@aglyn/plugins-commerce 1.0.0-beta.285 → 1.0.0-beta.287

package/src/lib/server/pos-hardware-closure-notices.d.ts

@@ -0,0 +1,27 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { ClosureNotice, ClosureNoticeSource, ClosureSubject } from '@aglyn/aglyn/plugin-manager/plugin-closure-notices';
+import { type PosHardwareOrder } from '../model/pos-hardware';
+/** The notice's id. */
+export declare const POS_HARDWARE_CLOSURE_NOTICE_ID = "pos-hardware-unshipped-orders";
+/** The warning for these unshipped orders, or none when there are none. Pure. */
+export declare function posHardwareClosureNotice(subject: ClosureSubject['kind'], orders: ReadonlyArray<{
+    orderId: string;
+    order: Pick<PosHardwareOrder, 'status' | 'lines' | 'totalCents'>;
+}>): ClosureNotice[];
+/** The hardware shop's closure notices, as the declarations register them. */
+export declare const posHardwareClosureNoticeSource: ClosureNoticeSource;

package/src/lib/server/pos-hardware-closure-notices.js

@@ -0,0 +1,85 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { firebaseAdmin } from "@aglyn/tenant-data-admin";
+import { formatPosHardwareCents, POS_HARDWARE_ORDERS_COLLECTION, posHardwareRefundable } from "../model/pos-hardware.js";
+/*==========================================
+ * BEFORE A CLOSURE: WHICH HARDWARE ORDERS IT WILL CANCEL AND REFUND (AGL-4038).
+ *
+ * Deleting a workspace, or closing the account that placed an order, cancels
+ * every card reader order that has not shipped — paid, or already placed
+ * with Stripe — and refunds it in full (`pos-hardware-closure.ts`). The
+ * delete-workspace and close-account screens ask core's closure notices
+ * before the confirm, and this answers for the hardware shop: one warning
+ * listing each such order, its number, its items and what is refunded.
+ *
+ * The same orders the closure reads: a workspace's own (`paid` or `ordered`),
+ * or every one the person placed in any workspace (by `createdBy`, the
+ * collection-group override the account eraser uses). Nothing is held back:
+ * the closure goes ahead, and this only says what it will do.
+ *=========================================*/ /** The notice's id. */ export const POS_HARDWARE_CLOSURE_NOTICE_ID = 'pos-hardware-unshipped-orders';
+/** The number a person reads: `HW-` and six characters of the id. */ function orderNumber(orderId) {
+    return `HW-${orderId.replace(/^hw_/, '').slice(0, 6).toUpperCase()}`;
+}
+/** The warning for these unshipped orders, or none when there are none. Pure. */ export function posHardwareClosureNotice(subject, orders) {
+    const unshipped = orders.filter(({ order })=>posHardwareRefundable(order == null ? void 0 : order.status));
+    if (!unshipped.length) return [];
+    const count = unshipped.length;
+    const one = count === 1;
+    return [
+        {
+            id: POS_HARDWARE_CLOSURE_NOTICE_ID,
+            severity: 'warning',
+            title: one ? 'A card reader order will be canceled and refunded' : `${count} card reader orders will be canceled and refunded`,
+            body: subject === 'workspace' ? `${one ? 'This order has' : 'These orders have'} not shipped yet. When the workspace is deleted, ` + `${one ? 'it is' : 'each is'} canceled and refunded in full, shipping and tax included, to the card ` + `it was paid with, and the person who placed ${one ? 'it gets an email' : 'each gets an email'}. ` + `Nothing will ship. Keep the workspace if you still want ${one ? 'it' : 'them'}.` : `${one ? 'This order you placed has' : 'These orders you placed have'} not shipped yet. When your ` + `account is closed, ${one ? 'it is' : 'each is'} canceled and refunded in full, shipping and tax ` + `included, to the card it was paid with, and you get an email about ${one ? 'it' : 'each'}. Nothing ` + `will ship. Keep your account if you still want ${one ? 'it' : 'them'}.`,
+            items: unshipped.map(({ orderId, order })=>{
+                var _order_lines, _order_totalCents;
+                return {
+                    id: orderId,
+                    primary: `Order ${orderNumber(orderId)}`,
+                    secondary: ((_order_lines = order.lines) != null ? _order_lines : []).map((line)=>`${line.name} × ${line.quantity}`).join(', ') || undefined,
+                    amount: formatPosHardwareCents(Number((_order_totalCents = order.totalCents) != null ? _order_totalCents : 0))
+                };
+            })
+        }
+    ];
+}
+/** Reads the unshipped orders a closure of `subject` would cancel. */ async function unshippedOrders(subject) {
+    const firestore = firebaseAdmin.app().firestore();
+    if (subject.kind === 'workspace') {
+        const orders = firestore.collection('orgs').doc(subject.orgId).collection(POS_HARDWARE_ORDERS_COLLECTION);
+        // One equality query per status, as the closure reads them.
+        const found = await Promise.all([
+            'paid',
+            'ordered'
+        ].map((status)=>orders.where('status', '==', status).get()));
+        return found.flatMap((snapshot)=>snapshot.docs.map((doc)=>({
+                    orderId: doc.id,
+                    order: doc.data()
+                })));
+    }
+    const placed = await firestore.collectionGroup(POS_HARDWARE_ORDERS_COLLECTION).where('createdBy', '==', subject.uid).get();
+    return placed.docs.map((doc)=>({
+            orderId: doc.id,
+            order: doc.data()
+        }));
+}
+/** The hardware shop's closure notices, as the declarations register them. */ export const posHardwareClosureNoticeSource = {
+    async notices (subject) {
+        return posHardwareClosureNotice(subject.kind, await unshippedOrders(subject));
+    }
+};
+
+//# sourceMappingURL=pos-hardware-closure-notices.js.map

package/src/lib/server/pos-hardware-closure-notices.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-hardware-closure-notices.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type {\n  ClosureNotice,\n  ClosureNoticeSource,\n  ClosureSubject,\n} from '@aglyn/aglyn/plugin-manager/plugin-closure-notices'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport {\n  formatPosHardwareCents,\n  POS_HARDWARE_ORDERS_COLLECTION,\n  posHardwareRefundable,\n  type PosHardwareOrder,\n} from '../model/pos-hardware'\n\n/*==========================================\n * BEFORE A CLOSURE: WHICH HARDWARE ORDERS IT WILL CANCEL AND REFUND (AGL-4038).\n *\n * Deleting a workspace, or closing the account that placed an order, cancels\n * every card reader order that has not shipped — paid, or already placed\n * with Stripe — and refunds it in full (`pos-hardware-closure.ts`). The\n * delete-workspace and close-account screens ask core's closure notices\n * before the confirm, and this answers for the hardware shop: one warning\n * listing each such order, its number, its items and what is refunded.\n *\n * The same orders the closure reads: a workspace's own (`paid` or `ordered`),\n * or every one the person placed in any workspace (by `createdBy`, the\n * collection-group override the account eraser uses). Nothing is held back:\n * the closure goes ahead, and this only says what it will do.\n *=========================================*/\n\n/** The notice's id. */\nexport const POS_HARDWARE_CLOSURE_NOTICE_ID = 'pos-hardware-unshipped-orders'\n\n/** The number a person reads: `HW-` and six characters of the id. */\nfunction orderNumber(orderId: string): string {\n  return `HW-${orderId.replace(/^hw_/, '').slice(0, 6).toUpperCase()}`\n}\n\n/** The warning for these unshipped orders, or none when there are none. Pure. */\nexport function posHardwareClosureNotice(\n  subject: ClosureSubject['kind'],\n  orders: ReadonlyArray<{ orderId: string; order: Pick<PosHardwareOrder, 'status' | 'lines' | 'totalCents'> }>,\n): ClosureNotice[] {\n  const unshipped = orders.filter(({ order }) => posHardwareRefundable(order?.status))\n  if (!unshipped.length) return []\n  const count = unshipped.length\n  const one = count === 1\n  return [\n    {\n      id: POS_HARDWARE_CLOSURE_NOTICE_ID,\n      severity: 'warning',\n      title: one\n        ? 'A card reader order will be canceled and refunded'\n        : `${count} card reader orders will be canceled and refunded`,\n      body:\n        subject === 'workspace'\n          ? `${one ? 'This order has' : 'These orders have'} not shipped yet. When the workspace is deleted, ` +\n            `${one ? 'it is' : 'each is'} canceled and refunded in full, shipping and tax included, to the card ` +\n            `it was paid with, and the person who placed ${one ? 'it gets an email' : 'each gets an email'}. ` +\n            `Nothing will ship. Keep the workspace if you still want ${one ? 'it' : 'them'}.`\n          : `${one ? 'This order you placed has' : 'These orders you placed have'} not shipped yet. When your ` +\n            `account is closed, ${one ? 'it is' : 'each is'} canceled and refunded in full, shipping and tax ` +\n            `included, to the card it was paid with, and you get an email about ${one ? 'it' : 'each'}. Nothing ` +\n            `will ship. Keep your account if you still want ${one ? 'it' : 'them'}.`,\n      items: unshipped.map(({ orderId, order }) => ({\n        id: orderId,\n        primary: `Order ${orderNumber(orderId)}`,\n        secondary: (order.lines ?? []).map((line) => `${line.name} × ${line.quantity}`).join(', ') || undefined,\n        amount: formatPosHardwareCents(Number(order.totalCents ?? 0)),\n      })),\n    },\n  ]\n}\n\n/** Reads the unshipped orders a closure of `subject` would cancel. */\nasync function unshippedOrders(\n  subject: ClosureSubject,\n): Promise<Array<{ orderId: string; order: PosHardwareOrder }>> {\n  const firestore = firebaseAdmin.app().firestore()\n  if (subject.kind === 'workspace') {\n    const orders = firestore.collection('orgs').doc(subject.orgId).collection(POS_HARDWARE_ORDERS_COLLECTION)\n    // One equality query per status, as the closure reads them.\n    const found = await Promise.all(['paid', 'ordered'].map((status) => orders.where('status', '==', status).get()))\n    return found.flatMap((snapshot) =>\n      snapshot.docs.map((doc: { id: string; data: () => unknown }) => ({ orderId: doc.id, order: doc.data() as PosHardwareOrder })),\n    )\n  }\n  const placed = await firestore.collectionGroup(POS_HARDWARE_ORDERS_COLLECTION).where('createdBy', '==', subject.uid).get()\n  return placed.docs.map((doc: { id: string; data: () => unknown }) => ({ orderId: doc.id, order: doc.data() as PosHardwareOrder }))\n}\n\n/** The hardware shop's closure notices, as the declarations register them. */\nexport const posHardwareClosureNoticeSource: ClosureNoticeSource = {\n  async notices(subject) {\n    return posHardwareClosureNotice(subject.kind, await unshippedOrders(subject))\n  },\n}\n"],"names":["firebaseAdmin","formatPosHardwareCents","POS_HARDWARE_ORDERS_COLLECTION","posHardwareRefundable","POS_HARDWARE_CLOSURE_NOTICE_ID","orderNumber","orderId","replace","slice","toUpperCase","posHardwareClosureNotice","subject","orders","unshipped","filter","order","status","length","count","one","id","severity","title","body","items","map","primary","secondary","lines","line","name","quantity","join","undefined","amount","Number","totalCents","unshippedOrders","firestore","app","kind","collection","doc","orgId","found","Promise","all","where","get","flatMap","snapshot","docs","data","placed","collectionGroup","uid","posHardwareClosureNoticeSource","notices"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAOD,SAASA,aAAa,QAAQ,2BAA0B;AACxD,SACEC,sBAAsB,EACtBC,8BAA8B,EAC9BC,qBAAqB,QAEhB,2BAAuB;AAE9B;;;;;;;;;;;;;;2CAc2C,GAE3C,qBAAqB,GACrB,OAAO,MAAMC,iCAAiC,gCAA+B;AAE7E,mEAAmE,GACnE,SAASC,YAAYC,OAAe;IAClC,OAAO,CAAC,GAAG,EAAEA,QAAQC,OAAO,CAAC,QAAQ,IAAIC,KAAK,CAAC,GAAG,GAAGC,WAAW,IAAI;AACtE;AAEA,+EAA+E,GAC/E,OAAO,SAASC,yBACdC,OAA+B,EAC/BC,MAA4G;IAE5G,MAAMC,YAAYD,OAAOE,MAAM,CAAC,CAAC,EAAEC,KAAK,EAAE,GAAKZ,sBAAsBY,yBAAAA,MAAOC,MAAM;IAClF,IAAI,CAACH,UAAUI,MAAM,EAAE,OAAO,EAAE;IAChC,MAAMC,QAAQL,UAAUI,MAAM;IAC9B,MAAME,MAAMD,UAAU;IACtB,OAAO;QACL;YACEE,IAAIhB;YACJiB,UAAU;YACVC,OAAOH,MACH,sDACA,GAAGD,MAAM,iDAAiD,CAAC;YAC/DK,MACEZ,YAAY,cACR,GAAGQ,MAAM,mBAAmB,oBAAoB,iDAAiD,CAAC,GAClG,GAAGA,MAAM,UAAU,UAAU,uEAAuE,CAAC,GACrG,CAAC,4CAA4C,EAAEA,MAAM,qBAAqB,qBAAqB,EAAE,CAAC,GAClG,CAAC,wDAAwD,EAAEA,MAAM,OAAO,OAAO,CAAC,CAAC,GACjF,GAAGA,MAAM,8BAA8B,+BAA+B,4BAA4B,CAAC,GACnG,CAAC,mBAAmB,EAAEA,MAAM,UAAU,UAAU,iDAAiD,CAAC,GAClG,CAAC,mEAAmE,EAAEA,MAAM,OAAO,OAAO,UAAU,CAAC,GACrG,CAAC,+CAA+C,EAAEA,MAAM,OAAO,OAAO,CAAC,CAAC;YAC9EK,OAAOX,UAAUY,GAAG,CAAC,CAAC,EAAEnB,OAAO,EAAES,KAAK,EAAE;oBAG1BA,cAC0BA;uBAJM;oBAC5CK,IAAId;oBACJoB,SAAS,CAAC,MAAM,EAAErB,YAAYC,UAAU;oBACxCqB,WAAW,EAACZ,eAAAA,MAAMa,KAAK,YAAXb,eAAe,EAAE,EAAEU,GAAG,CAAC,CAACI,OAAS,GAAGA,KAAKC,IAAI,CAAC,GAAG,EAAED,KAAKE,QAAQ,EAAE,EAAEC,IAAI,CAAC,SAASC;oBAC9FC,QAAQjC,uBAAuBkC,QAAOpB,oBAAAA,MAAMqB,UAAU,YAAhBrB,oBAAoB;gBAC5D;;QACF;KACD;AACH;AAEA,oEAAoE,GACpE,eAAesB,gBACb1B,OAAuB;IAEvB,MAAM2B,YAAYtC,cAAcuC,GAAG,GAAGD,SAAS;IAC/C,IAAI3B,QAAQ6B,IAAI,KAAK,aAAa;QAChC,MAAM5B,SAAS0B,UAAUG,UAAU,CAAC,QAAQC,GAAG,CAAC/B,QAAQgC,KAAK,EAAEF,UAAU,CAACvC;QAC1E,4DAA4D;QAC5D,MAAM0C,QAAQ,MAAMC,QAAQC,GAAG,CAAC;YAAC;YAAQ;SAAU,CAACrB,GAAG,CAAC,CAACT,SAAWJ,OAAOmC,KAAK,CAAC,UAAU,MAAM/B,QAAQgC,GAAG;QAC5G,OAAOJ,MAAMK,OAAO,CAAC,CAACC,WACpBA,SAASC,IAAI,CAAC1B,GAAG,CAAC,CAACiB,MAA8C,CAAA;oBAAEpC,SAASoC,IAAItB,EAAE;oBAAEL,OAAO2B,IAAIU,IAAI;gBAAuB,CAAA;IAE9H;IACA,MAAMC,SAAS,MAAMf,UAAUgB,eAAe,CAACpD,gCAAgC6C,KAAK,CAAC,aAAa,MAAMpC,QAAQ4C,GAAG,EAAEP,GAAG;IACxH,OAAOK,OAAOF,IAAI,CAAC1B,GAAG,CAAC,CAACiB,MAA8C,CAAA;YAAEpC,SAASoC,IAAItB,EAAE;YAAEL,OAAO2B,IAAIU,IAAI;QAAuB,CAAA;AACjI;AAEA,4EAA4E,GAC5E,OAAO,MAAMI,iCAAsD;IACjE,MAAMC,SAAQ9C,OAAO;QACnB,OAAOD,yBAAyBC,QAAQ6B,IAAI,EAAE,MAAMH,gBAAgB1B;IACtE;AACF,EAAC"}

package/src/lib/server/pos-hardware-closure.d.ts

@@ -0,0 +1,60 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import type { PluginOrgEraser } from '@aglyn/aglyn/plugin-manager/plugin-org-erasure';
+import { type PosHardwareCancelReason, type PosHardwareOrder } from '../model/pos-hardware';
+type Firestore = FirebaseFirestore.Firestore;
+export type PosHardwareClosureOutcome = 'canceled' | 'already' | 'skipped' | 'failed';
+/**
+ * Cancels and refunds one unshipped order because of a closure, and tells
+ * the buyer and staff. Never throws. `known` is the order as the closure read
+ * it, for the alert should the cancel itself throw.
+ */
+export declare function closeUnshippedPosHardwareOrder(orgId: string, orderId: string, reason: Exclude<PosHardwareCancelReason, 'staff'>, known?: PosHardwareOrder): Promise<PosHardwareClosureOutcome>;
+/** What a closure did to one buyer's or workspace's hardware orders. */
+export interface PosHardwareClosureCounts {
+    hardwareOrdersCanceled: number;
+    /** Of those, the ones staff had already placed with Stripe. */
+    hardwareOrdersPlacedWithStripe: number;
+    /** Unshipped orders whose refund Stripe refused; staff were alerted. */
+    hardwareRefundsFailed: number;
+}
+/**
+ * Cancels every order given that is still unshipped. `orders` is read before
+ * the call; each order is re-read under the lock by the cancel itself, so one
+ * that shipped in between is left alone.
+ */
+export declare function closeUnshippedPosHardwareOrders(orders: ReadonlyArray<{
+    orderId: string;
+    order: PosHardwareOrder;
+}>, reason: Exclude<PosHardwareCancelReason, 'staff'>): Promise<PosHardwareClosureCounts>;
+export interface PosHardwareOrgEraserDeps {
+    firestore(): Firestore;
+}
+/**
+ * COMMERCE'S SHARE OF A WORKSPACE ERASURE: the workspace's unshipped hardware
+ * orders, canceled and refunded before the erasure deletes them with the
+ * workspace. It runs first among the erasure's steps (plugin erasers run
+ * while the workspace still stands), so the buyer's email can still name the
+ * site and the workspace.
+ *
+ * A plan (`dryRun`) counts what it would cancel and touches neither Stripe
+ * nor Firestore.
+ */
+export declare function createPosHardwareOrgEraser(deps: PosHardwareOrgEraserDeps): PluginOrgEraser;
+/** The eraser over the platform's own Firestore, as the declarations register it. */
+export declare const posHardwareOrgEraser: PluginOrgEraser;
+export {};

package/src/lib/server/pos-hardware-closure.js

@@ -0,0 +1,153 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import { _ as _extends } from "@swc/helpers/_/_extends";
+import { firebaseAdmin } from "@aglyn/tenant-data-admin";
+import { addAdminAudit } from "@aglyn/tenant-data-admin/server/admin-audit-write";
+import { POS_HARDWARE_ORDERS_COLLECTION } from "../model/pos-hardware.js";
+import { cancelAndRefundPosHardwareOrder } from "./pos-hardware-cancel.js";
+import { raisePosHardwareCanceledAfterOrderingAlert, raisePosHardwareRefundFailedAlert, sendPosHardwareEmailOnce } from "./pos-hardware-notify.js";
+/** The unshipped statuses a closure cancels. */ const UNSHIPPED = [
+    'paid',
+    'ordered'
+];
+/** The audit row's actor: the closure, never a person. */ const CLOSURE_ACTOR = {
+    'workspace-closed': 'system:workspace-closed',
+    'account-closed': 'system:account-closed'
+};
+/**
+ * Cancels and refunds one unshipped order because of a closure, and tells
+ * the buyer and staff. Never throws. `known` is the order as the closure read
+ * it, for the alert should the cancel itself throw.
+ */ export async function closeUnshippedPosHardwareOrder(orgId, orderId, reason, known) {
+    try {
+        var _result_order_refundId, _result_order_refundedCents;
+        const result = await cancelAndRefundPosHardwareOrder({
+            orgId,
+            orderId,
+            finalStatus: 'canceled',
+            reason
+        });
+        switch(result.outcome){
+            case 'missing':
+            case 'not-refundable':
+                return 'skipped';
+            case 'already':
+                // Canceled between the closure's read and the lock: whoever canceled
+                // it told the buyer and staff.
+                return 'already';
+            case 'no-payment':
+                await raisePosHardwareRefundFailedAlert(orderId, result.order, reason, 'the order has no payment to refund');
+                return 'failed';
+            case 'refused':
+                await raisePosHardwareRefundFailedAlert(orderId, result.order, reason, result.message);
+                return 'failed';
+        }
+        const firestore = firebaseAdmin.app().firestore();
+        await addAdminAudit(firestore, {
+            action: 'pos-hardware-order-cancel',
+            actorUid: CLOSURE_ACTOR[reason],
+            actorEmail: null,
+            scope: 'posHardwareOrder',
+            target: `orgs/${orgId}/${POS_HARDWARE_ORDERS_COLLECTION}/${orderId}`,
+            orgId,
+            before: {
+                status: result.before.status
+            },
+            after: {
+                status: result.order.status,
+                refundId: (_result_order_refundId = result.order.refundId) != null ? _result_order_refundId : null,
+                refundedCents: (_result_order_refundedCents = result.order.refundedCents) != null ? _result_order_refundedCents : null,
+                reason
+            },
+            at: firebaseAdmin.firestore.FieldValue.serverTimestamp()
+        }).catch((error)=>console.error('[pos-hardware] closure audit failed', orderId, error));
+        // Once between this and the staff page: a staff cancel that already
+        // told the buyer is not told again (AGL-4038).
+        await sendPosHardwareEmailOnce('canceled', orderId, result.order);
+        if (result.before.status === 'ordered') {
+            await raisePosHardwareCanceledAfterOrderingAlert(orderId, result.order, reason);
+        }
+        return 'canceled';
+    } catch (error) {
+        console.error('[pos-hardware] closure cancel failed', orderId, error);
+        await raisePosHardwareRefundFailedAlert(orderId, known != null ? known : {
+            orgId,
+            hostId: '',
+            status: 'paid',
+            totalCents: 0,
+            stripePaymentIntentId: null
+        }, reason, error instanceof Error ? error.message : String(error));
+        return 'failed';
+    }
+}
+/**
+ * Cancels every order given that is still unshipped. `orders` is read before
+ * the call; each order is re-read under the lock by the cancel itself, so one
+ * that shipped in between is left alone.
+ */ export async function closeUnshippedPosHardwareOrders(orders, reason) {
+    const counts = {
+        hardwareOrdersCanceled: 0,
+        hardwareOrdersPlacedWithStripe: 0,
+        hardwareRefundsFailed: 0
+    };
+    for (const { orderId, order } of orders){
+        if (!UNSHIPPED.includes(order == null ? void 0 : order.status)) continue;
+        const outcome = await closeUnshippedPosHardwareOrder(order.orgId, orderId, reason, order);
+        if (outcome === 'canceled') {
+            counts.hardwareOrdersCanceled += 1;
+            if (order.status === 'ordered') counts.hardwareOrdersPlacedWithStripe += 1;
+        }
+        if (outcome === 'failed') counts.hardwareRefundsFailed += 1;
+    }
+    return counts;
+}
+/**
+ * COMMERCE'S SHARE OF A WORKSPACE ERASURE: the workspace's unshipped hardware
+ * orders, canceled and refunded before the erasure deletes them with the
+ * workspace. It runs first among the erasure's steps (plugin erasers run
+ * while the workspace still stands), so the buyer's email can still name the
+ * site and the workspace.
+ *
+ * A plan (`dryRun`) counts what it would cancel and touches neither Stripe
+ * nor Firestore.
+ */ export function createPosHardwareOrgEraser(deps) {
+    return async ({ orgId, dryRun })=>{
+        const orders = deps.firestore().collection('orgs').doc(orgId).collection(POS_HARDWARE_ORDERS_COLLECTION);
+        // One equality query per status, each served by the automatic
+        // single-field index: a workspace's hardware orders are few.
+        const found = await Promise.all(UNSHIPPED.map((status)=>orders.where('status', '==', status).get()));
+        const unshipped = found.flatMap((snapshot)=>snapshot.docs.map((doc)=>({
+                    orderId: doc.id,
+                    // The path names the workspace; the field is what the order says.
+                    order: _extends({}, doc.data(), {
+                        orgId
+                    })
+                })));
+        if (dryRun) {
+            return {
+                hardwareOrdersCanceled: unshipped.length,
+                hardwareOrdersPlacedWithStripe: unshipped.filter(({ order })=>order.status === 'ordered').length,
+                hardwareRefundsFailed: 0
+            };
+        }
+        return _extends({}, await closeUnshippedPosHardwareOrders(unshipped, 'workspace-closed'));
+    };
+}
+/** The eraser over the platform's own Firestore, as the declarations register it. */ export const posHardwareOrgEraser = (request)=>createPosHardwareOrgEraser({
+        firestore: ()=>firebaseAdmin.app().firestore()
+    })(request);
+
+//# sourceMappingURL=pos-hardware-closure.js.map

package/src/lib/server/pos-hardware-closure.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-hardware-closure.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport type {\n  PluginOrgEraser,\n  PluginOrgErasureReport,\n} from '@aglyn/aglyn/plugin-manager/plugin-org-erasure'\nimport { firebaseAdmin } from '@aglyn/tenant-data-admin'\nimport { addAdminAudit } from '@aglyn/tenant-data-admin/server/admin-audit-write'\nimport {\n  POS_HARDWARE_ORDERS_COLLECTION,\n  type PosHardwareCancelReason,\n  type PosHardwareOrder,\n} from '../model/pos-hardware'\nimport { cancelAndRefundPosHardwareOrder } from './pos-hardware-cancel'\nimport {\n  raisePosHardwareCanceledAfterOrderingAlert,\n  raisePosHardwareRefundFailedAlert,\n  sendPosHardwareEmailOnce,\n} from './pos-hardware-notify'\n\n/*==========================================\n * A CLOSURE CANCELS EVERY UNSHIPPED HARDWARE ORDER (AGL-4038).\n *\n * When the workspace that bought hardware is deleted, or the account that\n * placed an order is closed, every order of theirs that has not shipped —\n * `paid` or `ordered` — is canceled and refunded in full on the platform's\n * Stripe account, through the staff page's own path and its idempotency\n * (`pos-hardware-cancel.ts`). Then:\n *\n *   - the buyer gets the \"canceled and refunded\" email, once: the same claim\n *     the staff page sends it under (`sendPosHardwareEmailOnce`);\n *   - staff get an alert when the order was already placed with Stripe\n *     (`ordered`), because Stripe will still ship it unless someone cancels\n *     it there, and another when Stripe refuses the refund;\n *   - an `adminAudit` row records the cancel, with the closure as its actor.\n *\n * THE CLOSURE NEVER WAITS ON THIS. A refusal, or a throw, is counted and\n * alerted and the next order is tried; nothing here fails the erasure, so\n * the workspace or the account closes right away whatever Stripe says.\n * Shipped, delivered and registered orders are untouched, and the retained\n * sale record (`posHardwareSales`) records the refund and outlives both.\n *\n * Idempotent: a canceled order is no longer `paid` or `ordered`, so a second\n * closure run finds nothing to refund, sends no second email, raises no\n * second alert and makes no second Stripe call. A run that died after Stripe\n * refunded and before the order said so reads that refund back instead of\n * making another (`pos-hardware-cancel.ts`).\n *=========================================*/\n\ntype Firestore = FirebaseFirestore.Firestore\n\nexport type PosHardwareClosureOutcome = 'canceled' | 'already' | 'skipped' | 'failed'\n\n/** The unshipped statuses a closure cancels. */\nconst UNSHIPPED = ['paid', 'ordered'] as const\n\n/** The audit row's actor: the closure, never a person. */\nconst CLOSURE_ACTOR: Record<Exclude<PosHardwareCancelReason, 'staff'>, string> = {\n  'workspace-closed': 'system:workspace-closed',\n  'account-closed': 'system:account-closed',\n}\n\n/**\n * Cancels and refunds one unshipped order because of a closure, and tells\n * the buyer and staff. Never throws. `known` is the order as the closure read\n * it, for the alert should the cancel itself throw.\n */\nexport async function closeUnshippedPosHardwareOrder(\n  orgId: string,\n  orderId: string,\n  reason: Exclude<PosHardwareCancelReason, 'staff'>,\n  known?: PosHardwareOrder,\n): Promise<PosHardwareClosureOutcome> {\n  try {\n    const result = await cancelAndRefundPosHardwareOrder({ orgId, orderId, finalStatus: 'canceled', reason })\n    switch (result.outcome) {\n      case 'missing':\n      case 'not-refundable':\n        return 'skipped'\n      case 'already':\n        // Canceled between the closure's read and the lock: whoever canceled\n        // it told the buyer and staff.\n        return 'already'\n      case 'no-payment':\n        await raisePosHardwareRefundFailedAlert(orderId, result.order, reason, 'the order has no payment to refund')\n        return 'failed'\n      case 'refused':\n        await raisePosHardwareRefundFailedAlert(orderId, result.order, reason, result.message)\n        return 'failed'\n    }\n    const firestore = firebaseAdmin.app().firestore()\n    await addAdminAudit(firestore, {\n      action: 'pos-hardware-order-cancel',\n      actorUid: CLOSURE_ACTOR[reason],\n      actorEmail: null,\n      scope: 'posHardwareOrder',\n      target: `orgs/${orgId}/${POS_HARDWARE_ORDERS_COLLECTION}/${orderId}`,\n      orgId,\n      before: { status: result.before.status },\n      after: {\n        status: result.order.status,\n        refundId: result.order.refundId ?? null,\n        refundedCents: result.order.refundedCents ?? null,\n        reason,\n      },\n      at: firebaseAdmin.firestore.FieldValue.serverTimestamp(),\n    }).catch((error: unknown) => console.error('[pos-hardware] closure audit failed', orderId, error))\n    // Once between this and the staff page: a staff cancel that already\n    // told the buyer is not told again (AGL-4038).\n    await sendPosHardwareEmailOnce('canceled', orderId, result.order)\n    if (result.before.status === 'ordered') {\n      await raisePosHardwareCanceledAfterOrderingAlert(orderId, result.order, reason)\n    }\n    return 'canceled'\n  } catch (error) {\n    console.error('[pos-hardware] closure cancel failed', orderId, error)\n    await raisePosHardwareRefundFailedAlert(\n      orderId,\n      known ?? ({ orgId, hostId: '', status: 'paid', totalCents: 0, stripePaymentIntentId: null } as unknown as PosHardwareOrder),\n      reason,\n      error instanceof Error ? error.message : String(error),\n    )\n    return 'failed'\n  }\n}\n\n/** What a closure did to one buyer's or workspace's hardware orders. */\nexport interface PosHardwareClosureCounts {\n  hardwareOrdersCanceled: number\n  /** Of those, the ones staff had already placed with Stripe. */\n  hardwareOrdersPlacedWithStripe: number\n  /** Unshipped orders whose refund Stripe refused; staff were alerted. */\n  hardwareRefundsFailed: number\n}\n\n/**\n * Cancels every order given that is still unshipped. `orders` is read before\n * the call; each order is re-read under the lock by the cancel itself, so one\n * that shipped in between is left alone.\n */\nexport async function closeUnshippedPosHardwareOrders(\n  orders: ReadonlyArray<{ orderId: string; order: PosHardwareOrder }>,\n  reason: Exclude<PosHardwareCancelReason, 'staff'>,\n): Promise<PosHardwareClosureCounts> {\n  const counts: PosHardwareClosureCounts = {\n    hardwareOrdersCanceled: 0,\n    hardwareOrdersPlacedWithStripe: 0,\n    hardwareRefundsFailed: 0,\n  }\n  for (const { orderId, order } of orders) {\n    if (!(UNSHIPPED as readonly string[]).includes(order?.status)) continue\n    const outcome = await closeUnshippedPosHardwareOrder(order.orgId, orderId, reason, order)\n    if (outcome === 'canceled') {\n      counts.hardwareOrdersCanceled += 1\n      if (order.status === 'ordered') counts.hardwareOrdersPlacedWithStripe += 1\n    }\n    if (outcome === 'failed') counts.hardwareRefundsFailed += 1\n  }\n  return counts\n}\n\nexport interface PosHardwareOrgEraserDeps {\n  firestore(): Firestore\n}\n\n/**\n * COMMERCE'S SHARE OF A WORKSPACE ERASURE: the workspace's unshipped hardware\n * orders, canceled and refunded before the erasure deletes them with the\n * workspace. It runs first among the erasure's steps (plugin erasers run\n * while the workspace still stands), so the buyer's email can still name the\n * site and the workspace.\n *\n * A plan (`dryRun`) counts what it would cancel and touches neither Stripe\n * nor Firestore.\n */\nexport function createPosHardwareOrgEraser(deps: PosHardwareOrgEraserDeps): PluginOrgEraser {\n  return async ({ orgId, dryRun }): Promise<PluginOrgErasureReport> => {\n    const orders = deps.firestore().collection('orgs').doc(orgId).collection(POS_HARDWARE_ORDERS_COLLECTION)\n    // One equality query per status, each served by the automatic\n    // single-field index: a workspace's hardware orders are few.\n    const found = await Promise.all(UNSHIPPED.map((status) => orders.where('status', '==', status).get()))\n    const unshipped = found.flatMap((snapshot) =>\n      snapshot.docs.map((doc) => ({\n        orderId: doc.id,\n        // The path names the workspace; the field is what the order says.\n        order: { ...(doc.data() as PosHardwareOrder), orgId },\n      })),\n    )\n    if (dryRun) {\n      return {\n        hardwareOrdersCanceled: unshipped.length,\n        hardwareOrdersPlacedWithStripe: unshipped.filter(({ order }) => order.status === 'ordered').length,\n        hardwareRefundsFailed: 0,\n      }\n    }\n    return { ...(await closeUnshippedPosHardwareOrders(unshipped, 'workspace-closed')) }\n  }\n}\n\n/** The eraser over the platform's own Firestore, as the declarations register it. */\nexport const posHardwareOrgEraser: PluginOrgEraser = (request) =>\n  createPosHardwareOrgEraser({ firestore: () => firebaseAdmin.app().firestore() })(request)\n"],"names":["firebaseAdmin","addAdminAudit","POS_HARDWARE_ORDERS_COLLECTION","cancelAndRefundPosHardwareOrder","raisePosHardwareCanceledAfterOrderingAlert","raisePosHardwareRefundFailedAlert","sendPosHardwareEmailOnce","UNSHIPPED","CLOSURE_ACTOR","closeUnshippedPosHardwareOrder","orgId","orderId","reason","known","result","finalStatus","outcome","order","message","firestore","app","action","actorUid","actorEmail","scope","target","before","status","after","refundId","refundedCents","at","FieldValue","serverTimestamp","catch","error","console","hostId","totalCents","stripePaymentIntentId","Error","String","closeUnshippedPosHardwareOrders","orders","counts","hardwareOrdersCanceled","hardwareOrdersPlacedWithStripe","hardwareRefundsFailed","includes","createPosHardwareOrgEraser","deps","dryRun","collection","doc","found","Promise","all","map","where","get","unshipped","flatMap","snapshot","docs","id","data","length","filter","posHardwareOrgEraser","request"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC;AAMD,SAASA,aAAa,QAAQ,2BAA0B;AACxD,SAASC,aAAa,QAAQ,oDAAmD;AACjF,SACEC,8BAA8B,QAGzB,2BAAuB;AAC9B,SAASC,+BAA+B,QAAQ,2BAAuB;AACvE,SACEC,0CAA0C,EAC1CC,iCAAiC,EACjCC,wBAAwB,QACnB,2BAAuB;AAmC9B,8CAA8C,GAC9C,MAAMC,YAAY;IAAC;IAAQ;CAAU;AAErC,wDAAwD,GACxD,MAAMC,gBAA2E;IAC/E,oBAAoB;IACpB,kBAAkB;AACpB;AAEA;;;;CAIC,GACD,OAAO,eAAeC,+BACpBC,KAAa,EACbC,OAAe,EACfC,MAAiD,EACjDC,KAAwB;IAExB,IAAI;YA4BYC,wBACKA;QA5BnB,MAAMA,SAAS,MAAMX,gCAAgC;YAAEO;YAAOC;YAASI,aAAa;YAAYH;QAAO;QACvG,OAAQE,OAAOE,OAAO;YACpB,KAAK;YACL,KAAK;gBACH,OAAO;YACT,KAAK;gBACH,qEAAqE;gBACrE,+BAA+B;gBAC/B,OAAO;YACT,KAAK;gBACH,MAAMX,kCAAkCM,SAASG,OAAOG,KAAK,EAAEL,QAAQ;gBACvE,OAAO;YACT,KAAK;gBACH,MAAMP,kCAAkCM,SAASG,OAAOG,KAAK,EAAEL,QAAQE,OAAOI,OAAO;gBACrF,OAAO;QACX;QACA,MAAMC,YAAYnB,cAAcoB,GAAG,GAAGD,SAAS;QAC/C,MAAMlB,cAAckB,WAAW;YAC7BE,QAAQ;YACRC,UAAUd,aAAa,CAACI,OAAO;YAC/BW,YAAY;YACZC,OAAO;YACPC,QAAQ,CAAC,KAAK,EAAEf,MAAM,CAAC,EAAER,+BAA+B,CAAC,EAAES,SAAS;YACpED;YACAgB,QAAQ;gBAAEC,QAAQb,OAAOY,MAAM,CAACC,MAAM;YAAC;YACvCC,OAAO;gBACLD,QAAQb,OAAOG,KAAK,CAACU,MAAM;gBAC3BE,QAAQ,GAAEf,yBAAAA,OAAOG,KAAK,CAACY,QAAQ,YAArBf,yBAAyB;gBACnCgB,aAAa,GAAEhB,8BAAAA,OAAOG,KAAK,CAACa,aAAa,YAA1BhB,8BAA8B;gBAC7CF;YACF;YACAmB,IAAI/B,cAAcmB,SAAS,CAACa,UAAU,CAACC,eAAe;QACxD,GAAGC,KAAK,CAAC,CAACC,QAAmBC,QAAQD,KAAK,CAAC,uCAAuCxB,SAASwB;QAC3F,oEAAoE;QACpE,+CAA+C;QAC/C,MAAM7B,yBAAyB,YAAYK,SAASG,OAAOG,KAAK;QAChE,IAAIH,OAAOY,MAAM,CAACC,MAAM,KAAK,WAAW;YACtC,MAAMvB,2CAA2CO,SAASG,OAAOG,KAAK,EAAEL;QAC1E;QACA,OAAO;IACT,EAAE,OAAOuB,OAAO;QACdC,QAAQD,KAAK,CAAC,wCAAwCxB,SAASwB;QAC/D,MAAM9B,kCACJM,SACAE,gBAAAA,QAAU;YAAEH;YAAO2B,QAAQ;YAAIV,QAAQ;YAAQW,YAAY;YAAGC,uBAAuB;QAAK,GAC1F3B,QACAuB,iBAAiBK,QAAQL,MAAMjB,OAAO,GAAGuB,OAAON;QAElD,OAAO;IACT;AACF;AAWA;;;;CAIC,GACD,OAAO,eAAeO,gCACpBC,MAAmE,EACnE/B,MAAiD;IAEjD,MAAMgC,SAAmC;QACvCC,wBAAwB;QACxBC,gCAAgC;QAChCC,uBAAuB;IACzB;IACA,KAAK,MAAM,EAAEpC,OAAO,EAAEM,KAAK,EAAE,IAAI0B,OAAQ;QACvC,IAAI,CAAC,AAACpC,UAAgCyC,QAAQ,CAAC/B,yBAAAA,MAAOU,MAAM,GAAG;QAC/D,MAAMX,UAAU,MAAMP,+BAA+BQ,MAAMP,KAAK,EAAEC,SAASC,QAAQK;QACnF,IAAID,YAAY,YAAY;YAC1B4B,OAAOC,sBAAsB,IAAI;YACjC,IAAI5B,MAAMU,MAAM,KAAK,WAAWiB,OAAOE,8BAA8B,IAAI;QAC3E;QACA,IAAI9B,YAAY,UAAU4B,OAAOG,qBAAqB,IAAI;IAC5D;IACA,OAAOH;AACT;AAMA;;;;;;;;;CASC,GACD,OAAO,SAASK,2BAA2BC,IAA8B;IACvE,OAAO,OAAO,EAAExC,KAAK,EAAEyC,MAAM,EAAE;QAC7B,MAAMR,SAASO,KAAK/B,SAAS,GAAGiC,UAAU,CAAC,QAAQC,GAAG,CAAC3C,OAAO0C,UAAU,CAAClD;QACzE,8DAA8D;QAC9D,6DAA6D;QAC7D,MAAMoD,QAAQ,MAAMC,QAAQC,GAAG,CAACjD,UAAUkD,GAAG,CAAC,CAAC9B,SAAWgB,OAAOe,KAAK,CAAC,UAAU,MAAM/B,QAAQgC,GAAG;QAClG,MAAMC,YAAYN,MAAMO,OAAO,CAAC,CAACC,WAC/BA,SAASC,IAAI,CAACN,GAAG,CAAC,CAACJ,MAAS,CAAA;oBAC1B1C,SAAS0C,IAAIW,EAAE;oBACf,kEAAkE;oBAClE/C,OAAO,aAAMoC,IAAIY,IAAI;wBAAyBvD;;gBAChD,CAAA;QAEF,IAAIyC,QAAQ;YACV,OAAO;gBACLN,wBAAwBe,UAAUM,MAAM;gBACxCpB,gCAAgCc,UAAUO,MAAM,CAAC,CAAC,EAAElD,KAAK,EAAE,GAAKA,MAAMU,MAAM,KAAK,WAAWuC,MAAM;gBAClGnB,uBAAuB;YACzB;QACF;QACA,OAAO,aAAM,MAAML,gCAAgCkB,WAAW;IAChE;AACF;AAEA,mFAAmF,GACnF,OAAO,MAAMQ,uBAAwC,CAACC,UACpDpB,2BAA2B;QAAE9B,WAAW,IAAMnB,cAAcoB,GAAG,GAAGD,SAAS;IAAG,GAAGkD,SAAQ"}

package/src/lib/server/pos-hardware-in-person.d.ts

@@ -0,0 +1,61 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type PosHardwareInPersonConfig, type PosHardwareOrder } from '../model/pos-hardware';
+export type InPersonRecordOutcome = {
+    outcome: 'off' | 'not-seller' | 'missing' | 'not-paid' | 'no-hardware';
+} | {
+    outcome: 'recorded' | 'already';
+    orderId: string;
+    orgId: string;
+    pending: boolean;
+};
+/** How many marked sales one sweep records at most. */
+export declare const IN_PERSON_SWEEP_LIMIT = 25;
+/**
+ * Records the hardware order of one register sale on the seller store, once.
+ * Never throws for a sale that is not one: it says why it did nothing.
+ */
+export declare function recordInPersonPosHardwareSale(hostId: string, registerOrderId: string, options?: {
+    offline?: boolean;
+    config?: PosHardwareInPersonConfig | null;
+    now?: number;
+}): Promise<InPersonRecordOutcome>;
+/**
+ * Records every paid sale on the seller store that is still marked, at most
+ * {@link IN_PERSON_SWEEP_LIMIT} a time, and drops the mark from a sale that
+ * can no longer be paid. Never throws: a sale it cannot record stays marked
+ * for the next sweep.
+ */
+export declare function sweepInPersonPosHardwareSales(config?: PosHardwareInPersonConfig | null): Promise<{
+    recorded: number;
+    failed: number;
+}>;
+/** The "To attach" list: the selling workspace's pending in-person orders, newest first. */
+export declare function pendingInPersonPosHardwareOrders(config: PosHardwareInPersonConfig, limit?: number): Promise<Array<{
+    id: string;
+    order: PosHardwareOrder;
+}>>;
+/**
+ * What the completion listener runs for a sale on the seller store. Never
+ * throws into a sale: a failure is logged and the sale stays marked for the
+ * sweep.
+ */
+export declare function recordCompletedSaleHardware(event: {
+    hostId: string;
+    orderId: string;
+    offline?: boolean;
+}): Promise<void>;