@aglyn/plugins-commerce 1.0.0-beta.285 → 1.0.0-beta.287

package/src/lib/server/own-store-tax-return-source.d.ts

@@ -0,0 +1,47 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { TaxReturnSourceAnswer, TaxReturnSourceRequest } from '@aglyn/aglyn/plugin-manager/plugin-tax-return-sources';
+import { type OwnStore, type OwnStoreOrderInput } from '../model/own-store-tax-summary';
+/** The section's id, unique on the return. */
+export declare const OWN_STORE_TAX_SECTION_ID = "ownStores";
+/** How long before the period an own store's order is still read: a year and a quarter. */
+export declare const OWN_STORE_LOOKBACK_MS: number;
+/** The operator's own stores, as the deployment names them. */
+export interface OwnStores {
+    /** The workspace named as the operator's own, or null when none is. */
+    orgId: string | null;
+    stores: OwnStore[];
+}
+/** Reads the operator's own stores: every site of the named workspace, with its tax origin. */
+export declare function resolveOwnStores(env?: Record<string, string | undefined>): Promise<OwnStores>;
+/** What the own stores' orders read for one period came to. */
+export interface OwnStoreRead {
+    orders: OwnStoreOrderInput[];
+    truncated: boolean;
+    undatedRows: number;
+}
+/** Reads each own store's orders around the period. See the module note. */
+export declare function readOwnStoreOrders(request: TaxReturnSourceRequest, stores: readonly OwnStore[]): Promise<OwnStoreRead>;
+/**
+ * The own-stores section for one period, from records already read. Pure,
+ * so the section a preparer reads can be proved from fixtures.
+ */
+export declare function ownStoreTaxReturnAnswer(input: {
+    own: OwnStores;
+    read: OwnStoreRead;
+    statedBases?: ReadonlyMap<string, number>;
+}, request: TaxReturnSourceRequest): TaxReturnSourceAnswer;

package/src/lib/server/own-store-tax-return-source.js

@@ -0,0 +1,312 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ /**
+ * The operator's own stores on its sales tax return (AGL-4038).
+ *
+ * Everything the operator sells from a store of its own — card readers at an
+ * event's register, apparel online, anything it sells later — is its OWN
+ * sale, so it folds into the filing figures (Items 1–2 for Texas) through
+ * the contract's `operatorSales`, one part per store and channel, with the
+ * breakdown beside the figures. The rules are `model/own-store-tax-summary.ts`.
+ *
+ * Which stores: every site of the workspace `POS_HARDWARE_SELLER_ORG_ID`
+ * names. None named, and the card says so and folds in nothing; a merchant's
+ * store is never read here.
+ *
+ * Read per store: the orders placed from {@link OWN_STORE_LOOKBACK_MS}
+ * before the period to its end, because an order placed earlier can be paid
+ * (a draft) or refunded in the period. A refund or a payment more than that
+ * after the order was placed is not read, which the card says. A read that
+ * reaches the cap marks the section truncated, and orders with no placed
+ * stamp are counted as rows no period can reach; the platform blocks on both.
+ */ import { firebaseAdmin, hostDisplayName } from "@aglyn/tenant-data-admin";
+import { PLATFORM_BRAND_NAME } from "@aglyn/aglyn/app-utils/platform-brand";
+import { centsToDollars } from "@aglyn/aglyn/app-utils/tax-jurisdiction-figures";
+import { ownStoreTaxSummary, platformOwnStoreOrgId } from "../model/own-store-tax-summary.js";
+/** The section's id, unique on the return. */ export const OWN_STORE_TAX_SECTION_ID = 'ownStores';
+/** How long before the period an own store's order is still read: a year and a quarter. */ export const OWN_STORE_LOOKBACK_MS = 456 * 24 * 60 * 60 * 1000;
+/** The most sites of the operator's own workspace read. */ const OWN_STORE_MAX_SITES = 50;
+/** Reads the operator's own stores: every site of the named workspace, with its tax origin. */ export async function resolveOwnStores(env = process.env) {
+    const orgId = platformOwnStoreOrgId(env);
+    if (!orgId) return {
+        orgId: null,
+        stores: []
+    };
+    const firestore = firebaseAdmin.app().firestore();
+    const hosts = await firestore.collection('hosts').where('orgId', '==', orgId).limit(OWN_STORE_MAX_SITES).get();
+    const stores = await Promise.all(hosts.docs.map(async (doc)=>{
+        var _settings_get, _settings_get1;
+        const settings = await firestore.collection('hosts').doc(doc.id).collection('settings').doc('store').get().catch(()=>null);
+        const origin = settings == null ? void 0 : (_settings_get1 = settings.get) == null ? void 0 : (_settings_get = _settings_get1.call(settings, 'tax')) == null ? void 0 : _settings_get.origin;
+        const country = typeof (origin == null ? void 0 : origin.country) === 'string' ? origin.country.toUpperCase() : null;
+        const state = typeof (origin == null ? void 0 : origin.state) === 'string' ? origin.state.toUpperCase() : null;
+        return {
+            hostId: doc.id,
+            name: hostDisplayName(doc.data(), doc.id),
+            origin: country ? {
+                country,
+                state
+            } : null
+        };
+    }));
+    return {
+        orgId,
+        stores
+    };
+}
+/** Reads each own store's orders around the period. See the module note. */ export async function readOwnStoreOrders(request, stores) {
+    const firestore = firebaseAdmin.app().firestore();
+    const from = request.start.getTime() - OWN_STORE_LOOKBACK_MS;
+    const until = request.end.getTime();
+    const reads = await Promise.all(stores.map(async (store)=>{
+        var _undated_data_count;
+        const orders = firestore.collection('hosts').doc(store.hostId).collection('orders');
+        const [placed, undated] = await Promise.all([
+            orders.where('createdAtMs', '>=', from).where('createdAtMs', '<', until).limit(request.rowCap + 1).get(),
+            orders.where('createdAtMs', '==', null).count().get()
+        ]);
+        return {
+            truncated: placed.size > request.rowCap,
+            undated: Number((_undated_data_count = undated.data().count) != null ? _undated_data_count : 0),
+            orders: placed.docs.slice(0, request.rowCap).map((doc)=>_extends({}, doc.data(), {
+                    hostId: store.hostId,
+                    orderId: doc.id
+                }))
+        };
+    }));
+    return {
+        orders: reads.flatMap((read)=>read.orders),
+        truncated: reads.some((read)=>read.truncated),
+        undatedRows: reads.reduce((sum, read)=>sum + read.undated, 0)
+    };
+}
+const dollars = (cents)=>`$${centsToDollars(cents)}`;
+function ownStoreFindings(summary, filing) {
+    const brand = PLATFORM_BRAND_NAME;
+    return [
+        {
+            id: 'ownStoreUntaxed',
+            severity: 'review',
+            count: summary.attention.untaxedOrders,
+            label: `${brand}’s own store sales with no tax charged`,
+            detail: `In ${filing.figuresName} as sales, with nothing in taxable sales. If any was taxable where it was ` + `sold, the tax is still owed, out of ${brand}’s receipt.`
+        },
+        {
+            id: 'ownStoreMissingRegion',
+            severity: 'review',
+            count: summary.attention.ordersMissingRegion,
+            label: `${brand}’s own store sales with no region`,
+            detail: 'Listed as Not stated, and in no jurisdiction’s figures: a register sale whose store has no tax ' + 'address, or an online one with no shipping or billing address. If it was sold in ' + `${filing.label}, the figures understate it.`
+        },
+        {
+            id: 'ownStoreCanceledWithoutRefund',
+            severity: 'review',
+            count: summary.attention.canceledWithoutRefund,
+            label: `Canceled ${brand} own store orders with no refund recorded`,
+            detail: 'Counted as sales: the order is canceled, but no refund was recorded on it. Check the payment.'
+        }
+    ];
+}
+function ownStoreTables(summary, filing) {
+    const rows = summary.parts.flatMap((part)=>Object.entries(part.byJurisdiction).map(([jurisdiction, figures])=>({
+                part,
+                jurisdiction,
+                figures
+            })));
+    return [
+        {
+            description: 'Each store’s sales by where they are taxed — at the counter where the store is, online where the ' + 'order shipped — with the refunds made in this period beside them. All of it is folded into the ' + 'filing figures above.',
+            columns: [
+                {
+                    label: 'Store and channel'
+                },
+                {
+                    label: 'State'
+                },
+                {
+                    label: 'Sales',
+                    numeric: true
+                },
+                {
+                    label: 'Total sales',
+                    numeric: true,
+                    money: true
+                },
+                {
+                    label: 'Taxable sales',
+                    numeric: true,
+                    money: true
+                },
+                {
+                    label: 'Tax collected',
+                    numeric: true,
+                    money: true
+                },
+                {
+                    label: 'Refunded in period',
+                    numeric: true,
+                    money: true
+                }
+            ],
+            rows: rows.sort((a, b)=>Number(b.jurisdiction === filing.code) - Number(a.jurisdiction === filing.code) || a.part.label.localeCompare(b.part.label) || a.jurisdiction.localeCompare(b.jurisdiction)).map(({ part, jurisdiction, figures })=>({
+                    key: `${part.id}:${jurisdiction}`,
+                    cells: [
+                        _extends({
+                            text: part.label
+                        }, figures.refundCount ? {
+                            caption: `${figures.refundCount} refund${figures.refundCount === 1 ? '' : 's'} in this period`
+                        } : {}),
+                        _extends({
+                            text: jurisdiction === 'unknown' ? 'Not stated' : jurisdiction
+                        }, jurisdiction === filing.code ? {
+                            tag: {
+                                label: 'Registered',
+                                tone: 'attention'
+                            }
+                        } : {}),
+                        {
+                            text: String(figures.transactionCount)
+                        },
+                        {
+                            text: dollars(figures.totalSalesCents),
+                            strong: jurisdiction === filing.code
+                        },
+                        {
+                            text: dollars(figures.taxableSalesCents)
+                        },
+                        {
+                            text: dollars(figures.taxCollectedCents)
+                        },
+                        {
+                            text: dollars(figures.refundedSalesCents)
+                        }
+                    ]
+                })),
+            empty: 'Nothing was sold or refunded at the operator’s own stores in this period.',
+            footnote: 'A sale is in the period it was paid and a refund in the period it was made, never netted. Taxable ' + 'sales are the base Stripe stated where it computed the tax, else the whole sale less tax when tax ' + 'was charged. Test-mode sales are in no figure.'
+        }
+    ];
+}
+function ownStoreFigures(own, summary) {
+    const figures = [
+        {
+            label: 'Stores read',
+            value: own.stores.length ? own.stores.map((store)=>store.name).join(', ') : 'None named',
+            note: own.orgId ? 'Every site of the workspace named as the operator’s own (POS_HARDWARE_SELLER_ORG_ID).' : 'No workspace is named as the operator’s own (POS_HARDWARE_SELLER_ORG_ID), so no store’s sales are folded in.'
+        },
+        {
+            label: 'Sales paid in this period',
+            value: String(summary.orders),
+            note: 'Every store, channel and state. Live sales only. Orders placed up to 15 months before the period ' + 'are read for a payment or refund made in it; one later than that is not.'
+        }
+    ];
+    if (summary.excluded.testModeOrders) {
+        figures.push({
+            label: 'Test-mode sales left out',
+            value: String(summary.excluded.testModeOrders),
+            note: 'Made with Stripe’s test keys, so not sales: in no figure.'
+        });
+    }
+    if (summary.excluded.marketplaceRemitted) {
+        figures.push({
+            label: 'Outside marketplace sales left out',
+            value: String(summary.excluded.marketplaceRemitted),
+            note: 'Sold on an outside marketplace that collects and remits the tax itself.'
+        });
+    }
+    return figures;
+}
+function ownStoreExports(rows) {
+    return [
+        {
+            placement: 'sections',
+            rows: [
+                [
+                    `${PLATFORM_BRAND_NAME}’s own store orders in this period — folded into the filing figures above`
+                ],
+                [
+                    'Store',
+                    'Order',
+                    'Channel',
+                    'Paid (UTC)',
+                    'Status',
+                    'Jurisdiction',
+                    'Total sales (USD)',
+                    'Taxable sales (USD)',
+                    'Taxable base',
+                    'Tax collected (USD)',
+                    'Refunded (USD)',
+                    'Refunded at (UTC)',
+                    'In this period as'
+                ],
+                ...rows.map((row)=>{
+                    var _row_paidAt, _row_status, _row_refundedAt;
+                    return [
+                        row.store,
+                        row.orderId,
+                        row.channel === 'in-person' ? 'in person' : 'online',
+                        (_row_paidAt = row.paidAt) != null ? _row_paidAt : '',
+                        (_row_status = row.status) != null ? _row_status : '',
+                        row.jurisdiction,
+                        centsToDollars(row.totalSalesCents),
+                        centsToDollars(row.taxableSalesCents),
+                        row.taxableBase,
+                        centsToDollars(row.taxCents),
+                        centsToDollars(row.refundedCents),
+                        (_row_refundedAt = row.refundedAt) != null ? _row_refundedAt : '',
+                        row.inPeriodAs
+                    ];
+                })
+            ]
+        }
+    ];
+}
+/**
+ * The own-stores section for one period, from records already read. Pure,
+ * so the section a preparer reads can be proved from fixtures.
+ */ export function ownStoreTaxReturnAnswer(input, request) {
+    const brand = PLATFORM_BRAND_NAME;
+    const { filing } = request;
+    const { summary, rows } = ownStoreTaxSummary({
+        stores: input.own.stores,
+        orders: input.read.orders,
+        period: {
+            start: request.start,
+            end: request.end
+        },
+        statedBases: input.statedBases
+    });
+    return {
+        id: OWN_STORE_TAX_SECTION_ID,
+        name: 'Own store',
+        title: `${brand}’s own stores — its own sales`,
+        help: `Everything ${brand} sold from a store of its own, in person and online: card readers, apparel and ` + 'anything else. These are its own sales, folded into the filing figures above.',
+        intro: `${brand} sold these itself, from its own stores, so they are its OWN sales and are folded into ` + `${filing.figuresName}, one line per store and channel in the breakdown beside the figures. ` + 'A merchant’s store is never here.',
+        truncated: input.read.truncated,
+        undatedRows: input.read.undatedRows,
+        findings: ownStoreFindings(summary, filing),
+        filingLines: [],
+        operatorSales: summary.parts,
+        tables: ownStoreTables(summary, filing),
+        figures: ownStoreFigures(input.own, summary),
+        exports: ownStoreExports(rows),
+        summary,
+        rows
+    };
+}
+
+//# sourceMappingURL=own-store-tax-return-source.js.map

package/src/lib/server/own-store-tax-return-source.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/own-store-tax-return-source.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\n/**\n * The operator's own stores on its sales tax return (AGL-4038).\n *\n * Everything the operator sells from a store of its own — card readers at an\n * event's register, apparel online, anything it sells later — is its OWN\n * sale, so it folds into the filing figures (Items 1–2 for Texas) through\n * the contract's `operatorSales`, one part per store and channel, with the\n * breakdown beside the figures. The rules are `model/own-store-tax-summary.ts`.\n *\n * Which stores: every site of the workspace `POS_HARDWARE_SELLER_ORG_ID`\n * names. None named, and the card says so and folds in nothing; a merchant's\n * store is never read here.\n *\n * Read per store: the orders placed from {@link OWN_STORE_LOOKBACK_MS}\n * before the period to its end, because an order placed earlier can be paid\n * (a draft) or refunded in the period. A refund or a payment more than that\n * after the order was placed is not read, which the card says. A read that\n * reaches the cap marks the section truncated, and orders with no placed\n * stamp are counted as rows no period can reach; the platform blocks on both.\n */\n\nimport { firebaseAdmin, hostDisplayName } from '@aglyn/tenant-data-admin'\nimport { PLATFORM_BRAND_NAME } from '@aglyn/aglyn/app-utils/platform-brand'\nimport { centsToDollars } from '@aglyn/aglyn/app-utils/tax-jurisdiction-figures'\nimport type {\n  TaxReturnExportBlock,\n  TaxReturnFiling,\n  TaxReturnFinding,\n  TaxReturnSectionFigure,\n  TaxReturnSectionTable,\n  TaxReturnSourceAnswer,\n  TaxReturnSourceRequest,\n} from '@aglyn/aglyn/plugin-manager/plugin-tax-return-sources'\nimport {\n  ownStoreTaxSummary,\n  platformOwnStoreOrgId,\n  type OwnStore,\n  type OwnStoreOrderInput,\n  type OwnStoreTaxRow,\n  type OwnStoreTaxSummary,\n} from '../model/own-store-tax-summary'\n\n/** The section's id, unique on the return. */\nexport const OWN_STORE_TAX_SECTION_ID = 'ownStores'\n\n/** How long before the period an own store's order is still read: a year and a quarter. */\nexport const OWN_STORE_LOOKBACK_MS = 456 * 24 * 60 * 60 * 1000\n\n/** The most sites of the operator's own workspace read. */\nconst OWN_STORE_MAX_SITES = 50\n\n/** The operator's own stores, as the deployment names them. */\nexport interface OwnStores {\n  /** The workspace named as the operator's own, or null when none is. */\n  orgId: string | null\n  stores: OwnStore[]\n}\n\n/** Reads the operator's own stores: every site of the named workspace, with its tax origin. */\nexport async function resolveOwnStores(\n  env: Record<string, string | undefined> = process.env,\n): Promise<OwnStores> {\n  const orgId = platformOwnStoreOrgId(env)\n  if (!orgId) return { orgId: null, stores: [] }\n  const firestore = firebaseAdmin.app().firestore()\n  const hosts = await firestore.collection('hosts').where('orgId', '==', orgId).limit(OWN_STORE_MAX_SITES).get()\n  const stores = await Promise.all(\n    hosts.docs.map(async (doc: { id: string; data: () => Record<string, unknown> }) => {\n      const settings = await firestore\n        .collection('hosts')\n        .doc(doc.id)\n        .collection('settings')\n        .doc('store')\n        .get()\n        .catch(() => null)\n      const origin = (settings?.get?.('tax') as { origin?: { country?: unknown; state?: unknown } } | undefined)\n        ?.origin\n      const country = typeof origin?.country === 'string' ? origin.country.toUpperCase() : null\n      const state = typeof origin?.state === 'string' ? origin.state.toUpperCase() : null\n      return {\n        hostId: doc.id,\n        name: hostDisplayName(doc.data(), doc.id),\n        origin: country ? { country, state } : null,\n      } satisfies OwnStore\n    }),\n  )\n  return { orgId, stores }\n}\n\n/** What the own stores' orders read for one period came to. */\nexport interface OwnStoreRead {\n  orders: OwnStoreOrderInput[]\n  truncated: boolean\n  undatedRows: number\n}\n\n/** Reads each own store's orders around the period. See the module note. */\nexport async function readOwnStoreOrders(\n  request: TaxReturnSourceRequest,\n  stores: readonly OwnStore[],\n): Promise<OwnStoreRead> {\n  const firestore = firebaseAdmin.app().firestore()\n  const from = request.start.getTime() - OWN_STORE_LOOKBACK_MS\n  const until = request.end.getTime()\n  const reads = await Promise.all(\n    stores.map(async (store) => {\n      const orders = firestore.collection('hosts').doc(store.hostId).collection('orders')\n      const [placed, undated] = await Promise.all([\n        orders.where('createdAtMs', '>=', from).where('createdAtMs', '<', until).limit(request.rowCap + 1).get(),\n        orders.where('createdAtMs', '==', null).count().get(),\n      ])\n      return {\n        truncated: placed.size > request.rowCap,\n        undated: Number(undated.data().count ?? 0),\n        orders: placed.docs.slice(0, request.rowCap).map(\n          (doc: { id: string; data: () => Record<string, unknown> }) =>\n            ({ ...(doc.data() as Omit<OwnStoreOrderInput, 'hostId' | 'orderId'>), hostId: store.hostId, orderId: doc.id }),\n        ),\n      }\n    }),\n  )\n  return {\n    orders: reads.flatMap((read) => read.orders),\n    truncated: reads.some((read) => read.truncated),\n    undatedRows: reads.reduce((sum, read) => sum + read.undated, 0),\n  }\n}\n\nconst dollars = (cents: number) => `$${centsToDollars(cents)}`\n\nfunction ownStoreFindings(summary: OwnStoreTaxSummary, filing: TaxReturnFiling): TaxReturnFinding[] {\n  const brand = PLATFORM_BRAND_NAME\n  return [\n    {\n      id: 'ownStoreUntaxed',\n      severity: 'review',\n      count: summary.attention.untaxedOrders,\n      label: `${brand}’s own store sales with no tax charged`,\n      detail:\n        `In ${filing.figuresName} as sales, with nothing in taxable sales. If any was taxable where it was ` +\n        `sold, the tax is still owed, out of ${brand}’s receipt.`,\n    },\n    {\n      id: 'ownStoreMissingRegion',\n      severity: 'review',\n      count: summary.attention.ordersMissingRegion,\n      label: `${brand}’s own store sales with no region`,\n      detail:\n        'Listed as Not stated, and in no jurisdiction’s figures: a register sale whose store has no tax ' +\n        'address, or an online one with no shipping or billing address. If it was sold in ' +\n        `${filing.label}, the figures understate it.`,\n    },\n    {\n      id: 'ownStoreCanceledWithoutRefund',\n      severity: 'review',\n      count: summary.attention.canceledWithoutRefund,\n      label: `Canceled ${brand} own store orders with no refund recorded`,\n      detail: 'Counted as sales: the order is canceled, but no refund was recorded on it. Check the payment.',\n    },\n  ]\n}\n\nfunction ownStoreTables(summary: OwnStoreTaxSummary, filing: TaxReturnFiling): TaxReturnSectionTable[] {\n  const rows = summary.parts.flatMap((part) =>\n    Object.entries(part.byJurisdiction).map(([jurisdiction, figures]) => ({ part, jurisdiction, figures })),\n  )\n  return [\n    {\n      description:\n        'Each store’s sales by where they are taxed — at the counter where the store is, online where the ' +\n        'order shipped — with the refunds made in this period beside them. All of it is folded into the ' +\n        'filing figures above.',\n      columns: [\n        { label: 'Store and channel' },\n        { label: 'State' },\n        { label: 'Sales', numeric: true },\n        { label: 'Total sales', numeric: true, money: true },\n        { label: 'Taxable sales', numeric: true, money: true },\n        { label: 'Tax collected', numeric: true, money: true },\n        { label: 'Refunded in period', numeric: true, money: true },\n      ],\n      rows: rows\n        .sort(\n          (a, b) =>\n            Number(b.jurisdiction === filing.code) - Number(a.jurisdiction === filing.code) ||\n            a.part.label.localeCompare(b.part.label) ||\n            a.jurisdiction.localeCompare(b.jurisdiction),\n        )\n        .map(({ part, jurisdiction, figures }) => ({\n          key: `${part.id}:${jurisdiction}`,\n          cells: [\n            {\n              text: part.label,\n              ...(figures.refundCount\n                ? { caption: `${figures.refundCount} refund${figures.refundCount === 1 ? '' : 's'} in this period` }\n                : {}),\n            },\n            {\n              text: jurisdiction === 'unknown' ? 'Not stated' : jurisdiction,\n              ...(jurisdiction === filing.code ? { tag: { label: 'Registered', tone: 'attention' as const } } : {}),\n            },\n            { text: String(figures.transactionCount) },\n            { text: dollars(figures.totalSalesCents), strong: jurisdiction === filing.code },\n            { text: dollars(figures.taxableSalesCents) },\n            { text: dollars(figures.taxCollectedCents) },\n            { text: dollars(figures.refundedSalesCents) },\n          ],\n        })),\n      empty: 'Nothing was sold or refunded at the operator’s own stores in this period.',\n      footnote:\n        'A sale is in the period it was paid and a refund in the period it was made, never netted. Taxable ' +\n        'sales are the base Stripe stated where it computed the tax, else the whole sale less tax when tax ' +\n        'was charged. Test-mode sales are in no figure.',\n    },\n  ]\n}\n\nfunction ownStoreFigures(own: OwnStores, summary: OwnStoreTaxSummary): TaxReturnSectionFigure[] {\n  const figures: TaxReturnSectionFigure[] = [\n    {\n      label: 'Stores read',\n      value: own.stores.length ? own.stores.map((store) => store.name).join(', ') : 'None named',\n      note: own.orgId\n        ? 'Every site of the workspace named as the operator’s own (POS_HARDWARE_SELLER_ORG_ID).'\n        : 'No workspace is named as the operator’s own (POS_HARDWARE_SELLER_ORG_ID), so no store’s sales are folded in.',\n    },\n    {\n      label: 'Sales paid in this period',\n      value: String(summary.orders),\n      note:\n        'Every store, channel and state. Live sales only. Orders placed up to 15 months before the period ' +\n        'are read for a payment or refund made in it; one later than that is not.',\n    },\n  ]\n  if (summary.excluded.testModeOrders) {\n    figures.push({\n      label: 'Test-mode sales left out',\n      value: String(summary.excluded.testModeOrders),\n      note: 'Made with Stripe’s test keys, so not sales: in no figure.',\n    })\n  }\n  if (summary.excluded.marketplaceRemitted) {\n    figures.push({\n      label: 'Outside marketplace sales left out',\n      value: String(summary.excluded.marketplaceRemitted),\n      note: 'Sold on an outside marketplace that collects and remits the tax itself.',\n    })\n  }\n  return figures\n}\n\nfunction ownStoreExports(rows: readonly OwnStoreTaxRow[]): TaxReturnExportBlock[] {\n  return [\n    {\n      placement: 'sections',\n      rows: [\n        [`${PLATFORM_BRAND_NAME}’s own store orders in this period — folded into the filing figures above`],\n        [\n          'Store',\n          'Order',\n          'Channel',\n          'Paid (UTC)',\n          'Status',\n          'Jurisdiction',\n          'Total sales (USD)',\n          'Taxable sales (USD)',\n          'Taxable base',\n          'Tax collected (USD)',\n          'Refunded (USD)',\n          'Refunded at (UTC)',\n          'In this period as',\n        ],\n        ...rows.map((row) => [\n          row.store,\n          row.orderId,\n          row.channel === 'in-person' ? 'in person' : 'online',\n          row.paidAt ?? '',\n          row.status ?? '',\n          row.jurisdiction,\n          centsToDollars(row.totalSalesCents),\n          centsToDollars(row.taxableSalesCents),\n          row.taxableBase,\n          centsToDollars(row.taxCents),\n          centsToDollars(row.refundedCents),\n          row.refundedAt ?? '',\n          row.inPeriodAs,\n        ]),\n      ],\n    },\n  ]\n}\n\n/**\n * The own-stores section for one period, from records already read. Pure,\n * so the section a preparer reads can be proved from fixtures.\n */\nexport function ownStoreTaxReturnAnswer(\n  input: { own: OwnStores; read: OwnStoreRead; statedBases?: ReadonlyMap<string, number> },\n  request: TaxReturnSourceRequest,\n): TaxReturnSourceAnswer {\n  const brand = PLATFORM_BRAND_NAME\n  const { filing } = request\n  const { summary, rows } = ownStoreTaxSummary({\n    stores: input.own.stores,\n    orders: input.read.orders,\n    period: { start: request.start, end: request.end },\n    statedBases: input.statedBases,\n  })\n  return {\n    id: OWN_STORE_TAX_SECTION_ID,\n    name: 'Own store',\n    title: `${brand}’s own stores — its own sales`,\n    help:\n      `Everything ${brand} sold from a store of its own, in person and online: card readers, apparel and ` +\n      'anything else. These are its own sales, folded into the filing figures above.',\n    intro:\n      `${brand} sold these itself, from its own stores, so they are its OWN sales and are folded into ` +\n      `${filing.figuresName}, one line per store and channel in the breakdown beside the figures. ` +\n      'A merchant’s store is never here.',\n    truncated: input.read.truncated,\n    undatedRows: input.read.undatedRows,\n    findings: ownStoreFindings(summary, filing),\n    filingLines: [],\n    operatorSales: summary.parts,\n    tables: ownStoreTables(summary, filing),\n    figures: ownStoreFigures(input.own, summary),\n    exports: ownStoreExports(rows),\n    summary,\n    rows,\n  }\n}\n"],"names":["firebaseAdmin","hostDisplayName","PLATFORM_BRAND_NAME","centsToDollars","ownStoreTaxSummary","platformOwnStoreOrgId","OWN_STORE_TAX_SECTION_ID","OWN_STORE_LOOKBACK_MS","OWN_STORE_MAX_SITES","resolveOwnStores","env","process","orgId","stores","firestore","app","hosts","collection","where","limit","get","Promise","all","docs","map","doc","settings","id","catch","origin","country","toUpperCase","state","hostId","name","data","readOwnStoreOrders","request","from","start","getTime","until","end","reads","store","undated","orders","placed","rowCap","count","truncated","size","Number","slice","orderId","flatMap","read","some","undatedRows","reduce","sum","dollars","cents","ownStoreFindings","summary","filing","brand","severity","attention","untaxedOrders","label","detail","figuresName","ordersMissingRegion","canceledWithoutRefund","ownStoreTables","rows","parts","part","Object","entries","byJurisdiction","jurisdiction","figures","description","columns","numeric","money","sort","a","b","code","localeCompare","key","cells","text","refundCount","caption","tag","tone","String","transactionCount","totalSalesCents","strong","taxableSalesCents","taxCollectedCents","refundedSalesCents","empty","footnote","ownStoreFigures","own","value","length","join","note","excluded","testModeOrders","push","marketplaceRemitted","ownStoreExports","placement","row","channel","paidAt","status","taxableBase","taxCents","refundedCents","refundedAt","inPeriodAs","ownStoreTaxReturnAnswer","input","period","statedBases","title","help","intro","findings","filingLines","operatorSales","tables","exports"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED;;;;;;;;;;;;;;;;;;;CAmBC,GAED,SAASA,aAAa,EAAEC,eAAe,QAAQ,2BAA0B;AACzE,SAASC,mBAAmB,QAAQ,wCAAuC;AAC3E,SAASC,cAAc,QAAQ,kDAAiD;AAUhF,SACEC,kBAAkB,EAClBC,qBAAqB,QAKhB,oCAAgC;AAEvC,4CAA4C,GAC5C,OAAO,MAAMC,2BAA2B,YAAW;AAEnD,yFAAyF,GACzF,OAAO,MAAMC,wBAAwB,MAAM,KAAK,KAAK,KAAK,KAAI;AAE9D,yDAAyD,GACzD,MAAMC,sBAAsB;AAS5B,6FAA6F,GAC7F,OAAO,eAAeC,iBACpBC,MAA0CC,QAAQD,GAAG;IAErD,MAAME,QAAQP,sBAAsBK;IACpC,IAAI,CAACE,OAAO,OAAO;QAAEA,OAAO;QAAMC,QAAQ,EAAE;IAAC;IAC7C,MAAMC,YAAYd,cAAce,GAAG,GAAGD,SAAS;IAC/C,MAAME,QAAQ,MAAMF,UAAUG,UAAU,CAAC,SAASC,KAAK,CAAC,SAAS,MAAMN,OAAOO,KAAK,CAACX,qBAAqBY,GAAG;IAC5G,MAAMP,SAAS,MAAMQ,QAAQC,GAAG,CAC9BN,MAAMO,IAAI,CAACC,GAAG,CAAC,OAAOC;YAQJC,eAAAA;QAPhB,MAAMA,WAAW,MAAMZ,UACpBG,UAAU,CAAC,SACXQ,GAAG,CAACA,IAAIE,EAAE,EACVV,UAAU,CAAC,YACXQ,GAAG,CAAC,SACJL,GAAG,GACHQ,KAAK,CAAC,IAAM;QACf,MAAMC,SAAUH,6BAAAA,iBAAAA,SAAUN,GAAG,sBAAbM,gBAAAA,oBAAAA,UAAgB,2BAAjB,AAACA,cACZG,MAAM;QACV,MAAMC,UAAU,QAAOD,0BAAAA,OAAQC,OAAO,MAAK,WAAWD,OAAOC,OAAO,CAACC,WAAW,KAAK;QACrF,MAAMC,QAAQ,QAAOH,0BAAAA,OAAQG,KAAK,MAAK,WAAWH,OAAOG,KAAK,CAACD,WAAW,KAAK;QAC/E,OAAO;YACLE,QAAQR,IAAIE,EAAE;YACdO,MAAMjC,gBAAgBwB,IAAIU,IAAI,IAAIV,IAAIE,EAAE;YACxCE,QAAQC,UAAU;gBAAEA;gBAASE;YAAM,IAAI;QACzC;IACF;IAEF,OAAO;QAAEpB;QAAOC;IAAO;AACzB;AASA,0EAA0E,GAC1E,OAAO,eAAeuB,mBACpBC,OAA+B,EAC/BxB,MAA2B;IAE3B,MAAMC,YAAYd,cAAce,GAAG,GAAGD,SAAS;IAC/C,MAAMwB,OAAOD,QAAQE,KAAK,CAACC,OAAO,KAAKjC;IACvC,MAAMkC,QAAQJ,QAAQK,GAAG,CAACF,OAAO;IACjC,MAAMG,QAAQ,MAAMtB,QAAQC,GAAG,CAC7BT,OAAOW,GAAG,CAAC,OAAOoB;YAQEC;QAPlB,MAAMC,SAAShC,UAAUG,UAAU,CAAC,SAASQ,GAAG,CAACmB,MAAMX,MAAM,EAAEhB,UAAU,CAAC;QAC1E,MAAM,CAAC8B,QAAQF,QAAQ,GAAG,MAAMxB,QAAQC,GAAG,CAAC;YAC1CwB,OAAO5B,KAAK,CAAC,eAAe,MAAMoB,MAAMpB,KAAK,CAAC,eAAe,KAAKuB,OAAOtB,KAAK,CAACkB,QAAQW,MAAM,GAAG,GAAG5B,GAAG;YACtG0B,OAAO5B,KAAK,CAAC,eAAe,MAAM,MAAM+B,KAAK,GAAG7B,GAAG;SACpD;QACD,OAAO;YACL8B,WAAWH,OAAOI,IAAI,GAAGd,QAAQW,MAAM;YACvCH,SAASO,QAAOP,sBAAAA,QAAQV,IAAI,GAAGc,KAAK,YAApBJ,sBAAwB;YACxCC,QAAQC,OAAOxB,IAAI,CAAC8B,KAAK,CAAC,GAAGhB,QAAQW,MAAM,EAAExB,GAAG,CAC9C,CAACC,MACE,aAAMA,IAAIU,IAAI;oBAAuDF,QAAQW,MAAMX,MAAM;oBAAEqB,SAAS7B,IAAIE,EAAE;;QAEjH;IACF;IAEF,OAAO;QACLmB,QAAQH,MAAMY,OAAO,CAAC,CAACC,OAASA,KAAKV,MAAM;QAC3CI,WAAWP,MAAMc,IAAI,CAAC,CAACD,OAASA,KAAKN,SAAS;QAC9CQ,aAAaf,MAAMgB,MAAM,CAAC,CAACC,KAAKJ,OAASI,MAAMJ,KAAKX,OAAO,EAAE;IAC/D;AACF;AAEA,MAAMgB,UAAU,CAACC,QAAkB,CAAC,CAAC,EAAE3D,eAAe2D,QAAQ;AAE9D,SAASC,iBAAiBC,OAA2B,EAAEC,MAAuB;IAC5E,MAAMC,QAAQhE;IACd,OAAO;QACL;YACEyB,IAAI;YACJwC,UAAU;YACVlB,OAAOe,QAAQI,SAAS,CAACC,aAAa;YACtCC,OAAO,GAAGJ,MAAM,sCAAsC,CAAC;YACvDK,QACE,CAAC,GAAG,EAAEN,OAAOO,WAAW,CAAC,0EAA0E,CAAC,GACpG,CAAC,oCAAoC,EAAEN,MAAM,WAAW,CAAC;QAC7D;QACA;YACEvC,IAAI;YACJwC,UAAU;YACVlB,OAAOe,QAAQI,SAAS,CAACK,mBAAmB;YAC5CH,OAAO,GAAGJ,MAAM,iCAAiC,CAAC;YAClDK,QACE,oGACA,sFACA,GAAGN,OAAOK,KAAK,CAAC,4BAA4B,CAAC;QACjD;QACA;YACE3C,IAAI;YACJwC,UAAU;YACVlB,OAAOe,QAAQI,SAAS,CAACM,qBAAqB;YAC9CJ,OAAO,CAAC,SAAS,EAAEJ,MAAM,yCAAyC,CAAC;YACnEK,QAAQ;QACV;KACD;AACH;AAEA,SAASI,eAAeX,OAA2B,EAAEC,MAAuB;IAC1E,MAAMW,OAAOZ,QAAQa,KAAK,CAACtB,OAAO,CAAC,CAACuB,OAClCC,OAAOC,OAAO,CAACF,KAAKG,cAAc,EAAEzD,GAAG,CAAC,CAAC,CAAC0D,cAAcC,QAAQ,GAAM,CAAA;gBAAEL;gBAAMI;gBAAcC;YAAQ,CAAA;IAEtG,OAAO;QACL;YACEC,aACE,sGACA,oGACA;YACFC,SAAS;gBACP;oBAAEf,OAAO;gBAAoB;gBAC7B;oBAAEA,OAAO;gBAAQ;gBACjB;oBAAEA,OAAO;oBAASgB,SAAS;gBAAK;gBAChC;oBAAEhB,OAAO;oBAAegB,SAAS;oBAAMC,OAAO;gBAAK;gBACnD;oBAAEjB,OAAO;oBAAiBgB,SAAS;oBAAMC,OAAO;gBAAK;gBACrD;oBAAEjB,OAAO;oBAAiBgB,SAAS;oBAAMC,OAAO;gBAAK;gBACrD;oBAAEjB,OAAO;oBAAsBgB,SAAS;oBAAMC,OAAO;gBAAK;aAC3D;YACDX,MAAMA,KACHY,IAAI,CACH,CAACC,GAAGC,IACFtC,OAAOsC,EAAER,YAAY,KAAKjB,OAAO0B,IAAI,IAAIvC,OAAOqC,EAAEP,YAAY,KAAKjB,OAAO0B,IAAI,KAC9EF,EAAEX,IAAI,CAACR,KAAK,CAACsB,aAAa,CAACF,EAAEZ,IAAI,CAACR,KAAK,KACvCmB,EAAEP,YAAY,CAACU,aAAa,CAACF,EAAER,YAAY,GAE9C1D,GAAG,CAAC,CAAC,EAAEsD,IAAI,EAAEI,YAAY,EAAEC,OAAO,EAAE,GAAM,CAAA;oBACzCU,KAAK,GAAGf,KAAKnD,EAAE,CAAC,CAAC,EAAEuD,cAAc;oBACjCY,OAAO;wBACL;4BACEC,MAAMjB,KAAKR,KAAK;2BACZa,QAAQa,WAAW,GACnB;4BAAEC,SAAS,GAAGd,QAAQa,WAAW,CAAC,OAAO,EAAEb,QAAQa,WAAW,KAAK,IAAI,KAAK,IAAI,eAAe,CAAC;wBAAC,IACjG,CAAC;wBAEP;4BACED,MAAMb,iBAAiB,YAAY,eAAeA;2BAC9CA,iBAAiBjB,OAAO0B,IAAI,GAAG;4BAAEO,KAAK;gCAAE5B,OAAO;gCAAc6B,MAAM;4BAAqB;wBAAE,IAAI,CAAC;wBAErG;4BAAEJ,MAAMK,OAAOjB,QAAQkB,gBAAgB;wBAAE;wBACzC;4BAAEN,MAAMlC,QAAQsB,QAAQmB,eAAe;4BAAGC,QAAQrB,iBAAiBjB,OAAO0B,IAAI;wBAAC;wBAC/E;4BAAEI,MAAMlC,QAAQsB,QAAQqB,iBAAiB;wBAAE;wBAC3C;4BAAET,MAAMlC,QAAQsB,QAAQsB,iBAAiB;wBAAE;wBAC3C;4BAAEV,MAAMlC,QAAQsB,QAAQuB,kBAAkB;wBAAE;qBAC7C;gBACH,CAAA;YACFC,OAAO;YACPC,UACE,uGACA,uGACA;QACJ;KACD;AACH;AAEA,SAASC,gBAAgBC,GAAc,EAAE9C,OAA2B;IAClE,MAAMmB,UAAoC;QACxC;YACEb,OAAO;YACPyC,OAAOD,IAAIjG,MAAM,CAACmG,MAAM,GAAGF,IAAIjG,MAAM,CAACW,GAAG,CAAC,CAACoB,QAAUA,MAAMV,IAAI,EAAE+E,IAAI,CAAC,QAAQ;YAC9EC,MAAMJ,IAAIlG,KAAK,GACX,0FACA;QACN;QACA;YACE0D,OAAO;YACPyC,OAAOX,OAAOpC,QAAQlB,MAAM;YAC5BoE,MACE,sGACA;QACJ;KACD;IACD,IAAIlD,QAAQmD,QAAQ,CAACC,cAAc,EAAE;QACnCjC,QAAQkC,IAAI,CAAC;YACX/C,OAAO;YACPyC,OAAOX,OAAOpC,QAAQmD,QAAQ,CAACC,cAAc;YAC7CF,MAAM;QACR;IACF;IACA,IAAIlD,QAAQmD,QAAQ,CAACG,mBAAmB,EAAE;QACxCnC,QAAQkC,IAAI,CAAC;YACX/C,OAAO;YACPyC,OAAOX,OAAOpC,QAAQmD,QAAQ,CAACG,mBAAmB;YAClDJ,MAAM;QACR;IACF;IACA,OAAO/B;AACT;AAEA,SAASoC,gBAAgB3C,IAA+B;IACtD,OAAO;QACL;YACE4C,WAAW;YACX5C,MAAM;gBACJ;oBAAC,GAAG1E,oBAAoB,yEAAyE,CAAC;iBAAC;gBACnG;oBACE;oBACA;oBACA;oBACA;oBACA;oBACA;oBACA;oBACA;oBACA;oBACA;oBACA;oBACA;oBACA;iBACD;mBACE0E,KAAKpD,GAAG,CAAC,CAACiG;wBAIXA,aACAA,aAOAA;2BAZmB;wBACnBA,IAAI7E,KAAK;wBACT6E,IAAInE,OAAO;wBACXmE,IAAIC,OAAO,KAAK,cAAc,cAAc;yBAC5CD,cAAAA,IAAIE,MAAM,YAAVF,cAAc;yBACdA,cAAAA,IAAIG,MAAM,YAAVH,cAAc;wBACdA,IAAIvC,YAAY;wBAChB/E,eAAesH,IAAInB,eAAe;wBAClCnG,eAAesH,IAAIjB,iBAAiB;wBACpCiB,IAAII,WAAW;wBACf1H,eAAesH,IAAIK,QAAQ;wBAC3B3H,eAAesH,IAAIM,aAAa;yBAChCN,kBAAAA,IAAIO,UAAU,YAAdP,kBAAkB;wBAClBA,IAAIQ,UAAU;qBACf;;aACF;QACH;KACD;AACH;AAEA;;;CAGC,GACD,OAAO,SAASC,wBACdC,KAAwF,EACxF9F,OAA+B;IAE/B,MAAM6B,QAAQhE;IACd,MAAM,EAAE+D,MAAM,EAAE,GAAG5B;IACnB,MAAM,EAAE2B,OAAO,EAAEY,IAAI,EAAE,GAAGxE,mBAAmB;QAC3CS,QAAQsH,MAAMrB,GAAG,CAACjG,MAAM;QACxBiC,QAAQqF,MAAM3E,IAAI,CAACV,MAAM;QACzBsF,QAAQ;YAAE7F,OAAOF,QAAQE,KAAK;YAAEG,KAAKL,QAAQK,GAAG;QAAC;QACjD2F,aAAaF,MAAME,WAAW;IAChC;IACA,OAAO;QACL1G,IAAIrB;QACJ4B,MAAM;QACNoG,OAAO,GAAGpE,MAAM,6BAA6B,CAAC;QAC9CqE,MACE,CAAC,WAAW,EAAErE,MAAM,+EAA+E,CAAC,GACpG;QACFsE,OACE,GAAGtE,MAAM,uFAAuF,CAAC,GACjG,GAAGD,OAAOO,WAAW,CAAC,sEAAsE,CAAC,GAC7F;QACFtB,WAAWiF,MAAM3E,IAAI,CAACN,SAAS;QAC/BQ,aAAayE,MAAM3E,IAAI,CAACE,WAAW;QACnC+E,UAAU1E,iBAAiBC,SAASC;QACpCyE,aAAa,EAAE;QACfC,eAAe3E,QAAQa,KAAK;QAC5B+D,QAAQjE,eAAeX,SAASC;QAChCkB,SAAS0B,gBAAgBsB,MAAMrB,GAAG,EAAE9C;QACpC6E,SAAStB,gBAAgB3C;QACzBZ;QACAY;IACF;AACF"}

package/src/lib/server/payment-methods.js

@@ -18,6 +18,8 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
 import { emailUnverifiedResponse, firebaseAdmin, getOrgForHost, isImpersonationSession, lockdownRefusal } from "@aglyn/tenant-data-admin";
 import { invalidIdTokenResponse } from "@aglyn/tenant-data-admin/server/id-token-refusal";
 import { isStorefrontPaymentMethodOn, normalizeStorefrontPaymentMethodSettings, STOREFRONT_PAYMENT_METHODS } from "../model/commerce-payment-methods.js";
+import { commerceSitePermissionRefusal } from "../model/plugin-permissions.js";
+import { holdsCommerceSiteKey } from "./commerce-site-keys.js";
 import { readSiteDomainRecords } from "./payment-method-domains.js";
 /** How long the platform's configuration is trusted in memory. */ const PLATFORM_CONFIGURATION_TTL_MS = 10 * 60 * 1000;
 let platformCache = null;
@@ -159,7 +161,7 @@ export async function paymentMethodsHandler(request) {
         error: 'Missing hostId'
     }, 400);
     try {
-        var _hostSnapshot_get, _ref1, _ref2, _get;
+        var _ref1, _ref2, _get;
         var _owner_org;
         const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken);
         if (!decoded.email_verified && !isImpersonationSession(decoded)) {
@@ -171,17 +173,19 @@ export async function paymentMethodsHandler(request) {
         if (!hostSnapshot.exists) return json({
             error: 'Not found'
         }, 404);
-        // An allowlist. Reading the card is for whoever manages the store; a
-        // change asks Stripe for capabilities on the owner's payout account, so it
-        // is an admin's, like connecting that account is the owner's.
-        const role = ((_hostSnapshot_get = hostSnapshot.get('memberRoles')) != null ? _hostSnapshot_get : {})[decoded.uid];
-        const mayRead = role === 'admin' || role === 'editor';
+        // An allowlist. Reading the card is for whoever works the store's orders
+        // or changes its methods; a change asks Stripe for capabilities on the
+        // owner's payout account, so it is "Manage payment methods" (AGL-4047),
+        // whose preset is the site Admin who alone made it before, as the
+        // reader's is the Admin and Editor.
+        const mayEdit = holdsCommerceSiteKey(hostSnapshot, decoded.uid, 'commerce.paymentMethods');
+        const mayRead = mayEdit || holdsCommerceSiteKey(hostSnapshot, decoded.uid, 'commerce.orders');
         if (!mayRead) return json({
             error: 'Not found'
         }, 404);
-        if (method === 'POST' && role !== 'admin') {
+        if (method === 'POST' && !mayEdit) {
             return json({
-                error: 'Only a site admin can change payment methods'
+                error: commerceSitePermissionRefusal('commerce.paymentMethods')
             }, 403);
         }
         const owner = await getOrgForHost(hostId);
@@ -266,7 +270,7 @@ export async function paymentMethodsHandler(request) {
             methods: buildPaymentMethodRows(settings, platform, capabilities),
             domains: await readSiteDomainRecords(hostSnapshot.data()),
             accountConnected: Boolean(accountId),
-            canEdit: role === 'admin',
+            canEdit: mayEdit,
             canFinish: Boolean(accountId) && decoded.uid === ownerUid,
             warnings
         };

package/src/lib/server/payment-methods.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/payment-methods.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { checkEntitlement, pluginRequestFromWeb } from '@aglyn/aglyn/server'\nimport type { SiteReturnHost } from '@aglyn/aglyn/app-utils/site-return-url'\nimport {\n  emailUnverifiedResponse,\n  firebaseAdmin,\n  getOrgForHost,\n  isImpersonationSession,\n  lockdownRefusal,\n} from '@aglyn/tenant-data-admin'\nimport { invalidIdTokenResponse } from '@aglyn/tenant-data-admin/server/id-token-refusal'\nimport {\n  isStorefrontPaymentMethodOn,\n  normalizeStorefrontPaymentMethodSettings,\n  STOREFRONT_PAYMENT_METHODS,\n  type StorefrontPaymentMethodId,\n  type StorefrontPaymentMethodSettings,\n} from '../model/commerce-payment-methods'\nimport {\n  type PaymentMethodDomainRecord,\n  readSiteDomainRecords,\n} from './payment-method-domains'\n\n/**\n * The merchant's payment methods card (AGL-3629):\n * `GET|POST /api/commerce/payment-methods?hostId=…`, served by the console.\n *\n * GET answers, per method, three facts the card needs and no client can read:\n *\n *  - whether the PLATFORM offers it (its default payment method configuration\n *    — storefront charges are destination charges with the platform as\n *    merchant of record, so that configuration is the ceiling). A method the\n *    platform has not turned on, or that Stripe has not made available to it,\n *    is reported `unavailable` and the card does not show it at all;\n *  - the connected account's capability for it, which Stripe asks platforms to\n *    request before an account accepts BNPL, Cash App, Amazon Pay or crypto;\n *  - the site's domain registrations, which Apple Pay depends on.\n *\n * POST saves the toggles to `hosts/{hostId}/settings/store.paymentMethods` and\n * requests the capability of each method turned on, in one account update with\n * an idempotency key. Server-side, because the toggle and the capability are\n * one decision: a toggle saved by the browser with no capability behind it\n * would read as on and never appear.\n */\n\nexport type PlatformAvailability = 'on' | 'unavailable' | null\n\nexport type CapabilityStatus = 'active' | 'pending' | 'inactive' | 'unrequested' | null\n\nexport interface PaymentMethodRow {\n  id: StorefrontPaymentMethodId\n  on: boolean\n  platform: PlatformAvailability\n  capability: CapabilityStatus\n}\n\nexport interface PaymentMethodsAnswer {\n  methods: PaymentMethodRow[]\n  domains: PaymentMethodDomainRecord[]\n  accountConnected: boolean\n  /** The caller may save toggles: a site admin. */\n  canEdit: boolean\n  /** The caller may open Stripe to finish a method: the organization owner. */\n  canFinish: boolean\n  warnings: string[]\n}\n\n/** How long the platform's configuration is trusted in memory. */\nconst PLATFORM_CONFIGURATION_TTL_MS = 10 * 60 * 1000\n\nlet platformCache: { at: number; value: Record<string, PlatformAvailability> } | null = null\n\n/** Test seam: forget the cached platform configuration. */\nexport function resetPlatformPaymentMethodCacheForTests(): void {\n  platformCache = null\n}\n\nasync function stripe<T>(\n  method: 'GET' | 'POST',\n  path: string,\n  params?: URLSearchParams,\n  idempotencyKey?: string,\n): Promise<T> {\n  const query = method === 'GET' && params ? `?${params}` : ''\n  const response = await fetch(`https://api.stripe.com/v1/${path}${query}`, {\n    method,\n    headers: {\n      Authorization: `Bearer ${process.env.STRIPE_SECRET_KEY}`,\n      ...(method === 'POST' && { 'Content-Type': 'application/x-www-form-urlencoded' }),\n      ...(idempotencyKey && { 'Idempotency-Key': idempotencyKey }),\n    },\n    ...(method === 'POST' && params && { body: params.toString() }),\n  })\n  const payload = (await response.json().catch(() => ({}))) as T & {\n    error?: { message?: string }\n  }\n  if (!response.ok) {\n    throw new Error(payload?.error?.message ?? `Stripe ${path} failed (${response.status})`)\n  }\n  return payload\n}\n\ninterface StripeConfiguration {\n  is_default?: boolean\n  application?: string | null\n  active?: boolean\n  [key: string]: unknown\n}\n\n/**\n * Which methods the platform's own default configuration offers. The list\n * also returns configurations OTHER Connect applications made for this\n * account (`application` set); those do not govern our sessions and are\n * skipped. `null` per method when Stripe could not be asked — the card then\n * shows the toggle without a verdict rather than hiding a method that may work.\n */\nexport async function platformPaymentMethodAvailability(): Promise<\n  Record<string, PlatformAvailability>\n> {\n  if (platformCache && Date.now() - platformCache.at < PLATFORM_CONFIGURATION_TTL_MS) {\n    return platformCache.value\n  }\n  const value: Record<string, PlatformAvailability> = {}\n  try {\n    const list = await stripe<{ data?: StripeConfiguration[] }>(\n      'GET',\n      'payment_method_configurations',\n      new URLSearchParams({ limit: '20' }),\n    )\n    const own =\n      list.data?.find((entry) => entry.is_default && !entry.application) ??\n      list.data?.find((entry) => !entry.application) ??\n      null\n    for (const method of STOREFRONT_PAYMENT_METHODS) {\n      if (!own) {\n        value[method.id] = null\n        continue\n      }\n      const entry = own[method.configurationKey] as\n        | { available?: boolean; display_preference?: { value?: string } }\n        | undefined\n      value[method.id] =\n        entry?.available === true && entry?.display_preference?.value === 'on'\n          ? 'on'\n          : 'unavailable'\n    }\n    platformCache = { at: Date.now(), value }\n  } catch (error) {\n    console.warn('[commerce] payment method configuration unreadable', error)\n    for (const method of STOREFRONT_PAYMENT_METHODS) value[method.id] = null\n  }\n  return value\n}\n\nfunction capabilityStatus(\n  capabilities: Record<string, string> | undefined,\n  key: string | undefined,\n): CapabilityStatus {\n  if (!key) return null\n  const status = capabilities?.[key]\n  if (status === 'active' || status === 'pending' || status === 'inactive') return status\n  return 'unrequested'\n}\n\nasync function readAccountCapabilities(\n  accountId: string | null,\n): Promise<Record<string, string> | undefined> {\n  if (!accountId) return undefined\n  try {\n    const account = await stripe<{ capabilities?: Record<string, string> }>(\n      'GET',\n      `accounts/${encodeURIComponent(accountId)}`,\n    )\n    return account.capabilities ?? {}\n  } catch (error) {\n    console.warn('[commerce] connected account unreadable', error)\n    return undefined\n  }\n}\n\n/** The capabilities a save asks Stripe for: on, offered, not yet requested. */\nexport function capabilitiesToRequest(\n  settings: StorefrontPaymentMethodSettings,\n  platform: Record<string, PlatformAvailability>,\n  capabilities: Record<string, string> | undefined,\n): string[] {\n  return STOREFRONT_PAYMENT_METHODS.filter(\n    (method) =>\n      method.capability &&\n      isStorefrontPaymentMethodOn(settings, method.id) &&\n      platform[method.id] !== 'unavailable' &&\n      capabilityStatus(capabilities, method.capability) === 'unrequested',\n  ).map((method) => method.capability as string)\n}\n\nexport function buildPaymentMethodRows(\n  settings: StorefrontPaymentMethodSettings,\n  platform: Record<string, PlatformAvailability>,\n  capabilities: Record<string, string> | undefined,\n): PaymentMethodRow[] {\n  return STOREFRONT_PAYMENT_METHODS.map((method) => ({\n    id: method.id,\n    on: isStorefrontPaymentMethodOn(settings, method.id),\n    platform: platform[method.id] ?? null,\n    capability: capabilities ? capabilityStatus(capabilities, method.capability) : null,\n  }))\n}\n\nconst json = (body: unknown, status = 200) => Response.json(body, { status })\n\n/**\n * Where Stripe sends the owner back: the console page they pressed the button\n * on, judged against the request's own origin so a forged `Referer` cannot\n * turn the link into a redirect to somewhere else.\n */\nexport function consoleReturnUrl(headers: Partial<Record<string, string>>): string {\n  const origin = headers.origin || (headers.host ? `https://${headers.host}` : '')\n  const referer = headers.referer ?? ''\n  try {\n    if (origin && referer && new URL(referer).origin === new URL(origin).origin) {\n      return referer\n    }\n  } catch {\n    // Unparseable: fall through to the origin.\n  }\n  return origin || 'https://localhost/'\n}\n\nexport async function paymentMethodsHandler(request: Request): Promise<Response> {\n  const { method, headers: rawHeaders, query, body } = await pluginRequestFromWeb(request)\n  const headers = rawHeaders as Partial<Record<string, string>>\n  if (method !== 'GET' && method !== 'POST') {\n    return json({ error: 'Method not allowed' }, 405)\n  }\n  if (!process.env.STRIPE_SECRET_KEY) {\n    return json({ error: 'Payments are not configured (STRIPE_SECRET_KEY).' }, 501)\n  }\n  const authorization = headers.authorization ?? ''\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return json({ error: 'Unauthenticated' }, 401)\n\n  const parsed =\n    typeof body === 'string' ? (JSON.parse(body || '{}') as Record<string, unknown>) : (body ?? {})\n  const hostId = String(\n    (method === 'GET' ? query?.['hostId'] : (parsed as Record<string, unknown>)['hostId']) ?? '',\n  )\n  if (!hostId) return json({ error: 'Missing hostId' }, 400)\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    if (!decoded.email_verified && !isImpersonationSession(decoded)) {\n      return emailUnverifiedResponse()\n    }\n    const firestore = firebaseAdmin.app().firestore()\n    const hostRef = firestore.collection('hosts').doc(hostId)\n    const hostSnapshot = await hostRef.get()\n    if (!hostSnapshot.exists) return json({ error: 'Not found' }, 404)\n\n    // An allowlist. Reading the card is for whoever manages the store; a\n    // change asks Stripe for capabilities on the owner's payout account, so it\n    // is an admin's, like connecting that account is the owner's.\n    const role = (hostSnapshot.get('memberRoles') ?? {})[decoded.uid]\n    const mayRead = role === 'admin' || role === 'editor'\n    if (!mayRead) return json({ error: 'Not found' }, 404)\n    if (method === 'POST' && role !== 'admin') {\n      return json({ error: 'Only a site admin can change payment methods' }, 403)\n    }\n\n    const owner = await getOrgForHost(hostId)\n    const locked = await lockdownRefusal({\n      request,\n      staff: decoded['staff'] === true,\n      uid: decoded.uid,\n      org: owner?.org,\n      host: hostSnapshot.data(),\n    })\n    if (locked) return locked\n    if (!checkEntitlement((owner?.org ?? {}) as never, 'commerce')) {\n      return json({ error: 'Selling is not included on this plan' }, 402)\n    }\n\n    const ownerUid = String(owner?.org?.ownerUid ?? '')\n    const accountId = ownerUid\n      ? (((await firestore.collection('profiles').doc(ownerUid).get()).get(\n          'stripeAccountId',\n        ) as string | undefined) ?? null)\n      : null\n\n    const storeRef = hostRef.collection('settings').doc('store')\n    let settings = normalizeStorefrontPaymentMethodSettings(\n      (await storeRef.get()).get('paymentMethods'),\n    )\n    const platform = await platformPaymentMethodAvailability()\n    let capabilities = await readAccountCapabilities(accountId)\n    const warnings: string[] = []\n\n    // FINISH IN STRIPE: a capability Stripe holds `inactive` needs details\n    // only the account holder can give, and an Express account has no login of\n    // its own, so a link minted here is the only way in. The owner's alone,\n    // as connecting the account is (`connect.ts`): the link opens the owner's\n    // identity and bank details.\n    if (method === 'POST' && (parsed as Record<string, unknown>)['action'] === 'finish') {\n      if (!accountId || decoded.uid !== ownerUid) {\n        return json({ error: 'Only the organization owner can finish this in Stripe' }, 403)\n      }\n      const back = consoleReturnUrl(headers)\n      const link = await stripe<{ url?: string }>(\n        'POST',\n        'account_links',\n        new URLSearchParams({\n          account: accountId,\n          type: 'account_onboarding',\n          'collection_options[fields]': 'currently_due',\n          refresh_url: back,\n          return_url: back,\n        }),\n      )\n      return json({ url: link.url ?? null })\n    }\n\n    if (method === 'POST') {\n      const requested = normalizeStorefrontPaymentMethodSettings(\n        (parsed as Record<string, unknown>)['methods'],\n      )\n      if (!Object.keys(requested).length) {\n        return json({ error: 'Nothing to save' }, 400)\n      }\n      settings = { ...settings, ...requested }\n      await storeRef.set(\n        { paymentMethods: settings, paymentMethodsUpdatedAtMs: Date.now(), paymentMethodsUpdatedBy: decoded.uid },\n        { merge: true },\n      )\n      const wanted = accountId ? capabilitiesToRequest(settings, platform, capabilities) : []\n      if (accountId && wanted.length) {\n        const params = new URLSearchParams()\n        for (const capability of wanted) {\n          params.set(`capabilities[${capability}][requested]`, 'true')\n        }\n        try {\n          const account = await stripe<{ capabilities?: Record<string, string> }>(\n            'POST',\n            `accounts/${encodeURIComponent(accountId)}`,\n            params,\n            `aglyn-pm-capabilities:${accountId}:${[...wanted].sort().join(',')}`,\n          )\n          capabilities = account.capabilities ?? capabilities\n        } catch (error) {\n          const message = error instanceof Error ? error.message : String(error)\n          warnings.push(\n            `Stripe did not accept the request to enable ${wanted.join(', ')} on your payout account: ${message}`,\n          )\n        }\n      }\n    }\n\n    const answer: PaymentMethodsAnswer = {\n      methods: buildPaymentMethodRows(settings, platform, capabilities),\n      domains: await readSiteDomainRecords(hostSnapshot.data() as SiteReturnHost | undefined),\n      accountConnected: Boolean(accountId),\n      canEdit: role === 'admin',\n      canFinish: Boolean(accountId) && decoded.uid === ownerUid,\n      warnings,\n    }\n    return json(answer)\n  } catch (error) {\n    const unauthenticated = invalidIdTokenResponse(error)\n    if (unauthenticated) return unauthenticated\n    console.error(error)\n    return json({ error: 'Payment methods could not be loaded' }, 500)\n  }\n}\n"],"names":["checkEntitlement","pluginRequestFromWeb","emailUnverifiedResponse","firebaseAdmin","getOrgForHost","isImpersonationSession","lockdownRefusal","invalidIdTokenResponse","isStorefrontPaymentMethodOn","normalizeStorefrontPaymentMethodSettings","STOREFRONT_PAYMENT_METHODS","readSiteDomainRecords","PLATFORM_CONFIGURATION_TTL_MS","platformCache","resetPlatformPaymentMethodCacheForTests","stripe","method","path","params","idempotencyKey","query","response","fetch","headers","Authorization","process","env","STRIPE_SECRET_KEY","body","toString","payload","json","catch","ok","Error","error","message","status","platformPaymentMethodAvailability","Date","now","at","value","list","URLSearchParams","limit","own","data","find","entry","is_default","application","id","configurationKey","available","display_preference","console","warn","capabilityStatus","capabilities","key","readAccountCapabilities","accountId","undefined","account","encodeURIComponent","capabilitiesToRequest","settings","platform","filter","capability","map","buildPaymentMethodRows","on","Response","consoleReturnUrl","origin","host","referer","URL","paymentMethodsHandler","request","rawHeaders","authorization","idToken","startsWith","slice","length","parsed","JSON","parse","hostId","String","hostSnapshot","owner","decoded","app","auth","verifyIdToken","email_verified","firestore","hostRef","collection","doc","get","exists","role","uid","mayRead","locked","staff","org","ownerUid","storeRef","warnings","link","back","type","refresh_url","return_url","url","requested","Object","keys","set","paymentMethods","paymentMethodsUpdatedAtMs","paymentMethodsUpdatedBy","merge","wanted","sort","join","push","answer","methods","domains","accountConnected","Boolean","canEdit","canFinish","unauthenticated"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,gBAAgB,EAAEC,oBAAoB,QAAQ,sBAAqB;AAE5E,SACEC,uBAAuB,EACvBC,aAAa,EACbC,aAAa,EACbC,sBAAsB,EACtBC,eAAe,QACV,2BAA0B;AACjC,SAASC,sBAAsB,QAAQ,mDAAkD;AACzF,SACEC,2BAA2B,EAC3BC,wCAAwC,EACxCC,0BAA0B,QAGrB,uCAAmC;AAC1C,SAEEC,qBAAqB,QAChB,8BAA0B;AA8CjC,gEAAgE,GAChE,MAAMC,gCAAgC,KAAK,KAAK;AAEhD,IAAIC,gBAAoF;AAExF,yDAAyD,GACzD,OAAO,SAASC;IACdD,gBAAgB;AAClB;AAEA,eAAeE,OACbC,MAAsB,EACtBC,IAAY,EACZC,MAAwB,EACxBC,cAAuB;IAEvB,MAAMC,QAAQJ,WAAW,SAASE,SAAS,CAAC,CAAC,EAAEA,QAAQ,GAAG;IAC1D,MAAMG,WAAW,MAAMC,MAAM,CAAC,0BAA0B,EAAEL,OAAOG,OAAO,EAAE;QACxEJ;QACAO,SAAS;YACPC,eAAe,CAAC,OAAO,EAAEC,QAAQC,GAAG,CAACC,iBAAiB,EAAE;WACpDX,WAAW,UAAU;YAAE,gBAAgB;QAAoC,GAC3EG,kBAAkB;YAAE,mBAAmBA;QAAe;OAExDH,WAAW,UAAUE,UAAU;QAAEU,MAAMV,OAAOW,QAAQ;IAAG;IAE/D,MAAMC,UAAW,MAAMT,SAASU,IAAI,GAAGC,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;IAGrD,IAAI,CAACX,SAASY,EAAE,EAAE;;YACAH;QAAhB,MAAM,IAAII,cAAMJ,4BAAAA,iBAAAA,QAASK,KAAK,qBAAdL,eAAgBM,OAAO,mBAAI,CAAC,OAAO,EAAEnB,KAAK,SAAS,EAAEI,SAASgB,MAAM,CAAC,CAAC,CAAC;IACzF;IACA,OAAOP;AACT;AASA;;;;;;CAMC,GACD,OAAO,eAAeQ;IAGpB,IAAIzB,iBAAiB0B,KAAKC,GAAG,KAAK3B,cAAc4B,EAAE,GAAG7B,+BAA+B;QAClF,OAAOC,cAAc6B,KAAK;IAC5B;IACA,MAAMA,QAA8C,CAAC;IACrD,IAAI;YAOAC;YAAAA,YACAA;QAPF,MAAMA,OAAO,MAAM5B,OACjB,OACA,iCACA,IAAI6B,gBAAgB;YAAEC,OAAO;QAAK;QAEpC,MAAMC,OACJH,iBAAAA,aAAAA,KAAKI,IAAI,qBAATJ,WAAWK,IAAI,CAAC,CAACC,QAAUA,MAAMC,UAAU,IAAI,CAACD,MAAME,WAAW,sBACjER,cAAAA,KAAKI,IAAI,qBAATJ,YAAWK,IAAI,CAAC,CAACC,QAAU,CAACA,MAAME,WAAW,aAD7CR,OAEA;QACF,KAAK,MAAM3B,UAAUN,2BAA4B;gBAShBuC;YAR/B,IAAI,CAACH,KAAK;gBACRJ,KAAK,CAAC1B,OAAOoC,EAAE,CAAC,GAAG;gBACnB;YACF;YACA,MAAMH,QAAQH,GAAG,CAAC9B,OAAOqC,gBAAgB,CAAC;YAG1CX,KAAK,CAAC1B,OAAOoC,EAAE,CAAC,GACdH,CAAAA,yBAAAA,MAAOK,SAAS,MAAK,QAAQL,CAAAA,0BAAAA,4BAAAA,MAAOM,kBAAkB,qBAAzBN,0BAA2BP,KAAK,MAAK,OAC9D,OACA;QACR;QACA7B,gBAAgB;YAAE4B,IAAIF,KAAKC,GAAG;YAAIE;QAAM;IAC1C,EAAE,OAAOP,OAAO;QACdqB,QAAQC,IAAI,CAAC,sDAAsDtB;QACnE,KAAK,MAAMnB,UAAUN,2BAA4BgC,KAAK,CAAC1B,OAAOoC,EAAE,CAAC,GAAG;IACtE;IACA,OAAOV;AACT;AAEA,SAASgB,iBACPC,YAAgD,EAChDC,GAAuB;IAEvB,IAAI,CAACA,KAAK,OAAO;IACjB,MAAMvB,SAASsB,gCAAAA,YAAc,CAACC,IAAI;IAClC,IAAIvB,WAAW,YAAYA,WAAW,aAAaA,WAAW,YAAY,OAAOA;IACjF,OAAO;AACT;AAEA,eAAewB,wBACbC,SAAwB;IAExB,IAAI,CAACA,WAAW,OAAOC;IACvB,IAAI;YAKKC;QAJP,MAAMA,UAAU,MAAMjD,OACpB,OACA,CAAC,SAAS,EAAEkD,mBAAmBH,YAAY;QAE7C,QAAOE,wBAAAA,QAAQL,YAAY,YAApBK,wBAAwB,CAAC;IAClC,EAAE,OAAO7B,OAAO;QACdqB,QAAQC,IAAI,CAAC,2CAA2CtB;QACxD,OAAO4B;IACT;AACF;AAEA,6EAA6E,GAC7E,OAAO,SAASG,sBACdC,QAAyC,EACzCC,QAA8C,EAC9CT,YAAgD;IAEhD,OAAOjD,2BAA2B2D,MAAM,CACtC,CAACrD,SACCA,OAAOsD,UAAU,IACjB9D,4BAA4B2D,UAAUnD,OAAOoC,EAAE,KAC/CgB,QAAQ,CAACpD,OAAOoC,EAAE,CAAC,KAAK,iBACxBM,iBAAiBC,cAAc3C,OAAOsD,UAAU,MAAM,eACxDC,GAAG,CAAC,CAACvD,SAAWA,OAAOsD,UAAU;AACrC;AAEA,OAAO,SAASE,uBACdL,QAAyC,EACzCC,QAA8C,EAC9CT,YAAgD;IAEhD,OAAOjD,2BAA2B6D,GAAG,CAAC,CAACvD;YAG3BoD;eAHuC;YACjDhB,IAAIpC,OAAOoC,EAAE;YACbqB,IAAIjE,4BAA4B2D,UAAUnD,OAAOoC,EAAE;YACnDgB,QAAQ,GAAEA,sBAAAA,QAAQ,CAACpD,OAAOoC,EAAE,CAAC,YAAnBgB,sBAAuB;YACjCE,YAAYX,eAAeD,iBAAiBC,cAAc3C,OAAOsD,UAAU,IAAI;QACjF;;AACF;AAEA,MAAMvC,OAAO,CAACH,MAAeS,SAAS,GAAG,GAAKqC,SAAS3C,IAAI,CAACH,MAAM;QAAES;IAAO;AAE3E;;;;CAIC,GACD,OAAO,SAASsC,iBAAiBpD,OAAwC;QAEvDA;IADhB,MAAMqD,SAASrD,QAAQqD,MAAM,IAAKrD,CAAAA,QAAQsD,IAAI,GAAG,CAAC,QAAQ,EAAEtD,QAAQsD,IAAI,EAAE,GAAG,EAAC;IAC9E,MAAMC,WAAUvD,mBAAAA,QAAQuD,OAAO,YAAfvD,mBAAmB;IACnC,IAAI;QACF,IAAIqD,UAAUE,WAAW,IAAIC,IAAID,SAASF,MAAM,KAAK,IAAIG,IAAIH,QAAQA,MAAM,EAAE;YAC3E,OAAOE;QACT;IACF,EAAE,eAAM;IACN,2CAA2C;IAC7C;IACA,OAAOF,UAAU;AACnB;AAEA,OAAO,eAAeI,sBAAsBC,OAAgB;QASpC1D,wBASnBP;IAjBH,MAAM,EAAEA,MAAM,EAAEO,SAAS2D,UAAU,EAAE9D,KAAK,EAAEQ,IAAI,EAAE,GAAG,MAAM3B,qBAAqBgF;IAChF,MAAM1D,UAAU2D;IAChB,IAAIlE,WAAW,SAASA,WAAW,QAAQ;QACzC,OAAOe,KAAK;YAAEI,OAAO;QAAqB,GAAG;IAC/C;IACA,IAAI,CAACV,QAAQC,GAAG,CAACC,iBAAiB,EAAE;QAClC,OAAOI,KAAK;YAAEI,OAAO;QAAmD,GAAG;IAC7E;IACA,MAAMgD,iBAAgB5D,yBAAAA,QAAQ4D,aAAa,YAArB5D,yBAAyB;IAC/C,MAAM6D,UAAUD,cAAcE,UAAU,CAAC,aACrCF,cAAcG,KAAK,CAAC,UAAUC,MAAM,IACpCxB;IACJ,IAAI,CAACqB,SAAS,OAAOrD,KAAK;QAAEI,OAAO;IAAkB,GAAG;IAExD,MAAMqD,SACJ,OAAO5D,SAAS,WAAY6D,KAAKC,KAAK,CAAC9D,QAAQ,QAAqCA,eAAAA,OAAQ,CAAC;IAC/F,MAAM+D,SAASC,QACZ5E,OAAAA,WAAW,QAAQI,yBAAAA,KAAO,CAAC,SAAS,GAAG,AAACoE,MAAkC,CAAC,SAAS,YAApFxE,OAAyF;IAE5F,IAAI,CAAC2E,QAAQ,OAAO5D,KAAK;QAAEI,OAAO;IAAiB,GAAG;IAEtD,IAAI;YAaY0D,iCAsBR;YAFkBC;QAhCxB,MAAMC,UAAU,MAAM5F,cAAc6F,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACd;QAC/D,IAAI,CAACW,QAAQI,cAAc,IAAI,CAAC9F,uBAAuB0F,UAAU;YAC/D,OAAO7F;QACT;QACA,MAAMkG,YAAYjG,cAAc6F,GAAG,GAAGI,SAAS;QAC/C,MAAMC,UAAUD,UAAUE,UAAU,CAAC,SAASC,GAAG,CAACZ;QAClD,MAAME,eAAe,MAAMQ,QAAQG,GAAG;QACtC,IAAI,CAACX,aAAaY,MAAM,EAAE,OAAO1E,KAAK;YAAEI,OAAO;QAAY,GAAG;QAE9D,qEAAqE;QACrE,2EAA2E;QAC3E,8DAA8D;QAC9D,MAAMuE,OAAO,EAACb,oBAAAA,aAAaW,GAAG,CAAC,0BAAjBX,oBAAmC,CAAC,EAAE,CAACE,QAAQY,GAAG,CAAC;QACjE,MAAMC,UAAUF,SAAS,WAAWA,SAAS;QAC7C,IAAI,CAACE,SAAS,OAAO7E,KAAK;YAAEI,OAAO;QAAY,GAAG;QAClD,IAAInB,WAAW,UAAU0F,SAAS,SAAS;YACzC,OAAO3E,KAAK;gBAAEI,OAAO;YAA+C,GAAG;QACzE;QAEA,MAAM2D,QAAQ,MAAM1F,cAAcuF;QAClC,MAAMkB,SAAS,MAAMvG,gBAAgB;YACnC2E;YACA6B,OAAOf,OAAO,CAAC,QAAQ,KAAK;YAC5BY,KAAKZ,QAAQY,GAAG;YAChBI,GAAG,EAAEjB,yBAAAA,MAAOiB,GAAG;YACflC,MAAMgB,aAAa9C,IAAI;QACzB;QACA,IAAI8D,QAAQ,OAAOA;QACnB,IAAI,CAAC7G,0BAAkB8F,yBAAAA,MAAOiB,GAAG,oBAAI,CAAC,GAAa,aAAa;YAC9D,OAAOhF,KAAK;gBAAEI,OAAO;YAAuC,GAAG;QACjE;QAEA,MAAM6E,WAAWpB,gBAAOE,0BAAAA,aAAAA,MAAOiB,GAAG,qBAAVjB,WAAYkB,QAAQ,oBAAI;QAChD,MAAMlD,YAAYkD,YACZ,OAAA,AAAC,CAAA,MAAMZ,UAAUE,UAAU,CAAC,YAAYC,GAAG,CAACS,UAAUR,GAAG,EAAC,EAAGA,GAAG,CAChE,8BADA,OAE0B,OAC5B;QAEJ,MAAMS,WAAWZ,QAAQC,UAAU,CAAC,YAAYC,GAAG,CAAC;QACpD,IAAIpC,WAAW1D,yCACb,AAAC,CAAA,MAAMwG,SAAST,GAAG,EAAC,EAAGA,GAAG,CAAC;QAE7B,MAAMpC,WAAW,MAAM9B;QACvB,IAAIqB,eAAe,MAAME,wBAAwBC;QACjD,MAAMoD,WAAqB,EAAE;QAE7B,uEAAuE;QACvE,2EAA2E;QAC3E,wEAAwE;QACxE,0EAA0E;QAC1E,6BAA6B;QAC7B,IAAIlG,WAAW,UAAU,AAACwE,MAAkC,CAAC,SAAS,KAAK,UAAU;gBAgBhE2B;YAfnB,IAAI,CAACrD,aAAaiC,QAAQY,GAAG,KAAKK,UAAU;gBAC1C,OAAOjF,KAAK;oBAAEI,OAAO;gBAAwD,GAAG;YAClF;YACA,MAAMiF,OAAOzC,iBAAiBpD;YAC9B,MAAM4F,OAAO,MAAMpG,OACjB,QACA,iBACA,IAAI6B,gBAAgB;gBAClBoB,SAASF;gBACTuD,MAAM;gBACN,8BAA8B;gBAC9BC,aAAaF;gBACbG,YAAYH;YACd;YAEF,OAAOrF,KAAK;gBAAEyF,GAAG,GAAEL,YAAAA,KAAKK,GAAG,YAARL,YAAY;YAAK;QACtC;QAEA,IAAInG,WAAW,QAAQ;YACrB,MAAMyG,YAAYhH,yCAChB,AAAC+E,MAAkC,CAAC,UAAU;YAEhD,IAAI,CAACkC,OAAOC,IAAI,CAACF,WAAWlC,MAAM,EAAE;gBAClC,OAAOxD,KAAK;oBAAEI,OAAO;gBAAkB,GAAG;YAC5C;YACAgC,WAAW,aAAKA,UAAasD;YAC7B,MAAMR,SAASW,GAAG,CAChB;gBAAEC,gBAAgB1D;gBAAU2D,2BAA2BvF,KAAKC,GAAG;gBAAIuF,yBAAyBhC,QAAQY,GAAG;YAAC,GACxG;gBAAEqB,OAAO;YAAK;YAEhB,MAAMC,SAASnE,YAAYI,sBAAsBC,UAAUC,UAAUT,gBAAgB,EAAE;YACvF,IAAIG,aAAamE,OAAO1C,MAAM,EAAE;gBAC9B,MAAMrE,SAAS,IAAI0B;gBACnB,KAAK,MAAM0B,cAAc2D,OAAQ;oBAC/B/G,OAAO0G,GAAG,CAAC,CAAC,aAAa,EAAEtD,WAAW,YAAY,CAAC,EAAE;gBACvD;gBACA,IAAI;wBAOaN;oBANf,MAAMA,UAAU,MAAMjD,OACpB,QACA,CAAC,SAAS,EAAEkD,mBAAmBH,YAAY,EAC3C5C,QACA,CAAC,sBAAsB,EAAE4C,UAAU,CAAC,EAAE;2BAAImE;qBAAO,CAACC,IAAI,GAAGC,IAAI,CAAC,MAAM;oBAEtExE,gBAAeK,wBAAAA,QAAQL,YAAY,YAApBK,wBAAwBL;gBACzC,EAAE,OAAOxB,OAAO;oBACd,MAAMC,UAAUD,iBAAiBD,QAAQC,MAAMC,OAAO,GAAGwD,OAAOzD;oBAChE+E,SAASkB,IAAI,CACX,CAAC,4CAA4C,EAAEH,OAAOE,IAAI,CAAC,MAAM,yBAAyB,EAAE/F,SAAS;gBAEzG;YACF;QACF;QAEA,MAAMiG,SAA+B;YACnCC,SAAS9D,uBAAuBL,UAAUC,UAAUT;YACpD4E,SAAS,MAAM5H,sBAAsBkF,aAAa9C,IAAI;YACtDyF,kBAAkBC,QAAQ3E;YAC1B4E,SAAShC,SAAS;YAClBiC,WAAWF,QAAQ3E,cAAciC,QAAQY,GAAG,KAAKK;YACjDE;QACF;QACA,OAAOnF,KAAKsG;IACd,EAAE,OAAOlG,OAAO;QACd,MAAMyG,kBAAkBrI,uBAAuB4B;QAC/C,IAAIyG,iBAAiB,OAAOA;QAC5BpF,QAAQrB,KAAK,CAACA;QACd,OAAOJ,KAAK;YAAEI,OAAO;QAAsC,GAAG;IAChE;AACF"}
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/payment-methods.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { checkEntitlement, pluginRequestFromWeb } from '@aglyn/aglyn/server'\nimport type { SiteReturnHost } from '@aglyn/aglyn/app-utils/site-return-url'\nimport {\n  emailUnverifiedResponse,\n  firebaseAdmin,\n  getOrgForHost,\n  isImpersonationSession,\n  lockdownRefusal,\n} from '@aglyn/tenant-data-admin'\nimport { invalidIdTokenResponse } from '@aglyn/tenant-data-admin/server/id-token-refusal'\nimport {\n  isStorefrontPaymentMethodOn,\n  normalizeStorefrontPaymentMethodSettings,\n  STOREFRONT_PAYMENT_METHODS,\n  type StorefrontPaymentMethodId,\n  type StorefrontPaymentMethodSettings,\n} from '../model/commerce-payment-methods'\nimport { commerceSitePermissionRefusal } from '../model/plugin-permissions'\nimport { holdsCommerceSiteKey } from './commerce-site-keys'\nimport {\n  type PaymentMethodDomainRecord,\n  readSiteDomainRecords,\n} from './payment-method-domains'\n\n/**\n * The merchant's payment methods card (AGL-3629):\n * `GET|POST /api/commerce/payment-methods?hostId=…`, served by the console.\n *\n * GET answers, per method, three facts the card needs and no client can read:\n *\n *  - whether the PLATFORM offers it (its default payment method configuration\n *    — storefront charges are destination charges with the platform as\n *    merchant of record, so that configuration is the ceiling). A method the\n *    platform has not turned on, or that Stripe has not made available to it,\n *    is reported `unavailable` and the card does not show it at all;\n *  - the connected account's capability for it, which Stripe asks platforms to\n *    request before an account accepts BNPL, Cash App, Amazon Pay or crypto;\n *  - the site's domain registrations, which Apple Pay depends on.\n *\n * POST saves the toggles to `hosts/{hostId}/settings/store.paymentMethods` and\n * requests the capability of each method turned on, in one account update with\n * an idempotency key. Server-side, because the toggle and the capability are\n * one decision: a toggle saved by the browser with no capability behind it\n * would read as on and never appear.\n */\n\nexport type PlatformAvailability = 'on' | 'unavailable' | null\n\nexport type CapabilityStatus = 'active' | 'pending' | 'inactive' | 'unrequested' | null\n\nexport interface PaymentMethodRow {\n  id: StorefrontPaymentMethodId\n  on: boolean\n  platform: PlatformAvailability\n  capability: CapabilityStatus\n}\n\nexport interface PaymentMethodsAnswer {\n  methods: PaymentMethodRow[]\n  domains: PaymentMethodDomainRecord[]\n  accountConnected: boolean\n  /** The caller may save toggles: a site admin. */\n  canEdit: boolean\n  /** The caller may open Stripe to finish a method: the organization owner. */\n  canFinish: boolean\n  warnings: string[]\n}\n\n/** How long the platform's configuration is trusted in memory. */\nconst PLATFORM_CONFIGURATION_TTL_MS = 10 * 60 * 1000\n\nlet platformCache: { at: number; value: Record<string, PlatformAvailability> } | null = null\n\n/** Test seam: forget the cached platform configuration. */\nexport function resetPlatformPaymentMethodCacheForTests(): void {\n  platformCache = null\n}\n\nasync function stripe<T>(\n  method: 'GET' | 'POST',\n  path: string,\n  params?: URLSearchParams,\n  idempotencyKey?: string,\n): Promise<T> {\n  const query = method === 'GET' && params ? `?${params}` : ''\n  const response = await fetch(`https://api.stripe.com/v1/${path}${query}`, {\n    method,\n    headers: {\n      Authorization: `Bearer ${process.env.STRIPE_SECRET_KEY}`,\n      ...(method === 'POST' && { 'Content-Type': 'application/x-www-form-urlencoded' }),\n      ...(idempotencyKey && { 'Idempotency-Key': idempotencyKey }),\n    },\n    ...(method === 'POST' && params && { body: params.toString() }),\n  })\n  const payload = (await response.json().catch(() => ({}))) as T & {\n    error?: { message?: string }\n  }\n  if (!response.ok) {\n    throw new Error(payload?.error?.message ?? `Stripe ${path} failed (${response.status})`)\n  }\n  return payload\n}\n\ninterface StripeConfiguration {\n  is_default?: boolean\n  application?: string | null\n  active?: boolean\n  [key: string]: unknown\n}\n\n/**\n * Which methods the platform's own default configuration offers. The list\n * also returns configurations OTHER Connect applications made for this\n * account (`application` set); those do not govern our sessions and are\n * skipped. `null` per method when Stripe could not be asked — the card then\n * shows the toggle without a verdict rather than hiding a method that may work.\n */\nexport async function platformPaymentMethodAvailability(): Promise<\n  Record<string, PlatformAvailability>\n> {\n  if (platformCache && Date.now() - platformCache.at < PLATFORM_CONFIGURATION_TTL_MS) {\n    return platformCache.value\n  }\n  const value: Record<string, PlatformAvailability> = {}\n  try {\n    const list = await stripe<{ data?: StripeConfiguration[] }>(\n      'GET',\n      'payment_method_configurations',\n      new URLSearchParams({ limit: '20' }),\n    )\n    const own =\n      list.data?.find((entry) => entry.is_default && !entry.application) ??\n      list.data?.find((entry) => !entry.application) ??\n      null\n    for (const method of STOREFRONT_PAYMENT_METHODS) {\n      if (!own) {\n        value[method.id] = null\n        continue\n      }\n      const entry = own[method.configurationKey] as\n        | { available?: boolean; display_preference?: { value?: string } }\n        | undefined\n      value[method.id] =\n        entry?.available === true && entry?.display_preference?.value === 'on'\n          ? 'on'\n          : 'unavailable'\n    }\n    platformCache = { at: Date.now(), value }\n  } catch (error) {\n    console.warn('[commerce] payment method configuration unreadable', error)\n    for (const method of STOREFRONT_PAYMENT_METHODS) value[method.id] = null\n  }\n  return value\n}\n\nfunction capabilityStatus(\n  capabilities: Record<string, string> | undefined,\n  key: string | undefined,\n): CapabilityStatus {\n  if (!key) return null\n  const status = capabilities?.[key]\n  if (status === 'active' || status === 'pending' || status === 'inactive') return status\n  return 'unrequested'\n}\n\nasync function readAccountCapabilities(\n  accountId: string | null,\n): Promise<Record<string, string> | undefined> {\n  if (!accountId) return undefined\n  try {\n    const account = await stripe<{ capabilities?: Record<string, string> }>(\n      'GET',\n      `accounts/${encodeURIComponent(accountId)}`,\n    )\n    return account.capabilities ?? {}\n  } catch (error) {\n    console.warn('[commerce] connected account unreadable', error)\n    return undefined\n  }\n}\n\n/** The capabilities a save asks Stripe for: on, offered, not yet requested. */\nexport function capabilitiesToRequest(\n  settings: StorefrontPaymentMethodSettings,\n  platform: Record<string, PlatformAvailability>,\n  capabilities: Record<string, string> | undefined,\n): string[] {\n  return STOREFRONT_PAYMENT_METHODS.filter(\n    (method) =>\n      method.capability &&\n      isStorefrontPaymentMethodOn(settings, method.id) &&\n      platform[method.id] !== 'unavailable' &&\n      capabilityStatus(capabilities, method.capability) === 'unrequested',\n  ).map((method) => method.capability as string)\n}\n\nexport function buildPaymentMethodRows(\n  settings: StorefrontPaymentMethodSettings,\n  platform: Record<string, PlatformAvailability>,\n  capabilities: Record<string, string> | undefined,\n): PaymentMethodRow[] {\n  return STOREFRONT_PAYMENT_METHODS.map((method) => ({\n    id: method.id,\n    on: isStorefrontPaymentMethodOn(settings, method.id),\n    platform: platform[method.id] ?? null,\n    capability: capabilities ? capabilityStatus(capabilities, method.capability) : null,\n  }))\n}\n\nconst json = (body: unknown, status = 200) => Response.json(body, { status })\n\n/**\n * Where Stripe sends the owner back: the console page they pressed the button\n * on, judged against the request's own origin so a forged `Referer` cannot\n * turn the link into a redirect to somewhere else.\n */\nexport function consoleReturnUrl(headers: Partial<Record<string, string>>): string {\n  const origin = headers.origin || (headers.host ? `https://${headers.host}` : '')\n  const referer = headers.referer ?? ''\n  try {\n    if (origin && referer && new URL(referer).origin === new URL(origin).origin) {\n      return referer\n    }\n  } catch {\n    // Unparseable: fall through to the origin.\n  }\n  return origin || 'https://localhost/'\n}\n\nexport async function paymentMethodsHandler(request: Request): Promise<Response> {\n  const { method, headers: rawHeaders, query, body } = await pluginRequestFromWeb(request)\n  const headers = rawHeaders as Partial<Record<string, string>>\n  if (method !== 'GET' && method !== 'POST') {\n    return json({ error: 'Method not allowed' }, 405)\n  }\n  if (!process.env.STRIPE_SECRET_KEY) {\n    return json({ error: 'Payments are not configured (STRIPE_SECRET_KEY).' }, 501)\n  }\n  const authorization = headers.authorization ?? ''\n  const idToken = authorization.startsWith('Bearer ')\n    ? authorization.slice('Bearer '.length)\n    : undefined\n  if (!idToken) return json({ error: 'Unauthenticated' }, 401)\n\n  const parsed =\n    typeof body === 'string' ? (JSON.parse(body || '{}') as Record<string, unknown>) : (body ?? {})\n  const hostId = String(\n    (method === 'GET' ? query?.['hostId'] : (parsed as Record<string, unknown>)['hostId']) ?? '',\n  )\n  if (!hostId) return json({ error: 'Missing hostId' }, 400)\n\n  try {\n    const decoded = await firebaseAdmin.app().auth().verifyIdToken(idToken)\n    if (!decoded.email_verified && !isImpersonationSession(decoded)) {\n      return emailUnverifiedResponse()\n    }\n    const firestore = firebaseAdmin.app().firestore()\n    const hostRef = firestore.collection('hosts').doc(hostId)\n    const hostSnapshot = await hostRef.get()\n    if (!hostSnapshot.exists) return json({ error: 'Not found' }, 404)\n\n    // An allowlist. Reading the card is for whoever works the store's orders\n    // or changes its methods; a change asks Stripe for capabilities on the\n    // owner's payout account, so it is \"Manage payment methods\" (AGL-4047),\n    // whose preset is the site Admin who alone made it before, as the\n    // reader's is the Admin and Editor.\n    const mayEdit = holdsCommerceSiteKey(hostSnapshot, decoded.uid, 'commerce.paymentMethods')\n    const mayRead = mayEdit || holdsCommerceSiteKey(hostSnapshot, decoded.uid, 'commerce.orders')\n    if (!mayRead) return json({ error: 'Not found' }, 404)\n    if (method === 'POST' && !mayEdit) {\n      return json({ error: commerceSitePermissionRefusal('commerce.paymentMethods') }, 403)\n    }\n\n    const owner = await getOrgForHost(hostId)\n    const locked = await lockdownRefusal({\n      request,\n      staff: decoded['staff'] === true,\n      uid: decoded.uid,\n      org: owner?.org,\n      host: hostSnapshot.data(),\n    })\n    if (locked) return locked\n    if (!checkEntitlement((owner?.org ?? {}) as never, 'commerce')) {\n      return json({ error: 'Selling is not included on this plan' }, 402)\n    }\n\n    const ownerUid = String(owner?.org?.ownerUid ?? '')\n    const accountId = ownerUid\n      ? (((await firestore.collection('profiles').doc(ownerUid).get()).get(\n          'stripeAccountId',\n        ) as string | undefined) ?? null)\n      : null\n\n    const storeRef = hostRef.collection('settings').doc('store')\n    let settings = normalizeStorefrontPaymentMethodSettings(\n      (await storeRef.get()).get('paymentMethods'),\n    )\n    const platform = await platformPaymentMethodAvailability()\n    let capabilities = await readAccountCapabilities(accountId)\n    const warnings: string[] = []\n\n    // FINISH IN STRIPE: a capability Stripe holds `inactive` needs details\n    // only the account holder can give, and an Express account has no login of\n    // its own, so a link minted here is the only way in. The owner's alone,\n    // as connecting the account is (`connect.ts`): the link opens the owner's\n    // identity and bank details.\n    if (method === 'POST' && (parsed as Record<string, unknown>)['action'] === 'finish') {\n      if (!accountId || decoded.uid !== ownerUid) {\n        return json({ error: 'Only the organization owner can finish this in Stripe' }, 403)\n      }\n      const back = consoleReturnUrl(headers)\n      const link = await stripe<{ url?: string }>(\n        'POST',\n        'account_links',\n        new URLSearchParams({\n          account: accountId,\n          type: 'account_onboarding',\n          'collection_options[fields]': 'currently_due',\n          refresh_url: back,\n          return_url: back,\n        }),\n      )\n      return json({ url: link.url ?? null })\n    }\n\n    if (method === 'POST') {\n      const requested = normalizeStorefrontPaymentMethodSettings(\n        (parsed as Record<string, unknown>)['methods'],\n      )\n      if (!Object.keys(requested).length) {\n        return json({ error: 'Nothing to save' }, 400)\n      }\n      settings = { ...settings, ...requested }\n      await storeRef.set(\n        { paymentMethods: settings, paymentMethodsUpdatedAtMs: Date.now(), paymentMethodsUpdatedBy: decoded.uid },\n        { merge: true },\n      )\n      const wanted = accountId ? capabilitiesToRequest(settings, platform, capabilities) : []\n      if (accountId && wanted.length) {\n        const params = new URLSearchParams()\n        for (const capability of wanted) {\n          params.set(`capabilities[${capability}][requested]`, 'true')\n        }\n        try {\n          const account = await stripe<{ capabilities?: Record<string, string> }>(\n            'POST',\n            `accounts/${encodeURIComponent(accountId)}`,\n            params,\n            `aglyn-pm-capabilities:${accountId}:${[...wanted].sort().join(',')}`,\n          )\n          capabilities = account.capabilities ?? capabilities\n        } catch (error) {\n          const message = error instanceof Error ? error.message : String(error)\n          warnings.push(\n            `Stripe did not accept the request to enable ${wanted.join(', ')} on your payout account: ${message}`,\n          )\n        }\n      }\n    }\n\n    const answer: PaymentMethodsAnswer = {\n      methods: buildPaymentMethodRows(settings, platform, capabilities),\n      domains: await readSiteDomainRecords(hostSnapshot.data() as SiteReturnHost | undefined),\n      accountConnected: Boolean(accountId),\n      canEdit: mayEdit,\n      canFinish: Boolean(accountId) && decoded.uid === ownerUid,\n      warnings,\n    }\n    return json(answer)\n  } catch (error) {\n    const unauthenticated = invalidIdTokenResponse(error)\n    if (unauthenticated) return unauthenticated\n    console.error(error)\n    return json({ error: 'Payment methods could not be loaded' }, 500)\n  }\n}\n"],"names":["checkEntitlement","pluginRequestFromWeb","emailUnverifiedResponse","firebaseAdmin","getOrgForHost","isImpersonationSession","lockdownRefusal","invalidIdTokenResponse","isStorefrontPaymentMethodOn","normalizeStorefrontPaymentMethodSettings","STOREFRONT_PAYMENT_METHODS","commerceSitePermissionRefusal","holdsCommerceSiteKey","readSiteDomainRecords","PLATFORM_CONFIGURATION_TTL_MS","platformCache","resetPlatformPaymentMethodCacheForTests","stripe","method","path","params","idempotencyKey","query","response","fetch","headers","Authorization","process","env","STRIPE_SECRET_KEY","body","toString","payload","json","catch","ok","Error","error","message","status","platformPaymentMethodAvailability","Date","now","at","value","list","URLSearchParams","limit","own","data","find","entry","is_default","application","id","configurationKey","available","display_preference","console","warn","capabilityStatus","capabilities","key","readAccountCapabilities","accountId","undefined","account","encodeURIComponent","capabilitiesToRequest","settings","platform","filter","capability","map","buildPaymentMethodRows","on","Response","consoleReturnUrl","origin","host","referer","URL","paymentMethodsHandler","request","rawHeaders","authorization","idToken","startsWith","slice","length","parsed","JSON","parse","hostId","String","owner","decoded","app","auth","verifyIdToken","email_verified","firestore","hostRef","collection","doc","hostSnapshot","get","exists","mayEdit","uid","mayRead","locked","staff","org","ownerUid","storeRef","warnings","link","back","type","refresh_url","return_url","url","requested","Object","keys","set","paymentMethods","paymentMethodsUpdatedAtMs","paymentMethodsUpdatedBy","merge","wanted","sort","join","push","answer","methods","domains","accountConnected","Boolean","canEdit","canFinish","unauthenticated"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,gBAAgB,EAAEC,oBAAoB,QAAQ,sBAAqB;AAE5E,SACEC,uBAAuB,EACvBC,aAAa,EACbC,aAAa,EACbC,sBAAsB,EACtBC,eAAe,QACV,2BAA0B;AACjC,SAASC,sBAAsB,QAAQ,mDAAkD;AACzF,SACEC,2BAA2B,EAC3BC,wCAAwC,EACxCC,0BAA0B,QAGrB,uCAAmC;AAC1C,SAASC,6BAA6B,QAAQ,iCAA6B;AAC3E,SAASC,oBAAoB,QAAQ,0BAAsB;AAC3D,SAEEC,qBAAqB,QAChB,8BAA0B;AA8CjC,gEAAgE,GAChE,MAAMC,gCAAgC,KAAK,KAAK;AAEhD,IAAIC,gBAAoF;AAExF,yDAAyD,GACzD,OAAO,SAASC;IACdD,gBAAgB;AAClB;AAEA,eAAeE,OACbC,MAAsB,EACtBC,IAAY,EACZC,MAAwB,EACxBC,cAAuB;IAEvB,MAAMC,QAAQJ,WAAW,SAASE,SAAS,CAAC,CAAC,EAAEA,QAAQ,GAAG;IAC1D,MAAMG,WAAW,MAAMC,MAAM,CAAC,0BAA0B,EAAEL,OAAOG,OAAO,EAAE;QACxEJ;QACAO,SAAS;YACPC,eAAe,CAAC,OAAO,EAAEC,QAAQC,GAAG,CAACC,iBAAiB,EAAE;WACpDX,WAAW,UAAU;YAAE,gBAAgB;QAAoC,GAC3EG,kBAAkB;YAAE,mBAAmBA;QAAe;OAExDH,WAAW,UAAUE,UAAU;QAAEU,MAAMV,OAAOW,QAAQ;IAAG;IAE/D,MAAMC,UAAW,MAAMT,SAASU,IAAI,GAAGC,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;IAGrD,IAAI,CAACX,SAASY,EAAE,EAAE;;YACAH;QAAhB,MAAM,IAAII,cAAMJ,4BAAAA,iBAAAA,QAASK,KAAK,qBAAdL,eAAgBM,OAAO,mBAAI,CAAC,OAAO,EAAEnB,KAAK,SAAS,EAAEI,SAASgB,MAAM,CAAC,CAAC,CAAC;IACzF;IACA,OAAOP;AACT;AASA;;;;;;CAMC,GACD,OAAO,eAAeQ;IAGpB,IAAIzB,iBAAiB0B,KAAKC,GAAG,KAAK3B,cAAc4B,EAAE,GAAG7B,+BAA+B;QAClF,OAAOC,cAAc6B,KAAK;IAC5B;IACA,MAAMA,QAA8C,CAAC;IACrD,IAAI;YAOAC;YAAAA,YACAA;QAPF,MAAMA,OAAO,MAAM5B,OACjB,OACA,iCACA,IAAI6B,gBAAgB;YAAEC,OAAO;QAAK;QAEpC,MAAMC,OACJH,iBAAAA,aAAAA,KAAKI,IAAI,qBAATJ,WAAWK,IAAI,CAAC,CAACC,QAAUA,MAAMC,UAAU,IAAI,CAACD,MAAME,WAAW,sBACjER,cAAAA,KAAKI,IAAI,qBAATJ,YAAWK,IAAI,CAAC,CAACC,QAAU,CAACA,MAAME,WAAW,aAD7CR,OAEA;QACF,KAAK,MAAM3B,UAAUR,2BAA4B;gBAShByC;YAR/B,IAAI,CAACH,KAAK;gBACRJ,KAAK,CAAC1B,OAAOoC,EAAE,CAAC,GAAG;gBACnB;YACF;YACA,MAAMH,QAAQH,GAAG,CAAC9B,OAAOqC,gBAAgB,CAAC;YAG1CX,KAAK,CAAC1B,OAAOoC,EAAE,CAAC,GACdH,CAAAA,yBAAAA,MAAOK,SAAS,MAAK,QAAQL,CAAAA,0BAAAA,4BAAAA,MAAOM,kBAAkB,qBAAzBN,0BAA2BP,KAAK,MAAK,OAC9D,OACA;QACR;QACA7B,gBAAgB;YAAE4B,IAAIF,KAAKC,GAAG;YAAIE;QAAM;IAC1C,EAAE,OAAOP,OAAO;QACdqB,QAAQC,IAAI,CAAC,sDAAsDtB;QACnE,KAAK,MAAMnB,UAAUR,2BAA4BkC,KAAK,CAAC1B,OAAOoC,EAAE,CAAC,GAAG;IACtE;IACA,OAAOV;AACT;AAEA,SAASgB,iBACPC,YAAgD,EAChDC,GAAuB;IAEvB,IAAI,CAACA,KAAK,OAAO;IACjB,MAAMvB,SAASsB,gCAAAA,YAAc,CAACC,IAAI;IAClC,IAAIvB,WAAW,YAAYA,WAAW,aAAaA,WAAW,YAAY,OAAOA;IACjF,OAAO;AACT;AAEA,eAAewB,wBACbC,SAAwB;IAExB,IAAI,CAACA,WAAW,OAAOC;IACvB,IAAI;YAKKC;QAJP,MAAMA,UAAU,MAAMjD,OACpB,OACA,CAAC,SAAS,EAAEkD,mBAAmBH,YAAY;QAE7C,QAAOE,wBAAAA,QAAQL,YAAY,YAApBK,wBAAwB,CAAC;IAClC,EAAE,OAAO7B,OAAO;QACdqB,QAAQC,IAAI,CAAC,2CAA2CtB;QACxD,OAAO4B;IACT;AACF;AAEA,6EAA6E,GAC7E,OAAO,SAASG,sBACdC,QAAyC,EACzCC,QAA8C,EAC9CT,YAAgD;IAEhD,OAAOnD,2BAA2B6D,MAAM,CACtC,CAACrD,SACCA,OAAOsD,UAAU,IACjBhE,4BAA4B6D,UAAUnD,OAAOoC,EAAE,KAC/CgB,QAAQ,CAACpD,OAAOoC,EAAE,CAAC,KAAK,iBACxBM,iBAAiBC,cAAc3C,OAAOsD,UAAU,MAAM,eACxDC,GAAG,CAAC,CAACvD,SAAWA,OAAOsD,UAAU;AACrC;AAEA,OAAO,SAASE,uBACdL,QAAyC,EACzCC,QAA8C,EAC9CT,YAAgD;IAEhD,OAAOnD,2BAA2B+D,GAAG,CAAC,CAACvD;YAG3BoD;eAHuC;YACjDhB,IAAIpC,OAAOoC,EAAE;YACbqB,IAAInE,4BAA4B6D,UAAUnD,OAAOoC,EAAE;YACnDgB,QAAQ,GAAEA,sBAAAA,QAAQ,CAACpD,OAAOoC,EAAE,CAAC,YAAnBgB,sBAAuB;YACjCE,YAAYX,eAAeD,iBAAiBC,cAAc3C,OAAOsD,UAAU,IAAI;QACjF;;AACF;AAEA,MAAMvC,OAAO,CAACH,MAAeS,SAAS,GAAG,GAAKqC,SAAS3C,IAAI,CAACH,MAAM;QAAES;IAAO;AAE3E;;;;CAIC,GACD,OAAO,SAASsC,iBAAiBpD,OAAwC;QAEvDA;IADhB,MAAMqD,SAASrD,QAAQqD,MAAM,IAAKrD,CAAAA,QAAQsD,IAAI,GAAG,CAAC,QAAQ,EAAEtD,QAAQsD,IAAI,EAAE,GAAG,EAAC;IAC9E,MAAMC,WAAUvD,mBAAAA,QAAQuD,OAAO,YAAfvD,mBAAmB;IACnC,IAAI;QACF,IAAIqD,UAAUE,WAAW,IAAIC,IAAID,SAASF,MAAM,KAAK,IAAIG,IAAIH,QAAQA,MAAM,EAAE;YAC3E,OAAOE;QACT;IACF,EAAE,eAAM;IACN,2CAA2C;IAC7C;IACA,OAAOF,UAAU;AACnB;AAEA,OAAO,eAAeI,sBAAsBC,OAAgB;QASpC1D,wBASnBP;IAjBH,MAAM,EAAEA,MAAM,EAAEO,SAAS2D,UAAU,EAAE9D,KAAK,EAAEQ,IAAI,EAAE,GAAG,MAAM7B,qBAAqBkF;IAChF,MAAM1D,UAAU2D;IAChB,IAAIlE,WAAW,SAASA,WAAW,QAAQ;QACzC,OAAOe,KAAK;YAAEI,OAAO;QAAqB,GAAG;IAC/C;IACA,IAAI,CAACV,QAAQC,GAAG,CAACC,iBAAiB,EAAE;QAClC,OAAOI,KAAK;YAAEI,OAAO;QAAmD,GAAG;IAC7E;IACA,MAAMgD,iBAAgB5D,yBAAAA,QAAQ4D,aAAa,YAArB5D,yBAAyB;IAC/C,MAAM6D,UAAUD,cAAcE,UAAU,CAAC,aACrCF,cAAcG,KAAK,CAAC,UAAUC,MAAM,IACpCxB;IACJ,IAAI,CAACqB,SAAS,OAAOrD,KAAK;QAAEI,OAAO;IAAkB,GAAG;IAExD,MAAMqD,SACJ,OAAO5D,SAAS,WAAY6D,KAAKC,KAAK,CAAC9D,QAAQ,QAAqCA,eAAAA,OAAQ,CAAC;IAC/F,MAAM+D,SAASC,QACZ5E,OAAAA,WAAW,QAAQI,yBAAAA,KAAO,CAAC,SAAS,GAAG,AAACoE,MAAkC,CAAC,SAAS,YAApFxE,OAAyF;IAE5F,IAAI,CAAC2E,QAAQ,OAAO5D,KAAK;QAAEI,OAAO;IAAiB,GAAG;IAEtD,IAAI;0BAqCI;YAFkB0D;QAlCxB,MAAMC,UAAU,MAAM7F,cAAc8F,GAAG,GAAGC,IAAI,GAAGC,aAAa,CAACb;QAC/D,IAAI,CAACU,QAAQI,cAAc,IAAI,CAAC/F,uBAAuB2F,UAAU;YAC/D,OAAO9F;QACT;QACA,MAAMmG,YAAYlG,cAAc8F,GAAG,GAAGI,SAAS;QAC/C,MAAMC,UAAUD,UAAUE,UAAU,CAAC,SAASC,GAAG,CAACX;QAClD,MAAMY,eAAe,MAAMH,QAAQI,GAAG;QACtC,IAAI,CAACD,aAAaE,MAAM,EAAE,OAAO1E,KAAK;YAAEI,OAAO;QAAY,GAAG;QAE9D,yEAAyE;QACzE,uEAAuE;QACvE,wEAAwE;QACxE,kEAAkE;QAClE,oCAAoC;QACpC,MAAMuE,UAAUhG,qBAAqB6F,cAAcT,QAAQa,GAAG,EAAE;QAChE,MAAMC,UAAUF,WAAWhG,qBAAqB6F,cAAcT,QAAQa,GAAG,EAAE;QAC3E,IAAI,CAACC,SAAS,OAAO7E,KAAK;YAAEI,OAAO;QAAY,GAAG;QAClD,IAAInB,WAAW,UAAU,CAAC0F,SAAS;YACjC,OAAO3E,KAAK;gBAAEI,OAAO1B,8BAA8B;YAA2B,GAAG;QACnF;QAEA,MAAMoF,QAAQ,MAAM3F,cAAcyF;QAClC,MAAMkB,SAAS,MAAMzG,gBAAgB;YACnC6E;YACA6B,OAAOhB,OAAO,CAAC,QAAQ,KAAK;YAC5Ba,KAAKb,QAAQa,GAAG;YAChBI,GAAG,EAAElB,yBAAAA,MAAOkB,GAAG;YACflC,MAAM0B,aAAaxD,IAAI;QACzB;QACA,IAAI8D,QAAQ,OAAOA;QACnB,IAAI,CAAC/G,0BAAkB+F,yBAAAA,MAAOkB,GAAG,oBAAI,CAAC,GAAa,aAAa;YAC9D,OAAOhF,KAAK;gBAAEI,OAAO;YAAuC,GAAG;QACjE;QAEA,MAAM6E,WAAWpB,gBAAOC,0BAAAA,aAAAA,MAAOkB,GAAG,qBAAVlB,WAAYmB,QAAQ,oBAAI;QAChD,MAAMlD,YAAYkD,YACZ,OAAA,AAAC,CAAA,MAAMb,UAAUE,UAAU,CAAC,YAAYC,GAAG,CAACU,UAAUR,GAAG,EAAC,EAAGA,GAAG,CAChE,8BADA,OAE0B,OAC5B;QAEJ,MAAMS,WAAWb,QAAQC,UAAU,CAAC,YAAYC,GAAG,CAAC;QACpD,IAAInC,WAAW5D,yCACb,AAAC,CAAA,MAAM0G,SAAST,GAAG,EAAC,EAAGA,GAAG,CAAC;QAE7B,MAAMpC,WAAW,MAAM9B;QACvB,IAAIqB,eAAe,MAAME,wBAAwBC;QACjD,MAAMoD,WAAqB,EAAE;QAE7B,uEAAuE;QACvE,2EAA2E;QAC3E,wEAAwE;QACxE,0EAA0E;QAC1E,6BAA6B;QAC7B,IAAIlG,WAAW,UAAU,AAACwE,MAAkC,CAAC,SAAS,KAAK,UAAU;gBAgBhE2B;YAfnB,IAAI,CAACrD,aAAagC,QAAQa,GAAG,KAAKK,UAAU;gBAC1C,OAAOjF,KAAK;oBAAEI,OAAO;gBAAwD,GAAG;YAClF;YACA,MAAMiF,OAAOzC,iBAAiBpD;YAC9B,MAAM4F,OAAO,MAAMpG,OACjB,QACA,iBACA,IAAI6B,gBAAgB;gBAClBoB,SAASF;gBACTuD,MAAM;gBACN,8BAA8B;gBAC9BC,aAAaF;gBACbG,YAAYH;YACd;YAEF,OAAOrF,KAAK;gBAAEyF,GAAG,GAAEL,YAAAA,KAAKK,GAAG,YAARL,YAAY;YAAK;QACtC;QAEA,IAAInG,WAAW,QAAQ;YACrB,MAAMyG,YAAYlH,yCAChB,AAACiF,MAAkC,CAAC,UAAU;YAEhD,IAAI,CAACkC,OAAOC,IAAI,CAACF,WAAWlC,MAAM,EAAE;gBAClC,OAAOxD,KAAK;oBAAEI,OAAO;gBAAkB,GAAG;YAC5C;YACAgC,WAAW,aAAKA,UAAasD;YAC7B,MAAMR,SAASW,GAAG,CAChB;gBAAEC,gBAAgB1D;gBAAU2D,2BAA2BvF,KAAKC,GAAG;gBAAIuF,yBAAyBjC,QAAQa,GAAG;YAAC,GACxG;gBAAEqB,OAAO;YAAK;YAEhB,MAAMC,SAASnE,YAAYI,sBAAsBC,UAAUC,UAAUT,gBAAgB,EAAE;YACvF,IAAIG,aAAamE,OAAO1C,MAAM,EAAE;gBAC9B,MAAMrE,SAAS,IAAI0B;gBACnB,KAAK,MAAM0B,cAAc2D,OAAQ;oBAC/B/G,OAAO0G,GAAG,CAAC,CAAC,aAAa,EAAEtD,WAAW,YAAY,CAAC,EAAE;gBACvD;gBACA,IAAI;wBAOaN;oBANf,MAAMA,UAAU,MAAMjD,OACpB,QACA,CAAC,SAAS,EAAEkD,mBAAmBH,YAAY,EAC3C5C,QACA,CAAC,sBAAsB,EAAE4C,UAAU,CAAC,EAAE;2BAAImE;qBAAO,CAACC,IAAI,GAAGC,IAAI,CAAC,MAAM;oBAEtExE,gBAAeK,wBAAAA,QAAQL,YAAY,YAApBK,wBAAwBL;gBACzC,EAAE,OAAOxB,OAAO;oBACd,MAAMC,UAAUD,iBAAiBD,QAAQC,MAAMC,OAAO,GAAGwD,OAAOzD;oBAChE+E,SAASkB,IAAI,CACX,CAAC,4CAA4C,EAAEH,OAAOE,IAAI,CAAC,MAAM,yBAAyB,EAAE/F,SAAS;gBAEzG;YACF;QACF;QAEA,MAAMiG,SAA+B;YACnCC,SAAS9D,uBAAuBL,UAAUC,UAAUT;YACpD4E,SAAS,MAAM5H,sBAAsB4F,aAAaxD,IAAI;YACtDyF,kBAAkBC,QAAQ3E;YAC1B4E,SAAShC;YACTiC,WAAWF,QAAQ3E,cAAcgC,QAAQa,GAAG,KAAKK;YACjDE;QACF;QACA,OAAOnF,KAAKsG;IACd,EAAE,OAAOlG,OAAO;QACd,MAAMyG,kBAAkBvI,uBAAuB8B;QAC/C,IAAIyG,iBAAiB,OAAOA;QAC5BpF,QAAQrB,KAAK,CAACA;QACd,OAAOJ,KAAK;YAAEI,OAAO;QAAsC,GAAG;IAChE;AACF"}