@aglyn/plugins-commerce 1.0.0-beta.285 → 1.0.0-beta.287

package/src/lib/server/pos-hardware.js

@@ -15,9 +15,11 @@ import { _ as _extends } from "@swc/helpers/_/_extends";
  * See the License for the specific language governing permissions and
  * limitations under the License.
  */ import { createHash } from "crypto";
+import * as Aglyn from "@aglyn/aglyn/server";
 import { firebaseAdmin, readOrgBilling } from "@aglyn/tenant-data-admin";
 import { hostConsoleUrl } from "@aglyn/tenant-data-admin/server/host-console-link";
-import { encodePosHardwareLines, isPosHardwareShippingMethod, POS_HARDWARE_ANCHOR, parsePosHardwareConfig, POS_HARDWARE_CURRENCY, POS_HARDWARE_METADATA_TYPE, POS_HARDWARE_ORDERS_COLLECTION, POS_HARDWARE_SALES_COLLECTION, POS_HARDWARE_SHIP_COUNTRIES, POS_HARDWARE_SHIPPING_LABELS, posHardwareOffers, posHardwareSku, pricePosHardwareCart } from "../model/pos-hardware.js";
+import { encodePosHardwareLines, isPosHardwareShippingMethod, POS_HARDWARE_ANCHOR, parsePosHardwareConfig, parsePosHardwareInPersonConfig, POS_HARDWARE_CURRENCY, POS_HARDWARE_METADATA_TYPE, POS_HARDWARE_ORDERS_COLLECTION, POS_HARDWARE_SALES_COLLECTION, POS_HARDWARE_SHIP_COUNTRIES, POS_HARDWARE_SHIPPING_LABELS, posHardwareOffers, posHardwareOrderSource, posHardwareSku, pricePosHardwareCart } from "../model/pos-hardware.js";
+import { mayVisitPosHardwareShop } from "../model/plugin-permissions.js";
 import { authorizePosStaff, posIdempotencyKey, posRequestBody } from "./pos-auth.js";
 import { posStripe, posTerminalAvailable } from "./pos-stripe.js";
 /*==========================================
@@ -28,9 +30,12 @@ import { posStripe, posTerminalAvailable } from "./pos-stripe.js";
  *   checkout  a Stripe Checkout Session for the basket, on the PLATFORM
  *   orders    this site's hardware orders, newest first
  *
- * Gated like the register (`authorizePosStaff`: an admin or editor of the
- * site with `managePos`, on a plan with POS), because the readers it sells
- * are the register's.
+ * Gated like the register (`authorizePosStaff`, on a plan with POS), because
+ * the readers it sells are the register's, with one difference (AGL-4047):
+ * the shop admits whoever works the register (`managePos`) AND whoever may
+ * buy hardware (`posBuyHardware`), which stands on its own — a bookkeeper
+ * with no register orders the store's readers. A checkout needs
+ * `posBuyHardware`; seeing the catalog and the site's orders needs either.
  *
  * THE SALE IS THE PLATFORM'S. The session is created with the platform key
  * and NO connected account, `transfer_data` or application fee: the merchant
@@ -43,6 +48,23 @@ import { posStripe, posTerminalAvailable } from "./pos-stripe.js";
     if (!posTerminalAvailable()) return null;
     return parsePosHardwareConfig(env);
 }
+/**
+ * The platform's own store that sells hardware in person (AGL-4038), or
+ * `null` while that is off. Read like the shop's other figures; a store is
+ * the seller only when BOTH its id and its workspace's match, so a site moved
+ * to another workspace stops selling hardware rather than selling it for them.
+ */ export function posHardwareInPersonConfig(env = process.env) {
+    return parsePosHardwareInPersonConfig(env);
+}
+/** Whether a store, owned by `orgId`, is the platform's own hardware seller. */ export function isPosHardwareSellerStore(config, hostId, orgId) {
+    return Boolean(config) && (config == null ? void 0 : config.sellerHostId) === hostId && (config == null ? void 0 : config.sellerOrgId) === orgId;
+}
+/**
+ * An in-person order's id, from the register sale it came from: one register
+ * sale is one hardware order however often its completion is told.
+ */ export function posHardwareInPersonOrderId(hostId, registerOrderId) {
+    return `hw_${createHash('sha256').update(`pos:${hostId}:${registerOrderId}`).digest('hex').slice(0, 20)}`;
+}
 /** The order's id, derived from the attempt so a repeated press is one order. */ export function posHardwareOrderId(orgId, hostId, attemptKey) {
     return `hw_${createHash('sha256').update(`${orgId}:${hostId}:${attemptKey}`).digest('hex').slice(0, 20)}`;
 }
@@ -60,7 +82,7 @@ export function hardwareOrdersRef(orgId) {
     return firebaseAdmin.app().firestore().collection(POS_HARDWARE_SALES_COLLECTION).doc(orderId);
 }
 /** An order as the merchant's card shows it: no Stripe ids, no staff notes. */ export function merchantHardwareOrderView(id, order) {
-    var _order_lines, _order_subtotalCents, _ref, _ref1, _order_taxCents, _order_totalCents, _order_tracking, _order_createdAtMs, _ref2, _order_updatedAtMs;
+    var _order_lines, _order_subtotalCents, _ref, _ref1, _order_taxCents, _order_totalCents, _order_tracking, _order_createdAtMs, _ref2, _order_updatedAtMs, _order_discountCents, _order_units, _order_refundedCents;
     var _order_shipping, _order_shipping1;
     return {
         id,
@@ -80,7 +102,17 @@ export function hardwareOrdersRef(orgId) {
         totalCents: (_order_totalCents = order.totalCents) != null ? _order_totalCents : 0,
         tracking: (_order_tracking = order.tracking) != null ? _order_tracking : null,
         createdAtMs: (_order_createdAtMs = order.createdAtMs) != null ? _order_createdAtMs : 0,
-        updatedAtMs: (_ref2 = (_order_updatedAtMs = order.updatedAtMs) != null ? _order_updatedAtMs : order.createdAtMs) != null ? _ref2 : 0
+        updatedAtMs: (_ref2 = (_order_updatedAtMs = order.updatedAtMs) != null ? _order_updatedAtMs : order.createdAtMs) != null ? _ref2 : 0,
+        // Bought in person (AGL-4038): handed over at the sale, no parcel.
+        source: posHardwareOrderSource(order),
+        discountCents: (_order_discountCents = order.discountCents) != null ? _order_discountCents : 0,
+        /** Readers still to set up, for an in-person order that took serials. */ readersToSetUp: ((_order_units = order.units) != null ? _order_units : []).filter((unit)=>!unit.readerId).length,
+        refundedCents: (_order_refundedCents = order.refundedCents) != null ? _order_refundedCents : 0,
+        /** The buyer's return request and what was decided, without who asked. */ returnRequest: order.returnRequest ? {
+            state: order.returnRequest.state,
+            requestedAtMs: order.returnRequest.requestedAtMs,
+            note: order.returnRequest.note
+        } : null
     };
 }
 /** The POS settings page of a site, as an absolute console URL. */ export async function posSettingsUrl(hostId) {
@@ -91,6 +123,59 @@ export function hardwareOrdersRef(orgId) {
     const joiner = path.includes('?') ? '&' : '?';
     return `${path}${joiner}${query}#${hash}`;
 }
+/**
+ * The readers this workspace bought in person that are not set up yet
+ * (AGL-4038): whether its plan includes the point of sale, its stores and
+ * whether each can take a reader, and each order with what it waits for.
+ * Nothing at all while the in-person sale is off.
+ */ export async function waitingInPersonReaders(orgId, hostId) {
+    if (!posHardwareInPersonConfig() || !orgId) return {
+        posPlan: false,
+        stores: [],
+        orders: []
+    };
+    const firestore = firebaseAdmin.app().firestore();
+    const [orders, org, hosts] = await Promise.all([
+        hardwareOrdersRef(orgId).where('attachment.state', '==', 'attached').where('status', '==', 'delivered').limit(20).get(),
+        firestore.collection('orgs').doc(orgId).get(),
+        firestore.collection('hosts').where('orgId', '==', orgId).limit(20).get()
+    ]);
+    if (!orders.docs.length) return {
+        posPlan: false,
+        stores: [],
+        orders: []
+    };
+    const stores = await Promise.all(hosts.docs.map(async (doc)=>{
+        var _ref, _doc_get;
+        const id = String(doc.id);
+        const [terminal, setupUrl] = await Promise.all([
+            firestore.collection('hosts').doc(id).collection('terminal').doc('config').get(),
+            posSettingsUrl(id)
+        ]);
+        return {
+            hostId: id,
+            name: String((_ref = (_doc_get = doc.get('name')) != null ? _doc_get : doc.get('title')) != null ? _ref : id),
+            hasLocation: Boolean(terminal.exists && terminal.get('stripeLocationId')),
+            setupUrl: `${setupUrl.split('#')[0]}#pos-devices`
+        };
+    }));
+    return {
+        posPlan: Aglyn.checkEntitlement(org.data(), 'pos'),
+        stores,
+        // Every store's, this store's first: a reader waits wherever the
+        // workspace's people look.
+        orders: orders.docs.map((doc)=>({
+                id: String(doc.id),
+                order: doc.data()
+            })).filter(({ order })=>order.source === 'in_person').sort((a, b)=>Number(b.order.hostId === hostId) - Number(a.order.hostId === hostId)).map(({ id, order })=>{
+            var _order_units;
+            return _extends({}, merchantHardwareOrderView(id, order), {
+                hostId: order.hostId,
+                serialsTaken: ((_order_units = order.units) != null ? _order_units : []).filter((unit)=>unit.serialNumber && !unit.readerId).length
+            });
+        })
+    };
+}
 export const posHardwareHandler = async (req, res)=>{
     var _body_hostId, _body_action;
     if (req.method !== 'POST') return res.status(405).json({
@@ -98,15 +183,85 @@ export const posHardwareHandler = async (req, res)=>{
     });
     const body = posRequestBody(req);
     const hostId = String((_body_hostId = body['hostId']) != null ? _body_hostId : '');
-    const gate = await authorizePosStaff(req, hostId);
+    const action = String((_body_action = body['action']) != null ? _body_action : '');
+    // BUYING IS ITS OWN KEY (AGL-4047): anyone who works the register or may
+    // buy hardware sees what the shop offers and what this site ordered, and
+    // only a member holding "Buy point of sale hardware" — which follows
+    // `managePos` until a role or the member sets it, and may be granted
+    // without it — starts a checkout that the workspace pays for.
+    //
+    // A READER BOUGHT IN PERSON (AGL-4038): `waiting` is read without the
+    // point of sale plan, because a workspace without it is exactly the one
+    // that must be told to add it first; choosing its store and marking it set
+    // up are setting up devices (`posDevices`) on the store named.
+    const settingUp = action === 'choose-store' || action === 'mark-set-up';
+    const gate = await authorizePosStaff(req, hostId, action === 'checkout' ? 'posBuyHardware' : settingUp ? 'posDevices' : undefined, mayVisitPosHardwareShop, // A workspace whose plan lost the point of sale still sees what it bought
+    // and may ask to return a reader bought in person.
+    action === 'waiting' || action === 'orders' || action === 'request-return' ? {
+        planRequired: false
+    } : {});
     if ('error' in gate) return res.status(gate.status).json({
         error: gate.error
     });
     const staff = gate.staff;
     const config = posHardwareConfig();
-    const action = String((_body_action = body['action']) != null ? _body_action : '');
     try {
         switch(action){
+            case 'waiting':
+                return res.status(200).json(await waitingInPersonReaders(staff.orgId, staff.hostId));
+            case 'request-return':
+                {
+                    var _body_orderId;
+                    const returns = await import("./pos-hardware-returns.js");
+                    const orderId = String((_body_orderId = body['orderId']) != null ? _body_orderId : '');
+                    try {
+                        const order = await returns.requestPosHardwareReturn({
+                            orgId: staff.orgId,
+                            orderId,
+                            uid: staff.uid,
+                            reason: body['reason']
+                        });
+                        return res.status(200).json({
+                            ok: true,
+                            order: merchantHardwareOrderView(orderId, order)
+                        });
+                    } catch (error) {
+                        if (error instanceof returns.PosHardwareReturnRefusal) {
+                            return res.status(error.status).json({
+                                error: error.message
+                            });
+                        }
+                        throw error;
+                    }
+                }
+            case 'choose-store':
+            case 'mark-set-up':
+                {
+                    var _body_orderId1;
+                    const readers = await import("./pos-hardware-readers.js");
+                    const orderId = String((_body_orderId1 = body['orderId']) != null ? _body_orderId1 : '');
+                    try {
+                        const order = action === 'choose-store' ? await readers.choosePosHardwareStore({
+                            orgId: staff.orgId,
+                            orderId,
+                            hostId: staff.hostId
+                        }) : await readers.markPosHardwareSetUp({
+                            orgId: staff.orgId,
+                            orderId
+                        });
+                        return res.status(200).json({
+                            ok: true,
+                            order: merchantHardwareOrderView(orderId, order)
+                        });
+                    } catch (error) {
+                        if (error instanceof readers.PosHardwareReaderRefusal) {
+                            return res.status(error.status).json({
+                                error: error.message
+                            });
+                        }
+                        throw error;
+                    }
+                }
             case 'catalog':
                 if (!config) return res.status(200).json({
                     available: false
@@ -124,9 +279,19 @@ export const posHardwareHandler = async (req, res)=>{
                 });
             case 'orders':
                 {
-                    const snapshot = await hardwareOrdersRef(staff.orgId).where('hostId', '==', staff.hostId).orderBy('createdAtMs', 'desc').limit(50).get();
+                    // This site's orders, and the readers bought in person for the
+                    // workspace that wait for a store to be chosen at setup (AGL-4038).
+                    // A sale on the selling workspace's own To attach list is never one.
+                    const [site, workspace] = await Promise.all([
+                        hardwareOrdersRef(staff.orgId).where('hostId', '==', staff.hostId).orderBy('createdAtMs', 'desc').limit(50).get(),
+                        hardwareOrdersRef(staff.orgId).where('hostId', '==', '').where('attachment.state', '==', 'attached').orderBy('createdAtMs', 'desc').limit(50).get()
+                    ]);
+                    const orders = [
+                        ...site.docs,
+                        ...workspace.docs
+                    ].map((doc)=>merchantHardwareOrderView(String(doc.id), doc.data())).sort((a, b)=>b.createdAtMs - a.createdAtMs).slice(0, 50);
                     return res.status(200).json({
-                        orders: snapshot.docs.map((doc)=>merchantHardwareOrderView(String(doc.id), doc.data()))
+                        orders
                     });
                 }
             case 'checkout':

package/src/lib/server/pos-hardware.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-hardware.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { createHash } from 'crypto'\nimport type { PluginApiHandler } from '@aglyn/aglyn/server'\nimport { firebaseAdmin, readOrgBilling } from '@aglyn/tenant-data-admin'\nimport { hostConsoleUrl } from '@aglyn/tenant-data-admin/server/host-console-link'\nimport {\n  encodePosHardwareLines,\n  isPosHardwareShippingMethod,\n  POS_HARDWARE_ANCHOR,\n  parsePosHardwareConfig,\n  POS_HARDWARE_CURRENCY,\n  POS_HARDWARE_METADATA_TYPE,\n  POS_HARDWARE_ORDERS_COLLECTION,\n  POS_HARDWARE_SALES_COLLECTION,\n  POS_HARDWARE_SHIP_COUNTRIES,\n  POS_HARDWARE_SHIPPING_LABELS,\n  posHardwareOffers,\n  posHardwareSku,\n  pricePosHardwareCart,\n  type PosHardwareConfig,\n  type PosHardwareOrder,\n} from '../model/pos-hardware'\nimport { authorizePosStaff, posIdempotencyKey, posRequestBody } from './pos-auth'\nimport { posStripe, posTerminalAvailable } from './pos-stripe'\n\n/*==========================================\n * `POST /api/commerce/pos-hardware` (AGL-4038): the merchant's half of the\n * POS hardware shop, behind the Hardware card on Products → Point of sale.\n *\n *   catalog   what is on offer and at what price, or `available: false`\n *   checkout  a Stripe Checkout Session for the basket, on the PLATFORM\n *   orders    this site's hardware orders, newest first\n *\n * Gated like the register (`authorizePosStaff`: an admin or editor of the\n * site with `managePos`, on a plan with POS), because the readers it sells\n * are the register's.\n *\n * THE SALE IS THE PLATFORM'S. The session is created with the platform key\n * and NO connected account, `transfer_data` or application fee: the merchant\n * is the buyer here, and the platform is the seller of record that places\n * the order with Stripe. The order document is written by the webhook once\n * Stripe says the session is paid (`pos-hardware-webhook.ts`), never here.\n *=========================================*/\n\n/** The shop's config from this deployment, or `null` while it is hidden. */\nexport function posHardwareConfig(\n  env: Record<string, string | undefined> = process.env,\n): PosHardwareConfig | null {\n  // A reader the platform cannot yet take payments on is not for sale: the\n  // shop opens only where the register offers card readers at all.\n  if (!posTerminalAvailable()) return null\n  return parsePosHardwareConfig(env)\n}\n\n/** The order's id, derived from the attempt so a repeated press is one order. */\nexport function posHardwareOrderId(orgId: string, hostId: string, attemptKey: string): string {\n  return `hw_${createHash('sha256').update(`${orgId}:${hostId}:${attemptKey}`).digest('hex').slice(0, 20)}`\n}\n\n/** The number a person reads: `HW-` and six characters of the id. */\nexport function posHardwareOrderNumber(orderId: string): string {\n  return `HW-${orderId.replace(/^hw_/, '').slice(0, 6).toUpperCase()}`\n}\n\nexport function hardwareOrdersRef(orgId: string) {\n  return firebaseAdmin\n    .app()\n    .firestore()\n    .collection('orgs')\n    .doc(orgId)\n    .collection(POS_HARDWARE_ORDERS_COLLECTION)\n}\n\n/**\n * `posHardwareSales/{orderId}`, the retained sale record beside each order\n * (see `PosHardwareSaleRecord`). Top-level on purpose: the workspace erasure\n * cannot reach it.\n */\nexport function posHardwareSaleRef(orderId: string) {\n  return firebaseAdmin.app().firestore().collection(POS_HARDWARE_SALES_COLLECTION).doc(orderId)\n}\n\n/** An order as the merchant's card shows it: no Stripe ids, no staff notes. */\nexport function merchantHardwareOrderView(id: string, order: PosHardwareOrder) {\n  return {\n    id,\n    number: posHardwareOrderNumber(id),\n    status: order.status,\n    lines: (order.lines ?? []).map((line) => ({\n      sku: line.sku,\n      name: line.name,\n      quantity: line.quantity,\n      unitCents: line.unitCents,\n      lineCents: line.lineCents,\n    })),\n    subtotalCents: order.subtotalCents ?? 0,\n    shippingCents: order.shipping?.cents ?? 0,\n    shippingLabel: order.shipping?.label ?? '',\n    taxCents: order.taxCents ?? 0,\n    totalCents: order.totalCents ?? 0,\n    tracking: order.tracking ?? null,\n    createdAtMs: order.createdAtMs ?? 0,\n    updatedAtMs: order.updatedAtMs ?? order.createdAtMs ?? 0,\n  }\n}\n\nexport type MerchantHardwareOrderView = ReturnType<typeof merchantHardwareOrderView>\n\n/** The POS settings page of a site, as an absolute console URL. */\nexport async function posSettingsUrl(hostId: string): Promise<string> {\n  return hostConsoleUrl(hostId, `/${hostId}/products/pos`)\n}\n\n/** `base` with `query` added before any `#fragment`, then `#hash`. */\nexport function withQueryAndHash(base: string, query: string, hash: string): string {\n  const [path] = base.split('#')\n  const joiner = path.includes('?') ? '&' : '?'\n  return `${path}${joiner}${query}#${hash}`\n}\n\n\nexport const posHardwareHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') return res.status(405).json({ error: 'Method not allowed' })\n  const body = posRequestBody(req)\n  const hostId = String(body['hostId'] ?? '')\n  const gate = await authorizePosStaff(req, hostId)\n  if ('error' in gate) return res.status(gate.status).json({ error: gate.error })\n  const staff = gate.staff\n  const config = posHardwareConfig()\n  const action = String(body['action'] ?? '')\n  try {\n    switch (action) {\n      case 'catalog':\n        if (!config) return res.status(200).json({ available: false })\n        return res.status(200).json({\n          available: true,\n          offers: posHardwareOffers(config),\n          shipping: config.shipping.map((option) => ({\n            method: option.method,\n            label: POS_HARDWARE_SHIPPING_LABELS[option.method],\n            cents: option.cents,\n          })),\n          automaticTax: config.automaticTax,\n          shipCountries: POS_HARDWARE_SHIP_COUNTRIES,\n        })\n      case 'orders': {\n        const snapshot = await hardwareOrdersRef(staff.orgId)\n          .where('hostId', '==', staff.hostId)\n          .orderBy('createdAtMs', 'desc')\n          .limit(50)\n          .get()\n        return res.status(200).json({\n          orders: snapshot.docs.map((doc: any) =>\n            merchantHardwareOrderView(String(doc.id), doc.data() as PosHardwareOrder),\n          ),\n        })\n      }\n      case 'checkout': {\n        if (!config) return res.status(404).json({ error: 'The hardware shop is not available.' })\n        const attemptKey = posIdempotencyKey(req)\n        if (!attemptKey) return res.status(400).json({ error: 'Missing Idempotency-Key' })\n        if (!staff.orgId) return res.status(409).json({ error: 'This site has no workspace.' })\n        const priced = pricePosHardwareCart(config, body['lines'])\n        if ('error' in priced) return res.status(400).json({ error: priced.error })\n        const method = body['shippingMethod']\n        const shipping = isPosHardwareShippingMethod(method)\n          ? config.shipping.find((option) => option.method === method)\n          : undefined\n        if (!shipping) return res.status(400).json({ error: 'Choose a shipping speed.' })\n\n        const orderId = posHardwareOrderId(staff.orgId, staff.hostId, attemptKey)\n        const billing = await readOrgBilling(staff.orgId).catch(() => ({}))\n        const customer = String((billing as { stripeCustomerId?: unknown }).stripeCustomerId ?? '').trim()\n        const base = await posSettingsUrl(staff.hostId)\n        const params: Record<string, string | number | boolean> = {\n          mode: 'payment',\n          client_reference_id: orderId,\n          success_url: withQueryAndHash(base, 'hardwareOrder=placed', POS_HARDWARE_ANCHOR),\n          cancel_url: withQueryAndHash(base, 'hardwareOrder=canceled', POS_HARDWARE_ANCHOR),\n          'payment_method_types[0]': 'card',\n          'shipping_address_collection[allowed_countries][0]': POS_HARDWARE_SHIP_COUNTRIES[0],\n          'phone_number_collection[enabled]': true,\n          'shipping_options[0][shipping_rate_data][type]': 'fixed_amount',\n          'shipping_options[0][shipping_rate_data][display_name]': POS_HARDWARE_SHIPPING_LABELS[shipping.method],\n          'shipping_options[0][shipping_rate_data][fixed_amount][amount]': shipping.cents,\n          'shipping_options[0][shipping_rate_data][fixed_amount][currency]': POS_HARDWARE_CURRENCY,\n          'metadata[type]': POS_HARDWARE_METADATA_TYPE,\n          'metadata[orderId]': orderId,\n          'metadata[orgId]': staff.orgId,\n          'metadata[hostId]': staff.hostId,\n          'metadata[uid]': staff.uid,\n          'metadata[lines]': encodePosHardwareLines(priced.lines),\n          'metadata[shippingMethod]': shipping.method,\n          'metadata[shippingCents]': shipping.cents,\n          'metadata[subtotalCents]': priced.subtotalCents,\n          'payment_intent_data[description]': `Card reader order ${posHardwareOrderNumber(orderId)}`,\n          'payment_intent_data[metadata][type]': POS_HARDWARE_METADATA_TYPE,\n          'payment_intent_data[metadata][orderId]': orderId,\n          'payment_intent_data[metadata][orgId]': staff.orgId,\n          ...(customer ? { customer } : {}),\n          ...(config.automaticTax\n            ? {\n                'automatic_tax[enabled]': true,\n                'shipping_options[0][shipping_rate_data][tax_behavior]': 'exclusive',\n                // A returning workspace's saved address is kept up to date\n                // from what Checkout collects, which automatic tax requires.\n                ...(customer ? { 'customer_update[shipping]': 'auto' } : {}),\n              }\n            : {}),\n        }\n        priced.lines.forEach((line, index) => {\n          const sku = posHardwareSku(line.sku)\n          params[`line_items[${index}][quantity]`] = line.quantity\n          // A literal, not POS_HARDWARE_CURRENCY: check:facilitator-charge-shape\n          // reads Stripe Tax beside a usd line item only when it says so (AGL-1956).\n          params[`line_items[${index}][price_data][currency]`] = 'usd'\n          params[`line_items[${index}][price_data][unit_amount]`] = line.unitCents\n          params[`line_items[${index}][price_data][product_data][name]`] = line.name\n          if (sku) params[`line_items[${index}][price_data][product_data][description]`] = sku.use\n          params[`line_items[${index}][price_data][product_data][metadata][sku]`] = line.sku\n          if (config.automaticTax) params[`line_items[${index}][price_data][tax_behavior]`] = 'exclusive'\n        })\n        const created = await posStripe('POST', 'checkout/sessions', {\n          params,\n          idempotencyKey: `pos-hw-checkout-${orderId}`,\n        })\n        const url = String(created.body?.url ?? '')\n        if (!created.ok || !url) {\n          console.error('[pos-hardware] checkout refused', created.status, created.body?.error?.code)\n          return res.status(502).json({ error: 'Checkout could not be started. Try again in a moment.' })\n        }\n        return res.status(200).json({ url, orderId })\n      }\n      default:\n        return res.status(400).json({ error: 'Unknown action' })\n    }\n  } catch (error) {\n    console.error('[pos-hardware]', action, error)\n    return res.status(500).json({ error: 'The hardware shop could not answer' })\n  }\n}\n"],"names":["createHash","firebaseAdmin","readOrgBilling","hostConsoleUrl","encodePosHardwareLines","isPosHardwareShippingMethod","POS_HARDWARE_ANCHOR","parsePosHardwareConfig","POS_HARDWARE_CURRENCY","POS_HARDWARE_METADATA_TYPE","POS_HARDWARE_ORDERS_COLLECTION","POS_HARDWARE_SALES_COLLECTION","POS_HARDWARE_SHIP_COUNTRIES","POS_HARDWARE_SHIPPING_LABELS","posHardwareOffers","posHardwareSku","pricePosHardwareCart","authorizePosStaff","posIdempotencyKey","posRequestBody","posStripe","posTerminalAvailable","posHardwareConfig","env","process","posHardwareOrderId","orgId","hostId","attemptKey","update","digest","slice","posHardwareOrderNumber","orderId","replace","toUpperCase","hardwareOrdersRef","app","firestore","collection","doc","posHardwareSaleRef","merchantHardwareOrderView","id","order","number","status","lines","map","line","sku","name","quantity","unitCents","lineCents","subtotalCents","shippingCents","shipping","cents","shippingLabel","label","taxCents","totalCents","tracking","createdAtMs","updatedAtMs","posSettingsUrl","withQueryAndHash","base","query","hash","path","split","joiner","includes","posHardwareHandler","req","res","body","method","json","error","String","gate","staff","config","action","available","offers","option","automaticTax","shipCountries","snapshot","where","orderBy","limit","get","orders","docs","data","created","priced","find","undefined","billing","catch","customer","stripeCustomerId","trim","params","mode","client_reference_id","success_url","cancel_url","uid","forEach","index","use","idempotencyKey","url","ok","console","code"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,UAAU,QAAQ,SAAQ;AAEnC,SAASC,aAAa,EAAEC,cAAc,QAAQ,2BAA0B;AACxE,SAASC,cAAc,QAAQ,oDAAmD;AAClF,SACEC,sBAAsB,EACtBC,2BAA2B,EAC3BC,mBAAmB,EACnBC,sBAAsB,EACtBC,qBAAqB,EACrBC,0BAA0B,EAC1BC,8BAA8B,EAC9BC,6BAA6B,EAC7BC,2BAA2B,EAC3BC,4BAA4B,EAC5BC,iBAAiB,EACjBC,cAAc,EACdC,oBAAoB,QAGf,2BAAuB;AAC9B,SAASC,iBAAiB,EAAEC,iBAAiB,EAAEC,cAAc,QAAQ,gBAAY;AACjF,SAASC,SAAS,EAAEC,oBAAoB,QAAQ,kBAAc;AAE9D;;;;;;;;;;;;;;;;;2CAiB2C,GAE3C,0EAA0E,GAC1E,OAAO,SAASC,kBACdC,MAA0CC,QAAQD,GAAG;IAErD,yEAAyE;IACzE,iEAAiE;IACjE,IAAI,CAACF,wBAAwB,OAAO;IACpC,OAAOd,uBAAuBgB;AAChC;AAEA,+EAA+E,GAC/E,OAAO,SAASE,mBAAmBC,KAAa,EAAEC,MAAc,EAAEC,UAAkB;IAClF,OAAO,CAAC,GAAG,EAAE5B,WAAW,UAAU6B,MAAM,CAAC,GAAGH,MAAM,CAAC,EAAEC,OAAO,CAAC,EAAEC,YAAY,EAAEE,MAAM,CAAC,OAAOC,KAAK,CAAC,GAAG,KAAK;AAC3G;AAEA,mEAAmE,GACnE,OAAO,SAASC,uBAAuBC,OAAe;IACpD,OAAO,CAAC,GAAG,EAAEA,QAAQC,OAAO,CAAC,QAAQ,IAAIH,KAAK,CAAC,GAAG,GAAGI,WAAW,IAAI;AACtE;AAEA,OAAO,SAASC,kBAAkBV,KAAa;IAC7C,OAAOzB,cACJoC,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,QACXC,GAAG,CAACd,OACJa,UAAU,CAAC7B;AAChB;AAEA;;;;CAIC,GACD,OAAO,SAAS+B,mBAAmBR,OAAe;IAChD,OAAOhC,cAAcoC,GAAG,GAAGC,SAAS,GAAGC,UAAU,CAAC5B,+BAA+B6B,GAAG,CAACP;AACvF;AAEA,6EAA6E,GAC7E,OAAO,SAASS,0BAA0BC,EAAU,EAAEC,KAAuB;QAKjEA,cAOOA,mCAGLA,iBACEA,mBACFA,iBACGA,oBACAA,OAAAA;QANEA,iBACAA;IAbjB,OAAO;QACLD;QACAE,QAAQb,uBAAuBW;QAC/BG,QAAQF,MAAME,MAAM;QACpBC,OAAO,EAACH,eAAAA,MAAMG,KAAK,YAAXH,eAAe,EAAE,EAAEI,GAAG,CAAC,CAACC,OAAU,CAAA;gBACxCC,KAAKD,KAAKC,GAAG;gBACbC,MAAMF,KAAKE,IAAI;gBACfC,UAAUH,KAAKG,QAAQ;gBACvBC,WAAWJ,KAAKI,SAAS;gBACzBC,WAAWL,KAAKK,SAAS;YAC3B,CAAA;QACAC,aAAa,GAAEX,uBAAAA,MAAMW,aAAa,YAAnBX,uBAAuB;QACtCY,aAAa,WAAEZ,kBAAAA,MAAMa,QAAQ,qBAAdb,gBAAgBc,KAAK,mBAAI;QACxCC,aAAa,YAAEf,mBAAAA,MAAMa,QAAQ,qBAAdb,iBAAgBgB,KAAK,oBAAI;QACxCC,QAAQ,GAAEjB,kBAAAA,MAAMiB,QAAQ,YAAdjB,kBAAkB;QAC5BkB,UAAU,GAAElB,oBAAAA,MAAMkB,UAAU,YAAhBlB,oBAAoB;QAChCmB,QAAQ,GAAEnB,kBAAAA,MAAMmB,QAAQ,YAAdnB,kBAAkB;QAC5BoB,WAAW,GAAEpB,qBAAAA,MAAMoB,WAAW,YAAjBpB,qBAAqB;QAClCqB,WAAW,GAAErB,SAAAA,qBAAAA,MAAMqB,WAAW,YAAjBrB,qBAAqBA,MAAMoB,WAAW,YAAtCpB,QAA0C;IACzD;AACF;AAIA,iEAAiE,GACjE,OAAO,eAAesB,eAAevC,MAAc;IACjD,OAAOxB,eAAewB,QAAQ,CAAC,CAAC,EAAEA,OAAO,aAAa,CAAC;AACzD;AAEA,oEAAoE,GACpE,OAAO,SAASwC,iBAAiBC,IAAY,EAAEC,KAAa,EAAEC,IAAY;IACxE,MAAM,CAACC,KAAK,GAAGH,KAAKI,KAAK,CAAC;IAC1B,MAAMC,SAASF,KAAKG,QAAQ,CAAC,OAAO,MAAM;IAC1C,OAAO,GAAGH,OAAOE,SAASJ,MAAM,CAAC,EAAEC,MAAM;AAC3C;AAGA,OAAO,MAAMK,qBAAuC,OAAOC,KAAKC;QAGxCC,cAKAA;IAPtB,IAAIF,IAAIG,MAAM,KAAK,QAAQ,OAAOF,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;QAAEC,OAAO;IAAqB;IACrF,MAAMH,OAAO3D,eAAeyD;IAC5B,MAAMjD,SAASuD,QAAOJ,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB;IACxC,MAAMK,OAAO,MAAMlE,kBAAkB2D,KAAKjD;IAC1C,IAAI,WAAWwD,MAAM,OAAON,IAAI/B,MAAM,CAACqC,KAAKrC,MAAM,EAAEkC,IAAI,CAAC;QAAEC,OAAOE,KAAKF,KAAK;IAAC;IAC7E,MAAMG,QAAQD,KAAKC,KAAK;IACxB,MAAMC,SAAS/D;IACf,MAAMgE,SAASJ,QAAOJ,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB;IACxC,IAAI;QACF,OAAQQ;YACN,KAAK;gBACH,IAAI,CAACD,QAAQ,OAAOR,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;oBAAEO,WAAW;gBAAM;gBAC5D,OAAOV,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;oBAC1BO,WAAW;oBACXC,QAAQ1E,kBAAkBuE;oBAC1B5B,UAAU4B,OAAO5B,QAAQ,CAACT,GAAG,CAAC,CAACyC,SAAY,CAAA;4BACzCV,QAAQU,OAAOV,MAAM;4BACrBnB,OAAO/C,4BAA4B,CAAC4E,OAAOV,MAAM,CAAC;4BAClDrB,OAAO+B,OAAO/B,KAAK;wBACrB,CAAA;oBACAgC,cAAcL,OAAOK,YAAY;oBACjCC,eAAe/E;gBACjB;YACF,KAAK;gBAAU;oBACb,MAAMgF,WAAW,MAAMxD,kBAAkBgD,MAAM1D,KAAK,EACjDmE,KAAK,CAAC,UAAU,MAAMT,MAAMzD,MAAM,EAClCmE,OAAO,CAAC,eAAe,QACvBC,KAAK,CAAC,IACNC,GAAG;oBACN,OAAOnB,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;wBAC1BiB,QAAQL,SAASM,IAAI,CAAClD,GAAG,CAAC,CAACR,MACzBE,0BAA0BwC,OAAO1C,IAAIG,EAAE,GAAGH,IAAI2D,IAAI;oBAEtD;gBACF;YACA,KAAK;gBAAY;wBAeS;wBAsDLC;oBApEnB,IAAI,CAACf,QAAQ,OAAOR,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;wBAAEC,OAAO;oBAAsC;oBACxF,MAAMrD,aAAaV,kBAAkB0D;oBACrC,IAAI,CAAChD,YAAY,OAAOiD,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;wBAAEC,OAAO;oBAA0B;oBAChF,IAAI,CAACG,MAAM1D,KAAK,EAAE,OAAOmD,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;wBAAEC,OAAO;oBAA8B;oBACrF,MAAMoB,SAASrF,qBAAqBqE,QAAQP,IAAI,CAAC,QAAQ;oBACzD,IAAI,WAAWuB,QAAQ,OAAOxB,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;wBAAEC,OAAOoB,OAAOpB,KAAK;oBAAC;oBACzE,MAAMF,SAASD,IAAI,CAAC,iBAAiB;oBACrC,MAAMrB,WAAWpD,4BAA4B0E,UACzCM,OAAO5B,QAAQ,CAAC6C,IAAI,CAAC,CAACb,SAAWA,OAAOV,MAAM,KAAKA,UACnDwB;oBACJ,IAAI,CAAC9C,UAAU,OAAOoB,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;wBAAEC,OAAO;oBAA2B;oBAE/E,MAAMhD,UAAUR,mBAAmB2D,MAAM1D,KAAK,EAAE0D,MAAMzD,MAAM,EAAEC;oBAC9D,MAAM4E,UAAU,MAAMtG,eAAekF,MAAM1D,KAAK,EAAE+E,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;oBAChE,MAAMC,WAAWxB,QAAO,4BAAA,AAACsB,QAA2CG,gBAAgB,YAA5D,4BAAgE,IAAIC,IAAI;oBAChG,MAAMxC,OAAO,MAAMF,eAAekB,MAAMzD,MAAM;oBAC9C,MAAMkF,SAAoD;wBACxDC,MAAM;wBACNC,qBAAqB9E;wBACrB+E,aAAa7C,iBAAiBC,MAAM,wBAAwB9D;wBAC5D2G,YAAY9C,iBAAiBC,MAAM,0BAA0B9D;wBAC7D,2BAA2B;wBAC3B,qDAAqDM,2BAA2B,CAAC,EAAE;wBACnF,oCAAoC;wBACpC,iDAAiD;wBACjD,yDAAyDC,4BAA4B,CAAC4C,SAASsB,MAAM,CAAC;wBACtG,iEAAiEtB,SAASC,KAAK;wBAC/E,mEAAmElD;wBACnE,kBAAkBC;wBAClB,qBAAqBwB;wBACrB,mBAAmBmD,MAAM1D,KAAK;wBAC9B,oBAAoB0D,MAAMzD,MAAM;wBAChC,iBAAiByD,MAAM8B,GAAG;wBAC1B,mBAAmB9G,uBAAuBiG,OAAOtD,KAAK;wBACtD,4BAA4BU,SAASsB,MAAM;wBAC3C,2BAA2BtB,SAASC,KAAK;wBACzC,2BAA2B2C,OAAO9C,aAAa;wBAC/C,oCAAoC,CAAC,kBAAkB,EAAEvB,uBAAuBC,UAAU;wBAC1F,uCAAuCxB;wBACvC,0CAA0CwB;wBAC1C,wCAAwCmD,MAAM1D,KAAK;uBAC/CgF,WAAW;wBAAEA;oBAAS,IAAI,CAAC,GAC3BrB,OAAOK,YAAY,GACnB;wBACE,0BAA0B;wBAC1B,yDAAyD;uBAGrDgB,WAAW;wBAAE,6BAA6B;oBAAO,IAAI,CAAC,KAE5D,CAAC;oBAEPL,OAAOtD,KAAK,CAACoE,OAAO,CAAC,CAAClE,MAAMmE;wBAC1B,MAAMlE,MAAMnC,eAAekC,KAAKC,GAAG;wBACnC2D,MAAM,CAAC,CAAC,WAAW,EAAEO,MAAM,WAAW,CAAC,CAAC,GAAGnE,KAAKG,QAAQ;wBACxD,uEAAuE;wBACvE,2EAA2E;wBAC3EyD,MAAM,CAAC,CAAC,WAAW,EAAEO,MAAM,uBAAuB,CAAC,CAAC,GAAG;wBACvDP,MAAM,CAAC,CAAC,WAAW,EAAEO,MAAM,0BAA0B,CAAC,CAAC,GAAGnE,KAAKI,SAAS;wBACxEwD,MAAM,CAAC,CAAC,WAAW,EAAEO,MAAM,iCAAiC,CAAC,CAAC,GAAGnE,KAAKE,IAAI;wBAC1E,IAAID,KAAK2D,MAAM,CAAC,CAAC,WAAW,EAAEO,MAAM,wCAAwC,CAAC,CAAC,GAAGlE,IAAImE,GAAG;wBACxFR,MAAM,CAAC,CAAC,WAAW,EAAEO,MAAM,0CAA0C,CAAC,CAAC,GAAGnE,KAAKC,GAAG;wBAClF,IAAImC,OAAOK,YAAY,EAAEmB,MAAM,CAAC,CAAC,WAAW,EAAEO,MAAM,2BAA2B,CAAC,CAAC,GAAG;oBACtF;oBACA,MAAMhB,UAAU,MAAMhF,UAAU,QAAQ,qBAAqB;wBAC3DyF;wBACAS,gBAAgB,CAAC,gBAAgB,EAAErF,SAAS;oBAC9C;oBACA,MAAMsF,MAAMrC,gBAAOkB,gBAAAA,QAAQtB,IAAI,qBAAZsB,cAAcmB,GAAG,mBAAI;oBACxC,IAAI,CAACnB,QAAQoB,EAAE,IAAI,CAACD,KAAK;4BAC0CnB,qBAAAA;wBAAjEqB,QAAQxC,KAAK,CAAC,mCAAmCmB,QAAQtD,MAAM,GAAEsD,iBAAAA,QAAQtB,IAAI,sBAAZsB,sBAAAA,eAAcnB,KAAK,qBAAnBmB,oBAAqBsB,IAAI;wBAC1F,OAAO7C,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;4BAAEC,OAAO;wBAAwD;oBAC/F;oBACA,OAAOJ,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;wBAAEuC;wBAAKtF;oBAAQ;gBAC7C;YACA;gBACE,OAAO4C,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;oBAAEC,OAAO;gBAAiB;QAC1D;IACF,EAAE,OAAOA,OAAO;QACdwC,QAAQxC,KAAK,CAAC,kBAAkBK,QAAQL;QACxC,OAAOJ,IAAI/B,MAAM,CAAC,KAAKkC,IAAI,CAAC;YAAEC,OAAO;QAAqC;IAC5E;AACF,EAAC"}
+{"version":3,"sources":["../../../../../../../libs/plugins/commerce/src/lib/server/pos-hardware.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport { createHash } from 'crypto'\nimport * as Aglyn from '@aglyn/aglyn/server'\nimport type { PluginApiHandler } from '@aglyn/aglyn/server'\nimport { firebaseAdmin, readOrgBilling } from '@aglyn/tenant-data-admin'\nimport { hostConsoleUrl } from '@aglyn/tenant-data-admin/server/host-console-link'\nimport {\n  encodePosHardwareLines,\n  isPosHardwareShippingMethod,\n  POS_HARDWARE_ANCHOR,\n  parsePosHardwareConfig,\n  parsePosHardwareInPersonConfig,\n  POS_HARDWARE_CURRENCY,\n  POS_HARDWARE_METADATA_TYPE,\n  POS_HARDWARE_ORDERS_COLLECTION,\n  POS_HARDWARE_SALES_COLLECTION,\n  POS_HARDWARE_SHIP_COUNTRIES,\n  POS_HARDWARE_SHIPPING_LABELS,\n  posHardwareOffers,\n  posHardwareOrderSource,\n  posHardwareSku,\n  pricePosHardwareCart,\n  type PosHardwareConfig,\n  type PosHardwareInPersonConfig,\n  type PosHardwareOrder,\n} from '../model/pos-hardware'\nimport { mayVisitPosHardwareShop } from '../model/plugin-permissions'\nimport { authorizePosStaff, posIdempotencyKey, posRequestBody } from './pos-auth'\nimport { posStripe, posTerminalAvailable } from './pos-stripe'\n\n/*==========================================\n * `POST /api/commerce/pos-hardware` (AGL-4038): the merchant's half of the\n * POS hardware shop, behind the Hardware card on Products → Point of sale.\n *\n *   catalog   what is on offer and at what price, or `available: false`\n *   checkout  a Stripe Checkout Session for the basket, on the PLATFORM\n *   orders    this site's hardware orders, newest first\n *\n * Gated like the register (`authorizePosStaff`, on a plan with POS), because\n * the readers it sells are the register's, with one difference (AGL-4047):\n * the shop admits whoever works the register (`managePos`) AND whoever may\n * buy hardware (`posBuyHardware`), which stands on its own — a bookkeeper\n * with no register orders the store's readers. A checkout needs\n * `posBuyHardware`; seeing the catalog and the site's orders needs either.\n *\n * THE SALE IS THE PLATFORM'S. The session is created with the platform key\n * and NO connected account, `transfer_data` or application fee: the merchant\n * is the buyer here, and the platform is the seller of record that places\n * the order with Stripe. The order document is written by the webhook once\n * Stripe says the session is paid (`pos-hardware-webhook.ts`), never here.\n *=========================================*/\n\n/** The shop's config from this deployment, or `null` while it is hidden. */\nexport function posHardwareConfig(\n  env: Record<string, string | undefined> = process.env,\n): PosHardwareConfig | null {\n  // A reader the platform cannot yet take payments on is not for sale: the\n  // shop opens only where the register offers card readers at all.\n  if (!posTerminalAvailable()) return null\n  return parsePosHardwareConfig(env)\n}\n\n/**\n * The platform's own store that sells hardware in person (AGL-4038), or\n * `null` while that is off. Read like the shop's other figures; a store is\n * the seller only when BOTH its id and its workspace's match, so a site moved\n * to another workspace stops selling hardware rather than selling it for them.\n */\nexport function posHardwareInPersonConfig(\n  env: Record<string, string | undefined> = process.env,\n): PosHardwareInPersonConfig | null {\n  return parsePosHardwareInPersonConfig(env)\n}\n\n/** Whether a store, owned by `orgId`, is the platform's own hardware seller. */\nexport function isPosHardwareSellerStore(\n  config: PosHardwareInPersonConfig | null,\n  hostId: string,\n  orgId: string,\n): config is PosHardwareInPersonConfig {\n  return Boolean(config) && config?.sellerHostId === hostId && config?.sellerOrgId === orgId\n}\n\n/**\n * An in-person order's id, from the register sale it came from: one register\n * sale is one hardware order however often its completion is told.\n */\nexport function posHardwareInPersonOrderId(hostId: string, registerOrderId: string): string {\n  return `hw_${createHash('sha256').update(`pos:${hostId}:${registerOrderId}`).digest('hex').slice(0, 20)}`\n}\n\n/** The order's id, derived from the attempt so a repeated press is one order. */\nexport function posHardwareOrderId(orgId: string, hostId: string, attemptKey: string): string {\n  return `hw_${createHash('sha256').update(`${orgId}:${hostId}:${attemptKey}`).digest('hex').slice(0, 20)}`\n}\n\n/** The number a person reads: `HW-` and six characters of the id. */\nexport function posHardwareOrderNumber(orderId: string): string {\n  return `HW-${orderId.replace(/^hw_/, '').slice(0, 6).toUpperCase()}`\n}\n\nexport function hardwareOrdersRef(orgId: string) {\n  return firebaseAdmin\n    .app()\n    .firestore()\n    .collection('orgs')\n    .doc(orgId)\n    .collection(POS_HARDWARE_ORDERS_COLLECTION)\n}\n\n/**\n * `posHardwareSales/{orderId}`, the retained sale record beside each order\n * (see `PosHardwareSaleRecord`). Top-level on purpose: the workspace erasure\n * cannot reach it.\n */\nexport function posHardwareSaleRef(orderId: string) {\n  return firebaseAdmin.app().firestore().collection(POS_HARDWARE_SALES_COLLECTION).doc(orderId)\n}\n\n/** An order as the merchant's card shows it: no Stripe ids, no staff notes. */\nexport function merchantHardwareOrderView(id: string, order: PosHardwareOrder) {\n  return {\n    id,\n    number: posHardwareOrderNumber(id),\n    status: order.status,\n    lines: (order.lines ?? []).map((line) => ({\n      sku: line.sku,\n      name: line.name,\n      quantity: line.quantity,\n      unitCents: line.unitCents,\n      lineCents: line.lineCents,\n    })),\n    subtotalCents: order.subtotalCents ?? 0,\n    shippingCents: order.shipping?.cents ?? 0,\n    shippingLabel: order.shipping?.label ?? '',\n    taxCents: order.taxCents ?? 0,\n    totalCents: order.totalCents ?? 0,\n    tracking: order.tracking ?? null,\n    createdAtMs: order.createdAtMs ?? 0,\n    updatedAtMs: order.updatedAtMs ?? order.createdAtMs ?? 0,\n    // Bought in person (AGL-4038): handed over at the sale, no parcel.\n    source: posHardwareOrderSource(order),\n    discountCents: order.discountCents ?? 0,\n    /** Readers still to set up, for an in-person order that took serials. */\n    readersToSetUp: (order.units ?? []).filter((unit) => !unit.readerId).length,\n    refundedCents: order.refundedCents ?? 0,\n    /** The buyer's return request and what was decided, without who asked. */\n    returnRequest: order.returnRequest\n      ? { state: order.returnRequest.state, requestedAtMs: order.returnRequest.requestedAtMs, note: order.returnRequest.note }\n      : null,\n  }\n}\n\nexport type MerchantHardwareOrderView = ReturnType<typeof merchantHardwareOrderView>\n\n/** The POS settings page of a site, as an absolute console URL. */\nexport async function posSettingsUrl(hostId: string): Promise<string> {\n  return hostConsoleUrl(hostId, `/${hostId}/products/pos`)\n}\n\n/** `base` with `query` added before any `#fragment`, then `#hash`. */\nexport function withQueryAndHash(base: string, query: string, hash: string): string {\n  const [path] = base.split('#')\n  const joiner = path.includes('?') ? '&' : '?'\n  return `${path}${joiner}${query}#${hash}`\n}\n\n\n/**\n * The readers this workspace bought in person that are not set up yet\n * (AGL-4038): whether its plan includes the point of sale, its stores and\n * whether each can take a reader, and each order with what it waits for.\n * Nothing at all while the in-person sale is off.\n */\nexport async function waitingInPersonReaders(orgId: string, hostId: string) {\n  if (!posHardwareInPersonConfig() || !orgId) return { posPlan: false, stores: [], orders: [] }\n  const firestore = firebaseAdmin.app().firestore()\n  const [orders, org, hosts] = await Promise.all([\n    hardwareOrdersRef(orgId)\n      .where('attachment.state', '==', 'attached')\n      .where('status', '==', 'delivered')\n      .limit(20)\n      .get(),\n    firestore.collection('orgs').doc(orgId).get(),\n    firestore.collection('hosts').where('orgId', '==', orgId).limit(20).get(),\n  ])\n  if (!orders.docs.length) return { posPlan: false, stores: [], orders: [] }\n  const stores = await Promise.all(\n    hosts.docs.map(async (doc: any) => {\n      const id = String(doc.id)\n      const [terminal, setupUrl] = await Promise.all([\n        firestore.collection('hosts').doc(id).collection('terminal').doc('config').get(),\n        posSettingsUrl(id),\n      ])\n      return {\n        hostId: id,\n        name: String(doc.get('name') ?? doc.get('title') ?? id),\n        hasLocation: Boolean(terminal.exists && terminal.get('stripeLocationId')),\n        setupUrl: `${setupUrl.split('#')[0]}#pos-devices`,\n      }\n    }),\n  )\n  return {\n    posPlan: Aglyn.checkEntitlement(org.data() as never, 'pos'),\n    stores,\n    // Every store's, this store's first: a reader waits wherever the\n    // workspace's people look.\n    orders: orders.docs\n      .map((doc: any) => ({ id: String(doc.id), order: doc.data() as PosHardwareOrder }))\n      .filter(({ order }) => order.source === 'in_person')\n      .sort((a, b) => Number(b.order.hostId === hostId) - Number(a.order.hostId === hostId))\n      .map(({ id, order }) => ({\n        ...merchantHardwareOrderView(id, order),\n        hostId: order.hostId,\n        serialsTaken: (order.units ?? []).filter((unit) => unit.serialNumber && !unit.readerId).length,\n      })),\n  }\n}\n\nexport const posHardwareHandler: PluginApiHandler = async (req, res) => {\n  if (req.method !== 'POST') return res.status(405).json({ error: 'Method not allowed' })\n  const body = posRequestBody(req)\n  const hostId = String(body['hostId'] ?? '')\n  const action = String(body['action'] ?? '')\n  // BUYING IS ITS OWN KEY (AGL-4047): anyone who works the register or may\n  // buy hardware sees what the shop offers and what this site ordered, and\n  // only a member holding \"Buy point of sale hardware\" — which follows\n  // `managePos` until a role or the member sets it, and may be granted\n  // without it — starts a checkout that the workspace pays for.\n  //\n  // A READER BOUGHT IN PERSON (AGL-4038): `waiting` is read without the\n  // point of sale plan, because a workspace without it is exactly the one\n  // that must be told to add it first; choosing its store and marking it set\n  // up are setting up devices (`posDevices`) on the store named.\n  const settingUp = action === 'choose-store' || action === 'mark-set-up'\n  const gate = await authorizePosStaff(\n    req,\n    hostId,\n    action === 'checkout' ? 'posBuyHardware' : settingUp ? 'posDevices' : undefined,\n    mayVisitPosHardwareShop,\n    // A workspace whose plan lost the point of sale still sees what it bought\n    // and may ask to return a reader bought in person.\n    action === 'waiting' || action === 'orders' || action === 'request-return' ? { planRequired: false } : {},\n  )\n  if ('error' in gate) return res.status(gate.status).json({ error: gate.error })\n  const staff = gate.staff\n  const config = posHardwareConfig()\n  try {\n    switch (action) {\n      case 'waiting':\n        return res.status(200).json(await waitingInPersonReaders(staff.orgId, staff.hostId))\n      case 'request-return': {\n        const returns = await import('./pos-hardware-returns')\n        const orderId = String(body['orderId'] ?? '')\n        try {\n          const order = await returns.requestPosHardwareReturn({\n            orgId: staff.orgId,\n            orderId,\n            uid: staff.uid,\n            reason: body['reason'],\n          })\n          return res.status(200).json({ ok: true, order: merchantHardwareOrderView(orderId, order) })\n        } catch (error) {\n          if (error instanceof returns.PosHardwareReturnRefusal) {\n            return res.status(error.status).json({ error: error.message })\n          }\n          throw error\n        }\n      }\n      case 'choose-store':\n      case 'mark-set-up': {\n        const readers = await import('./pos-hardware-readers')\n        const orderId = String(body['orderId'] ?? '')\n        try {\n          const order =\n            action === 'choose-store'\n              ? await readers.choosePosHardwareStore({ orgId: staff.orgId, orderId, hostId: staff.hostId })\n              : await readers.markPosHardwareSetUp({ orgId: staff.orgId, orderId })\n          return res.status(200).json({ ok: true, order: merchantHardwareOrderView(orderId, order) })\n        } catch (error) {\n          if (error instanceof readers.PosHardwareReaderRefusal) {\n            return res.status(error.status).json({ error: error.message })\n          }\n          throw error\n        }\n      }\n      case 'catalog':\n        if (!config) return res.status(200).json({ available: false })\n        return res.status(200).json({\n          available: true,\n          offers: posHardwareOffers(config),\n          shipping: config.shipping.map((option) => ({\n            method: option.method,\n            label: POS_HARDWARE_SHIPPING_LABELS[option.method],\n            cents: option.cents,\n          })),\n          automaticTax: config.automaticTax,\n          shipCountries: POS_HARDWARE_SHIP_COUNTRIES,\n        })\n      case 'orders': {\n        // This site's orders, and the readers bought in person for the\n        // workspace that wait for a store to be chosen at setup (AGL-4038).\n        // A sale on the selling workspace's own To attach list is never one.\n        const [site, workspace] = await Promise.all([\n          hardwareOrdersRef(staff.orgId).where('hostId', '==', staff.hostId).orderBy('createdAtMs', 'desc').limit(50).get(),\n          hardwareOrdersRef(staff.orgId)\n            .where('hostId', '==', '')\n            .where('attachment.state', '==', 'attached')\n            .orderBy('createdAtMs', 'desc')\n            .limit(50)\n            .get(),\n        ])\n        const orders = [...site.docs, ...workspace.docs]\n          .map((doc: any) => merchantHardwareOrderView(String(doc.id), doc.data() as PosHardwareOrder))\n          .sort((a, b) => b.createdAtMs - a.createdAtMs)\n          .slice(0, 50)\n        return res.status(200).json({ orders })\n      }\n      case 'checkout': {\n        if (!config) return res.status(404).json({ error: 'The hardware shop is not available.' })\n        const attemptKey = posIdempotencyKey(req)\n        if (!attemptKey) return res.status(400).json({ error: 'Missing Idempotency-Key' })\n        if (!staff.orgId) return res.status(409).json({ error: 'This site has no workspace.' })\n        const priced = pricePosHardwareCart(config, body['lines'])\n        if ('error' in priced) return res.status(400).json({ error: priced.error })\n        const method = body['shippingMethod']\n        const shipping = isPosHardwareShippingMethod(method)\n          ? config.shipping.find((option) => option.method === method)\n          : undefined\n        if (!shipping) return res.status(400).json({ error: 'Choose a shipping speed.' })\n\n        const orderId = posHardwareOrderId(staff.orgId, staff.hostId, attemptKey)\n        const billing = await readOrgBilling(staff.orgId).catch(() => ({}))\n        const customer = String((billing as { stripeCustomerId?: unknown }).stripeCustomerId ?? '').trim()\n        const base = await posSettingsUrl(staff.hostId)\n        const params: Record<string, string | number | boolean> = {\n          mode: 'payment',\n          client_reference_id: orderId,\n          success_url: withQueryAndHash(base, 'hardwareOrder=placed', POS_HARDWARE_ANCHOR),\n          cancel_url: withQueryAndHash(base, 'hardwareOrder=canceled', POS_HARDWARE_ANCHOR),\n          'payment_method_types[0]': 'card',\n          'shipping_address_collection[allowed_countries][0]': POS_HARDWARE_SHIP_COUNTRIES[0],\n          'phone_number_collection[enabled]': true,\n          'shipping_options[0][shipping_rate_data][type]': 'fixed_amount',\n          'shipping_options[0][shipping_rate_data][display_name]': POS_HARDWARE_SHIPPING_LABELS[shipping.method],\n          'shipping_options[0][shipping_rate_data][fixed_amount][amount]': shipping.cents,\n          'shipping_options[0][shipping_rate_data][fixed_amount][currency]': POS_HARDWARE_CURRENCY,\n          'metadata[type]': POS_HARDWARE_METADATA_TYPE,\n          'metadata[orderId]': orderId,\n          'metadata[orgId]': staff.orgId,\n          'metadata[hostId]': staff.hostId,\n          'metadata[uid]': staff.uid,\n          'metadata[lines]': encodePosHardwareLines(priced.lines),\n          'metadata[shippingMethod]': shipping.method,\n          'metadata[shippingCents]': shipping.cents,\n          'metadata[subtotalCents]': priced.subtotalCents,\n          'payment_intent_data[description]': `Card reader order ${posHardwareOrderNumber(orderId)}`,\n          'payment_intent_data[metadata][type]': POS_HARDWARE_METADATA_TYPE,\n          'payment_intent_data[metadata][orderId]': orderId,\n          'payment_intent_data[metadata][orgId]': staff.orgId,\n          ...(customer ? { customer } : {}),\n          ...(config.automaticTax\n            ? {\n                'automatic_tax[enabled]': true,\n                'shipping_options[0][shipping_rate_data][tax_behavior]': 'exclusive',\n                // A returning workspace's saved address is kept up to date\n                // from what Checkout collects, which automatic tax requires.\n                ...(customer ? { 'customer_update[shipping]': 'auto' } : {}),\n              }\n            : {}),\n        }\n        priced.lines.forEach((line, index) => {\n          const sku = posHardwareSku(line.sku)\n          params[`line_items[${index}][quantity]`] = line.quantity\n          // A literal, not POS_HARDWARE_CURRENCY: check:facilitator-charge-shape\n          // reads Stripe Tax beside a usd line item only when it says so (AGL-1956).\n          params[`line_items[${index}][price_data][currency]`] = 'usd'\n          params[`line_items[${index}][price_data][unit_amount]`] = line.unitCents\n          params[`line_items[${index}][price_data][product_data][name]`] = line.name\n          if (sku) params[`line_items[${index}][price_data][product_data][description]`] = sku.use\n          params[`line_items[${index}][price_data][product_data][metadata][sku]`] = line.sku\n          if (config.automaticTax) params[`line_items[${index}][price_data][tax_behavior]`] = 'exclusive'\n        })\n        const created = await posStripe('POST', 'checkout/sessions', {\n          params,\n          idempotencyKey: `pos-hw-checkout-${orderId}`,\n        })\n        const url = String(created.body?.url ?? '')\n        if (!created.ok || !url) {\n          console.error('[pos-hardware] checkout refused', created.status, created.body?.error?.code)\n          return res.status(502).json({ error: 'Checkout could not be started. Try again in a moment.' })\n        }\n        return res.status(200).json({ url, orderId })\n      }\n      default:\n        return res.status(400).json({ error: 'Unknown action' })\n    }\n  } catch (error) {\n    console.error('[pos-hardware]', action, error)\n    return res.status(500).json({ error: 'The hardware shop could not answer' })\n  }\n}\n"],"names":["createHash","Aglyn","firebaseAdmin","readOrgBilling","hostConsoleUrl","encodePosHardwareLines","isPosHardwareShippingMethod","POS_HARDWARE_ANCHOR","parsePosHardwareConfig","parsePosHardwareInPersonConfig","POS_HARDWARE_CURRENCY","POS_HARDWARE_METADATA_TYPE","POS_HARDWARE_ORDERS_COLLECTION","POS_HARDWARE_SALES_COLLECTION","POS_HARDWARE_SHIP_COUNTRIES","POS_HARDWARE_SHIPPING_LABELS","posHardwareOffers","posHardwareOrderSource","posHardwareSku","pricePosHardwareCart","mayVisitPosHardwareShop","authorizePosStaff","posIdempotencyKey","posRequestBody","posStripe","posTerminalAvailable","posHardwareConfig","env","process","posHardwareInPersonConfig","isPosHardwareSellerStore","config","hostId","orgId","Boolean","sellerHostId","sellerOrgId","posHardwareInPersonOrderId","registerOrderId","update","digest","slice","posHardwareOrderId","attemptKey","posHardwareOrderNumber","orderId","replace","toUpperCase","hardwareOrdersRef","app","firestore","collection","doc","posHardwareSaleRef","merchantHardwareOrderView","id","order","number","status","lines","map","line","sku","name","quantity","unitCents","lineCents","subtotalCents","shippingCents","shipping","cents","shippingLabel","label","taxCents","totalCents","tracking","createdAtMs","updatedAtMs","source","discountCents","readersToSetUp","units","filter","unit","readerId","length","refundedCents","returnRequest","state","requestedAtMs","note","posSettingsUrl","withQueryAndHash","base","query","hash","path","split","joiner","includes","waitingInPersonReaders","posPlan","stores","orders","org","hosts","Promise","all","where","limit","get","docs","String","terminal","setupUrl","hasLocation","exists","checkEntitlement","data","sort","a","b","Number","serialsTaken","serialNumber","posHardwareHandler","req","res","body","method","json","error","action","settingUp","gate","undefined","planRequired","staff","returns","requestPosHardwareReturn","uid","reason","ok","PosHardwareReturnRefusal","message","readers","choosePosHardwareStore","markPosHardwareSetUp","PosHardwareReaderRefusal","available","offers","option","automaticTax","shipCountries","site","workspace","orderBy","created","priced","find","billing","catch","customer","stripeCustomerId","trim","params","mode","client_reference_id","success_url","cancel_url","forEach","index","use","idempotencyKey","url","console","code"],"mappings":";AAAA;;;;;;;;;;;;;;;CAeC,GAED,SAASA,UAAU,QAAQ,SAAQ;AACnC,YAAYC,WAAW,sBAAqB;AAE5C,SAASC,aAAa,EAAEC,cAAc,QAAQ,2BAA0B;AACxE,SAASC,cAAc,QAAQ,oDAAmD;AAClF,SACEC,sBAAsB,EACtBC,2BAA2B,EAC3BC,mBAAmB,EACnBC,sBAAsB,EACtBC,8BAA8B,EAC9BC,qBAAqB,EACrBC,0BAA0B,EAC1BC,8BAA8B,EAC9BC,6BAA6B,EAC7BC,2BAA2B,EAC3BC,4BAA4B,EAC5BC,iBAAiB,EACjBC,sBAAsB,EACtBC,cAAc,EACdC,oBAAoB,QAIf,2BAAuB;AAC9B,SAASC,uBAAuB,QAAQ,iCAA6B;AACrE,SAASC,iBAAiB,EAAEC,iBAAiB,EAAEC,cAAc,QAAQ,gBAAY;AACjF,SAASC,SAAS,EAAEC,oBAAoB,QAAQ,kBAAc;AAE9D;;;;;;;;;;;;;;;;;;;;2CAoB2C,GAE3C,0EAA0E,GAC1E,OAAO,SAASC,kBACdC,MAA0CC,QAAQD,GAAG;IAErD,yEAAyE;IACzE,iEAAiE;IACjE,IAAI,CAACF,wBAAwB,OAAO;IACpC,OAAOjB,uBAAuBmB;AAChC;AAEA;;;;;CAKC,GACD,OAAO,SAASE,0BACdF,MAA0CC,QAAQD,GAAG;IAErD,OAAOlB,+BAA+BkB;AACxC;AAEA,8EAA8E,GAC9E,OAAO,SAASG,yBACdC,MAAwC,EACxCC,MAAc,EACdC,KAAa;IAEb,OAAOC,QAAQH,WAAWA,CAAAA,0BAAAA,OAAQI,YAAY,MAAKH,UAAUD,CAAAA,0BAAAA,OAAQK,WAAW,MAAKH;AACvF;AAEA;;;CAGC,GACD,OAAO,SAASI,2BAA2BL,MAAc,EAAEM,eAAuB;IAChF,OAAO,CAAC,GAAG,EAAEtC,WAAW,UAAUuC,MAAM,CAAC,CAAC,IAAI,EAAEP,OAAO,CAAC,EAAEM,iBAAiB,EAAEE,MAAM,CAAC,OAAOC,KAAK,CAAC,GAAG,KAAK;AAC3G;AAEA,+EAA+E,GAC/E,OAAO,SAASC,mBAAmBT,KAAa,EAAED,MAAc,EAAEW,UAAkB;IAClF,OAAO,CAAC,GAAG,EAAE3C,WAAW,UAAUuC,MAAM,CAAC,GAAGN,MAAM,CAAC,EAAED,OAAO,CAAC,EAAEW,YAAY,EAAEH,MAAM,CAAC,OAAOC,KAAK,CAAC,GAAG,KAAK;AAC3G;AAEA,mEAAmE,GACnE,OAAO,SAASG,uBAAuBC,OAAe;IACpD,OAAO,CAAC,GAAG,EAAEA,QAAQC,OAAO,CAAC,QAAQ,IAAIL,KAAK,CAAC,GAAG,GAAGM,WAAW,IAAI;AACtE;AAEA,OAAO,SAASC,kBAAkBf,KAAa;IAC7C,OAAO/B,cACJ+C,GAAG,GACHC,SAAS,GACTC,UAAU,CAAC,QACXC,GAAG,CAACnB,OACJkB,UAAU,CAACvC;AAChB;AAEA;;;;CAIC,GACD,OAAO,SAASyC,mBAAmBR,OAAe;IAChD,OAAO3C,cAAc+C,GAAG,GAAGC,SAAS,GAAGC,UAAU,CAACtC,+BAA+BuC,GAAG,CAACP;AACvF;AAEA,6EAA6E,GAC7E,OAAO,SAASS,0BAA0BC,EAAU,EAAEC,KAAuB;QAKjEA,cAOOA,mCAGLA,iBACEA,mBACFA,iBACGA,oBACAA,OAAAA,oBAGEA,sBAEEA,cACFA;QAZAA,iBACAA;IAbjB,OAAO;QACLD;QACAE,QAAQb,uBAAuBW;QAC/BG,QAAQF,MAAME,MAAM;QACpBC,OAAO,EAACH,eAAAA,MAAMG,KAAK,YAAXH,eAAe,EAAE,EAAEI,GAAG,CAAC,CAACC,OAAU,CAAA;gBACxCC,KAAKD,KAAKC,GAAG;gBACbC,MAAMF,KAAKE,IAAI;gBACfC,UAAUH,KAAKG,QAAQ;gBACvBC,WAAWJ,KAAKI,SAAS;gBACzBC,WAAWL,KAAKK,SAAS;YAC3B,CAAA;QACAC,aAAa,GAAEX,uBAAAA,MAAMW,aAAa,YAAnBX,uBAAuB;QACtCY,aAAa,WAAEZ,kBAAAA,MAAMa,QAAQ,qBAAdb,gBAAgBc,KAAK,mBAAI;QACxCC,aAAa,YAAEf,mBAAAA,MAAMa,QAAQ,qBAAdb,iBAAgBgB,KAAK,oBAAI;QACxCC,QAAQ,GAAEjB,kBAAAA,MAAMiB,QAAQ,YAAdjB,kBAAkB;QAC5BkB,UAAU,GAAElB,oBAAAA,MAAMkB,UAAU,YAAhBlB,oBAAoB;QAChCmB,QAAQ,GAAEnB,kBAAAA,MAAMmB,QAAQ,YAAdnB,kBAAkB;QAC5BoB,WAAW,GAAEpB,qBAAAA,MAAMoB,WAAW,YAAjBpB,qBAAqB;QAClCqB,WAAW,GAAErB,SAAAA,qBAAAA,MAAMqB,WAAW,YAAjBrB,qBAAqBA,MAAMoB,WAAW,YAAtCpB,QAA0C;QACvD,mEAAmE;QACnEsB,QAAQ7D,uBAAuBuC;QAC/BuB,aAAa,GAAEvB,uBAAAA,MAAMuB,aAAa,YAAnBvB,uBAAuB;QACtC,uEAAuE,GACvEwB,gBAAgB,EAACxB,eAAAA,MAAMyB,KAAK,YAAXzB,eAAe,EAAE,EAAE0B,MAAM,CAAC,CAACC,OAAS,CAACA,KAAKC,QAAQ,EAAEC,MAAM;QAC3EC,aAAa,GAAE9B,uBAAAA,MAAM8B,aAAa,YAAnB9B,uBAAuB;QACtC,wEAAwE,GACxE+B,eAAe/B,MAAM+B,aAAa,GAC9B;YAAEC,OAAOhC,MAAM+B,aAAa,CAACC,KAAK;YAAEC,eAAejC,MAAM+B,aAAa,CAACE,aAAa;YAAEC,MAAMlC,MAAM+B,aAAa,CAACG,IAAI;QAAC,IACrH;IACN;AACF;AAIA,iEAAiE,GACjE,OAAO,eAAeC,eAAe3D,MAAc;IACjD,OAAO5B,eAAe4B,QAAQ,CAAC,CAAC,EAAEA,OAAO,aAAa,CAAC;AACzD;AAEA,oEAAoE,GACpE,OAAO,SAAS4D,iBAAiBC,IAAY,EAAEC,KAAa,EAAEC,IAAY;IACxE,MAAM,CAACC,KAAK,GAAGH,KAAKI,KAAK,CAAC;IAC1B,MAAMC,SAASF,KAAKG,QAAQ,CAAC,OAAO,MAAM;IAC1C,OAAO,GAAGH,OAAOE,SAASJ,MAAM,CAAC,EAAEC,MAAM;AAC3C;AAGA;;;;;CAKC,GACD,OAAO,eAAeK,uBAAuBnE,KAAa,EAAED,MAAc;IACxE,IAAI,CAACH,+BAA+B,CAACI,OAAO,OAAO;QAAEoE,SAAS;QAAOC,QAAQ,EAAE;QAAEC,QAAQ,EAAE;IAAC;IAC5F,MAAMrD,YAAYhD,cAAc+C,GAAG,GAAGC,SAAS;IAC/C,MAAM,CAACqD,QAAQC,KAAKC,MAAM,GAAG,MAAMC,QAAQC,GAAG,CAAC;QAC7C3D,kBAAkBf,OACf2E,KAAK,CAAC,oBAAoB,MAAM,YAChCA,KAAK,CAAC,UAAU,MAAM,aACtBC,KAAK,CAAC,IACNC,GAAG;QACN5D,UAAUC,UAAU,CAAC,QAAQC,GAAG,CAACnB,OAAO6E,GAAG;QAC3C5D,UAAUC,UAAU,CAAC,SAASyD,KAAK,CAAC,SAAS,MAAM3E,OAAO4E,KAAK,CAAC,IAAIC,GAAG;KACxE;IACD,IAAI,CAACP,OAAOQ,IAAI,CAAC1B,MAAM,EAAE,OAAO;QAAEgB,SAAS;QAAOC,QAAQ,EAAE;QAAEC,QAAQ,EAAE;IAAC;IACzE,MAAMD,SAAS,MAAMI,QAAQC,GAAG,CAC9BF,MAAMM,IAAI,CAACnD,GAAG,CAAC,OAAOR;YAQLA,MAAAA;QAPf,MAAMG,KAAKyD,OAAO5D,IAAIG,EAAE;QACxB,MAAM,CAAC0D,UAAUC,SAAS,GAAG,MAAMR,QAAQC,GAAG,CAAC;YAC7CzD,UAAUC,UAAU,CAAC,SAASC,GAAG,CAACG,IAAIJ,UAAU,CAAC,YAAYC,GAAG,CAAC,UAAU0D,GAAG;YAC9EnB,eAAepC;SAChB;QACD,OAAO;YACLvB,QAAQuB;YACRQ,MAAMiD,QAAO5D,QAAAA,WAAAA,IAAI0D,GAAG,CAAC,mBAAR1D,WAAmBA,IAAI0D,GAAG,CAAC,oBAA3B1D,OAAuCG;YACpD4D,aAAajF,QAAQ+E,SAASG,MAAM,IAAIH,SAASH,GAAG,CAAC;YACrDI,UAAU,GAAGA,SAASjB,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC;QACnD;IACF;IAEF,OAAO;QACLI,SAASpG,MAAMoH,gBAAgB,CAACb,IAAIc,IAAI,IAAa;QACrDhB;QACA,iEAAiE;QACjE,2BAA2B;QAC3BC,QAAQA,OAAOQ,IAAI,CAChBnD,GAAG,CAAC,CAACR,MAAc,CAAA;gBAAEG,IAAIyD,OAAO5D,IAAIG,EAAE;gBAAGC,OAAOJ,IAAIkE,IAAI;YAAuB,CAAA,GAC/EpC,MAAM,CAAC,CAAC,EAAE1B,KAAK,EAAE,GAAKA,MAAMsB,MAAM,KAAK,aACvCyC,IAAI,CAAC,CAACC,GAAGC,IAAMC,OAAOD,EAAEjE,KAAK,CAACxB,MAAM,KAAKA,UAAU0F,OAAOF,EAAEhE,KAAK,CAACxB,MAAM,KAAKA,SAC7E4B,GAAG,CAAC,CAAC,EAAEL,EAAE,EAAEC,KAAK,EAAE;gBAGFA;mBAHQ,aACpBF,0BAA0BC,IAAIC;gBACjCxB,QAAQwB,MAAMxB,MAAM;gBACpB2F,cAAc,EAACnE,eAAAA,MAAMyB,KAAK,YAAXzB,eAAe,EAAE,EAAE0B,MAAM,CAAC,CAACC,OAASA,KAAKyC,YAAY,IAAI,CAACzC,KAAKC,QAAQ,EAAEC,MAAM;;;IAEpG;AACF;AAEA,OAAO,MAAMwC,qBAAuC,OAAOC,KAAKC;QAGxCC,cACAA;IAHtB,IAAIF,IAAIG,MAAM,KAAK,QAAQ,OAAOF,IAAIrE,MAAM,CAAC,KAAKwE,IAAI,CAAC;QAAEC,OAAO;IAAqB;IACrF,MAAMH,OAAOzG,eAAeuG;IAC5B,MAAM9F,SAASgF,QAAOgB,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB;IACxC,MAAMI,SAASpB,QAAOgB,eAAAA,IAAI,CAAC,SAAS,YAAdA,eAAkB;IACxC,yEAAyE;IACzE,yEAAyE;IACzE,qEAAqE;IACrE,qEAAqE;IACrE,8DAA8D;IAC9D,EAAE;IACF,sEAAsE;IACtE,wEAAwE;IACxE,2EAA2E;IAC3E,+DAA+D;IAC/D,MAAMK,YAAYD,WAAW,kBAAkBA,WAAW;IAC1D,MAAME,OAAO,MAAMjH,kBACjByG,KACA9F,QACAoG,WAAW,aAAa,mBAAmBC,YAAY,eAAeE,WACtEnH,yBACA,0EAA0E;IAC1E,mDAAmD;IACnDgH,WAAW,aAAaA,WAAW,YAAYA,WAAW,mBAAmB;QAAEI,cAAc;IAAM,IAAI,CAAC;IAE1G,IAAI,WAAWF,MAAM,OAAOP,IAAIrE,MAAM,CAAC4E,KAAK5E,MAAM,EAAEwE,IAAI,CAAC;QAAEC,OAAOG,KAAKH,KAAK;IAAC;IAC7E,MAAMM,QAAQH,KAAKG,KAAK;IACxB,MAAM1G,SAASL;IACf,IAAI;QACF,OAAQ0G;YACN,KAAK;gBACH,OAAOL,IAAIrE,MAAM,CAAC,KAAKwE,IAAI,CAAC,MAAM9B,uBAAuBqC,MAAMxG,KAAK,EAAEwG,MAAMzG,MAAM;YACpF,KAAK;gBAAkB;wBAEEgG;oBADvB,MAAMU,UAAU,MAAM,MAAM,CAAC;oBAC7B,MAAM7F,UAAUmE,QAAOgB,gBAAAA,IAAI,CAAC,UAAU,YAAfA,gBAAmB;oBAC1C,IAAI;wBACF,MAAMxE,QAAQ,MAAMkF,QAAQC,wBAAwB,CAAC;4BACnD1G,OAAOwG,MAAMxG,KAAK;4BAClBY;4BACA+F,KAAKH,MAAMG,GAAG;4BACdC,QAAQb,IAAI,CAAC,SAAS;wBACxB;wBACA,OAAOD,IAAIrE,MAAM,CAAC,KAAKwE,IAAI,CAAC;4BAAEY,IAAI;4BAAMtF,OAAOF,0BAA0BT,SAASW;wBAAO;oBAC3F,EAAE,OAAO2E,OAAO;wBACd,IAAIA,iBAAiBO,QAAQK,wBAAwB,EAAE;4BACrD,OAAOhB,IAAIrE,MAAM,CAACyE,MAAMzE,MAAM,EAAEwE,IAAI,CAAC;gCAAEC,OAAOA,MAAMa,OAAO;4BAAC;wBAC9D;wBACA,MAAMb;oBACR;gBACF;YACA,KAAK;YACL,KAAK;gBAAe;wBAEKH;oBADvB,MAAMiB,UAAU,MAAM,MAAM,CAAC;oBAC7B,MAAMpG,UAAUmE,QAAOgB,iBAAAA,IAAI,CAAC,UAAU,YAAfA,iBAAmB;oBAC1C,IAAI;wBACF,MAAMxE,QACJ4E,WAAW,iBACP,MAAMa,QAAQC,sBAAsB,CAAC;4BAAEjH,OAAOwG,MAAMxG,KAAK;4BAAEY;4BAASb,QAAQyG,MAAMzG,MAAM;wBAAC,KACzF,MAAMiH,QAAQE,oBAAoB,CAAC;4BAAElH,OAAOwG,MAAMxG,KAAK;4BAAEY;wBAAQ;wBACvE,OAAOkF,IAAIrE,MAAM,CAAC,KAAKwE,IAAI,CAAC;4BAAEY,IAAI;4BAAMtF,OAAOF,0BAA0BT,SAASW;wBAAO;oBAC3F,EAAE,OAAO2E,OAAO;wBACd,IAAIA,iBAAiBc,QAAQG,wBAAwB,EAAE;4BACrD,OAAOrB,IAAIrE,MAAM,CAACyE,MAAMzE,MAAM,EAAEwE,IAAI,CAAC;gCAAEC,OAAOA,MAAMa,OAAO;4BAAC;wBAC9D;wBACA,MAAMb;oBACR;gBACF;YACA,KAAK;gBACH,IAAI,CAACpG,QAAQ,OAAOgG,IAAIrE,MAAM,CAAC,KAAKwE,IAAI,CAAC;oBAAEmB,WAAW;gBAAM;gBAC5D,OAAOtB,IAAIrE,MAAM,CAAC,KAAKwE,IAAI,CAAC;oBAC1BmB,WAAW;oBACXC,QAAQtI,kBAAkBe;oBAC1BsC,UAAUtC,OAAOsC,QAAQ,CAACT,GAAG,CAAC,CAAC2F,SAAY,CAAA;4BACzCtB,QAAQsB,OAAOtB,MAAM;4BACrBzD,OAAOzD,4BAA4B,CAACwI,OAAOtB,MAAM,CAAC;4BAClD3D,OAAOiF,OAAOjF,KAAK;wBACrB,CAAA;oBACAkF,cAAczH,OAAOyH,YAAY;oBACjCC,eAAe3I;gBACjB;YACF,KAAK;gBAAU;oBACb,+DAA+D;oBAC/D,oEAAoE;oBACpE,qEAAqE;oBACrE,MAAM,CAAC4I,MAAMC,UAAU,GAAG,MAAMjD,QAAQC,GAAG,CAAC;wBAC1C3D,kBAAkByF,MAAMxG,KAAK,EAAE2E,KAAK,CAAC,UAAU,MAAM6B,MAAMzG,MAAM,EAAE4H,OAAO,CAAC,eAAe,QAAQ/C,KAAK,CAAC,IAAIC,GAAG;wBAC/G9D,kBAAkByF,MAAMxG,KAAK,EAC1B2E,KAAK,CAAC,UAAU,MAAM,IACtBA,KAAK,CAAC,oBAAoB,MAAM,YAChCgD,OAAO,CAAC,eAAe,QACvB/C,KAAK,CAAC,IACNC,GAAG;qBACP;oBACD,MAAMP,SAAS;2BAAImD,KAAK3C,IAAI;2BAAK4C,UAAU5C,IAAI;qBAAC,CAC7CnD,GAAG,CAAC,CAACR,MAAaE,0BAA0B0D,OAAO5D,IAAIG,EAAE,GAAGH,IAAIkE,IAAI,KACpEC,IAAI,CAAC,CAACC,GAAGC,IAAMA,EAAE7C,WAAW,GAAG4C,EAAE5C,WAAW,EAC5CnC,KAAK,CAAC,GAAG;oBACZ,OAAOsF,IAAIrE,MAAM,CAAC,KAAKwE,IAAI,CAAC;wBAAE3B;oBAAO;gBACvC;YACA,KAAK;gBAAY;wBAeS;wBAsDLsD;oBApEnB,IAAI,CAAC9H,QAAQ,OAAOgG,IAAIrE,MAAM,CAAC,KAAKwE,IAAI,CAAC;wBAAEC,OAAO;oBAAsC;oBACxF,MAAMxF,aAAarB,kBAAkBwG;oBACrC,IAAI,CAACnF,YAAY,OAAOoF,IAAIrE,MAAM,CAAC,KAAKwE,IAAI,CAAC;wBAAEC,OAAO;oBAA0B;oBAChF,IAAI,CAACM,MAAMxG,KAAK,EAAE,OAAO8F,IAAIrE,MAAM,CAAC,KAAKwE,IAAI,CAAC;wBAAEC,OAAO;oBAA8B;oBACrF,MAAM2B,SAAS3I,qBAAqBY,QAAQiG,IAAI,CAAC,QAAQ;oBACzD,IAAI,WAAW8B,QAAQ,OAAO/B,IAAIrE,MAAM,CAAC,KAAKwE,IAAI,CAAC;wBAAEC,OAAO2B,OAAO3B,KAAK;oBAAC;oBACzE,MAAMF,SAASD,IAAI,CAAC,iBAAiB;oBACrC,MAAM3D,WAAW/D,4BAA4B2H,UACzClG,OAAOsC,QAAQ,CAAC0F,IAAI,CAAC,CAACR,SAAWA,OAAOtB,MAAM,KAAKA,UACnDM;oBACJ,IAAI,CAAClE,UAAU,OAAO0D,IAAIrE,MAAM,CAAC,KAAKwE,IAAI,CAAC;wBAAEC,OAAO;oBAA2B;oBAE/E,MAAMtF,UAAUH,mBAAmB+F,MAAMxG,KAAK,EAAEwG,MAAMzG,MAAM,EAAEW;oBAC9D,MAAMqH,UAAU,MAAM7J,eAAesI,MAAMxG,KAAK,EAAEgI,KAAK,CAAC,IAAO,CAAA,CAAC,CAAA;oBAChE,MAAMC,WAAWlD,QAAO,4BAAA,AAACgD,QAA2CG,gBAAgB,YAA5D,4BAAgE,IAAIC,IAAI;oBAChG,MAAMvE,OAAO,MAAMF,eAAe8C,MAAMzG,MAAM;oBAC9C,MAAMqI,SAAoD;wBACxDC,MAAM;wBACNC,qBAAqB1H;wBACrB2H,aAAa5E,iBAAiBC,MAAM,wBAAwBtF;wBAC5DkK,YAAY7E,iBAAiBC,MAAM,0BAA0BtF;wBAC7D,2BAA2B;wBAC3B,qDAAqDO,2BAA2B,CAAC,EAAE;wBACnF,oCAAoC;wBACpC,iDAAiD;wBACjD,yDAAyDC,4BAA4B,CAACsD,SAAS4D,MAAM,CAAC;wBACtG,iEAAiE5D,SAASC,KAAK;wBAC/E,mEAAmE5D;wBACnE,kBAAkBC;wBAClB,qBAAqBkC;wBACrB,mBAAmB4F,MAAMxG,KAAK;wBAC9B,oBAAoBwG,MAAMzG,MAAM;wBAChC,iBAAiByG,MAAMG,GAAG;wBAC1B,mBAAmBvI,uBAAuByJ,OAAOnG,KAAK;wBACtD,4BAA4BU,SAAS4D,MAAM;wBAC3C,2BAA2B5D,SAASC,KAAK;wBACzC,2BAA2BwF,OAAO3F,aAAa;wBAC/C,oCAAoC,CAAC,kBAAkB,EAAEvB,uBAAuBC,UAAU;wBAC1F,uCAAuClC;wBACvC,0CAA0CkC;wBAC1C,wCAAwC4F,MAAMxG,KAAK;uBAC/CiI,WAAW;wBAAEA;oBAAS,IAAI,CAAC,GAC3BnI,OAAOyH,YAAY,GACnB;wBACE,0BAA0B;wBAC1B,yDAAyD;uBAGrDU,WAAW;wBAAE,6BAA6B;oBAAO,IAAI,CAAC,KAE5D,CAAC;oBAEPJ,OAAOnG,KAAK,CAAC+G,OAAO,CAAC,CAAC7G,MAAM8G;wBAC1B,MAAM7G,MAAM5C,eAAe2C,KAAKC,GAAG;wBACnCuG,MAAM,CAAC,CAAC,WAAW,EAAEM,MAAM,WAAW,CAAC,CAAC,GAAG9G,KAAKG,QAAQ;wBACxD,uEAAuE;wBACvE,2EAA2E;wBAC3EqG,MAAM,CAAC,CAAC,WAAW,EAAEM,MAAM,uBAAuB,CAAC,CAAC,GAAG;wBACvDN,MAAM,CAAC,CAAC,WAAW,EAAEM,MAAM,0BAA0B,CAAC,CAAC,GAAG9G,KAAKI,SAAS;wBACxEoG,MAAM,CAAC,CAAC,WAAW,EAAEM,MAAM,iCAAiC,CAAC,CAAC,GAAG9G,KAAKE,IAAI;wBAC1E,IAAID,KAAKuG,MAAM,CAAC,CAAC,WAAW,EAAEM,MAAM,wCAAwC,CAAC,CAAC,GAAG7G,IAAI8G,GAAG;wBACxFP,MAAM,CAAC,CAAC,WAAW,EAAEM,MAAM,0CAA0C,CAAC,CAAC,GAAG9G,KAAKC,GAAG;wBAClF,IAAI/B,OAAOyH,YAAY,EAAEa,MAAM,CAAC,CAAC,WAAW,EAAEM,MAAM,2BAA2B,CAAC,CAAC,GAAG;oBACtF;oBACA,MAAMd,UAAU,MAAMrI,UAAU,QAAQ,qBAAqB;wBAC3D6I;wBACAQ,gBAAgB,CAAC,gBAAgB,EAAEhI,SAAS;oBAC9C;oBACA,MAAMiI,MAAM9D,gBAAO6C,gBAAAA,QAAQ7B,IAAI,qBAAZ6B,cAAciB,GAAG,mBAAI;oBACxC,IAAI,CAACjB,QAAQf,EAAE,IAAI,CAACgC,KAAK;4BAC0CjB,qBAAAA;wBAAjEkB,QAAQ5C,KAAK,CAAC,mCAAmC0B,QAAQnG,MAAM,GAAEmG,iBAAAA,QAAQ7B,IAAI,sBAAZ6B,sBAAAA,eAAc1B,KAAK,qBAAnB0B,oBAAqBmB,IAAI;wBAC1F,OAAOjD,IAAIrE,MAAM,CAAC,KAAKwE,IAAI,CAAC;4BAAEC,OAAO;wBAAwD;oBAC/F;oBACA,OAAOJ,IAAIrE,MAAM,CAAC,KAAKwE,IAAI,CAAC;wBAAE4C;wBAAKjI;oBAAQ;gBAC7C;YACA;gBACE,OAAOkF,IAAIrE,MAAM,CAAC,KAAKwE,IAAI,CAAC;oBAAEC,OAAO;gBAAiB;QAC1D;IACF,EAAE,OAAOA,OAAO;QACd4C,QAAQ5C,KAAK,CAAC,kBAAkBC,QAAQD;QACxC,OAAOJ,IAAIrE,MAAM,CAAC,KAAKwE,IAAI,CAAC;YAAEC,OAAO;QAAqC;IAC5E;AACF,EAAC"}

package/src/lib/server/pos-kiosk.d.ts

@@ -30,6 +30,8 @@ export declare function posKioskDeviceId(device: PosDeviceToken): string;
  * product, a gift card whose code needs issuing, and a digital download.
  */
 export declare function posKioskSellable(product: CommerceModel.HostProduct): boolean;
+/** A variant the kiosk may sell: priced, and offered by the merchant's choice (AGL-4038). */
+export declare function posKioskVariantOffered(product: CommerceModel.HostProduct, variant: CommerceModel.ProductVariant): boolean;
 /** A product as the kiosk may show it: names, prices and choices, nothing else. */
 export declare function posKioskProduct(id: string, product: CommerceModel.HostProduct, hostId: string): CommerceModel.PosKioskProduct;
 /** An order as its kiosk reads it back; null for any order this kiosk did not open. */

package/src/lib/server/pos-kiosk.js

@@ -21,6 +21,7 @@ import { pluginSmsAvailable } from "@aglyn/aglyn/plugin-manager/plugin-sms-messa
 import { consumeRateLimit, firebaseAdmin, getLockdownVerdict, getOrgForHost, getPluginConfig } from "@aglyn/tenant-data-admin";
 import { resolveOrgPermissions } from "@aglyn/tenant-runtime/org-permissions";
 import * as CommerceModel from "../model/index.js";
+import { productOfferedOnKiosk } from "../model/commerce-kiosk-offer.js";
 import { posRegisterSettings } from "../plugin-config.js";
 import { posKioskSettings } from "../pos-kiosk-config.js";
 import { verifyMemberPassword } from "./membership.js";
@@ -54,7 +55,7 @@ function refuse(status, error) {
     };
 }
 /** The kiosk's gate, asked again on every call. */ async function authorizeKiosk(req, body, write) {
-    var _host_get, _ref, _ref1, _ref2, _register_data;
+    var _ref, _ref1, _ref2, _register_data;
     var _membership_permissions, _owner_org;
     const device = await resolveDisplayToken(displayToken(req, body));
     if (!device) return refuse(401, 'This kiosk is not paired.');
@@ -66,11 +67,12 @@ function refuse(status, error) {
         hostRef.collection('registers').doc(device.registerId).get()
     ]);
     if (!host.exists || !register.exists) return refuse(401, 'This kiosk is not paired.');
-    const role = ((_host_get = host.get('memberRoles')) != null ? _host_get : {})[device.createdBy];
+    // The member who paired it must still work the register here: the key
+    // decides, not the site role (AGL-4047).
     const membership = device.createdBy ? await resolveOrgPermissions(device.createdBy, {
         hostId: device.hostId
     }) : null;
-    if (role !== 'admin' && role !== 'editor' || !(membership == null ? void 0 : (_membership_permissions = membership.permissions) == null ? void 0 : _membership_permissions.managePos)) {
+    if (!(membership == null ? void 0 : (_membership_permissions = membership.permissions) == null ? void 0 : _membership_permissions.managePos)) {
         return refuse(403, 'This kiosk needs a staff member to pair it again.');
     }
     const owner = await getOrgForHost(device.hostId);
@@ -183,10 +185,16 @@ async function context(gate) {
  */ export function posKioskSellable(product) {
     var _product_variants;
     if (product.status !== 'active') return false;
+    // The merchant's own choice of what the kiosk offers (AGL-4038), for any
+    // product: "Offer on the kiosk" in the product editor.
+    if (!productOfferedOnKiosk(product)) return false;
     if (product.subscription && !product.subscriptionOptional) return false;
     if (product.giftCard) return false;
     if (product.type === 'digital') return false;
-    return ((_product_variants = product.variants) != null ? _product_variants : []).some((variant)=>CommerceModel.variantHasPrice(variant));
+    return ((_product_variants = product.variants) != null ? _product_variants : []).some((variant)=>posKioskVariantOffered(product, variant));
+}
+/** A variant the kiosk may sell: priced, and offered by the merchant's choice (AGL-4038). */ export function posKioskVariantOffered(product, variant) {
+    return CommerceModel.variantHasPrice(variant) && productOfferedOnKiosk(product, variant.id);
 }
 /** A product as the kiosk may show it: names, prices and choices, nothing else. */ export function posKioskProduct(id, product, hostId) {
     var _product_description, _product_name, _product_categoryIds, _product_options, _product_variants;
@@ -210,7 +218,7 @@ async function context(gate) {
                     ...option.values
                 ]
             })),
-        variants: ((_product_variants = product.variants) != null ? _product_variants : []).filter((variant)=>CommerceModel.variantHasPrice(variant)).map((variant)=>{
+        variants: ((_product_variants = product.variants) != null ? _product_variants : []).filter((variant)=>posKioskVariantOffered(product, variant)).map((variant)=>{
             var _variant_options;
             return {
                 id: variant.id,
@@ -349,7 +357,7 @@ async function checkout(gate, req, body) {
             return refuse(409, 'An item in your cart is no longer available. Remove it and try again.');
         }
         const variant = line.variantId ? product.variants.find((candidate)=>candidate.id === line.variantId) : product.variants[0];
-        if (!variant || !CommerceModel.variantHasPrice(variant)) {
+        if (!variant || !posKioskVariantOffered(product, variant)) {
             return refuse(409, `${product.name} is no longer available. Remove it and try again.`);
         }
         const wanted = cart.lines.filter((other)=>{
@@ -662,12 +670,8 @@ function signUnlock(payload) {
         return null;
     }
 }
-/** Whether a member may still unlock: their role and `managePos` today. */ async function mayUnlock(gate, memberUid) {
-    var _host_get;
+/** Whether a member may still unlock: `managePos` here today, whatever their site role (AGL-4047). */ async function mayUnlock(gate, memberUid) {
     var _membership_permissions;
-    const host = await gate.hostRef.get();
-    const role = ((_host_get = host.get('memberRoles')) != null ? _host_get : {})[memberUid];
-    if (role !== 'admin' && role !== 'editor') return false;
     const membership = await resolveOrgPermissions(memberUid, {
         hostId: gate.hostId
     });
@@ -733,6 +737,7 @@ async function unlock(gate, req, body) {
             }
         };
     }
+    // Members of this site only, any role: `mayUnlock` below asks the key.
     const host = await gate.hostRef.get();
     const roles = (_host_get = host.get('memberRoles')) != null ? _host_get : {};
     const pins = await gate.hostRef.collection('posStaffPins').limit(50).get();
@@ -740,7 +745,7 @@ async function unlock(gate, req, body) {
     for (const doc of pins.docs){
         var _doc_get, _doc_get1;
         const uid = String(doc.id);
-        if (roles[uid] !== 'admin' && roles[uid] !== 'editor') continue;
+        if (!roles[uid]) continue;
         if (Number((_doc_get = doc.get('lockedUntilMs')) != null ? _doc_get : 0) > now) continue;
         const hash = String((_doc_get1 = doc.get('pinScrypt')) != null ? _doc_get1 : '');
         if (hash && verifyMemberPassword(pin, hash)) {