pi-kiosk-shared 2.3.3 → 2.3.5

package/README.md

@@ -9,7 +9,7 @@ Shared types, API contracts, and error classes for the Pi Kiosk system.
 
 ## Temporary retention
 
-`up-backend` keeps production `react` / `react-dom` until cold/start paths consume a Node-safe published or overlaid main barrel. Do **not** drop those deps until that consume path is proven on the version actually installed (registry tarball from `npm view`, or monorepo overlay of sibling `../shared` **2.3.2**). Same caveat as `up-backend/docs/DEPLOYMENT/DEPLOY_SEPARATE_REPOS.md`.
+`up-backend` keeps production `react` / `react-dom` until cold/start paths consume a Node-safe published or overlaid main barrel. Do **not** drop those deps until that consume path is proven on the version actually installed (registry tarball from `npm view`, or monorepo overlay of sibling `../shared` **2.3.4**). Same caveat as `up-backend/docs/DEPLOYMENT/DEPLOY_SEPARATE_REPOS.md`.
 
 ## Installation
 
@@ -74,29 +74,38 @@ Frontends import React modules from `/ui`. The **target** main barrel (local ove
 
 ## Local monorepo overlay
 
-**Honesty (SSOT):** Live monorepo source is `shared/package.json` **2.3.2** (service-unavailable UX, ZBar WASM primary + still-image snap). All consumers pin **`^2.3.2`** in `package.json`. Lockfiles currently resolve **registry** `https://registry.npmjs.org/pi-kiosk-shared/-/pi-kiosk-shared-2.3.2.tgz` — the rewrite ships when that tarball is published **or** when monorepo overlay / local tarball bootstrap is used (below).
+**Honesty (SSOT):** Live monorepo source is `shared/package.json` **2.3.4** (service-unavailable UX, ZBar WASM primary + still-image snap). All consumers pin **`^2.3.4`** in `package.json`. **Registry latest published** (check with `npm view pi-kiosk-shared version`) may lag monorepo source — until `2.3.4` is published, app-only `npm ci` with registry-only locks installs the newest tarball on npm (not necessarily 2.3.4). Monorepo dev uses overlay and/or **file tarball** locks (below).
+
+**Committed lock reality (refresh after every `shared` bump):**
+
+| Consumer | Typical lock `resolved` | Notes |
+|----------|-------------------------|-------|
+| `admin-app`, `rpapp-customer`, `rpapp-kiosk`, `rpapp-pickup`, `up-backend` | `file:../shared/pi-kiosk-shared-2.3.4.tgz` | After `npm install pi-kiosk-shared@file:../shared/pi-kiosk-shared-<version>.tgz` in each package |
+| App-only / Railway (registry path) | `https://registry.npmjs.org/.../pi-kiosk-shared-<version>.tgz` | Requires publish + lock refresh to registry URL; confirm with `npm view` at deploy time |
+
+Do **not** claim “all locks resolve registry X” unless grep of every `package-lock.json` confirms it. Stale `2.3.2` locks ship pre-rewrite outage UI on bare `npm ci`.
 
 ### Distribution paths (pick one per checkout)
 
 | Path | When | How UI rewrite reaches `node_modules` |
 |------|------|----------------------------------------|
 | **A — Monorepo overlay (local dev)** | Sibling `../shared` present | `npm install` / `npm ci` → `overlaySharedIfPresent.mjs` → `ensureDist.mjs` copies `shared/dist` into `node_modules/pi-kiosk-shared`. Vite alias reads sibling `dist` when present. |
-| **B — Registry `^2.3.2` (default locks)** | App-only clone / Railway | `npm ci` installs published tarball. **Requires** `npm view pi-kiosk-shared@2.3.2` to include the rewrite (publish after `shared` bump). |
-| **C — File tarball bootstrap (CI strict `npm ci`)** | Locks pinned to `file:../shared/pi-kiosk-shared-2.3.2.tgz` | Run `node scripts/workspace/bootstrap-pi-kiosk-shared-tarball.mjs` (repack + ephemeral integrity patch), then consumer `npm ci`. Tarball is **gitignored** — not in VCS. |
+| **B — Registry `^2.3.4` (app-only deploy)** | App-only clone / Railway | `npm ci` installs published tarball. **Requires** `npm view pi-kiosk-shared@2.3.4` (or latest satisfying `^2.3.4`) to include the rewrite. |
+| **C — File tarball bootstrap (CI strict `npm ci`)** | Locks pinned to `file:../shared/pi-kiosk-shared-2.3.4.tgz` | Run `node scripts/workspace/bootstrap-pi-kiosk-shared-tarball.mjs` (repack + ephemeral integrity patch), then consumer `npm ci`. Tarball is **gitignored** — not in VCS. |
 
 Verify local pack contents after `cd shared && npm run publish:local`:
 
 ```powershell
-tar -tf pi-kiosk-shared-2.3.2.tgz | Select-String DatabaseUnavailable
+tar -tf pi-kiosk-shared-2.3.4.tgz | Select-String DatabaseUnavailable
 # dist/components/DatabaseUnavailable.js must contain "Aplikace teď není dostupná"
 ```
 
 ### Consumer lock tarball bootstrap (Strategy A — optional)
 
-When frontends use a **file tarball** pin (instead of registry `^2.3.2`):
+When frontends use a **file tarball** pin (instead of registry `^2.3.4`):
 
 ```json
-"pi-kiosk-shared": "file:../shared/pi-kiosk-shared-2.3.2.tgz"
+"pi-kiosk-shared": "file:../shared/pi-kiosk-shared-2.3.4.tgz"
 ```
 
 The tarball is **gitignored** (`*.tgz` in repo root `.gitignore`) and is **not** in VCS. A fresh clone has no pack file until you build it:
@@ -129,7 +138,7 @@ npm ci
 
 **Local dev (preferred):** sibling `../shared` + `postinstall`/`prepare` overlay via `ensureDist.mjs` — tarball optional when the monorepo layout is complete and overlay runs on install.
 
-**Registry-only / Railway app-only clones:** with **registry `^2.3.2` pins** (current monorepo `package.json`/locks), bare **`npm ci` succeeds** on app-only checkouts — no sibling tarball required. If you use **monorepo `file:` tarball pins** instead, bare `npm ci` **fails** on app-only clones (missing pack file). **`prebuildShared.mjs` runs on `predev` / `prebuild` only** — npm has already finished `install`/`ci` by then, and the script does **not** rewrite `package.json` or `package-lock.json` (it side-installs `pi-kiosk-shared` into `node_modules` with `--no-save`, which does **not** make a later strict `npm ci` succeed on `file:` pins). App-only options for `file:` pins: **(a)** run `cd shared && npm run publish:local` and ensure `../shared/pi-kiosk-shared-<version>.tgz` exists on disk before consumer `npm ci` (see [Consumer lock tarball bootstrap](#consumer-lock-tarball-bootstrap)), or **(b)** commit app-only `package.json`/lock with registry pins (same as current monorepo). Confirm with `npm view pi-kiosk-shared version` at deploy time.
+**Registry-only / Railway app-only clones:** with **registry `^2.3.4` pins**, bare **`npm ci` succeeds** on app-only checkouts when the tarball is published — no sibling tarball required. If you use **monorepo `file:` tarball pins** instead, bare `npm ci` **fails** on app-only clones (missing pack file). **`prebuildShared.mjs` runs on `predev` / `prebuild` only** — npm has already finished `install`/`ci` by then, and the script does **not** rewrite `package.json` or `package-lock.json` (it side-installs `pi-kiosk-shared` into `node_modules` with `--no-save`, which does **not** make a later strict `npm ci` succeed on `file:` pins). App-only options for `file:` pins: **(a)** run `cd shared && npm run publish:local` and ensure `../shared/pi-kiosk-shared-<version>.tgz` exists on disk before consumer `npm ci` (see [Consumer lock tarball bootstrap](#consumer-lock-tarball-bootstrap)), or **(b)** commit app-only `package.json`/lock with registry pins after publish. Confirm with `npm view pi-kiosk-shared version` at deploy time.
 
 **Documented cold path (monorepo):** `npm ci` / `npm install` in each app runs lifecycle hooks → `scripts/overlaySharedIfPresent.mjs` → `shared/scripts/ensureDist.mjs` when sibling `../shared` exists:
 
@@ -166,7 +175,7 @@ npm run gate:main-barrel-node-safe
 
 From `shared/`, prove the documented cold path:
 
-1. **DIAGNOSTIC** — `npm pack` a known Node-safe registry tarball (`COLD_VERSION` in `prove-pi-kiosk-shared-cold-overlay.mjs`, currently `2.2.82` — intentional historical diagnostic fixture, not the live pin) in a temp dir and assert COLD_BAD markers (never installs into a consumer with `--ignore-scripts`). Live monorepo source is `shared/package.json` **2.3.2**.
+1. **DIAGNOSTIC** — `npm pack` a known Node-safe registry tarball (`COLD_VERSION` in `prove-pi-kiosk-shared-cold-overlay.mjs`, currently `2.2.82` — intentional historical diagnostic fixture, not the live pin) in a temp dir and assert COLD_BAD markers (never installs into a consumer with `--ignore-scripts`). Live monorepo source is `shared/package.json` **2.3.4**.
 2. **PASS** — wipe that consumer’s `node_modules/pi-kiosk-shared`, then `npm install` with **scripts on** (no package args) so `prepare` / `postinstall` overlays during install; assert Node-safe barrel + `NODE_IMPORT_OK`.
 
 ```bash

package/dist/analyticsPiiTags.d.ts

@@ -0,0 +1,6 @@
+export type AnalyticsPiiClass = 'none' | 'pseudonymous' | 'direct' | 'financial';
+type AnalyticsPiiTagsByField = Readonly<Record<string, AnalyticsPiiClass>>;
+export declare const ANALYTICS_PII_FIELD_TAGS: Readonly<Record<string, AnalyticsPiiTagsByField>>;
+export declare function getAnalyticsPiiTagsForEvent(eventName: string): Readonly<Record<string, AnalyticsPiiClass>> | undefined;
+export {};
+//# sourceMappingURL=analyticsPiiTags.d.ts.map

package/dist/analyticsPiiTags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"analyticsPiiTags.d.ts","sourceRoot":"","sources":["../src/analyticsPiiTags.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,cAAc,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEjF,KAAK,uBAAuB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAiH3E,eAAO,MAAM,wBAAwB,EAAE,QAAQ,CAC7C,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CACT,CAAC;AAEjC,wBAAgB,2BAA2B,CACzC,SAAS,EAAE,MAAM,GAChB,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,GAAG,SAAS,CAEzD"}

package/dist/api.d.ts

@@ -0,0 +1,129 @@
+/**
+ * Shared API Utilities
+ *
+ * API endpoints and HTTP client for communicating with backend
+ * Supports multi-tenant routing and authentication headers
+ */
+/**
+ * Bank transfer webhook contract (H7 — manual / Postman testing):
+ * - Header `x-bank-transfer-webhook-secret` — shared secret (required when webhooks enabled)
+ * - Header `x-webhook-timestamp` — Unix epoch seconds (required; default max skew 900s)
+ * - Body `providerEventId` — required provider event id (dedupe key; duplicate → HTTP 409)
+ * - Body `paymentId`, `amount` — required; `bankTransactionId` optional (defaults to providerEventId)
+ */
+export declare const BANK_TRANSFER_WEBHOOK_HEADERS: {
+    readonly SECRET: "x-bank-transfer-webhook-secret";
+    readonly TIMESTAMP: "x-webhook-timestamp";
+};
+/**
+ * BAR-PR-00b — salesPointId / kioskId alias on kiosk-facing POST bodies:
+ * `POST /api/products/lookup-barcode` and `POST /api/v1/kiosk-auth/card-lookup`
+ * accept either field as a positive integer JSON number or digit-only string.
+ * Validators normalize to canonical `salesPointId: number` before handlers run.
+ * See `up-backend/docs/BARCODE/api-contracts.md`.
+ */
+export declare const API_ENDPOINTS: {
+    readonly PRODUCTS: "/api/products";
+    readonly PRODUCT_CLICK: "/api/products/:id/click";
+    /** Body: `{ barcode, salesPointId? | kioskId? }` — alias normalized to `salesPointId`. */
+    readonly PRODUCT_LOOKUP_BARCODE: "/api/products/lookup-barcode";
+    /** Body: `{ cardPayload, salesPointId? | kioskId? }` — alias normalized to `salesPointId`. */
+    readonly KIOSK_AUTH_CARD_LOOKUP: "/api/v1/kiosk-auth/card-lookup";
+    readonly PAYMENT_CREATE_QR: "/api/payments/create-qr";
+    readonly PAYMENT_CHECK_STATUS: "/api/payments/check-status/:paymentId";
+    readonly PAYMENT_COMPLETE: "/api/payments/complete";
+    readonly PAYMENT_CANCEL: "/api/payments/cancel";
+    readonly PAYMENT_START_MONITORING: "/api/payments/start-monitoring";
+    readonly PAYMENT_STOP_MONITORING: "/api/payments/stop-monitoring";
+    readonly PAYMENT_GATEWAY_CREATE: "/api/payments/create-gateway";
+    readonly PAYMENT_GATEWAY_STATUS: "/api/payments/gateway-status/:paymentId";
+    readonly PAYMENT_GATEWAY_CANCEL: "/api/payments/gateway-cancel";
+    readonly PAYMENT_GATEWAY_METHODS: "/api/payments/gateway-methods";
+    readonly PAYMENT_TERMINAL_CONNECTION_TOKEN: "/api/payments/terminal/connection-token";
+    readonly PAYMENT_CREATE_TERMINAL: "/api/payments/terminal/create-terminal";
+    readonly PAYMENT_TERMINAL_CANCEL: "/api/payments/terminal/cancel";
+    /** Public (tenant-scoped): POST /api/{tenantCode}/webhooks/payment/stripe */
+    readonly PAYMENT_STRIPE_WEBHOOK_PUBLIC: "/api/{tenantCode}/webhooks/payment/stripe";
+    readonly PAYMENT_BANK_TRANSFER_WEBHOOK: "/api/payments/bank-transfer-webhook";
+    readonly PAYMENT_TEST_BANK_TRANSFER_CHECK: "/api/payments/test-bank-transfer-check";
+    /** Authenticated kiosk fallback for post-kiosk handoff token (Phase 5). */
+    readonly PAYMENT_POST_KIOSK_HANDOFF: "/api/payments/post-kiosk-handoff/:paymentId";
+    /** Authenticated kiosk recovery handoff for failed/timeout payments. */
+    readonly PAYMENT_POST_KIOSK_RECOVERY_HANDOFF: "/api/payments/post-kiosk-recovery-handoff/:paymentId";
+    /** Enterprise outbox release gate (bucket C — backend no-ops when obligations disabled). */
+    readonly PAYMENT_RELEASE_GATE: "/api/payments/release-gate/:paymentId";
+    readonly PAYMENT_RECEIPT_PRINT_COMPLETE: "/api/payments/:paymentId/obligations/receipt-print/complete";
+    readonly PAYMENT_RECEIPT_PRINT_FAILED: "/api/payments/:paymentId/obligations/receipt-print/failed";
+    readonly ADMIN_LOGIN: "/api/admin/login";
+    readonly ADMIN_FORGOT_PASSWORD: "/api/admin/forgot-password";
+    readonly ADMIN_RESET_PASSWORD: "/api/admin/reset-password";
+    readonly DEV_FORGOT_PASSWORD: "/api/dev/forgot-password";
+    readonly DEV_RESET_PASSWORD: "/api/dev/reset-password";
+    readonly ADMIN_LOGOUT: "/api/admin/logout";
+    readonly ADMIN_PRODUCTS: "/api/admin/products";
+    readonly ADMIN_PRODUCTS_INVENTORY: "/api/admin/products/inventory/:salesPointId";
+    readonly ADMIN_PRODUCT_INVENTORY: "/api/admin/products/:id/inventory";
+    readonly ADMIN_PRODUCT_INVENTORY_UPDATE: "/api/admin/products/:productId/inventory/:salesPointId";
+    readonly ADMIN_PRODUCT_SALES_POINT_VISIBILITY: "/api/admin/products/:productId/sales-point/:salesPointId";
+    readonly ADMIN_SALES_POINTS: "/api/v1/admin/sales-points";
+    readonly ADMIN_SALES_POINT_DETAILS: "/api/v1/admin/sales-points/:id";
+    /** @deprecated Use ADMIN_SALES_POINTS */
+    readonly ADMIN_KIOSKS: "/api/v1/admin/sales-points";
+    /** @deprecated Use ADMIN_SALES_POINT_DETAILS */
+    readonly ADMIN_KIOSK_DETAILS: "/api/v1/admin/sales-points/:id";
+    readonly ADMIN_LOGS: "/api/admin/logs";
+    readonly ADMIN_CATEGORIES: "/api/v1/admin/categories";
+    readonly HEALTH: "/health";
+    readonly HEALTH_PAYMENT_PROVIDERS: "/health/payment-providers";
+    readonly HEALTH_PAYMENT_PROVIDERS_CHECK_BANK_TRANSFER: "/health/payment-providers/check-bank-transfer";
+    readonly CHECK_TRANSACTIONS: "/api/check-new-transactions";
+    readonly EVENTS: "/events/:salesPointId";
+    /** Public SSE — Obchody / customer directory inventory-parity updates. */
+    readonly PUBLIC_DIRECTORY_EVENTS: "/api/v1/public/directory/events";
+};
+/**
+ * Typed HTTP client for API communication
+ * Features:
+ * - Multi-tenant support (automatic path injection)
+ * - Kiosk secret authentication
+ * - Type-safe requests and responses
+ * - URL validation before requests
+ */
+export declare class APIClient {
+    private baseUrl;
+    private kioskSecret?;
+    private tenantCode?;
+    private salesPointId?;
+    /** UI locale for Accept-Language + error message pick (default `cs`). */
+    private locale;
+    constructor(baseUrl: string, kioskSecret?: string, tenantCode?: string, salesPointId?: number, locale?: string);
+    /** Update UI locale used for Accept-Language and pickLocalizedApiMessage. */
+    setLocale(locale: string | undefined): void;
+    getLocale(): string;
+    private injectTenantIntoEndpoint;
+    private request;
+    get<T>(endpoint: string, headers?: Record<string, string>): Promise<T>;
+    /**
+     * GET with conditional caching — returns 304 without parsing a body (G-12 catalog poll).
+     */
+    getConditional<T>(endpoint: string, ifNoneMatch?: string): Promise<{
+        status: 200 | 304;
+        data?: T;
+        etag?: string | null;
+    }>;
+    post<T>(endpoint: string, data?: unknown): Promise<T>;
+    put<T>(endpoint: string, data?: unknown): Promise<T>;
+    delete<T>(endpoint: string): Promise<T>;
+}
+/** Normalize optional UI locale; empty / missing → `cs` (platform default). */
+export declare function normalizeApiClientLocale(locale: string | undefined): string;
+/**
+ * Factory function to create API client
+ * @param baseUrl - Optional API base URL (defaults to localhost:3015)
+ * @param kioskSecret - Optional kiosk authentication secret
+ * @param tenantCode - Optional tenant code for multi-tenant routing
+ * @param salesPointId - Optional sales point id (sent as `X-Sales-Point-Id` when set; pair with secret for device auth)
+ * @param locale - Optional UI locale for Accept-Language + error pick (defaults to `cs`)
+ */
+export declare const createAPIClient: (baseUrl?: string, kioskSecret?: string, tenantCode?: string, salesPointId?: number, locale?: string) => APIClient;
+//# sourceMappingURL=api.d.ts.map

package/dist/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AASA;;;;;GAKG;AAEH;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B;;;CAGhC,CAAC;AAEX;;;;;;GAMG;AAIH,eAAO,MAAM,aAAa;;;IAIxB,0FAA0F;;IAE1F,8FAA8F;;;;;;;;;;;;;;;IAmB9F,6EAA6E;;;;IAI7E,2EAA2E;;IAE3E,wEAAwE;;IAExE,4FAA4F;;;;;;;;;;;;;;;;;IAmB5F,yCAAyC;;IAEzC,gDAAgD;;;;;;;;;IAWhD,0EAA0E;;CAElE,CAAC;AAIX;;;;;;;GAOG;AACH,qBAAa,SAAS;IACpB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,WAAW,CAAC,CAAS;IAC7B,OAAO,CAAC,UAAU,CAAC,CAAS;IAC5B,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,yEAAyE;IACzE,OAAO,CAAC,MAAM,CAAS;gBAGrB,OAAO,EAAE,MAAM,EACf,WAAW,CAAC,EAAE,MAAM,EACpB,UAAU,CAAC,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,MAAM,EACrB,MAAM,CAAC,EAAE,MAAM;IAYjB,6EAA6E;IAC7E,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAI3C,SAAS,IAAI,MAAM;IAInB,OAAO,CAAC,wBAAwB;YAclB,OAAO;IA8Ff,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAI5E;;OAEG;IACG,cAAc,CAAC,CAAC,EACpB,QAAQ,EAAE,MAAM,EAChB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,MAAM,EAAE,GAAG,GAAG,GAAG,CAAC;QAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IAyC3D,IAAI,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAOrD,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC;IAOpD,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC;CAG9C;AAED,+EAA+E;AAC/E,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAK3E;AAiBD;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,GAC1B,UAAU,MAAM,EAChB,cAAc,MAAM,EACpB,aAAa,MAAM,EACnB,eAAe,MAAM,EACrB,SAAS,MAAM,KACd,SAKF,CAAC"}

package/dist/api.js

@@ -0,0 +1,305 @@
+import { readRequestId, setClientCorrelationId, } from './logging/index.js';
+// Bridge only — must NOT import ./sentry/initSentry.js (static @sentry/react breaks Node/backend).
+import { setSentryCorrelationId } from './sentry/correlationTagBridge.js';
+import { pickLocalizedApiMessage } from './errors/pickLocalizedApiMessage.js';
+import { buildPromoApplyAcceptLanguage } from './promo/resolveApplyPromoEventDisplayName.js';
+/**
+ * Shared API Utilities
+ *
+ * API endpoints and HTTP client for communicating with backend
+ * Supports multi-tenant routing and authentication headers
+ */
+/**
+ * Bank transfer webhook contract (H7 — manual / Postman testing):
+ * - Header `x-bank-transfer-webhook-secret` — shared secret (required when webhooks enabled)
+ * - Header `x-webhook-timestamp` — Unix epoch seconds (required; default max skew 900s)
+ * - Body `providerEventId` — required provider event id (dedupe key; duplicate → HTTP 409)
+ * - Body `paymentId`, `amount` — required; `bankTransactionId` optional (defaults to providerEventId)
+ */
+export const BANK_TRANSFER_WEBHOOK_HEADERS = {
+    SECRET: 'x-bank-transfer-webhook-secret',
+    TIMESTAMP: 'x-webhook-timestamp',
+};
+/**
+ * BAR-PR-00b — salesPointId / kioskId alias on kiosk-facing POST bodies:
+ * `POST /api/products/lookup-barcode` and `POST /api/v1/kiosk-auth/card-lookup`
+ * accept either field as a positive integer JSON number or digit-only string.
+ * Validators normalize to canonical `salesPointId: number` before handlers run.
+ * See `up-backend/docs/BARCODE/api-contracts.md`.
+ */
+// ===== API Endpoints =====
+export const API_ENDPOINTS = {
+    // Product endpoints
+    PRODUCTS: '/api/products',
+    PRODUCT_CLICK: '/api/products/:id/click',
+    /** Body: `{ barcode, salesPointId? | kioskId? }` — alias normalized to `salesPointId`. */
+    PRODUCT_LOOKUP_BARCODE: '/api/products/lookup-barcode',
+    /** Body: `{ cardPayload, salesPointId? | kioskId? }` — alias normalized to `salesPointId`. */
+    KIOSK_AUTH_CARD_LOOKUP: '/api/v1/kiosk-auth/card-lookup',
+    // Payment endpoints
+    PAYMENT_CREATE_QR: '/api/payments/create-qr',
+    PAYMENT_CHECK_STATUS: '/api/payments/check-status/:paymentId',
+    PAYMENT_COMPLETE: '/api/payments/complete',
+    PAYMENT_CANCEL: '/api/payments/cancel',
+    PAYMENT_START_MONITORING: '/api/payments/start-monitoring',
+    PAYMENT_STOP_MONITORING: '/api/payments/stop-monitoring',
+    // Redirect gateway payment endpoints
+    PAYMENT_GATEWAY_CREATE: '/api/payments/create-gateway',
+    PAYMENT_GATEWAY_STATUS: '/api/payments/gateway-status/:paymentId',
+    PAYMENT_GATEWAY_CANCEL: '/api/payments/gateway-cancel',
+    PAYMENT_GATEWAY_METHODS: '/api/payments/gateway-methods',
+    PAYMENT_TERMINAL_CONNECTION_TOKEN: '/api/payments/terminal/connection-token',
+    PAYMENT_CREATE_TERMINAL: '/api/payments/terminal/create-terminal',
+    PAYMENT_TERMINAL_CANCEL: '/api/payments/terminal/cancel',
+    /** Public (tenant-scoped): POST /api/{tenantCode}/webhooks/payment/stripe */
+    PAYMENT_STRIPE_WEBHOOK_PUBLIC: '/api/{tenantCode}/webhooks/payment/stripe',
+    PAYMENT_BANK_TRANSFER_WEBHOOK: '/api/payments/bank-transfer-webhook',
+    PAYMENT_TEST_BANK_TRANSFER_CHECK: '/api/payments/test-bank-transfer-check',
+    /** Authenticated kiosk fallback for post-kiosk handoff token (Phase 5). */
+    PAYMENT_POST_KIOSK_HANDOFF: '/api/payments/post-kiosk-handoff/:paymentId',
+    /** Authenticated kiosk recovery handoff for failed/timeout payments. */
+    PAYMENT_POST_KIOSK_RECOVERY_HANDOFF: '/api/payments/post-kiosk-recovery-handoff/:paymentId',
+    /** Enterprise outbox release gate (bucket C — backend no-ops when obligations disabled). */
+    PAYMENT_RELEASE_GATE: '/api/payments/release-gate/:paymentId',
+    PAYMENT_RECEIPT_PRINT_COMPLETE: '/api/payments/:paymentId/obligations/receipt-print/complete',
+    PAYMENT_RECEIPT_PRINT_FAILED: '/api/payments/:paymentId/obligations/receipt-print/failed',
+    // Admin endpoints
+    ADMIN_LOGIN: '/api/admin/login',
+    ADMIN_FORGOT_PASSWORD: '/api/admin/forgot-password',
+    ADMIN_RESET_PASSWORD: '/api/admin/reset-password',
+    DEV_FORGOT_PASSWORD: '/api/dev/forgot-password',
+    DEV_RESET_PASSWORD: '/api/dev/reset-password',
+    ADMIN_LOGOUT: '/api/admin/logout',
+    ADMIN_PRODUCTS: '/api/admin/products',
+    ADMIN_PRODUCTS_INVENTORY: '/api/admin/products/inventory/:salesPointId',
+    ADMIN_PRODUCT_INVENTORY: '/api/admin/products/:id/inventory',
+    ADMIN_PRODUCT_INVENTORY_UPDATE: '/api/admin/products/:productId/inventory/:salesPointId',
+    ADMIN_PRODUCT_SALES_POINT_VISIBILITY: '/api/admin/products/:productId/sales-point/:salesPointId',
+    ADMIN_SALES_POINTS: '/api/v1/admin/sales-points',
+    ADMIN_SALES_POINT_DETAILS: '/api/v1/admin/sales-points/:id',
+    /** @deprecated Use ADMIN_SALES_POINTS */
+    ADMIN_KIOSKS: '/api/v1/admin/sales-points',
+    /** @deprecated Use ADMIN_SALES_POINT_DETAILS */
+    ADMIN_KIOSK_DETAILS: '/api/v1/admin/sales-points/:id',
+    ADMIN_LOGS: '/api/admin/logs',
+    ADMIN_CATEGORIES: '/api/v1/admin/categories',
+    // System endpoints
+    HEALTH: '/health',
+    HEALTH_PAYMENT_PROVIDERS: '/health/payment-providers',
+    HEALTH_PAYMENT_PROVIDERS_CHECK_BANK_TRANSFER: '/health/payment-providers/check-bank-transfer',
+    CHECK_TRANSACTIONS: '/api/check-new-transactions',
+    EVENTS: '/events/:salesPointId',
+    /** Public SSE — Obchody / customer directory inventory-parity updates. */
+    PUBLIC_DIRECTORY_EVENTS: '/api/v1/public/directory/events',
+};
+// ===== API Client =====
+/**
+ * Typed HTTP client for API communication
+ * Features:
+ * - Multi-tenant support (automatic path injection)
+ * - Kiosk secret authentication
+ * - Type-safe requests and responses
+ * - URL validation before requests
+ */
+export class APIClient {
+    baseUrl;
+    kioskSecret;
+    tenantCode;
+    salesPointId;
+    /** UI locale for Accept-Language + error message pick (default `cs`). */
+    locale;
+    constructor(baseUrl, kioskSecret, tenantCode, salesPointId, locale) {
+        if (!baseUrl || typeof baseUrl !== 'string') {
+            throw new Error('APIClient: baseUrl is required and must be a string');
+        }
+        this.baseUrl = baseUrl.replace(/\/$/, ''); // Remove trailing slash
+        this.kioskSecret = kioskSecret;
+        this.tenantCode = tenantCode;
+        this.salesPointId = salesPointId;
+        this.locale = normalizeApiClientLocale(locale);
+    }
+    /** Update UI locale used for Accept-Language and pickLocalizedApiMessage. */
+    setLocale(locale) {
+        this.locale = normalizeApiClientLocale(locale);
+    }
+    getLocale() {
+        return this.locale;
+    }
+    injectTenantIntoEndpoint(endpoint) {
+        if (!this.tenantCode) {
+            return endpoint;
+        }
+        if (endpoint.startsWith('/api/')) {
+            // Handle query strings - split endpoint and query, inject tenant into path only
+            const [pathPart, query] = endpoint.split('?');
+            const path = pathPart ?? endpoint;
+            const tenantPath = `/api/${this.tenantCode}${path.slice(4)}`;
+            return query ? `${tenantPath}?${query}` : tenantPath;
+        }
+        return endpoint;
+    }
+    async request(endpoint, options = {}) {
+        if (!endpoint || typeof endpoint !== 'string') {
+            throw new Error(`APIClient: endpoint is required and must be a string, got: ${typeof endpoint}`);
+        }
+        // Inject tenant into endpoint path if tenant is configured
+        const tenantEndpoint = this.injectTenantIntoEndpoint(endpoint);
+        const url = `${this.baseUrl}${tenantEndpoint}`;
+        // Validate URL before making request
+        try {
+            new URL(url);
+        }
+        catch (error) {
+            throw new Error(`APIClient: Invalid URL constructed: ${url}. baseUrl: ${this.baseUrl}, endpoint: ${endpoint}`);
+        }
+        const headers = {
+            'Content-Type': 'application/json',
+            'Accept-Language': buildPromoApplyAcceptLanguage(this.locale),
+            ...(options.headers || {}),
+        };
+        ensureAcceptLanguageHeader(headers, this.locale);
+        // Add sales point device headers when available
+        if (this.kioskSecret) {
+            headers['X-Sales-Point-Secret'] = this.kioskSecret;
+        }
+        if (typeof this.salesPointId === 'number' &&
+            Number.isInteger(this.salesPointId) &&
+            this.salesPointId > 0) {
+            headers['X-Sales-Point-Id'] = String(this.salesPointId);
+        }
+        const response = await fetch(url, {
+            ...options,
+            headers,
+        });
+        if (!response.ok) {
+            const retryAfter = response.headers.get('Retry-After');
+            let code;
+            let message = response.statusText;
+            let requestId = readRequestId(response);
+            try {
+                const parsed = (await response.json());
+                message = parsed?.error ?? parsed?.message ?? message;
+                code = parsed?.code;
+                if (requestId === undefined && typeof parsed?.requestId === 'string') {
+                    requestId = parsed.requestId;
+                }
+            }
+            catch {
+                // keep statusText
+            }
+            message = pickLocalizedApiMessage(message, this.locale);
+            if (requestId !== undefined) {
+                setClientCorrelationId(requestId);
+                setSentryCorrelationId(requestId);
+            }
+            const err = new Error(`HTTP ${response.status}: ${message}`);
+            err.statusCode = response.status;
+            err.code = code;
+            if (requestId !== undefined) {
+                err.requestId = requestId;
+            }
+            if (retryAfter) {
+                const sec = Number(retryAfter);
+                if (Number.isFinite(sec) && sec > 0) {
+                    err.retryAfterSeconds = sec;
+                }
+            }
+            throw err;
+        }
+        const okId = readRequestId(response);
+        if (okId !== undefined) {
+            setClientCorrelationId(okId);
+            setSentryCorrelationId(okId);
+        }
+        return response.json();
+    }
+    async get(endpoint, headers) {
+        return this.request(endpoint, { method: 'GET', headers });
+    }
+    /**
+     * GET with conditional caching — returns 304 without parsing a body (G-12 catalog poll).
+     */
+    async getConditional(endpoint, ifNoneMatch) {
+        if (!endpoint || typeof endpoint !== 'string') {
+            throw new Error(`APIClient: endpoint is required and must be a string, got: ${typeof endpoint}`);
+        }
+        const tenantEndpoint = this.injectTenantIntoEndpoint(endpoint);
+        const url = `${this.baseUrl}${tenantEndpoint}`;
+        const headers = {
+            'Content-Type': 'application/json',
+            'Accept-Language': buildPromoApplyAcceptLanguage(this.locale),
+        };
+        if (ifNoneMatch) {
+            headers['If-None-Match'] = ifNoneMatch;
+        }
+        if (this.kioskSecret) {
+            headers['X-Sales-Point-Secret'] = this.kioskSecret;
+        }
+        if (typeof this.salesPointId === 'number' &&
+            Number.isInteger(this.salesPointId) &&
+            this.salesPointId > 0) {
+            headers['X-Sales-Point-Id'] = String(this.salesPointId);
+        }
+        const response = await fetch(url, { method: 'GET', headers });
+        const etag = response.headers.get('etag');
+        const conditionalId = readRequestId(response);
+        if (conditionalId !== undefined) {
+            setClientCorrelationId(conditionalId);
+            setSentryCorrelationId(conditionalId);
+        }
+        if (response.status === 304) {
+            return { status: 304, etag };
+        }
+        if (!response.ok) {
+            const statusMessage = pickLocalizedApiMessage(response.statusText, this.locale);
+            throw new Error(`HTTP ${response.status}: ${statusMessage}`);
+        }
+        const data = (await response.json());
+        return { status: 200, data, etag };
+    }
+    async post(endpoint, data) {
+        return this.request(endpoint, {
+            method: 'POST',
+            body: data ? JSON.stringify(data) : undefined,
+        });
+    }
+    async put(endpoint, data) {
+        return this.request(endpoint, {
+            method: 'PUT',
+            body: data ? JSON.stringify(data) : undefined,
+        });
+    }
+    async delete(endpoint) {
+        return this.request(endpoint, { method: 'DELETE' });
+    }
+}
+/** Normalize optional UI locale; empty / missing → `cs` (platform default). */
+export function normalizeApiClientLocale(locale) {
+    if (typeof locale === 'string' && locale.trim().length > 0) {
+        return locale.trim();
+    }
+    return 'cs';
+}
+/**
+ * Ensure Accept-Language is set (caller headers win when already present).
+ */
+function ensureAcceptLanguageHeader(headers, locale) {
+    const hasAcceptLanguage = Object.keys(headers).some((key) => key.toLowerCase() === 'accept-language');
+    if (!hasAcceptLanguage) {
+        headers['Accept-Language'] = buildPromoApplyAcceptLanguage(locale);
+    }
+}
+/**
+ * Factory function to create API client
+ * @param baseUrl - Optional API base URL (defaults to localhost:3015)
+ * @param kioskSecret - Optional kiosk authentication secret
+ * @param tenantCode - Optional tenant code for multi-tenant routing
+ * @param salesPointId - Optional sales point id (sent as `X-Sales-Point-Id` when set; pair with secret for device auth)
+ * @param locale - Optional UI locale for Accept-Language + error pick (defaults to `cs`)
+ */
+export const createAPIClient = (baseUrl, kioskSecret, tenantCode, salesPointId, locale) => {
+    // Fallback to default if not provided
+    const url = baseUrl || 'http://localhost:3015';
+    return new APIClient(url, kioskSecret, tenantCode, salesPointId, locale);
+};
+//# sourceMappingURL=api.js.map

package/dist/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,sBAAsB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,mGAAmG;AACnG,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,qCAAqC,CAAC;AAC9E,OAAO,EAAE,6BAA6B,EAAE,MAAM,8CAA8C,CAAC;AAE7F;;;;;GAKG;AAEH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG;IAC3C,MAAM,EAAE,gCAAgC;IACxC,SAAS,EAAE,qBAAqB;CACxB,CAAC;AAEX;;;;;;GAMG;AAEH,4BAA4B;AAE5B,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,oBAAoB;IACpB,QAAQ,EAAE,eAAe;IACzB,aAAa,EAAE,yBAAyB;IACxC,0FAA0F;IAC1F,sBAAsB,EAAE,8BAA8B;IACtD,8FAA8F;IAC9F,sBAAsB,EAAE,gCAAgC;IAExD,oBAAoB;IACpB,iBAAiB,EAAE,yBAAyB;IAC5C,oBAAoB,EAAE,uCAAuC;IAC7D,gBAAgB,EAAE,wBAAwB;IAC1C,cAAc,EAAE,sBAAsB;IACtC,wBAAwB,EAAE,gCAAgC;IAC1D,uBAAuB,EAAE,+BAA+B;IAExD,qCAAqC;IACrC,sBAAsB,EAAE,8BAA8B;IACtD,sBAAsB,EAAE,yCAAyC;IACjE,sBAAsB,EAAE,8BAA8B;IACtD,uBAAuB,EAAE,+BAA+B;IACxD,iCAAiC,EAAE,yCAAyC;IAC5E,uBAAuB,EAAE,wCAAwC;IACjE,uBAAuB,EAAE,+BAA+B;IACxD,6EAA6E;IAC7E,6BAA6B,EAAE,2CAA2C;IAC1E,6BAA6B,EAAE,qCAAqC;IACpE,gCAAgC,EAAE,wCAAwC;IAC1E,2EAA2E;IAC3E,0BAA0B,EAAE,6CAA6C;IACzE,wEAAwE;IACxE,mCAAmC,EAAE,sDAAsD;IAC3F,4FAA4F;IAC5F,oBAAoB,EAAE,uCAAuC;IAC7D,8BAA8B,EAAE,6DAA6D;IAC7F,4BAA4B,EAAE,2DAA2D;IAEzF,kBAAkB;IAClB,WAAW,EAAE,kBAAkB;IAC/B,qBAAqB,EAAE,4BAA4B;IACnD,oBAAoB,EAAE,2BAA2B;IACjD,mBAAmB,EAAE,0BAA0B;IAC/C,kBAAkB,EAAE,yBAAyB;IAC7C,YAAY,EAAE,mBAAmB;IACjC,cAAc,EAAE,qBAAqB;IACrC,wBAAwB,EAAE,6CAA6C;IACvE,uBAAuB,EAAE,mCAAmC;IAC5D,8BAA8B,EAAE,wDAAwD;IACxF,oCAAoC,EAAE,0DAA0D;IAChG,kBAAkB,EAAE,4BAA4B;IAChD,yBAAyB,EAAE,gCAAgC;IAC3D,yCAAyC;IACzC,YAAY,EAAE,4BAA4B;IAC1C,gDAAgD;IAChD,mBAAmB,EAAE,gCAAgC;IACrD,UAAU,EAAE,iBAAiB;IAC7B,gBAAgB,EAAE,0BAA0B;IAE5C,mBAAmB;IACnB,MAAM,EAAE,SAAS;IACjB,wBAAwB,EAAE,2BAA2B;IACrD,4CAA4C,EAAE,+CAA+C;IAC7F,kBAAkB,EAAE,6BAA6B;IACjD,MAAM,EAAE,uBAAuB;IAC/B,0EAA0E;IAC1E,uBAAuB,EAAE,iCAAiC;CAClD,CAAC;AAEX,yBAAyB;AAEzB;;;;;;;GAOG;AACH,MAAM,OAAO,SAAS;IACZ,OAAO,CAAS;IAChB,WAAW,CAAU;IACrB,UAAU,CAAU;IACpB,YAAY,CAAU;IAC9B,yEAAyE;IACjE,MAAM,CAAS;IAEvB,YACE,OAAe,EACf,WAAoB,EACpB,UAAmB,EACnB,YAAqB,EACrB,MAAe;QAEf,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,wBAAwB;QACnE,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;QACjC,IAAI,CAAC,MAAM,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,6EAA6E;IAC7E,SAAS,CAAC,MAA0B;QAClC,IAAI,CAAC,MAAM,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAEO,wBAAwB,CAAC,QAAgB;QAC/C,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,gFAAgF;YAChF,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC9C,MAAM,IAAI,GAAG,QAAQ,IAAI,QAAQ,CAAC;YAClC,MAAM,UAAU,GAAG,QAAQ,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;QACvD,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC;IAEO,KAAK,CAAC,OAAO,CACnB,QAAgB,EAChB,UAAuB,EAAE;QAEzB,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,8DAA8D,OAAO,QAAQ,EAAE,CAAC,CAAC;QACnG,CAAC;QAED,2DAA2D;QAC3D,MAAM,cAAc,GAAG,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,cAAc,EAAE,CAAC;QAE/C,qCAAqC;QACrC,IAAI,CAAC;YACH,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,uCAAuC,GAAG,cAAc,IAAI,CAAC,OAAO,eAAe,QAAQ,EAAE,CAAC,CAAC;QACjH,CAAC;QAED,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,iBAAiB,EAAE,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC;YAC7D,GAAG,CAAC,OAAO,CAAC,OAAiC,IAAI,EAAE,CAAC;SACrD,CAAC;QACF,0BAA0B,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAEjD,gDAAgD;QAChD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,OAAO,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;QACrD,CAAC;QACD,IACE,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;YACrC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC;YACnC,IAAI,CAAC,YAAY,GAAG,CAAC,EACrB,CAAC;YACD,OAAO,CAAC,kBAAkB,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1D,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAChC,GAAG,OAAO;YACV,OAAO;SACR,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YACvD,IAAI,IAAwB,CAAC;YAC7B,IAAI,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC;YAClC,IAAI,SAAS,GAAuB,aAAa,CAAC,QAAQ,CAAC,CAAC;YAC5D,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAExB,CAAC;gBACd,OAAO,GAAG,MAAM,EAAE,KAAK,IAAI,MAAM,EAAE,OAAO,IAAI,OAAO,CAAC;gBACtD,IAAI,GAAG,MAAM,EAAE,IAAI,CAAC;gBACpB,IAAI,SAAS,KAAK,SAAS,IAAI,OAAO,MAAM,EAAE,SAAS,KAAK,QAAQ,EAAE,CAAC;oBACrE,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;gBAC/B,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB;YACpB,CAAC;YACD,OAAO,GAAG,uBAAuB,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACxD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,sBAAsB,CAAC,SAAS,CAAC,CAAC;gBAClC,sBAAsB,CAAC,SAAS,CAAC,CAAC;YACpC,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAK1D,CAAC;YACF,GAAG,CAAC,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC;YACjC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;YAChB,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,GAAG,CAAC,SAAS,GAAG,SAAS,CAAC;YAC5B,CAAC;YACD,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;gBAC/B,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;oBACpC,GAAG,CAAC,iBAAiB,GAAG,GAAG,CAAC;gBAC9B,CAAC;YACH,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;QAED,MAAM,IAAI,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QACrC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,sBAAsB,CAAC,IAAI,CAAC,CAAC;YAC7B,sBAAsB,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,GAAG,CAAI,QAAgB,EAAE,OAAgC;QAC7D,OAAO,IAAI,CAAC,OAAO,CAAI,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,cAAc,CAClB,QAAgB,EAChB,WAAoB;QAEpB,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,8DAA8D,OAAO,QAAQ,EAAE,CAAC,CAAC;QACnG,CAAC;QACD,MAAM,cAAc,GAAG,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,CAAC;QAC/D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,GAAG,cAAc,EAAE,CAAC;QAC/C,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,iBAAiB,EAAE,6BAA6B,CAAC,IAAI,CAAC,MAAM,CAAC;SAC9D,CAAC;QACF,IAAI,WAAW,EAAE,CAAC;YAChB,OAAO,CAAC,eAAe,CAAC,GAAG,WAAW,CAAC;QACzC,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,OAAO,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,WAAW,CAAC;QACrD,CAAC;QACD,IACE,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ;YACrC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,YAAY,CAAC;YACnC,IAAI,CAAC,YAAY,GAAG,CAAC,EACrB,CAAC;YACD,OAAO,CAAC,kBAAkB,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QAC1D,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,aAAa,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,aAAa,KAAK,SAAS,EAAE,CAAC;YAChC,sBAAsB,CAAC,aAAa,CAAC,CAAC;YACtC,sBAAsB,CAAC,aAAa,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;QAC/B,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,aAAa,GAAG,uBAAuB,CAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YAChF,MAAM,IAAI,KAAK,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC,CAAC;QAC/D,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;QAC1C,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,IAAI,CAAI,QAAgB,EAAE,IAAc;QAC5C,OAAO,IAAI,CAAC,OAAO,CAAI,QAAQ,EAAE;YAC/B,MAAM,EAAE,MAAM;YACd,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,GAAG,CAAI,QAAgB,EAAE,IAAc;QAC3C,OAAO,IAAI,CAAC,OAAO,CAAI,QAAQ,EAAE;YAC/B,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;SAC9C,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAI,QAAgB;QAC9B,OAAO,IAAI,CAAC,OAAO,CAAI,QAAQ,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzD,CAAC;CACF;AAED,+EAA+E;AAC/E,MAAM,UAAU,wBAAwB,CAAC,MAA0B;IACjE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3D,OAAO,MAAM,CAAC,IAAI,EAAE,CAAC;IACvB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAS,0BAA0B,CACjC,OAA+B,EAC/B,MAAc;IAEd,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CACjD,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,iBAAiB,CACjD,CAAC;IACF,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACvB,OAAO,CAAC,iBAAiB,CAAC,GAAG,6BAA6B,CAAC,MAAM,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAC7B,OAAgB,EAChB,WAAoB,EACpB,UAAmB,EACnB,YAAqB,EACrB,MAAe,EACJ,EAAE;IACb,sCAAsC;IACtC,MAAM,GAAG,GAAG,OAAO,IAAI,uBAAuB,CAAC;IAE/C,OAAO,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;AAC3E,CAAC,CAAC"}

package/dist/auditEventCodes.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Cross-package mirror of backend `domain/audit/auditEventCatalog.ts` AUDIT_EVENT_CODES.
+ * Append-only — never reorder. CI drift test keeps this in sync with domain.
+ */
+export declare const AUDIT_EVENT_CODES: readonly ["auth.admin.login.success", "auth.admin.login.failed", "auth.admin.logout", "auth.admin.access.denied", "auth.admin.password_reset.requested", "auth.admin.password_reset.completed", "auth.admin.password_reset.failed", "auth.admin.mfa.enroll.success", "auth.admin.mfa.enroll.failed", "auth.admin.mfa.disable.success", "auth.admin.mfa.disable.failed", "auth.admin.mfa.challenge.success", "auth.admin.mfa.challenge.failed", "auth.admin.step_up.success", "auth.admin.step_up.failed", "auth.admin.break_glass.success", "auth.admin.break_glass.failed", "auth.admin.oidc.login.success", "auth.admin.oidc.login.failed", "auth.admin.oidc.invite.activated", "auth.admin.oidc.link.created", "auth.admin.oidc.link.removed", "auth.admin.oidc.link.remove_denied", "auth.admin.oidc.session.exchanged", "auth.admin.password.set", "customer.oidc.login", "customer.oidc.email_merged", "customer.oidc.link.remove_denied", "admin.invite.created", "admin.invite.resent", "admin.invite.activated", "admin.account.username_changed", "admin.account.password_changed", "admin.credentials.provider_secret.set", "admin.credentials.provider_secret.rotated", "admin.credentials.provider_secret.deleted", "admin.credentials.bank_secret.set", "admin.credentials.bank_secret.rotated", "admin.settings.updated", "admin.user.created", "admin.user.deactivated", "admin.user.reactivated", "admin.user.permanently_deleted", "admin.capability.granted", "admin.capability.revoked", "admin.capability.template_applied", "admin.exception_grant.requested", "admin.exception_grant.approved", "admin.exception_grant.rejected", "admin.exception_grant.executed", "admin.product.created", "admin.product.deactivated", "admin.product.reactivated", "admin.product.permanently_deleted", "admin.product.price_updated", "admin.product.stock_adjusted", "admin.category.deactivated", "admin.category.reactivated", "admin.category.permanently_deleted", "admin.category.icon_uploaded", "admin.category.icon_replaced", "admin.category.icon_deleted", "admin.variant.archived", "admin.variant.restored", "admin.variant.permanently_deleted", "admin.pickupPoint.deactivated", "admin.pickupPoint.reactivated", "admin.pickupPoint.permanently_deleted", "admin.donationProject.deactivated", "admin.donationProject.reactivated", "admin.donationProject.archived", "admin.customerMembership.suspended", "admin.retention.policy_updated", "admin.salesPoint.deactivated", "admin.salesPoint.reactivated", "admin.salesPoint.permanently_deleted", "admin.tenant.deactivated", "admin.tenant.permanently_deleted", "admin.tenant.reactivated", "admin.tenant.legal_closure_completed", "admin.tenant.physical_purge_started", "admin.tenant.physical_purge_completed", "admin.tenant.physical_purge_failed", "admin.tenant.physical_purge_blocked", "admin.tenant.physical_purge_scheduled", "admin.tenant.physical_purge_cancelled", "admin.tenant.contract_reopened", "admin.tenant.access_cut", "admin.tenant.logo_uploaded", "admin.tenant.logo_replaced", "admin.tenant.logo_deleted", "admin.salesPoint.image_uploaded", "admin.salesPoint.image_replaced", "admin.salesPoint.image_deleted", "admin.donation_template.created", "admin.donation_template.updated", "admin.donation_template.default_set", "admin.salesPoint.donation_projects.updated", "admin.salesPoint.donation_amounts.updated", "admin.product.media_saved", "admin.product.media_deleted", "admin.product.primary_image_changed", "admin.loyalty.physical_card_issued", "admin.loyalty.physical_card_revoked", "admin.promo.event.created", "admin.promo.event.paused", "admin.promo.reward.issued", "admin.promo.reward.revoked", "admin.promo.enrollment.revoked", "commerce.promo.reward.activated", "commerce.promo.reward.redeemed", "commerce.promo.reward.rolled_back", "commerce.promo.progress.updated", "commerce.promo.enrollment.created", "admin.product.barcode_assigned", "admin.product.barcode_cleared", "admin.product.barcode_alt_added", "admin.product.barcode_alt_removed", "admin.product.barcode_alt_promoted", "pickup.device.paired", "pickup.device.pairing.failed", "pickup.fulfillment.claim.acquired", "pickup.fulfillment.claim.released", "admin.inventory.incident.reported", "pickup.inventory.checkup_applied", "pickup.inventory.incident.opened", "inventory.incident.anomaly.signalled", "dev.tenant.created", "dev.tenant.updated", "dev.tenant.provider.updated", "dev.tenant.entitlement_policy.changed", "payment.transaction.state_changed", "payment.admin_manual_complete", "webhook_skipped_tenant_inactive", "payment.customer.refund.requested", "customer_pickup_ack_informational", "customer.receipt.downloaded", "reconciliation.transaction.refund_candidate.marked", "reconciliation.transaction.refund_candidate.unmarked", "reconciliation.bank_inbound.matched", "reconciliation.bank_inbound.attribute", "reconciliation.payment_claim.submitted", "reconciliation.payment_claim.approved", "reconciliation.payment_claim.rejected", "reconciliation.recurring_payment.missed", "reconciliation.recurring_payment.received", "reconciliation.bank_account.mode_changed", "payment.provider_wiring.verified", "payment.provider_wiring.verify_failed", "payment.provider_wiring.invalidated", "payment.cash_provider.risk_ack", "payment.cash_checkout.self_confirm", "payment.cash_shift.opened", "payment.cash_shift.closed", "payment.cash_drawer.open_signal", "export.analytics.explore.exported", "export.analytics.dev.views", "export.analytics.mission_control.exported", "analytics.mission_control.cross_tenant.read", "export.analytics.rollups.materialized", "export.transactions.exported", "export.fulfillment.exported", "export.compliance.audit_events.exported", "export.consent.grantees", "gdpr.erasure.completed", "gdpr.erasure.side_effects_pending", "platform.category.created", "platform.category.updated", "platform.category.deactivated"];
+export type AuditEventCode = (typeof AUDIT_EVENT_CODES)[number];
+export declare function isAuditEventCode(code: string): code is AuditEventCode;
+//# sourceMappingURL=auditEventCodes.d.ts.map

package/dist/auditEventCodes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auditEventCodes.d.ts","sourceRoot":"","sources":["../src/auditEventCodes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,iBAAiB,irLA0KpB,CAAC;AAEX,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAIhE,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,IAAI,cAAc,CAErE"}