@aglyn/plugins-commerce 1.0.0-beta.285 → 1.0.0-beta.287

package/src/lib/server/pos-hardware-notify.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-hardware-notify.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { formatOperatorAlertAmount } from '@aglyn/aglyn/app-utils/operator-alerts'\nimport {\n  isAccountBanLockdownReason,\n  normalizeOrgLockdown,\n} from '@aglyn/aglyn/app-utils/lockdown'\nimport { POS_HARDWARE_EMAIL_KEYS, sendEmail } from '@aglyn/shared-util-email'\nimport {\n  firebaseAdmin,\n  hostDisplayName,\n  meterPlatformEmail,\n  raiseOperatorAlert,\n} from '@aglyn/tenant-data-admin'\nimport { filterSuppressedEmails } from '@aglyn/tenant-data-admin/server/email-suppression'\nimport {\n  orgSystemEmailBrand,\n  renderSystemEmailContent,\n} from '@aglyn/tenant-data-admin/server/render-system-email'\nimport { COMMERCE_POS_HARDWARE_ORDER } from '../constants/operator-alerts'\nimport { carrierLabelFor } from '../model/tracking-url'\nimport { formatPosHardwareCents, POS_HARDWARE_ANCHOR, type PosHardwareOrder } from '../model/pos-hardware'\nimport { posHardwareOrderNumber, posSettingsUrl } from './pos-hardware'\n\n/*==========================================\n * TELLING PEOPLE ABOUT A HARDWARE ORDER (AGL-4038).\n *\n * The buyer gets a system email at each step they wait on: received, shipped\n * (with the carrier and tracking link) and delivered (with the way to set the\n * reader up). Staff get the \"New hardware order\" operator alert, because in\n * phase 1 a person places every order with Stripe.\n *\n * Never throws. The order is already recorded when any of these run, and a\n * lost email must not undo it or turn a webhook into a redelivery.\n *=========================================*/\n\nexport type PosHardwareEmailKind = keyof typeof POS_HARDWARE_EMAIL_KEYS\n\n/** The lines as the emails list them, one per item. */\nfunction itemsText(order: PosHardwareOrder): string {\n  return (order.lines ?? []).map((line) => `${line.name} × ${line.quantity}`).join('\\n')\n}\n\nfunction shipToText(order: PosHardwareOrder): string {\n  const address = order.shipping?.address\n  const cityLine = address\n    ? [address.city, [address.state, address.postalCode].filter(Boolean).join(' ')].filter(Boolean).join(', ')\n    : ''\n  return [order.shipping?.name, address?.line1, address?.line2, cityLine].filter(Boolean).join('\\n')\n}\n\nasync function siteAndOrgNames(order: PosHardwareOrder): Promise<{ site: string; org: string; ban: boolean }> {\n  const firestore = firebaseAdmin.app().firestore()\n  const [host, org] = await Promise.all([\n    firestore.collection('hosts').doc(order.hostId).get().catch(() => null),\n    firestore.collection('orgs').doc(order.orgId).get().catch(() => null),\n  ])\n  const lock = normalizeOrgLockdown(org?.data() as never)\n  return {\n    site: host?.exists ? hostDisplayName(host.data() as Record<string, unknown>, order.hostId) : 'your site',\n    org: String(org?.get('name') ?? '').trim() || 'your workspace',\n    ban: Boolean(lock && isAccountBanLockdownReason(lock.reason)),\n  }\n}\n\n/** The fallback subject and first line, when no design renders. */\nconst FALLBACK: Record<PosHardwareEmailKind, (number: string) => string> = {\n  received: (number) => `We have your card reader order ${number}`,\n  shipped: (number) => `Your card reader order ${number} has shipped`,\n  delivered: (number) => `Your card reader order ${number} was delivered`,\n}\n\n/** The merge values for one order's emails. Exported for the render spec. */\nexport async function posHardwareEmailMerge(\n  orderId: string,\n  order: PosHardwareOrder,\n  names: { site: string; org: string },\n): Promise<Record<string, string>> {\n  const base = await posSettingsUrl(order.hostId)\n  const [path] = base.split('#')\n  const ordersUrl = `${path}#${POS_HARDWARE_ANCHOR}`\n  return {\n    'org.name': names.org,\n    'site.name': names.site,\n    'order.number': posHardwareOrderNumber(orderId),\n    'order.items': itemsText(order),\n    'order.total': formatPosHardwareCents(order.totalCents ?? 0),\n    'order.shipTo': shipToText(order),\n    'order.shippingMethod': order.shipping?.label ?? '',\n    'order.carrier': carrierLabelFor(order.tracking?.carrier) || 'the carrier',\n    'order.trackingNumber': order.tracking?.number ?? '',\n    // An unknown carrier has no tracker to link; the card shows the number.\n    'order.trackingUrl': order.tracking?.url ?? ordersUrl,\n    'order.ordersUrl': ordersUrl,\n    'order.setupUrl': `${path}#pos-devices`,\n  }\n}\n\nexport async function sendPosHardwareEmail(\n  kind: PosHardwareEmailKind,\n  orderId: string,\n  order: PosHardwareOrder,\n): Promise<void> {\n  try {\n    const to = String(order.contactEmail ?? '').trim()\n    if (!to) return\n    const names = await siteAndOrgNames(order)\n    // A ban is a ban (AGL-3420): after its notice the account is sent nothing.\n    if (names.ban) return\n    const [recipient] = await filterSuppressedEmails([to])\n    if (!recipient) return\n    const merge = await posHardwareEmailMerge(orderId, order, names)\n    const subject = FALLBACK[kind](merge['order.number'])\n    const brand = await orgSystemEmailBrand(order.orgId)\n    const content = await renderSystemEmailContent(POS_HARDWARE_EMAIL_KEYS[kind], merge, brand, {\n      subject,\n      text: `${subject}\\n\\n${merge['order.items']}\\n\\n${merge['order.ordersUrl']}`,\n    })\n    const result = await sendEmail({\n      to: recipient,\n      ...content,\n      ...(brand.fromName ? { fromName: brand.fromName } : {}),\n      context: POS_HARDWARE_EMAIL_KEYS[kind],\n    })\n    if (result.sent) await meterPlatformEmail(1)\n  } catch (error) {\n    console.error('[pos-hardware] email failed', kind, orderId, error)\n  }\n}\n\n/** \"New hardware order\", once per order. */\nexport async function raisePosHardwareOrderAlert(orderId: string, order: PosHardwareOrder): Promise<void> {\n  try {\n    const names = await siteAndOrgNames(order)\n    await raiseOperatorAlert(COMMERCE_POS_HARDWARE_ORDER, {\n      dedupeKey: orderId,\n      orgId: order.orgId,\n      hostId: order.hostId,\n      context: {\n        orderNumber: posHardwareOrderNumber(orderId),\n        amount: formatOperatorAlertAmount(order.totalCents ?? 0),\n        site: `${names.site} (${order.hostId})`,\n        items: (order.lines ?? []).map((line) => `${line.quantity} × ${line.name}`).join(', '),\n        shipping: order.shipping?.label ?? 'shipping',\n      },\n    })\n  } catch (error) {\n    console.error('[pos-hardware] operator alert failed', orderId, error)\n  }\n}\n"],"names":["formatOperatorAlertAmount","isAccountBanLockdownReason","normalizeOrgLockdown","POS_HARDWARE_EMAIL_KEYS","sendEmail","firebaseAdmin","hostDisplayName","meterPlatformEmail","raiseOperatorAlert","filterSuppressedEmails","orgSystemEmailBrand","renderSystemEmailContent","COMMERCE_POS_HARDWARE_ORDER","carrierLabelFor","formatPosHardwareCents","POS_HARDWARE_ANCHOR","posHardwareOrderNumber","posSettingsUrl","itemsText","order","lines","map","line","name","quantity","join","shipToText","address","shipping","cityLine","city","state","postalCode","filter","Boolean","line1","line2","siteAndOrgNames","firestore","app","host","org","Promise","all","collection","doc","hostId","get","catch","orgId","lock","data","site","exists","String","trim","ban","reason","FALLBACK","received","number","shipped","delivered","posHardwareEmailMerge","orderId","names","base","path","split","ordersUrl","totalCents","label","tracking","carrier","url","sendPosHardwareEmail","kind","to","contactEmail","recipient","merge","subject","brand","content","text","result","fromName","context","sent","error","console","raisePosHardwareOrderAlert","dedupeKey","orderNumber","amount","items"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,yBAAyB,QAAQ,yCAAwC;AAClF,SACEC,0BAA0B,EAC1BC,oBAAoB,QACf,kCAAiC;AACxC,SAASC,uBAAuB,EAAEC,SAAS,QAAQ,2BAA0B;AAC7E,SACEC,aAAa,EACbC,eAAe,EACfC,kBAAkB,EAClBC,kBAAkB,QACb,2BAA0B;AACjC,SAASC,sBAAsB,QAAQ,oDAAmD;AAC1F,SACEC,mBAAmB,EACnBC,wBAAwB,QACnB,sDAAqD;AAC5D,SAASC,2BAA2B,QAAQ,kCAA8B;AAC1E,SAASC,eAAe,QAAQ,2BAAuB;AACvD,SAASC,sBAAsB,EAAEC,mBAAmB,QAA+B,2BAAuB;AAC1G,SAASC,sBAAsB,EAAEC,cAAc,QAAQ,oBAAgB;AAgBvE,qDAAqD,GACrD,SAASC,UAAUC,KAAuB;QAChCA;IAAR,OAAO,EAACA,eAAAA,MAAMC,KAAK,YAAXD,eAAe,EAAE,EAAEE,GAAG,CAAC,CAACC,OAAS,GAAGA,KAAKC,IAAI,CAAC,GAAG,EAAED,KAAKE,QAAQ,EAAE,EAAEC,IAAI,CAAC;AACnF;AAEA,SAASC,WAAWP,KAAuB;QACzBA,iBAIRA;IAJR,MAAMQ,WAAUR,kBAAAA,MAAMS,QAAQ,qBAAdT,gBAAgBQ,OAAO;IACvC,MAAME,WAAWF,UACb;QAACA,QAAQG,IAAI;QAAE;YAACH,QAAQI,KAAK;YAAEJ,QAAQK,UAAU;SAAC,CAACC,MAAM,CAACC,SAAST,IAAI,CAAC;KAAK,CAACQ,MAAM,CAACC,SAAST,IAAI,CAAC,QACnG;IACJ,OAAO;SAACN,mBAAAA,MAAMS,QAAQ,qBAAdT,iBAAgBI,IAAI;QAAEI,2BAAAA,QAASQ,KAAK;QAAER,2BAAAA,QAASS,KAAK;QAAEP;KAAS,CAACI,MAAM,CAACC,SAAST,IAAI,CAAC;AAC/F;AAEA,eAAeY,gBAAgBlB,KAAuB;;IACpD,MAAMmB,YAAYjC,cAAckC,GAAG,GAAGD,SAAS;IAC/C,MAAM,CAACE,MAAMC,IAAI,GAAG,MAAMC,QAAQC,GAAG,CAAC;QACpCL,UAAUM,UAAU,CAAC,SAASC,GAAG,CAAC1B,MAAM2B,MAAM,EAAEC,GAAG,GAAGC,KAAK,CAAC,IAAM;QAClEV,UAAUM,UAAU,CAAC,QAAQC,GAAG,CAAC1B,MAAM8B,KAAK,EAAEF,GAAG,GAAGC,KAAK,CAAC,IAAM;KACjE;IACD,MAAME,OAAOhD,qBAAqBuC,uBAAAA,IAAKU,IAAI;IAC3C,OAAO;QACLC,MAAMZ,CAAAA,wBAAAA,KAAMa,MAAM,IAAG/C,gBAAgBkC,KAAKW,IAAI,IAA+BhC,MAAM2B,MAAM,IAAI;QAC7FL,KAAKa,eAAOb,uBAAAA,IAAKM,GAAG,CAAC,0BAAW,IAAIQ,IAAI,MAAM;QAC9CC,KAAKtB,QAAQgB,QAAQjD,2BAA2BiD,KAAKO,MAAM;IAC7D;AACF;AAEA,iEAAiE,GACjE,MAAMC,WAAqE;IACzEC,UAAU,CAACC,SAAW,CAAC,+BAA+B,EAAEA,QAAQ;IAChEC,SAAS,CAACD,SAAW,CAAC,uBAAuB,EAAEA,OAAO,YAAY,CAAC;IACnEE,WAAW,CAACF,SAAW,CAAC,uBAAuB,EAAEA,OAAO,cAAc,CAAC;AACzE;AAEA,2EAA2E,GAC3E,OAAO,eAAeG,sBACpBC,OAAe,EACf7C,KAAuB,EACvB8C,KAAoC;QAUI9C;QAEdA,iBACSA,iBACTA,kBAEHA;IAdvB,MAAM+C,OAAO,MAAMjD,eAAeE,MAAM2B,MAAM;IAC9C,MAAM,CAACqB,KAAK,GAAGD,KAAKE,KAAK,CAAC;IAC1B,MAAMC,YAAY,GAAGF,KAAK,CAAC,EAAEpD,qBAAqB;IAClD,OAAO;QACL,YAAYkD,MAAMxB,GAAG;QACrB,aAAawB,MAAMb,IAAI;QACvB,gBAAgBpC,uBAAuBgD;QACvC,eAAe9C,UAAUC;QACzB,eAAeL,wBAAuBK,oBAAAA,MAAMmD,UAAU,YAAhBnD,oBAAoB;QAC1D,gBAAgBO,WAAWP;QAC3B,sBAAsB,WAAEA,kBAAAA,MAAMS,QAAQ,qBAAdT,gBAAgBoD,KAAK,mBAAI;QACjD,iBAAiB1D,iBAAgBM,kBAAAA,MAAMqD,QAAQ,qBAAdrD,gBAAgBsD,OAAO,KAAK;QAC7D,sBAAsB,YAAEtD,mBAAAA,MAAMqD,QAAQ,qBAAdrD,iBAAgByC,MAAM,oBAAI;QAClD,wEAAwE;QACxE,mBAAmB,YAAEzC,mBAAAA,MAAMqD,QAAQ,qBAAdrD,iBAAgBuD,GAAG,oBAAIL;QAC5C,mBAAmBA;QACnB,kBAAkB,GAAGF,KAAK,YAAY,CAAC;IACzC;AACF;AAEA,OAAO,eAAeQ,qBACpBC,IAA0B,EAC1BZ,OAAe,EACf7C,KAAuB;IAEvB,IAAI;YACgBA;QAAlB,MAAM0D,KAAKvB,QAAOnC,sBAAAA,MAAM2D,YAAY,YAAlB3D,sBAAsB,IAAIoC,IAAI;QAChD,IAAI,CAACsB,IAAI;QACT,MAAMZ,QAAQ,MAAM5B,gBAAgBlB;QACpC,2EAA2E;QAC3E,IAAI8C,MAAMT,GAAG,EAAE;QACf,MAAM,CAACuB,UAAU,GAAG,MAAMtE,uBAAuB;YAACoE;SAAG;QACrD,IAAI,CAACE,WAAW;QAChB,MAAMC,QAAQ,MAAMjB,sBAAsBC,SAAS7C,OAAO8C;QAC1D,MAAMgB,UAAUvB,QAAQ,CAACkB,KAAK,CAACI,KAAK,CAAC,eAAe;QACpD,MAAME,QAAQ,MAAMxE,oBAAoBS,MAAM8B,KAAK;QACnD,MAAMkC,UAAU,MAAMxE,yBAAyBR,uBAAuB,CAACyE,KAAK,EAAEI,OAAOE,OAAO;YAC1FD;YACAG,MAAM,GAAGH,QAAQ,IAAI,EAAED,KAAK,CAAC,cAAc,CAAC,IAAI,EAAEA,KAAK,CAAC,kBAAkB,EAAE;QAC9E;QACA,MAAMK,SAAS,MAAMjF,UAAU;YAC7ByE,IAAIE;WACDI,SACCD,MAAMI,QAAQ,GAAG;YAAEA,UAAUJ,MAAMI,QAAQ;QAAC,IAAI,CAAC;YACrDC,SAASpF,uBAAuB,CAACyE,KAAK;;QAExC,IAAIS,OAAOG,IAAI,EAAE,MAAMjF,mBAAmB;IAC5C,EAAE,OAAOkF,OAAO;QACdC,QAAQD,KAAK,CAAC,+BAA+Bb,MAAMZ,SAASyB;IAC9D;AACF;AAEA,0CAA0C,GAC1C,OAAO,eAAeE,2BAA2B3B,OAAe,EAAE7C,KAAuB;IACvF,IAAI;YAQoCA,mBAE1BA;YACEA;QAVd,MAAM8C,QAAQ,MAAM5B,gBAAgBlB;QACpC,MAAMX,mBAAmBI,6BAA6B;YACpDgF,WAAW5B;YACXf,OAAO9B,MAAM8B,KAAK;YAClBH,QAAQ3B,MAAM2B,MAAM;YACpByC,SAAS;gBACPM,aAAa7E,uBAAuBgD;gBACpC8B,QAAQ9F,2BAA0BmB,oBAAAA,MAAMmD,UAAU,YAAhBnD,oBAAoB;gBACtDiC,MAAM,GAAGa,MAAMb,IAAI,CAAC,EAAE,EAAEjC,MAAM2B,MAAM,CAAC,CAAC,CAAC;gBACvCiD,OAAO,EAAC5E,eAAAA,MAAMC,KAAK,YAAXD,eAAe,EAAE,EAAEE,GAAG,CAAC,CAACC,OAAS,GAAGA,KAAKE,QAAQ,CAAC,GAAG,EAAEF,KAAKC,IAAI,EAAE,EAAEE,IAAI,CAAC;gBACjFG,QAAQ,WAAET,kBAAAA,MAAMS,QAAQ,qBAAdT,gBAAgBoD,KAAK,mBAAI;YACrC;QACF;IACF,EAAE,OAAOkB,OAAO;QACdC,QAAQD,KAAK,CAAC,wCAAwCzB,SAASyB;IACjE;AACF"}
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-hardware-notify.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { formatOperatorAlertAmount } from '@aglyn/aglyn/app-utils/operator-alerts'\nimport {\n  isAccountBanLockdownReason,\n  normalizeOrgLockdown,\n} from '@aglyn/aglyn/app-utils/lockdown'\nimport { POS_HARDWARE_EMAIL_KEYS, sendEmail } from '@aglyn/shared-util-email'\nimport { platformConsoleOrigin } from '@aglyn/aglyn/app-utils/platform-brand'\nimport {\n  firebaseAdmin,\n  hostDisplayName,\n  meterPlatformEmail,\n  raiseOperatorAlert,\n} from '@aglyn/tenant-data-admin'\nimport { filterSuppressedEmails } from '@aglyn/tenant-data-admin/server/email-suppression'\nimport {\n  orgSystemEmailBrand,\n  renderSystemEmailContent,\n} from '@aglyn/tenant-data-admin/server/render-system-email'\nimport {\n  COMMERCE_POS_HARDWARE_CANCELED_AFTER_ORDERING,\n  COMMERCE_POS_HARDWARE_ORDER,\n  COMMERCE_POS_HARDWARE_REFUND_FAILED,\n} from '../constants/operator-alerts'\nimport { carrierLabelFor } from '../model/tracking-url'\nimport {\n  formatPosHardwareCents,\n  POS_HARDWARE_ANCHOR,\n  type PosHardwareCancelReason,\n  type PosHardwareOrder,\n} from '../model/pos-hardware'\nimport { hardwareOrdersRef, posHardwareOrderNumber, posSettingsUrl } from './pos-hardware'\n\n/*==========================================\n * TELLING PEOPLE ABOUT A HARDWARE ORDER (AGL-4038).\n *\n * The buyer gets a system email at each step they wait on: received, shipped\n * (with the carrier and tracking link) and delivered (with the way to set the\n * reader up), and canceled and refunded when staff cancel it before it ships\n * and choose to tell them, or the workspace is deleted or their account is\n * closed first; a reader bought in person gets \"refunded\" when staff refund\n * it and choose to tell them. The canceled and refunded emails are sent\n * ONCE, by a claim on the order ({@link sendPosHardwareEmailOnce}), so the\n * staff page and a closure never both send one. Staff get the \"New hardware order\" operator alert,\n * because in phase 1 a person places every order with Stripe, and an alert\n * when a closure cancels an order already placed with Stripe or Stripe\n * refuses a closure's refund.\n *\n * Never throws. The order is already recorded when any of these run, and a\n * lost email must not undo it or turn a webhook into a redelivery.\n *=========================================*/\n\nexport type PosHardwareEmailKind = keyof typeof POS_HARDWARE_EMAIL_KEYS\n\n/** The lines as the emails list them, one per item. */\nfunction itemsText(order: PosHardwareOrder): string {\n  return (order.lines ?? []).map((line) => `${line.name} × ${line.quantity}`).join('\\n')\n}\n\nfunction shipToText(order: PosHardwareOrder): string {\n  const address = order.shipping?.address\n  const cityLine = address\n    ? [address.city, [address.state, address.postalCode].filter(Boolean).join(' ')].filter(Boolean).join(', ')\n    : ''\n  return [order.shipping?.name, address?.line1, address?.line2, cityLine].filter(Boolean).join('\\n')\n}\n\nasync function siteAndOrgNames(order: PosHardwareOrder): Promise<{ site: string; org: string; ban: boolean }> {\n  const firestore = firebaseAdmin.app().firestore()\n  const [host, org] = await Promise.all([\n    firestore.collection('hosts').doc(order.hostId).get().catch(() => null),\n    firestore.collection('orgs').doc(order.orgId).get().catch(() => null),\n  ])\n  const lock = normalizeOrgLockdown(org?.data() as never)\n  return {\n    site: host?.exists ? hostDisplayName(host.data() as Record<string, unknown>, order.hostId) : 'your site',\n    org: String(org?.get('name') ?? '').trim() || UNNAMED_WORKSPACE,\n    ban: Boolean(lock && isAccountBanLockdownReason(lock.reason)),\n  }\n}\n\n/** The fallback subject and first line, when no design renders. */\nconst FALLBACK: Record<PosHardwareEmailKind, (number: string) => string> = {\n  received: (number) => `We have your card reader order ${number}`,\n  shipped: (number) => `Your card reader order ${number} has shipped`,\n  delivered: (number) => `Your card reader order ${number} was delivered`,\n  canceled: (number) => `Your card reader order ${number} was canceled and refunded`,\n  refunded: (number) => `Your refund for card reader order ${number}`,\n  invited: (number) => `Your card reader order ${number} is waiting for your account`,\n  returnRefunded: (number) => `We refunded your returned card reader order ${number}`,\n}\n\n/** The fallback a workspace with no name gets in a sentence. */\nconst UNNAMED_WORKSPACE = 'your workspace'\n\n/**\n * Who canceled the order and why, as the email's first sentence; the\n * template goes on \"It had not shipped yet, so we refunded …\".\n */\nfunction cancelReasonText(reason: PosHardwareCancelReason | undefined, org: string): string {\n  if (reason === 'workspace-closed') {\n    return org && org !== UNNAMED_WORKSPACE\n      ? `We canceled your order because the ${org} workspace was deleted.`\n      : 'We canceled your order because your workspace was deleted.'\n  }\n  if (reason === 'account-closed') return 'We canceled your order because the account that placed it was closed.'\n  return 'Our team canceled your order.'\n}\n\n/** Why, for staff: the closure that canceled it, never who the buyer was. */\nfunction staffReasonText(reason: PosHardwareCancelReason, orgId: string): string {\n  if (reason === 'workspace-closed') return `its workspace ${orgId} was deleted`\n  if (reason === 'account-closed') return 'the account that placed it was closed'\n  return 'staff canceled it'\n}\n\n/** The merge values for one order's emails. Exported for the render spec. */\nexport async function posHardwareEmailMerge(\n  orderId: string,\n  order: PosHardwareOrder,\n  names: { site: string; org: string },\n): Promise<Record<string, string>> {\n  const base = await posSettingsUrl(order.hostId)\n  const [path] = base.split('#')\n  const ordersUrl = `${path}#${POS_HARDWARE_ANCHOR}`\n  return {\n    'org.name': names.org,\n    'site.name': names.site,\n    'order.number': posHardwareOrderNumber(orderId),\n    'order.items': itemsText(order),\n    'order.total': formatPosHardwareCents(order.totalCents ?? 0),\n    'order.shipTo': shipToText(order),\n    'order.shippingMethod': order.shipping?.label ?? '',\n    'order.carrier': carrierLabelFor(order.tracking?.carrier) || 'the carrier',\n    'order.trackingNumber': order.tracking?.number ?? '',\n    // An unknown carrier has no tracker to link; the card shows the number.\n    'order.trackingUrl': order.tracking?.url ?? ordersUrl,\n    'order.ordersUrl': ordersUrl,\n    'order.setupUrl': `${path}#pos-devices`,\n    // What Stripe reported refunding, or the whole charge where it has not.\n    'order.refunded': formatPosHardwareCents(order.refundedCents ?? order.totalCents ?? 0),\n    // This refund alone, for an order refunded in parts; the whole of it otherwise.\n    'order.refundedNow': formatPosHardwareCents(\n      (order.refunds ?? []).slice(-1)[0]?.cents ?? order.refundedCents ?? order.totalCents ?? 0,\n    ),\n    'order.cancelReason': cancelReasonText(order.cancelReason, names.org),\n    // What a return kept back: the original shipping and any restocking fee.\n    'order.kept': formatPosHardwareCents(Math.max(0, (order.totalCents ?? 0) - (order.refundedCents ?? 0))),\n  }\n}\n\n/** What became of one email. */\nexport type PosHardwareEmailOutcome =\n  /** Sent. */\n  | 'sent'\n  /** Nobody to send it to: no address, suppressed, or the account is banned. */\n  | 'skipped'\n  /** The send failed, and may be tried again. */\n  | 'failed'\n\nexport async function sendPosHardwareEmail(\n  kind: PosHardwareEmailKind,\n  orderId: string,\n  order: PosHardwareOrder,\n): Promise<PosHardwareEmailOutcome> {\n  try {\n    const to = String(order.contactEmail ?? '').trim()\n    if (!to) return 'skipped'\n    const names = await siteAndOrgNames(order)\n    // A ban is a ban (AGL-3420): after its notice the account is sent nothing.\n    if (names.ban) return 'skipped'\n    const [recipient] = await filterSuppressedEmails([to])\n    if (!recipient) return 'skipped'\n    const merge = await posHardwareEmailMerge(orderId, order, names)\n    const subject = FALLBACK[kind](merge['order.number'])\n    // A refund in person is in the selling workspace's brand, as its\n    // invitation is; the rest in the buyer's.\n    const brand = await orgSystemEmailBrand(kind === 'refunded' ? (order.posSale?.orgId ?? order.orgId) : order.orgId)\n    // A canceled order's workspace may be gone, so its fallback names the\n    // refund rather than linking a card that no longer opens.\n    const last =\n      kind === 'canceled'\n        ? `Refunded: ${merge['order.refunded']}`\n        : kind === 'refunded'\n          ? `Refunded now: ${merge['order.refundedNow']}`\n          : merge['order.ordersUrl']\n    const content = await renderSystemEmailContent(POS_HARDWARE_EMAIL_KEYS[kind], merge, brand, {\n      subject,\n      text: `${subject}\\n\\n${merge['order.items']}\\n\\n${last}`,\n    })\n    const result = await sendEmail({\n      to: recipient,\n      ...content,\n      ...(brand.fromName ? { fromName: brand.fromName } : {}),\n      context: POS_HARDWARE_EMAIL_KEYS[kind],\n    })\n    if (!result.sent) return 'failed'\n    await meterPlatformEmail(1)\n    return 'sent'\n  } catch (error) {\n    console.error('[pos-hardware] email failed', kind, orderId, error)\n    return 'failed'\n  }\n}\n\n/** How long a claimed send that never finished holds the next one back. */\nconst EMAIL_CLAIM_STALE_MS = 10 * 60 * 1000\n\n/**\n * Sends one email for an order ONCE, under `key` (the kind by default; one\n * per refund for a refund in parts). The claim is a field on the order,\n * `buyerEmails.{key}`, taken in a transaction before the send, so the staff\n * page and a closure, a retried press or two staff at once, send it once\n * between them. A send that failed can be claimed again; one that found\n * nobody to send to is not tried again. Never throws.\n */\nexport async function sendPosHardwareEmailOnce(\n  kind: PosHardwareEmailKind,\n  orderId: string,\n  order: PosHardwareOrder,\n  key: string = kind,\n): Promise<PosHardwareEmailOutcome | 'already'> {\n  try {\n    const firestore = firebaseAdmin.app().firestore()\n    const ref = hardwareOrdersRef(order.orgId).doc(orderId)\n    const claimed = await firestore.runTransaction(async (transaction: any) => {\n      const snapshot = await transaction.get(ref)\n      if (!snapshot.exists) return false\n      const held = (snapshot.data()?.buyerEmails ?? {})[key] as { state?: string; atMs?: number } | undefined\n      const now = Date.now()\n      if (held?.state === 'sent' || held?.state === 'skipped') return false\n      if (held?.state === 'sending' && now - Number(held.atMs ?? 0) < EMAIL_CLAIM_STALE_MS) return false\n      transaction.set(ref, { buyerEmails: { [key]: { state: 'sending', atMs: now } } }, { merge: true })\n      return true\n    })\n    if (!claimed) return 'already'\n    const outcome = await sendPosHardwareEmail(kind, orderId, order)\n    await ref\n      .set({ buyerEmails: { [key]: { state: outcome === 'sent' ? 'sent' : outcome, atMs: Date.now() } } }, { merge: true })\n      .catch((error: unknown) => console.error('[pos-hardware] email claim not settled', kind, orderId, error))\n    return outcome\n  } catch (error) {\n    console.error('[pos-hardware] email claim failed', kind, orderId, error)\n    return 'failed'\n  }\n}\n\n/**\n * The invitation to sign up (AGL-4038), for someone who bought a card reader\n * in person at the platform's own store with no account yet: create the\n * account with this address and the order joins their workspace on its own.\n * Sent in the selling workspace's brand, which is the platform's. Never\n * throws; the caller has already claimed the send.\n */\n/** The invitation's merge values. Exported for the render spec. */\nexport function posHardwareInviteMerge(orderId: string, order: PosHardwareOrder): Record<string, string> {\n  return {\n    'order.number': posHardwareOrderNumber(orderId),\n    'order.items': itemsText(order),\n    'order.total': formatPosHardwareCents(order.totalCents ?? 0),\n    'order.signUpUrl': `${platformConsoleOrigin()}/signup`,\n  }\n}\n\nexport async function sendPosHardwareInvite(orderId: string, order: PosHardwareOrder): Promise<void> {\n  try {\n    const to = String(order.attachment?.email ?? '').trim()\n    if (!to) return\n    const [recipient] = await filterSuppressedEmails([to])\n    if (!recipient) return\n    const merge = posHardwareInviteMerge(orderId, order)\n    const signUpUrl = merge['order.signUpUrl']\n    const subject = FALLBACK.invited(merge['order.number'])\n    const brand = await orgSystemEmailBrand(order.posSale?.orgId ?? order.orgId)\n    const content = await renderSystemEmailContent(POS_HARDWARE_EMAIL_KEYS.invited, merge, brand, {\n      subject,\n      text: `${subject}\\n\\n${merge['order.items']}\\n\\nCreate your account with this email address: ${signUpUrl}`,\n    })\n    const result = await sendEmail({\n      to: recipient,\n      ...content,\n      ...(brand.fromName ? { fromName: brand.fromName } : {}),\n      context: POS_HARDWARE_EMAIL_KEYS.invited,\n    })\n    if (result.sent) await meterPlatformEmail(1)\n  } catch (error) {\n    console.error('[pos-hardware] invitation failed', orderId, error)\n  }\n}\n\n/**\n * A closure canceled an order staff had already placed with Stripe: the\n * merchant is refunded, and Stripe will still ship it unless someone cancels\n * it there. Once per order.\n */\nexport async function raisePosHardwareCanceledAfterOrderingAlert(\n  orderId: string,\n  order: PosHardwareOrder,\n  reason: PosHardwareCancelReason,\n): Promise<void> {\n  try {\n    const stripeOrderId = String(order.stripeHardwareOrderId ?? '').trim()\n    await raiseOperatorAlert(COMMERCE_POS_HARDWARE_CANCELED_AFTER_ORDERING, {\n      dedupeKey: orderId,\n      orgId: order.orgId,\n      hostId: order.hostId,\n      context: {\n        orderNumber: posHardwareOrderNumber(orderId),\n        amount: formatOperatorAlertAmount(order.totalCents ?? 0),\n        items: (order.lines ?? []).map((line) => `${line.quantity} × ${line.name}`).join(', '),\n        reason: staffReasonText(reason, order.orgId),\n        stripeOrder: stripeOrderId ? ` (Stripe order ${stripeOrderId})` : '',\n      },\n    })\n  } catch (error) {\n    console.error('[pos-hardware] canceled-after-ordering alert failed', orderId, error)\n  }\n}\n\n/**\n * Stripe refused a closure's refund, and the closure went ahead without it.\n * Carries the payment to refund by hand, never the buyer.\n */\nexport async function raisePosHardwareRefundFailedAlert(\n  orderId: string,\n  order: PosHardwareOrder,\n  reason: PosHardwareCancelReason,\n  error: string,\n): Promise<void> {\n  try {\n    const stripeOrderId = String(order.stripeHardwareOrderId ?? '').trim()\n    await raiseOperatorAlert(COMMERCE_POS_HARDWARE_REFUND_FAILED, {\n      dedupeKey: orderId,\n      orgId: order.orgId,\n      hostId: order.hostId,\n      context: {\n        orderNumber: posHardwareOrderNumber(orderId),\n        amount: formatOperatorAlertAmount(order.totalCents ?? 0),\n        reason: staffReasonText(reason, order.orgId),\n        error: error || 'no reason given',\n        paymentIntentId: order.stripePaymentIntentId ?? 'for this order (no payment id is recorded on it)',\n        orderedNote:\n          order.status === 'ordered'\n            ? `. It had already been placed with Stripe${stripeOrderId ? ` as ${stripeOrderId}` : ''}, so cancel it there too before it ships`\n            : '',\n      },\n    })\n  } catch (failure) {\n    console.error('[pos-hardware] refund-failed alert failed', orderId, failure)\n  }\n}\n\n/** \"New hardware order\", once per order. */\nexport async function raisePosHardwareOrderAlert(orderId: string, order: PosHardwareOrder): Promise<void> {\n  try {\n    const names = await siteAndOrgNames(order)\n    await raiseOperatorAlert(COMMERCE_POS_HARDWARE_ORDER, {\n      dedupeKey: orderId,\n      orgId: order.orgId,\n      hostId: order.hostId,\n      context: {\n        orderNumber: posHardwareOrderNumber(orderId),\n        amount: formatOperatorAlertAmount(order.totalCents ?? 0),\n        site: `${names.site} (${order.hostId})`,\n        items: (order.lines ?? []).map((line) => `${line.quantity} × ${line.name}`).join(', '),\n        shipping: order.shipping?.label ?? 'shipping',\n      },\n    })\n  } catch (error) {\n    console.error('[pos-hardware] operator alert failed', orderId, error)\n  }\n}\n"],"names":["formatOperatorAlertAmount","isAccountBanLockdownReason","normalizeOrgLockdown","POS_HARDWARE_EMAIL_KEYS","sendEmail","platformConsoleOrigin","firebaseAdmin","hostDisplayName","meterPlatformEmail","raiseOperatorAlert","filterSuppressedEmails","orgSystemEmailBrand","renderSystemEmailContent","COMMERCE_POS_HARDWARE_CANCELED_AFTER_ORDERING","COMMERCE_POS_HARDWARE_ORDER","COMMERCE_POS_HARDWARE_REFUND_FAILED","carrierLabelFor","formatPosHardwareCents","POS_HARDWARE_ANCHOR","hardwareOrdersRef","posHardwareOrderNumber","posSettingsUrl","itemsText","order","lines","map","line","name","quantity","join","shipToText","address","shipping","cityLine","city","state","postalCode","filter","Boolean","line1","line2","siteAndOrgNames","firestore","app","host","org","Promise","all","collection","doc","hostId","get","catch","orgId","lock","data","site","exists","String","trim","UNNAMED_WORKSPACE","ban","reason","FALLBACK","received","number","shipped","delivered","canceled","refunded","invited","returnRefunded","cancelReasonText","staffReasonText","posHardwareEmailMerge","orderId","names","base","path","split","ordersUrl","totalCents","label","tracking","carrier","url","refundedCents","refunds","slice","cents","cancelReason","Math","max","sendPosHardwareEmail","kind","to","contactEmail","recipient","merge","subject","brand","posSale","last","content","text","result","fromName","context","sent","error","console","EMAIL_CLAIM_STALE_MS","sendPosHardwareEmailOnce","key","ref","claimed","runTransaction","transaction","held","snapshot","buyerEmails","now","Date","Number","atMs","set","outcome","posHardwareInviteMerge","sendPosHardwareInvite","attachment","email","signUpUrl","raisePosHardwareCanceledAfterOrderingAlert","stripeOrderId","stripeHardwareOrderId","dedupeKey","orderNumber","amount","items","stripeOrder","raisePosHardwareRefundFailedAlert","paymentIntentId","stripePaymentIntentId","orderedNote","status","failure","raisePosHardwareOrderAlert"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,yBAAyB,QAAQ,yCAAwC;AAClF,SACEC,0BAA0B,EAC1BC,oBAAoB,QACf,kCAAiC;AACxC,SAASC,uBAAuB,EAAEC,SAAS,QAAQ,2BAA0B;AAC7E,SAASC,qBAAqB,QAAQ,wCAAuC;AAC7E,SACEC,aAAa,EACbC,eAAe,EACfC,kBAAkB,EAClBC,kBAAkB,QACb,2BAA0B;AACjC,SAASC,sBAAsB,QAAQ,oDAAmD;AAC1F,SACEC,mBAAmB,EACnBC,wBAAwB,QACnB,sDAAqD;AAC5D,SACEC,6CAA6C,EAC7CC,2BAA2B,EAC3BC,mCAAmC,QAC9B,kCAA8B;AACrC,SAASC,eAAe,QAAQ,2BAAuB;AACvD,SACEC,sBAAsB,EACtBC,mBAAmB,QAGd,2BAAuB;AAC9B,SAASC,iBAAiB,EAAEC,sBAAsB,EAAEC,cAAc,QAAQ,oBAAgB;AAuB1F,qDAAqD,GACrD,SAASC,UAAUC,KAAuB;QAChCA;IAAR,OAAO,EAACA,eAAAA,MAAMC,KAAK,YAAXD,eAAe,EAAE,EAAEE,GAAG,CAAC,CAACC,OAAS,GAAGA,KAAKC,IAAI,CAAC,GAAG,EAAED,KAAKE,QAAQ,EAAE,EAAEC,IAAI,CAAC;AACnF;AAEA,SAASC,WAAWP,KAAuB;QACzBA,iBAIRA;IAJR,MAAMQ,WAAUR,kBAAAA,MAAMS,QAAQ,qBAAdT,gBAAgBQ,OAAO;IACvC,MAAME,WAAWF,UACb;QAACA,QAAQG,IAAI;QAAE;YAACH,QAAQI,KAAK;YAAEJ,QAAQK,UAAU;SAAC,CAACC,MAAM,CAACC,SAAST,IAAI,CAAC;KAAK,CAACQ,MAAM,CAACC,SAAST,IAAI,CAAC,QACnG;IACJ,OAAO;SAACN,mBAAAA,MAAMS,QAAQ,qBAAdT,iBAAgBI,IAAI;QAAEI,2BAAAA,QAASQ,KAAK;QAAER,2BAAAA,QAASS,KAAK;QAAEP;KAAS,CAACI,MAAM,CAACC,SAAST,IAAI,CAAC;AAC/F;AAEA,eAAeY,gBAAgBlB,KAAuB;;IACpD,MAAMmB,YAAYpC,cAAcqC,GAAG,GAAGD,SAAS;IAC/C,MAAM,CAACE,MAAMC,IAAI,GAAG,MAAMC,QAAQC,GAAG,CAAC;QACpCL,UAAUM,UAAU,CAAC,SAASC,GAAG,CAAC1B,MAAM2B,MAAM,EAAEC,GAAG,GAAGC,KAAK,CAAC,IAAM;QAClEV,UAAUM,UAAU,CAAC,QAAQC,GAAG,CAAC1B,MAAM8B,KAAK,EAAEF,GAAG,GAAGC,KAAK,CAAC,IAAM;KACjE;IACD,MAAME,OAAOpD,qBAAqB2C,uBAAAA,IAAKU,IAAI;IAC3C,OAAO;QACLC,MAAMZ,CAAAA,wBAAAA,KAAMa,MAAM,IAAGlD,gBAAgBqC,KAAKW,IAAI,IAA+BhC,MAAM2B,MAAM,IAAI;QAC7FL,KAAKa,eAAOb,uBAAAA,IAAKM,GAAG,CAAC,0BAAW,IAAIQ,IAAI,MAAMC;QAC9CC,KAAKvB,QAAQgB,QAAQrD,2BAA2BqD,KAAKQ,MAAM;IAC7D;AACF;AAEA,iEAAiE,GACjE,MAAMC,WAAqE;IACzEC,UAAU,CAACC,SAAW,CAAC,+BAA+B,EAAEA,QAAQ;IAChEC,SAAS,CAACD,SAAW,CAAC,uBAAuB,EAAEA,OAAO,YAAY,CAAC;IACnEE,WAAW,CAACF,SAAW,CAAC,uBAAuB,EAAEA,OAAO,cAAc,CAAC;IACvEG,UAAU,CAACH,SAAW,CAAC,uBAAuB,EAAEA,OAAO,0BAA0B,CAAC;IAClFI,UAAU,CAACJ,SAAW,CAAC,kCAAkC,EAAEA,QAAQ;IACnEK,SAAS,CAACL,SAAW,CAAC,uBAAuB,EAAEA,OAAO,4BAA4B,CAAC;IACnFM,gBAAgB,CAACN,SAAW,CAAC,4CAA4C,EAAEA,QAAQ;AACrF;AAEA,8DAA8D,GAC9D,MAAML,oBAAoB;AAE1B;;;CAGC,GACD,SAASY,iBAAiBV,MAA2C,EAAEjB,GAAW;IAChF,IAAIiB,WAAW,oBAAoB;QACjC,OAAOjB,OAAOA,QAAQe,oBAClB,CAAC,mCAAmC,EAAEf,IAAI,uBAAuB,CAAC,GAClE;IACN;IACA,IAAIiB,WAAW,kBAAkB,OAAO;IACxC,OAAO;AACT;AAEA,2EAA2E,GAC3E,SAASW,gBAAgBX,MAA+B,EAAET,KAAa;IACrE,IAAIS,WAAW,oBAAoB,OAAO,CAAC,cAAc,EAAET,MAAM,YAAY,CAAC;IAC9E,IAAIS,WAAW,kBAAkB,OAAO;IACxC,OAAO;AACT;AAEA,2EAA2E,GAC3E,OAAO,eAAeY,sBACpBC,OAAe,EACfpD,KAAuB,EACvBqD,KAAoC;QAUIrD,uCAUGA,OAAAA,sBAGvC,OAAA,cAACA,gBAI+CA,oBAA0BA;QAfpDA,iBACSA,iBACTA,kBAEHA,kBAOnB;IArBJ,MAAMsD,OAAO,MAAMxD,eAAeE,MAAM2B,MAAM;IAC9C,MAAM,CAAC4B,KAAK,GAAGD,KAAKE,KAAK,CAAC;IAC1B,MAAMC,YAAY,GAAGF,KAAK,CAAC,EAAE5D,qBAAqB;IAClD,OAAO;QACL,YAAY0D,MAAM/B,GAAG;QACrB,aAAa+B,MAAMpB,IAAI;QACvB,gBAAgBpC,uBAAuBuD;QACvC,eAAerD,UAAUC;QACzB,eAAeN,wBAAuBM,oBAAAA,MAAM0D,UAAU,YAAhB1D,oBAAoB;QAC1D,gBAAgBO,WAAWP;QAC3B,sBAAsB,WAAEA,kBAAAA,MAAMS,QAAQ,qBAAdT,gBAAgB2D,KAAK,mBAAI;QACjD,iBAAiBlE,iBAAgBO,kBAAAA,MAAM4D,QAAQ,qBAAd5D,gBAAgB6D,OAAO,KAAK;QAC7D,sBAAsB,YAAE7D,mBAAAA,MAAM4D,QAAQ,qBAAd5D,iBAAgB0C,MAAM,oBAAI;QAClD,wEAAwE;QACxE,mBAAmB,YAAE1C,mBAAAA,MAAM4D,QAAQ,qBAAd5D,iBAAgB8D,GAAG,oBAAIL;QAC5C,mBAAmBA;QACnB,kBAAkB,GAAGF,KAAK,YAAY,CAAC;QACvC,wEAAwE;QACxE,kBAAkB7D,wBAAuBM,SAAAA,uBAAAA,MAAM+D,aAAa,YAAnB/D,uBAAuBA,MAAM0D,UAAU,YAAvC1D,QAA2C;QACpF,gFAAgF;QAChF,qBAAqBN,wBACnB,SAAA,kBAAA,UAAA,EAACM,iBAAAA,MAAMgE,OAAO,YAAbhE,iBAAiB,EAAE,EAAEiE,KAAK,CAAC,CAAC,EAAE,CAAC,EAAE,qBAAlC,QAAoCC,KAAK,oBAAIlE,MAAM+D,aAAa,YAAhE,QAAoE/D,MAAM0D,UAAU,YAApF,QAAwF;QAE1F,sBAAsBT,iBAAiBjD,MAAMmE,YAAY,EAAEd,MAAM/B,GAAG;QACpE,yEAAyE;QACzE,cAAc5B,uBAAuB0E,KAAKC,GAAG,CAAC,GAAG,EAACrE,qBAAAA,MAAM0D,UAAU,YAAhB1D,qBAAoB,OAAMA,wBAAAA,MAAM+D,aAAa,YAAnB/D,wBAAuB;IACrG;AACF;AAWA,OAAO,eAAesE,qBACpBC,IAA0B,EAC1BnB,OAAe,EACfpD,KAAuB;IAEvB,IAAI;YACgBA;YAW6CA;QAX/D,MAAMwE,KAAKrC,QAAOnC,sBAAAA,MAAMyE,YAAY,YAAlBzE,sBAAsB,IAAIoC,IAAI;QAChD,IAAI,CAACoC,IAAI,OAAO;QAChB,MAAMnB,QAAQ,MAAMnC,gBAAgBlB;QACpC,2EAA2E;QAC3E,IAAIqD,MAAMf,GAAG,EAAE,OAAO;QACtB,MAAM,CAACoC,UAAU,GAAG,MAAMvF,uBAAuB;YAACqF;SAAG;QACrD,IAAI,CAACE,WAAW,OAAO;QACvB,MAAMC,QAAQ,MAAMxB,sBAAsBC,SAASpD,OAAOqD;QAC1D,MAAMuB,UAAUpC,QAAQ,CAAC+B,KAAK,CAACI,KAAK,CAAC,eAAe;QACpD,iEAAiE;QACjE,0CAA0C;QAC1C,MAAME,QAAQ,MAAMzF,oBAAoBmF,SAAS,sBAAcvE,iBAAAA,MAAM8E,OAAO,qBAAb9E,eAAe8B,KAAK,mBAAI9B,MAAM8B,KAAK,GAAI9B,MAAM8B,KAAK;QACjH,sEAAsE;QACtE,0DAA0D;QAC1D,MAAMiD,OACJR,SAAS,aACL,CAAC,UAAU,EAAEI,KAAK,CAAC,iBAAiB,EAAE,GACtCJ,SAAS,aACP,CAAC,cAAc,EAAEI,KAAK,CAAC,oBAAoB,EAAE,GAC7CA,KAAK,CAAC,kBAAkB;QAChC,MAAMK,UAAU,MAAM3F,yBAAyBT,uBAAuB,CAAC2F,KAAK,EAAEI,OAAOE,OAAO;YAC1FD;YACAK,MAAM,GAAGL,QAAQ,IAAI,EAAED,KAAK,CAAC,cAAc,CAAC,IAAI,EAAEI,MAAM;QAC1D;QACA,MAAMG,SAAS,MAAMrG,UAAU;YAC7B2F,IAAIE;WACDM,SACCH,MAAMM,QAAQ,GAAG;YAAEA,UAAUN,MAAMM,QAAQ;QAAC,IAAI,CAAC;YACrDC,SAASxG,uBAAuB,CAAC2F,KAAK;;QAExC,IAAI,CAACW,OAAOG,IAAI,EAAE,OAAO;QACzB,MAAMpG,mBAAmB;QACzB,OAAO;IACT,EAAE,OAAOqG,OAAO;QACdC,QAAQD,KAAK,CAAC,+BAA+Bf,MAAMnB,SAASkC;QAC5D,OAAO;IACT;AACF;AAEA,yEAAyE,GACzE,MAAME,uBAAuB,KAAK,KAAK;AAEvC;;;;;;;CAOC,GACD,OAAO,eAAeC,yBACpBlB,IAA0B,EAC1BnB,OAAe,EACfpD,KAAuB,EACvB0F,MAAcnB,IAAI;IAElB,IAAI;QACF,MAAMpD,YAAYpC,cAAcqC,GAAG,GAAGD,SAAS;QAC/C,MAAMwE,MAAM/F,kBAAkBI,MAAM8B,KAAK,EAAEJ,GAAG,CAAC0B;QAC/C,MAAMwC,UAAU,MAAMzE,UAAU0E,cAAc,CAAC,OAAOC;sBAMNC;gBAHhCC;YAFd,MAAMA,WAAW,MAAMF,YAAYlE,GAAG,CAAC+D;YACvC,IAAI,CAACK,SAAS9D,MAAM,EAAE,OAAO;YAC7B,MAAM6D,OAAO,UAACC,iBAAAA,SAAShE,IAAI,uBAAbgE,eAAiBC,WAAW,mBAAI,CAAC,EAAE,CAACP,IAAI;YACtD,MAAMQ,MAAMC,KAAKD,GAAG;YACpB,IAAIH,CAAAA,wBAAAA,KAAMnF,KAAK,MAAK,UAAUmF,CAAAA,wBAAAA,KAAMnF,KAAK,MAAK,WAAW,OAAO;YAChE,IAAImF,CAAAA,wBAAAA,KAAMnF,KAAK,MAAK,aAAasF,MAAME,QAAOL,aAAAA,KAAKM,IAAI,YAATN,aAAa,KAAKP,sBAAsB,OAAO;YAC7FM,YAAYQ,GAAG,CAACX,KAAK;gBAAEM,aAAa;oBAAE,CAACP,IAAI,EAAE;wBAAE9E,OAAO;wBAAWyF,MAAMH;oBAAI;gBAAE;YAAE,GAAG;gBAAEvB,OAAO;YAAK;YAChG,OAAO;QACT;QACA,IAAI,CAACiB,SAAS,OAAO;QACrB,MAAMW,UAAU,MAAMjC,qBAAqBC,MAAMnB,SAASpD;QAC1D,MAAM2F,IACHW,GAAG,CAAC;YAAEL,aAAa;gBAAE,CAACP,IAAI,EAAE;oBAAE9E,OAAO2F,YAAY,SAAS,SAASA;oBAASF,MAAMF,KAAKD,GAAG;gBAAG;YAAE;QAAE,GAAG;YAAEvB,OAAO;QAAK,GAClH9C,KAAK,CAAC,CAACyD,QAAmBC,QAAQD,KAAK,CAAC,0CAA0Cf,MAAMnB,SAASkC;QACpG,OAAOiB;IACT,EAAE,OAAOjB,OAAO;QACdC,QAAQD,KAAK,CAAC,qCAAqCf,MAAMnB,SAASkC;QAClE,OAAO;IACT;AACF;AAEA;;;;;;CAMC,GACD,iEAAiE,GACjE,OAAO,SAASkB,uBAAuBpD,OAAe,EAAEpD,KAAuB;QAIrCA;IAHxC,OAAO;QACL,gBAAgBH,uBAAuBuD;QACvC,eAAerD,UAAUC;QACzB,eAAeN,wBAAuBM,oBAAAA,MAAM0D,UAAU,YAAhB1D,oBAAoB;QAC1D,mBAAmB,GAAGlB,wBAAwB,OAAO,CAAC;IACxD;AACF;AAEA,OAAO,eAAe2H,sBAAsBrD,OAAe,EAAEpD,KAAuB;IAClF,IAAI;;YACgBA,mBAOsBA;QAPxC,MAAMwE,KAAKrC,gBAAOnC,oBAAAA,MAAM0G,UAAU,qBAAhB1G,kBAAkB2G,KAAK,mBAAI,IAAIvE,IAAI;QACrD,IAAI,CAACoC,IAAI;QACT,MAAM,CAACE,UAAU,GAAG,MAAMvF,uBAAuB;YAACqF;SAAG;QACrD,IAAI,CAACE,WAAW;QAChB,MAAMC,QAAQ6B,uBAAuBpD,SAASpD;QAC9C,MAAM4G,YAAYjC,KAAK,CAAC,kBAAkB;QAC1C,MAAMC,UAAUpC,SAASO,OAAO,CAAC4B,KAAK,CAAC,eAAe;QACtD,MAAME,QAAQ,MAAMzF,8BAAoBY,iBAAAA,MAAM8E,OAAO,qBAAb9E,eAAe8B,KAAK,oBAAI9B,MAAM8B,KAAK;QAC3E,MAAMkD,UAAU,MAAM3F,yBAAyBT,wBAAwBmE,OAAO,EAAE4B,OAAOE,OAAO;YAC5FD;YACAK,MAAM,GAAGL,QAAQ,IAAI,EAAED,KAAK,CAAC,cAAc,CAAC,iDAAiD,EAAEiC,WAAW;QAC5G;QACA,MAAM1B,SAAS,MAAMrG,UAAU;YAC7B2F,IAAIE;WACDM,SACCH,MAAMM,QAAQ,GAAG;YAAEA,UAAUN,MAAMM,QAAQ;QAAC,IAAI,CAAC;YACrDC,SAASxG,wBAAwBmE,OAAO;;QAE1C,IAAImC,OAAOG,IAAI,EAAE,MAAMpG,mBAAmB;IAC5C,EAAE,OAAOqG,OAAO;QACdC,QAAQD,KAAK,CAAC,oCAAoClC,SAASkC;IAC7D;AACF;AAEA;;;;CAIC,GACD,OAAO,eAAeuB,2CACpBzD,OAAe,EACfpD,KAAuB,EACvBuC,MAA+B;IAE/B,IAAI;YAC2BvC,8BAOSA,mBAC1BA;QARZ,MAAM8G,gBAAgB3E,QAAOnC,+BAAAA,MAAM+G,qBAAqB,YAA3B/G,+BAA+B,IAAIoC,IAAI;QACpE,MAAMlD,mBAAmBI,+CAA+C;YACtE0H,WAAW5D;YACXtB,OAAO9B,MAAM8B,KAAK;YAClBH,QAAQ3B,MAAM2B,MAAM;YACpByD,SAAS;gBACP6B,aAAapH,uBAAuBuD;gBACpC8D,QAAQzI,2BAA0BuB,oBAAAA,MAAM0D,UAAU,YAAhB1D,oBAAoB;gBACtDmH,OAAO,EAACnH,eAAAA,MAAMC,KAAK,YAAXD,eAAe,EAAE,EAAEE,GAAG,CAAC,CAACC,OAAS,GAAGA,KAAKE,QAAQ,CAAC,GAAG,EAAEF,KAAKC,IAAI,EAAE,EAAEE,IAAI,CAAC;gBACjFiC,QAAQW,gBAAgBX,QAAQvC,MAAM8B,KAAK;gBAC3CsF,aAAaN,gBAAgB,CAAC,eAAe,EAAEA,cAAc,CAAC,CAAC,GAAG;YACpE;QACF;IACF,EAAE,OAAOxB,OAAO;QACdC,QAAQD,KAAK,CAAC,uDAAuDlC,SAASkC;IAChF;AACF;AAEA;;;CAGC,GACD,OAAO,eAAe+B,kCACpBjE,OAAe,EACfpD,KAAuB,EACvBuC,MAA+B,EAC/B+C,KAAa;IAEb,IAAI;YAC2BtF,8BAOSA,mBAGjBA;QAVrB,MAAM8G,gBAAgB3E,QAAOnC,+BAAAA,MAAM+G,qBAAqB,YAA3B/G,+BAA+B,IAAIoC,IAAI;QACpE,MAAMlD,mBAAmBM,qCAAqC;YAC5DwH,WAAW5D;YACXtB,OAAO9B,MAAM8B,KAAK;YAClBH,QAAQ3B,MAAM2B,MAAM;YACpByD,SAAS;gBACP6B,aAAapH,uBAAuBuD;gBACpC8D,QAAQzI,2BAA0BuB,oBAAAA,MAAM0D,UAAU,YAAhB1D,oBAAoB;gBACtDuC,QAAQW,gBAAgBX,QAAQvC,MAAM8B,KAAK;gBAC3CwD,OAAOA,SAAS;gBAChBgC,eAAe,GAAEtH,+BAAAA,MAAMuH,qBAAqB,YAA3BvH,+BAA+B;gBAChDwH,aACExH,MAAMyH,MAAM,KAAK,YACb,CAAC,wCAAwC,EAAEX,gBAAgB,CAAC,IAAI,EAAEA,eAAe,GAAG,GAAG,wCAAwC,CAAC,GAChI;YACR;QACF;IACF,EAAE,OAAOY,SAAS;QAChBnC,QAAQD,KAAK,CAAC,6CAA6ClC,SAASsE;IACtE;AACF;AAEA,0CAA0C,GAC1C,OAAO,eAAeC,2BAA2BvE,OAAe,EAAEpD,KAAuB;IACvF,IAAI;YAQoCA,mBAE1BA;YACEA;QAVd,MAAMqD,QAAQ,MAAMnC,gBAAgBlB;QACpC,MAAMd,mBAAmBK,6BAA6B;YACpDyH,WAAW5D;YACXtB,OAAO9B,MAAM8B,KAAK;YAClBH,QAAQ3B,MAAM2B,MAAM;YACpByD,SAAS;gBACP6B,aAAapH,uBAAuBuD;gBACpC8D,QAAQzI,2BAA0BuB,oBAAAA,MAAM0D,UAAU,YAAhB1D,oBAAoB;gBACtDiC,MAAM,GAAGoB,MAAMpB,IAAI,CAAC,EAAE,EAAEjC,MAAM2B,MAAM,CAAC,CAAC,CAAC;gBACvCwF,OAAO,EAACnH,eAAAA,MAAMC,KAAK,YAAXD,eAAe,EAAE,EAAEE,GAAG,CAAC,CAACC,OAAS,GAAGA,KAAKE,QAAQ,CAAC,GAAG,EAAEF,KAAKC,IAAI,EAAE,EAAEE,IAAI,CAAC;gBACjFG,QAAQ,WAAET,kBAAAA,MAAMS,QAAQ,qBAAdT,gBAAgB2D,KAAK,mBAAI;YACrC;QACF;IACF,EAAE,OAAO2B,OAAO;QACdC,QAAQD,KAAK,CAAC,wCAAwClC,SAASkC;IACjE;AACF"}

package/src/lib/server/pos-hardware-readers.d.ts

@@ -0,0 +1,115 @@
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { type PosHardwareInPersonConfig, type PosHardwareOrder } from '../model/pos-hardware';
+import type { PosTerminalAddress } from './pos-terminal';
+export declare class PosHardwareReaderRefusal extends Error {
+    readonly status: number;
+    /** A refusal the register answers with a step of its own: `needs-address` asks for the store's address. */
+    readonly reason?: 'needs-address';
+    constructor(message: string, status: number, 
+    /** A refusal the register answers with a step of its own: `needs-address` asks for the store's address. */
+    reason?: 'needs-address');
+}
+/**
+ * A store address typed at the booth, read the way the POS devices card
+ * sends it (AGL-4038): each field a trimmed string within the lengths the
+ * reader registration keeps, the country as two capitals. Anything that is
+ * not an object reads as no address.
+ */
+export declare function boothStoreAddress(raw: unknown): PosTerminalAddress | null;
+/**
+ * A reader was just registered to a store: the in-person order that sold it
+ * by this serial moves on. Attached to this workspace, or pending (then
+ * attached to it now); an order attached to another workspace is left as it
+ * is. Returns the orders it changed.
+ */
+export declare function matchRegisteredPosHardwareReader(input: {
+    hostId: string;
+    orgId: string;
+    uid: string;
+    readerId: string;
+    serialNumber: string;
+    now?: number;
+}): Promise<{
+    matched: string[];
+}>;
+/**
+ * The serial numbers of a sale's readers, taken at the sale: on the hardware
+ * order once it is recorded, or on the register sale until it is (the
+ * recorder takes them from there). Each is normalized, none may repeat, and
+ * none may already be on another sale.
+ */
+export declare function recordPosHardwareSerials(input: {
+    config: PosHardwareInPersonConfig;
+    registerOrderId?: string | null;
+    orderId?: string | null;
+    serials: unknown;
+}): Promise<{
+    orderId: string;
+    serials: string[];
+    recorded: boolean;
+}>;
+/**
+ * The store a reader bought in person is for, chosen at setup by someone
+ * who may set up devices there. The store must be the workspace's.
+ */
+export declare function choosePosHardwareStore(input: {
+    orgId: string;
+    orderId: string;
+    hostId: string;
+}): Promise<PosHardwareOrder>;
+/**
+ * "Mark set up": a reader bought in person was paired by its code or by
+ * Bluetooth with no serial taken at the sale, so nothing matched it. The
+ * workspace says so, and the order moves to Set up.
+ */
+export declare function markPosHardwareSetUp(input: {
+    orgId: string;
+    orderId: string;
+}): Promise<PosHardwareOrder>;
+/** A store's readiness for a reader: its plan and its Location. */
+export declare function posHardwareStoreReadiness(hostId: string): Promise<{
+    posPlan: boolean;
+    hasLocation: boolean;
+}>;
+/**
+ * Registers a reader sold at the booth to the buyer's chosen store, by the
+ * code it shows, while the buyer is there (AGL-4038). The sale must be
+ * attached to them with a store chosen, and the store's plan must include
+ * the point of sale.
+ *
+ * A store with no reader Location yet needs its address, which is where
+ * Stripe sets the reader up for. Booth staff may type it with the buyer
+ * (`address`): it goes exactly where the store's POS devices card would put
+ * it, through the same registration, which creates the store's Location from
+ * it and records it on the store's terminal settings. Without one the booth
+ * refuses with `needs-address`, and the buyer can add it later on that card.
+ * A store that already has its Location keeps it: an address sent for it is
+ * never used.
+ */
+export declare function registerPosHardwareAtBooth(input: {
+    config: PosHardwareInPersonConfig;
+    orderId: string;
+    registrationCode: unknown;
+    label?: unknown;
+    address?: unknown;
+    uid: string;
+}): Promise<{
+    order: PosHardwareOrder;
+    readerId: string;
+    storeAddress: PosTerminalAddress | null;
+}>;

package/src/lib/server/pos-hardware-readers.js

@@ -0,0 +1,430 @@
+import { _ as _extends } from "@swc/helpers/_/_extends";
+/**
+ * @license
+ * Copyright 2026 Aglyn LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */ import * as Aglyn from "@aglyn/aglyn/server";
+import { firebaseAdmin, getOrgForHost } from "@aglyn/tenant-data-admin";
+import { normalizePosHardwareSerial, POS_HARDWARE_ORDER_ID, POS_HARDWARE_ORDERS_COLLECTION, posHardwareSaleRecord, posHardwareSaleSetOptions, posHardwareSku } from "../model/pos-hardware.js";
+import { posHardwareAttachmentOf } from "../model/pos-hardware-in-person.js";
+import { fillPosHardwareBuyerAddress } from "./pos-hardware-buyer-record.js";
+import { hardwareOrdersRef, posHardwareInPersonOrderId, posHardwareSaleRef } from "./pos-hardware.js";
+/*==========================================
+ * A CARD READER SOLD IN PERSON, ONTO THE BUYER'S STORE (AGL-4038).
+ *
+ * Three ways, and every one ends with the order at Set up:
+ *
+ *   1. The serial number taken at the sale. Staff scan or type each reader's
+ *      serial on the sale; when the buyer registers a reader with that
+ *      serial (by its code, on the POS devices card), the reader is matched
+ *      to its unit here and the order moves to Set up once every reader on
+ *      it is — no step for the buyer. A sale nobody had attached yet is
+ *      attached to the workspace that registered its reader: only whoever
+ *      holds the reader can show its code.
+ *   2. Registered at the booth. A register user registers the reader to the
+ *      store the buyer chose, by its code, while the buyer stands there:
+ *      the store's plan must include the point of sale and the store must
+ *      have a reader Location (its address), as for any registration.
+ *   3. Paired later with no serial. The buyer registers it by code (or pairs
+ *      an M2 by Bluetooth, which no server sees) and says "Mark set up" on
+ *      the Hardware card; staff can mark it too.
+ *=========================================*/ export class PosHardwareReaderRefusal extends Error {
+    constructor(message, status, /** A refusal the register answers with a step of its own: `needs-address` asks for the store's address. */ reason){
+        super(message), this.status = status, this.reason = reason;
+    }
+}
+/**
+ * A store address typed at the booth, read the way the POS devices card
+ * sends it (AGL-4038): each field a trimmed string within the lengths the
+ * reader registration keeps, the country as two capitals. Anything that is
+ * not an object reads as no address.
+ */ export function boothStoreAddress(raw) {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw)) return null;
+    const field = (key, max)=>{
+        var _raw_key;
+        return String((_raw_key = raw[key]) != null ? _raw_key : '').trim().slice(0, max);
+    };
+    const line2 = field('line2', 200);
+    const state = field('state', 100);
+    return _extends({
+        line1: field('line1', 200)
+    }, line2 ? {
+        line2
+    } : {}, {
+        city: field('city', 100)
+    }, state ? {
+        state
+    } : {}, {
+        postalCode: field('postalCode', 20),
+        country: field('country', 2).toUpperCase()
+    });
+}
+function firestore() {
+    return firebaseAdmin.app().firestore();
+}
+/** Whether every reader on the order is registered: then it is Set up. */ function everyReaderRegistered(units) {
+    return units.length > 0 && units.every((unit)=>Boolean(unit.readerId));
+}
+/** The order's units with `serial` registered as `readerId` on `hostId`, or null when no unit has it. */ function withRegisteredUnit(units, serial, readerId, hostId, now) {
+    const at = units.findIndex((unit)=>unit.serialNumber === serial);
+    if (at < 0) return null;
+    if (units[at].readerId === readerId) return [
+        ...units
+    ];
+    return units.map((unit, index)=>index === at ? _extends({}, unit, {
+            readerId,
+            hostId,
+            registeredAtMs: now
+        }) : unit);
+}
+/**
+ * A reader was just registered to a store: the in-person order that sold it
+ * by this serial moves on. Attached to this workspace, or pending (then
+ * attached to it now); an order attached to another workspace is left as it
+ * is. Returns the orders it changed.
+ */ export async function matchRegisteredPosHardwareReader(input) {
+    const serial = normalizePosHardwareSerial(input.serialNumber);
+    if (!serial || !input.orgId) return {
+        matched: []
+    };
+    const found = await firestore().collectionGroup(POS_HARDWARE_ORDERS_COLLECTION).where('serialNumbers', 'array-contains', serial).limit(5).get();
+    const matched = [];
+    for (const doc of found.docs){
+        var _input_now;
+        const orderId = String(doc.id);
+        const now = (_input_now = input.now) != null ? _input_now : Date.now();
+        const changed = await firestore().runTransaction(async (transaction)=>{
+            var _ref, _sale_get, _before_units, _ref1, _ref2, _ref3;
+            var _before_attachment, _before_attachment1, _before_attachment2, _before_attachment3;
+            const saleRef = posHardwareSaleRef(orderId);
+            const sale = await transaction.get(saleRef);
+            const fromOrgId = String((_ref = (_sale_get = sale.get('orgId')) != null ? _sale_get : doc.data().orgId) != null ? _ref : '');
+            const fromRef = hardwareOrdersRef(fromOrgId).doc(orderId);
+            const from = await transaction.get(fromRef);
+            if (!from.exists) return false;
+            const before = from.data();
+            if (before.source !== 'in_person' || before.status === 'canceled' || before.status === 'refunded') return false;
+            const pending = ((_before_attachment = before.attachment) == null ? void 0 : _before_attachment.state) !== 'attached';
+            if (!pending && fromOrgId !== input.orgId) return false;
+            const units = withRegisteredUnit((_before_units = before.units) != null ? _before_units : [], serial, input.readerId, input.hostId, now);
+            if (!units) return false;
+            const done = everyReaderRegistered(units);
+            const after = _extends({}, before, pending ? {
+                orgId: input.orgId,
+                hostId: input.hostId,
+                createdBy: input.uid,
+                attachment: _extends({}, posHardwareAttachmentOf({
+                    uid: input.uid,
+                    orgId: input.orgId,
+                    hostId: input.hostId,
+                    email: (_ref1 = (_before_attachment1 = before.attachment) == null ? void 0 : _before_attachment1.email) != null ? _ref1 : null,
+                    attachedBy: '',
+                    attachedAtMs: now,
+                    // What the register typed of the buyer stays (AGL-4038).
+                    name: (_ref2 = (_before_attachment2 = before.attachment) == null ? void 0 : _before_attachment2.name) != null ? _ref2 : null,
+                    address: (_ref3 = (_before_attachment3 = before.attachment) == null ? void 0 : _before_attachment3.address) != null ? _ref3 : null
+                }))
+            } : {
+                hostId: before.hostId || input.hostId
+            }, {
+                units
+            }, done && before.status === 'delivered' ? {
+                status: 'registered',
+                registeredAtMs: now
+            } : {}, {
+                updatedAtMs: now
+            });
+            if (after.orgId === fromOrgId) {
+                transaction.set(fromRef, after);
+            } else {
+                transaction.create(hardwareOrdersRef(after.orgId).doc(orderId), after);
+                transaction.delete(fromRef);
+            }
+            transaction.set(saleRef, posHardwareSaleRecord(orderId, after), posHardwareSaleSetOptions(after));
+            return true;
+        });
+        if (changed) matched.push(orderId);
+    }
+    // The buyer's address for the reseller's records, from the store the
+    // reader is now on, where the sale has none yet.
+    for (const orderId of matched)await fillPosHardwareBuyerAddress({
+        orgId: input.orgId,
+        orderId
+    });
+    return {
+        matched
+    };
+}
+/**
+ * The serial numbers of a sale's readers, taken at the sale: on the hardware
+ * order once it is recorded, or on the register sale until it is (the
+ * recorder takes them from there). Each is normalized, none may repeat, and
+ * none may already be on another sale.
+ */ export async function recordPosHardwareSerials(input) {
+    var _input_registerOrderId, _input_orderId;
+    const serials = (Array.isArray(input.serials) ? input.serials : []).map(normalizePosHardwareSerial).filter(Boolean);
+    if (new Set(serials).size !== serials.length) {
+        throw new PosHardwareReaderRefusal('A serial number is listed twice.', 400);
+    }
+    const registerOrderId = String((_input_registerOrderId = input.registerOrderId) != null ? _input_registerOrderId : '');
+    const orderId = registerOrderId ? posHardwareInPersonOrderId(input.config.sellerHostId, registerOrderId) : String((_input_orderId = input.orderId) != null ? _input_orderId : '');
+    if (!POS_HARDWARE_ORDER_ID.test(orderId)) throw new PosHardwareReaderRefusal('Name the sale.', 400);
+    for (const serial of serials){
+        const elsewhere = await firestore().collectionGroup(POS_HARDWARE_ORDERS_COLLECTION).where('serialNumbers', 'array-contains', serial).limit(2).get();
+        if (elsewhere.docs.some((doc)=>String(doc.id) !== orderId)) {
+            throw new PosHardwareReaderRefusal(`Serial number ${serial} is already on another sale.`, 409);
+        }
+    }
+    const saleRef = posHardwareSaleRef(orderId);
+    return firestore().runTransaction(async (transaction)=>{
+        var _sale_get, _before_units;
+        var _before_posSale;
+        const sale = await transaction.get(saleRef);
+        if (!sale.exists) {
+            var _register_get;
+            if (!registerOrderId) throw new PosHardwareReaderRefusal('No such card reader sale.', 404);
+            const registerRef = firestore().collection('hosts').doc(input.config.sellerHostId).collection('orders').doc(registerOrderId);
+            const register = await transaction.get(registerRef);
+            const status = String((_register_get = register.get('status')) != null ? _register_get : '');
+            if (!register.exists || status !== 'pending' && status !== 'paid') {
+                throw new PosHardwareReaderRefusal('No open or paid sale on this register by that number.', 404);
+            }
+            transaction.set(registerRef, {
+                hardwareSerials: serials
+            }, {
+                merge: true
+            });
+            return {
+                orderId,
+                serials,
+                recorded: false
+            };
+        }
+        const ref = hardwareOrdersRef(String((_sale_get = sale.get('orgId')) != null ? _sale_get : '')).doc(orderId);
+        const snapshot = await transaction.get(ref);
+        if (!snapshot.exists) throw new PosHardwareReaderRefusal('No such card reader sale.', 404);
+        const before = snapshot.data();
+        if (before.source !== 'in_person' || ((_before_posSale = before.posSale) == null ? void 0 : _before_posSale.hostId) !== input.config.sellerHostId) {
+            throw new PosHardwareReaderRefusal('Only a card reader sold in person here takes serial numbers.', 409);
+        }
+        const units = (_before_units = before.units) != null ? _before_units : [];
+        if (serials.length > units.length) {
+            throw new PosHardwareReaderRefusal(`This sale has ${units.length} reader${units.length === 1 ? '' : 's'}.`, 400);
+        }
+        // Serials fill the readers not yet set up, in order; a registered one keeps its own.
+        const open = units.map((unit, index)=>({
+                unit,
+                index
+            })).filter(({ unit })=>!unit.readerId);
+        const next = [
+            ...units
+        ];
+        open.forEach(({ index }, position)=>{
+            var _serials_position;
+            next[index] = _extends({}, units[index], {
+                serialNumber: (_serials_position = serials[position]) != null ? _serials_position : null
+            });
+        });
+        transaction.update(ref, {
+            units: next,
+            serialNumbers: next.flatMap((unit)=>unit.serialNumber ? [
+                    unit.serialNumber
+                ] : []),
+            updatedAtMs: Date.now()
+        });
+        return {
+            orderId,
+            serials,
+            recorded: true
+        };
+    });
+}
+/** An in-person order of this workspace, for a change by its own people. */ function workspaceOrder(orgId, orderId) {
+    if (!POS_HARDWARE_ORDER_ID.test(orderId)) throw new PosHardwareReaderRefusal('No such order.', 404);
+    return {
+        ref: hardwareOrdersRef(orgId).doc(orderId)
+    };
+}
+/**
+ * The store a reader bought in person is for, chosen at setup by someone
+ * who may set up devices there. The store must be the workspace's.
+ */ export async function choosePosHardwareStore(input) {
+    const { ref } = workspaceOrder(input.orgId, input.orderId);
+    const chosen = await firestore().runTransaction(async (transaction)=>{
+        const snapshot = await transaction.get(ref);
+        if (!snapshot.exists) throw new PosHardwareReaderRefusal('No such order.', 404);
+        const before = snapshot.data();
+        if (before.source !== 'in_person') throw new PosHardwareReaderRefusal('Only a reader bought in person waits for a store.', 409);
+        const after = _extends({}, before, {
+            hostId: input.hostId
+        }, before.attachment ? {
+            attachment: _extends({}, before.attachment, {
+                hostId: input.hostId
+            })
+        } : {}, {
+            updatedAtMs: Date.now()
+        });
+        transaction.set(ref, after);
+        transaction.set(posHardwareSaleRef(input.orderId), posHardwareSaleRecord(input.orderId, after), posHardwareSaleSetOptions(after));
+        return after;
+    });
+    await fillPosHardwareBuyerAddress({
+        orgId: input.orgId,
+        orderId: input.orderId
+    });
+    return chosen;
+}
+/**
+ * "Mark set up": a reader bought in person was paired by its code or by
+ * Bluetooth with no serial taken at the sale, so nothing matched it. The
+ * workspace says so, and the order moves to Set up.
+ */ export async function markPosHardwareSetUp(input) {
+    const { ref } = workspaceOrder(input.orgId, input.orderId);
+    return firestore().runTransaction(async (transaction)=>{
+        const snapshot = await transaction.get(ref);
+        if (!snapshot.exists) throw new PosHardwareReaderRefusal('No such order.', 404);
+        const before = snapshot.data();
+        if (before.source !== 'in_person') throw new PosHardwareReaderRefusal('Only a reader bought in person is marked set up here.', 409);
+        if (before.status === 'registered') return before;
+        if (before.status !== 'delivered') throw new PosHardwareReaderRefusal('This order can no longer be set up.', 409);
+        const now = Date.now();
+        const after = _extends({}, before, {
+            status: 'registered',
+            registeredAtMs: now,
+            updatedAtMs: now
+        });
+        transaction.set(ref, after);
+        transaction.set(posHardwareSaleRef(input.orderId), posHardwareSaleRecord(input.orderId, after), posHardwareSaleSetOptions(after));
+        return after;
+    });
+}
+/** A store's readiness for a reader: its plan and its Location. */ export async function posHardwareStoreReadiness(hostId) {
+    const [owner, config] = await Promise.all([
+        getOrgForHost(hostId).catch(()=>null),
+        firestore().collection('hosts').doc(hostId).collection('terminal').doc('config').get()
+    ]);
+    return {
+        posPlan: Aglyn.checkEntitlement(owner == null ? void 0 : owner.org, 'pos'),
+        hasLocation: Boolean(config.exists && config.get('stripeLocationId'))
+    };
+}
+/**
+ * Registers a reader sold at the booth to the buyer's chosen store, by the
+ * code it shows, while the buyer is there (AGL-4038). The sale must be
+ * attached to them with a store chosen, and the store's plan must include
+ * the point of sale.
+ *
+ * A store with no reader Location yet needs its address, which is where
+ * Stripe sets the reader up for. Booth staff may type it with the buyer
+ * (`address`): it goes exactly where the store's POS devices card would put
+ * it, through the same registration, which creates the store's Location from
+ * it and records it on the store's terminal settings. Without one the booth
+ * refuses with `needs-address`, and the buyer can add it later on that card.
+ * A store that already has its Location keeps it: an address sent for it is
+ * never used.
+ */ export async function registerPosHardwareAtBooth(input) {
+    var _sale_get;
+    var _order_posSale, _order_attachment;
+    if (!POS_HARDWARE_ORDER_ID.test(input.orderId)) throw new PosHardwareReaderRefusal('Name the sale.', 400);
+    const sale = await posHardwareSaleRef(input.orderId).get();
+    if (!sale.exists) {
+        throw new PosHardwareReaderRefusal('Take payment for the sale first, then register its reader.', 409);
+    }
+    const orgId = String((_sale_get = sale.get('orgId')) != null ? _sale_get : '');
+    const snapshot = await hardwareOrdersRef(orgId).doc(input.orderId).get();
+    const order = snapshot.data();
+    if (!order || order.source !== 'in_person' || ((_order_posSale = order.posSale) == null ? void 0 : _order_posSale.hostId) !== input.config.sellerHostId) {
+        throw new PosHardwareReaderRefusal('No such card reader sale.', 404);
+    }
+    if (((_order_attachment = order.attachment) == null ? void 0 : _order_attachment.state) !== 'attached' || !order.attachment.orgId) {
+        throw new PosHardwareReaderRefusal('Attach the sale to the buyer first.', 409);
+    }
+    const hostId = order.hostId;
+    if (!hostId) throw new PosHardwareReaderRefusal('Choose the buyer’s store first.', 409);
+    const readiness = await posHardwareStoreReadiness(hostId);
+    if (!readiness.posPlan) {
+        throw new PosHardwareReaderRefusal('Their workspace needs a plan with the point of sale before a reader can be added. They can add it, then set the reader up themselves.', 409);
+    }
+    // The store's address, only for a store with no Location: one that has
+    // its Location keeps it, whatever was sent.
+    const storeAddress = readiness.hasLocation ? null : boothStoreAddress(input.address);
+    if (!readiness.hasLocation) {
+        if (!storeAddress) {
+            throw new PosHardwareReaderRefusal('Their store has no address for card readers yet. Enter the store’s address to register the reader now, or they add it when they set the reader up on the POS devices card.', 409, 'needs-address');
+        }
+        const problem = (await import("./pos-terminal.js")).posTerminalAddressProblem(storeAddress);
+        if (problem) throw new PosHardwareReaderRefusal(problem, 400, 'needs-address');
+    }
+    const { registerPosTerminalReader } = await import("./pos-readers.js");
+    const registered = await registerPosTerminalReader(_extends({
+        hostId,
+        orgId,
+        uid: input.uid,
+        registrationCode: input.registrationCode,
+        label: input.label
+    }, storeAddress ? {
+        address: storeAddress
+    } : {}));
+    if ('error' in registered) throw new PosHardwareReaderRefusal(registered.error, registered.status);
+    // A reader with a serial matched its unit as it registered. One without
+    // (or not on the sale) takes the first reader of the sale not set up yet.
+    const ref = hardwareOrdersRef(orgId).doc(input.orderId);
+    const after = await firestore().runTransaction(async (transaction)=>{
+        var _now_units;
+        const now = (await transaction.get(ref)).data();
+        const units = (_now_units = now.units) != null ? _now_units : [];
+        if (units.some((unit)=>unit.readerId === registered.id)) return now;
+        const at = units.findIndex((unit)=>{
+            var _posHardwareSku;
+            return !unit.readerId && ((_posHardwareSku = posHardwareSku(unit.sku)) == null ? void 0 : _posHardwareSku.kind) === 'reader';
+        });
+        if (at < 0) return now;
+        const stamp = Date.now();
+        const next = units.map((unit, index)=>{
+            var _unit_serialNumber;
+            return index === at ? _extends({}, unit, {
+                serialNumber: (_unit_serialNumber = unit.serialNumber) != null ? _unit_serialNumber : registered.reader.serialNumber ? normalizePosHardwareSerial(registered.reader.serialNumber) : null,
+                readerId: registered.id,
+                hostId,
+                registeredAtMs: stamp
+            }) : unit;
+        });
+        const done = everyReaderRegistered(next);
+        const updated = _extends({}, now, {
+            units: next,
+            serialNumbers: next.flatMap((unit)=>unit.serialNumber ? [
+                    unit.serialNumber
+                ] : [])
+        }, done && now.status === 'delivered' ? {
+            status: 'registered',
+            registeredAtMs: stamp
+        } : {}, {
+            updatedAtMs: stamp
+        });
+        transaction.set(ref, updated);
+        transaction.set(posHardwareSaleRef(input.orderId), posHardwareSaleRecord(input.orderId, updated), posHardwareSaleSetOptions(updated));
+        return updated;
+    });
+    await fillPosHardwareBuyerAddress({
+        orgId,
+        orderId: input.orderId
+    });
+    return {
+        order: after,
+        readerId: registered.id,
+        storeAddress
+    };
+}
+
+//# sourceMappingURL=pos-hardware-readers.js.map