@aglyn/plugins-commerce 1.0.0-beta.285 → 1.0.0-beta.288

package/src/lib/plugin.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../../../../libs/plugins/commerce/src/lib/plugin.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn'\nimport { mdiStorefrontOutline } from '@aglyn/shared-data-mdi'\nimport { lazy } from 'react'\nconst PosConsolePage = lazy(() => import('./components/console/pos-page.component'))\n/** The customer display (AGL-3608): loads only on the public page that shows it. */\nconst PosDisplayPage = lazy(() => import('./components/console/pos-display-page.component'))\nconst PosKioskPage = lazy(() => import('./components/console/pos-kiosk-page.component'))\n/** Staff → Hardware orders (AGL-4038): loads only on its staff page. */\nconst PosHardwareOrdersStaffPage = lazy(\n  () => import('./components/console/pos-hardware-orders-staff-page.component'),\n)\n/** Staff → Reader start-up screen (AGL-4048): loads only on its staff page. */\nconst PosReaderSplashStaffPage = lazy(\n  () => import('./components/console/pos-reader-splash-staff-page.component'),\n)\nconst CommerceGlanceCard = lazy(\n  () => import('./components/console/commerce-glance-card.component'),\n)\nconst NewestSiteUsersCard = lazy(\n  () => import('./components/console/newest-site-users-card.component'),\n)\nconst SiteMemberPurchases = lazy(\n  () => import('./components/console/site-member-purchases.component'),\n)\nimport {\n  COMMERCE_CONSOLE_SECTIONS,\n  COMMERCE_RETIRED_SECTIONS,\n} from './components/commerce-console-sections'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { COMMERCE_PERMISSIONS } from './model/plugin-permissions'\nimport { registerCommerceRecordLists } from './model/commerce-record-lists'\nimport { registerCommerceRecordRoutes } from './model/commerce-record-routes'\nimport { registerCommerceZones } from './components/console/product-zones'\nimport { registerCommerceOrderZones } from './components/console/order-zones'\nimport { registerCommerceReturnZones } from './components/console/return-zones'\nimport { registerCommerceStoreZones } from './components/console/store-zones'\nimport { registerCommercePosZones } from './components/console/pos-zones'\nimport { registerCommerceTransferUi } from './transfer/register-transfer-ui'\nimport { COMMERCE_SEARCH_SOURCES } from './model/commerce-search-sources'\nimport { COMMERCE_CONFIG_SCHEMA } from './plugin-config'\n\n/** Code-split: the Products console page only loads when opened. */\nconst CommerceConsolePage = lazy(() => import('./components/commerce-console-page'))\n\n/**\n * Console half (AGL-395): registers the Products nav item in the\n * ConsoleExtension registry so the commerce console surface is owned by the\n * plugin, like events and email. The page body still lives in the console\n * app (`/[hostId]/products`): its product editor depends on the app's media\n * browser, which transitively pulls in the org/session context, so a full\n * body relocation needs a plugin-consumable media-picker context first —\n * tracked as follow-up. The nav item omits a `Component`, so the shell's\n * nav renders the link and the existing named route serves the page.\n */\nexport function registerCommerceConsole(): void {\n  // Where a product is read, for surfaces outside this plugin (AGL-3080).\n  registerCommerceRecordRoutes()\n  registerCommerceRecordLists()\n  // The zones its product editor, products hub and CSV import dialog host,\n  // with the props each hands a widget (AGL-2916, AGL-3080).\n  registerCommerceZones()\n  // …and the order dialog's two (AGL-3611), where a shipping plugin's widget\n  // buys a label and records the shipment through the dialog's own route.\n  registerCommerceOrderZones()\n  // …and the return dialog's (AGL-3611), where a shipping plugin's widget\n  // buys the buyer a return label and attaches it through this plugin's route.\n  registerCommerceReturnZones()\n  // The orders list's bulk actions and the store's Settings (AGL-3612).\n  registerCommerceStoreZones()\n  // The register's orders from other channels — a delivery app's (AGL-3644).\n  registerCommercePosZones()\n  // Its import and export resources' names and the products wizard's own\n  // step (AGL-3531); the server halves register from the console's server\n  // declarations.\n  registerCommerceTransferUi()\n  // Plugin-declared permissions (AGL-435): tier defaults ride every\n  // resolved role set; custom roles override key-by-key.\n  Aglyn.registerPluginPermissions(COMMERCE_PERMISSIONS)\n  // Register discount ceiling (AGL-2161) — the generic settings card renders\n  // it from this schema, so there is no bespoke UI to keep in sync.\n  Aglyn.registerPluginConfigSchema(COMMERCE_CONFIG_SCHEMA)\n  Aglyn.registerConsoleExtension({\n    pluginId: BUNDLE_ID,\n    displayName: 'Commerce',\n    searchSources: COMMERCE_SEARCH_SOURCES,\n    // The screen a register turns toward its customer (AGL-3608), at\n    // `/kiosk/commerce/pos-display`. No staff session: the device proves\n    // itself with the display token it got by pairing, and\n    // `server/pos-display.ts` refuses every read without one.\n    // Every workspace's orders from the POS hardware shop (AGL-4038), where\n    // staff record Stripe's order id and the tracking, move each order on,\n    // and cancel or refund one that has not shipped. The staff area loads\n    // this registrar through commerce's `staff` surface.\n    staffPages: [\n      {\n        id: 'hardware-orders',\n        label: 'Hardware orders',\n        header: { title: 'Hardware Orders', docsTopic: 'posHardware' },\n        Component: PosHardwareOrdersStaffPage,\n      },\n      // The platform's default card reader start-up screen (AGL-4048), which\n      // every store that has not picked its own logo or image shows.\n      {\n        id: 'reader-start-up-screen',\n        label: 'Reader start-up screen',\n        header: { title: 'Reader Start-up Screen', docsTopic: 'posHardware' },\n        Component: PosReaderSplashStaffPage,\n      },\n    ],\n    publicPages: [\n      { path: '/pos-display', title: 'Customer display', Component: PosDisplayPage },\n      // The self-service kiosk (AGL-3623), paired the same way with a kiosk\n      // code; `server/pos-kiosk.ts` refuses every call without its token.\n      { path: '/pos-kiosk', title: 'Self-service kiosk', Component: PosKioskPage },\n    ],\n    // Dashboard/analytics glance card (AGL-419): rendered through the\n    // shell's 'commerceGlance' widget slot.\n    widgets: [\n      {\n        slot: 'commerceGlance',\n        widgetId: 'commerce-glance',\n        title: 'Commerce',\n        Component: CommerceGlanceCard,\n      },\n      // What a site user bought — lifetime total, orders and subscriptions —\n      // in their drawer on the site's Users page: the orders and\n      // subscriptions are this plugin's.\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.siteMember,\n        widgetId: 'commerce-site-member-purchases',\n        title: 'Purchases',\n        Component: SiteMemberPurchases,\n      },\n    ],\n    navItems: [\n      {\n        label: 'Products',\n        href: '/products',\n        icon: { path: mdiStorefrontOutline.path },\n        // Sections as ROUTES (AGL-2501): `/products/orders` and friends are\n        // real URLs the shell resolves and gates, so the page mounts the one\n        // being read instead of subscribing all six.\n        sections: COMMERCE_CONSOLE_SECTIONS,\n        // `/products/settings` was split into a page per setting (AGL-3713);\n        // links to it open the first of them.\n        retiredSections: COMMERCE_RETIRED_SECTIONS,\n        header: {\n          title: 'Products',\n          icon: { path: mdiStorefrontOutline.path },\n          // The overview, not `catalog`: this surface is the whole commerce\n          // console — Catalog, Orders, Promotions and Reservations.\n          docsTopic: 'commerce',\n        },\n        Component: CommerceConsolePage,\n      },\n      {\n        // POS register (AGL-312/419): relocated from the app's /pos route —\n        // the generic [pluginSlug] shell now serves it at the same URL.\n        label: 'POS',\n        href: '/pos',\n        /*\n         * WHO may open the register, declared on THIS nav item rather than on\n         * the extension.\n         *\n         * A key here narrows one surface; a key on the extension would gate\n         * every surface it registers, and Products is the sibling — a catalog\n         * anyone who works on the site may open. The register is the one that\n         * takes money and lists checked-in guests by name, so the two\n         * genuinely have different answers and only this one is narrowed.\n         *\n         * `managePos` rather than a dotted catalog key because it is the key\n         * the sale itself is refused by: `server/pos-order.ts` resolves the\n         * member's permission map and returns 403 unless `managePos` holds.\n         * The shell answers this declaration out of that same resolved map, so\n         * the console offers a register exactly to the people the route will\n         * accept a sale from — the gate and its server twin cannot disagree,\n         * because they are reading one value.\n         *\n         * `pos-order.ts` stays the enforcement point regardless. This decides\n         * whether the surface is built at all, which is the part a check\n         * inside the page cannot do: by the time the page can refuse itself it\n         * has mounted and its product, register, location and reservation\n         * listeners are already open.\n         */\n        permission: 'managePos',\n        icon: { path: mdiStorefrontOutline.path },\n        header: { title: 'Point of Sale', docsTopic: 'pos' },\n        Component: PosConsolePage,\n      },\n    ],\n  })\n  /*\n   * The USER ACCOUNTS half, registered under its own id.\n   *\n   * `accounts` is a switch rather than a bundle: the member blocks and every\n   * `membership/*` handler ship inside this package, which is why the id\n   * carries no loader manifest entry of its own. A second extension is how a\n   * card about visitor accounts is gated on the switch that decides whether\n   * the site serves them — `listConsoleWidgets` filters by the workspace's\n   * effective plugin ids, and `accounts` is default-OFF per site.\n   *\n   * A separate call rather than more widgets on the commerce extension: the\n   * registry is keyed by `pluginId` and that key IS the gate, so folding this\n   * card in above would have kept the dashboard defect it fixes — `Newest\n   * site users` on a site whose /signin returns 404.\n   */\n  Aglyn.registerConsoleExtension({\n    pluginId: Aglyn.ACCOUNTS_PLUGIN_ID,\n    displayName: 'User Accounts',\n    widgets: [\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.hostDashboard,\n        widgetId: 'accounts-newest-site-users',\n        title: 'Newest site users',\n        Component: NewestSiteUsersCard,\n      },\n    ],\n  })\n}\n\nexport * from './site'\n"],"names":["Aglyn","mdiStorefrontOutline","lazy","PosConsolePage","PosDisplayPage","PosKioskPage","PosHardwareOrdersStaffPage","PosReaderSplashStaffPage","CommerceGlanceCard","NewestSiteUsersCard","SiteMemberPurchases","COMMERCE_CONSOLE_SECTIONS","COMMERCE_RETIRED_SECTIONS","BUNDLE_ID","COMMERCE_PERMISSIONS","registerCommerceRecordLists","registerCommerceRecordRoutes","registerCommerceZones","registerCommerceOrderZones","registerCommerceReturnZones","registerCommerceStoreZones","registerCommercePosZones","registerCommerceTransferUi","COMMERCE_SEARCH_SOURCES","COMMERCE_CONFIG_SCHEMA","CommerceConsolePage","registerCommerceConsole","registerPluginPermissions","registerPluginConfigSchema","registerConsoleExtension","pluginId","displayName","searchSources","staffPages","id","label","header","title","docsTopic","Component","publicPages","path","widgets","slot","widgetId","CONSOLE_WIDGET_SLOTS","siteMember","navItems","href","icon","sections","retiredSections","permission","ACCOUNTS_PLUGIN_ID","hostDashboard"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,eAAc;AACrC,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,IAAI,QAAQ,QAAO;AAC5B,MAAMC,iBAAiBD,KAAK,IAAM,MAAM,CAAC;AACzC,kFAAkF,GAClF,MAAME,iBAAiBF,KAAK,IAAM,MAAM,CAAC;AACzC,MAAMG,eAAeH,KAAK,IAAM,MAAM,CAAC;AACvC,sEAAsE,GACtE,MAAMI,6BAA6BJ,KACjC,IAAM,MAAM,CAAC;AAEf,6EAA6E,GAC7E,MAAMK,2BAA2BL,KAC/B,IAAM,MAAM,CAAC;AAEf,MAAMM,qBAAqBN,KACzB,IAAM,MAAM,CAAC;AAEf,MAAMO,sBAAsBP,KAC1B,IAAM,MAAM,CAAC;AAEf,MAAMQ,sBAAsBR,KAC1B,IAAM,MAAM,CAAC;AAEf,SACES,yBAAyB,EACzBC,yBAAyB,QACpB,4CAAwC;AAC/C,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,oBAAoB,QAAQ,gCAA4B;AACjE,SAASC,2BAA2B,QAAQ,mCAA+B;AAC3E,SAASC,4BAA4B,QAAQ,oCAAgC;AAC7E,SAASC,qBAAqB,QAAQ,wCAAoC;AAC1E,SAASC,0BAA0B,QAAQ,sCAAkC;AAC7E,SAASC,2BAA2B,QAAQ,uCAAmC;AAC/E,SAASC,0BAA0B,QAAQ,sCAAkC;AAC7E,SAASC,wBAAwB,QAAQ,oCAAgC;AACzE,SAASC,0BAA0B,QAAQ,qCAAiC;AAC5E,SAASC,uBAAuB,QAAQ,qCAAiC;AACzE,SAASC,sBAAsB,QAAQ,qBAAiB;AAExD,kEAAkE,GAClE,MAAMC,sBAAsBvB,KAAK,IAAM,MAAM,CAAC;AAE9C;;;;;;;;;CASC,GACD,OAAO,SAASwB;IACd,wEAAwE;IACxEV;IACAD;IACA,yEAAyE;IACzE,2DAA2D;IAC3DE;IACA,2EAA2E;IAC3E,wEAAwE;IACxEC;IACA,wEAAwE;IACxE,6EAA6E;IAC7EC;IACA,sEAAsE;IACtEC;IACA,2EAA2E;IAC3EC;IACA,uEAAuE;IACvE,wEAAwE;IACxE,gBAAgB;IAChBC;IACA,kEAAkE;IAClE,uDAAuD;IACvDtB,MAAM2B,yBAAyB,CAACb;IAChC,2EAA2E;IAC3E,kEAAkE;IAClEd,MAAM4B,0BAA0B,CAACJ;IACjCxB,MAAM6B,wBAAwB,CAAC;QAC7BC,UAAUjB;QACVkB,aAAa;QACbC,eAAeT;QACf,iEAAiE;QACjE,qEAAqE;QACrE,uDAAuD;QACvD,0DAA0D;QAC1D,wEAAwE;QACxE,uEAAuE;QACvE,sEAAsE;QACtE,qDAAqD;QACrDU,YAAY;YACV;gBACEC,IAAI;gBACJC,OAAO;gBACPC,QAAQ;oBAAEC,OAAO;oBAAmBC,WAAW;gBAAc;gBAC7DC,WAAWjC;YACb;YACA,uEAAuE;YACvE,+DAA+D;YAC/D;gBACE4B,IAAI;gBACJC,OAAO;gBACPC,QAAQ;oBAAEC,OAAO;oBAA0BC,WAAW;gBAAc;gBACpEC,WAAWhC;YACb;SACD;QACDiC,aAAa;YACX;gBAAEC,MAAM;gBAAgBJ,OAAO;gBAAoBE,WAAWnC;YAAe;YAC7E,sEAAsE;YACtE,oEAAoE;YACpE;gBAAEqC,MAAM;gBAAcJ,OAAO;gBAAsBE,WAAWlC;YAAa;SAC5E;QACD,kEAAkE;QAClE,wCAAwC;QACxCqC,SAAS;YACP;gBACEC,MAAM;gBACNC,UAAU;gBACVP,OAAO;gBACPE,WAAW/B;YACb;YACA,uEAAuE;YACvE,2DAA2D;YAC3D,mCAAmC;YACnC;gBACEmC,MAAM3C,MAAM6C,oBAAoB,CAACC,UAAU;gBAC3CF,UAAU;gBACVP,OAAO;gBACPE,WAAW7B;YACb;SACD;QACDqC,UAAU;YACR;gBACEZ,OAAO;gBACPa,MAAM;gBACNC,MAAM;oBAAER,MAAMxC,qBAAqBwC,IAAI;gBAAC;gBACxC,oEAAoE;gBACpE,qEAAqE;gBACrE,6CAA6C;gBAC7CS,UAAUvC;gBACV,qEAAqE;gBACrE,sCAAsC;gBACtCwC,iBAAiBvC;gBACjBwB,QAAQ;oBACNC,OAAO;oBACPY,MAAM;wBAAER,MAAMxC,qBAAqBwC,IAAI;oBAAC;oBACxC,kEAAkE;oBAClE,0DAA0D;oBAC1DH,WAAW;gBACb;gBACAC,WAAWd;YACb;YACA;gBACE,oEAAoE;gBACpE,gEAAgE;gBAChEU,OAAO;gBACPa,MAAM;gBACN;;;;;;;;;;;;;;;;;;;;;;;SAuBC,GACDI,YAAY;gBACZH,MAAM;oBAAER,MAAMxC,qBAAqBwC,IAAI;gBAAC;gBACxCL,QAAQ;oBAAEC,OAAO;oBAAiBC,WAAW;gBAAM;gBACnDC,WAAWpC;YACb;SACD;IACH;IACA;;;;;;;;;;;;;;GAcC,GACDH,MAAM6B,wBAAwB,CAAC;QAC7BC,UAAU9B,MAAMqD,kBAAkB;QAClCtB,aAAa;QACbW,SAAS;YACP;gBACEC,MAAM3C,MAAM6C,oBAAoB,CAACS,aAAa;gBAC9CV,UAAU;gBACVP,OAAO;gBACPE,WAAW9B;YACb;SACD;IACH;AACF;AAEA,cAAc,YAAQ"}
+{"version":3,"sources":["../../../../../../libs/plugins/commerce/src/lib/plugin.ts"],"sourcesContent":["/**\n * @license\n * Copyright 2026 Aglyn LLC\n *\n * Licensed under the Apache License, Version 2.0 (the \"License\");\n * you may not use this file except in compliance with the License.\n * You may obtain a copy of the License at\n *\n *   http://www.apache.org/licenses/LICENSE-2.0\n *\n * Unless required by applicable law or agreed to in writing, software\n * distributed under the License is distributed on an \"AS IS\" BASIS,\n * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\n * See the License for the specific language governing permissions and\n * limitations under the License.\n */\n\nimport * as Aglyn from '@aglyn/aglyn'\nimport { mdiStorefrontOutline } from '@aglyn/shared-data-mdi'\nimport { lazy } from 'react'\nconst PosConsolePage = lazy(() => import('./components/console/pos-page.component'))\n/** The customer display (AGL-3608): loads only on the public page that shows it. */\nconst PosDisplayPage = lazy(() => import('./components/console/pos-display-page.component'))\nconst PosKioskPage = lazy(() => import('./components/console/pos-kiosk-page.component'))\nconst PosHardwareTermsPage = lazy(() => import('./components/console/pos-hardware-terms-page.component'))\nconst PosHardwareTermsSignPage = lazy(() => import('./components/console/pos-hardware-terms-sign-page.component'))\n/** Staff → Hardware orders (AGL-4038): loads only on its staff page. */\nconst PosHardwareOrdersStaffPage = lazy(\n  () => import('./components/console/pos-hardware-orders-staff-page.component'),\n)\n/** Staff → Reader start-up screen (AGL-4048): loads only on its staff page. */\nconst PosReaderSplashStaffPage = lazy(\n  () => import('./components/console/pos-reader-splash-staff-page.component'),\n)\nconst CommerceGlanceCard = lazy(\n  () => import('./components/console/commerce-glance-card.component'),\n)\nconst NewestSiteUsersCard = lazy(\n  () => import('./components/console/newest-site-users-card.component'),\n)\nconst SiteMemberPurchases = lazy(\n  () => import('./components/console/site-member-purchases.component'),\n)\nimport {\n  COMMERCE_CONSOLE_SECTIONS,\n  COMMERCE_RETIRED_SECTIONS,\n} from './components/commerce-console-sections'\nimport { BUNDLE_ID } from './constants/bundle-common'\nimport { COMMERCE_PERMISSIONS } from './model/plugin-permissions'\nimport { registerCommerceRecordLists } from './model/commerce-record-lists'\nimport { registerCommerceRecordRoutes } from './model/commerce-record-routes'\nimport { registerCommerceZones } from './components/console/product-zones'\nimport { registerCommerceOrderZones } from './components/console/order-zones'\nimport { registerCommerceReturnZones } from './components/console/return-zones'\nimport { registerCommerceStoreZones } from './components/console/store-zones'\nimport { registerCommercePosZones } from './components/console/pos-zones'\nimport { registerCommerceTransferUi } from './transfer/register-transfer-ui'\nimport { COMMERCE_SEARCH_SOURCES } from './model/commerce-search-sources'\nimport { COMMERCE_CONFIG_SCHEMA } from './plugin-config'\n\n/** Code-split: the Products console page only loads when opened. */\nconst CommerceConsolePage = lazy(() => import('./components/commerce-console-page'))\n\n/**\n * Console half (AGL-395): registers the Products nav item in the\n * ConsoleExtension registry so the commerce console surface is owned by the\n * plugin, like events and email. The page body still lives in the console\n * app (`/[hostId]/products`): its product editor depends on the app's media\n * browser, which transitively pulls in the org/session context, so a full\n * body relocation needs a plugin-consumable media-picker context first —\n * tracked as follow-up. The nav item omits a `Component`, so the shell's\n * nav renders the link and the existing named route serves the page.\n */\nexport function registerCommerceConsole(): void {\n  // Where a product is read, for surfaces outside this plugin (AGL-3080).\n  registerCommerceRecordRoutes()\n  registerCommerceRecordLists()\n  // The zones its product editor, products hub and CSV import dialog host,\n  // with the props each hands a widget (AGL-2916, AGL-3080).\n  registerCommerceZones()\n  // …and the order dialog's two (AGL-3611), where a shipping plugin's widget\n  // buys a label and records the shipment through the dialog's own route.\n  registerCommerceOrderZones()\n  // …and the return dialog's (AGL-3611), where a shipping plugin's widget\n  // buys the buyer a return label and attaches it through this plugin's route.\n  registerCommerceReturnZones()\n  // The orders list's bulk actions and the store's Settings (AGL-3612).\n  registerCommerceStoreZones()\n  // The register's orders from other channels — a delivery app's (AGL-3644).\n  registerCommercePosZones()\n  // Its import and export resources' names and the products wizard's own\n  // step (AGL-3531); the server halves register from the console's server\n  // declarations.\n  registerCommerceTransferUi()\n  // Plugin-declared permissions (AGL-435): tier defaults ride every\n  // resolved role set; custom roles override key-by-key.\n  Aglyn.registerPluginPermissions(COMMERCE_PERMISSIONS)\n  // Register discount ceiling (AGL-2161) — the generic settings card renders\n  // it from this schema, so there is no bespoke UI to keep in sync.\n  Aglyn.registerPluginConfigSchema(COMMERCE_CONFIG_SCHEMA)\n  Aglyn.registerConsoleExtension({\n    pluginId: BUNDLE_ID,\n    displayName: 'Commerce',\n    searchSources: COMMERCE_SEARCH_SOURCES,\n    // The screen a register turns toward its customer (AGL-3608), at\n    // `/kiosk/commerce/pos-display`. No staff session: the device proves\n    // itself with the display token it got by pairing, and\n    // `server/pos-display.ts` refuses every read without one.\n    // Every workspace's orders from the POS hardware shop (AGL-4038), where\n    // staff record Stripe's order id and the tracking, move each order on,\n    // and cancel or refund one that has not shipped. The staff area loads\n    // this registrar through commerce's `staff` surface.\n    staffPages: [\n      {\n        id: 'hardware-orders',\n        label: 'Hardware orders',\n        header: { title: 'Hardware Orders', docsTopic: 'posHardware' },\n        Component: PosHardwareOrdersStaffPage,\n      },\n      // The platform's default card reader start-up screen (AGL-4048), which\n      // every store that has not picked its own logo or image shows.\n      {\n        id: 'reader-start-up-screen',\n        label: 'Reader start-up screen',\n        header: { title: 'Reader Start-up Screen', docsTopic: 'posHardware' },\n        Component: PosReaderSplashStaffPage,\n      },\n    ],\n    publicPages: [\n      { path: '/pos-display', title: 'Customer display', Component: PosDisplayPage },\n      // The self-service kiosk (AGL-3623), paired the same way with a kiosk\n      // code; `server/pos-kiosk.ts` refuses every call without its token.\n      { path: '/pos-kiosk', title: 'Self-service kiosk', Component: PosKioskPage },\n      // The terms of sale for a card reader sold at the platform's register\n      // (AGL-4038): on its customer display, by the display's own token\n      // (`server/pos-display.ts`), and the printable booth sign, which holds\n      // only the published terms' address and summary.\n      { path: '/hardware-terms', title: 'Terms of sale', Component: PosHardwareTermsPage },\n      { path: '/hardware-terms-sign', title: 'Terms of sale sign', Component: PosHardwareTermsSignPage },\n    ],\n    // Dashboard/analytics glance card (AGL-419): rendered through the\n    // shell's 'commerceGlance' widget slot.\n    widgets: [\n      {\n        slot: 'commerceGlance',\n        widgetId: 'commerce-glance',\n        title: 'Commerce',\n        Component: CommerceGlanceCard,\n      },\n      // What a site user bought — lifetime total, orders and subscriptions —\n      // in their drawer on the site's Users page: the orders and\n      // subscriptions are this plugin's.\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.siteMember,\n        widgetId: 'commerce-site-member-purchases',\n        title: 'Purchases',\n        Component: SiteMemberPurchases,\n      },\n    ],\n    navItems: [\n      {\n        label: 'Products',\n        href: '/products',\n        icon: { path: mdiStorefrontOutline.path },\n        // Sections as ROUTES (AGL-2501): `/products/orders` and friends are\n        // real URLs the shell resolves and gates, so the page mounts the one\n        // being read instead of subscribing all six.\n        sections: COMMERCE_CONSOLE_SECTIONS,\n        // `/products/settings` was split into a page per setting (AGL-3713);\n        // links to it open the first of them.\n        retiredSections: COMMERCE_RETIRED_SECTIONS,\n        header: {\n          title: 'Products',\n          icon: { path: mdiStorefrontOutline.path },\n          // The overview, not `catalog`: this surface is the whole commerce\n          // console — Catalog, Orders, Promotions and Reservations.\n          docsTopic: 'commerce',\n        },\n        Component: CommerceConsolePage,\n      },\n      {\n        // POS register (AGL-312/419): relocated from the app's /pos route —\n        // the generic [pluginSlug] shell now serves it at the same URL.\n        label: 'POS',\n        href: '/pos',\n        /*\n         * WHO may open the register, declared on THIS nav item rather than on\n         * the extension.\n         *\n         * A key here narrows one surface; a key on the extension would gate\n         * every surface it registers, and Products is the sibling — a catalog\n         * anyone who works on the site may open. The register is the one that\n         * takes money and lists checked-in guests by name, so the two\n         * genuinely have different answers and only this one is narrowed.\n         *\n         * `managePos` rather than a dotted catalog key because it is the key\n         * the sale itself is refused by: `server/pos-order.ts` resolves the\n         * member's permission map and returns 403 unless `managePos` holds.\n         * The shell answers this declaration out of that same resolved map, so\n         * the console offers a register exactly to the people the route will\n         * accept a sale from — the gate and its server twin cannot disagree,\n         * because they are reading one value.\n         *\n         * `pos-order.ts` stays the enforcement point regardless. This decides\n         * whether the surface is built at all, which is the part a check\n         * inside the page cannot do: by the time the page can refuse itself it\n         * has mounted and its product, register, location and reservation\n         * listeners are already open.\n         */\n        permission: 'managePos',\n        icon: { path: mdiStorefrontOutline.path },\n        header: { title: 'Point of Sale', docsTopic: 'pos' },\n        Component: PosConsolePage,\n      },\n    ],\n  })\n  /*\n   * The USER ACCOUNTS half, registered under its own id.\n   *\n   * `accounts` is a switch rather than a bundle: the member blocks and every\n   * `membership/*` handler ship inside this package, which is why the id\n   * carries no loader manifest entry of its own. A second extension is how a\n   * card about visitor accounts is gated on the switch that decides whether\n   * the site serves them — `listConsoleWidgets` filters by the workspace's\n   * effective plugin ids, and `accounts` is default-OFF per site.\n   *\n   * A separate call rather than more widgets on the commerce extension: the\n   * registry is keyed by `pluginId` and that key IS the gate, so folding this\n   * card in above would have kept the dashboard defect it fixes — `Newest\n   * site users` on a site whose /signin returns 404.\n   */\n  Aglyn.registerConsoleExtension({\n    pluginId: Aglyn.ACCOUNTS_PLUGIN_ID,\n    displayName: 'User Accounts',\n    widgets: [\n      {\n        slot: Aglyn.CONSOLE_WIDGET_SLOTS.hostDashboard,\n        widgetId: 'accounts-newest-site-users',\n        title: 'Newest site users',\n        Component: NewestSiteUsersCard,\n      },\n    ],\n  })\n}\n\nexport * from './site'\n"],"names":["Aglyn","mdiStorefrontOutline","lazy","PosConsolePage","PosDisplayPage","PosKioskPage","PosHardwareTermsPage","PosHardwareTermsSignPage","PosHardwareOrdersStaffPage","PosReaderSplashStaffPage","CommerceGlanceCard","NewestSiteUsersCard","SiteMemberPurchases","COMMERCE_CONSOLE_SECTIONS","COMMERCE_RETIRED_SECTIONS","BUNDLE_ID","COMMERCE_PERMISSIONS","registerCommerceRecordLists","registerCommerceRecordRoutes","registerCommerceZones","registerCommerceOrderZones","registerCommerceReturnZones","registerCommerceStoreZones","registerCommercePosZones","registerCommerceTransferUi","COMMERCE_SEARCH_SOURCES","COMMERCE_CONFIG_SCHEMA","CommerceConsolePage","registerCommerceConsole","registerPluginPermissions","registerPluginConfigSchema","registerConsoleExtension","pluginId","displayName","searchSources","staffPages","id","label","header","title","docsTopic","Component","publicPages","path","widgets","slot","widgetId","CONSOLE_WIDGET_SLOTS","siteMember","navItems","href","icon","sections","retiredSections","permission","ACCOUNTS_PLUGIN_ID","hostDashboard"],"mappings":"AAAA;;;;;;;;;;;;;;;CAeC,GAED,YAAYA,WAAW,eAAc;AACrC,SAASC,oBAAoB,QAAQ,yBAAwB;AAC7D,SAASC,IAAI,QAAQ,QAAO;AAC5B,MAAMC,iBAAiBD,KAAK,IAAM,MAAM,CAAC;AACzC,kFAAkF,GAClF,MAAME,iBAAiBF,KAAK,IAAM,MAAM,CAAC;AACzC,MAAMG,eAAeH,KAAK,IAAM,MAAM,CAAC;AACvC,MAAMI,uBAAuBJ,KAAK,IAAM,MAAM,CAAC;AAC/C,MAAMK,2BAA2BL,KAAK,IAAM,MAAM,CAAC;AACnD,sEAAsE,GACtE,MAAMM,6BAA6BN,KACjC,IAAM,MAAM,CAAC;AAEf,6EAA6E,GAC7E,MAAMO,2BAA2BP,KAC/B,IAAM,MAAM,CAAC;AAEf,MAAMQ,qBAAqBR,KACzB,IAAM,MAAM,CAAC;AAEf,MAAMS,sBAAsBT,KAC1B,IAAM,MAAM,CAAC;AAEf,MAAMU,sBAAsBV,KAC1B,IAAM,MAAM,CAAC;AAEf,SACEW,yBAAyB,EACzBC,yBAAyB,QACpB,4CAAwC;AAC/C,SAASC,SAAS,QAAQ,+BAA2B;AACrD,SAASC,oBAAoB,QAAQ,gCAA4B;AACjE,SAASC,2BAA2B,QAAQ,mCAA+B;AAC3E,SAASC,4BAA4B,QAAQ,oCAAgC;AAC7E,SAASC,qBAAqB,QAAQ,wCAAoC;AAC1E,SAASC,0BAA0B,QAAQ,sCAAkC;AAC7E,SAASC,2BAA2B,QAAQ,uCAAmC;AAC/E,SAASC,0BAA0B,QAAQ,sCAAkC;AAC7E,SAASC,wBAAwB,QAAQ,oCAAgC;AACzE,SAASC,0BAA0B,QAAQ,qCAAiC;AAC5E,SAASC,uBAAuB,QAAQ,qCAAiC;AACzE,SAASC,sBAAsB,QAAQ,qBAAiB;AAExD,kEAAkE,GAClE,MAAMC,sBAAsBzB,KAAK,IAAM,MAAM,CAAC;AAE9C;;;;;;;;;CASC,GACD,OAAO,SAAS0B;IACd,wEAAwE;IACxEV;IACAD;IACA,yEAAyE;IACzE,2DAA2D;IAC3DE;IACA,2EAA2E;IAC3E,wEAAwE;IACxEC;IACA,wEAAwE;IACxE,6EAA6E;IAC7EC;IACA,sEAAsE;IACtEC;IACA,2EAA2E;IAC3EC;IACA,uEAAuE;IACvE,wEAAwE;IACxE,gBAAgB;IAChBC;IACA,kEAAkE;IAClE,uDAAuD;IACvDxB,MAAM6B,yBAAyB,CAACb;IAChC,2EAA2E;IAC3E,kEAAkE;IAClEhB,MAAM8B,0BAA0B,CAACJ;IACjC1B,MAAM+B,wBAAwB,CAAC;QAC7BC,UAAUjB;QACVkB,aAAa;QACbC,eAAeT;QACf,iEAAiE;QACjE,qEAAqE;QACrE,uDAAuD;QACvD,0DAA0D;QAC1D,wEAAwE;QACxE,uEAAuE;QACvE,sEAAsE;QACtE,qDAAqD;QACrDU,YAAY;YACV;gBACEC,IAAI;gBACJC,OAAO;gBACPC,QAAQ;oBAAEC,OAAO;oBAAmBC,WAAW;gBAAc;gBAC7DC,WAAWjC;YACb;YACA,uEAAuE;YACvE,+DAA+D;YAC/D;gBACE4B,IAAI;gBACJC,OAAO;gBACPC,QAAQ;oBAAEC,OAAO;oBAA0BC,WAAW;gBAAc;gBACpEC,WAAWhC;YACb;SACD;QACDiC,aAAa;YACX;gBAAEC,MAAM;gBAAgBJ,OAAO;gBAAoBE,WAAWrC;YAAe;YAC7E,sEAAsE;YACtE,oEAAoE;YACpE;gBAAEuC,MAAM;gBAAcJ,OAAO;gBAAsBE,WAAWpC;YAAa;YAC3E,sEAAsE;YACtE,kEAAkE;YAClE,uEAAuE;YACvE,iDAAiD;YACjD;gBAAEsC,MAAM;gBAAmBJ,OAAO;gBAAiBE,WAAWnC;YAAqB;YACnF;gBAAEqC,MAAM;gBAAwBJ,OAAO;gBAAsBE,WAAWlC;YAAyB;SAClG;QACD,kEAAkE;QAClE,wCAAwC;QACxCqC,SAAS;YACP;gBACEC,MAAM;gBACNC,UAAU;gBACVP,OAAO;gBACPE,WAAW/B;YACb;YACA,uEAAuE;YACvE,2DAA2D;YAC3D,mCAAmC;YACnC;gBACEmC,MAAM7C,MAAM+C,oBAAoB,CAACC,UAAU;gBAC3CF,UAAU;gBACVP,OAAO;gBACPE,WAAW7B;YACb;SACD;QACDqC,UAAU;YACR;gBACEZ,OAAO;gBACPa,MAAM;gBACNC,MAAM;oBAAER,MAAM1C,qBAAqB0C,IAAI;gBAAC;gBACxC,oEAAoE;gBACpE,qEAAqE;gBACrE,6CAA6C;gBAC7CS,UAAUvC;gBACV,qEAAqE;gBACrE,sCAAsC;gBACtCwC,iBAAiBvC;gBACjBwB,QAAQ;oBACNC,OAAO;oBACPY,MAAM;wBAAER,MAAM1C,qBAAqB0C,IAAI;oBAAC;oBACxC,kEAAkE;oBAClE,0DAA0D;oBAC1DH,WAAW;gBACb;gBACAC,WAAWd;YACb;YACA;gBACE,oEAAoE;gBACpE,gEAAgE;gBAChEU,OAAO;gBACPa,MAAM;gBACN;;;;;;;;;;;;;;;;;;;;;;;SAuBC,GACDI,YAAY;gBACZH,MAAM;oBAAER,MAAM1C,qBAAqB0C,IAAI;gBAAC;gBACxCL,QAAQ;oBAAEC,OAAO;oBAAiBC,WAAW;gBAAM;gBACnDC,WAAWtC;YACb;SACD;IACH;IACA;;;;;;;;;;;;;;GAcC,GACDH,MAAM+B,wBAAwB,CAAC;QAC7BC,UAAUhC,MAAMuD,kBAAkB;QAClCtB,aAAa;QACbW,SAAS;YACP;gBACEC,MAAM7C,MAAM+C,oBAAoB,CAACS,aAAa;gBAC9CV,UAAU;gBACVP,OAAO;gBACPE,WAAW9B;YACb;SACD;IACH;AACF;AAEA,cAAc,YAAQ"}

package/src/lib/server/billing-webhook.js

@@ -47,11 +47,13 @@ import { enqueueSupplierDelivery } from "./supplier-outbox.js";
 import { routeCartOrderToSuppliers } from "./supplier-routing.js";
 import { notifyOrderBuyer, onlineReceiptExtras } from "./order-notifications.js";
 import { ORDER_PAID_EVENT, ORDER_REFUNDED_EVENT } from "../model/order-events.js";
+import { posOrderRefundRecord, POS_ORDER_REFUNDS_COLLECTION } from "../model/commerce-pos-day-report.js";
 import { checkoutExtrasCents, decodeCheckoutExtrasMetadata } from "@aglyn/aglyn/plugin-manager/plugin-checkout-extras";
 import { checkoutCreditProvider, checkoutCreditSold, decodeCheckoutCreditMetadata } from "@aglyn/aglyn/plugin-manager/plugin-checkout-credits";
 import { raiseOrderEvent } from "./order-events.js";
 import { handlePosStripeEvent } from "./pos-terminal.js";
 import { notifyPosSaleCompleted } from "./pos-sale.js";
+import { posOrderRefundStripeId } from "./pos-order-refund-ids.js";
 /**
  * Assigns unassigned license keys for a digital product (AGL-308):
  * stamps order/email on the key docs, returns the key strings, and
@@ -383,7 +385,8 @@ async function findOrderForDispute(paymentIntentId) {
     const stripeRefundedCents = Math.max(0, Math.round(Number((_ref = charge == null ? void 0 : charge.amount_refunded) != null ? _ref : 0)));
     if (!(stripeRefundedCents > 0)) return null;
     return firebaseAdmin.app().firestore().runTransaction(async (transaction)=>{
-        var _fresh_data, _order_refundedCents, _data_externalRefundedCents, _order_lineItems;
+        var _fresh_data, _order_refundedCents, _data_externalRefundedCents, _ref, _ref1, _order_lineItems;
+        var _charge_payment_intent, _, _charge_refunds;
         const fresh = await transaction.get(orderRef);
         if (!fresh.exists) return null;
         const data = (_fresh_data = fresh.data()) != null ? _fresh_data : {};
@@ -392,6 +395,25 @@ async function findOrderForDispute(paymentIntentId) {
         const externalCents = Math.max(0, Number((_data_externalRefundedCents = data['externalRefundedCents']) != null ? _data_externalRefundedCents : 0));
         const newCents = stripeRefundedCents - consoleCents - externalCents;
         if (!(newCents > 0)) return null;
+        // A register sale refunded in Stripe still counts in the day totals,
+        // on the day Stripe gave it (AGL-4037): the same record the console's
+        // refund leaves, keyed by the charge's refunded total, which this
+        // transaction only ever advances once per amount.
+        const registerRefund = posOrderRefundRecord({
+            orderId: orderRef.id,
+            order: data,
+            refundedCents: newCents,
+            paymentIntentId: typeof (charge == null ? void 0 : charge.payment_intent) === 'string' ? charge.payment_intent : String((_ref = charge == null ? void 0 : (_charge_payment_intent = charge.payment_intent) == null ? void 0 : _charge_payment_intent.id) != null ? _ref : ''),
+            cashierId: null,
+            source: 'stripe',
+            stripeRefundId: ((_ = ((_ref1 = charge == null ? void 0 : (_charge_refunds = charge.refunds) == null ? void 0 : _charge_refunds.data) != null ? _ref1 : [])[0]) == null ? void 0 : _.id) ? String(charge.refunds.data[0].id) : null,
+            atMs: Date.now()
+        });
+        const hostRef = orderRef.parent.parent;
+        if (registerRefund && hostRef) {
+            var _ref2;
+            transaction.set(hostRef.collection('registers').doc(registerRefund.registerId).collection(POS_ORDER_REFUNDS_COLLECTION).doc(posOrderRefundStripeId(String((_ref2 = charge == null ? void 0 : charge.id) != null ? _ref2 : orderRef.id), stripeRefundedCents)), registerRefund);
+        }
         transaction.set(orderRef, {
             externalRefundedCents: externalCents + newCents,
             timeline: CommerceModel.appendOrderEvent(order, 'refund', `$${(newCents / 100).toFixed(2)} refunded outside the dashboard (in Stripe)`)
@@ -2882,6 +2904,8 @@ async function findOrderForDispute(paymentIntentId) {
                     productId: line.productId
                 }, line.variantId ? {
                     variantId: line.variantId
+                } : {}, CommerceModel.isCheckInDayKey(line.useDayKey) ? {
+                    useDayKey: line.useDayKey
                 } : {}, {
                     name: product.name
                 }, variant && Object.keys((_variant_options = variant.options) != null ? _variant_options : {}).length ? {