@retalia/pos-components 0.0.6 → 0.0.7

package/fesm2022/retalia-pos-components-services.mjs

@@ -1,7 +1,7 @@
 import * as i0 from '@angular/core';
 import { InjectionToken, inject, Injectable } from '@angular/core';
 import { HttpClient, HttpErrorResponse } from '@angular/common/http';
-import { throwError, map, catchError } from 'rxjs';
+import { throwError, switchMap, from, catchError } from 'rxjs';
 
 /** Read a document cookie by name. Returns null when missing or not in a browser. */
 function readCookie(name) {
@@ -72,35 +72,46 @@ class ClerkAuthError extends Error {
         super(message);
     }
 }
+const SHA256_HEX = /^[0-9a-f]{64}$/i;
 function displayName(clerk, clerkNumber) {
     const name = `${clerk.firstName ?? ''} ${clerk.lastName ?? ''}`.trim();
     return name || clerk.clerkNumber || clerkNumber;
 }
-function passwordsMatch(submitted, stored) {
-    return submitted === (stored ?? '');
+/** HeadlessPOS `SvcClerkService.validateClerk`: SHA-256 of UTF-16 `${identifier}.${pin}`. */
+async function hashClerkPin(identifier, pin) {
+    const message = `${identifier}.${pin}`;
+    const buffer = new ArrayBuffer(message.length * 2);
+    const utf16 = new Uint16Array(buffer);
+    for (let i = 0; i < message.length; i++) {
+        utf16[i] = message.charCodeAt(i);
+    }
+    const digest = await crypto.subtle.digest('SHA-256', buffer);
+    return Array.from(new Uint8Array(digest))
+        .map((byte) => byte.toString(16).padStart(2, '0'))
+        .join('')
+        .toUpperCase();
+}
+async function passwordsMatch(submitted, clerk) {
+    const stored = clerk.password ?? '';
+    if (SHA256_HEX.test(stored)) {
+        const hash = await hashClerkPin(clerk.identifier, submitted);
+        return hash === stored.toUpperCase();
+    }
+    return submitted === stored;
 }
 class ClerkAuthService {
     http = inject(HttpClient);
     /**
      * Looks up the clerk and compares the keypad password in this service.
-     * Not a dedicated sign-in endpoint — replace when ID-647 / PosIdentity lands.
+     * Hashed passwords use the HeadlessPOS SHA-256 check. Not a dedicated
+     * sign-in endpoint — replace when ID-647 / PosIdentity lands.
      */
     signIn(clerkNumber, password) {
         const number = clerkNumber.trim();
         if (!number) {
             return throwError(() => new ClerkAuthError('Invalid clerk or password'));
         }
-        return this.http.get(`/api/v1.0/clerks/${encodeURIComponent(number)}`).pipe(map((clerk) => {
-            if (!passwordsMatch(password, clerk.password)) {
-                throw new ClerkAuthError('Invalid clerk or password');
-            }
-            return {
-                clerkNumber: clerk.clerkNumber || number,
-                displayName: displayName(clerk, number),
-                languageCode: clerk.languageCode || 'en',
-                isManager: clerk.isManager === true,
-            };
-        }), catchError((error) => {
+        return this.http.get(`/api/v1.0/clerks/${encodeURIComponent(number)}`).pipe(switchMap((clerk) => from(this.toSession(clerk, number, password))), catchError((error) => {
             if (error instanceof ClerkAuthError) {
                 return throwError(() => error);
             }
@@ -115,6 +126,17 @@ class ClerkAuthService {
             return throwError(() => new ClerkAuthError('Unable to sign in'));
         }));
     }
+    async toSession(clerk, clerkNumber, password) {
+        if (!(await passwordsMatch(password, clerk))) {
+            throw new ClerkAuthError('Invalid clerk or password');
+        }
+        return {
+            clerkNumber: clerk.clerkNumber || clerkNumber,
+            displayName: displayName(clerk, clerkNumber),
+            languageCode: clerk.languageCode || 'en',
+            isManager: clerk.isManager === true,
+        };
+    }
     static ɵfac = i0.ɵɵngDeclareFactory({ minVersion: "12.0.0", version: "21.2.22", ngImport: i0, type: ClerkAuthService, deps: [], target: i0.ɵɵFactoryTarget.Injectable });
     static ɵprov = i0.ɵɵngDeclareInjectable({ minVersion: "12.0.0", version: "21.2.22", ngImport: i0, type: ClerkAuthService, providedIn: 'root' });
 }

package/fesm2022/retalia-pos-components-services.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"retalia-pos-components-services.mjs","sources":["../../../projects/pos-components/services/read-cookie.ts","../../../projects/pos-components/services/pos-api-config.ts","../../../projects/pos-components/services/pos-api.interceptor.ts","../../../projects/pos-components/services/clerk-auth.service.ts","../../../projects/pos-components/services/pos-commands.client.ts","../../../projects/pos-components/services/retalia-pos-components-services.ts"],"sourcesContent":["/** Read a document cookie by name. Returns null when missing or not in a browser. */\r\nexport function readCookie(name: string): string | null {\r\n  if (typeof document === 'undefined' || !name) {\r\n    return null;\r\n  }\r\n\r\n  const encodedName = encodeURIComponent(name);\r\n  for (const part of document.cookie.split(';')) {\r\n    const trimmed = part.trim();\r\n    const separator = trimmed.indexOf('=');\r\n    if (separator < 0) {\r\n      continue;\r\n    }\r\n\r\n    const key = trimmed.slice(0, separator);\r\n    if (key !== name && key !== encodedName) {\r\n      continue;\r\n    }\r\n\r\n    return decodeURIComponent(trimmed.slice(separator + 1));\r\n  }\r\n\r\n  return null;\r\n}\r\n","import { InjectionToken } from '@angular/core';\r\n\r\nimport { readCookie } from './read-cookie';\r\n\r\nexport interface PosApiConfig {\r\n  /** Origin for HeadlessAPI. Empty string when the host app proxies `/api`. */\r\n  readonly apiBaseUrl: string;\r\n  /** Cookie holding the Portal Bearer token (paste in local dev). */\r\n  readonly tokenCookieName: string;\r\n  /** Cookie holding the shop id sent as `Shop-Context`. */\r\n  readonly shopContextCookieName: string;\r\n  readonly getAccessToken?: () => string | null;\r\n  readonly getShopContext?: () => string | null;\r\n}\r\n\r\nexport const DEFAULT_POS_API_CONFIG: PosApiConfig = {\r\n  apiBaseUrl: '',\r\n  tokenCookieName: 'portalApiToken',\r\n  shopContextCookieName: 'contextShopId',\r\n};\r\n\r\nexport const POS_API_CONFIG = new InjectionToken<PosApiConfig>('POS_API_CONFIG', {\r\n  providedIn: 'root',\r\n  factory: () => DEFAULT_POS_API_CONFIG,\r\n});\r\n\r\nexport function readAccessToken(config: PosApiConfig): string | null {\r\n  return config.getAccessToken?.() ?? readCookie(config.tokenCookieName);\r\n}\r\n\r\nexport function readShopContext(config: PosApiConfig): string | null {\r\n  return config.getShopContext?.() ?? readCookie(config.shopContextCookieName);\r\n}\r\n","import { HttpInterceptorFn } from '@angular/common/http';\r\nimport { inject } from '@angular/core';\r\n\r\nimport {\r\n  POS_API_CONFIG,\r\n  readAccessToken,\r\n  readShopContext,\r\n} from './pos-api-config';\r\n\r\nfunction joinUrl(baseUrl: string, path: string): string {\r\n  if (!baseUrl || /^https?:\\/\\//i.test(path)) {\r\n    return path;\r\n  }\r\n\r\n  const origin = baseUrl.replace(/\\/+$/, '');\r\n  const suffix = path.replace(/^\\/+/, '');\r\n  return `${origin}/${suffix}`;\r\n}\r\n\r\n/** Attaches Bearer + Shop-Context from cookies (or host overrides). */\r\nexport const posApiInterceptor: HttpInterceptorFn = (req, next) => {\r\n  const config = inject(POS_API_CONFIG);\r\n  const token = readAccessToken(config);\r\n  const shopContext = readShopContext(config);\r\n\r\n  let headers = req.headers;\r\n  if (token && !headers.has('Authorization')) {\r\n    headers = headers.set('Authorization', `Bearer ${token}`);\r\n  }\r\n  if (shopContext && !headers.has('Shop-Context')) {\r\n    headers = headers.set('Shop-Context', shopContext);\r\n  }\r\n\r\n  return next(\r\n    req.clone({\r\n      url: joinUrl(config.apiBaseUrl, req.url),\r\n      headers,\r\n    }),\r\n  );\r\n};\r\n","import { HttpClient, HttpErrorResponse } from '@angular/common/http';\r\nimport { inject, Injectable } from '@angular/core';\r\nimport { catchError, map, Observable, throwError } from 'rxjs';\r\n\r\n/** HeadlessAPI clerk payload. Password check is a stub until ID-647. */\r\ninterface ClerkRecord {\r\n  identifier?: number;\r\n  firstName?: string;\r\n  lastName?: string;\r\n  password?: string | null;\r\n  languageCode?: string;\r\n  clerkNumber?: string;\r\n  isManager?: boolean;\r\n}\r\n\r\nexport interface ClerkSession {\r\n  readonly clerkNumber: string;\r\n  readonly displayName: string;\r\n  readonly languageCode: string;\r\n  readonly isManager: boolean;\r\n}\r\n\r\nexport class ClerkAuthError extends Error {\r\n  override readonly name = 'ClerkAuthError';\r\n\r\n  constructor(message: string) {\r\n    super(message);\r\n  }\r\n}\r\n\r\nfunction displayName(clerk: ClerkRecord, clerkNumber: string): string {\r\n  const name = `${clerk.firstName ?? ''} ${clerk.lastName ?? ''}`.trim();\r\n  return name || clerk.clerkNumber || clerkNumber;\r\n}\r\n\r\nfunction passwordsMatch(submitted: string, stored: string | null | undefined): boolean {\r\n  return submitted === (stored ?? '');\r\n}\r\n\r\n@Injectable({ providedIn: 'root' })\r\nexport class ClerkAuthService {\r\n  private readonly http = inject(HttpClient);\r\n\r\n  /**\r\n   * Looks up the clerk and compares the keypad password in this service.\r\n   * Not a dedicated sign-in endpoint — replace when ID-647 / PosIdentity lands.\r\n   */\r\n  signIn(clerkNumber: string, password: string): Observable<ClerkSession> {\r\n    const number = clerkNumber.trim();\r\n    if (!number) {\r\n      return throwError(() => new ClerkAuthError('Invalid clerk or password'));\r\n    }\r\n\r\n    return this.http.get<ClerkRecord>(`/api/v1.0/clerks/${encodeURIComponent(number)}`).pipe(\r\n      map((clerk) => {\r\n        if (!passwordsMatch(password, clerk.password)) {\r\n          throw new ClerkAuthError('Invalid clerk or password');\r\n        }\r\n\r\n        return {\r\n          clerkNumber: clerk.clerkNumber || number,\r\n          displayName: displayName(clerk, number),\r\n          languageCode: clerk.languageCode || 'en',\r\n          isManager: clerk.isManager === true,\r\n        };\r\n      }),\r\n      catchError((error: unknown) => {\r\n        if (error instanceof ClerkAuthError) {\r\n          return throwError(() => error);\r\n        }\r\n\r\n        if (error instanceof HttpErrorResponse) {\r\n          if (error.status === 401) {\r\n            return throwError(\r\n              () =>\r\n                new ClerkAuthError(\r\n                  'API token missing or expired. Paste portalApiToken into cookies.',\r\n                ),\r\n            );\r\n          }\r\n\r\n          if (error.status === 404) {\r\n            return throwError(() => new ClerkAuthError('Invalid clerk or password'));\r\n          }\r\n        }\r\n\r\n        return throwError(() => new ClerkAuthError('Unable to sign in'));\r\n      }),\r\n    );\r\n  }\r\n}\r\n","import { HttpClient } from '@angular/common/http';\r\nimport { inject, Injectable } from '@angular/core';\r\nimport { Observable } from 'rxjs';\r\n\r\nimport { PosStateEnvelope } from './pos-state-envelope';\r\n\r\nexport interface AddItemCommand {\r\n  readonly basketId: string;\r\n  readonly sku: string;\r\n  readonly qty: number;\r\n}\r\n\r\nexport interface ChangeQuantityCommand {\r\n  readonly basketId: string;\r\n  readonly lineId: number;\r\n  readonly qty: number;\r\n}\r\n\r\nexport interface ClearBasketCommand {\r\n  readonly basketId: string;\r\n}\r\n\r\nexport interface TenderCashCommand {\r\n  readonly basketId: string;\r\n  readonly amount: number;\r\n}\r\n\r\nexport interface NewSaleCommand {\r\n  readonly basketId: string;\r\n}\r\n\r\nfunction idempotencyKey(): string {\r\n  return globalThis.crypto?.randomUUID?.() ?? `${Date.now()}-${Math.random().toString(16).slice(2)}`;\r\n}\r\n\r\n/**\r\n * Thin HTTP client for open-till sale commands (command in → PosStateEnvelope out).\r\n *\r\n * Keep as one client while the surface is small. When basket, tender, and sale\r\n * lifecycle each grow their own handful of methods, split by subdomain, e.g.:\r\n * - basket: addItem / changeQuantity / clearBasket (+ discounts, modifiers, …)\r\n * - tender: tenderCash (+ card, void payment, …)\r\n * - sale: newSale (+ suspend, recall, …)\r\n * Extract is cheap; avoid splitting early into near-empty clients.\r\n */\r\n@Injectable({ providedIn: 'root' })\r\nexport class PosCommandsClient {\r\n  private readonly http = inject(HttpClient);\r\n\r\n  addItem(\r\n    command: AddItemCommand,\r\n    key = idempotencyKey(),\r\n  ): Observable<PosStateEnvelope> {\r\n    return this.http.post<PosStateEnvelope>('/api/v1.0/pos/commands/add-item', command, {\r\n      headers: { 'Idempotency-Key': key },\r\n    });\r\n  }\r\n\r\n  changeQuantity(\r\n    command: ChangeQuantityCommand,\r\n    key = idempotencyKey(),\r\n  ): Observable<PosStateEnvelope> {\r\n    return this.http.post<PosStateEnvelope>(\r\n      '/api/v1.0/pos/commands/change-quantity',\r\n      command,\r\n      { headers: { 'Idempotency-Key': key } },\r\n    );\r\n  }\r\n\r\n  clearBasket(\r\n    command: ClearBasketCommand,\r\n    key = idempotencyKey(),\r\n  ): Observable<PosStateEnvelope> {\r\n    return this.http.post<PosStateEnvelope>(\r\n      '/api/v1.0/pos/commands/clear-basket',\r\n      command,\r\n      { headers: { 'Idempotency-Key': key } },\r\n    );\r\n  }\r\n\r\n  tenderCash(\r\n    command: TenderCashCommand,\r\n    key = idempotencyKey(),\r\n  ): Observable<PosStateEnvelope> {\r\n    return this.http.post<PosStateEnvelope>(\r\n      '/api/v1.0/pos/commands/tender-cash',\r\n      command,\r\n      { headers: { 'Idempotency-Key': key } },\r\n    );\r\n  }\r\n\r\n  newSale(\r\n    command: NewSaleCommand,\r\n    key = idempotencyKey(),\r\n  ): Observable<PosStateEnvelope> {\r\n    return this.http.post<PosStateEnvelope>(\r\n      '/api/v1.0/pos/commands/new-sale',\r\n      command,\r\n      { headers: { 'Idempotency-Key': key } },\r\n    );\r\n  }\r\n}\r\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":";;;;;AAAA;AACM,SAAU,UAAU,CAAC,IAAY,EAAA;IACrC,IAAI,OAAO,QAAQ,KAAK,WAAW,IAAI,CAAC,IAAI,EAAE;AAC5C,QAAA,OAAO,IAAI;IACb;AAEA,IAAA,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC;AAC5C,IAAA,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;AAC7C,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE;QAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;AACtC,QAAA,IAAI,SAAS,GAAG,CAAC,EAAE;YACjB;QACF;QAEA,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;QACvC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,WAAW,EAAE;YACvC;QACF;QAEA,OAAO,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IACzD;AAEA,IAAA,OAAO,IAAI;AACb;;ACRO,MAAM,sBAAsB,GAAiB;AAClD,IAAA,UAAU,EAAE,EAAE;AACd,IAAA,eAAe,EAAE,gBAAgB;AACjC,IAAA,qBAAqB,EAAE,eAAe;;MAG3B,cAAc,GAAG,IAAI,cAAc,CAAe,gBAAgB,EAAE;AAC/E,IAAA,UAAU,EAAE,MAAM;AAClB,IAAA,OAAO,EAAE,MAAM,sBAAsB;AACtC,CAAA;AAEK,SAAU,eAAe,CAAC,MAAoB,EAAA;AAClD,IAAA,OAAO,MAAM,CAAC,cAAc,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC;AACxE;AAEM,SAAU,eAAe,CAAC,MAAoB,EAAA;AAClD,IAAA,OAAO,MAAM,CAAC,cAAc,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC,qBAAqB,CAAC;AAC9E;;ACvBA,SAAS,OAAO,CAAC,OAAe,EAAE,IAAY,EAAA;IAC5C,IAAI,CAAC,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;AAC1C,QAAA,OAAO,IAAI;IACb;IAEA,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;AACvC,IAAA,OAAO,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,MAAM,EAAE;AAC9B;AAEA;MACa,iBAAiB,GAAsB,CAAC,GAAG,EAAE,IAAI,KAAI;AAChE,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC;AACrC,IAAA,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC;AACrC,IAAA,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC;AAE3C,IAAA,IAAI,OAAO,GAAG,GAAG,CAAC,OAAO;IACzB,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE;QAC1C,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAA,OAAA,EAAU,KAAK,CAAA,CAAE,CAAC;IAC3D;IACA,IAAI,WAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE;QAC/C,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC;IACpD;AAEA,IAAA,OAAO,IAAI,CACT,GAAG,CAAC,KAAK,CAAC;QACR,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC;QACxC,OAAO;AACR,KAAA,CAAC,CACH;AACH;;ACjBM,MAAO,cAAe,SAAQ,KAAK,CAAA;IACrB,IAAI,GAAG,gBAAgB;AAEzC,IAAA,WAAA,CAAY,OAAe,EAAA;QACzB,KAAK,CAAC,OAAO,CAAC;IAChB;AACD;AAED,SAAS,WAAW,CAAC,KAAkB,EAAE,WAAmB,EAAA;AAC1D,IAAA,MAAM,IAAI,GAAG,CAAA,EAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAA,CAAA,EAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;AACtE,IAAA,OAAO,IAAI,IAAI,KAAK,CAAC,WAAW,IAAI,WAAW;AACjD;AAEA,SAAS,cAAc,CAAC,SAAiB,EAAE,MAAiC,EAAA;AAC1E,IAAA,OAAO,SAAS,MAAM,MAAM,IAAI,EAAE,CAAC;AACrC;MAGa,gBAAgB,CAAA;AACV,IAAA,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC;AAE1C;;;AAGG;IACH,MAAM,CAAC,WAAmB,EAAE,QAAgB,EAAA;AAC1C,QAAA,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE;QACjC,IAAI,CAAC,MAAM,EAAE;YACX,OAAO,UAAU,CAAC,MAAM,IAAI,cAAc,CAAC,2BAA2B,CAAC,CAAC;QAC1E;QAEA,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAc,CAAA,iBAAA,EAAoB,kBAAkB,CAAC,MAAM,CAAC,CAAA,CAAE,CAAC,CAAC,IAAI,CACtF,GAAG,CAAC,CAAC,KAAK,KAAI;YACZ,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;AAC7C,gBAAA,MAAM,IAAI,cAAc,CAAC,2BAA2B,CAAC;YACvD;YAEA,OAAO;AACL,gBAAA,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,MAAM;AACxC,gBAAA,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC;AACvC,gBAAA,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;AACxC,gBAAA,SAAS,EAAE,KAAK,CAAC,SAAS,KAAK,IAAI;aACpC;AACH,QAAA,CAAC,CAAC,EACF,UAAU,CAAC,CAAC,KAAc,KAAI;AAC5B,YAAA,IAAI,KAAK,YAAY,cAAc,EAAE;AACnC,gBAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;YAChC;AAEA,YAAA,IAAI,KAAK,YAAY,iBAAiB,EAAE;AACtC,gBAAA,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE;oBACxB,OAAO,UAAU,CACf,MACE,IAAI,cAAc,CAChB,kEAAkE,CACnE,CACJ;gBACH;AAEA,gBAAA,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE;oBACxB,OAAO,UAAU,CAAC,MAAM,IAAI,cAAc,CAAC,2BAA2B,CAAC,CAAC;gBAC1E;YACF;YAEA,OAAO,UAAU,CAAC,MAAM,IAAI,cAAc,CAAC,mBAAmB,CAAC,CAAC;QAClE,CAAC,CAAC,CACH;IACH;wGAjDW,gBAAgB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAhB,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,gBAAgB,cADH,MAAM,EAAA,CAAA;;4FACnB,gBAAgB,EAAA,UAAA,EAAA,CAAA;kBAD5B,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;ACRlC,SAAS,cAAc,GAAA;AACrB,IAAA,OAAO,UAAU,CAAC,MAAM,EAAE,UAAU,IAAI,IAAI,CAAA,EAAG,IAAI,CAAC,GAAG,EAAE,CAAA,CAAA,EAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;AACpG;AAEA;;;;;;;;;AASG;MAEU,iBAAiB,CAAA;AACX,IAAA,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC;AAE1C,IAAA,OAAO,CACL,OAAuB,EACvB,GAAG,GAAG,cAAc,EAAE,EAAA;QAEtB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAmB,iCAAiC,EAAE,OAAO,EAAE;AAClF,YAAA,OAAO,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE;AACpC,SAAA,CAAC;IACJ;AAEA,IAAA,cAAc,CACZ,OAA8B,EAC9B,GAAG,GAAG,cAAc,EAAE,EAAA;QAEtB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACnB,wCAAwC,EACxC,OAAO,EACP,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE,EAAE,CACxC;IACH;AAEA,IAAA,WAAW,CACT,OAA2B,EAC3B,GAAG,GAAG,cAAc,EAAE,EAAA;QAEtB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACnB,qCAAqC,EACrC,OAAO,EACP,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE,EAAE,CACxC;IACH;AAEA,IAAA,UAAU,CACR,OAA0B,EAC1B,GAAG,GAAG,cAAc,EAAE,EAAA;QAEtB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACnB,oCAAoC,EACpC,OAAO,EACP,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE,EAAE,CACxC;IACH;AAEA,IAAA,OAAO,CACL,OAAuB,EACvB,GAAG,GAAG,cAAc,EAAE,EAAA;QAEtB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACnB,iCAAiC,EACjC,OAAO,EACP,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE,EAAE,CACxC;IACH;wGAtDW,iBAAiB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAjB,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,iBAAiB,cADJ,MAAM,EAAA,CAAA;;4FACnB,iBAAiB,EAAA,UAAA,EAAA,CAAA;kBAD7B,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;AC7ClC;;AAEG;;"}
+{"version":3,"file":"retalia-pos-components-services.mjs","sources":["../../../projects/pos-components/services/read-cookie.ts","../../../projects/pos-components/services/pos-api-config.ts","../../../projects/pos-components/services/pos-api.interceptor.ts","../../../projects/pos-components/services/clerk-auth.service.ts","../../../projects/pos-components/services/pos-commands.client.ts","../../../projects/pos-components/services/retalia-pos-components-services.ts"],"sourcesContent":["/** Read a document cookie by name. Returns null when missing or not in a browser. */\r\nexport function readCookie(name: string): string | null {\r\n  if (typeof document === 'undefined' || !name) {\r\n    return null;\r\n  }\r\n\r\n  const encodedName = encodeURIComponent(name);\r\n  for (const part of document.cookie.split(';')) {\r\n    const trimmed = part.trim();\r\n    const separator = trimmed.indexOf('=');\r\n    if (separator < 0) {\r\n      continue;\r\n    }\r\n\r\n    const key = trimmed.slice(0, separator);\r\n    if (key !== name && key !== encodedName) {\r\n      continue;\r\n    }\r\n\r\n    return decodeURIComponent(trimmed.slice(separator + 1));\r\n  }\r\n\r\n  return null;\r\n}\r\n","import { InjectionToken } from '@angular/core';\r\n\r\nimport { readCookie } from './read-cookie';\r\n\r\nexport interface PosApiConfig {\r\n  /** Origin for HeadlessAPI. Empty string when the host app proxies `/api`. */\r\n  readonly apiBaseUrl: string;\r\n  /** Cookie holding the Portal Bearer token (paste in local dev). */\r\n  readonly tokenCookieName: string;\r\n  /** Cookie holding the shop id sent as `Shop-Context`. */\r\n  readonly shopContextCookieName: string;\r\n  readonly getAccessToken?: () => string | null;\r\n  readonly getShopContext?: () => string | null;\r\n}\r\n\r\nexport const DEFAULT_POS_API_CONFIG: PosApiConfig = {\r\n  apiBaseUrl: '',\r\n  tokenCookieName: 'portalApiToken',\r\n  shopContextCookieName: 'contextShopId',\r\n};\r\n\r\nexport const POS_API_CONFIG = new InjectionToken<PosApiConfig>('POS_API_CONFIG', {\r\n  providedIn: 'root',\r\n  factory: () => DEFAULT_POS_API_CONFIG,\r\n});\r\n\r\nexport function readAccessToken(config: PosApiConfig): string | null {\r\n  return config.getAccessToken?.() ?? readCookie(config.tokenCookieName);\r\n}\r\n\r\nexport function readShopContext(config: PosApiConfig): string | null {\r\n  return config.getShopContext?.() ?? readCookie(config.shopContextCookieName);\r\n}\r\n","import { HttpInterceptorFn } from '@angular/common/http';\r\nimport { inject } from '@angular/core';\r\n\r\nimport {\r\n  POS_API_CONFIG,\r\n  readAccessToken,\r\n  readShopContext,\r\n} from './pos-api-config';\r\n\r\nfunction joinUrl(baseUrl: string, path: string): string {\r\n  if (!baseUrl || /^https?:\\/\\//i.test(path)) {\r\n    return path;\r\n  }\r\n\r\n  const origin = baseUrl.replace(/\\/+$/, '');\r\n  const suffix = path.replace(/^\\/+/, '');\r\n  return `${origin}/${suffix}`;\r\n}\r\n\r\n/** Attaches Bearer + Shop-Context from cookies (or host overrides). */\r\nexport const posApiInterceptor: HttpInterceptorFn = (req, next) => {\r\n  const config = inject(POS_API_CONFIG);\r\n  const token = readAccessToken(config);\r\n  const shopContext = readShopContext(config);\r\n\r\n  let headers = req.headers;\r\n  if (token && !headers.has('Authorization')) {\r\n    headers = headers.set('Authorization', `Bearer ${token}`);\r\n  }\r\n  if (shopContext && !headers.has('Shop-Context')) {\r\n    headers = headers.set('Shop-Context', shopContext);\r\n  }\r\n\r\n  return next(\r\n    req.clone({\r\n      url: joinUrl(config.apiBaseUrl, req.url),\r\n      headers,\r\n    }),\r\n  );\r\n};\r\n","import { HttpClient, HttpErrorResponse } from '@angular/common/http';\r\nimport { inject, Injectable } from '@angular/core';\r\nimport { catchError, from, Observable, switchMap, throwError } from 'rxjs';\r\n\r\n/** HeadlessAPI clerk payload. Password check is a stub until ID-647. */\r\ninterface ClerkRecord {\r\n  identifier?: number;\r\n  firstName?: string;\r\n  lastName?: string;\r\n  password?: string | null;\r\n  languageCode?: string;\r\n  clerkNumber?: string;\r\n  isManager?: boolean;\r\n}\r\n\r\nexport interface ClerkSession {\r\n  readonly clerkNumber: string;\r\n  readonly displayName: string;\r\n  readonly languageCode: string;\r\n  readonly isManager: boolean;\r\n}\r\n\r\nexport class ClerkAuthError extends Error {\r\n  override readonly name = 'ClerkAuthError';\r\n\r\n  constructor(message: string) {\r\n    super(message);\r\n  }\r\n}\r\n\r\nconst SHA256_HEX = /^[0-9a-f]{64}$/i;\r\n\r\nfunction displayName(clerk: ClerkRecord, clerkNumber: string): string {\r\n  const name = `${clerk.firstName ?? ''} ${clerk.lastName ?? ''}`.trim();\r\n  return name || clerk.clerkNumber || clerkNumber;\r\n}\r\n\r\n/** HeadlessPOS `SvcClerkService.validateClerk`: SHA-256 of UTF-16 `${identifier}.${pin}`. */\r\nasync function hashClerkPin(identifier: number | undefined, pin: string): Promise<string> {\r\n  const message = `${identifier}.${pin}`;\r\n  const buffer = new ArrayBuffer(message.length * 2);\r\n  const utf16 = new Uint16Array(buffer);\r\n  for (let i = 0; i < message.length; i++) {\r\n    utf16[i] = message.charCodeAt(i);\r\n  }\r\n\r\n  const digest = await crypto.subtle.digest('SHA-256', buffer);\r\n  return Array.from(new Uint8Array(digest))\r\n    .map((byte) => byte.toString(16).padStart(2, '0'))\r\n    .join('')\r\n    .toUpperCase();\r\n}\r\n\r\nasync function passwordsMatch(submitted: string, clerk: ClerkRecord): Promise<boolean> {\r\n  const stored = clerk.password ?? '';\r\n  if (SHA256_HEX.test(stored)) {\r\n    const hash = await hashClerkPin(clerk.identifier, submitted);\r\n    return hash === stored.toUpperCase();\r\n  }\r\n\r\n  return submitted === stored;\r\n}\r\n\r\n@Injectable({ providedIn: 'root' })\r\nexport class ClerkAuthService {\r\n  private readonly http = inject(HttpClient);\r\n\r\n  /**\r\n   * Looks up the clerk and compares the keypad password in this service.\r\n   * Hashed passwords use the HeadlessPOS SHA-256 check. Not a dedicated\r\n   * sign-in endpoint — replace when ID-647 / PosIdentity lands.\r\n   */\r\n  signIn(clerkNumber: string, password: string): Observable<ClerkSession> {\r\n    const number = clerkNumber.trim();\r\n    if (!number) {\r\n      return throwError(() => new ClerkAuthError('Invalid clerk or password'));\r\n    }\r\n\r\n    return this.http.get<ClerkRecord>(`/api/v1.0/clerks/${encodeURIComponent(number)}`).pipe(\r\n      switchMap((clerk) => from(this.toSession(clerk, number, password))),\r\n      catchError((error: unknown) => {\r\n        if (error instanceof ClerkAuthError) {\r\n          return throwError(() => error);\r\n        }\r\n\r\n        if (error instanceof HttpErrorResponse) {\r\n          if (error.status === 401) {\r\n            return throwError(\r\n              () =>\r\n                new ClerkAuthError(\r\n                  'API token missing or expired. Paste portalApiToken into cookies.',\r\n                ),\r\n            );\r\n          }\r\n\r\n          if (error.status === 404) {\r\n            return throwError(() => new ClerkAuthError('Invalid clerk or password'));\r\n          }\r\n        }\r\n\r\n        return throwError(() => new ClerkAuthError('Unable to sign in'));\r\n      }),\r\n    );\r\n  }\r\n\r\n  private async toSession(\r\n    clerk: ClerkRecord,\r\n    clerkNumber: string,\r\n    password: string,\r\n  ): Promise<ClerkSession> {\r\n    if (!(await passwordsMatch(password, clerk))) {\r\n      throw new ClerkAuthError('Invalid clerk or password');\r\n    }\r\n\r\n    return {\r\n      clerkNumber: clerk.clerkNumber || clerkNumber,\r\n      displayName: displayName(clerk, clerkNumber),\r\n      languageCode: clerk.languageCode || 'en',\r\n      isManager: clerk.isManager === true,\r\n    };\r\n  }\r\n}\r\n","import { HttpClient } from '@angular/common/http';\r\nimport { inject, Injectable } from '@angular/core';\r\nimport { Observable } from 'rxjs';\r\n\r\nimport { PosStateEnvelope } from './pos-state-envelope';\r\n\r\nexport interface AddItemCommand {\r\n  readonly basketId: string;\r\n  readonly sku: string;\r\n  readonly qty: number;\r\n}\r\n\r\nexport interface ChangeQuantityCommand {\r\n  readonly basketId: string;\r\n  readonly lineId: number;\r\n  readonly qty: number;\r\n}\r\n\r\nexport interface ClearBasketCommand {\r\n  readonly basketId: string;\r\n}\r\n\r\nexport interface TenderCashCommand {\r\n  readonly basketId: string;\r\n  readonly amount: number;\r\n}\r\n\r\nexport interface NewSaleCommand {\r\n  readonly basketId: string;\r\n}\r\n\r\nfunction idempotencyKey(): string {\r\n  return globalThis.crypto?.randomUUID?.() ?? `${Date.now()}-${Math.random().toString(16).slice(2)}`;\r\n}\r\n\r\n/**\r\n * Thin HTTP client for open-till sale commands (command in → PosStateEnvelope out).\r\n *\r\n * Keep as one client while the surface is small. When basket, tender, and sale\r\n * lifecycle each grow their own handful of methods, split by subdomain, e.g.:\r\n * - basket: addItem / changeQuantity / clearBasket (+ discounts, modifiers, …)\r\n * - tender: tenderCash (+ card, void payment, …)\r\n * - sale: newSale (+ suspend, recall, …)\r\n * Extract is cheap; avoid splitting early into near-empty clients.\r\n */\r\n@Injectable({ providedIn: 'root' })\r\nexport class PosCommandsClient {\r\n  private readonly http = inject(HttpClient);\r\n\r\n  addItem(\r\n    command: AddItemCommand,\r\n    key = idempotencyKey(),\r\n  ): Observable<PosStateEnvelope> {\r\n    return this.http.post<PosStateEnvelope>('/api/v1.0/pos/commands/add-item', command, {\r\n      headers: { 'Idempotency-Key': key },\r\n    });\r\n  }\r\n\r\n  changeQuantity(\r\n    command: ChangeQuantityCommand,\r\n    key = idempotencyKey(),\r\n  ): Observable<PosStateEnvelope> {\r\n    return this.http.post<PosStateEnvelope>(\r\n      '/api/v1.0/pos/commands/change-quantity',\r\n      command,\r\n      { headers: { 'Idempotency-Key': key } },\r\n    );\r\n  }\r\n\r\n  clearBasket(\r\n    command: ClearBasketCommand,\r\n    key = idempotencyKey(),\r\n  ): Observable<PosStateEnvelope> {\r\n    return this.http.post<PosStateEnvelope>(\r\n      '/api/v1.0/pos/commands/clear-basket',\r\n      command,\r\n      { headers: { 'Idempotency-Key': key } },\r\n    );\r\n  }\r\n\r\n  tenderCash(\r\n    command: TenderCashCommand,\r\n    key = idempotencyKey(),\r\n  ): Observable<PosStateEnvelope> {\r\n    return this.http.post<PosStateEnvelope>(\r\n      '/api/v1.0/pos/commands/tender-cash',\r\n      command,\r\n      { headers: { 'Idempotency-Key': key } },\r\n    );\r\n  }\r\n\r\n  newSale(\r\n    command: NewSaleCommand,\r\n    key = idempotencyKey(),\r\n  ): Observable<PosStateEnvelope> {\r\n    return this.http.post<PosStateEnvelope>(\r\n      '/api/v1.0/pos/commands/new-sale',\r\n      command,\r\n      { headers: { 'Idempotency-Key': key } },\r\n    );\r\n  }\r\n}\r\n","/**\n * Generated bundle index. Do not edit.\n */\n\nexport * from './public-api';\n"],"names":[],"mappings":";;;;;AAAA;AACM,SAAU,UAAU,CAAC,IAAY,EAAA;IACrC,IAAI,OAAO,QAAQ,KAAK,WAAW,IAAI,CAAC,IAAI,EAAE;AAC5C,QAAA,OAAO,IAAI;IACb;AAEA,IAAA,MAAM,WAAW,GAAG,kBAAkB,CAAC,IAAI,CAAC;AAC5C,IAAA,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE;AAC7C,QAAA,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE;QAC3B,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC;AACtC,QAAA,IAAI,SAAS,GAAG,CAAC,EAAE;YACjB;QACF;QAEA,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC;QACvC,IAAI,GAAG,KAAK,IAAI,IAAI,GAAG,KAAK,WAAW,EAAE;YACvC;QACF;QAEA,OAAO,kBAAkB,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC;IACzD;AAEA,IAAA,OAAO,IAAI;AACb;;ACRO,MAAM,sBAAsB,GAAiB;AAClD,IAAA,UAAU,EAAE,EAAE;AACd,IAAA,eAAe,EAAE,gBAAgB;AACjC,IAAA,qBAAqB,EAAE,eAAe;;MAG3B,cAAc,GAAG,IAAI,cAAc,CAAe,gBAAgB,EAAE;AAC/E,IAAA,UAAU,EAAE,MAAM;AAClB,IAAA,OAAO,EAAE,MAAM,sBAAsB;AACtC,CAAA;AAEK,SAAU,eAAe,CAAC,MAAoB,EAAA;AAClD,IAAA,OAAO,MAAM,CAAC,cAAc,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC;AACxE;AAEM,SAAU,eAAe,CAAC,MAAoB,EAAA;AAClD,IAAA,OAAO,MAAM,CAAC,cAAc,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC,qBAAqB,CAAC;AAC9E;;ACvBA,SAAS,OAAO,CAAC,OAAe,EAAE,IAAY,EAAA;IAC5C,IAAI,CAAC,OAAO,IAAI,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;AAC1C,QAAA,OAAO,IAAI;IACb;IAEA,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;AACvC,IAAA,OAAO,CAAA,EAAG,MAAM,CAAA,CAAA,EAAI,MAAM,EAAE;AAC9B;AAEA;MACa,iBAAiB,GAAsB,CAAC,GAAG,EAAE,IAAI,KAAI;AAChE,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,cAAc,CAAC;AACrC,IAAA,MAAM,KAAK,GAAG,eAAe,CAAC,MAAM,CAAC;AACrC,IAAA,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC;AAE3C,IAAA,IAAI,OAAO,GAAG,GAAG,CAAC,OAAO;IACzB,IAAI,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE;QAC1C,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAA,OAAA,EAAU,KAAK,CAAA,CAAE,CAAC;IAC3D;IACA,IAAI,WAAW,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE;QAC/C,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,WAAW,CAAC;IACpD;AAEA,IAAA,OAAO,IAAI,CACT,GAAG,CAAC,KAAK,CAAC;QACR,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC;QACxC,OAAO;AACR,KAAA,CAAC,CACH;AACH;;ACjBM,MAAO,cAAe,SAAQ,KAAK,CAAA;IACrB,IAAI,GAAG,gBAAgB;AAEzC,IAAA,WAAA,CAAY,OAAe,EAAA;QACzB,KAAK,CAAC,OAAO,CAAC;IAChB;AACD;AAED,MAAM,UAAU,GAAG,iBAAiB;AAEpC,SAAS,WAAW,CAAC,KAAkB,EAAE,WAAmB,EAAA;AAC1D,IAAA,MAAM,IAAI,GAAG,CAAA,EAAG,KAAK,CAAC,SAAS,IAAI,EAAE,CAAA,CAAA,EAAI,KAAK,CAAC,QAAQ,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE;AACtE,IAAA,OAAO,IAAI,IAAI,KAAK,CAAC,WAAW,IAAI,WAAW;AACjD;AAEA;AACA,eAAe,YAAY,CAAC,UAA8B,EAAE,GAAW,EAAA;AACrE,IAAA,MAAM,OAAO,GAAG,CAAA,EAAG,UAAU,CAAA,CAAA,EAAI,GAAG,EAAE;IACtC,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;AAClD,IAAA,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,MAAM,CAAC;AACrC,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACvC,KAAK,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;IAClC;AAEA,IAAA,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC;IAC5D,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC;AACrC,SAAA,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC;SAChD,IAAI,CAAC,EAAE;AACP,SAAA,WAAW,EAAE;AAClB;AAEA,eAAe,cAAc,CAAC,SAAiB,EAAE,KAAkB,EAAA;AACjE,IAAA,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,IAAI,EAAE;AACnC,IAAA,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;QAC3B,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC;AAC5D,QAAA,OAAO,IAAI,KAAK,MAAM,CAAC,WAAW,EAAE;IACtC;IAEA,OAAO,SAAS,KAAK,MAAM;AAC7B;MAGa,gBAAgB,CAAA;AACV,IAAA,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC;AAE1C;;;;AAIG;IACH,MAAM,CAAC,WAAmB,EAAE,QAAgB,EAAA;AAC1C,QAAA,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE;QACjC,IAAI,CAAC,MAAM,EAAE;YACX,OAAO,UAAU,CAAC,MAAM,IAAI,cAAc,CAAC,2BAA2B,CAAC,CAAC;QAC1E;AAEA,QAAA,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAc,oBAAoB,kBAAkB,CAAC,MAAM,CAAC,CAAA,CAAE,CAAC,CAAC,IAAI,CACtF,SAAS,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,EACnE,UAAU,CAAC,CAAC,KAAc,KAAI;AAC5B,YAAA,IAAI,KAAK,YAAY,cAAc,EAAE;AACnC,gBAAA,OAAO,UAAU,CAAC,MAAM,KAAK,CAAC;YAChC;AAEA,YAAA,IAAI,KAAK,YAAY,iBAAiB,EAAE;AACtC,gBAAA,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE;oBACxB,OAAO,UAAU,CACf,MACE,IAAI,cAAc,CAChB,kEAAkE,CACnE,CACJ;gBACH;AAEA,gBAAA,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE;oBACxB,OAAO,UAAU,CAAC,MAAM,IAAI,cAAc,CAAC,2BAA2B,CAAC,CAAC;gBAC1E;YACF;YAEA,OAAO,UAAU,CAAC,MAAM,IAAI,cAAc,CAAC,mBAAmB,CAAC,CAAC;QAClE,CAAC,CAAC,CACH;IACH;AAEQ,IAAA,MAAM,SAAS,CACrB,KAAkB,EAClB,WAAmB,EACnB,QAAgB,EAAA;QAEhB,IAAI,EAAE,MAAM,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,EAAE;AAC5C,YAAA,MAAM,IAAI,cAAc,CAAC,2BAA2B,CAAC;QACvD;QAEA,OAAO;AACL,YAAA,WAAW,EAAE,KAAK,CAAC,WAAW,IAAI,WAAW;AAC7C,YAAA,WAAW,EAAE,WAAW,CAAC,KAAK,EAAE,WAAW,CAAC;AAC5C,YAAA,YAAY,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;AACxC,YAAA,SAAS,EAAE,KAAK,CAAC,SAAS,KAAK,IAAI;SACpC;IACH;wGAxDW,gBAAgB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAhB,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,gBAAgB,cADH,MAAM,EAAA,CAAA;;4FACnB,gBAAgB,EAAA,UAAA,EAAA,CAAA;kBAD5B,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;AChClC,SAAS,cAAc,GAAA;AACrB,IAAA,OAAO,UAAU,CAAC,MAAM,EAAE,UAAU,IAAI,IAAI,CAAA,EAAG,IAAI,CAAC,GAAG,EAAE,CAAA,CAAA,EAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;AACpG;AAEA;;;;;;;;;AASG;MAEU,iBAAiB,CAAA;AACX,IAAA,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC;AAE1C,IAAA,OAAO,CACL,OAAuB,EACvB,GAAG,GAAG,cAAc,EAAE,EAAA;QAEtB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAmB,iCAAiC,EAAE,OAAO,EAAE;AAClF,YAAA,OAAO,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE;AACpC,SAAA,CAAC;IACJ;AAEA,IAAA,cAAc,CACZ,OAA8B,EAC9B,GAAG,GAAG,cAAc,EAAE,EAAA;QAEtB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACnB,wCAAwC,EACxC,OAAO,EACP,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE,EAAE,CACxC;IACH;AAEA,IAAA,WAAW,CACT,OAA2B,EAC3B,GAAG,GAAG,cAAc,EAAE,EAAA;QAEtB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACnB,qCAAqC,EACrC,OAAO,EACP,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE,EAAE,CACxC;IACH;AAEA,IAAA,UAAU,CACR,OAA0B,EAC1B,GAAG,GAAG,cAAc,EAAE,EAAA;QAEtB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACnB,oCAAoC,EACpC,OAAO,EACP,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE,EAAE,CACxC;IACH;AAEA,IAAA,OAAO,CACL,OAAuB,EACvB,GAAG,GAAG,cAAc,EAAE,EAAA;QAEtB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CACnB,iCAAiC,EACjC,OAAO,EACP,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,GAAG,EAAE,EAAE,CACxC;IACH;wGAtDW,iBAAiB,EAAA,IAAA,EAAA,EAAA,EAAA,MAAA,EAAA,EAAA,CAAA,eAAA,CAAA,UAAA,EAAA,CAAA;AAAjB,IAAA,OAAA,KAAA,GAAA,EAAA,CAAA,qBAAA,CAAA,EAAA,UAAA,EAAA,QAAA,EAAA,OAAA,EAAA,SAAA,EAAA,QAAA,EAAA,EAAA,EAAA,IAAA,EAAA,iBAAiB,cADJ,MAAM,EAAA,CAAA;;4FACnB,iBAAiB,EAAA,UAAA,EAAA,CAAA;kBAD7B,UAAU;mBAAC,EAAE,UAAU,EAAE,MAAM,EAAE;;;AC7ClC;;AAEG;;"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@retalia/pos-components",
-  "version": "0.0.6",
+  "version": "0.0.7",
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org/"

package/types/retalia-pos-components-services.d.ts

@@ -35,9 +35,11 @@ declare class ClerkAuthService {
     private readonly http;
     /**
      * Looks up the clerk and compares the keypad password in this service.
-     * Not a dedicated sign-in endpoint — replace when ID-647 / PosIdentity lands.
+     * Hashed passwords use the HeadlessPOS SHA-256 check. Not a dedicated
+     * sign-in endpoint — replace when ID-647 / PosIdentity lands.
      */
     signIn(clerkNumber: string, password: string): Observable<ClerkSession>;
+    private toSession;
     static ɵfac: i0.ɵɵFactoryDeclaration<ClerkAuthService, never>;
     static ɵprov: i0.ɵɵInjectableDeclaration<ClerkAuthService>;
 }