ofpos-shared-core 1.1.0

package/dist/index.umd.js.LEGAL.txt

@@ -0,0 +1,46 @@
+Bundled license information:
+
+reflect-metadata/Reflect.js:
+  /*! *****************************************************************************
+  Copyright (C) Microsoft. All rights reserved.
+  Licensed under the Apache License, Version 2.0 (the "License"); you may not use
+  this file except in compliance with the License. You may obtain a copy of the
+  License at http://www.apache.org/licenses/LICENSE-2.0
+  
+  THIS CODE IS PROVIDED ON AN *AS IS* BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+  KIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY IMPLIED
+  WARRANTIES OR CONDITIONS OF TITLE, FITNESS FOR A PARTICULAR PURPOSE,
+  MERCHANTABLITY OR NON-INFRINGEMENT.
+  
+  See the Apache Version 2.0 License for specific language governing permissions
+  and limitations under the License.
+  ***************************************************************************** */
+
+crypto-js/ripemd160.js:
+  /** @preserve
+  	(c) 2012 by Cédric Mesnil. All rights reserved.
+  
+  	Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+  
+  	    - Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+  	    - Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+  
+  	THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+  	*/
+
+crypto-js/mode-ctr-gladman.js:
+  /** @preserve
+   * Counter block mode compatible with  Dr Brian Gladman fileenc.c
+   * derived from CryptoJS.mode.CTR
+   * Jan Hruby jhruby.web@gmail.com
+   */
+
+uuidv7/dist/index.js:
+  /**
+   * uuidv7: A JavaScript implementation of UUID version 7
+   *
+   * Copyright 2021-2025 LiosK
+   *
+   * @license Apache-2.0
+   * @packageDocumentation
+   */

package/dist/integration/NotificationAdapter.d.ts

@@ -0,0 +1,69 @@
+import { PosCore } from "../PosCore";
+/**
+ * Opsi untuk menampilkan notifikasi lokal.
+ */
+export interface NotificationOptions {
+    /**
+     * ID channel notifikasi.
+     */
+    channelId?: string;
+    /**
+     * Judul notifikasi.
+     */
+    title: string;
+    /**
+     * Isi pesan notifikasi.
+     */
+    message: string;
+    [key: string]: any;
+}
+/**
+ * Antarmuka adapter untuk notifikasi lokal.
+ */
+export interface NotificationAdapter {
+    /**
+     * Konfigurasi adapter notifikasi.
+     * @param options Opsi konfigurasi.
+     */
+    configure(options: any): void;
+    /**
+     * Buat channel notifikasi baru.
+     * @param options Opsi channel.
+     */
+    createChannel(options: {
+        channelId: string;
+        channelName: string;
+        importance?: number;
+    }): void;
+    /**
+     * Tampilkan notifikasi lokal segera.
+     * @param options Opsi notifikasi.
+     */
+    localNotification(options: NotificationOptions): void;
+}
+/**
+ * Implementasi NotificationAdapter yang tidak melakukan apa-apa.
+ */
+export declare class NoopNotificationAdapter implements NotificationAdapter {
+    private context;
+    /**
+     * @param context Konteks PosCore (tidak digunakan).
+     */
+    constructor(context: PosCore);
+    /**
+     * Konfigurasi tidak melakukan apa-apa.
+     */
+    configure(options: any): void;
+    /**
+     * Pembuatan channel tidak melakukan apa-apa.
+     */
+    createChannel(options: {
+        channelId: string;
+        channelName: string;
+        importance?: number;
+    }): void;
+    /**
+     * Pengiriman notifikasi tidak melakukan apa-apa.
+     */
+    localNotification(options: NotificationOptions): void;
+}

package/dist/integration/activityLogger.d.ts

@@ -0,0 +1,44 @@
+import { DbAdapter } from 'ofcore';
+import { PosCore } from '../PosCore';
+/**
+ * Interface untuk mencatat aktivitas user ke dalam log dan database.
+ */
+export interface IActivityLogger {
+    /**
+     * Mencatat aktivitas user ke log dan database.
+     *
+     * @param action Deskripsi aktivitas (misal: "CREATE_PRODUCT").
+     * @param userId Identifier user yang melakukan aksi.
+     * @param extraContext Objek tambahan berisi metadata; bisa berisi itemType, recordId, dll.
+     * @returns Promise yang resolve ketika pencatatan selesai.
+     */
+    logActivity(action: string, userId: string, extraContext?: Record<string, any>, tx?: DbAdapter): Promise<void>;
+}
+/**
+ * Implementasi IActivityLogger menggunakan DbAdapter untuk menyimpan riwayat.
+ */
+export declare class ActivityLogger implements IActivityLogger {
+    private context;
+    private readonly dbAdapter;
+    private readonly explicitActionTableMap;
+    private readonly entityTableMap;
+    /**
+     * Membuat instance ActivityLogger.
+     *
+     * @param context Instansi PosCore yang menyediakan registry dan logging.
+     */
+    constructor(context: PosCore);
+    private inferEntityFromAction;
+    private inferTableName;
+    private resolveRecordId;
+    /**
+     * Mencatat aktivitas user:
+     * - Menulis log melalui context.logInfo
+     * - Menyimpan entry ke tabel history
+     *
+     * @param action Deskripsi aktivitas (misal: "CREATE_PRODUCT").
+     * @param userId Identifier user yang melakukan aksi.
+     * @param extraContext Objek tambahan berisi metadata; bisa berisi itemType, recordId, dll.
+     */
+    logActivity(action: string, userId: string, extraContext?: Record<string, any>, tx?: DbAdapter): Promise<void>;
+}

package/dist/integration/activitySink.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Bridge file for RFC extraction phase.
+ *
+ * Source of truth for generic activity sink contract is `ofcore`.
+ * Shared-core keeps this path for backward import compatibility.
+ */
+export { NoopActivitySink, MemoryActivitySink } from 'ofcore';
+export type { ActivitySink, ActivityRecord } from 'ofcore';

package/dist/integration/apiService.d.ts

@@ -0,0 +1,255 @@
+import type { PosCore } from '../PosCore';
+/**
+ * Service untuk berinteraksi dengan API remote, termasuk auth, ERP, dan sinkronisasi.
+ */
+export interface IApiService {
+    /**
+     * Melakukan autentikasi user dan mendapatkan token.
+     *
+     * @param creds Objek berisi username dan password.
+     * @returns Promise yang resolve dengan data respons autentikasi.
+     */
+    login(creds: {
+        username: string;
+        password: string;
+    }): Promise<any>;
+    /**
+     * Menghapus token autentikasi lokal.
+     *
+     * @returns Promise yang resolve ketika logout selesai.
+     */
+    logout(): Promise<void>;
+    /**
+     * Mengambil profil user yang sedang login.
+     *
+     * @returns Promise yang resolve dengan data profil.
+     */
+    getProfile(): Promise<any>;
+    /**
+     * Mengambil data ERP.
+     *
+     * @param path Path endpoint ERP (opsional).
+     * @param params Parameter query (opsional).
+     * @returns Promise yang resolve dengan data ERP.
+     */
+    getErpData(path?: string, params?: any, requestContext?: RequestContext): Promise<any>;
+    /**
+     * Mengirim data ke endpoint ERP (POST).
+     *
+     * @param path Path endpoint.
+     * @param data Payload data (opsional).
+     * @returns Promise yang resolve dengan respons server.
+     */
+    postErpData(path: string, data?: any): Promise<any>;
+    /**
+     * Memperbarui data di endpoint ERP (PUT).
+     *
+     * @param path Path endpoint.
+     * @param data Payload data (opsional).
+     * @returns Promise yang resolve dengan respons server.
+     */
+    putErpData(path: string, data?: any): Promise<any>;
+    /**
+     * Menghapus data di endpoint ERP (DELETE).
+     *
+     * @param path Path endpoint.
+     * @param params Parameter query (opsional).
+     * @returns Promise yang resolve dengan respons server.
+     */
+    deleteErpData(path: string, params?: any): Promise<any>;
+    /**
+     * Mengirim satu perubahan ke server sinkronisasi.
+     *
+     * @param payload Payload batch perubahan sinkronisasi.
+     * @returns Promise yang resolve dengan respons server.
+     */
+    pushChange(payload: {
+        changes: unknown[];
+    }, requestContext?: RequestContext): Promise<any>;
+    /**
+     * Mengambil daftar perubahan dari server sinkronisasi.
+     *
+     * @param params Objek berisi since dan optional limit.
+     * @returns Promise yang resolve dengan array perubahan.
+     */
+    pullChanges(params: {
+        since: number | null;
+        limit?: number;
+    }, requestContext?: RequestContext): Promise<any[]>;
+    /**
+     * Membuka shift untuk transaksi.
+     *
+     * @returns Promise yang resolve dengan respons server.
+     */
+    openShift(): Promise<any>;
+    /**
+     * Menutup shift yang sedang aktif.
+     *
+     * @returns Promise yang resolve dengan respons server.
+     */
+    closeShift(): Promise<any>;
+    /**
+     * Mengambil riwayat shift.
+     *
+     * @returns Promise yang resolve dengan array riwayat shift.
+     */
+    getShiftHistory(): Promise<any>;
+    /**
+     * Membuat snapshot backup data tenant.
+       *
+     * @param payload Opsi backup (opsional).
+     * @returns Promise yang resolve dengan metadata backup.
+     */
+    createBackup(payload?: any): Promise<any>;
+    /**
+     * Menjalankan restore dari snapshot backup tenant.
+     *
+     * @param payload Identifier backup dan opsi restore.
+     * @returns Promise yang resolve dengan status restore.
+     */
+    restoreBackup(payload: {
+        backupId: string;
+        [key: string]: unknown;
+    }): Promise<any>;
+    /**
+     * Mengambil daftar backup tenant.
+     *
+     * @param params Query filter daftar backup.
+     * @returns Promise yang resolve dengan daftar backup.
+     */
+    listBackups(params?: any): Promise<any>;
+}
+/**
+ * Implementasi IApiService menggunakan HttpAdapter untuk HTTP requests.
+ */
+export declare class ApiService implements IApiService {
+    private context;
+    private readonly encryptionService?;
+    private readonly httpAdapter;
+    private readonly httpRetryPolicy?;
+    /**
+     * Membuat instance ApiService.
+     *
+     * @param context Instansi PosCore yang menyediakan konfigurasi dan integrationServices.
+     */
+    constructor(context: PosCore);
+    private validateSyncProtocolHandshake;
+    private buildHeaders;
+    private requestData;
+    /**
+     * Melakukan login dan menyimpan token ke penyimpanan terenkripsi.
+     *
+     * @param creds Objek kredensial user.
+     * @returns Promise yang resolve dengan data login.
+     */
+    login(creds: {
+        username: string;
+        password: string;
+    }): Promise<any>;
+    /**
+     * Melakukan logout dengan menghapus token.
+     *
+     * @returns Promise yang resolve ketika selesai.
+     */
+    logout(): Promise<void>;
+    /**
+     * Mengambil data profil user.
+     *
+     * @returns Promise yang resolve dengan data profil.
+     */
+    getProfile(): Promise<any>;
+    /**
+     * Mengambil data ERP.
+     *
+     * @param path Path endpoint (opsional).
+     * @param params Parameter query (opsional).
+     * @returns Data dari ERP.
+     */
+    getErpData(path?: string, params?: any, requestContext?: RequestContext): Promise<any>;
+    /**
+     * Mengirim data ke ERP via POST.
+     *
+     * @param path Path endpoint.
+     * @param data Payload data (opsional).
+     * @returns Data respons.
+     */
+    postErpData(path: string, data?: any): Promise<any>;
+    /**
+     * Memperbarui data ERP via PUT.
+     *
+     * @param path Path endpoint.
+     * @param data Payload data (opsional).
+     * @returns Data respons.
+     */
+    putErpData(path: string, data?: any): Promise<any>;
+    /**
+     * Menghapus data ERP via DELETE.
+     *
+     * @param path Path endpoint (opsional).
+     * @param params Parameter query (opsional).
+     * @returns Data respons.
+     */
+    deleteErpData(path?: string, params?: any): Promise<any>;
+    /**
+     * Mengirim satu perubahan untuk sinkronisasi.
+     *
+     * @param payload Payload batch perubahan sinkronisasi.
+     * @returns Respons server.
+     */
+    pushChange(payload: {
+        changes: unknown[];
+    }, requestContext?: RequestContext): Promise<any>;
+    /**
+     * Mengambil perubahan dari server sinkronisasi.
+     *
+     * @param params Objek berisi since dan optional limit.
+     * @returns Array perubahan.
+     */
+    pullChanges(params: {
+        since: number | null;
+        limit?: number;
+    }, requestContext?: RequestContext): Promise<any>;
+    /**
+     * Membuka shift.
+     *
+     * @returns Respons server.
+     */
+    openShift(): Promise<any>;
+    /**
+     * Menutup shift.
+     *
+     * @returns Respons server.
+     */
+    closeShift(): Promise<any>;
+    /**
+     * Mengambil riwayat shift.
+     *
+     * @returns Array riwayat shift.
+     */
+    getShiftHistory(): Promise<any>;
+    /**
+     * Membuat backup tenant.
+     *
+     * @returns Metadata backup dari server.
+     */
+    createBackup(payload?: any): Promise<any>;
+    /**
+     * Menjalankan restore backup tenant.
+     *
+     * @returns Status restore dari server.
+     */
+    restoreBackup(payload: {
+        backupId: string;
+        [key: string]: unknown;
+    }): Promise<any>;
+    /**
+     * Mengambil daftar backup tenant.
+     *
+     * @returns Daftar backup.
+     */
+    listBackups(params?: any): Promise<any>;
+}
+export interface RequestContext {
+    correlationId?: string;
+    syncBatchId?: string;
+}

package/dist/integration/authorizationService.d.ts

@@ -0,0 +1,225 @@
+import { RoleData, Role } from '../models/Role';
+import { PosCore } from '../PosCore';
+import { User } from '../models/User';
+import { QueryOptions } from 'ofcore';
+export type GranularAuthorizationAction = 'void' | 'refund' | 'settlement_adjustment' | 'credit_limit_approval';
+export interface GranularAuthorizationRule {
+    action: GranularAuthorizationAction;
+    requiredPermission: string;
+    thresholdAmount: number;
+    approvalRequiredAboveThreshold: boolean;
+    approverRoles: string[];
+}
+export interface GranularAuthorizationPolicy {
+    version: 'gau-v1';
+    rules: GranularAuthorizationRule[];
+}
+export interface ApprovalPayload {
+    approvedBy: string;
+    reason: string;
+    approverRole: string;
+}
+export interface GranularAuthorizationDecision {
+    decisionId: string;
+    action: GranularAuthorizationAction;
+    status: 'allow' | 'require_approval' | 'deny';
+    reasonCode: 'ALLOW_BELOW_THRESHOLD' | 'ALLOW_WITH_APPROVAL' | 'ROLE_OR_PERMISSION_DENIED' | 'THRESHOLD_APPROVAL_REQUIRED' | 'APPROVAL_INVALID';
+    thresholdAmount: number;
+    amount: number;
+}
+export declare const DEFAULT_GRANULAR_AUTH_POLICY: GranularAuthorizationPolicy;
+/**
+ * Interface publik untuk layanan otorisasi.
+ */
+export interface IAuthorizationService {
+    /**
+     * Menambahkan role baru.
+     *
+     * @param data Data role.
+     * @param userId ID user yang melakukan aksi.
+     * @returns Promise yang resolve dengan Role baru.
+     */
+    addRole(data: RoleData, userId: string): Promise<Role>;
+    /**
+     * Memperbarui role.
+     *
+     * @param roleId ID role yang diubah.
+     * @param data Data role yang diperbarui.
+     * @param userId ID user yang melakukan aksi.
+     * @returns Promise yang resolve dengan Role yang diperbarui.
+     */
+    updateRole(roleId: string, data: Partial<RoleData>, userId: string): Promise<Role>;
+    /**
+     * Menghapus role.
+     *
+     * @param roleId ID role yang dihapus.
+     * @param userId ID user yang melakukan aksi.
+     * @returns Promise yang resolve dengan objek berisi id dan status antrian.
+     */
+    deleteRole(roleId: string, userId: string): Promise<{
+        id: string;
+        queued: boolean;
+    }>;
+    /**
+     * Mengambil semua role.
+     *
+     * @returns Promise yang resolve dengan array Role.
+     */
+    getRoles(options?: QueryOptions): Promise<Role[]>;
+    /**
+     * Mengambil role berdasarkan ID.
+     *
+     * @param roleId ID role.
+     * @returns Promise yang resolve dengan Role atau null.
+     */
+    getRoleById(roleId: string): Promise<Role | null>;
+    /**
+     * Mengecek apakah role memiliki permission tertentu.
+     *
+     * @param role Objek role.
+     * @param permission Nama permission.
+     * @returns true jika permission ada.
+     */
+    hasPermission(role: {
+        permissions?: string[];
+    }, permission: string): boolean;
+    /**
+     * Mengecek akses user terhadap permission.
+     *
+     * @param user Objek user dengan property role.
+     * @param permission Nama permission.
+     * @returns Promise yang resolve dengan hasil pengecekan.
+     */
+    can(user: {
+        role: string;
+    }, permission: string): Promise<boolean>;
+    /**
+     * Verifikasi PIN lokal terhadap hash yang disimpan.
+     *
+     * @param user Objek User.
+     * @param pin PIN yang diinput.
+     * @returns true jika PIN valid.
+     */
+    verifyLocalPin(user: User, pin: string): boolean;
+    /**
+     * Mendapatkan kontrak policy otorisasi granular canonical.
+     */
+    getGranularPolicy(): GranularAuthorizationPolicy;
+    /**
+     * Evaluasi matrix role x action x threshold.
+     */
+    evaluateGranularAuthorization(input: {
+        actor: {
+            userId?: string;
+            role: string;
+        };
+        action: GranularAuthorizationAction;
+        amount: number;
+        approval?: ApprovalPayload;
+        policy?: GranularAuthorizationPolicy;
+        metadata?: Record<string, any>;
+    }): Promise<GranularAuthorizationDecision>;
+}
+/**
+ * Layanan otorisasi yang menggunakan RoleAdapter dan SyncStore.
+ */
+export declare class AuthorizationService {
+    private context;
+    private roleAdapter?;
+    private syncStore?;
+    /**
+     * Membuat instance AuthorizationService.
+     *
+     * @param context Instansi PosCore yang menyediakan registry dan logging.
+     */
+    constructor(context: PosCore);
+    /**
+     * Menambahkan perubahan ke antrian sinkronisasi.
+     *
+     * @param type Tipe operasi: 'create' | 'update' | 'delete'.
+     * @param model Nama model yang dipengaruhi.
+     * @param record Data record yang diubah.
+     */
+    private enqueue;
+    /**
+     * Menambahkan role baru dan mencatat aktivitas.
+     *
+     * @param data Data role.
+     * @param userId ID user yang melakukan aksi.
+     * @returns Promise dengan Role baru.
+     */
+    addRole(data: RoleData, userId: string): Promise<Role>;
+    /**
+     * Memperbarui role dan mencatat aktivitas.
+     *
+     * @param roleId ID role.
+     * @param data Data role yang diperbarui.
+     * @param userId ID user yang melakukan aksi.
+     * @returns Promise dengan Role yang diperbarui.
+     */
+    updateRole(roleId: string, data: Partial<RoleData>, userId: string): Promise<Role>;
+    /**
+     * Menghapus role dan mencatat aktivitas.
+     *
+     * @param roleId ID role.
+     * @param userId ID user yang melakukan aksi.
+     * @returns Promise dengan objek berisi id dan status antrian.
+     */
+    deleteRole(roleId: string, userId: string): Promise<{
+        id: string;
+        queued: boolean;
+    }>;
+    /**
+     * Mengambil semua role.
+     *
+     * @returns Promise dengan array Role.
+     */
+    getRoles(options?: QueryOptions): Promise<Role[]>;
+    /**
+     * Mengambil role berdasarkan ID.
+     *
+     * @param roleId ID role.
+     * @returns Promise dengan Role atau null.
+     */
+    getRoleById(roleId: string): Promise<Role | null>;
+    /**
+     * Mengecek apakah role memiliki permission tertentu.
+     *
+     * @param role Objek role.
+     * @param permission Nama permission.
+     * @returns true jika permission ada.
+     */
+    hasPermission(role: any, permission: string): boolean;
+    /**
+     * Mengecek akses user terhadap permission.
+     *
+     * @param user Objek user dengan property role.
+     * @param permission Nama permission.
+     * @returns Promise yang resolve dengan hasil pengecekan.
+     */
+    can(user: {
+        role: string;
+    }, permission: string): Promise<boolean>;
+    /**
+     * Verifikasi PIN lokal terhadap hash yang disimpan di user.
+     *
+     * @param user Objek User.
+     * @param pin PIN yang diinput.
+     * @returns true jika PIN valid; false jika tidak atau terjadi error.
+     */
+    verifyLocalPin(user: User, pin: string): boolean;
+    getGranularPolicy(): GranularAuthorizationPolicy;
+    private normalizeRole;
+    private isApprovalValid;
+    evaluateGranularAuthorization(input: {
+        actor: {
+            userId?: string;
+            role: string;
+        };
+        action: GranularAuthorizationAction;
+        amount: number;
+        approval?: ApprovalPayload;
+        policy?: GranularAuthorizationPolicy;
+        metadata?: Record<string, any>;
+    }): Promise<GranularAuthorizationDecision>;
+}