ofpos-shared-core 1.1.0

package/dist/integration/backupScheduler.d.ts

@@ -0,0 +1,75 @@
+import { PosCore } from "../PosCore";
+/**
+ * Identifier untuk task backup berkala.
+ */
+export declare const TASK_ID = "com.offlinepos.backup";
+/**
+ * Abstraksi timer untuk menjadwalkan callback periodik.
+ */
+export interface Timer {
+    /**
+     * Menjadwalkan eksekusi handler setiap interval ms.
+     *
+     * @param handler Fungsi yang akan dijalankan.
+     * @param interval Jeda waktu dalam milidetik.
+     * @returns Objek dengan method clear untuk membatalkan jadwal.
+     */
+    setInterval(handler: () => void, interval: number): {
+        clear(): void;
+    };
+}
+/**
+ * Interface untuk scheduler backup berkala.
+ */
+export interface IBackupScheduler {
+    /**
+     * Memulai scheduler dengan interval dalam milidetik.
+     * Jika sudah berjalan, memanggil ulang adalah no-op.
+     *
+     * @param intervalMs Interval backup dalam ms.
+     */
+    start(intervalMs: number, restoreDrillIntervalMs?: number): void;
+    /**
+     * Menghentikan scheduler jika sedang berjalan.
+     */
+    stop(): void;
+}
+/**
+ * Scheduler untuk melakukan backup data lokal secara berkala.
+ */
+export declare class BackupScheduler {
+    private context;
+    private timer;
+    private backupTimerInstance;
+    private restoreDrillTimerInstance;
+    private pendingBackupPayload;
+    private apiService?;
+    private lastBackupAt;
+    private lastRestoreDrillAt;
+    private onlineHandler?;
+    /**
+     * Membuat instance BackupScheduler.
+     *
+     * @param context Instansi PosCore yang menyediakan registry dan integrationServices.
+     * @param timer Abstraksi timer untuk scheduling.
+     */
+    constructor(context: PosCore, timer: Timer);
+    /**
+     * Memulai task backup periodik dengan interval yang ditentukan.
+     *
+     * @param intervalMs Interval antara backup dalam milidetik.
+     */
+    start(intervalMs: number, restoreDrillIntervalMs?: number): void;
+    /**
+     * Menghentikan task backup jika sedang berjalan.
+     */
+    stop(): void;
+    getState(): {
+        pendingBackup: boolean;
+        lastBackupAt: number | null;
+        lastRestoreDrillAt: number | null;
+        started: boolean;
+    };
+    runBackupTask(): Promise<void>;
+    runRestoreDrill(): Promise<void>;
+}

package/dist/integration/checksum.d.ts

@@ -0,0 +1,9 @@
+import { PosCore } from '../PosCore';
+/**
+ * Menghitung HMAC-SHA256 checksum untuk payload string menggunakan paymentSigningKey.
+ *
+ * @param data Payload string yang akan dihitung checksum-nya.
+ * @param context Instansi PosCore yang menyediakan konfigurasi paymentSigningKey.
+ * @returns Checksum dalam format hex; mengembalikan string kosong jika key tidak tersedia.
+ */
+export declare const computeChecksum: (data: string, context: PosCore) => string;

package/dist/integration/checksumAdapter.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Bridge file for RFC extraction phase.
+ *
+ * Source of truth for generic checksum contract is `ofcore`.
+ * Shared-core keeps this path for backward import compatibility.
+ */
+export { NoopChecksumAdapter } from 'ofcore';
+export type { ChecksumAdapter, ChecksumAlgorithm, ChecksumInput } from 'ofcore';

package/dist/integration/configService.d.ts

@@ -0,0 +1,431 @@
+import { PosCore } from '../PosCore';
+/**
+ * Bentuk object yang disimpan/diambil ke/dari storage.
+ */
+export interface StoredConfig {
+    lowStockThreshold: number | null;
+    paymentSigningKey: string | null;
+    apiUrl: string | null;
+    branchId: string | null;
+    demoMode: boolean | null;
+    deploymentMode: 'saas' | 'standalone' | null;
+    requireActiveShiftForCash: boolean | null;
+    maxCashAdjustmentAmount: number | null;
+    requireShiftCloseApprovalOnDifference: boolean | null;
+    shiftCloseDifferenceApprovalThreshold: number | null;
+    requireReasonForReturnOperations: boolean | null;
+    requireApprovalForReturnRefund: boolean | null;
+    requireApprovalForReturnCancel: boolean | null;
+    requireLotExpiryForPurchaseReceiving: boolean | null;
+    lotConsumptionPolicy: 'FEFO' | 'FIFO' | null;
+    enableCustomerCreditPolicy: boolean | null;
+    customerCreditMaxOutstandingAmount: number | null;
+    customerCreditBlockOnOverdue: boolean | null;
+    customerCreditOverdueGraceDays: number | null;
+    customerCreditEscalationThresholdDays: number | null;
+    enableReturnFraudGuard: boolean | null;
+    returnFraudWindowMinutes: number | null;
+    returnFraudMaxEvents: number | null;
+    returnFraudAction: 'require_approval' | 'block' | null;
+    returnApprovalBypassRoles: string[] | null;
+    returnApprovalApproverRoles: string[] | null;
+    allowPromotionStacking: boolean | null;
+    promotionSelectionStrategy: 'best_discount' | 'first_valid' | null;
+    promotionStackingOrder: 'input_order' | 'percent_then_fixed' | 'fixed_then_percent' | null;
+    pricingRoundingIncrement: number | null;
+    pricingRoundingScope: 'total' | 'line' | null;
+    enableSequentialDocumentNumbers: boolean | null;
+    syncProtocolVersion: number | null;
+    syncCompatibleServerVersions: number[] | null;
+    enforceSyncProtocolHandshake: boolean | null;
+    onlineAuthMaxFailedAttempts: number | null;
+    onlineAuthLockoutSeconds: number | null;
+    drRpoTargetMinutes: number | null;
+    drRtoTargetMinutes: number | null;
+    backupIntervalMinutes: number | null;
+    backupRestoreDrillIntervalHours: number | null;
+    opsAlertSyncFailureRateThresholdPercent: number | null;
+    opsAlertQueueLatencyThresholdMs: number | null;
+    opsAlertDeadLetterCountThreshold: number | null;
+    opsAlertEscalationCooldownMinutes: number | null;
+    auditLogRetentionDays: number | null;
+    auditLogArchiveBeforePurge: boolean | null;
+    auditLogPurgeBatchSize: number | null;
+    sessionIdleTimeoutMinutes: number | null;
+    sessionReauthTimeoutMinutes: number | null;
+    apiTimeoutMs: number | null;
+    syncIntervalMs: number | null;
+    syncMaxRetries: number | null;
+    syncBackoffDelayMs: number | null;
+    syncDebounceMs: number | null;
+    reportingTopSellingLimit: number | null;
+    reportingLowStockLimit: number | null;
+    apiBackupListLimit: number | null;
+    encryptionKey: string | null;
+    encryptionPassphrase: string | null;
+}
+/**
+ * Layanan konfigurasi aplikasi.
+ */
+export interface IConfigService {
+    /**
+     * URL dasar API. Selalu non-null.
+     */
+    readonly apiUrl: string;
+    /**
+     * Batas stok rendah. Selalu non-null.
+     */
+    readonly lowStockThreshold: number;
+    /**
+     * Kunci signing pembayaran. Selalu non-null.
+     */
+    readonly paymentSigningKey: string;
+    /**
+     * Mode demo: true jika demo mode.
+     */
+    readonly demoMode: boolean;
+    /**
+     * Identifier cabang. Bisa null.
+     */
+    readonly branchId: string | null;
+    /**
+     * Mode deployment host app.
+     */
+    readonly deploymentMode: 'saas' | 'standalone';
+    readonly requireActiveShiftForCash: boolean;
+    readonly maxCashAdjustmentAmount: number | null;
+    readonly requireShiftCloseApprovalOnDifference: boolean;
+    readonly shiftCloseDifferenceApprovalThreshold: number | null;
+    readonly requireReasonForReturnOperations: boolean;
+    readonly requireApprovalForReturnRefund: boolean;
+    readonly requireApprovalForReturnCancel: boolean;
+    readonly requireLotExpiryForPurchaseReceiving: boolean;
+    readonly lotConsumptionPolicy: 'FEFO' | 'FIFO';
+    readonly enableCustomerCreditPolicy: boolean;
+    readonly customerCreditMaxOutstandingAmount: number | null;
+    readonly customerCreditBlockOnOverdue: boolean;
+    readonly customerCreditOverdueGraceDays: number;
+    readonly customerCreditEscalationThresholdDays: number;
+    readonly enableReturnFraudGuard: boolean;
+    readonly returnFraudWindowMinutes: number;
+    readonly returnFraudMaxEvents: number;
+    readonly returnFraudAction: 'require_approval' | 'block';
+    readonly returnApprovalBypassRoles: string[] | null;
+    readonly returnApprovalApproverRoles: string[] | null;
+    readonly allowPromotionStacking: boolean;
+    readonly promotionSelectionStrategy: 'best_discount' | 'first_valid';
+    readonly promotionStackingOrder: 'input_order' | 'percent_then_fixed' | 'fixed_then_percent';
+    readonly pricingRoundingIncrement: number | null;
+    readonly pricingRoundingScope: 'total' | 'line';
+    readonly enableSequentialDocumentNumbers: boolean;
+    readonly syncProtocolVersion: number;
+    readonly syncCompatibleServerVersions: number[];
+    readonly enforceSyncProtocolHandshake: boolean;
+    readonly onlineAuthMaxFailedAttempts: number;
+    readonly onlineAuthLockoutSeconds: number;
+    readonly drRpoTargetMinutes: number;
+    readonly drRtoTargetMinutes: number;
+    readonly backupIntervalMinutes: number;
+    readonly backupRestoreDrillIntervalHours: number;
+    readonly opsAlertSyncFailureRateThresholdPercent: number;
+    readonly opsAlertQueueLatencyThresholdMs: number;
+    readonly opsAlertDeadLetterCountThreshold: number;
+    readonly opsAlertEscalationCooldownMinutes: number;
+    readonly auditLogRetentionDays: number;
+    readonly auditLogArchiveBeforePurge: boolean;
+    readonly auditLogPurgeBatchSize: number;
+    readonly sessionIdleTimeoutMinutes: number;
+    readonly sessionReauthTimeoutMinutes: number;
+    readonly apiTimeoutMs: number;
+    readonly syncIntervalMs: number;
+    readonly syncMaxRetries: number;
+    readonly syncBackoffDelayMs: number;
+    readonly syncDebounceMs: number;
+    readonly reportingTopSellingLimit: number;
+    readonly reportingLowStockLimit: number;
+    readonly apiBackupListLimit: number;
+    /**
+     * Kunci enkripsi data.
+     */
+    readonly encryptionKey: string;
+    /**
+     * Passphrase untuk master key enkripsi.
+     */
+    readonly encryptionPassphrase: string;
+    /**
+     * Override konfigurasi dan simpan ke storage.
+     * @param config Partial config yang ingin diubah
+     * @returns Promise resolving to objek config lengkap yang tersimpan.
+     */
+    setConfig(config: Partial<Omit<StoredConfig, never>>): Promise<StoredConfig>;
+    init?(): Promise<void>;
+}
+/**
+ * Implementasi layanan konfigurasi aplikasi.
+ */
+export declare class ConfigService implements IConfigService {
+    private context;
+    private _lowStockThreshold;
+    private _paymentSigningKey;
+    private _apiUrl;
+    private _branchId;
+    private _demoMode;
+    private _deploymentMode;
+    private _requireActiveShiftForCash;
+    private _maxCashAdjustmentAmount;
+    private _requireShiftCloseApprovalOnDifference;
+    private _shiftCloseDifferenceApprovalThreshold;
+    private _requireReasonForReturnOperations;
+    private _requireApprovalForReturnRefund;
+    private _requireApprovalForReturnCancel;
+    private _requireLotExpiryForPurchaseReceiving;
+    private _lotConsumptionPolicy;
+    private _enableCustomerCreditPolicy;
+    private _customerCreditMaxOutstandingAmount;
+    private _customerCreditBlockOnOverdue;
+    private _customerCreditOverdueGraceDays;
+    private _customerCreditEscalationThresholdDays;
+    private _enableReturnFraudGuard;
+    private _returnFraudWindowMinutes;
+    private _returnFraudMaxEvents;
+    private _returnFraudAction;
+    private _returnApprovalBypassRoles;
+    private _returnApprovalApproverRoles;
+    private _allowPromotionStacking;
+    private _promotionSelectionStrategy;
+    private _promotionStackingOrder;
+    private _pricingRoundingIncrement;
+    private _pricingRoundingScope;
+    private _enableSequentialDocumentNumbers;
+    private _syncProtocolVersion;
+    private _syncCompatibleServerVersions;
+    private _enforceSyncProtocolHandshake;
+    private _onlineAuthMaxFailedAttempts;
+    private _onlineAuthLockoutSeconds;
+    private _drRpoTargetMinutes;
+    private _drRtoTargetMinutes;
+    private _backupIntervalMinutes;
+    private _backupRestoreDrillIntervalHours;
+    private _opsAlertSyncFailureRateThresholdPercent;
+    private _opsAlertQueueLatencyThresholdMs;
+    private _opsAlertDeadLetterCountThreshold;
+    private _opsAlertEscalationCooldownMinutes;
+    private _auditLogRetentionDays;
+    private _auditLogArchiveBeforePurge;
+    private _auditLogPurgeBatchSize;
+    private _sessionIdleTimeoutMinutes;
+    private _sessionReauthTimeoutMinutes;
+    private _apiTimeoutMs;
+    private _syncIntervalMs;
+    private _syncMaxRetries;
+    private _syncBackoffDelayMs;
+    private _syncDebounceMs;
+    private _reportingTopSellingLimit;
+    private _reportingLowStockLimit;
+    private _apiBackupListLimit;
+    private _encryptionKey;
+    private _encryptionPassphrase;
+    private platformAdapter;
+    private storage;
+    /**
+     * @param context Konteks PosCore yang menyertakan registry.
+     */
+    constructor(context: PosCore);
+    init(): Promise<void>;
+    /**
+     * Dapatkan URL dasar API dari environment atau default.
+     */
+    get apiUrl(): string;
+    /**
+     * Dapatkan nilai batas stok rendah, menggunakan override jika ada.
+     */
+    get lowStockThreshold(): number;
+    /**
+     * Dapatkan kunci signing pembayaran, menggunakan override jika ada.
+     */
+    get paymentSigningKey(): string;
+    /**
+     * Demo mode: jika true, sinkronisasi akan dinonaktifkan.
+     */
+    get demoMode(): boolean;
+    get branchId(): string | null;
+    get deploymentMode(): 'saas' | 'standalone';
+    get requireActiveShiftForCash(): boolean;
+    get maxCashAdjustmentAmount(): number | null;
+    get requireShiftCloseApprovalOnDifference(): boolean;
+    get shiftCloseDifferenceApprovalThreshold(): number | null;
+    get requireReasonForReturnOperations(): boolean;
+    get requireApprovalForReturnRefund(): boolean;
+    get requireApprovalForReturnCancel(): boolean;
+    get requireLotExpiryForPurchaseReceiving(): boolean;
+    get lotConsumptionPolicy(): 'FEFO' | 'FIFO';
+    get enableCustomerCreditPolicy(): boolean;
+    get customerCreditMaxOutstandingAmount(): number | null;
+    get customerCreditBlockOnOverdue(): boolean;
+    get customerCreditOverdueGraceDays(): number;
+    get customerCreditEscalationThresholdDays(): number;
+    get enableReturnFraudGuard(): boolean;
+    get returnFraudWindowMinutes(): number;
+    get returnFraudMaxEvents(): number;
+    get returnFraudAction(): 'require_approval' | 'block';
+    get returnApprovalBypassRoles(): string[] | null;
+    get returnApprovalApproverRoles(): string[] | null;
+    get allowPromotionStacking(): boolean;
+    get promotionSelectionStrategy(): 'best_discount' | 'first_valid';
+    get promotionStackingOrder(): 'input_order' | 'percent_then_fixed' | 'fixed_then_percent';
+    get pricingRoundingIncrement(): number | null;
+    get pricingRoundingScope(): 'total' | 'line';
+    get enableSequentialDocumentNumbers(): boolean;
+    get syncProtocolVersion(): number;
+    get syncCompatibleServerVersions(): number[];
+    get enforceSyncProtocolHandshake(): boolean;
+    get onlineAuthMaxFailedAttempts(): number;
+    get onlineAuthLockoutSeconds(): number;
+    get drRpoTargetMinutes(): number;
+    get drRtoTargetMinutes(): number;
+    get backupIntervalMinutes(): number;
+    get backupRestoreDrillIntervalHours(): number;
+    get opsAlertSyncFailureRateThresholdPercent(): number;
+    get opsAlertQueueLatencyThresholdMs(): number;
+    get opsAlertDeadLetterCountThreshold(): number;
+    get opsAlertEscalationCooldownMinutes(): number;
+    get auditLogRetentionDays(): number;
+    get auditLogArchiveBeforePurge(): boolean;
+    get auditLogPurgeBatchSize(): number;
+    get sessionIdleTimeoutMinutes(): number;
+    get sessionReauthTimeoutMinutes(): number;
+    get apiTimeoutMs(): number;
+    get syncIntervalMs(): number;
+    get syncMaxRetries(): number;
+    get syncBackoffDelayMs(): number;
+    get syncDebounceMs(): number;
+    get reportingTopSellingLimit(): number;
+    get reportingLowStockLimit(): number;
+    get apiBackupListLimit(): number;
+    get encryptionKey(): string;
+    get encryptionPassphrase(): string;
+    private validateConfig;
+    setConfig(config: {
+        lowStockThreshold?: number;
+        paymentSigningKey?: string;
+        apiUrl?: string;
+        branchId?: string;
+        demoMode?: boolean;
+        deploymentMode?: 'saas' | 'standalone';
+        requireActiveShiftForCash?: boolean;
+        maxCashAdjustmentAmount?: number | null;
+        requireShiftCloseApprovalOnDifference?: boolean;
+        shiftCloseDifferenceApprovalThreshold?: number | null;
+        requireReasonForReturnOperations?: boolean;
+        requireApprovalForReturnRefund?: boolean;
+        requireApprovalForReturnCancel?: boolean;
+        requireLotExpiryForPurchaseReceiving?: boolean;
+        lotConsumptionPolicy?: 'FEFO' | 'FIFO';
+        enableCustomerCreditPolicy?: boolean;
+        customerCreditMaxOutstandingAmount?: number | null;
+        customerCreditBlockOnOverdue?: boolean;
+        customerCreditOverdueGraceDays?: number | null;
+        customerCreditEscalationThresholdDays?: number | null;
+        enableReturnFraudGuard?: boolean;
+        returnFraudWindowMinutes?: number | null;
+        returnFraudMaxEvents?: number | null;
+        returnFraudAction?: 'require_approval' | 'block';
+        returnApprovalBypassRoles?: string[] | null;
+        returnApprovalApproverRoles?: string[] | null;
+        allowPromotionStacking?: boolean;
+        promotionSelectionStrategy?: 'best_discount' | 'first_valid';
+        promotionStackingOrder?: 'input_order' | 'percent_then_fixed' | 'fixed_then_percent';
+        pricingRoundingIncrement?: number | null;
+        pricingRoundingScope?: 'total' | 'line';
+        enableSequentialDocumentNumbers?: boolean;
+        syncProtocolVersion?: number | null;
+        syncCompatibleServerVersions?: number[] | null;
+        enforceSyncProtocolHandshake?: boolean;
+        onlineAuthMaxFailedAttempts?: number | null;
+        onlineAuthLockoutSeconds?: number | null;
+        drRpoTargetMinutes?: number | null;
+        drRtoTargetMinutes?: number | null;
+        backupIntervalMinutes?: number | null;
+        backupRestoreDrillIntervalHours?: number | null;
+        opsAlertSyncFailureRateThresholdPercent?: number | null;
+        opsAlertQueueLatencyThresholdMs?: number | null;
+        opsAlertDeadLetterCountThreshold?: number | null;
+        opsAlertEscalationCooldownMinutes?: number | null;
+        auditLogRetentionDays?: number | null;
+        auditLogArchiveBeforePurge?: boolean | null;
+        auditLogPurgeBatchSize?: number | null;
+        sessionIdleTimeoutMinutes?: number | null;
+        sessionReauthTimeoutMinutes?: number | null;
+        apiTimeoutMs?: number | null;
+        syncIntervalMs?: number | null;
+        syncMaxRetries?: number | null;
+        syncBackoffDelayMs?: number | null;
+        syncDebounceMs?: number | null;
+        reportingTopSellingLimit?: number | null;
+        reportingLowStockLimit?: number | null;
+        apiBackupListLimit?: number | null;
+        encryptionKey?: string | null;
+        encryptionPassphrase?: string | null;
+    }): Promise<{
+        lowStockThreshold: number | null;
+        paymentSigningKey: string | null;
+        apiUrl: string | null;
+        branchId: string | null;
+        demoMode: boolean | null;
+        deploymentMode: "saas" | "standalone" | null;
+        requireActiveShiftForCash: boolean | null;
+        maxCashAdjustmentAmount: number | null;
+        requireShiftCloseApprovalOnDifference: boolean | null;
+        shiftCloseDifferenceApprovalThreshold: number | null;
+        requireReasonForReturnOperations: boolean | null;
+        requireApprovalForReturnRefund: boolean | null;
+        requireApprovalForReturnCancel: boolean | null;
+        requireLotExpiryForPurchaseReceiving: boolean | null;
+        lotConsumptionPolicy: "FEFO" | "FIFO" | null;
+        enableCustomerCreditPolicy: boolean | null;
+        customerCreditMaxOutstandingAmount: number | null;
+        customerCreditBlockOnOverdue: boolean | null;
+        customerCreditOverdueGraceDays: number | null;
+        customerCreditEscalationThresholdDays: number | null;
+        enableReturnFraudGuard: boolean | null;
+        returnFraudWindowMinutes: number | null;
+        returnFraudMaxEvents: number | null;
+        returnFraudAction: "require_approval" | "block" | null;
+        returnApprovalBypassRoles: string[] | null;
+        returnApprovalApproverRoles: string[] | null;
+        allowPromotionStacking: boolean | null;
+        promotionSelectionStrategy: "best_discount" | "first_valid" | null;
+        promotionStackingOrder: "input_order" | "percent_then_fixed" | "fixed_then_percent" | null;
+        pricingRoundingIncrement: number | null;
+        pricingRoundingScope: "total" | "line" | null;
+        enableSequentialDocumentNumbers: boolean | null;
+        syncProtocolVersion: number | null;
+        syncCompatibleServerVersions: number[] | null;
+        enforceSyncProtocolHandshake: boolean | null;
+        onlineAuthMaxFailedAttempts: number | null;
+        onlineAuthLockoutSeconds: number | null;
+        drRpoTargetMinutes: number | null;
+        drRtoTargetMinutes: number | null;
+        backupIntervalMinutes: number | null;
+        backupRestoreDrillIntervalHours: number | null;
+        opsAlertSyncFailureRateThresholdPercent: number | null;
+        opsAlertQueueLatencyThresholdMs: number | null;
+        opsAlertDeadLetterCountThreshold: number | null;
+        opsAlertEscalationCooldownMinutes: number | null;
+        auditLogRetentionDays: number | null;
+        auditLogArchiveBeforePurge: boolean | null;
+        auditLogPurgeBatchSize: number | null;
+        sessionIdleTimeoutMinutes: number | null;
+        sessionReauthTimeoutMinutes: number | null;
+        apiTimeoutMs: number | null;
+        syncIntervalMs: number | null;
+        syncMaxRetries: number | null;
+        syncBackoffDelayMs: number | null;
+        syncDebounceMs: number | null;
+        reportingTopSellingLimit: number | null;
+        reportingLowStockLimit: number | null;
+        apiBackupListLimit: number | null;
+        encryptionKey: string | null;
+        encryptionPassphrase: string | null;
+    }>;
+}

package/dist/integration/defaultChecksumAdapter.d.ts

@@ -0,0 +1,6 @@
+import type { ChecksumAdapter, ChecksumInput } from './checksumAdapter';
+export declare class DefaultChecksumAdapter implements ChecksumAdapter {
+    constructor(_context?: unknown);
+    compute(input: ChecksumInput): string;
+    verify(input: ChecksumInput, expectedChecksum: string): boolean;
+}

package/dist/integration/defaultEncryptionAdapter.d.ts

@@ -0,0 +1,9 @@
+import type { PosCore } from '../PosCore';
+import type { EncryptionAdapter, EncryptionContext } from './encryptionAdapter';
+export declare class DefaultEncryptionAdapter implements EncryptionAdapter {
+    private readonly context;
+    constructor(context: PosCore);
+    encrypt(plainText: string, context?: EncryptionContext): string;
+    decrypt(cipherText: string, context?: EncryptionContext): string | null;
+    private resolveSecretKey;
+}

package/dist/integration/encryption.d.ts

@@ -0,0 +1,95 @@
+import { PosCore } from '../PosCore';
+/**
+ * Antarmuka layanan enkripsi dan dekripsi data.
+ */
+export interface IEncryptionService {
+    /**
+     * Enkripsi data (string atau objek) menjadi cipher text.
+     * @param data Data yang akan dienkripsi.
+     * @returns Hasil enkripsi dalam bentuk string.
+     */
+    encryptData(data: string | object): string;
+    /**
+     * Dekripsi cipher text menjadi objek atau string.
+     * @param cipher Teks enkripsi yang akan didekripsi.
+     * @returns Data asli atau null jika gagal.
+     */
+    decryptData<T = object | string>(cipher: string): T | null;
+    /**
+     * Simpan item terenkripsi di penyimpanan.
+     * @param key Kunci penyimpanan.
+     * @param value Nilai yang akan disimpan (string atau objek).
+     */
+    setItem(key: string, value: string | object): Promise<void>;
+    /**
+     * Ambil item, lalu dekripsi, dari penyimpanan.
+     * @param key Kunci penyimpanan.
+     * @returns Nilai yang didekripsi atau null.
+     */
+    getItem<T = object | string>(key: string): Promise<T | null>;
+    /**
+     * Simpan secret key terenkripsi (master key) di penyimpanan.
+     * @param keyId Identifier untuk kunci (opsional).
+     */
+    storeKey(keyId?: string): Promise<void>;
+    /**
+     * Ambil dan set secret key dari penyimpanan.
+     * @param keyId Identifier untuk kunci (opsional).
+     * @returns true jika berhasil, false jika gagal.
+     */
+    retrieveKey(keyId?: string): Promise<boolean>;
+    /**
+     * Rotasi secret key dan simpan versi baru.
+     * @param newSecretKey Kunci baru.
+     * @param keyId Identifier untuk kunci (opsional).
+     * @param reencryptKeys Daftar key payload terenkripsi yang harus dimigrasikan agar tetap terbaca.
+     */
+    rotateKey(newSecretKey: string, keyId?: string, reencryptKeys?: string[]): Promise<void>;
+}
+/**
+ * Implementasi layanan enkripsi dan dekripsi menggunakan CryptoJS.
+ */
+export declare class EncryptionService implements IEncryptionService {
+    private context;
+    private readonly adapter;
+    private readonly encryptionAdapter;
+    private secretKey;
+    private readonly keySettingName;
+    /**
+     * @param context Konteks PosCore dengan registry adapter.
+     * @param secretKey Kunci rahasia awal (opsional).
+     */
+    constructor(context: PosCore, secretKey?: string);
+    /**
+     * Master key untuk enkripsi kunci, diambil dari env atau default.
+     */
+    private get masterKey();
+    /**
+     * Enkripsi data menjadi string cipher text.
+     */
+    encryptData(data: string | object): string;
+    /**
+     * Dekripsi cipher text menjadi objek atau string.
+     */
+    decryptData<T = object | string>(cipher: string): T | null;
+    /**
+     * Simpan item terenkripsi di penyimpanan settings.
+     */
+    setItem(key: string, value: string | object): Promise<void>;
+    /**
+     * Ambil dan dekripsi item dari penyimpanan settings.
+     */
+    getItem<T = object | string>(key: string): Promise<T | null>;
+    /**
+     * Simpan secret key terenkripsi dengan master key.
+     */
+    storeKey(keyId?: string): Promise<void>;
+    /**
+     * Ambil kunci terenkripsi dan set sebagai secretKey saat ini.
+     */
+    retrieveKey(keyId?: string): Promise<boolean>;
+    /**
+     * Rotasi secret key dan simpan versi baru terenkripsi.
+     */
+    rotateKey(newSecretKey: string, keyId?: string, reencryptKeys?: string[]): Promise<void>;
+}

package/dist/integration/encryptionAdapter.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Bridge file for RFC extraction phase.
+ *
+ * Source of truth for generic encryption contract is `ofcore`.
+ * Shared-core keeps this path for backward import compatibility.
+ */
+export { NoopEncryptionAdapter } from 'ofcore';
+export type { EncryptionAdapter, EncryptionContext } from 'ofcore';

package/dist/integration/httpAdapter.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Bridge file for RFC extraction phase.
+ *
+ * Source of truth for generic HTTP transport contract is `ofcore`.
+ * Shared-core keeps this path for backward import compatibility.
+ */
+export { DefaultHttpAdapter } from 'ofcore';
+export { executeHttpRequestWithRetry, NoRetryHttpPolicy, ExponentialBackoffHttpPolicy } from 'ofcore';
+export type { HttpAdapter, HttpMethod, HttpRequest, HttpResponse, HttpRetryPolicy } from 'ofcore';