@aglyn/plugins-commerce 1.0.0-beta.284 → 1.0.0-beta.287

package/src/lib/server/pos-hardware-terms.js

@@ -0,0 +1,154 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { readClientIp } from "@aglyn/aglyn/app-utils/request-ip";
+import { firebaseAdmin } from "@aglyn/tenant-data-admin";
+import { isPosHardwareRegisterSale, posHardwareTermsAcceptance, posHardwareTermsAcceptanceOf, posHardwareTermsUrl, POS_HARDWARE_TERMS_SECTIONS, POS_HARDWARE_TERMS_SUMMARY, POS_HARDWARE_TERMS_VERSION } from "../model/pos-hardware-terms.js";
+import { hardwareOrdersRef, posHardwareSaleRef } from "./pos-hardware.js";
+/*==========================================
+ * ACCEPTING THE TERMS OF SALE AT THE BOOTH (AGL-4038).
+ *
+ * The register user hands the buyer the register tablet, or puts the terms
+ * on the register's customer display through core's display seam, and the
+ * buyer accepts there before paying (Terms 4.28). Either way the acceptance
+ * is written here, on the register sale (`hardwareTermsAcceptance`) and, once
+ * the sale has become a hardware order, on that too (`termsAcceptance`),
+ * with the version, the time, how, the register user, and the device's
+ * address and browser. The first acceptance stands: accepting again changes
+ * nothing, and an electronic acceptance replaces only the receipt-and-sign
+ * notice a sale paid without one was recorded under.
+ *=========================================*/ export class PosHardwareTermsRefusal extends Error {
+    constructor(message, status){
+        super(message), this.status = status;
+    }
+}
+const ID = /^[A-Za-z0-9_-]{1,128}$/;
+function firestore() {
+    return firebaseAdmin.app().firestore();
+}
+function registerOrderRef(config, registerOrderId) {
+    if (!ID.test(registerOrderId)) throw new PosHardwareTermsRefusal('Name the sale.', 400);
+    return firestore().collection('hosts').doc(config.sellerHostId).collection('orders').doc(registerOrderId);
+}
+/** What the buyer reads: the version, the sections, the link and the summary. */ export function posHardwareTermsView() {
+    return {
+        version: POS_HARDWARE_TERMS_VERSION,
+        sections: POS_HARDWARE_TERMS_SECTIONS,
+        url: posHardwareTermsUrl(),
+        summary: [
+            ...POS_HARDWARE_TERMS_SUMMARY
+        ]
+    };
+}
+/** The device a request came from, as an acceptance records it. */ export function posHardwareTermsDevice(headers) {
+    var _readClientIp, _headers_useragent;
+    return {
+        ip: (_readClientIp = readClientIp(headers)) != null ? _readClientIp : null,
+        userAgent: String((_headers_useragent = headers['user-agent']) != null ? _headers_useragent : '').slice(0, 400) || null
+    };
+}
+/** The sale's items and total, for the screen the buyer accepts on. */ export async function posHardwareTermsSale(config, registerOrderId) {
+    const snapshot = await registerOrderRef(config, registerOrderId).get();
+    const order = snapshot.exists ? snapshot.data() : null;
+    if (!order || !isPosHardwareRegisterSale(order)) throw new PosHardwareTermsRefusal('This sale has no card reader.', 404);
+    const items = (Array.isArray(order['lineItems']) ? order['lineItems'] : []).slice(0, 50).map((line)=>{
+        var _line_quantity, _line_name;
+        return `${Number((_line_quantity = line['quantity']) != null ? _line_quantity : 1) || 1} × ${String((_line_name = line['name']) != null ? _line_name : 'Item')}`;
+    });
+    return {
+        items,
+        acceptance: posHardwareTermsAcceptanceOf(order['hardwareTermsAcceptance'])
+    };
+}
+/** Whether the buyer has accepted, for the register waiting on the display. */ export async function posHardwareTermsStatus(config, registerOrderId) {
+    const { acceptance } = await posHardwareTermsSale(config, registerOrderId);
+    return {
+        acceptance
+    };
+}
+/** Notes who put the terms on the display, so the display's acceptance names them. */ export async function requestPosHardwareTermsOnDisplay(input) {
+    var _input_now;
+    const ref = registerOrderRef(input.config, input.registerOrderId);
+    const snapshot = await ref.get();
+    if (!snapshot.exists || !isPosHardwareRegisterSale(snapshot.data())) {
+        throw new PosHardwareTermsRefusal('This sale has no card reader.', 404);
+    }
+    await ref.set({
+        hardwareTermsRequest: {
+            by: input.uid,
+            atMs: (_input_now = input.now) != null ? _input_now : Date.now()
+        }
+    }, {
+        merge: true
+    });
+}
+/**
+ * Records the buyer's acceptance on the register sale and on its hardware
+ * order when there is one, in one transaction. The first electronic
+ * acceptance stands; answers the acceptance that holds.
+ */ export async function recordPosHardwareTermsAcceptance(input) {
+    const ref = registerOrderRef(input.config, input.registerOrderId);
+    return firestore().runTransaction(async (transaction)=>{
+        var _order_status, _ref, _input_now;
+        var _order_hardwareTermsRequest;
+        const snapshot = await transaction.get(ref);
+        const order = snapshot.exists ? snapshot.data() : null;
+        if (!order || !isPosHardwareRegisterSale(order)) throw new PosHardwareTermsRefusal('This sale has no card reader.', 404);
+        const status = String((_order_status = order['status']) != null ? _order_status : '');
+        if (status !== 'pending' && status !== 'paid') {
+            throw new PosHardwareTermsRefusal('This sale was voided or refunded.', 409);
+        }
+        const held = posHardwareTermsAcceptanceOf(order['hardwareTermsAcceptance']);
+        if (held && held.method !== 'notice') return held;
+        const staffUid = input.method === 'display' ? String((_ref = (_order_hardwareTermsRequest = order['hardwareTermsRequest']) == null ? void 0 : _order_hardwareTermsRequest['by']) != null ? _ref : '') || input.staffUid : input.staffUid;
+        const acceptance = posHardwareTermsAcceptance({
+            method: input.method,
+            atMs: (_input_now = input.now) != null ? _input_now : Date.now(),
+            staffUid,
+            ip: input.ip,
+            userAgent: input.userAgent
+        });
+        // The hardware order the sale already became, if it did: its notice is
+        // replaced by the acceptance.
+        const hardwareOrderId = typeof order['hardwareOrderId'] === 'string' ? order['hardwareOrderId'] : '';
+        let hardwareRef = null;
+        if (hardwareOrderId) {
+            var _sale_get;
+            const sale = await transaction.get(posHardwareSaleRef(hardwareOrderId));
+            const orgId = String((_sale_get = sale.get('orgId')) != null ? _sale_get : '');
+            if (orgId) {
+                const candidate = hardwareOrdersRef(orgId).doc(hardwareOrderId);
+                const hardware = await transaction.get(candidate);
+                const current = hardware.exists ? hardware.data() : null;
+                const kept = posHardwareTermsAcceptanceOf(current == null ? void 0 : current.termsAcceptance);
+                if (current && (!kept || kept.method === 'notice')) hardwareRef = candidate;
+            }
+        }
+        transaction.set(ref, {
+            hardwareTermsAcceptance: acceptance
+        }, {
+            merge: true
+        });
+        if (hardwareRef) transaction.set(hardwareRef, {
+            termsAcceptance: acceptance,
+            updatedAtMs: acceptance.atMs
+        }, {
+            merge: true
+        });
+        return acceptance;
+    });
+}
+
+//# sourceMappingURL=pos-hardware-terms.js.map

package/src/lib/server/pos-hardware-terms.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-hardware-terms.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { readClientIp } from '@aglyn/aglyn/app-utils/request-ip'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport type { PosHardwareInPersonConfig, PosHardwareOrder } from '../model/pos-hardware'\nimport {\n  isPosHardwareRegisterSale,\n  posHardwareTermsAcceptance,\n  posHardwareTermsAcceptanceOf,\n  posHardwareTermsUrl,\n  POS_HARDWARE_TERMS_SECTIONS,\n  POS_HARDWARE_TERMS_SUMMARY,\n  POS_HARDWARE_TERMS_VERSION,\n  type PosHardwareTermsAcceptance,\n} from '../model/pos-hardware-terms'\nimport { hardwareOrdersRef, posHardwareSaleRef } from './pos-hardware'\n\n/*==========================================\n * ACCEPTING THE TERMS OF SALE AT THE BOOTH (AGL-4038).\n *\n * The register user hands the buyer the register tablet, or puts the terms\n * on the register's customer display through core's display seam, and the\n * buyer accepts there before paying (Terms 4.28). Either way the acceptance\n * is written here, on the register sale (`hardwareTermsAcceptance`) and, once\n * the sale has become a hardware order, on that too (`termsAcceptance`),\n * with the version, the time, how, the register user, and the device's\n * address and browser. The first acceptance stands: accepting again changes\n * nothing, and an electronic acceptance replaces only the receipt-and-sign\n * notice a sale paid without one was recorded under.\n *=========================================*/\n\nexport class PosHardwareTermsRefusal extends Error {\n  constructor(\n    message: string,\n    readonly status: number,\n  ) {\n    super(message)\n  }\n}\n\nconst ID = /^[A-Za-z0-9_-]{1,128}$/\n\nfunction firestore() {\n  return firebaseAdmin.app().firestore()\n}\n\nfunction registerOrderRef(config: PosHardwareInPersonConfig, registerOrderId: string) {\n  if (!ID.test(registerOrderId)) throw new PosHardwareTermsRefusal('Name the sale.', 400)\n  return firestore().collection('hosts').doc(config.sellerHostId).collection('orders').doc(registerOrderId)\n}\n\n/** What the buyer reads: the version, the sections, the link and the summary. */\nexport function posHardwareTermsView() {\n  return {\n    version: POS_HARDWARE_TERMS_VERSION,\n    sections: POS_HARDWARE_TERMS_SECTIONS,\n    url: posHardwareTermsUrl(),\n    summary: [...POS_HARDWARE_TERMS_SUMMARY],\n  }\n}\n\n/** The device a request came from, as an acceptance records it. */\nexport function posHardwareTermsDevice(headers: Record<string, unknown>): { ip: string | null; userAgent: string | null } {\n  return {\n    ip: readClientIp(headers as never) ?? null,\n    userAgent: String(headers['user-agent'] ?? '').slice(0, 400) || null,\n  }\n}\n\n/** The sale's items and total, for the screen the buyer accepts on. */\nexport async function posHardwareTermsSale(\n  config: PosHardwareInPersonConfig,\n  registerOrderId: string,\n): Promise<{ items: string[]; acceptance: PosHardwareTermsAcceptance | null }> {\n  const snapshot = await registerOrderRef(config, registerOrderId).get()\n  const order = snapshot.exists ? (snapshot.data() as Record<string, any>) : null\n  if (!order || !isPosHardwareRegisterSale(order)) throw new PosHardwareTermsRefusal('This sale has no card reader.', 404)\n  const items = (Array.isArray(order['lineItems']) ? order['lineItems'] : [])\n    .slice(0, 50)\n    .map((line: Record<string, unknown>) => `${Number(line['quantity'] ?? 1) || 1} × ${String(line['name'] ?? 'Item')}`)\n  return { items, acceptance: posHardwareTermsAcceptanceOf(order['hardwareTermsAcceptance']) }\n}\n\n/** Whether the buyer has accepted, for the register waiting on the display. */\nexport async function posHardwareTermsStatus(\n  config: PosHardwareInPersonConfig,\n  registerOrderId: string,\n): Promise<{ acceptance: PosHardwareTermsAcceptance | null }> {\n  const { acceptance } = await posHardwareTermsSale(config, registerOrderId)\n  return { acceptance }\n}\n\n/** Notes who put the terms on the display, so the display's acceptance names them. */\nexport async function requestPosHardwareTermsOnDisplay(input: {\n  config: PosHardwareInPersonConfig\n  registerOrderId: string\n  uid: string\n  now?: number\n}): Promise<void> {\n  const ref = registerOrderRef(input.config, input.registerOrderId)\n  const snapshot = await ref.get()\n  if (!snapshot.exists || !isPosHardwareRegisterSale(snapshot.data())) {\n    throw new PosHardwareTermsRefusal('This sale has no card reader.', 404)\n  }\n  await ref.set({ hardwareTermsRequest: { by: input.uid, atMs: input.now ?? Date.now() } }, { merge: true })\n}\n\n/**\n * Records the buyer's acceptance on the register sale and on its hardware\n * order when there is one, in one transaction. The first electronic\n * acceptance stands; answers the acceptance that holds.\n */\nexport async function recordPosHardwareTermsAcceptance(input: {\n  config: PosHardwareInPersonConfig\n  registerOrderId: string\n  method: 'tablet' | 'display'\n  staffUid: string | null\n  ip: string | null\n  userAgent: string | null\n  now?: number\n}): Promise<PosHardwareTermsAcceptance> {\n  const ref = registerOrderRef(input.config, input.registerOrderId)\n  return firestore().runTransaction(async (transaction: any) => {\n    const snapshot = await transaction.get(ref)\n    const order = snapshot.exists ? (snapshot.data() as Record<string, any>) : null\n    if (!order || !isPosHardwareRegisterSale(order)) throw new PosHardwareTermsRefusal('This sale has no card reader.', 404)\n    const status = String(order['status'] ?? '')\n    if (status !== 'pending' && status !== 'paid') {\n      throw new PosHardwareTermsRefusal('This sale was voided or refunded.', 409)\n    }\n    const held = posHardwareTermsAcceptanceOf(order['hardwareTermsAcceptance'])\n    if (held && held.method !== 'notice') return held\n    const staffUid =\n      input.method === 'display'\n        ? (String(order['hardwareTermsRequest']?.['by'] ?? '') || input.staffUid)\n        : input.staffUid\n    const acceptance = posHardwareTermsAcceptance({\n      method: input.method,\n      atMs: input.now ?? Date.now(),\n      staffUid,\n      ip: input.ip,\n      userAgent: input.userAgent,\n    })\n    // The hardware order the sale already became, if it did: its notice is\n    // replaced by the acceptance.\n    const hardwareOrderId = typeof order['hardwareOrderId'] === 'string' ? order['hardwareOrderId'] : ''\n    let hardwareRef: any = null\n    if (hardwareOrderId) {\n      const sale = await transaction.get(posHardwareSaleRef(hardwareOrderId))\n      const orgId = String(sale.get('orgId') ?? '')\n      if (orgId) {\n        const candidate = hardwareOrdersRef(orgId).doc(hardwareOrderId)\n        const hardware = await transaction.get(candidate)\n        const current = hardware.exists ? (hardware.data() as PosHardwareOrder) : null\n        const kept = posHardwareTermsAcceptanceOf(current?.termsAcceptance)\n        if (current && (!kept || kept.method === 'notice')) hardwareRef = candidate\n      }\n    }\n    transaction.set(ref, { hardwareTermsAcceptance: acceptance }, { merge: true })\n    if (hardwareRef) transaction.set(hardwareRef, { termsAcceptance: acceptance, updatedAtMs: acceptance.atMs }, { merge: true })\n    return acceptance\n  })\n}\n"],"names":["readClientIp","firebaseAdmin","isPosHardwareRegisterSale","posHardwareTermsAcceptance","posHardwareTermsAcceptanceOf","posHardwareTermsUrl","POS_HARDWARE_TERMS_SECTIONS","POS_HARDWARE_TERMS_SUMMARY","POS_HARDWARE_TERMS_VERSION","hardwareOrdersRef","posHardwareSaleRef","PosHardwareTermsRefusal","Error","message","status","ID","firestore","app","registerOrderRef","config","registerOrderId","test","collection","doc","sellerHostId","posHardwareTermsView","version","sections","url","summary","posHardwareTermsDevice","headers","ip","userAgent","String","slice","posHardwareTermsSale","snapshot","get","order","exists","data","items","Array","isArray","map","line","Number","acceptance","posHardwareTermsStatus","requestPosHardwareTermsOnDisplay","input","ref","set","hardwareTermsRequest","by","uid","atMs","now","Date","merge","recordPosHardwareTermsAcceptance","runTransaction","transaction","held","method","staffUid","hardwareOrderId","hardwareRef","sale","orgId","candidate","hardware","current","kept","termsAcceptance","hardwareTermsAcceptance","updatedAtMs"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,YAAY,QAAQ,oCAAmC;AAChE,SAASC,aAAa,QAAQ,2BAA0B;AAExD,SACEC,yBAAyB,EACzBC,0BAA0B,EAC1BC,4BAA4B,EAC5BC,mBAAmB,EACnBC,2BAA2B,EAC3BC,0BAA0B,EAC1BC,0BAA0B,QAErB,iCAA6B;AACpC,SAASC,iBAAiB,EAAEC,kBAAkB,QAAQ,oBAAgB;AAEtE;;;;;;;;;;;;2CAY2C,GAE3C,OAAO,MAAMC,gCAAgCC;IAC3C,YACEC,OAAe,EACf,AAASC,MAAc,CACvB;QACA,KAAK,CAACD,eAFGC,SAAAA;IAGX;AACF;AAEA,MAAMC,KAAK;AAEX,SAASC;IACP,OAAOf,cAAcgB,GAAG,GAAGD,SAAS;AACtC;AAEA,SAASE,iBAAiBC,MAAiC,EAAEC,eAAuB;IAClF,IAAI,CAACL,GAAGM,IAAI,CAACD,kBAAkB,MAAM,IAAIT,wBAAwB,kBAAkB;IACnF,OAAOK,YAAYM,UAAU,CAAC,SAASC,GAAG,CAACJ,OAAOK,YAAY,EAAEF,UAAU,CAAC,UAAUC,GAAG,CAACH;AAC3F;AAEA,+EAA+E,GAC/E,OAAO,SAASK;IACd,OAAO;QACLC,SAASlB;QACTmB,UAAUrB;QACVsB,KAAKvB;QACLwB,SAAS;eAAItB;SAA2B;IAC1C;AACF;AAEA,iEAAiE,GACjE,OAAO,SAASuB,uBAAuBC,OAAgC;QAE/D/B,eACc+B;IAFpB,OAAO;QACLC,EAAE,GAAEhC,gBAAAA,aAAa+B,oBAAb/B,gBAAkC;QACtCiC,WAAWC,QAAOH,qBAAAA,OAAO,CAAC,aAAa,YAArBA,qBAAyB,IAAII,KAAK,CAAC,GAAG,QAAQ;IAClE;AACF;AAEA,qEAAqE,GACrE,OAAO,eAAeC,qBACpBjB,MAAiC,EACjCC,eAAuB;IAEvB,MAAMiB,WAAW,MAAMnB,iBAAiBC,QAAQC,iBAAiBkB,GAAG;IACpE,MAAMC,QAAQF,SAASG,MAAM,GAAIH,SAASI,IAAI,KAA6B;IAC3E,IAAI,CAACF,SAAS,CAACrC,0BAA0BqC,QAAQ,MAAM,IAAI5B,wBAAwB,iCAAiC;IACpH,MAAM+B,QAAQ,AAACC,CAAAA,MAAMC,OAAO,CAACL,KAAK,CAAC,YAAY,IAAIA,KAAK,CAAC,YAAY,GAAG,EAAE,AAAD,EACtEJ,KAAK,CAAC,GAAG,IACTU,GAAG,CAAC,CAACC;YAA4CA,gBAAwCA;eAAlD,GAAGC,QAAOD,iBAAAA,IAAI,CAAC,WAAW,YAAhBA,iBAAoB,MAAM,EAAE,GAAG,EAAEZ,QAAOY,aAAAA,IAAI,CAAC,OAAO,YAAZA,aAAgB,SAAS;;IACrH,OAAO;QAAEJ;QAAOM,YAAY5C,6BAA6BmC,KAAK,CAAC,0BAA0B;IAAE;AAC7F;AAEA,6EAA6E,GAC7E,OAAO,eAAeU,uBACpB9B,MAAiC,EACjCC,eAAuB;IAEvB,MAAM,EAAE4B,UAAU,EAAE,GAAG,MAAMZ,qBAAqBjB,QAAQC;IAC1D,OAAO;QAAE4B;IAAW;AACtB;AAEA,oFAAoF,GACpF,OAAO,eAAeE,iCAAiCC,KAKtD;QAM8DA;IAL7D,MAAMC,MAAMlC,iBAAiBiC,MAAMhC,MAAM,EAAEgC,MAAM/B,eAAe;IAChE,MAAMiB,WAAW,MAAMe,IAAId,GAAG;IAC9B,IAAI,CAACD,SAASG,MAAM,IAAI,CAACtC,0BAA0BmC,SAASI,IAAI,KAAK;QACnE,MAAM,IAAI9B,wBAAwB,iCAAiC;IACrE;IACA,MAAMyC,IAAIC,GAAG,CAAC;QAAEC,sBAAsB;YAAEC,IAAIJ,MAAMK,GAAG;YAAEC,IAAI,GAAEN,aAAAA,MAAMO,GAAG,YAATP,aAAaQ,KAAKD,GAAG;QAAG;IAAE,GAAG;QAAEE,OAAO;IAAK;AAC1G;AAEA;;;;CAIC,GACD,OAAO,eAAeC,iCAAiCV,KAQtD;IACC,MAAMC,MAAMlC,iBAAiBiC,MAAMhC,MAAM,EAAEgC,MAAM/B,eAAe;IAChE,OAAOJ,YAAY8C,cAAc,CAAC,OAAOC;YAIjBxB,qBAYdY;YAJMZ;QAXd,MAAMF,WAAW,MAAM0B,YAAYzB,GAAG,CAACc;QACvC,MAAMb,QAAQF,SAASG,MAAM,GAAIH,SAASI,IAAI,KAA6B;QAC3E,IAAI,CAACF,SAAS,CAACrC,0BAA0BqC,QAAQ,MAAM,IAAI5B,wBAAwB,iCAAiC;QACpH,MAAMG,SAASoB,QAAOK,gBAAAA,KAAK,CAAC,SAAS,YAAfA,gBAAmB;QACzC,IAAIzB,WAAW,aAAaA,WAAW,QAAQ;YAC7C,MAAM,IAAIH,wBAAwB,qCAAqC;QACzE;QACA,MAAMqD,OAAO5D,6BAA6BmC,KAAK,CAAC,0BAA0B;QAC1E,IAAIyB,QAAQA,KAAKC,MAAM,KAAK,UAAU,OAAOD;QAC7C,MAAME,WACJf,MAAMc,MAAM,KAAK,YACZ/B,gBAAOK,8BAAAA,KAAK,CAAC,uBAAuB,qBAA7BA,2BAA+B,CAAC,KAAK,mBAAI,OAAOY,MAAMe,QAAQ,GACtEf,MAAMe,QAAQ;QACpB,MAAMlB,aAAa7C,2BAA2B;YAC5C8D,QAAQd,MAAMc,MAAM;YACpBR,IAAI,GAAEN,aAAAA,MAAMO,GAAG,YAATP,aAAaQ,KAAKD,GAAG;YAC3BQ;YACAlC,IAAImB,MAAMnB,EAAE;YACZC,WAAWkB,MAAMlB,SAAS;QAC5B;QACA,uEAAuE;QACvE,8BAA8B;QAC9B,MAAMkC,kBAAkB,OAAO5B,KAAK,CAAC,kBAAkB,KAAK,WAAWA,KAAK,CAAC,kBAAkB,GAAG;QAClG,IAAI6B,cAAmB;QACvB,IAAID,iBAAiB;gBAEEE;YADrB,MAAMA,OAAO,MAAMN,YAAYzB,GAAG,CAAC5B,mBAAmByD;YACtD,MAAMG,QAAQpC,QAAOmC,YAAAA,KAAK/B,GAAG,CAAC,oBAAT+B,YAAqB;YAC1C,IAAIC,OAAO;gBACT,MAAMC,YAAY9D,kBAAkB6D,OAAO/C,GAAG,CAAC4C;gBAC/C,MAAMK,WAAW,MAAMT,YAAYzB,GAAG,CAACiC;gBACvC,MAAME,UAAUD,SAAShC,MAAM,GAAIgC,SAAS/B,IAAI,KAA0B;gBAC1E,MAAMiC,OAAOtE,6BAA6BqE,2BAAAA,QAASE,eAAe;gBAClE,IAAIF,WAAY,CAAA,CAACC,QAAQA,KAAKT,MAAM,KAAK,QAAO,GAAIG,cAAcG;YACpE;QACF;QACAR,YAAYV,GAAG,CAACD,KAAK;YAAEwB,yBAAyB5B;QAAW,GAAG;YAAEY,OAAO;QAAK;QAC5E,IAAIQ,aAAaL,YAAYV,GAAG,CAACe,aAAa;YAAEO,iBAAiB3B;YAAY6B,aAAa7B,WAAWS,IAAI;QAAC,GAAG;YAAEG,OAAO;QAAK;QAC3H,OAAOZ;IACT;AACF"}

package/src/lib/server/pos-hardware-user-eraser.d.ts

@@ -15,10 +15,13 @@
  * limitations under the License.
  */
 import type { PluginUserEraser } from '@aglyn/aglyn/plugin-manager/plugin-user-erasure';
+import { closeUnshippedPosHardwareOrders } from './pos-hardware-closure';
 type Firestore = FirebaseFirestore.Firestore;
 export interface PosHardwareUserEraserDeps {
     firestore(): Firestore;
     now?: () => number;
+    /** The closure's cancel, replaceable in a spec. */
+    closeUnshipped?: typeof closeUnshippedPosHardwareOrders;
 }
 export declare function createPosHardwareUserEraser(deps: PosHardwareUserEraserDeps): PluginUserEraser;
 /** The eraser over the platform's own Firestore, as the declarations register it. */

package/src/lib/server/pos-hardware-user-eraser.js

@@ -15,17 +15,24 @@
  * limitations under the License.
  */ import { _ as _extends } from "@swc/helpers/_/_extends";
 import { firebaseAdmin } from "@aglyn/tenant-data-admin/server/firebase-admin";
-import { POS_HARDWARE_ORDERS_COLLECTION, POS_HARDWARE_SALES_COLLECTION, posHardwareBuyerErasedPatch, posHardwareSaleRecord } from "../model/pos-hardware.js";
+import { POS_HARDWARE_ORDERS_COLLECTION, POS_HARDWARE_SALES_COLLECTION, posHardwareBuyerErasedPatch, posHardwareRefundable, posHardwareSaleRecord, posHardwareSaleSetOptions } from "../model/pos-hardware.js";
+import { closeUnshippedPosHardwareOrders } from "./pos-hardware-closure.js";
 const LABEL = '[pos-hardware] user eraser';
+/** The closure's counts where nothing was unshipped. */ const NO_CLOSURE = {
+    hardwareOrdersCanceled: 0,
+    hardwareOrdersPlacedWithStripe: 0,
+    hardwareRefundsFailed: 0
+};
 export function createPosHardwareUserEraser(deps) {
     return async ({ uid, orgIds })=>{
-        var _deps_now;
-        if (!uid) return {
+        var _deps_now, _deps_closeUnshipped;
+        if (!uid) return _extends({
             hardwareOrdersRedacted: 0,
             formerWorkspacesReached: true
-        };
+        }, NO_CLOSURE);
         const db = deps.firestore();
         const now = (_deps_now = deps.now) != null ? _deps_now : Date.now;
+        const closeUnshipped = (_deps_closeUnshipped = deps.closeUnshipped) != null ? _deps_closeUnshipped : closeUnshippedPosHardwareOrders;
         let refs;
         let formerWorkspacesReached = true;
         try {
@@ -40,6 +47,19 @@ export function createPosHardwareUserEraser(deps) {
                 refs.push(...placed.docs.map((doc)=>doc.ref));
             }
         }
+        // Cancel and refund what has not shipped, while each order still names
+        // the buyer the email goes to.
+        const placed = [];
+        for (const ref of refs){
+            const order = (await ref.get()).data();
+            if (order && order.createdBy === uid && posHardwareRefundable(order.status)) {
+                placed.push({
+                    orderId: ref.id,
+                    order
+                });
+            }
+        }
+        const closure = placed.length ? await closeUnshipped(placed, 'account-closed') : _extends({}, NO_CLOSURE);
         let hardwareOrdersRedacted = 0;
         for (const ref of refs){
             const redacted = await db.runTransaction(async (transaction)=>{
@@ -48,16 +68,20 @@ export function createPosHardwareUserEraser(deps) {
                 // Gone, or already someone else's: nothing of this person is on it.
                 if (!snapshot.exists || !order || order.createdBy !== uid) return false;
                 const patch = posHardwareBuyerErasedPatch(order, now());
+                const erased = _extends({}, order, patch);
                 transaction.update(ref, patch);
-                transaction.set(db.collection(POS_HARDWARE_SALES_COLLECTION).doc(ref.id), posHardwareSaleRecord(ref.id, _extends({}, order, patch)));
+                // The record keeps the buyer's name and address (the reseller's
+                // records): the erased order no longer has them, so the write leaves
+                // the stored ones in place.
+                transaction.set(db.collection(POS_HARDWARE_SALES_COLLECTION).doc(ref.id), posHardwareSaleRecord(ref.id, erased), posHardwareSaleSetOptions(erased));
                 return true;
             });
             if (redacted) hardwareOrdersRedacted += 1;
         }
-        return {
+        return _extends({
             hardwareOrdersRedacted,
             formerWorkspacesReached
-        };
+        }, closure);
     };
 }
 /** The eraser over the platform's own Firestore, as the declarations register it. */ export const posHardwareUserEraser = (request)=>createPosHardwareUserEraser({

package/src/lib/server/pos-hardware-user-eraser.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-hardware-user-eraser.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type {\n  PluginUserEraser,\n  PluginUserErasureReport,\n} from '@aglyn/aglyn/plugin-manager/plugin-user-erasure'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin/server/firebase-admin'\nimport {\n  POS_HARDWARE_ORDERS_COLLECTION,\n  POS_HARDWARE_SALES_COLLECTION,\n  posHardwareBuyerErasedPatch,\n  posHardwareSaleRecord,\n  type PosHardwareOrder,\n} from '../model/pos-hardware'\n\n/*==========================================\n * COMMERCE'S SHARE OF AN ACCOUNT ERASURE: HARDWARE ORDERS (AGL-4038).\n *\n * A hardware order is the workspace's purchase and the platform's sale, so\n * an account erasure keeps it and every amount on it, and takes the BUYER\n * off it: who started it, the email, the name, the phone, the street and the\n * tracking (`posHardwareBuyerErasedPatch`). The country, state and postal\n * code stay, because sales tax is sourced by them. The retained sale record\n * (`posHardwareSales/{orderId}`) never held the person, and is rewritten\n * from the redacted order in the same transaction so the two agree.\n *\n * Found by a COLLECTION-GROUP query on `createdBy`, so an order placed in a\n * workspace the person has since left is reached too — the support-thread\n * redaction's shape (AGL-1971). It needs the `hardwareOrders.createdBy`\n * collection-group override in `cloud/firebase-firestore.indexes.json`; where\n * that index is not yet deployed the query is refused, and the eraser falls\n * back to the workspaces the person belonged to when the erasure began and\n * says so (`formerWorkspacesReached: false`), rather than reporting a clean\n * pass over orders it could not see.\n *\n * Idempotent: a redacted order no longer carries the uid, so a second run\n * finds nothing to do.\n *=========================================*/\n\ntype Firestore = FirebaseFirestore.Firestore\n\nexport interface PosHardwareUserEraserDeps {\n  firestore(): Firestore\n  now?: () => number\n}\n\nconst LABEL = '[pos-hardware] user eraser'\n\nexport function createPosHardwareUserEraser(deps: PosHardwareUserEraserDeps): PluginUserEraser {\n  return async ({ uid, orgIds }): Promise<PluginUserErasureReport> => {\n    if (!uid) return { hardwareOrdersRedacted: 0, formerWorkspacesReached: true }\n    const db = deps.firestore()\n    const now = deps.now ?? Date.now\n\n    let refs: FirebaseFirestore.DocumentReference[]\n    let formerWorkspacesReached = true\n    try {\n      const placed = await db.collectionGroup(POS_HARDWARE_ORDERS_COLLECTION).where('createdBy', '==', uid).get()\n      refs = placed.docs.map((doc) => doc.ref)\n    } catch (error) {\n      console.error(`${LABEL}: the collection-group query was refused; reading current workspaces only`, error)\n      formerWorkspacesReached = false\n      refs = []\n      for (const orgId of orgIds) {\n        const placed = await db\n          .collection('orgs')\n          .doc(orgId)\n          .collection(POS_HARDWARE_ORDERS_COLLECTION)\n          .where('createdBy', '==', uid)\n          .get()\n        refs.push(...placed.docs.map((doc) => doc.ref))\n      }\n    }\n\n    let hardwareOrdersRedacted = 0\n    for (const ref of refs) {\n      const redacted = await db.runTransaction(async (transaction) => {\n        const snapshot = await transaction.get(ref)\n        const order = snapshot.data() as PosHardwareOrder | undefined\n        // Gone, or already someone else's: nothing of this person is on it.\n        if (!snapshot.exists || !order || order.createdBy !== uid) return false\n        const patch = posHardwareBuyerErasedPatch(order, now())\n        transaction.update(ref, patch)\n        transaction.set(\n          db.collection(POS_HARDWARE_SALES_COLLECTION).doc(ref.id),\n          posHardwareSaleRecord(ref.id, { ...order, ...patch } as PosHardwareOrder),\n        )\n        return true\n      })\n      if (redacted) hardwareOrdersRedacted += 1\n    }\n    return { hardwareOrdersRedacted, formerWorkspacesReached }\n  }\n}\n\n/** The eraser over the platform's own Firestore, as the declarations register it. */\nexport const posHardwareUserEraser: PluginUserEraser = (request) =>\n  createPosHardwareUserEraser({ firestore: () => firebaseAdmin.app().firestore() })(request)\n"],"names":["firebaseAdmin","POS_HARDWARE_ORDERS_COLLECTION","POS_HARDWARE_SALES_COLLECTION","posHardwareBuyerErasedPatch","posHardwareSaleRecord","LABEL","createPosHardwareUserEraser","deps","uid","orgIds","hardwareOrdersRedacted","formerWorkspacesReached","db","firestore","now","Date","refs","placed","collectionGroup","where","get","docs","map","doc","ref","error","console","orgId","collection","push","redacted","runTransaction","transaction","snapshot","order","data","exists","createdBy","patch","update","set","id","posHardwareUserEraser","request","app"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAMD,SAASA,aAAa,QAAQ,iDAAgD;AAC9E,SACEC,8BAA8B,EAC9BC,6BAA6B,EAC7BC,2BAA2B,EAC3BC,qBAAqB,QAEhB,2BAAuB;AAiC9B,MAAMC,QAAQ;AAEd,OAAO,SAASC,4BAA4BC,IAA+B;IACzE,OAAO,OAAO,EAAEC,GAAG,EAAEC,MAAM,EAAE;YAGfF;QAFZ,IAAI,CAACC,KAAK,OAAO;YAAEE,wBAAwB;YAAGC,yBAAyB;QAAK;QAC5E,MAAMC,KAAKL,KAAKM,SAAS;QACzB,MAAMC,OAAMP,YAAAA,KAAKO,GAAG,YAARP,YAAYQ,KAAKD,GAAG;QAEhC,IAAIE;QACJ,IAAIL,0BAA0B;QAC9B,IAAI;YACF,MAAMM,SAAS,MAAML,GAAGM,eAAe,CAACjB,gCAAgCkB,KAAK,CAAC,aAAa,MAAMX,KAAKY,GAAG;YACzGJ,OAAOC,OAAOI,IAAI,CAACC,GAAG,CAAC,CAACC,MAAQA,IAAIC,GAAG;QACzC,EAAE,OAAOC,OAAO;YACdC,QAAQD,KAAK,CAAC,GAAGpB,MAAM,yEAAyE,CAAC,EAAEoB;YACnGd,0BAA0B;YAC1BK,OAAO,EAAE;YACT,KAAK,MAAMW,SAASlB,OAAQ;gBAC1B,MAAMQ,SAAS,MAAML,GAClBgB,UAAU,CAAC,QACXL,GAAG,CAACI,OACJC,UAAU,CAAC3B,gCACXkB,KAAK,CAAC,aAAa,MAAMX,KACzBY,GAAG;gBACNJ,KAAKa,IAAI,IAAIZ,OAAOI,IAAI,CAACC,GAAG,CAAC,CAACC,MAAQA,IAAIC,GAAG;YAC/C;QACF;QAEA,IAAId,yBAAyB;QAC7B,KAAK,MAAMc,OAAOR,KAAM;YACtB,MAAMc,WAAW,MAAMlB,GAAGmB,cAAc,CAAC,OAAOC;gBAC9C,MAAMC,WAAW,MAAMD,YAAYZ,GAAG,CAACI;gBACvC,MAAMU,QAAQD,SAASE,IAAI;gBAC3B,oEAAoE;gBACpE,IAAI,CAACF,SAASG,MAAM,IAAI,CAACF,SAASA,MAAMG,SAAS,KAAK7B,KAAK,OAAO;gBAClE,MAAM8B,QAAQnC,4BAA4B+B,OAAOpB;gBACjDkB,YAAYO,MAAM,CAACf,KAAKc;gBACxBN,YAAYQ,GAAG,CACb5B,GAAGgB,UAAU,CAAC1B,+BAA+BqB,GAAG,CAACC,IAAIiB,EAAE,GACvDrC,sBAAsBoB,IAAIiB,EAAE,EAAE,aAAKP,OAAUI;gBAE/C,OAAO;YACT;YACA,IAAIR,UAAUpB,0BAA0B;QAC1C;QACA,OAAO;YAAEA;YAAwBC;QAAwB;IAC3D;AACF;AAEA,mFAAmF,GACnF,OAAO,MAAM+B,wBAA0C,CAACC,UACtDrC,4BAA4B;QAAEO,WAAW,IAAMb,cAAc4C,GAAG,GAAG/B,SAAS;IAAG,GAAG8B,SAAQ"}
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-hardware-user-eraser.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type {\n  PluginUserEraser,\n  PluginUserErasureReport,\n} from '@aglyn/aglyn/plugin-manager/plugin-user-erasure'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin/server/firebase-admin'\nimport {\n  POS_HARDWARE_ORDERS_COLLECTION,\n  POS_HARDWARE_SALES_COLLECTION,\n  posHardwareBuyerErasedPatch,\n  posHardwareRefundable,\n  posHardwareSaleRecord,\n  posHardwareSaleSetOptions,\n  type PosHardwareOrder,\n} from '../model/pos-hardware'\nimport { closeUnshippedPosHardwareOrders, type PosHardwareClosureCounts } from './pos-hardware-closure'\n\n/*==========================================\n * COMMERCE'S SHARE OF AN ACCOUNT ERASURE: HARDWARE ORDERS (AGL-4038).\n *\n * A hardware order is the workspace's purchase and the platform's sale, so\n * an account erasure keeps it and every amount on it, and takes the BUYER\n * off it: who started it, the email, the name, the phone, the street and the\n * tracking (`posHardwareBuyerErasedPatch`). The country, state and postal\n * code stay, because sales tax is sourced by them.\n *\n * The retained sale record (`posHardwareSales/{orderId}`) KEEPS the buyer's\n * name and address, and nothing else of theirs: they are the reseller's\n * records Stripe's Terminal Reseller Terms §10 ask for, kept for the\n * record's seven years. It is rewritten from the redacted order in the same\n * transaction, with `posHardwareSaleSetOptions`, which leaves the stored\n * name and address in place; the email, phone and tracking were never on it.\n *\n * Found by a COLLECTION-GROUP query on `createdBy`, so an order placed in a\n * workspace the person has since left is reached too — the support-thread\n * redaction's shape (AGL-1971). It needs the `hardwareOrders.createdBy`\n * collection-group override in `cloud/firebase-firestore.indexes.json`; where\n * that index is not yet deployed the query is refused, and the eraser falls\n * back to the workspaces the person belonged to when the erasure began and\n * says so (`formerWorkspacesReached: false`), rather than reporting a clean\n * pass over orders it could not see.\n *\n * FIRST, AN ORDER THAT HAS NOT SHIPPED IS CANCELED AND REFUNDED (AGL-4038\n * closure). Closing the account that placed it cancels every `paid` or\n * `ordered` order of theirs, refunds it in full and emails them about it\n * (`pos-hardware-closure.ts`), while the order still carries the address the\n * email goes to; only then is the buyer taken off it. A refusal is alerted\n * and counted, and the erasure goes on.\n *\n * Idempotent: a redacted order no longer carries the uid, so a second run\n * finds nothing to do.\n *=========================================*/\n\ntype Firestore = FirebaseFirestore.Firestore\n\nexport interface PosHardwareUserEraserDeps {\n  firestore(): Firestore\n  now?: () => number\n  /** The closure's cancel, replaceable in a spec. */\n  closeUnshipped?: typeof closeUnshippedPosHardwareOrders\n}\n\nconst LABEL = '[pos-hardware] user eraser'\n\n/** The closure's counts where nothing was unshipped. */\nconst NO_CLOSURE: PosHardwareClosureCounts = {\n  hardwareOrdersCanceled: 0,\n  hardwareOrdersPlacedWithStripe: 0,\n  hardwareRefundsFailed: 0,\n}\n\nexport function createPosHardwareUserEraser(deps: PosHardwareUserEraserDeps): PluginUserEraser {\n  return async ({ uid, orgIds }): Promise<PluginUserErasureReport> => {\n    if (!uid) return { hardwareOrdersRedacted: 0, formerWorkspacesReached: true, ...NO_CLOSURE }\n    const db = deps.firestore()\n    const now = deps.now ?? Date.now\n    const closeUnshipped = deps.closeUnshipped ?? closeUnshippedPosHardwareOrders\n\n    let refs: FirebaseFirestore.DocumentReference[]\n    let formerWorkspacesReached = true\n    try {\n      const placed = await db.collectionGroup(POS_HARDWARE_ORDERS_COLLECTION).where('createdBy', '==', uid).get()\n      refs = placed.docs.map((doc) => doc.ref)\n    } catch (error) {\n      console.error(`${LABEL}: the collection-group query was refused; reading current workspaces only`, error)\n      formerWorkspacesReached = false\n      refs = []\n      for (const orgId of orgIds) {\n        const placed = await db\n          .collection('orgs')\n          .doc(orgId)\n          .collection(POS_HARDWARE_ORDERS_COLLECTION)\n          .where('createdBy', '==', uid)\n          .get()\n        refs.push(...placed.docs.map((doc) => doc.ref))\n      }\n    }\n\n    // Cancel and refund what has not shipped, while each order still names\n    // the buyer the email goes to.\n    const placed: Array<{ orderId: string; order: PosHardwareOrder }> = []\n    for (const ref of refs) {\n      const order = (await ref.get()).data() as PosHardwareOrder | undefined\n      if (order && order.createdBy === uid && posHardwareRefundable(order.status)) {\n        placed.push({ orderId: ref.id, order })\n      }\n    }\n    const closure: PosHardwareClosureCounts = placed.length\n      ? await closeUnshipped(placed, 'account-closed')\n      : { ...NO_CLOSURE }\n\n    let hardwareOrdersRedacted = 0\n    for (const ref of refs) {\n      const redacted = await db.runTransaction(async (transaction) => {\n        const snapshot = await transaction.get(ref)\n        const order = snapshot.data() as PosHardwareOrder | undefined\n        // Gone, or already someone else's: nothing of this person is on it.\n        if (!snapshot.exists || !order || order.createdBy !== uid) return false\n        const patch = posHardwareBuyerErasedPatch(order, now())\n        const erased = { ...order, ...patch } as PosHardwareOrder\n        transaction.update(ref, patch)\n        // The record keeps the buyer's name and address (the reseller's\n        // records): the erased order no longer has them, so the write leaves\n        // the stored ones in place.\n        transaction.set(\n          db.collection(POS_HARDWARE_SALES_COLLECTION).doc(ref.id),\n          posHardwareSaleRecord(ref.id, erased),\n          posHardwareSaleSetOptions(erased),\n        )\n        return true\n      })\n      if (redacted) hardwareOrdersRedacted += 1\n    }\n    return { hardwareOrdersRedacted, formerWorkspacesReached, ...closure }\n  }\n}\n\n/** The eraser over the platform's own Firestore, as the declarations register it. */\nexport const posHardwareUserEraser: PluginUserEraser = (request) =>\n  createPosHardwareUserEraser({ firestore: () => firebaseAdmin.app().firestore() })(request)\n"],"names":["firebaseAdmin","POS_HARDWARE_ORDERS_COLLECTION","POS_HARDWARE_SALES_COLLECTION","posHardwareBuyerErasedPatch","posHardwareRefundable","posHardwareSaleRecord","posHardwareSaleSetOptions","closeUnshippedPosHardwareOrders","LABEL","NO_CLOSURE","hardwareOrdersCanceled","hardwareOrdersPlacedWithStripe","hardwareRefundsFailed","createPosHardwareUserEraser","deps","uid","orgIds","hardwareOrdersRedacted","formerWorkspacesReached","db","firestore","now","Date","closeUnshipped","refs","placed","collectionGroup","where","get","docs","map","doc","ref","error","console","orgId","collection","push","order","data","createdBy","status","orderId","id","closure","length","redacted","runTransaction","transaction","snapshot","exists","patch","erased","update","set","posHardwareUserEraser","request","app"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAMD,SAASA,aAAa,QAAQ,iDAAgD;AAC9E,SACEC,8BAA8B,EAC9BC,6BAA6B,EAC7BC,2BAA2B,EAC3BC,qBAAqB,EACrBC,qBAAqB,EACrBC,yBAAyB,QAEpB,2BAAuB;AAC9B,SAASC,+BAA+B,QAAuC,4BAAwB;AA+CvG,MAAMC,QAAQ;AAEd,sDAAsD,GACtD,MAAMC,aAAuC;IAC3CC,wBAAwB;IACxBC,gCAAgC;IAChCC,uBAAuB;AACzB;AAEA,OAAO,SAASC,4BAA4BC,IAA+B;IACzE,OAAO,OAAO,EAAEC,GAAG,EAAEC,MAAM,EAAE;YAGfF,WACWA;QAHvB,IAAI,CAACC,KAAK,OAAO;YAAEE,wBAAwB;YAAGC,yBAAyB;WAAST;QAChF,MAAMU,KAAKL,KAAKM,SAAS;QACzB,MAAMC,OAAMP,YAAAA,KAAKO,GAAG,YAARP,YAAYQ,KAAKD,GAAG;QAChC,MAAME,kBAAiBT,uBAAAA,KAAKS,cAAc,YAAnBT,uBAAuBP;QAE9C,IAAIiB;QACJ,IAAIN,0BAA0B;QAC9B,IAAI;YACF,MAAMO,SAAS,MAAMN,GAAGO,eAAe,CAACzB,gCAAgC0B,KAAK,CAAC,aAAa,MAAMZ,KAAKa,GAAG;YACzGJ,OAAOC,OAAOI,IAAI,CAACC,GAAG,CAAC,CAACC,MAAQA,IAAIC,GAAG;QACzC,EAAE,OAAOC,OAAO;YACdC,QAAQD,KAAK,CAAC,GAAGzB,MAAM,yEAAyE,CAAC,EAAEyB;YACnGf,0BAA0B;YAC1BM,OAAO,EAAE;YACT,KAAK,MAAMW,SAASnB,OAAQ;gBAC1B,MAAMS,SAAS,MAAMN,GAClBiB,UAAU,CAAC,QACXL,GAAG,CAACI,OACJC,UAAU,CAACnC,gCACX0B,KAAK,CAAC,aAAa,MAAMZ,KACzBa,GAAG;gBACNJ,KAAKa,IAAI,IAAIZ,OAAOI,IAAI,CAACC,GAAG,CAAC,CAACC,MAAQA,IAAIC,GAAG;YAC/C;QACF;QAEA,uEAAuE;QACvE,+BAA+B;QAC/B,MAAMP,SAA8D,EAAE;QACtE,KAAK,MAAMO,OAAOR,KAAM;YACtB,MAAMc,QAAQ,AAAC,CAAA,MAAMN,IAAIJ,GAAG,EAAC,EAAGW,IAAI;YACpC,IAAID,SAASA,MAAME,SAAS,KAAKzB,OAAOX,sBAAsBkC,MAAMG,MAAM,GAAG;gBAC3EhB,OAAOY,IAAI,CAAC;oBAAEK,SAASV,IAAIW,EAAE;oBAAEL;gBAAM;YACvC;QACF;QACA,MAAMM,UAAoCnB,OAAOoB,MAAM,GACnD,MAAMtB,eAAeE,QAAQ,oBAC7B,aAAKhB;QAET,IAAIQ,yBAAyB;QAC7B,KAAK,MAAMe,OAAOR,KAAM;YACtB,MAAMsB,WAAW,MAAM3B,GAAG4B,cAAc,CAAC,OAAOC;gBAC9C,MAAMC,WAAW,MAAMD,YAAYpB,GAAG,CAACI;gBACvC,MAAMM,QAAQW,SAASV,IAAI;gBAC3B,oEAAoE;gBACpE,IAAI,CAACU,SAASC,MAAM,IAAI,CAACZ,SAASA,MAAME,SAAS,KAAKzB,KAAK,OAAO;gBAClE,MAAMoC,QAAQhD,4BAA4BmC,OAAOjB;gBACjD,MAAM+B,SAAS,aAAKd,OAAUa;gBAC9BH,YAAYK,MAAM,CAACrB,KAAKmB;gBACxB,gEAAgE;gBAChE,qEAAqE;gBACrE,4BAA4B;gBAC5BH,YAAYM,GAAG,CACbnC,GAAGiB,UAAU,CAAClC,+BAA+B6B,GAAG,CAACC,IAAIW,EAAE,GACvDtC,sBAAsB2B,IAAIW,EAAE,EAAES,SAC9B9C,0BAA0B8C;gBAE5B,OAAO;YACT;YACA,IAAIN,UAAU7B,0BAA0B;QAC1C;QACA,OAAO;YAAEA;YAAwBC;WAA4B0B;IAC/D;AACF;AAEA,mFAAmF,GACnF,OAAO,MAAMW,wBAA0C,CAACC,UACtD3C,4BAA4B;QAAEO,WAAW,IAAMpB,cAAcyD,GAAG,GAAGrC,SAAS;IAAG,GAAGoC,SAAQ"}

package/src/lib/server/pos-hardware-webhook.d.ts

@@ -24,6 +24,11 @@ export declare function posHardwareOrderFromSession(session: any, now?: number):
 /**
  * Writes the order once, with its retained sale record. `created` is false
  * when a delivery already did, so the caller tells people only the first time.
+ *
+ * Once means once by the ID, wherever the order now is: the sale record is
+ * top-level and keyed by the order id, and is written with every order, so
+ * an in-person order that has since moved to the buyer's workspace
+ * (AGL-4038) is found by it and never recorded a second time where it began.
  */
 export declare function recordPosHardwareOrder(orderId: string, order: PosHardwareOrder): Promise<{
     created: boolean;

package/src/lib/server/pos-hardware-webhook.js

@@ -15,9 +15,11 @@
  * limitations under the License.
  */ import { _ as _extends } from "@swc/helpers/_/_extends";
 import { firebaseAdmin } from "@aglyn/tenant-data-admin";
-import { decodePosHardwareLines, isPosHardwareShippingMethod, POS_HARDWARE_CURRENCY, POS_HARDWARE_METADATA_TYPE, POS_HARDWARE_ORDER_ID, POS_HARDWARE_SHIPPING_LABELS, posHardwareSaleRecord } from "../model/pos-hardware.js";
+import { decodePosHardwareLines, isPosHardwareShippingMethod, POS_HARDWARE_CURRENCY, POS_HARDWARE_METADATA_TYPE, POS_HARDWARE_ORDER_ID, POS_HARDWARE_SHIPPING_LABELS, posHardwareSaleRecord, posHardwareSaleSetOptions } from "../model/pos-hardware.js";
 import { hardwareOrdersRef, posHardwareSaleRef } from "./pos-hardware.js";
 import { raisePosHardwareOrderAlert, sendPosHardwareEmail } from "./pos-hardware-notify.js";
+import { posStripe } from "./pos-stripe.js";
+import { stripeTaxBreakdownLines } from "./storefront-tax.js";
 /*==========================================
  * A PAID HARDWARE CHECKOUT BECOMES AN ORDER (AGL-4038).
  *
@@ -36,6 +38,13 @@ import { raisePosHardwareOrderAlert, sendPosHardwareEmail } from "./pos-hardware
  * NOTHING ON THE WIRE IS TRUSTED FOR WHAT IT NAMES. The lines are re-read
  * against the catalog; the amounts are Stripe's own totals for the session;
  * an unreadable session is logged and ignored rather than half-recorded.
+ *
+ * THE TAX BASE IS KEPT, NEVER INFERRED. Where Stripe Tax computed the tax,
+ * the session's breakdown — the base each rate was applied to — is read back
+ * (the delivered event does not carry it) and kept on the order and its sale
+ * record, because the platform's sales tax return reports that base as its
+ * taxable sales. A read that fails records no lines, and the return counts
+ * the order as taxed with no stated base rather than as a zero base.
  *=========================================*/ function addressFrom(raw) {
     var _raw_line1, _raw_city, _raw_postal_code, _raw_country, _raw_line2, _raw_state;
     if (!raw || typeof raw !== 'object') return null;
@@ -65,7 +74,7 @@ const cents = (value)=>{
 };
 /** The order a paid session describes, or `null` when it is not readable. */ export function posHardwareOrderFromSession(session, now = Date.now()) {
     var _ref, _metadata_orderId, _metadata_orgId, _metadata_hostId, _ref1, _ref2, _ref3, _metadata_uid, _ref4, _ref5, _ref6, _ref7, _ref8, _ref9, _ref10;
-    var _session_collected_information, _session_shipping_cost, _session_total_details;
+    var _session_collected_information, _session_shipping_cost, _session_total_details, _session_automatic_tax;
     const metadata = (_ref = session == null ? void 0 : session.metadata) != null ? _ref : {};
     if (metadata.type !== POS_HARDWARE_METADATA_TYPE) return null;
     const orderId = String((_metadata_orderId = metadata.orderId) != null ? _metadata_orderId : '');
@@ -103,6 +112,10 @@ const cents = (value)=>{
             taxCents,
             totalCents,
             currency: String((_ref8 = session == null ? void 0 : session.currency) != null ? _ref8 : POS_HARDWARE_CURRENCY),
+            automaticTax: (session == null ? void 0 : (_session_automatic_tax = session.automatic_tax) == null ? void 0 : _session_automatic_tax.enabled) === true,
+            // From whatever breakdown the delivered session carries; the handler
+            // reads the expanded one where Stripe Tax ran.
+            taxLines: stripeTaxBreakdownLines(session),
             stripeCheckoutSessionId: String((_ref9 = session == null ? void 0 : session.id) != null ? _ref9 : ''),
             stripePaymentIntentId: (typeof paymentIntent === 'string' ? paymentIntent : String((_ref10 = paymentIntent == null ? void 0 : paymentIntent.id) != null ? _ref10 : '')) || null,
             stripeHardwareOrderId: null,
@@ -115,19 +128,51 @@ const cents = (value)=>{
         }
     };
 }
+/**
+ * The session with its tax breakdown, which the delivered event does not
+ * carry, or the delivered session when the read fails. Never throws: the
+ * order is recorded either way.
+ */ async function withTaxBreakdown(session) {
+    var _ref;
+    var _session_automatic_tax, _session_total_details_breakdown, _session_total_details;
+    if ((session == null ? void 0 : (_session_automatic_tax = session.automatic_tax) == null ? void 0 : _session_automatic_tax.enabled) !== true) return session;
+    if (Array.isArray(session == null ? void 0 : (_session_total_details = session.total_details) == null ? void 0 : (_session_total_details_breakdown = _session_total_details.breakdown) == null ? void 0 : _session_total_details_breakdown.taxes)) return session;
+    const id = String((_ref = session == null ? void 0 : session.id) != null ? _ref : '');
+    if (!id) return session;
+    try {
+        var _read_body;
+        const read = await posStripe('GET', `checkout/sessions/${encodeURIComponent(id)}`, {
+            params: {
+                'expand[]': 'total_details.breakdown'
+            }
+        });
+        return read.ok && ((_read_body = read.body) == null ? void 0 : _read_body.id) === id ? read.body : session;
+    } catch (error) {
+        console.error('[pos-hardware] the tax breakdown could not be read', id, error);
+        return session;
+    }
+}
 /**
  * Writes the order once, with its retained sale record. `created` is false
  * when a delivery already did, so the caller tells people only the first time.
+ *
+ * Once means once by the ID, wherever the order now is: the sale record is
+ * top-level and keyed by the order id, and is written with every order, so
+ * an in-person order that has since moved to the buyer's workspace
+ * (AGL-4038) is found by it and never recorded a second time where it began.
  */ export async function recordPosHardwareOrder(orderId, order) {
     const ref = hardwareOrdersRef(order.orgId).doc(orderId);
     const saleRef = posHardwareSaleRef(orderId);
     return firebaseAdmin.app().firestore().runTransaction(async (transaction)=>{
-        const existing = await transaction.get(ref);
-        if (existing.exists) return {
+        const [existing, sale] = await Promise.all([
+            transaction.get(ref),
+            transaction.get(saleRef)
+        ]);
+        if (existing.exists || sale.exists) return {
             created: false
         };
         transaction.create(ref, order);
-        transaction.set(saleRef, posHardwareSaleRecord(orderId, order));
+        transaction.set(saleRef, posHardwareSaleRecord(orderId, order), posHardwareSaleSetOptions(order));
         return {
             created: true
         };
@@ -148,7 +193,7 @@ export const posHardwareBillingWebhookHandler = async ({ type, object })=>{
             hostId
         } : {});
     }
-    const parsed = posHardwareOrderFromSession(object);
+    const parsed = posHardwareOrderFromSession(await withTaxBreakdown(object));
     if (!parsed) {
         var _ref1;
         console.error('[pos-hardware] a paid hardware session could not be read', String((_ref1 = object == null ? void 0 : object.id) != null ? _ref1 : ''));

package/src/lib/server/pos-hardware-webhook.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-hardware-webhook.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { BillingWebhookHandler } from '@aglyn/aglyn/server'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport {\n  decodePosHardwareLines,\n  isPosHardwareShippingMethod,\n  POS_HARDWARE_CURRENCY,\n  POS_HARDWARE_METADATA_TYPE,\n  POS_HARDWARE_ORDER_ID,\n  POS_HARDWARE_SHIPPING_LABELS,\n  posHardwareSaleRecord,\n  type PosHardwareAddress,\n  type PosHardwareOrder,\n} from '../model/pos-hardware'\nimport { hardwareOrdersRef, posHardwareSaleRef } from './pos-hardware'\nimport { raisePosHardwareOrderAlert, sendPosHardwareEmail } from './pos-hardware-notify'\n\n/*==========================================\n * A PAID HARDWARE CHECKOUT BECOMES AN ORDER (AGL-4038).\n *\n * The platform's Stripe webhook fans every event out to the plugins' handlers\n * (`registerBillingWebhookHandler`); this one self-selects on a\n * `checkout.session.completed` whose metadata says it is a POS hardware\n * order, and writes `orgs/{orgId}/hardwareOrders/{orderId}` and, in the same\n * transaction, the retained sale record `posHardwareSales/{orderId}` that\n * outlives the workspace (see `PosHardwareSaleRecord`).\n *\n * IDEMPOTENT BY THE ORDER ID. The id was fixed when the session was made\n * (from the merchant's attempt key), and the write is a transactional\n * create: a redelivered event finds the document and does nothing, so a\n * replay never makes a second order, a second email or a second alert.\n *\n * NOTHING ON THE WIRE IS TRUSTED FOR WHAT IT NAMES. The lines are re-read\n * against the catalog; the amounts are Stripe's own totals for the session;\n * an unreadable session is logged and ignored rather than half-recorded.\n *=========================================*/\n\nfunction addressFrom(raw: any): PosHardwareAddress | null {\n  if (!raw || typeof raw !== 'object') return null\n  const line1 = String(raw.line1 ?? '').trim()\n  const city = String(raw.city ?? '').trim()\n  const postalCode = String(raw.postal_code ?? '').trim()\n  const country = String(raw.country ?? '').trim().toUpperCase()\n  if (!line1 || !city || !postalCode || !country) return null\n  const line2 = String(raw.line2 ?? '').trim()\n  const state = String(raw.state ?? '').trim()\n  return {\n    line1: line1.slice(0, 200),\n    ...(line2 ? { line2: line2.slice(0, 200) } : {}),\n    city: city.slice(0, 100),\n    ...(state ? { state: state.slice(0, 100) } : {}),\n    postalCode: postalCode.slice(0, 20),\n    country: country.slice(0, 2),\n  }\n}\n\nconst cents = (value: unknown): number => {\n  const number = Number(value)\n  return Number.isSafeInteger(number) && number >= 0 ? number : 0\n}\n\n/** The order a paid session describes, or `null` when it is not readable. */\nexport function posHardwareOrderFromSession(\n  session: any,\n  now = Date.now(),\n): { orderId: string; order: PosHardwareOrder } | null {\n  const metadata = session?.metadata ?? {}\n  if (metadata.type !== POS_HARDWARE_METADATA_TYPE) return null\n  const orderId = String(metadata.orderId ?? '')\n  const orgId = String(metadata.orgId ?? '')\n  const hostId = String(metadata.hostId ?? '')\n  if (!POS_HARDWARE_ORDER_ID.test(orderId) || !orgId || !hostId) return null\n  const lines = decodePosHardwareLines(metadata.lines)\n  if (!lines) return null\n  const method = isPosHardwareShippingMethod(metadata.shippingMethod) ? metadata.shippingMethod : 'standard'\n  // Where the newer API versions keep the shipping details, then the older.\n  const shippingDetails =\n    session?.collected_information?.shipping_details ?? session?.shipping_details ?? null\n  const customer = session?.customer_details ?? {}\n  const subtotalCents = lines.reduce((sum, line) => sum + line.lineCents, 0)\n  const shippingCents =\n    session?.shipping_cost?.amount_total != null\n      ? cents(session.shipping_cost.amount_total)\n      : cents(metadata.shippingCents)\n  const taxCents = cents(session?.total_details?.amount_tax)\n  const totalCents =\n    session?.amount_total != null ? cents(session.amount_total) : subtotalCents + shippingCents + taxCents\n  const paymentIntent = session?.payment_intent\n  return {\n    orderId,\n    order: {\n      orgId,\n      hostId,\n      createdBy: String(metadata.uid ?? ''),\n      contactEmail: String(customer?.email ?? '').trim() || null,\n      lines,\n      subtotalCents,\n      shipping: {\n        method,\n        label: POS_HARDWARE_SHIPPING_LABELS[method],\n        cents: shippingCents,\n        name: String(shippingDetails?.name ?? customer?.name ?? '').trim() || null,\n        phone: String(customer?.phone ?? '').trim() || null,\n        address: addressFrom(shippingDetails?.address),\n      },\n      taxCents,\n      totalCents,\n      currency: String(session?.currency ?? POS_HARDWARE_CURRENCY),\n      stripeCheckoutSessionId: String(session?.id ?? ''),\n      stripePaymentIntentId:\n        (typeof paymentIntent === 'string' ? paymentIntent : String(paymentIntent?.id ?? '')) || null,\n      stripeHardwareOrderId: null,\n      tracking: null,\n      status: 'paid',\n      livemode: session?.livemode === true,\n      createdAtMs: now,\n      updatedAtMs: now,\n      paidAtMs: now,\n    },\n  }\n}\n\n/**\n * Writes the order once, with its retained sale record. `created` is false\n * when a delivery already did, so the caller tells people only the first time.\n */\nexport async function recordPosHardwareOrder(\n  orderId: string,\n  order: PosHardwareOrder,\n): Promise<{ created: boolean }> {\n  const ref = hardwareOrdersRef(order.orgId).doc(orderId)\n  const saleRef = posHardwareSaleRef(orderId)\n  return firebaseAdmin\n    .app()\n    .firestore()\n    .runTransaction(async (transaction: any) => {\n      const existing = await transaction.get(ref)\n      if (existing.exists) return { created: false }\n      transaction.create(ref, order)\n      transaction.set(saleRef, posHardwareSaleRecord(orderId, order))\n      return { created: true }\n    })\n}\n\nexport const posHardwareBillingWebhookHandler: BillingWebhookHandler = async ({ type, object }) => {\n  if (type !== 'checkout.session.completed') return\n  if (object?.metadata?.type !== POS_HARDWARE_METADATA_TYPE) return\n  const hostId = String(object?.metadata?.hostId ?? '')\n  // A session that is not paid holds nothing to fulfil. Card is the only\n  // method offered, so payment is settled when the session completes.\n  if (object?.mode !== 'payment' || object?.payment_status !== 'paid') {\n    return { claimed: true, ...(hostId ? { hostId } : {}) }\n  }\n  const parsed = posHardwareOrderFromSession(object)\n  if (!parsed) {\n    console.error('[pos-hardware] a paid hardware session could not be read', String(object?.id ?? ''))\n    return { claimed: true, ...(hostId ? { hostId } : {}) }\n  }\n  // Errors here propagate on purpose: the route answers 500 and Stripe\n  // redelivers, and the create above makes the retry safe.\n  const { created } = await recordPosHardwareOrder(parsed.orderId, parsed.order)\n  if (created) {\n    await Promise.all([\n      sendPosHardwareEmail('received', parsed.orderId, parsed.order),\n      raisePosHardwareOrderAlert(parsed.orderId, parsed.order),\n    ])\n  }\n  return { claimed: true, hostId: parsed.order.hostId }\n}\n"],"names":["firebaseAdmin","decodePosHardwareLines","isPosHardwareShippingMethod","POS_HARDWARE_CURRENCY","POS_HARDWARE_METADATA_TYPE","POS_HARDWARE_ORDER_ID","POS_HARDWARE_SHIPPING_LABELS","posHardwareSaleRecord","hardwareOrdersRef","posHardwareSaleRef","raisePosHardwareOrderAlert","sendPosHardwareEmail","addressFrom","raw","line1","String","trim","city","postalCode","postal_code","country","toUpperCase","line2","state","slice","cents","value","number","Number","isSafeInteger","posHardwareOrderFromSession","session","now","Date","metadata","shippingDetails","type","orderId","orgId","hostId","test","lines","method","shippingMethod","collected_information","shipping_details","customer","customer_details","subtotalCents","reduce","sum","line","lineCents","shippingCents","shipping_cost","amount_total","taxCents","total_details","amount_tax","totalCents","paymentIntent","payment_intent","order","createdBy","uid","contactEmail","email","shipping","label","name","phone","address","currency","stripeCheckoutSessionId","id","stripePaymentIntentId","stripeHardwareOrderId","tracking","status","livemode","createdAtMs","updatedAtMs","paidAtMs","recordPosHardwareOrder","ref","doc","saleRef","app","firestore","runTransaction","transaction","existing","get","exists","created","create","set","posHardwareBillingWebhookHandler","object","mode","payment_status","claimed","parsed","console","error","Promise","all"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,SAASA,aAAa,QAAQ,2BAA0B;AACxD,SACEC,sBAAsB,EACtBC,2BAA2B,EAC3BC,qBAAqB,EACrBC,0BAA0B,EAC1BC,qBAAqB,EACrBC,4BAA4B,EAC5BC,qBAAqB,QAGhB,2BAAuB;AAC9B,SAASC,iBAAiB,EAAEC,kBAAkB,QAAQ,oBAAgB;AACtE,SAASC,0BAA0B,EAAEC,oBAAoB,QAAQ,2BAAuB;AAExF;;;;;;;;;;;;;;;;;;2CAkB2C,GAE3C,SAASC,YAAYC,GAAQ;QAENA,YACDA,WACMA,kBACHA,cAEFA,YACAA;IAPrB,IAAI,CAACA,OAAO,OAAOA,QAAQ,UAAU,OAAO;IAC5C,MAAMC,QAAQC,QAAOF,aAAAA,IAAIC,KAAK,YAATD,aAAa,IAAIG,IAAI;IAC1C,MAAMC,OAAOF,QAAOF,YAAAA,IAAII,IAAI,YAARJ,YAAY,IAAIG,IAAI;IACxC,MAAME,aAAaH,QAAOF,mBAAAA,IAAIM,WAAW,YAAfN,mBAAmB,IAAIG,IAAI;IACrD,MAAMI,UAAUL,QAAOF,eAAAA,IAAIO,OAAO,YAAXP,eAAe,IAAIG,IAAI,GAAGK,WAAW;IAC5D,IAAI,CAACP,SAAS,CAACG,QAAQ,CAACC,cAAc,CAACE,SAAS,OAAO;IACvD,MAAME,QAAQP,QAAOF,aAAAA,IAAIS,KAAK,YAATT,aAAa,IAAIG,IAAI;IAC1C,MAAMO,QAAQR,QAAOF,aAAAA,IAAIU,KAAK,YAATV,aAAa,IAAIG,IAAI;IAC1C,OAAO;QACLF,OAAOA,MAAMU,KAAK,CAAC,GAAG;OAClBF,QAAQ;QAAEA,OAAOA,MAAME,KAAK,CAAC,GAAG;IAAK,IAAI,CAAC;QAC9CP,MAAMA,KAAKO,KAAK,CAAC,GAAG;OAChBD,QAAQ;QAAEA,OAAOA,MAAMC,KAAK,CAAC,GAAG;IAAK,IAAI,CAAC;QAC9CN,YAAYA,WAAWM,KAAK,CAAC,GAAG;QAChCJ,SAASA,QAAQI,KAAK,CAAC,GAAG;;AAE9B;AAEA,MAAMC,QAAQ,CAACC;IACb,MAAMC,SAASC,OAAOF;IACtB,OAAOE,OAAOC,aAAa,CAACF,WAAWA,UAAU,IAAIA,SAAS;AAChE;AAEA,2EAA2E,GAC3E,OAAO,SAASG,4BACdC,OAAY,EACZC,MAAMC,KAAKD,GAAG,EAAE;cAIOE,mBACFA,iBACCA,kBAOpBH,qBAgBoBG,sBAQHC;QAxBjBJ,gCAIAA,wBAGqBA;IAlBvB,MAAMG,mBAAWH,2BAAAA,QAASG,QAAQ,mBAAI,CAAC;IACvC,IAAIA,SAASE,IAAI,KAAKhC,4BAA4B,OAAO;IACzD,MAAMiC,UAAUtB,QAAOmB,oBAAAA,SAASG,OAAO,YAAhBH,oBAAoB;IAC3C,MAAMI,QAAQvB,QAAOmB,kBAAAA,SAASI,KAAK,YAAdJ,kBAAkB;IACvC,MAAMK,SAASxB,QAAOmB,mBAAAA,SAASK,MAAM,YAAfL,mBAAmB;IACzC,IAAI,CAAC7B,sBAAsBmC,IAAI,CAACH,YAAY,CAACC,SAAS,CAACC,QAAQ,OAAO;IACtE,MAAME,QAAQxC,uBAAuBiC,SAASO,KAAK;IACnD,IAAI,CAACA,OAAO,OAAO;IACnB,MAAMC,SAASxC,4BAA4BgC,SAASS,cAAc,IAAIT,SAASS,cAAc,GAAG;IAChG,0EAA0E;IAC1E,MAAMR,mBACJJ,iBAAAA,4BAAAA,iCAAAA,QAASa,qBAAqB,qBAA9Bb,+BAAgCc,gBAAgB,oBAAId,2BAAAA,QAASc,gBAAgB,YAA7Ed,QAAiF;IACnF,MAAMe,oBAAWf,2BAAAA,QAASgB,gBAAgB,oBAAI,CAAC;IAC/C,MAAMC,gBAAgBP,MAAMQ,MAAM,CAAC,CAACC,KAAKC,OAASD,MAAMC,KAAKC,SAAS,EAAE;IACxE,MAAMC,gBACJtB,CAAAA,4BAAAA,yBAAAA,QAASuB,aAAa,qBAAtBvB,uBAAwBwB,YAAY,KAAI,OACpC9B,MAAMM,QAAQuB,aAAa,CAACC,YAAY,IACxC9B,MAAMS,SAASmB,aAAa;IAClC,MAAMG,WAAW/B,MAAMM,4BAAAA,yBAAAA,QAAS0B,aAAa,qBAAtB1B,uBAAwB2B,UAAU;IACzD,MAAMC,aACJ5B,CAAAA,2BAAAA,QAASwB,YAAY,KAAI,OAAO9B,MAAMM,QAAQwB,YAAY,IAAIP,gBAAgBK,gBAAgBG;IAChG,MAAMI,gBAAgB7B,2BAAAA,QAAS8B,cAAc;IAC7C,OAAO;QACLxB;QACAyB,OAAO;YACLxB;YACAC;YACAwB,WAAWhD,QAAOmB,gBAAAA,SAAS8B,GAAG,YAAZ9B,gBAAgB;YAClC+B,cAAclD,gBAAO+B,4BAAAA,SAAUoB,KAAK,oBAAI,IAAIlD,IAAI,MAAM;YACtDyB;YACAO;YACAmB,UAAU;gBACRzB;gBACA0B,OAAO9D,4BAA4B,CAACoC,OAAO;gBAC3CjB,OAAO4B;gBACPgB,MAAMtD,QAAOoB,iBAAAA,mCAAAA,gBAAiBkC,IAAI,oBAAIvB,4BAAAA,SAAUuB,IAAI,YAAvClC,QAA2C,IAAInB,IAAI,MAAM;gBACtEsD,OAAOvD,gBAAO+B,4BAAAA,SAAUwB,KAAK,oBAAI,IAAItD,IAAI,MAAM;gBAC/CuD,SAAS3D,YAAYuB,mCAAAA,gBAAiBoC,OAAO;YAC/C;YACAf;YACAG;YACAa,UAAUzD,gBAAOgB,2BAAAA,QAASyC,QAAQ,oBAAIrE;YACtCsE,yBAAyB1D,gBAAOgB,2BAAAA,QAAS2C,EAAE,oBAAI;YAC/CC,uBACE,AAAC,CAAA,OAAOf,kBAAkB,WAAWA,gBAAgB7C,iBAAO6C,iCAAAA,cAAec,EAAE,qBAAI,GAAE,KAAM;YAC3FE,uBAAuB;YACvBC,UAAU;YACVC,QAAQ;YACRC,UAAUhD,CAAAA,2BAAAA,QAASgD,QAAQ,MAAK;YAChCC,aAAahD;YACbiD,aAAajD;YACbkD,UAAUlD;QACZ;IACF;AACF;AAEA;;;CAGC,GACD,OAAO,eAAemD,uBACpB9C,OAAe,EACfyB,KAAuB;IAEvB,MAAMsB,MAAM5E,kBAAkBsD,MAAMxB,KAAK,EAAE+C,GAAG,CAAChD;IAC/C,MAAMiD,UAAU7E,mBAAmB4B;IACnC,OAAOrC,cACJuF,GAAG,GACHC,SAAS,GACTC,cAAc,CAAC,OAAOC;QACrB,MAAMC,WAAW,MAAMD,YAAYE,GAAG,CAACR;QACvC,IAAIO,SAASE,MAAM,EAAE,OAAO;YAAEC,SAAS;QAAM;QAC7CJ,YAAYK,MAAM,CAACX,KAAKtB;QACxB4B,YAAYM,GAAG,CAACV,SAAS/E,sBAAsB8B,SAASyB;QACxD,OAAO;YAAEgC,SAAS;QAAK;IACzB;AACJ;AAEA,OAAO,MAAMG,mCAA0D,OAAO,EAAE7D,IAAI,EAAE8D,MAAM,EAAE;;QAExFA,kBACkBA;IAFtB,IAAI9D,SAAS,8BAA8B;IAC3C,IAAI8D,CAAAA,2BAAAA,mBAAAA,OAAQhE,QAAQ,qBAAhBgE,iBAAkB9D,IAAI,MAAKhC,4BAA4B;IAC3D,MAAMmC,SAASxB,eAAOmF,2BAAAA,oBAAAA,OAAQhE,QAAQ,qBAAhBgE,kBAAkB3D,MAAM,mBAAI;IAClD,uEAAuE;IACvE,oEAAoE;IACpE,IAAI2D,CAAAA,0BAAAA,OAAQC,IAAI,MAAK,aAAaD,CAAAA,0BAAAA,OAAQE,cAAc,MAAK,QAAQ;QACnE,OAAO;YAAEC,SAAS;WAAU9D,SAAS;YAAEA;QAAO,IAAI,CAAC;IACrD;IACA,MAAM+D,SAASxE,4BAA4BoE;IAC3C,IAAI,CAACI,QAAQ;;QACXC,QAAQC,KAAK,CAAC,4DAA4DzF,gBAAOmF,0BAAAA,OAAQxB,EAAE,oBAAI;QAC/F,OAAO;YAAE2B,SAAS;WAAU9D,SAAS;YAAEA;QAAO,IAAI,CAAC;IACrD;IACA,qEAAqE;IACrE,yDAAyD;IACzD,MAAM,EAAEuD,OAAO,EAAE,GAAG,MAAMX,uBAAuBmB,OAAOjE,OAAO,EAAEiE,OAAOxC,KAAK;IAC7E,IAAIgC,SAAS;QACX,MAAMW,QAAQC,GAAG,CAAC;YAChB/F,qBAAqB,YAAY2F,OAAOjE,OAAO,EAAEiE,OAAOxC,KAAK;YAC7DpD,2BAA2B4F,OAAOjE,OAAO,EAAEiE,OAAOxC,KAAK;SACxD;IACH;IACA,OAAO;QAAEuC,SAAS;QAAM9D,QAAQ+D,OAAOxC,KAAK,CAACvB,MAAM;IAAC;AACtD,EAAC"}
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-hardware-webhook.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type { BillingWebhookHandler } from '@aglyn/aglyn/server'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport {\n  decodePosHardwareLines,\n  isPosHardwareShippingMethod,\n  POS_HARDWARE_CURRENCY,\n  POS_HARDWARE_METADATA_TYPE,\n  POS_HARDWARE_ORDER_ID,\n  POS_HARDWARE_SHIPPING_LABELS,\n  posHardwareSaleRecord,\n  posHardwareSaleSetOptions,\n  type PosHardwareAddress,\n  type PosHardwareOrder,\n} from '../model/pos-hardware'\nimport { hardwareOrdersRef, posHardwareSaleRef } from './pos-hardware'\nimport { raisePosHardwareOrderAlert, sendPosHardwareEmail } from './pos-hardware-notify'\nimport { posStripe } from './pos-stripe'\nimport { stripeTaxBreakdownLines } from './storefront-tax'\n\n/*==========================================\n * A PAID HARDWARE CHECKOUT BECOMES AN ORDER (AGL-4038).\n *\n * The platform's Stripe webhook fans every event out to the plugins' handlers\n * (`registerBillingWebhookHandler`); this one self-selects on a\n * `checkout.session.completed` whose metadata says it is a POS hardware\n * order, and writes `orgs/{orgId}/hardwareOrders/{orderId}` and, in the same\n * transaction, the retained sale record `posHardwareSales/{orderId}` that\n * outlives the workspace (see `PosHardwareSaleRecord`).\n *\n * IDEMPOTENT BY THE ORDER ID. The id was fixed when the session was made\n * (from the merchant's attempt key), and the write is a transactional\n * create: a redelivered event finds the document and does nothing, so a\n * replay never makes a second order, a second email or a second alert.\n *\n * NOTHING ON THE WIRE IS TRUSTED FOR WHAT IT NAMES. The lines are re-read\n * against the catalog; the amounts are Stripe's own totals for the session;\n * an unreadable session is logged and ignored rather than half-recorded.\n *\n * THE TAX BASE IS KEPT, NEVER INFERRED. Where Stripe Tax computed the tax,\n * the session's breakdown — the base each rate was applied to — is read back\n * (the delivered event does not carry it) and kept on the order and its sale\n * record, because the platform's sales tax return reports that base as its\n * taxable sales. A read that fails records no lines, and the return counts\n * the order as taxed with no stated base rather than as a zero base.\n *=========================================*/\n\nfunction addressFrom(raw: any): PosHardwareAddress | null {\n  if (!raw || typeof raw !== 'object') return null\n  const line1 = String(raw.line1 ?? '').trim()\n  const city = String(raw.city ?? '').trim()\n  const postalCode = String(raw.postal_code ?? '').trim()\n  const country = String(raw.country ?? '').trim().toUpperCase()\n  if (!line1 || !city || !postalCode || !country) return null\n  const line2 = String(raw.line2 ?? '').trim()\n  const state = String(raw.state ?? '').trim()\n  return {\n    line1: line1.slice(0, 200),\n    ...(line2 ? { line2: line2.slice(0, 200) } : {}),\n    city: city.slice(0, 100),\n    ...(state ? { state: state.slice(0, 100) } : {}),\n    postalCode: postalCode.slice(0, 20),\n    country: country.slice(0, 2),\n  }\n}\n\nconst cents = (value: unknown): number => {\n  const number = Number(value)\n  return Number.isSafeInteger(number) && number >= 0 ? number : 0\n}\n\n/** The order a paid session describes, or `null` when it is not readable. */\nexport function posHardwareOrderFromSession(\n  session: any,\n  now = Date.now(),\n): { orderId: string; order: PosHardwareOrder } | null {\n  const metadata = session?.metadata ?? {}\n  if (metadata.type !== POS_HARDWARE_METADATA_TYPE) return null\n  const orderId = String(metadata.orderId ?? '')\n  const orgId = String(metadata.orgId ?? '')\n  const hostId = String(metadata.hostId ?? '')\n  if (!POS_HARDWARE_ORDER_ID.test(orderId) || !orgId || !hostId) return null\n  const lines = decodePosHardwareLines(metadata.lines)\n  if (!lines) return null\n  const method = isPosHardwareShippingMethod(metadata.shippingMethod) ? metadata.shippingMethod : 'standard'\n  // Where the newer API versions keep the shipping details, then the older.\n  const shippingDetails =\n    session?.collected_information?.shipping_details ?? session?.shipping_details ?? null\n  const customer = session?.customer_details ?? {}\n  const subtotalCents = lines.reduce((sum, line) => sum + line.lineCents, 0)\n  const shippingCents =\n    session?.shipping_cost?.amount_total != null\n      ? cents(session.shipping_cost.amount_total)\n      : cents(metadata.shippingCents)\n  const taxCents = cents(session?.total_details?.amount_tax)\n  const totalCents =\n    session?.amount_total != null ? cents(session.amount_total) : subtotalCents + shippingCents + taxCents\n  const paymentIntent = session?.payment_intent\n  return {\n    orderId,\n    order: {\n      orgId,\n      hostId,\n      createdBy: String(metadata.uid ?? ''),\n      contactEmail: String(customer?.email ?? '').trim() || null,\n      lines,\n      subtotalCents,\n      shipping: {\n        method,\n        label: POS_HARDWARE_SHIPPING_LABELS[method],\n        cents: shippingCents,\n        name: String(shippingDetails?.name ?? customer?.name ?? '').trim() || null,\n        phone: String(customer?.phone ?? '').trim() || null,\n        address: addressFrom(shippingDetails?.address),\n      },\n      taxCents,\n      totalCents,\n      currency: String(session?.currency ?? POS_HARDWARE_CURRENCY),\n      automaticTax: session?.automatic_tax?.enabled === true,\n      // From whatever breakdown the delivered session carries; the handler\n      // reads the expanded one where Stripe Tax ran.\n      taxLines: stripeTaxBreakdownLines(session),\n      stripeCheckoutSessionId: String(session?.id ?? ''),\n      stripePaymentIntentId:\n        (typeof paymentIntent === 'string' ? paymentIntent : String(paymentIntent?.id ?? '')) || null,\n      stripeHardwareOrderId: null,\n      tracking: null,\n      status: 'paid',\n      livemode: session?.livemode === true,\n      createdAtMs: now,\n      updatedAtMs: now,\n      paidAtMs: now,\n    },\n  }\n}\n\n/**\n * The session with its tax breakdown, which the delivered event does not\n * carry, or the delivered session when the read fails. Never throws: the\n * order is recorded either way.\n */\nasync function withTaxBreakdown(session: any): Promise<any> {\n  if (session?.automatic_tax?.enabled !== true) return session\n  if (Array.isArray(session?.total_details?.breakdown?.taxes)) return session\n  const id = String(session?.id ?? '')\n  if (!id) return session\n  try {\n    const read = await posStripe('GET', `checkout/sessions/${encodeURIComponent(id)}`, {\n      params: { 'expand[]': 'total_details.breakdown' },\n    })\n    return read.ok && read.body?.id === id ? read.body : session\n  } catch (error) {\n    console.error('[pos-hardware] the tax breakdown could not be read', id, error)\n    return session\n  }\n}\n\n/**\n * Writes the order once, with its retained sale record. `created` is false\n * when a delivery already did, so the caller tells people only the first time.\n *\n * Once means once by the ID, wherever the order now is: the sale record is\n * top-level and keyed by the order id, and is written with every order, so\n * an in-person order that has since moved to the buyer's workspace\n * (AGL-4038) is found by it and never recorded a second time where it began.\n */\nexport async function recordPosHardwareOrder(\n  orderId: string,\n  order: PosHardwareOrder,\n): Promise<{ created: boolean }> {\n  const ref = hardwareOrdersRef(order.orgId).doc(orderId)\n  const saleRef = posHardwareSaleRef(orderId)\n  return firebaseAdmin\n    .app()\n    .firestore()\n    .runTransaction(async (transaction: any) => {\n      const [existing, sale] = await Promise.all([transaction.get(ref), transaction.get(saleRef)])\n      if (existing.exists || sale.exists) return { created: false }\n      transaction.create(ref, order)\n      transaction.set(saleRef, posHardwareSaleRecord(orderId, order), posHardwareSaleSetOptions(order))\n      return { created: true }\n    })\n}\n\nexport const posHardwareBillingWebhookHandler: BillingWebhookHandler = async ({ type, object }) => {\n  if (type !== 'checkout.session.completed') return\n  if (object?.metadata?.type !== POS_HARDWARE_METADATA_TYPE) return\n  const hostId = String(object?.metadata?.hostId ?? '')\n  // A session that is not paid holds nothing to fulfil. Card is the only\n  // method offered, so payment is settled when the session completes.\n  if (object?.mode !== 'payment' || object?.payment_status !== 'paid') {\n    return { claimed: true, ...(hostId ? { hostId } : {}) }\n  }\n  const parsed = posHardwareOrderFromSession(await withTaxBreakdown(object))\n  if (!parsed) {\n    console.error('[pos-hardware] a paid hardware session could not be read', String(object?.id ?? ''))\n    return { claimed: true, ...(hostId ? { hostId } : {}) }\n  }\n  // Errors here propagate on purpose: the route answers 500 and Stripe\n  // redelivers, and the create above makes the retry safe.\n  const { created } = await recordPosHardwareOrder(parsed.orderId, parsed.order)\n  if (created) {\n    await Promise.all([\n      sendPosHardwareEmail('received', parsed.orderId, parsed.order),\n      raisePosHardwareOrderAlert(parsed.orderId, parsed.order),\n    ])\n  }\n  return { claimed: true, hostId: parsed.order.hostId }\n}\n"],"names":["firebaseAdmin","decodePosHardwareLines","isPosHardwareShippingMethod","POS_HARDWARE_CURRENCY","POS_HARDWARE_METADATA_TYPE","POS_HARDWARE_ORDER_ID","POS_HARDWARE_SHIPPING_LABELS","posHardwareSaleRecord","posHardwareSaleSetOptions","hardwareOrdersRef","posHardwareSaleRef","raisePosHardwareOrderAlert","sendPosHardwareEmail","posStripe","stripeTaxBreakdownLines","addressFrom","raw","line1","String","trim","city","postalCode","postal_code","country","toUpperCase","line2","state","slice","cents","value","number","Number","isSafeInteger","posHardwareOrderFromSession","session","now","Date","metadata","shippingDetails","type","orderId","orgId","hostId","test","lines","method","shippingMethod","collected_information","shipping_details","customer","customer_details","subtotalCents","reduce","sum","line","lineCents","shippingCents","shipping_cost","amount_total","taxCents","total_details","amount_tax","totalCents","paymentIntent","payment_intent","order","createdBy","uid","contactEmail","email","shipping","label","name","phone","address","currency","automaticTax","automatic_tax","enabled","taxLines","stripeCheckoutSessionId","id","stripePaymentIntentId","stripeHardwareOrderId","tracking","status","livemode","createdAtMs","updatedAtMs","paidAtMs","withTaxBreakdown","Array","isArray","breakdown","taxes","read","encodeURIComponent","params","ok","body","error","console","recordPosHardwareOrder","ref","doc","saleRef","app","firestore","runTransaction","transaction","existing","sale","Promise","all","get","exists","created","create","set","posHardwareBillingWebhookHandler","object","mode","payment_status","claimed","parsed"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAGD,SAASA,aAAa,QAAQ,2BAA0B;AACxD,SACEC,sBAAsB,EACtBC,2BAA2B,EAC3BC,qBAAqB,EACrBC,0BAA0B,EAC1BC,qBAAqB,EACrBC,4BAA4B,EAC5BC,qBAAqB,EACrBC,yBAAyB,QAGpB,2BAAuB;AAC9B,SAASC,iBAAiB,EAAEC,kBAAkB,QAAQ,oBAAgB;AACtE,SAASC,0BAA0B,EAAEC,oBAAoB,QAAQ,2BAAuB;AACxF,SAASC,SAAS,QAAQ,kBAAc;AACxC,SAASC,uBAAuB,QAAQ,sBAAkB;AAE1D;;;;;;;;;;;;;;;;;;;;;;;;;2CAyB2C,GAE3C,SAASC,YAAYC,GAAQ;QAENA,YACDA,WACMA,kBACHA,cAEFA,YACAA;IAPrB,IAAI,CAACA,OAAO,OAAOA,QAAQ,UAAU,OAAO;IAC5C,MAAMC,QAAQC,QAAOF,aAAAA,IAAIC,KAAK,YAATD,aAAa,IAAIG,IAAI;IAC1C,MAAMC,OAAOF,QAAOF,YAAAA,IAAII,IAAI,YAARJ,YAAY,IAAIG,IAAI;IACxC,MAAME,aAAaH,QAAOF,mBAAAA,IAAIM,WAAW,YAAfN,mBAAmB,IAAIG,IAAI;IACrD,MAAMI,UAAUL,QAAOF,eAAAA,IAAIO,OAAO,YAAXP,eAAe,IAAIG,IAAI,GAAGK,WAAW;IAC5D,IAAI,CAACP,SAAS,CAACG,QAAQ,CAACC,cAAc,CAACE,SAAS,OAAO;IACvD,MAAME,QAAQP,QAAOF,aAAAA,IAAIS,KAAK,YAATT,aAAa,IAAIG,IAAI;IAC1C,MAAMO,QAAQR,QAAOF,aAAAA,IAAIU,KAAK,YAATV,aAAa,IAAIG,IAAI;IAC1C,OAAO;QACLF,OAAOA,MAAMU,KAAK,CAAC,GAAG;OAClBF,QAAQ;QAAEA,OAAOA,MAAME,KAAK,CAAC,GAAG;IAAK,IAAI,CAAC;QAC9CP,MAAMA,KAAKO,KAAK,CAAC,GAAG;OAChBD,QAAQ;QAAEA,OAAOA,MAAMC,KAAK,CAAC,GAAG;IAAK,IAAI,CAAC;QAC9CN,YAAYA,WAAWM,KAAK,CAAC,GAAG;QAChCJ,SAASA,QAAQI,KAAK,CAAC,GAAG;;AAE9B;AAEA,MAAMC,QAAQ,CAACC;IACb,MAAMC,SAASC,OAAOF;IACtB,OAAOE,OAAOC,aAAa,CAACF,WAAWA,UAAU,IAAIA,SAAS;AAChE;AAEA,2EAA2E,GAC3E,OAAO,SAASG,4BACdC,OAAY,EACZC,MAAMC,KAAKD,GAAG,EAAE;cAIOE,mBACFA,iBACCA,kBAOpBH,qBAgBoBG,sBAQHC;QAxBjBJ,gCAIAA,wBAGqBA,wBAwBLA;IA1ClB,MAAMG,mBAAWH,2BAAAA,QAASG,QAAQ,mBAAI,CAAC;IACvC,IAAIA,SAASE,IAAI,KAAKnC,4BAA4B,OAAO;IACzD,MAAMoC,UAAUtB,QAAOmB,oBAAAA,SAASG,OAAO,YAAhBH,oBAAoB;IAC3C,MAAMI,QAAQvB,QAAOmB,kBAAAA,SAASI,KAAK,YAAdJ,kBAAkB;IACvC,MAAMK,SAASxB,QAAOmB,mBAAAA,SAASK,MAAM,YAAfL,mBAAmB;IACzC,IAAI,CAAChC,sBAAsBsC,IAAI,CAACH,YAAY,CAACC,SAAS,CAACC,QAAQ,OAAO;IACtE,MAAME,QAAQ3C,uBAAuBoC,SAASO,KAAK;IACnD,IAAI,CAACA,OAAO,OAAO;IACnB,MAAMC,SAAS3C,4BAA4BmC,SAASS,cAAc,IAAIT,SAASS,cAAc,GAAG;IAChG,0EAA0E;IAC1E,MAAMR,mBACJJ,iBAAAA,4BAAAA,iCAAAA,QAASa,qBAAqB,qBAA9Bb,+BAAgCc,gBAAgB,oBAAId,2BAAAA,QAASc,gBAAgB,YAA7Ed,QAAiF;IACnF,MAAMe,oBAAWf,2BAAAA,QAASgB,gBAAgB,oBAAI,CAAC;IAC/C,MAAMC,gBAAgBP,MAAMQ,MAAM,CAAC,CAACC,KAAKC,OAASD,MAAMC,KAAKC,SAAS,EAAE;IACxE,MAAMC,gBACJtB,CAAAA,4BAAAA,yBAAAA,QAASuB,aAAa,qBAAtBvB,uBAAwBwB,YAAY,KAAI,OACpC9B,MAAMM,QAAQuB,aAAa,CAACC,YAAY,IACxC9B,MAAMS,SAASmB,aAAa;IAClC,MAAMG,WAAW/B,MAAMM,4BAAAA,yBAAAA,QAAS0B,aAAa,qBAAtB1B,uBAAwB2B,UAAU;IACzD,MAAMC,aACJ5B,CAAAA,2BAAAA,QAASwB,YAAY,KAAI,OAAO9B,MAAMM,QAAQwB,YAAY,IAAIP,gBAAgBK,gBAAgBG;IAChG,MAAMI,gBAAgB7B,2BAAAA,QAAS8B,cAAc;IAC7C,OAAO;QACLxB;QACAyB,OAAO;YACLxB;YACAC;YACAwB,WAAWhD,QAAOmB,gBAAAA,SAAS8B,GAAG,YAAZ9B,gBAAgB;YAClC+B,cAAclD,gBAAO+B,4BAAAA,SAAUoB,KAAK,oBAAI,IAAIlD,IAAI,MAAM;YACtDyB;YACAO;YACAmB,UAAU;gBACRzB;gBACA0B,OAAOjE,4BAA4B,CAACuC,OAAO;gBAC3CjB,OAAO4B;gBACPgB,MAAMtD,QAAOoB,iBAAAA,mCAAAA,gBAAiBkC,IAAI,oBAAIvB,4BAAAA,SAAUuB,IAAI,YAAvClC,QAA2C,IAAInB,IAAI,MAAM;gBACtEsD,OAAOvD,gBAAO+B,4BAAAA,SAAUwB,KAAK,oBAAI,IAAItD,IAAI,MAAM;gBAC/CuD,SAAS3D,YAAYuB,mCAAAA,gBAAiBoC,OAAO;YAC/C;YACAf;YACAG;YACAa,UAAUzD,gBAAOgB,2BAAAA,QAASyC,QAAQ,oBAAIxE;YACtCyE,cAAc1C,CAAAA,4BAAAA,yBAAAA,QAAS2C,aAAa,qBAAtB3C,uBAAwB4C,OAAO,MAAK;YAClD,qEAAqE;YACrE,+CAA+C;YAC/CC,UAAUjE,wBAAwBoB;YAClC8C,yBAAyB9D,gBAAOgB,2BAAAA,QAAS+C,EAAE,oBAAI;YAC/CC,uBACE,AAAC,CAAA,OAAOnB,kBAAkB,WAAWA,gBAAgB7C,iBAAO6C,iCAAAA,cAAekB,EAAE,qBAAI,GAAE,KAAM;YAC3FE,uBAAuB;YACvBC,UAAU;YACVC,QAAQ;YACRC,UAAUpD,CAAAA,2BAAAA,QAASoD,QAAQ,MAAK;YAChCC,aAAapD;YACbqD,aAAarD;YACbsD,UAAUtD;QACZ;IACF;AACF;AAEA;;;;CAIC,GACD,eAAeuD,iBAAiBxD,OAAY;;QACtCA,wBACcA,kCAAAA;IADlB,IAAIA,CAAAA,4BAAAA,yBAAAA,QAAS2C,aAAa,qBAAtB3C,uBAAwB4C,OAAO,MAAK,MAAM,OAAO5C;IACrD,IAAIyD,MAAMC,OAAO,CAAC1D,4BAAAA,yBAAAA,QAAS0B,aAAa,sBAAtB1B,mCAAAA,uBAAwB2D,SAAS,qBAAjC3D,iCAAmC4D,KAAK,GAAG,OAAO5D;IACpE,MAAM+C,KAAK/D,eAAOgB,2BAAAA,QAAS+C,EAAE,mBAAI;IACjC,IAAI,CAACA,IAAI,OAAO/C;IAChB,IAAI;YAIgB6D;QAHlB,MAAMA,OAAO,MAAMlF,UAAU,OAAO,CAAC,kBAAkB,EAAEmF,mBAAmBf,KAAK,EAAE;YACjFgB,QAAQ;gBAAE,YAAY;YAA0B;QAClD;QACA,OAAOF,KAAKG,EAAE,IAAIH,EAAAA,aAAAA,KAAKI,IAAI,qBAATJ,WAAWd,EAAE,MAAKA,KAAKc,KAAKI,IAAI,GAAGjE;IACvD,EAAE,OAAOkE,OAAO;QACdC,QAAQD,KAAK,CAAC,sDAAsDnB,IAAImB;QACxE,OAAOlE;IACT;AACF;AAEA;;;;;;;;CAQC,GACD,OAAO,eAAeoE,uBACpB9D,OAAe,EACfyB,KAAuB;IAEvB,MAAMsC,MAAM9F,kBAAkBwD,MAAMxB,KAAK,EAAE+D,GAAG,CAAChE;IAC/C,MAAMiE,UAAU/F,mBAAmB8B;IACnC,OAAOxC,cACJ0G,GAAG,GACHC,SAAS,GACTC,cAAc,CAAC,OAAOC;QACrB,MAAM,CAACC,UAAUC,KAAK,GAAG,MAAMC,QAAQC,GAAG,CAAC;YAACJ,YAAYK,GAAG,CAACX;YAAMM,YAAYK,GAAG,CAACT;SAAS;QAC3F,IAAIK,SAASK,MAAM,IAAIJ,KAAKI,MAAM,EAAE,OAAO;YAAEC,SAAS;QAAM;QAC5DP,YAAYQ,MAAM,CAACd,KAAKtC;QACxB4C,YAAYS,GAAG,CAACb,SAASlG,sBAAsBiC,SAASyB,QAAQzD,0BAA0ByD;QAC1F,OAAO;YAAEmD,SAAS;QAAK;IACzB;AACJ;AAEA,OAAO,MAAMG,mCAA0D,OAAO,EAAEhF,IAAI,EAAEiF,MAAM,EAAE;;QAExFA,kBACkBA;IAFtB,IAAIjF,SAAS,8BAA8B;IAC3C,IAAIiF,CAAAA,2BAAAA,mBAAAA,OAAQnF,QAAQ,qBAAhBmF,iBAAkBjF,IAAI,MAAKnC,4BAA4B;IAC3D,MAAMsC,SAASxB,eAAOsG,2BAAAA,oBAAAA,OAAQnF,QAAQ,qBAAhBmF,kBAAkB9E,MAAM,mBAAI;IAClD,uEAAuE;IACvE,oEAAoE;IACpE,IAAI8E,CAAAA,0BAAAA,OAAQC,IAAI,MAAK,aAAaD,CAAAA,0BAAAA,OAAQE,cAAc,MAAK,QAAQ;QACnE,OAAO;YAAEC,SAAS;WAAUjF,SAAS;YAAEA;QAAO,IAAI,CAAC;IACrD;IACA,MAAMkF,SAAS3F,4BAA4B,MAAMyD,iBAAiB8B;IAClE,IAAI,CAACI,QAAQ;;QACXvB,QAAQD,KAAK,CAAC,4DAA4DlF,gBAAOsG,0BAAAA,OAAQvC,EAAE,oBAAI;QAC/F,OAAO;YAAE0C,SAAS;WAAUjF,SAAS;YAAEA;QAAO,IAAI,CAAC;IACrD;IACA,qEAAqE;IACrE,yDAAyD;IACzD,MAAM,EAAE0E,OAAO,EAAE,GAAG,MAAMd,uBAAuBsB,OAAOpF,OAAO,EAAEoF,OAAO3D,KAAK;IAC7E,IAAImD,SAAS;QACX,MAAMJ,QAAQC,GAAG,CAAC;YAChBrG,qBAAqB,YAAYgH,OAAOpF,OAAO,EAAEoF,OAAO3D,KAAK;YAC7DtD,2BAA2BiH,OAAOpF,OAAO,EAAEoF,OAAO3D,KAAK;SACxD;IACH;IACA,OAAO;QAAE0D,SAAS;QAAMjF,QAAQkF,OAAO3D,KAAK,CAACvB,MAAM;IAAC;AACtD,EAAC"}

package/src/lib/server/pos-hardware.d.ts

@@ -15,9 +15,23 @@
  * limitations under the License.
  */
 import type { PluginApiHandler } from '@aglyn/aglyn/server';
-import { type PosHardwareConfig, type PosHardwareOrder } from '../model/pos-hardware';
+import { type PosHardwareConfig, type PosHardwareInPersonConfig, type PosHardwareOrder } from '../model/pos-hardware';
 /** The shop's config from this deployment, or `null` while it is hidden. */
 export declare function posHardwareConfig(env?: Record<string, string | undefined>): PosHardwareConfig | null;
+/**
+ * The platform's own store that sells hardware in person (AGL-4038), or
+ * `null` while that is off. Read like the shop's other figures; a store is
+ * the seller only when BOTH its id and its workspace's match, so a site moved
+ * to another workspace stops selling hardware rather than selling it for them.
+ */
+export declare function posHardwareInPersonConfig(env?: Record<string, string | undefined>): PosHardwareInPersonConfig | null;
+/** Whether a store, owned by `orgId`, is the platform's own hardware seller. */
+export declare function isPosHardwareSellerStore(config: PosHardwareInPersonConfig | null, hostId: string, orgId: string): config is PosHardwareInPersonConfig;
+/**
+ * An in-person order's id, from the register sale it came from: one register
+ * sale is one hardware order however often its completion is told.
+ */
+export declare function posHardwareInPersonOrderId(hostId: string, registerOrderId: string): string;
 /** The order's id, derived from the attempt so a repeated press is one order. */
 export declare function posHardwareOrderId(orgId: string, hostId: string, attemptKey: string): string;
 /** The number a person reads: `HW-` and six characters of the id. */
@@ -49,10 +63,69 @@ export declare function merchantHardwareOrderView(id: string, order: PosHardware
     tracking: import("../model/pos-hardware").PosHardwareTracking;
     createdAtMs: number;
     updatedAtMs: number;
+    source: import("../model/pos-hardware").PosHardwareOrderSource;
+    discountCents: number;
+    /** Readers still to set up, for an in-person order that took serials. */
+    readersToSetUp: number;
+    refundedCents: number;
+    /** The buyer's return request and what was decided, without who asked. */
+    returnRequest: {
+        state: "requested" | "refunded" | "declined";
+        requestedAtMs: number;
+        note: string;
+    };
 };
 export type MerchantHardwareOrderView = ReturnType<typeof merchantHardwareOrderView>;
 /** The POS settings page of a site, as an absolute console URL. */
 export declare function posSettingsUrl(hostId: string): Promise<string>;
 /** `base` with `query` added before any `#fragment`, then `#hash`. */
 export declare function withQueryAndHash(base: string, query: string, hash: string): string;
+/**
+ * The readers this workspace bought in person that are not set up yet
+ * (AGL-4038): whether its plan includes the point of sale, its stores and
+ * whether each can take a reader, and each order with what it waits for.
+ * Nothing at all while the in-person sale is off.
+ */
+export declare function waitingInPersonReaders(orgId: string, hostId: string): Promise<{
+    posPlan: boolean;
+    stores: {
+        hostId: string;
+        name: string;
+        hasLocation: boolean;
+        setupUrl: string;
+    }[];
+    orders: {
+        hostId: string;
+        serialsTaken: number;
+        id: string;
+        number: string;
+        status: import("../model/pos-hardware").PosHardwareOrderStatus;
+        lines: {
+            sku: import("../model/pos-hardware").PosHardwareSkuId;
+            name: string;
+            quantity: number;
+            unitCents: number;
+            lineCents: number;
+        }[];
+        subtotalCents: number;
+        shippingCents: number;
+        shippingLabel: string;
+        taxCents: number;
+        totalCents: number;
+        tracking: import("../model/pos-hardware").PosHardwareTracking;
+        createdAtMs: number;
+        updatedAtMs: number;
+        source: import("../model/pos-hardware").PosHardwareOrderSource;
+        discountCents: number;
+        /** Readers still to set up, for an in-person order that took serials. */
+        readersToSetUp: number;
+        refundedCents: number;
+        /** The buyer's return request and what was decided, without who asked. */
+        returnRequest: {
+            state: "requested" | "refunded" | "declined";
+            requestedAtMs: number;
+            note: string;
+        };
+    }[];
+}>;
 export declare const posHardwareHandler: PluginApiHandler;