaction.set(saleRef, posHardwareSaleRecord(orderId, order))\n      return { created: true }\n    })\n}\n\nexport const posHardwareBillingWebhookHandler: BillingWebhookHandler = async ({ type, object }) => {\n  if (type !== 'checkout.session.completed') return\n  if (object?.metadata?.type !== POS_HARDWARE_METADATA_TYPE) return\n  const hostId = String(object?.metadata?.hostId ?? '')\n  // A session that is not paid holds nothing to fulfil. Card is the only\n  // method offered, so payment is settled when the session completes.\n  if (object?.mode !== 'payment' || object?.payment_status !== 'paid') {\n    return { claimed: true, ...(hostId ? { hostId } : {}) }\n  }\n  const parsed = posHardwareOrderFromSession(object)\n  if (!parsed) {\n    console.error('[pos-hardware] a paid hardware session could not be read', String(object?.id ?? ''))\n    return { claimed: true, ...(hostId ? { hostId } : {}) }\n  }\n  // Errors here propagate on purpose: the route answers 500 and Stripe\n  // redelivers, and the create above makes the retry safe.\n  const { created } = await recordPosHardwareOrder(parsed.orderId, parsed.order)\n  if (created) {\n    await Promise.all([\n      sendPosHardwareEmail('received', parsed.orderId, parsed.order),\n      raisePosHardwareOrderAlert(parsed.orderId, parsed.order),\n    ])\n  }\n  return { claimed: true, hostId: parsed.order.hostId }\n}\n"],"names":["firebaseAdmin","decodePosHardwareLines","isPosHardwareShippingMethod","POS_HARDWARE_CURRENCY","POS_HARDWARE_METADATA_TYPE","POS_HARDWARE_ORDER_ID","POS_HARDWARE_SHIPPING_LABELS","posHardwareSaleRecord","hardwareOrdersRef","posHardwareSaleRef","raisePosHardwareOrderAlert","sendPosHardwareEmail","addressFrom","raw","line1","String","trim","city","postalCode","postal_code","country","toUpperCase","line2","state","slice","cents","value","number","Number","isSafeInteger","posHardwareOrderFromSession","session","now","Date","metadata","shippingDetails","type","orderId","orgId","hostId","test","lines","method","shippingMethod","collected_information","shipping_details","customer","customer_details","subtotalCents","reduce","sum","line","lineCents","shippingCents","shipping_cost","amount_total","taxCents","total_details","amount_tax","totalCents","paymentIntent","payment_intent","order","createdBy","uid","contactEmail","email","shipping","label","name","phone","address","currency","stripeCheckoutSessionId","id","stripePaymentIntentId","stripeHardwareOrderId","tracking","status","livemode","createdAtMs","updatedAtMs","paidAtMs","recordPosHardwareOrder","ref","doc","saleRef","app","firestore","runTransaction","transaction","existing","get","exists","created","create","set","posHardwareBillingWebhookHandler","object","mode","payment_status","claimed","parsed","console","error","Promise","all"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,SAASA,aAAa,QAAQ,2BAA0B;AACxD,SACEC,sBAAsB,EACtBC,2BAA2B,EAC3BC,qBAAqB,EACrBC,0BAA0B,EAC1BC,qBAAqB,EACrBC,4BAA4B,EAC5BC,qBAAqB,QAGhB,2BAAuB;AAC9B,SAASC,iBAAiB,EAAEC,kBAAkB,QAAQ,oBAAgB;AACtE,SAASC,0BAA0B,EAAEC,oBAAoB,QAAQ,2BAAuB;AAExF;;;;;;;;;;;;;;;;;;2CAkB2C,GAE3C,SAASC,YAAYC,GAAQ;QAENA,YACDA,WACMA,kBACHA,cAEFA,YACAA;IAPrB,IAAI,CAACA,OAAO,OAAOA,QAAQ,UAAU,OAAO;IAC5C,MAAMC,QAAQC,QAAOF,aAAAA,IAAIC,KAAK,YAATD,aAAa,IAAIG,IAAI;IAC1C,MAAMC,OAAOF,QAAOF,YAAAA,IAAII,IAAI,YAARJ,YAAY,IAAIG,IAAI;IACxC,MAAME,aAAaH,QAAOF,mBAAAA,IAAIM,WAAW,YAAfN,mBAAmB,IAAIG,IAAI;IACrD,MAAMI,UAAUL,QAAOF,eAAAA,IAAIO,OAAO,YAAXP,eAAe,IAAIG,IAAI,GAAGK,WAAW;IAC5D,IAAI,CAACP,SAAS,CAACG,QAAQ,CAACC,cAAc,CAACE,SAAS,OAAO;IACvD,MAAME,QAAQP,QAAOF,aAAAA,IAAIS,KAAK,YAATT,aAAa,IAAIG,IAAI;IAC1C,MAAMO,QAAQR,QAAOF,aAAAA,IAAIU,KAAK,YAATV,aAAa,IAAIG,IAAI;IAC1C,OAAO;QACLF,OAAOA,MAAMU,KAAK,CAAC,GAAG;OAClBF,QAAQ;QAAEA,OAAOA,MAAME,KAAK,CAAC,GAAG;IAAK,IAAI,CAAC;QAC9CP,MAAMA,KAAKO,KAAK,CAAC,GAAG;OAChBD,QAAQ;QAAEA,OAAOA,MAAMC,KAAK,CAAC,GAAG;IAAK,IAAI,CAAC;QAC9CN,YAAYA,WAAWM,KAAK,CAAC,GAAG;QAChCJ,SAASA,QAAQI,KAAK,CAAC,GAAG;;AAE9B;AAEA,MAAMC,QAAQ,CAACC;IACb,MAAMC,SAASC,OAAOF;IACtB,OAAOE,OAAOC,aAAa,CAACF,WAAWA,UAAU,IAAIA,SAAS;AAChE;AAEA,2EAA2E,GAC3E,OAAO,SAASG,4BACdC,OAAY,EACZC,MAAMC,KAAKD,GAAG,EAAE;cAIOE,mBACFA,iBACCA,kBAOpBH,qBAgBoBG,sBAQHC;QAxBjBJ,gCAIAA,wBAGqBA;IAlBvB,MAAMG,mBAAWH,2BAAAA,QAASG,QAAQ,mBAAI,CAAC;IACvC,IAAIA,SAASE,IAAI,KAAKhC,4BAA4B,OAAO;IACzD,MAAMiC,UAAUtB,QAAOmB,oBAAAA,SAASG,OAAO,YAAhBH,oBAAoB;IAC3C,MAAMI,QAAQvB,QAAOmB,kBAAAA,SAASI,KAAK,YAAdJ,kBAAkB;IACvC,MAAMK,SAASxB,QAAOmB,mBAAAA,SAASK,MAAM,YAAfL,mBAAmB;IACzC,IAAI,CAAC7B,sBAAsBmC,IAAI,CAACH,YAAY,CAACC,SAAS,CAACC,QAAQ,OAAO;IACtE,MAAME,QAAQxC,uBAAuBiC,SAASO,KAAK;IACnD,IAAI,CAACA,OAAO,OAAO;IACnB,MAAMC,SAASxC,4BAA4BgC,SAASS,cAAc,IAAIT,SAASS,cAAc,GAAG;IAChG,0EAA0E;IAC1E,MAAMR,mBACJJ,iBAAAA,4BAAAA,iCAAAA,QAASa,qBAAqB,qBAA9Bb,+BAAgCc,gBAAgB,oBAAId,2BAAAA,QAASc,gBAAgB,YAA7Ed,QAAiF;IACnF,MAAMe,oBAAWf,2BAAAA,QAASgB,gBAAgB,oBAAI,CAAC;IAC/C,MAAMC,gBAAgBP,MAAMQ,MAAM,CAAC,CAACC,KAAKC,OAASD,MAAMC,KAAKC,SAAS,EAAE;IACxE,MAAMC,gBACJtB,CAAAA,4BAAAA,yBAAAA,QAASuB,aAAa,qBAAtBvB,uBAAwBwB,YAAY,KAAI,OACpC9B,MAAMM,QAAQuB,aAAa,CAACC,YAAY,IACxC9B,MAAMS,SAASmB,aAAa;IAClC,MAAMG,WAAW/B,MAAMM,4BAAAA,yBAAAA,QAAS0B,aAAa,qBAAtB1B,uBAAwB2B,UAAU;IACzD,MAAMC,aACJ5B,CAAAA,2BAAAA,QAASwB,YAAY,KAAI,OAAO9B,MAAMM,QAAQwB,YAAY,IAAIP,gBAAgBK,gBAAgBG;IAChG,MAAMI,gBAAgB7B,2BAAAA,QAAS8B,cAAc;IAC7C,OAAO;QACLxB;QACAyB,OAAO;YACLxB;YACAC;YACAwB,WAAWhD,QAAOmB,gBAAAA,SAAS8B,GAAG,YAAZ9B,gBAAgB;YAClC+B,cAAclD,gBAAO+B,4BAAAA,SAAUoB,KAAK,oBAAI,IAAIlD,IAAI,MAAM;YACtDyB;YACAO;YACAmB,UAAU;gBACRzB;gBACA0B,OAAO9D,4BAA4B,CAACoC,OAAO;gBAC3CjB,OAAO4B;gBACPgB,MAAMtD,QAAOoB,iBAAAA,mCAAAA,gBAAiBkC,IAAI,oBAAIvB,4BAAAA,SAAUuB,IAAI,YAAvClC,QAA2C,IAAInB,IAAI,MAAM;gBACtEsD,OAAOvD,gBAAO+B,4BAAAA,SAAUwB,KAAK,oBAAI,IAAItD,IAAI,MAAM;gBAC/CuD,SAAS3D,YAAYuB,mCAAAA,gBAAiBoC,OAAO;YAC/C;YACAf;YACAG;YACAa,UAAUzD,gBAAOgB,2BAAAA,QAASyC,QAAQ,oBAAIrE;YACtCsE,yBAAyB1D,gBAAOgB,2BAAAA,QAAS2C,EAAE,oBAAI;YAC/CC,uBACE,AAAC,CAAA,OAAOf,kBAAkB,WAAWA,gBAAgB7C,iBAAO6C,iCAAAA,cAAec,EAAE,qBAAI,GAAE,KAAM;YAC3FE,uBAAuB;YACvBC,UAAU;YACVC,QAAQ;YACRC,UAAUhD,CAAAA,2BAAAA,QAASgD,QAAQ,MAAK;YAChCC,aAAahD;YACbiD,aAAajD;YACbkD,UAAUlD;QACZ;IACF;AACF;AAEA;;;CAGC,GACD,OAAO,eAAemD,uBACpB9C,OAAe,EACfyB,KAAuB;IAEvB,MAAMsB,MAAM5E,kBAAkBsD,MAAMxB,KAAK,EAAE+C,GAAG,CAAChD;IAC/C,MAAMiD,UAAU7E,mBAAmB4B;IACnC,OAAOrC,cACJuF,GAAG,GACHC,SAAS,GACTC,cAAc,CAAC,OAAOC;QACrB,MAAMC,WAAW,MAAMD,YAAYE,GAAG,CAACR;QACvC,IAAIO,SAASE,MAAM,EAAE,OAAO;YAAEC,SAAS;QAAM;QAC7CJ,YAAYK,MAAM,CAACX,KAAKtB;QACxB4B,YAAYM,GAAG,CAACV,SAAS/E,sBAAsB8B,SAASyB;QACxD,OAAO;YAAEgC,SAAS;QAAK;IACzB;AACJ;AAEA,OAAO,MAAMG,mCAA0D,OAAO,EAAE7D,IAAI,EAAE8D,MAAM,EAAE;;QAExFA,kBACkBA;IAFtB,IAAI9D,SAAS,8BAA8B;IAC3C,IAAI8D,CAAAA,2BAAAA,mBAAAA,OAAQhE,QAAQ,qBAAhBgE,iBAAkB9D,IAAI,MAAKhC,4BAA4B;IAC3D,MAAMmC,SAASxB,eAAOmF,2BAAAA,oBAAAA,OAAQhE,QAAQ,qBAAhBgE,kBAAkB3D,MAAM,mBAAI;IAClD,uEAAuE;IACvE,oEAAoE;IACpE,IAAI2D,CAAAA,0BAAAA,OAAQC,IAAI,MAAK,aAAaD,CAAAA,0BAAAA,OAAQE,cAAc,MAAK,QAAQ;QACnE,OAAO;YAAEC,SAAS;WAAU9D,SAAS;YAAEA;QAAO,IAAI,CAAC;IACrD;IACA,MAAM+D,SAASxE,4BAA4BoE;IAC3C,IAAI,CAACI,QAAQ;;QACXC,QAAQC,KAAK,CAAC,4DAA4DzF,gBAAOmF,0BAAAA,OAAQxB,EAAE,oBAAI;QAC/F,OAAO;YAAE2B,SAAS;WAAU9D,SAAS;YAAEA;QAAO,IAAI,CAAC;IACrD;IACA,qEAAqE;IACrE,yDAAyD;IACzD,MAAM,EAAEuD,OAAO,EAAE,GAAG,MAAMX,uBAAuBmB,OAAOjE,OAAO,EAAEiE,OAAOxC,KAAK;IAC7E,IAAIgC,SAAS;QACX,MAAMW,QAAQC,GAAG,CAAC;YAChB/F,qBAAqB,YAAY2F,OAAOjE,OAAO,EAAEiE,OAAOxC,KAAK;YAC7DpD,2BAA2B4F,OAAOjE,OAAO,EAAEiE,OAAOxC,KAAK;SACxD;IACH;IACA,OAAO;QAAEuC,SAAS;QAAM9D,QAAQ+D,OAAOxC,KAAK,CAACvB,MAAM;IAAC;AACtD,EAAC"}

package/src/lib/server/pos-hardware.d.ts

@@ -0,0 +1,58 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PluginApiHandler } from '@aglyn/aglyn/server';
+import { type PosHardwareConfig, type PosHardwareOrder } from '../model/pos-hardware';
+/** The shop's config from this deployment, or `null` while it is hidden. */
+export declare function posHardwareConfig(env?: Record<string, string | undefined>): PosHardwareConfig | null;
+/** The order's id, derived from the attempt so a repeated press is one order. */
+export declare function posHardwareOrderId(orgId: string, hostId: string, attemptKey: string): string;
+/** The number a person reads: `HW-` and six characters of the id. */
+export declare function posHardwareOrderNumber(orderId: string): string;
+export declare function hardwareOrdersRef(orgId: string): FirebaseFirestore.CollectionReference<FirebaseFirestore.DocumentData, FirebaseFirestore.DocumentData>;
+/**
+ * `posHardwareSales/{orderId}`, the retained sale record beside each order
+ * (see `PosHardwareSaleRecord`). Top-level on purpose: the workspace erasure
+ * cannot reach it.
+ */
+export declare function posHardwareSaleRef(orderId: string): FirebaseFirestore.DocumentReference<FirebaseFirestore.DocumentData, FirebaseFirestore.DocumentData>;
+/** An order as the merchant's card shows it: no Stripe ids, no staff notes. */
+export declare function merchantHardwareOrderView(id: string, order: PosHardwareOrder): {
+    id: string;
+    number: string;
+    status: import("../model/pos-hardware").PosHardwareOrderStatus;
+    lines: {
+        sku: import("../model/pos-hardware").PosHardwareSkuId;
+        name: string;
+        quantity: number;
+        unitCents: number;
+        lineCents: number;
+    }[];
+    subtotalCents: number;
+    shippingCents: number;
+    shippingLabel: string;
+    taxCents: number;
+    totalCents: number;
+    tracking: import("../model/pos-hardware").PosHardwareTracking;
+    createdAtMs: number;
+    updatedAtMs: number;
+};
+export type MerchantHardwareOrderView = ReturnType<typeof merchantHardwareOrderView>;
+/** The POS settings page of a site, as an absolute console URL. */
+export declare function posSettingsUrl(hostId: string): Promise<string>;
+/** `base` with `query` added before any `#fragment`, then `#hash`. */
+export declare function withQueryAndHash(base: string, query: string, hash: string): string;
+export declare const posHardwareHandler: PluginApiHandler;

package/src/lib/server/pos-hardware.js

@@ -0,0 +1,234 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { createHash } from "crypto";
+import { firebaseAdmin, readOrgBilling } from "@aglyn/tenant-data-admin";
+import { hostConsoleUrl } from "@aglyn/tenant-data-admin/server/host-console-link";
+import { encodePosHardwareLines, isPosHardwareShippingMethod, POS_HARDWARE_ANCHOR, parsePosHardwareConfig, POS_HARDWARE_CURRENCY, POS_HARDWARE_METADATA_TYPE, POS_HARDWARE_ORDERS_COLLECTION, POS_HARDWARE_SALES_COLLECTION, POS_HARDWARE_SHIP_COUNTRIES, POS_HARDWARE_SHIPPING_LABELS, posHardwareOffers, posHardwareSku, pricePosHardwareCart } from "../model/pos-hardware.js";
+import { authorizePosStaff, posIdempotencyKey, posRequestBody } from "./pos-auth.js";
+import { posStripe, posTerminalAvailable } from "./pos-stripe.js";
+/*==========================================
+ * `POST /api/commerce/pos-hardware` (AGL-4038): the merchant's half of the
+ * POS hardware shop, behind the Hardware card on Products → Point of sale.
+ *
+ *   catalog   what is on offer and at what price, or `available: false`
+ *   checkout  a Stripe Checkout Session for the basket, on the PLATFORM
+ *   orders    this site's hardware orders, newest first
+ *
+ * Gated like the register (`authorizePosStaff`: an admin or editor of the
+ * site with `managePos`, on a plan with POS), because the readers it sells
+ * are the register's.
+ *
+ * THE SALE IS THE PLATFORM'S. The session is created with the platform key
+ * and NO connected account, `transfer_data` or application fee: the merchant
+ * is the buyer here, and the platform is the seller of record that places
+ * the order with Stripe. The order document is written by the webhook once
+ * Stripe says the session is paid (`pos-hardware-webhook.ts`), never here.
+ *=========================================*/ /** The shop's config from this deployment, or `null` while it is hidden. */ export function posHardwareConfig(env = process.env) {
+    // A reader the platform cannot yet take payments on is not for sale: the
+    // shop opens only where the register offers card readers at all.
+    if (!posTerminalAvailable()) return null;
+    return parsePosHardwareConfig(env);
+}
+/** The order's id, derived from the attempt so a repeated press is one order. */ export function posHardwareOrderId(orgId, hostId, attemptKey) {
+    return `hw_${createHash('sha256').update(`${orgId}:${hostId}:${attemptKey}`).digest('hex').slice(0, 20)}`;
+}
+/** The number a person reads: `HW-` and six characters of the id. */ export function posHardwareOrderNumber(orderId) {
+    return `HW-${orderId.replace(/^hw_/, '').slice(0, 6).toUpperCase()}`;
+}
+export function hardwareOrdersRef(orgId) {
+    return firebaseAdmin.app().firestore().collection('orgs').doc(orgId).collection(POS_HARDWARE_ORDERS_COLLECTION);
+}
+/**
+ * `posHardwareSales/{orderId}`, the retained sale record beside each order
+ * (see `PosHardwareSaleRecord`). Top-level on purpose: the workspace erasure
+ * cannot reach it.
+ */ export function posHardwareSaleRef(orderId) {
+    return firebaseAdmin.app().firestore().collection(POS_HARDWARE_SALES_COLLECTION).doc(orderId);
+}
+/** An order as the merchant's card shows it: no Stripe ids, no staff notes. */ export function merchantHardwareOrderView(id, order) {
+    var _order_lines, _order_subtotalCents, _ref, _ref1, _order_taxCents, _order_totalCents, _order_tracking, _order_createdAtMs, _ref2, _order_updatedAtMs;
+    var _order_shipping, _order_shipping1;
+    return {
+        id,
+        number: posHardwareOrderNumber(id),
+        status: order.status,
+        lines: ((_order_lines = order.lines) != null ? _order_lines : []).map((line)=>({
+                sku: line.sku,
+                name: line.name,
+                quantity: line.quantity,
+                unitCents: line.unitCents,
+                lineCents: line.lineCents
+            })),
+        subtotalCents: (_order_subtotalCents = order.subtotalCents) != null ? _order_subtotalCents : 0,
+        shippingCents: (_ref = (_order_shipping = order.shipping) == null ? void 0 : _order_shipping.cents) != null ? _ref : 0,
+        shippingLabel: (_ref1 = (_order_shipping1 = order.shipping) == null ? void 0 : _order_shipping1.label) != null ? _ref1 : '',
+        taxCents: (_order_taxCents = order.taxCents) != null ? _order_taxCents : 0,
+        totalCents: (_order_totalCents = order.totalCents) != null ? _order_totalCents : 0,
+        tracking: (_order_tracking = order.tracking) != null ? _order_tracking : null,
+        createdAtMs: (_order_createdAtMs = order.createdAtMs) != null ? _order_createdAtMs : 0,
+        updatedAtMs: (_ref2 = (_order_updatedAtMs = order.updatedAtMs) != null ? _order_updatedAtMs : order.createdAtMs) != null ? _ref2 : 0
+    };
+}
+/** The POS settings page of a site, as an absolute console URL. */ export async function posSettingsUrl(hostId) {
+    return hostConsoleUrl(hostId, `/${hostId}/products/pos`);
+}
+/** `base` with `query` added before any `#fragment`, then `#hash`. */ export function withQueryAndHash(base, query, hash) {
+    const [path] = base.split('#');
+    const joiner = path.includes('?') ? '&' : '?';
+    return `${path}${joiner}${query}#${hash}`;
+}
+export const posHardwareHandler = async (req, res)=>{
+    var _body_hostId, _body_action;
+    if (req.method !== 'POST') return res.status(405).json({
+        error: 'Method not allowed'
+    });
+    const body = posRequestBody(req);
+    const hostId = String((_body_hostId = body['hostId']) != null ? _body_hostId : '');
+    const gate = await authorizePosStaff(req, hostId);
+    if ('error' in gate) return res.status(gate.status).json({
+        error: gate.error
+    });
+    const staff = gate.staff;
+    const config = posHardwareConfig();
+    const action = String((_body_action = body['action']) != null ? _body_action : '');
+    try {
+        switch(action){
+            case 'catalog':
+                if (!config) return res.status(200).json({
+                    available: false
+                });
+                return res.status(200).json({
+                    available: true,
+                    offers: posHardwareOffers(config),
+                    shipping: config.shipping.map((option)=>({
+                            method: option.method,
+                            label: POS_HARDWARE_SHIPPING_LABELS[option.method],
+                            cents: option.cents
+                        })),
+                    automaticTax: config.automaticTax,
+                    shipCountries: POS_HARDWARE_SHIP_COUNTRIES
+                });
+            case 'orders':
+                {
+                    const snapshot = await hardwareOrdersRef(staff.orgId).where('hostId', '==', staff.hostId).orderBy('createdAtMs', 'desc').limit(50).get();
+                    return res.status(200).json({
+                        orders: snapshot.docs.map((doc)=>merchantHardwareOrderView(String(doc.id), doc.data()))
+                    });
+                }
+            case 'checkout':
+                {
+                    var _billing_stripeCustomerId, _ref;
+                    var _created_body;
+                    if (!config) return res.status(404).json({
+                        error: 'The hardware shop is not available.'
+                    });
+                    const attemptKey = posIdempotencyKey(req);
+                    if (!attemptKey) return res.status(400).json({
+                        error: 'Missing Idempotency-Key'
+                    });
+                    if (!staff.orgId) return res.status(409).json({
+                        error: 'This site has no workspace.'
+                    });
+                    const priced = pricePosHardwareCart(config, body['lines']);
+                    if ('error' in priced) return res.status(400).json({
+                        error: priced.error
+                    });
+                    const method = body['shippingMethod'];
+                    const shipping = isPosHardwareShippingMethod(method) ? config.shipping.find((option)=>option.method === method) : undefined;
+                    if (!shipping) return res.status(400).json({
+                        error: 'Choose a shipping speed.'
+                    });
+                    const orderId = posHardwareOrderId(staff.orgId, staff.hostId, attemptKey);
+                    const billing = await readOrgBilling(staff.orgId).catch(()=>({}));
+                    const customer = String((_billing_stripeCustomerId = billing.stripeCustomerId) != null ? _billing_stripeCustomerId : '').trim();
+                    const base = await posSettingsUrl(staff.hostId);
+                    const params = _extends({
+                        mode: 'payment',
+                        client_reference_id: orderId,
+                        success_url: withQueryAndHash(base, 'hardwareOrder=placed', POS_HARDWARE_ANCHOR),
+                        cancel_url: withQueryAndHash(base, 'hardwareOrder=canceled', POS_HARDWARE_ANCHOR),
+                        'payment_method_types[0]': 'card',
+                        'shipping_address_collection[allowed_countries][0]': POS_HARDWARE_SHIP_COUNTRIES[0],
+                        'phone_number_collection[enabled]': true,
+                        'shipping_options[0][shipping_rate_data][type]': 'fixed_amount',
+                        'shipping_options[0][shipping_rate_data][display_name]': POS_HARDWARE_SHIPPING_LABELS[shipping.method],
+                        'shipping_options[0][shipping_rate_data][fixed_amount][amount]': shipping.cents,
+                        'shipping_options[0][shipping_rate_data][fixed_amount][currency]': POS_HARDWARE_CURRENCY,
+                        'metadata[type]': POS_HARDWARE_METADATA_TYPE,
+                        'metadata[orderId]': orderId,
+                        'metadata[orgId]': staff.orgId,
+                        'metadata[hostId]': staff.hostId,
+                        'metadata[uid]': staff.uid,
+                        'metadata[lines]': encodePosHardwareLines(priced.lines),
+                        'metadata[shippingMethod]': shipping.method,
+                        'metadata[shippingCents]': shipping.cents,
+                        'metadata[subtotalCents]': priced.subtotalCents,
+                        'payment_intent_data[description]': `Card reader order ${posHardwareOrderNumber(orderId)}`,
+                        'payment_intent_data[metadata][type]': POS_HARDWARE_METADATA_TYPE,
+                        'payment_intent_data[metadata][orderId]': orderId,
+                        'payment_intent_data[metadata][orgId]': staff.orgId
+                    }, customer ? {
+                        customer
+                    } : {}, config.automaticTax ? _extends({
+                        'automatic_tax[enabled]': true,
+                        'shipping_options[0][shipping_rate_data][tax_behavior]': 'exclusive'
+                    }, customer ? {
+                        'customer_update[shipping]': 'auto'
+                    } : {}) : {});
+                    priced.lines.forEach((line, index)=>{
+                        const sku = posHardwareSku(line.sku);
+                        params[`line_items[${index}][quantity]`] = line.quantity;
+                        // A literal, not POS_HARDWARE_CURRENCY: check:facilitator-charge-shape
+                        // reads Stripe Tax beside a usd line item only when it says so (AGL-1956).
+                        params[`line_items[${index}][price_data][currency]`] = 'usd';
+                        params[`line_items[${index}][price_data][unit_amount]`] = line.unitCents;
+                        params[`line_items[${index}][price_data][product_data][name]`] = line.name;
+                        if (sku) params[`line_items[${index}][price_data][product_data][description]`] = sku.use;
+                        params[`line_items[${index}][price_data][product_data][metadata][sku]`] = line.sku;
+                        if (config.automaticTax) params[`line_items[${index}][price_data][tax_behavior]`] = 'exclusive';
+                    });
+                    const created = await posStripe('POST', 'checkout/sessions', {
+                        params,
+                        idempotencyKey: `pos-hw-checkout-${orderId}`
+                    });
+                    const url = String((_ref = (_created_body = created.body) == null ? void 0 : _created_body.url) != null ? _ref : '');
+                    if (!created.ok || !url) {
+                        var _created_body_error, _created_body1;
+                        console.error('[pos-hardware] checkout refused', created.status, (_created_body1 = created.body) == null ? void 0 : (_created_body_error = _created_body1.error) == null ? void 0 : _created_body_error.code);
+                        return res.status(502).json({
+                            error: 'Checkout could not be started. Try again in a moment.'
+                        });
+                    }
+                    return res.status(200).json({
+                        url,
+                        orderId
+                    });
+                }
+            default:
+                return res.status(400).json({
+                    error: 'Unknown action'
+                });
+        }
+    } catch (error) {
+        console.error('[pos-hardware]', action, error);
+        return res.status(500).json({
+            error: 'The hardware shop could not answer'
+        });
+    }
+};
+
+//# sourceMappingURL=pos-hardware.js.map