@aglyn/plugins-commerce 1.0.0-beta.278 → 1.0.0-beta.283

package/src/lib/server/pos-reader-splash-admin.js

@@ -0,0 +1,295 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { createHash } from "node:crypto";
+import { pluginRequestFromWeb } from "@aglyn/aglyn/server";
+import { emailUnverifiedResponse, firebaseAdmin, isImpersonationSession } from "@aglyn/tenant-data-admin";
+import { addAdminAudit } from "@aglyn/tenant-data-admin/server/admin-audit-write";
+import { invalidIdTokenResponse } from "@aglyn/tenant-data-admin/server/id-token-refusal";
+import { POS_READER_SPLASH_FAMILIES, POS_READER_SPLASH_MAX_BYTES, posReaderSplashFamily, posReaderSplashImageProblem } from "../model/pos-reader-splash.js";
+import { applyPosReaderSplash, ownerOrgOf, platformSplashReady, platformSplashRef, posReaderSplashBucket, readPlatformSplash } from "./pos-reader-splash.js";
+import { posReaderSplashImageFacts } from "./pos-reader-splash-render.js";
+/*==========================================
+ * `/api/commerce/admin/reader-splash` (AGL-4048): the platform's default
+ * card reader start-up screen, for Staff → Reader start-up screen.
+ *
+ *   GET                       each family's screen, as metadata
+ *   GET  ?preview={family}    that family's image itself
+ *   POST upload    { family, contentType, dataBase64 }
+ *   POST remove    { family }
+ *   POST apply                put the current default on every store that
+ *                             uses it (the page calls it after a change)
+ *
+ * The artwork is designed separately and uploaded here; none is kept in
+ * the repository. Each image is checked against Stripe's rules for its
+ * family before it is stored: PNG or JPEG, under 2 MB, exactly the reader's
+ * screen. The S700/S710 screen is the one that turns the default on; the
+ * WisePOS E screen is drawn from it when staff upload none.
+ *
+ * Staff only. Reading is open to every staff role; every write is `super`,
+ * because it changes what every non-white-label store's readers show. Every
+ * write is an `adminAudit` row. The images live in storage under
+ * `platform/commerce/pos-reader-splash/`, which no client rule opens.
+ *=========================================*/ const WRITE_ROLES = [
+    'super'
+];
+/** How many stores one `apply` reaches; staff press it again for the rest. */ const APPLY_WINDOW = 400;
+const APPLY_CONCURRENCY = 4;
+const json = (body, status = 200)=>Response.json(body, {
+        status,
+        headers: {
+            'Cache-Control': 'no-store'
+        }
+    });
+function view(doc) {
+    var _doc_updatedAtMs;
+    return {
+        ready: platformSplashReady(doc),
+        families: POS_READER_SPLASH_FAMILIES.map((family)=>{
+            var _doc_families;
+            const image = (_doc_families = doc.families) == null ? void 0 : _doc_families[family.id];
+            return {
+                id: family.id,
+                label: family.label,
+                width: family.width,
+                height: family.height,
+                image: image ? {
+                    contentType: image.contentType,
+                    bytes: image.bytes,
+                    sha256: image.sha256,
+                    uploadedAtMs: image.uploadedAtMs
+                } : null
+            };
+        }),
+        updatedAtMs: (_doc_updatedAtMs = doc.updatedAtMs) != null ? _doc_updatedAtMs : null
+    };
+}
+async function upload(doc, input, uid) {
+    var _input_dataBase64;
+    var _doc_families;
+    const family = posReaderSplashFamily(input['family']);
+    if (!family) return {
+        error: 'Unknown reader family',
+        status: 400
+    };
+    const raw = String((_input_dataBase64 = input['dataBase64']) != null ? _input_dataBase64 : '');
+    // A base64 body is 4/3 of the file; anything longer cannot be under 2 MB.
+    if (!raw || raw.length > Math.ceil(POS_READER_SPLASH_MAX_BYTES * 4 / 3) + 4) {
+        return {
+            error: 'Use an image under 2 MB.',
+            status: 400
+        };
+    }
+    const body = Buffer.from(raw, 'base64');
+    const { loadSharp } = await import("./pos-reader-splash-server.js");
+    const facts = await posReaderSplashImageFacts(await loadSharp(), body);
+    if (!facts) return {
+        error: 'That image could not be read.',
+        status: 400
+    };
+    // The bytes decide the type, never the name or the browser's claim.
+    const problem = posReaderSplashImageProblem(_extends({}, facts, {
+        bytes: body.length
+    }), family);
+    if (problem) return {
+        error: problem,
+        status: 400
+    };
+    const sha256 = createHash('sha256').update(body).digest('hex');
+    const extension = facts.contentType === 'image/png' ? 'png' : 'jpg';
+    const storagePath = `platform/commerce/pos-reader-splash/${family.id}-${sha256.slice(0, 16)}.${extension}`;
+    await posReaderSplashBucket().file(storagePath).save(body, {
+        contentType: facts.contentType,
+        resumable: false
+    });
+    const previous = (_doc_families = doc.families) == null ? void 0 : _doc_families[family.id];
+    if ((previous == null ? void 0 : previous.storagePath) && previous.storagePath !== storagePath) {
+        await posReaderSplashBucket().file(previous.storagePath).delete().catch(()=>undefined);
+    }
+    return {
+        familyId: family.id,
+        image: {
+            storagePath,
+            sha256,
+            contentType: facts.contentType,
+            bytes: body.length,
+            uploadedAtMs: Date.now(),
+            uploadedBy: uid
+        }
+    };
+}
+/** Every store with a Location, its screen brought up to the current default. */ async function applyToEveryStore() {
+    const firestore = firebaseAdmin.app().firestore();
+    const platform = await readPlatformSplash();
+    const snapshot = await firestore.collectionGroup('terminal').limit(APPLY_WINDOW + 1).get();
+    const hostIds = snapshot.docs.filter((doc)=>doc.id === 'config' && doc.get('stripeLocationId')).map((doc)=>doc.ref.path.split('/')[1]).filter(Boolean);
+    const counts = {
+        applied: 0,
+        unchanged: 0,
+        failed: 0
+    };
+    const queue = hostIds.slice(0, APPLY_WINDOW);
+    await Promise.all(Array.from({
+        length: APPLY_CONCURRENCY
+    }, async ()=>{
+        for(let hostId = queue.shift(); hostId; hostId = queue.shift()){
+            const org = await ownerOrgOf(hostId);
+            const result = await applyPosReaderSplash(hostId, {
+                org,
+                platform
+            });
+            if (result.outcome === 'applied' || result.outcome === 'cleared') counts.applied += 1;
+            else if (result.outcome === 'failed') counts.failed += 1;
+            else counts.unchanged += 1;
+        }
+    }));
+    return _extends({}, counts, {
+        more: snapshot.docs.length > APPLY_WINDOW
+    });
+}
+async function handler(request) {
+    var _headers_authorization;
+    const { method, query, body, headers: rawHeaders } = await pluginRequestFromWeb(request);
+    const headers = rawHeaders;
+    const authorization = (_headers_authorization = headers.authorization) != null ? _headers_authorization : '';
+    const idToken = authorization.startsWith('Bearer ') ? authorization.slice('Bearer '.length) : undefined;
+    if (!idToken) return json({
+        error: 'Unauthenticated'
+    }, 401);
+    try {
+        var _decoded_staffRole, _input_action;
+        const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken);
+        if (!decoded.email_verified && !isImpersonationSession(decoded)) return emailUnverifiedResponse();
+        if (!decoded['staff']) return json({
+            error: 'Staff only'
+        }, 403);
+        // A missing role claim reads as the least one, never as super.
+        const role = String((_decoded_staffRole = decoded['staffRole']) != null ? _decoded_staffRole : 'support');
+        const firestore = firebaseAdmin.app().firestore();
+        const doc = await readPlatformSplash();
+        if (method === 'GET') {
+            var _ref;
+            const preview = String((_ref = query == null ? void 0 : query['preview']) != null ? _ref : '');
+            if (preview) {
+                var _doc_families;
+                const family = posReaderSplashFamily(preview);
+                const image = family ? (_doc_families = doc.families) == null ? void 0 : _doc_families[family.id] : undefined;
+                if (!image) return json({
+                    error: 'No image'
+                }, 404);
+                const [bytes] = await posReaderSplashBucket().file(image.storagePath).download();
+                return new Response(new Uint8Array(bytes), {
+                    status: 200,
+                    headers: {
+                        'Content-Type': image.contentType,
+                        'Cache-Control': 'no-store'
+                    }
+                });
+            }
+            return json(_extends({}, view(doc), {
+                canWrite: WRITE_ROLES.includes(role)
+            }));
+        }
+        if (method !== 'POST') return json({
+            error: 'Method not allowed'
+        }, 405);
+        if (!WRITE_ROLES.includes(role)) {
+            return json({
+                error: 'Changing the reader start-up screen requires the super staff role.'
+            }, 403);
+        }
+        const input = body != null ? body : {};
+        const action = String((_input_action = input['action']) != null ? _input_action : '');
+        const actor = {
+            actorUid: decoded.uid,
+            actorEmail: decoded.email ? String(decoded.email) : null
+        };
+        if (action === 'apply') return json(_extends({
+            ok: true
+        }, await applyToEveryStore()));
+        if (action === 'upload' || action === 'remove') {
+            var _ref1, _ref2;
+            var _doc_families_familyId, _doc_families1, _next_families_familyId, _next_families;
+            let next;
+            let familyId;
+            if (action === 'upload') {
+                var _doc_families2;
+                const outcome = await upload(doc, input, decoded.uid);
+                if ('error' in outcome) return json({
+                    error: outcome.error
+                }, outcome.status);
+                familyId = outcome.familyId;
+                next = {
+                    families: _extends({}, (_doc_families2 = doc.families) != null ? _doc_families2 : {}, {
+                        [familyId]: outcome.image
+                    }),
+                    updatedAtMs: Date.now()
+                };
+            } else {
+                var _doc_families3;
+                const family = posReaderSplashFamily(input['family']);
+                if (!family) return json({
+                    error: 'Unknown reader family'
+                }, 400);
+                familyId = family.id;
+                const families = _extends({}, (_doc_families3 = doc.families) != null ? _doc_families3 : {});
+                const previous = families[family.id];
+                delete families[family.id];
+                if (previous == null ? void 0 : previous.storagePath) {
+                    await posReaderSplashBucket().file(previous.storagePath).delete().catch(()=>undefined);
+                }
+                next = {
+                    families,
+                    updatedAtMs: Date.now()
+                };
+            }
+            await platformSplashRef().set(next);
+            await addAdminAudit(firestore, _extends({
+                action: `pos-reader-splash-${action}`
+            }, actor, {
+                scope: 'posReaderSplash',
+                target: `platformSettings/posReaderSplash`,
+                before: {
+                    family: familyId,
+                    sha256: (_ref1 = (_doc_families1 = doc.families) == null ? void 0 : (_doc_families_familyId = _doc_families1[familyId]) == null ? void 0 : _doc_families_familyId.sha256) != null ? _ref1 : null
+                },
+                after: {
+                    family: familyId,
+                    sha256: (_ref2 = (_next_families = next.families) == null ? void 0 : (_next_families_familyId = _next_families[familyId]) == null ? void 0 : _next_families_familyId.sha256) != null ? _ref2 : null
+                },
+                at: firebaseAdmin.firestore.FieldValue.serverTimestamp()
+            }));
+            return json(_extends({
+                ok: true
+            }, view(next), {
+                canWrite: true
+            }));
+        }
+        return json({
+            error: 'Unknown action'
+        }, 400);
+    } catch (error) {
+        const unauthenticated = invalidIdTokenResponse(error);
+        if (unauthenticated) return unauthenticated;
+        console.error('[pos-reader-splash-admin]', error);
+        return json({
+            error: 'The reader start-up screen could not be updated'
+        }, 500);
+    }
+}
+export { handler as posReaderSplashAdmin };
+
+//# sourceMappingURL=pos-reader-splash-admin.js.map

package/src/lib/server/pos-reader-splash-admin.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-reader-splash-admin.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { createHash } from 'node:crypto'\nimport { pluginRequestFromWeb } from '@aglyn/aglyn/server'\nimport { emailUnverifiedResponse, firebaseAdmin, isImpersonationSession } from '@aglyn/tenant-data-admin'\nimport { addAdminAudit } from '@aglyn/tenant-data-admin/server/admin-audit-write'\nimport { invalidIdTokenResponse } from '@aglyn/tenant-data-admin/server/id-token-refusal'\nimport {\n  POS_READER_SPLASH_FAMILIES,\n  POS_READER_SPLASH_MAX_BYTES,\n  posReaderSplashFamily,\n  posReaderSplashImageProblem,\n} from '../model/pos-reader-splash'\nimport {\n  applyPosReaderSplash,\n  ownerOrgOf,\n  platformSplashReady,\n  platformSplashRef,\n  posReaderSplashBucket,\n  readPlatformSplash,\n  type PlatformSplashDoc,\n  type PlatformSplashImage,\n} from './pos-reader-splash'\nimport { posReaderSplashImageFacts } from './pos-reader-splash-render'\n\n/*==========================================\n * `/api/commerce/admin/reader-splash` (AGL-4048): the platform's default\n * card reader start-up screen, for Staff → Reader start-up screen.\n *\n *   GET                       each family's screen, as metadata\n *   GET  ?preview={family}    that family's image itself\n *   POST upload    { family, contentType, dataBase64 }\n *   POST remove    { family }\n *   POST apply                put the current default on every store that\n *                             uses it (the page calls it after a change)\n *\n * The artwork is designed separately and uploaded here; none is kept in\n * the repository. Each image is checked against Stripe's rules for its\n * family before it is stored: PNG or JPEG, under 2 MB, exactly the reader's\n * screen. The S700/S710 screen is the one that turns the default on; the\n * WisePOS E screen is drawn from it when staff upload none.\n *\n * Staff only. Reading is open to every staff role; every write is `super`,\n * because it changes what every non-white-label store's readers show. Every\n * write is an `adminAudit` row. The images live in storage under\n * `platform/commerce/pos-reader-splash/`, which no client rule opens.\n *=========================================*/\n\nconst WRITE_ROLES = ['super']\n\n/** How many stores one `apply` reaches; staff press it again for the rest. */\nconst APPLY_WINDOW = 400\nconst APPLY_CONCURRENCY = 4\n\nconst json = (body: unknown, status = 200) =>\n  Response.json(body, { status, headers: { 'Cache-Control': 'no-store' } })\n\nfunction view(doc: PlatformSplashDoc) {\n  return {\n    ready: platformSplashReady(doc),\n    families: POS_READER_SPLASH_FAMILIES.map((family) => {\n      const image = doc.families?.[family.id]\n      return {\n        id: family.id,\n        label: family.label,\n        width: family.width,\n        height: family.height,\n        image: image\n          ? {\n              contentType: image.contentType,\n              bytes: image.bytes,\n              sha256: image.sha256,\n              uploadedAtMs: image.uploadedAtMs,\n            }\n          : null,\n      }\n    }),\n    updatedAtMs: doc.updatedAtMs ?? null,\n  }\n}\n\nexport type StaffReaderSplashView = ReturnType<typeof view>\n\nasync function upload(\n  doc: PlatformSplashDoc,\n  input: Record<string, unknown>,\n  uid: string,\n): Promise<{ error: string; status: number } | { image: PlatformSplashImage; familyId: string }> {\n  const family = posReaderSplashFamily(input['family'])\n  if (!family) return { error: 'Unknown reader family', status: 400 }\n  const raw = String(input['dataBase64'] ?? '')\n  // A base64 body is 4/3 of the file; anything longer cannot be under 2 MB.\n  if (!raw || raw.length > Math.ceil((POS_READER_SPLASH_MAX_BYTES * 4) / 3) + 4) {\n    return { error: 'Use an image under 2 MB.', status: 400 }\n  }\n  const body = Buffer.from(raw, 'base64')\n  const { loadSharp } = await import('./pos-reader-splash-server')\n  const facts = await posReaderSplashImageFacts((await loadSharp()) as any, body)\n  if (!facts) return { error: 'That image could not be read.', status: 400 }\n  // The bytes decide the type, never the name or the browser's claim.\n  const problem = posReaderSplashImageProblem({ ...facts, bytes: body.length }, family)\n  if (problem) return { error: problem, status: 400 }\n  const sha256 = createHash('sha256').update(body).digest('hex')\n  const extension = facts.contentType === 'image/png' ? 'png' : 'jpg'\n  const storagePath = `platform/commerce/pos-reader-splash/${family.id}-${sha256.slice(0, 16)}.${extension}`\n  await posReaderSplashBucket()\n    .file(storagePath)\n    .save(body, { contentType: facts.contentType, resumable: false })\n  const previous = doc.families?.[family.id]\n  if (previous?.storagePath && previous.storagePath !== storagePath) {\n    await posReaderSplashBucket().file(previous.storagePath).delete().catch(() => undefined)\n  }\n  return {\n    familyId: family.id,\n    image: {\n      storagePath,\n      sha256,\n      contentType: facts.contentType as PlatformSplashImage['contentType'],\n      bytes: body.length,\n      uploadedAtMs: Date.now(),\n      uploadedBy: uid,\n    },\n  }\n}\n\n/** Every store with a Location, its screen brought up to the current default. */\nasync function applyToEveryStore() {\n  const firestore = firebaseAdmin.app().firestore()\n  const platform = await readPlatformSplash()\n  const snapshot = await firestore.collectionGroup('terminal').limit(APPLY_WINDOW + 1).get()\n  const hostIds = (snapshot.docs as Array<{ id: string; ref: { path: string }; get: (field: string) => unknown }>)\n    .filter((doc) => doc.id === 'config' && doc.get('stripeLocationId'))\n    .map((doc) => doc.ref.path.split('/')[1])\n    .filter(Boolean)\n  const counts = { applied: 0, unchanged: 0, failed: 0 }\n  const queue = hostIds.slice(0, APPLY_WINDOW)\n  await Promise.all(\n    Array.from({ length: APPLY_CONCURRENCY }, async () => {\n      for (let hostId = queue.shift(); hostId; hostId = queue.shift()) {\n        const org = await ownerOrgOf(hostId)\n        const result = await applyPosReaderSplash(hostId, { org, platform })\n        if (result.outcome === 'applied' || result.outcome === 'cleared') counts.applied += 1\n        else if (result.outcome === 'failed') counts.failed += 1\n        else counts.unchanged += 1\n      }\n    }),\n  )\n  return { ...counts, more: snapshot.docs.length > APPLY_WINDOW }\n}\n\nasync function handler(request: Request): Promise<Response> {\n  const { method, query, body, headers: rawHeaders } = await pluginRequestFromWeb(request)\n  const headers = rawHeaders as Partial<Record<string, string>>\n  const authorization = headers.authorization ?? ''\n  const idToken = authorization.startsWith('Bearer ') ? authorization.slice('Bearer '.length) : undefined\n  if (!idToken) return json({ error: 'Unauthenticated' }, 401)\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    if (!decoded.email_verified && !isImpersonationSession(decoded)) return emailUnverifiedResponse()\n    if (!decoded['staff']) return json({ error: 'Staff only' }, 403)\n    // A missing role claim reads as the least one, never as super.\n    const role = String(decoded['staffRole'] ?? 'support')\n    const firestore = firebaseAdmin.app().firestore()\n    const doc = await readPlatformSplash()\n\n    if (method === 'GET') {\n      const preview = String(query?.['preview'] ?? '')\n      if (preview) {\n        const family = posReaderSplashFamily(preview)\n        const image = family ? doc.families?.[family.id] : undefined\n        if (!image) return json({ error: 'No image' }, 404)\n        const [bytes] = (await posReaderSplashBucket().file(image.storagePath).download()) as [Buffer]\n        return new Response(new Uint8Array(bytes), {\n          status: 200,\n          headers: { 'Content-Type': image.contentType, 'Cache-Control': 'no-store' },\n        })\n      }\n      return json({ ...view(doc), canWrite: WRITE_ROLES.includes(role) })\n    }\n\n    if (method !== 'POST') return json({ error: 'Method not allowed' }, 405)\n    if (!WRITE_ROLES.includes(role)) {\n      return json({ error: 'Changing the reader start-up screen requires the super staff role.' }, 403)\n    }\n    const input = (body ?? {}) as Record<string, unknown>\n    const action = String(input['action'] ?? '')\n    const actor = { actorUid: decoded.uid, actorEmail: decoded.email ? String(decoded.email) : null }\n\n    if (action === 'apply') return json({ ok: true, ...(await applyToEveryStore()) })\n\n    if (action === 'upload' || action === 'remove') {\n      let next: PlatformSplashDoc\n      let familyId: string\n      if (action === 'upload') {\n        const outcome = await upload(doc, input, decoded.uid)\n        if ('error' in outcome) return json({ error: outcome.error }, outcome.status)\n        familyId = outcome.familyId\n        next = { families: { ...(doc.families ?? {}), [familyId]: outcome.image }, updatedAtMs: Date.now() }\n      } else {\n        const family = posReaderSplashFamily(input['family'])\n        if (!family) return json({ error: 'Unknown reader family' }, 400)\n        familyId = family.id\n        const families = { ...(doc.families ?? {}) }\n        const previous = families[family.id]\n        delete families[family.id]\n        if (previous?.storagePath) {\n          await posReaderSplashBucket().file(previous.storagePath).delete().catch(() => undefined)\n        }\n        next = { families, updatedAtMs: Date.now() }\n      }\n      await platformSplashRef().set(next)\n      await addAdminAudit(firestore, {\n        action: `pos-reader-splash-${action}`,\n        ...actor,\n        scope: 'posReaderSplash',\n        target: `platformSettings/posReaderSplash`,\n        before: { family: familyId, sha256: doc.families?.[familyId as keyof typeof doc.families]?.sha256 ?? null },\n        after: { family: familyId, sha256: next.families?.[familyId as keyof typeof next.families]?.sha256 ?? null },\n        at: firebaseAdmin.firestore.FieldValue.serverTimestamp(),\n      })\n      return json({ ok: true, ...view(next), canWrite: true })\n    }\n    return json({ error: 'Unknown action' }, 400)\n  } catch (error) {\n    const unauthenticated = invalidIdTokenResponse(error)\n    if (unauthenticated) return unauthenticated\n    console.error('[pos-reader-splash-admin]', error)\n    return json({ error: 'The reader start-up screen could not be updated' }, 500)\n  }\n}\n\nexport { handler as posReaderSplashAdmin }\n"],"names":["createHash","pluginRequestFromWeb","emailUnverifiedResponse","firebaseAdmin","isImpersonationSession","addAdminAudit","invalidIdTokenResponse","POS_READER_SPLASH_FAMILIES","POS_READER_SPLASH_MAX_BYTES","posReaderSplashFamily","posReaderSplashImageProblem","applyPosReaderSplash","ownerOrgOf","platformSplashReady","platformSplashRef","posReaderSplashBucket","readPlatformSplash","posReaderSplashImageFacts","WRITE_ROLES","APPLY_WINDOW","APPLY_CONCURRENCY","json","body","status","Response","headers","view","doc","ready","families","map","family","image","id","label","width","height","contentType","bytes","sha256","uploadedAtMs","updatedAtMs","upload","input","uid","error","raw","String","length","Math","ceil","Buffer","from","loadSharp","facts","problem","update","digest","extension","storagePath","slice","file","save","resumable","previous","delete","catch","undefined","familyId","Date","now","uploadedBy","applyToEveryStore","firestore","app","platform","snapshot","collectionGroup","limit","get","hostIds","docs","filter","ref","path","split","Boolean","counts","applied","unchanged","failed","queue","Promise","all","Array","hostId","shift","org","result","outcome","more","handler","request","method","query","rawHeaders","authorization","idToken","startsWith","decoded","auth","verifyIdToken","email_verified","role","preview","download","Uint8Array","canWrite","includes","action","actor","actorUid","actorEmail","email","ok","next","set","scope","target","before","after","at","FieldValue","serverTimestamp","unauthenticated","console","posReaderSplashAdmin"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,UAAU,QAAQ,cAAa;AACxC,SAASC,oBAAoB,QAAQ,sBAAqB;AAC1D,SAASC,uBAAuB,EAAEC,aAAa,EAAEC,sBAAsB,QAAQ,2BAA0B;AACzG,SAASC,aAAa,QAAQ,oDAAmD;AACjF,SAASC,sBAAsB,QAAQ,mDAAkD;AACzF,SACEC,0BAA0B,EAC1BC,2BAA2B,EAC3BC,qBAAqB,EACrBC,2BAA2B,QACtB,gCAA4B;AACnC,SACEC,oBAAoB,EACpBC,UAAU,EACVC,mBAAmB,EACnBC,iBAAiB,EACjBC,qBAAqB,EACrBC,kBAAkB,QAGb,yBAAqB;AAC5B,SAASC,yBAAyB,QAAQ,gCAA4B;AAEtE;;;;;;;;;;;;;;;;;;;;;2CAqB2C,GAE3C,MAAMC,cAAc;IAAC;CAAQ;AAE7B,4EAA4E,GAC5E,MAAMC,eAAe;AACrB,MAAMC,oBAAoB;AAE1B,MAAMC,OAAO,CAACC,MAAeC,SAAS,GAAG,GACvCC,SAASH,IAAI,CAACC,MAAM;QAAEC;QAAQE,SAAS;YAAE,iBAAiB;QAAW;IAAE;AAEzE,SAASC,KAAKC,GAAsB;QAoBnBA;IAnBf,OAAO;QACLC,OAAOf,oBAAoBc;QAC3BE,UAAUtB,2BAA2BuB,GAAG,CAAC,CAACC;gBAC1BJ;YAAd,MAAMK,SAAQL,gBAAAA,IAAIE,QAAQ,qBAAZF,aAAc,CAACI,OAAOE,EAAE,CAAC;YACvC,OAAO;gBACLA,IAAIF,OAAOE,EAAE;gBACbC,OAAOH,OAAOG,KAAK;gBACnBC,OAAOJ,OAAOI,KAAK;gBACnBC,QAAQL,OAAOK,MAAM;gBACrBJ,OAAOA,QACH;oBACEK,aAAaL,MAAMK,WAAW;oBAC9BC,OAAON,MAAMM,KAAK;oBAClBC,QAAQP,MAAMO,MAAM;oBACpBC,cAAcR,MAAMQ,YAAY;gBAClC,IACA;YACN;QACF;QACAC,WAAW,GAAEd,mBAAAA,IAAIc,WAAW,YAAfd,mBAAmB;IAClC;AACF;AAIA,eAAee,OACbf,GAAsB,EACtBgB,KAA8B,EAC9BC,GAAW;QAIQD;QAkBFhB;IApBjB,MAAMI,SAAStB,sBAAsBkC,KAAK,CAAC,SAAS;IACpD,IAAI,CAACZ,QAAQ,OAAO;QAAEc,OAAO;QAAyBtB,QAAQ;IAAI;IAClE,MAAMuB,MAAMC,QAAOJ,oBAAAA,KAAK,CAAC,aAAa,YAAnBA,oBAAuB;IAC1C,0EAA0E;IAC1E,IAAI,CAACG,OAAOA,IAAIE,MAAM,GAAGC,KAAKC,IAAI,CAAC,AAAC1C,8BAA8B,IAAK,KAAK,GAAG;QAC7E,OAAO;YAAEqC,OAAO;YAA4BtB,QAAQ;QAAI;IAC1D;IACA,MAAMD,OAAO6B,OAAOC,IAAI,CAACN,KAAK;IAC9B,MAAM,EAAEO,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC;IACnC,MAAMC,QAAQ,MAAMrC,0BAA2B,MAAMoC,aAAqB/B;IAC1E,IAAI,CAACgC,OAAO,OAAO;QAAET,OAAO;QAAiCtB,QAAQ;IAAI;IACzE,oEAAoE;IACpE,MAAMgC,UAAU7C,4BAA4B,aAAK4C;QAAOhB,OAAOhB,KAAK0B,MAAM;QAAIjB;IAC9E,IAAIwB,SAAS,OAAO;QAAEV,OAAOU;QAAShC,QAAQ;IAAI;IAClD,MAAMgB,SAASvC,WAAW,UAAUwD,MAAM,CAAClC,MAAMmC,MAAM,CAAC;IACxD,MAAMC,YAAYJ,MAAMjB,WAAW,KAAK,cAAc,QAAQ;IAC9D,MAAMsB,cAAc,CAAC,oCAAoC,EAAE5B,OAAOE,EAAE,CAAC,CAAC,EAAEM,OAAOqB,KAAK,CAAC,GAAG,IAAI,CAAC,EAAEF,WAAW;IAC1G,MAAM3C,wBACH8C,IAAI,CAACF,aACLG,IAAI,CAACxC,MAAM;QAAEe,aAAaiB,MAAMjB,WAAW;QAAE0B,WAAW;IAAM;IACjE,MAAMC,YAAWrC,gBAAAA,IAAIE,QAAQ,qBAAZF,aAAc,CAACI,OAAOE,EAAE,CAAC;IAC1C,IAAI+B,CAAAA,4BAAAA,SAAUL,WAAW,KAAIK,SAASL,WAAW,KAAKA,aAAa;QACjE,MAAM5C,wBAAwB8C,IAAI,CAACG,SAASL,WAAW,EAAEM,MAAM,GAAGC,KAAK,CAAC,IAAMC;IAChF;IACA,OAAO;QACLC,UAAUrC,OAAOE,EAAE;QACnBD,OAAO;YACL2B;YACApB;YACAF,aAAaiB,MAAMjB,WAAW;YAC9BC,OAAOhB,KAAK0B,MAAM;YAClBR,cAAc6B,KAAKC,GAAG;YACtBC,YAAY3B;QACd;IACF;AACF;AAEA,+EAA+E,GAC/E,eAAe4B;IACb,MAAMC,YAAYtE,cAAcuE,GAAG,GAAGD,SAAS;IAC/C,MAAME,WAAW,MAAM3D;IACvB,MAAM4D,WAAW,MAAMH,UAAUI,eAAe,CAAC,YAAYC,KAAK,CAAC3D,eAAe,GAAG4D,GAAG;IACxF,MAAMC,UAAU,AAACJ,SAASK,IAAI,CAC3BC,MAAM,CAAC,CAACvD,MAAQA,IAAIM,EAAE,KAAK,YAAYN,IAAIoD,GAAG,CAAC,qBAC/CjD,GAAG,CAAC,CAACH,MAAQA,IAAIwD,GAAG,CAACC,IAAI,CAACC,KAAK,CAAC,IAAI,CAAC,EAAE,EACvCH,MAAM,CAACI;IACV,MAAMC,SAAS;QAAEC,SAAS;QAAGC,WAAW;QAAGC,QAAQ;IAAE;IACrD,MAAMC,QAAQX,QAAQpB,KAAK,CAAC,GAAGzC;IAC/B,MAAMyE,QAAQC,GAAG,CACfC,MAAM1C,IAAI,CAAC;QAAEJ,QAAQ5B;IAAkB,GAAG;QACxC,IAAK,IAAI2E,SAASJ,MAAMK,KAAK,IAAID,QAAQA,SAASJ,MAAMK,KAAK,GAAI;YAC/D,MAAMC,MAAM,MAAMrF,WAAWmF;YAC7B,MAAMG,SAAS,MAAMvF,qBAAqBoF,QAAQ;gBAAEE;gBAAKtB;YAAS;YAClE,IAAIuB,OAAOC,OAAO,KAAK,aAAaD,OAAOC,OAAO,KAAK,WAAWZ,OAAOC,OAAO,IAAI;iBAC/E,IAAIU,OAAOC,OAAO,KAAK,UAAUZ,OAAOG,MAAM,IAAI;iBAClDH,OAAOE,SAAS,IAAI;QAC3B;IACF;IAEF,OAAO,aAAKF;QAAQa,MAAMxB,SAASK,IAAI,CAACjC,MAAM,GAAG7B;;AACnD;AAEA,eAAekF,QAAQC,OAAgB;QAGf7E;IAFtB,MAAM,EAAE8E,MAAM,EAAEC,KAAK,EAAElF,IAAI,EAAEG,SAASgF,UAAU,EAAE,GAAG,MAAMxG,qBAAqBqG;IAChF,MAAM7E,UAAUgF;IAChB,MAAMC,iBAAgBjF,yBAAAA,QAAQiF,aAAa,YAArBjF,yBAAyB;IAC/C,MAAMkF,UAAUD,cAAcE,UAAU,CAAC,aAAaF,cAAc9C,KAAK,CAAC,UAAUZ,MAAM,IAAImB;IAC9F,IAAI,CAACwC,SAAS,OAAOtF,KAAK;QAAEwB,OAAO;IAAkB,GAAG;IAExD,IAAI;YAKkBgE,oBAwBElE;QA5BtB,MAAMkE,UAAU,MAAM1G,cAAcuE,GAAG,GAAGoC,IAAI,GAAGC,aAAa,CAACJ;QAC/D,IAAI,CAACE,QAAQG,cAAc,IAAI,CAAC5G,uBAAuByG,UAAU,OAAO3G;QACxE,IAAI,CAAC2G,OAAO,CAAC,QAAQ,EAAE,OAAOxF,KAAK;YAAEwB,OAAO;QAAa,GAAG;QAC5D,+DAA+D;QAC/D,MAAMoE,OAAOlE,QAAO8D,qBAAAA,OAAO,CAAC,YAAY,YAApBA,qBAAwB;QAC5C,MAAMpC,YAAYtE,cAAcuE,GAAG,GAAGD,SAAS;QAC/C,MAAM9C,MAAM,MAAMX;QAElB,IAAIuF,WAAW,OAAO;;YACpB,MAAMW,UAAUnE,eAAOyD,yBAAAA,KAAO,CAAC,UAAU,mBAAI;YAC7C,IAAIU,SAAS;oBAEYvF;gBADvB,MAAMI,SAAStB,sBAAsByG;gBACrC,MAAMlF,QAAQD,UAASJ,gBAAAA,IAAIE,QAAQ,qBAAZF,aAAc,CAACI,OAAOE,EAAE,CAAC,GAAGkC;gBACnD,IAAI,CAACnC,OAAO,OAAOX,KAAK;oBAAEwB,OAAO;gBAAW,GAAG;gBAC/C,MAAM,CAACP,MAAM,GAAI,MAAMvB,wBAAwB8C,IAAI,CAAC7B,MAAM2B,WAAW,EAAEwD,QAAQ;gBAC/E,OAAO,IAAI3F,SAAS,IAAI4F,WAAW9E,QAAQ;oBACzCf,QAAQ;oBACRE,SAAS;wBAAE,gBAAgBO,MAAMK,WAAW;wBAAE,iBAAiB;oBAAW;gBAC5E;YACF;YACA,OAAOhB,KAAK,aAAKK,KAAKC;gBAAM0F,UAAUnG,YAAYoG,QAAQ,CAACL;;QAC7D;QAEA,IAAIV,WAAW,QAAQ,OAAOlF,KAAK;YAAEwB,OAAO;QAAqB,GAAG;QACpE,IAAI,CAAC3B,YAAYoG,QAAQ,CAACL,OAAO;YAC/B,OAAO5F,KAAK;gBAAEwB,OAAO;YAAqE,GAAG;QAC/F;QACA,MAAMF,QAASrB,eAAAA,OAAQ,CAAC;QACxB,MAAMiG,SAASxE,QAAOJ,gBAAAA,KAAK,CAAC,SAAS,YAAfA,gBAAmB;QACzC,MAAM6E,QAAQ;YAAEC,UAAUZ,QAAQjE,GAAG;YAAE8E,YAAYb,QAAQc,KAAK,GAAG5E,OAAO8D,QAAQc,KAAK,IAAI;QAAK;QAEhG,IAAIJ,WAAW,SAAS,OAAOlG,KAAK;YAAEuG,IAAI;WAAU,MAAMpD;QAE1D,IAAI+C,WAAW,YAAYA,WAAW,UAAU;;gBA0BR5F,wBAAAA,gBACDkG,yBAAAA;YA1BrC,IAAIA;YACJ,IAAIzD;YACJ,IAAImD,WAAW,UAAU;oBAIE5F;gBAHzB,MAAMwE,UAAU,MAAMzD,OAAOf,KAAKgB,OAAOkE,QAAQjE,GAAG;gBACpD,IAAI,WAAWuD,SAAS,OAAO9E,KAAK;oBAAEwB,OAAOsD,QAAQtD,KAAK;gBAAC,GAAGsD,QAAQ5E,MAAM;gBAC5E6C,WAAW+B,QAAQ/B,QAAQ;gBAC3ByD,OAAO;oBAAEhG,UAAU,cAAMF,iBAAAA,IAAIE,QAAQ,YAAZF,iBAAgB,CAAC;wBAAI,CAACyC,SAAS,EAAE+B,QAAQnE,KAAK;;oBAAIS,aAAa4B,KAAKC,GAAG;gBAAG;YACrG,OAAO;oBAIkB3C;gBAHvB,MAAMI,SAAStB,sBAAsBkC,KAAK,CAAC,SAAS;gBACpD,IAAI,CAACZ,QAAQ,OAAOV,KAAK;oBAAEwB,OAAO;gBAAwB,GAAG;gBAC7DuB,WAAWrC,OAAOE,EAAE;gBACpB,MAAMJ,WAAW,cAAMF,iBAAAA,IAAIE,QAAQ,YAAZF,iBAAgB,CAAC;gBACxC,MAAMqC,WAAWnC,QAAQ,CAACE,OAAOE,EAAE,CAAC;gBACpC,OAAOJ,QAAQ,CAACE,OAAOE,EAAE,CAAC;gBAC1B,IAAI+B,4BAAAA,SAAUL,WAAW,EAAE;oBACzB,MAAM5C,wBAAwB8C,IAAI,CAACG,SAASL,WAAW,EAAEM,MAAM,GAAGC,KAAK,CAAC,IAAMC;gBAChF;gBACA0D,OAAO;oBAAEhG;oBAAUY,aAAa4B,KAAKC,GAAG;gBAAG;YAC7C;YACA,MAAMxD,oBAAoBgH,GAAG,CAACD;YAC9B,MAAMxH,cAAcoE,WAAW;gBAC7B8C,QAAQ,CAAC,kBAAkB,EAAEA,QAAQ;eAClCC;gBACHO,OAAO;gBACPC,QAAQ,CAAC,gCAAgC,CAAC;gBAC1CC,QAAQ;oBAAElG,QAAQqC;oBAAU7B,MAAM,YAAEZ,iBAAAA,IAAIE,QAAQ,sBAAZF,yBAAAA,cAAc,CAACyC,SAAsC,qBAArDzC,uBAAuDY,MAAM,oBAAI;gBAAK;gBAC1G2F,OAAO;oBAAEnG,QAAQqC;oBAAU7B,MAAM,YAAEsF,iBAAAA,KAAKhG,QAAQ,sBAAbgG,0BAAAA,cAAe,CAACzD,SAAuC,qBAAvDyD,wBAAyDtF,MAAM,oBAAI;gBAAK;gBAC3G4F,IAAIhI,cAAcsE,SAAS,CAAC2D,UAAU,CAACC,eAAe;;YAExD,OAAOhH,KAAK;gBAAEuG,IAAI;eAASlG,KAAKmG;gBAAOR,UAAU;;QACnD;QACA,OAAOhG,KAAK;YAAEwB,OAAO;QAAiB,GAAG;IAC3C,EAAE,OAAOA,OAAO;QACd,MAAMyF,kBAAkBhI,uBAAuBuC;QAC/C,IAAIyF,iBAAiB,OAAOA;QAC5BC,QAAQ1F,KAAK,CAAC,6BAA6BA;QAC3C,OAAOxB,KAAK;YAAEwB,OAAO;QAAkD,GAAG;IAC5E;AACF;AAEA,SAASwD,WAAWmC,oBAAoB,GAAE"}

package/src/lib/server/pos-reader-splash-render.d.ts

@@ -0,0 +1,40 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { Sharp, SharpOptions } from 'sharp';
+import { type PosReaderSplashFamily } from '../model/pos-reader-splash';
+type SharpFactory = (input?: Buffer | SharpOptions, options?: SharpOptions) => Sharp;
+export type PosReaderSplashRenderMode = 'artwork' | 'logo';
+export interface RenderedPosReaderSplash {
+    body: Buffer;
+    contentType: 'image/png' | 'image/jpeg';
+}
+export declare class PosReaderSplashRenderError extends Error {
+}
+/** One reader family's start-up screen from `source`. */
+export declare function renderPosReaderSplash(options: {
+    source: Buffer;
+    family: PosReaderSplashFamily;
+    mode: PosReaderSplashRenderMode;
+    sharp: SharpFactory;
+}): Promise<RenderedPosReaderSplash>;
+/** An image's format and size, read without decoding its pixels. */
+export declare function posReaderSplashImageFacts(sharp: SharpFactory, body: Buffer): Promise<{
+    contentType: string;
+    width: number;
+    height: number;
+} | null>;
+export {};

package/src/lib/server/pos-reader-splash-render.js

@@ -0,0 +1,138 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { _ as _extends } from "@swc/helpers/_/_extends";
+import { POS_READER_SPLASH_MAX_BYTES, posReaderSplashImageProblem } from "../model/pos-reader-splash.js";
+/** A source whose decoded pixels exceed this is refused rather than decoded. */ const MAX_INPUT_PIXELS = 50000000;
+/** The logo's box, as a share of the screen. */ const LOGO_BOX = {
+    width: 0.6,
+    height: 0.3
+};
+/** The opaque ground a logo sits on. */ const LOGO_GROUND = {
+    r: 255,
+    g: 255,
+    b: 255,
+    alpha: 1
+};
+/** JPEG qualities tried, best first, when a PNG is too large for Stripe. */ const JPEG_QUALITIES = [
+    90,
+    82,
+    74,
+    66
+];
+export class PosReaderSplashRenderError extends Error {
+}
+/** Decoding options; an SVG is rasterized at a density sharp at `target`. */ async function decodeOptions(sharp, source, target) {
+    var _meta_width, _meta_height;
+    const base = {
+        limitInputPixels: MAX_INPUT_PIXELS,
+        failOn: 'error'
+    };
+    const meta = await sharp(source, base).metadata();
+    if (meta.format !== 'svg') return base;
+    const longest = Math.max((_meta_width = meta.width) != null ? _meta_width : 0, (_meta_height = meta.height) != null ? _meta_height : 0);
+    if (!longest) return base;
+    return _extends({}, base, {
+        density: Math.min(2400, Math.max(1, Math.ceil(72 * target / longest)))
+    });
+}
+async function drawn(sharp, source, family, mode) {
+    if (mode === 'artwork') {
+        const options = await decodeOptions(sharp, source, family.height);
+        return sharp(source, options).rotate().resize(family.width, family.height, {
+            fit: 'cover'
+        }).flatten({
+            background: LOGO_GROUND
+        }).png().toBuffer();
+    }
+    const boxWidth = Math.round(family.width * LOGO_BOX.width);
+    const boxHeight = Math.round(family.height * LOGO_BOX.height);
+    const options = await decodeOptions(sharp, source, Math.max(boxWidth, boxHeight));
+    const mark = await sharp(source, options).rotate().resize(boxWidth, boxHeight, {
+        fit: 'inside'
+    }).png().toBuffer();
+    const composed = await sharp({
+        create: {
+            width: family.width,
+            height: family.height,
+            channels: 4,
+            background: LOGO_GROUND
+        }
+    }).composite([
+        {
+            input: mark,
+            gravity: 'center'
+        }
+    ]).png().toBuffer();
+    // A second pass: sharp flattens before it composites within one pipeline,
+    // and the screen has no use for an alpha channel.
+    return sharp(composed).flatten({
+        background: LOGO_GROUND
+    }).png().toBuffer();
+}
+/** One reader family's start-up screen from `source`. */ export async function renderPosReaderSplash(options) {
+    var _meta_width, _meta_height;
+    const { source, family, mode, sharp } = options;
+    let png;
+    try {
+        png = await drawn(sharp, source, family, mode);
+    } catch (unused) {
+        throw new PosReaderSplashRenderError('That image could not be read.');
+    }
+    let rendered = {
+        body: png,
+        contentType: 'image/png'
+    };
+    if (png.length >= POS_READER_SPLASH_MAX_BYTES) {
+        for (const quality of JPEG_QUALITIES){
+            const body = await sharp(png).jpeg({
+                quality,
+                mozjpeg: true
+            }).toBuffer();
+            rendered = {
+                body,
+                contentType: 'image/jpeg'
+            };
+            if (body.length < POS_READER_SPLASH_MAX_BYTES) break;
+        }
+    }
+    const meta = await sharp(rendered.body).metadata();
+    const problem = posReaderSplashImageProblem({
+        contentType: rendered.contentType,
+        bytes: rendered.body.length,
+        width: (_meta_width = meta.width) != null ? _meta_width : 0,
+        height: (_meta_height = meta.height) != null ? _meta_height : 0
+    }, family);
+    if (problem) throw new PosReaderSplashRenderError(problem);
+    return rendered;
+}
+/** An image's format and size, read without decoding its pixels. */ export async function posReaderSplashImageFacts(sharp, body) {
+    try {
+        var _meta_width, _meta_height;
+        const meta = await sharp(body, {
+            limitInputPixels: MAX_INPUT_PIXELS
+        }).metadata();
+        const contentType = meta.format === 'png' ? 'image/png' : meta.format === 'jpeg' ? 'image/jpeg' : meta.format === 'webp' ? 'image/webp' : '';
+        return {
+            contentType,
+            width: (_meta_width = meta.width) != null ? _meta_width : 0,
+            height: (_meta_height = meta.height) != null ? _meta_height : 0
+        };
+    } catch (unused) {
+        return null;
+    }
+}
+
+//# sourceMappingURL=pos-reader-splash-render.js.map

package/src/lib/server/pos-reader-splash-render.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-reader-splash-render.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { Sharp, SharpOptions } from 'sharp'\nimport {\n  POS_READER_SPLASH_MAX_BYTES,\n  posReaderSplashImageProblem,\n  type PosReaderSplashFamily,\n} from '../model/pos-reader-splash'\n\n/*==========================================\n * Draws a reader's start-up screen (AGL-4048) at the exact size Stripe asks\n * for, from either:\n *\n *   - `artwork`  a full-screen portrait image, scaled to cover the screen\n *                (a 9:16 image covers both readers' screens whole);\n *   - `logo`     a logo, fitted inside the middle of the screen on an opaque\n *                white ground, never stretched.\n *\n * The logo's box is 60% of the width and 30% of the height: on a 1080-wide\n * portrait screen a square logo comes out 648 px, and a wide wordmark keeps\n * a margin either side. White is the ground the approved workspace-logo\n * standard sets (a square logo on an opaque white plate), so the same logo\n * reads the same on a reader as in the apps.\n *\n * The result is PNG, the lossless choice for flat artwork; a photo that\n * comes out at 2 MB or more is re-encoded as JPEG until it fits, and every\n * screen is checked against Stripe's rules before it is handed back.\n *=========================================*/\n\ntype SharpFactory = (input?: Buffer | SharpOptions, options?: SharpOptions) => Sharp\n\nexport type PosReaderSplashRenderMode = 'artwork' | 'logo'\n\n/** A source whose decoded pixels exceed this is refused rather than decoded. */\nconst MAX_INPUT_PIXELS = 50_000_000\n\n/** The logo's box, as a share of the screen. */\nconst LOGO_BOX = { width: 0.6, height: 0.3 } as const\n\n/** The opaque ground a logo sits on. */\nconst LOGO_GROUND = { r: 255, g: 255, b: 255, alpha: 1 } as const\n\n/** JPEG qualities tried, best first, when a PNG is too large for Stripe. */\nconst JPEG_QUALITIES = [90, 82, 74, 66] as const\n\nexport interface RenderedPosReaderSplash {\n  body: Buffer\n  contentType: 'image/png' | 'image/jpeg'\n}\n\nexport class PosReaderSplashRenderError extends Error {}\n\n/** Decoding options; an SVG is rasterized at a density sharp at `target`. */\nasync function decodeOptions(sharp: SharpFactory, source: Buffer, target: number): Promise<SharpOptions> {\n  const base: SharpOptions = { limitInputPixels: MAX_INPUT_PIXELS, failOn: 'error' }\n  const meta = await sharp(source, base).metadata()\n  if (meta.format !== 'svg') return base\n  const longest = Math.max(meta.width ?? 0, meta.height ?? 0)\n  if (!longest) return base\n  return { ...base, density: Math.min(2400, Math.max(1, Math.ceil((72 * target) / longest))) }\n}\n\nasync function drawn(\n  sharp: SharpFactory,\n  source: Buffer,\n  family: PosReaderSplashFamily,\n  mode: PosReaderSplashRenderMode,\n): Promise<Buffer> {\n  if (mode === 'artwork') {\n    const options = await decodeOptions(sharp, source, family.height)\n    return sharp(source, options)\n      .rotate()\n      .resize(family.width, family.height, { fit: 'cover' })\n      .flatten({ background: LOGO_GROUND })\n      .png()\n      .toBuffer()\n  }\n  const boxWidth = Math.round(family.width * LOGO_BOX.width)\n  const boxHeight = Math.round(family.height * LOGO_BOX.height)\n  const options = await decodeOptions(sharp, source, Math.max(boxWidth, boxHeight))\n  const mark = await sharp(source, options)\n    .rotate()\n    .resize(boxWidth, boxHeight, { fit: 'inside' })\n    .png()\n    .toBuffer()\n  const composed = await sharp({\n    create: { width: family.width, height: family.height, channels: 4, background: LOGO_GROUND },\n  })\n    .composite([{ input: mark, gravity: 'center' }])\n    .png()\n    .toBuffer()\n  // A second pass: sharp flattens before it composites within one pipeline,\n  // and the screen has no use for an alpha channel.\n  return sharp(composed).flatten({ background: LOGO_GROUND }).png().toBuffer()\n}\n\n/** One reader family's start-up screen from `source`. */\nexport async function renderPosReaderSplash(options: {\n  source: Buffer\n  family: PosReaderSplashFamily\n  mode: PosReaderSplashRenderMode\n  sharp: SharpFactory\n}): Promise<RenderedPosReaderSplash> {\n  const { source, family, mode, sharp } = options\n  let png: Buffer\n  try {\n    png = await drawn(sharp, source, family, mode)\n  } catch {\n    throw new PosReaderSplashRenderError('That image could not be read.')\n  }\n  let rendered: RenderedPosReaderSplash = { body: png, contentType: 'image/png' }\n  if (png.length >= POS_READER_SPLASH_MAX_BYTES) {\n    for (const quality of JPEG_QUALITIES) {\n      const body = await sharp(png).jpeg({ quality, mozjpeg: true }).toBuffer()\n      rendered = { body, contentType: 'image/jpeg' }\n      if (body.length < POS_READER_SPLASH_MAX_BYTES) break\n    }\n  }\n  const meta = await sharp(rendered.body).metadata()\n  const problem = posReaderSplashImageProblem(\n    {\n      contentType: rendered.contentType,\n      bytes: rendered.body.length,\n      width: meta.width ?? 0,\n      height: meta.height ?? 0,\n    },\n    family,\n  )\n  if (problem) throw new PosReaderSplashRenderError(problem)\n  return rendered\n}\n\n/** An image's format and size, read without decoding its pixels. */\nexport async function posReaderSplashImageFacts(\n  sharp: SharpFactory,\n  body: Buffer,\n): Promise<{ contentType: string; width: number; height: number } | null> {\n  try {\n    const meta = await sharp(body, { limitInputPixels: MAX_INPUT_PIXELS }).metadata()\n    const contentType =\n      meta.format === 'png' ? 'image/png' : meta.format === 'jpeg' ? 'image/jpeg' : meta.format === 'webp' ? 'image/webp' : ''\n    return { contentType, width: meta.width ?? 0, height: meta.height ?? 0 }\n  } catch {\n    return null\n  }\n}\n"],"names":["POS_READER_SPLASH_MAX_BYTES","posReaderSplashImageProblem","MAX_INPUT_PIXELS","LOGO_BOX","width","height","LOGO_GROUND","r","g","b","alpha","JPEG_QUALITIES","PosReaderSplashRenderError","Error","decodeOptions","sharp","source","target","meta","base","limitInputPixels","failOn","metadata","format","longest","Math","max","density","min","ceil","drawn","family","mode","options","rotate","resize","fit","flatten","background","png","toBuffer","boxWidth","round","boxHeight","mark","composed","create","channels","composite","input","gravity","renderPosReaderSplash","rendered","body","contentType","length","quality","jpeg","mozjpeg","problem","bytes","posReaderSplashImageFacts"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,SACEA,2BAA2B,EAC3BC,2BAA2B,QAEtB,gCAA4B;AA0BnC,8EAA8E,GAC9E,MAAMC,mBAAmB;AAEzB,8CAA8C,GAC9C,MAAMC,WAAW;IAAEC,OAAO;IAAKC,QAAQ;AAAI;AAE3C,sCAAsC,GACtC,MAAMC,cAAc;IAAEC,GAAG;IAAKC,GAAG;IAAKC,GAAG;IAAKC,OAAO;AAAE;AAEvD,0EAA0E,GAC1E,MAAMC,iBAAiB;IAAC;IAAI;IAAI;IAAI;CAAG;AAOvC,OAAO,MAAMC,mCAAmCC;AAAO;AAEvD,2EAA2E,GAC3E,eAAeC,cAAcC,KAAmB,EAAEC,MAAc,EAAEC,MAAc;QAIrDC,aAAiBA;IAH1C,MAAMC,OAAqB;QAAEC,kBAAkBlB;QAAkBmB,QAAQ;IAAQ;IACjF,MAAMH,OAAO,MAAMH,MAAMC,QAAQG,MAAMG,QAAQ;IAC/C,IAAIJ,KAAKK,MAAM,KAAK,OAAO,OAAOJ;IAClC,MAAMK,UAAUC,KAAKC,GAAG,EAACR,cAAAA,KAAKd,KAAK,YAAVc,cAAc,IAAGA,eAAAA,KAAKb,MAAM,YAAXa,eAAe;IACzD,IAAI,CAACM,SAAS,OAAOL;IACrB,OAAO,aAAKA;QAAMQ,SAASF,KAAKG,GAAG,CAAC,MAAMH,KAAKC,GAAG,CAAC,GAAGD,KAAKI,IAAI,CAAC,AAAC,KAAKZ,SAAUO;;AAClF;AAEA,eAAeM,MACbf,KAAmB,EACnBC,MAAc,EACde,MAA6B,EAC7BC,IAA+B;IAE/B,IAAIA,SAAS,WAAW;QACtB,MAAMC,UAAU,MAAMnB,cAAcC,OAAOC,QAAQe,OAAO1B,MAAM;QAChE,OAAOU,MAAMC,QAAQiB,SAClBC,MAAM,GACNC,MAAM,CAACJ,OAAO3B,KAAK,EAAE2B,OAAO1B,MAAM,EAAE;YAAE+B,KAAK;QAAQ,GACnDC,OAAO,CAAC;YAAEC,YAAYhC;QAAY,GAClCiC,GAAG,GACHC,QAAQ;IACb;IACA,MAAMC,WAAWhB,KAAKiB,KAAK,CAACX,OAAO3B,KAAK,GAAGD,SAASC,KAAK;IACzD,MAAMuC,YAAYlB,KAAKiB,KAAK,CAACX,OAAO1B,MAAM,GAAGF,SAASE,MAAM;IAC5D,MAAM4B,UAAU,MAAMnB,cAAcC,OAAOC,QAAQS,KAAKC,GAAG,CAACe,UAAUE;IACtE,MAAMC,OAAO,MAAM7B,MAAMC,QAAQiB,SAC9BC,MAAM,GACNC,MAAM,CAACM,UAAUE,WAAW;QAAEP,KAAK;IAAS,GAC5CG,GAAG,GACHC,QAAQ;IACX,MAAMK,WAAW,MAAM9B,MAAM;QAC3B+B,QAAQ;YAAE1C,OAAO2B,OAAO3B,KAAK;YAAEC,QAAQ0B,OAAO1B,MAAM;YAAE0C,UAAU;YAAGT,YAAYhC;QAAY;IAC7F,GACG0C,SAAS,CAAC;QAAC;YAAEC,OAAOL;YAAMM,SAAS;QAAS;KAAE,EAC9CX,GAAG,GACHC,QAAQ;IACX,0EAA0E;IAC1E,kDAAkD;IAClD,OAAOzB,MAAM8B,UAAUR,OAAO,CAAC;QAAEC,YAAYhC;IAAY,GAAGiC,GAAG,GAAGC,QAAQ;AAC5E;AAEA,uDAAuD,GACvD,OAAO,eAAeW,sBAAsBlB,OAK3C;QAqBYf,aACCA;IArBZ,MAAM,EAAEF,MAAM,EAAEe,MAAM,EAAEC,IAAI,EAAEjB,KAAK,EAAE,GAAGkB;IACxC,IAAIM;IACJ,IAAI;QACFA,MAAM,MAAMT,MAAMf,OAAOC,QAAQe,QAAQC;IAC3C,EAAE,eAAM;QACN,MAAM,IAAIpB,2BAA2B;IACvC;IACA,IAAIwC,WAAoC;QAAEC,MAAMd;QAAKe,aAAa;IAAY;IAC9E,IAAIf,IAAIgB,MAAM,IAAIvD,6BAA6B;QAC7C,KAAK,MAAMwD,WAAW7C,eAAgB;YACpC,MAAM0C,OAAO,MAAMtC,MAAMwB,KAAKkB,IAAI,CAAC;gBAAED;gBAASE,SAAS;YAAK,GAAGlB,QAAQ;YACvEY,WAAW;gBAAEC;gBAAMC,aAAa;YAAa;YAC7C,IAAID,KAAKE,MAAM,GAAGvD,6BAA6B;QACjD;IACF;IACA,MAAMkB,OAAO,MAAMH,MAAMqC,SAASC,IAAI,EAAE/B,QAAQ;IAChD,MAAMqC,UAAU1D,4BACd;QACEqD,aAAaF,SAASE,WAAW;QACjCM,OAAOR,SAASC,IAAI,CAACE,MAAM;QAC3BnD,KAAK,GAAEc,cAAAA,KAAKd,KAAK,YAAVc,cAAc;QACrBb,MAAM,GAAEa,eAAAA,KAAKb,MAAM,YAAXa,eAAe;IACzB,GACAa;IAEF,IAAI4B,SAAS,MAAM,IAAI/C,2BAA2B+C;IAClD,OAAOP;AACT;AAEA,kEAAkE,GAClE,OAAO,eAAeS,0BACpB9C,KAAmB,EACnBsC,IAAY;IAEZ,IAAI;YAI2BnC,aAAyBA;QAHtD,MAAMA,OAAO,MAAMH,MAAMsC,MAAM;YAAEjC,kBAAkBlB;QAAiB,GAAGoB,QAAQ;QAC/E,MAAMgC,cACJpC,KAAKK,MAAM,KAAK,QAAQ,cAAcL,KAAKK,MAAM,KAAK,SAAS,eAAeL,KAAKK,MAAM,KAAK,SAAS,eAAe;QACxH,OAAO;YAAE+B;YAAalD,KAAK,GAAEc,cAAAA,KAAKd,KAAK,YAAVc,cAAc;YAAGb,MAAM,GAAEa,eAAAA,KAAKb,MAAM,YAAXa,eAAe;QAAE;IACzE,EAAE,eAAM;QACN,OAAO;IACT;AACF"}

package/src/lib/server/pos-reader-splash-server.d.ts

@@ -0,0 +1,32 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * The server helpers the card reader start-up screen (AGL-4048) loads only
+ * when it draws or reads an image: the media CDN's block, a media asset's
+ * storage path, `sharp`, and the pinned fetch for an outside logo address.
+ *
+ * Loaded by RELATIVE path from `pos-reader-splash.ts` and
+ * `pos-reader-splash-admin.ts`, never by importing `@aglyn/tenant-data-admin`
+ * lazily: a workspace lib `import()`ed by its package specifier is lazy-loaded
+ * everywhere as far as nx is concerned, and every static import of it across
+ * this plugin would then fail the module boundary rule
+ * (`ai-media-asset-server.ts` in the AI plugin is the same arrangement).
+ */
+export { mediaStoragePathInScope } from '@aglyn/tenant-data-admin/server/media-storage-path';
+export { loadSharp } from '@aglyn/tenant-data-admin/server/media-variants';
+export { mediaCdnServeBlock } from '@aglyn/tenant-data-admin/server/serve-media-cdn';
+export { createPinnedDispatcher, resolvePublicIp } from '@aglyn/tenant-data-admin/server/serve-plugin-fetch';

package/src/lib/server/pos-reader-splash-server.js

@@ -0,0 +1,32 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * The server helpers the card reader start-up screen (AGL-4048) loads only
+ * when it draws or reads an image: the media CDN's block, a media asset's
+ * storage path, `sharp`, and the pinned fetch for an outside logo address.
+ *
+ * Loaded by RELATIVE path from `pos-reader-splash.ts` and
+ * `pos-reader-splash-admin.ts`, never by importing `@aglyn/tenant-data-admin`
+ * lazily: a workspace lib `import()`ed by its package specifier is lazy-loaded
+ * everywhere as far as nx is concerned, and every static import of it across
+ * this plugin would then fail the module boundary rule
+ * (`ai-media-asset-server.ts` in the AI plugin is the same arrangement).
+ */ export { mediaStoragePathInScope } from "@aglyn/tenant-data-admin/server/media-storage-path";
+export { loadSharp } from "@aglyn/tenant-data-admin/server/media-variants";
+export { mediaCdnServeBlock } from "@aglyn/tenant-data-admin/server/serve-media-cdn";
+export { createPinnedDispatcher, resolvePublicIp } from "@aglyn/tenant-data-admin/server/serve-plugin-fetch";
+
+//# sourceMappingURL=pos-reader-splash-server.js.map

package/src/lib/server/pos-reader-splash-server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-reader-splash-server.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The server helpers the card reader start-up screen (AGL-4048) loads only\n * when it draws or reads an image: the media CDN's block, a media asset's\n * storage path, `sharp`, and the pinned fetch for an outside logo address.\n *\n * Loaded by RELATIVE path from `pos-reader-splash.ts` and\n * `pos-reader-splash-admin.ts`, never by importing `@aglyn/tenant-data-admin`\n * lazily: a workspace lib `import()`ed by its package specifier is lazy-loaded\n * everywhere as far as nx is concerned, and every static import of it across\n * this plugin would then fail the module boundary rule\n * (`ai-media-asset-server.ts` in the AI plugin is the same arrangement).\n */\nexport { mediaStoragePathInScope } from '@aglyn/tenant-data-admin/server/media-storage-path'\nexport { loadSharp } from '@aglyn/tenant-data-admin/server/media-variants'\nexport { mediaCdnServeBlock } from '@aglyn/tenant-data-admin/server/serve-media-cdn'\nexport { createPinnedDispatcher, resolvePublicIp } from '@aglyn/tenant-data-admin/server/serve-plugin-fetch'\n"],"names":["mediaStoragePathInScope","loadSharp","mediaCdnServeBlock","createPinnedDispatcher","resolvePublicIp"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;CAWC,GACD,SAASA,uBAAuB,QAAQ,qDAAoD;AAC5F,SAASC,SAAS,QAAQ,iDAAgD;AAC1E,SAASC,kBAAkB,QAAQ,kDAAiD;AACpF,SAASC,sBAAsB,EAAEC,eAAe,QAAQ,qDAAoD"}