Connect to the
SmartBamboo POS API

mutation Login {
  login(
    serverUrl: "https://dev.odoo-smartbamboo.mx"  # test env
    database:  "smart-bamboo-dev"                # test env
    username:  "partner@example.com"
    password:  "••••••••"
  ) {
    token           # put this in the Authorization header
    user {
      id
      name
      email
      company { id name }
    }
  }
}

mutation Refresh {
  refreshToken { token }
}

curl -X POST "$ENDPOINT" \
  -H "Authorization: $JWT" \
  -H "Content-Type: application/json" \
  -d '{
    "query": "query Products($pl: ID!) { getProducts(pricelistId: $pl) { product { id name basePrice } pricedVariants { variantId price } } }",
    "variables": { "pl": "<your pricelistId>" }
  }'

{
  "data": {
    "getProducts": [
      {
        "product": { "id": "5659", "name": "Almohada Memory", "basePrice": 499.00 },
        "pricedVariants": [ { "variantId": "7210", "price": 449.00 } ]
      }
    ]
  }
}

type ProductForSale {        # what getProducts returns
  product: Product!
  pricedVariants: [PricedVariant!]!  # price per variant on the requested pricelist
}

type Product {
  id: ID!
  name: String!
  imageUrl: String
  basePrice: Float!
  productType: String
  category: ProductCategory!
  posCategory: ProductCategory
  attributeOptions: [ProductAttribute!]!
  variants: [ProductVariant!]!
}

type ProductVariant {
  id: ID!                  # the sellable unit — use this id everywhere
  basePrice: Float!
  imageUrl: String
  selectedAttributes: [SelectedAttribute!]!
}

type PricedVariant { variantId: ID!, price: Float! }
type Pricelist { id: ID!, name: String! }
type PricelistVersion { pricelistId: ID!, lastModified: String }

type User {                  # what searchPartners returns
  id: ID!
  name: String!
  username: String!
  email: String!
  company: CompanyInfo!     # { id, name }
}

type Partner {               # returned by createPartner / updatePartner
  id: ID!
  name: String!
  email: String
  phone: String
  mobile: String
  vat: String              # tax id (RFC)
  street: String
  city: String
  zip: String
}

type Order {                 # what searchOrders returns
  id: ID!                   # internal id, format order-<uuid>
  odooOrderId: Int          # Odoo id — pass THIS to getOrderById (null until synced)
  name: String!
  posReference: String      # receipt reference (not "reference")
  customerId: ID
  customerName: String
  dateOrder: String!
  state: OrderState!        # enum
  amountTotal: Float!
  amountTax: Float!
  amountPaid: Float!
  lines: [OrderLine!]!
  payments: [OrderPayment!]!
}

type OrderLine {
  id: ID!
  productId: ID!
  productName: String!
  variantId: ID
  quantity: Float!
  unitPrice: Float!
  discount: Float
  taxAmount: Float!
  priceSubtotal: Float!    # before tax
  priceTotal: Float!       # tax-inclusive
}

type PosOrderDetail {       # what getOrderById returns
  id: ID!
  name: String!
  posReference: String
  receiptNumber: String
  customerId: ID
  customerName: String
  dateOrder: String
  datePaid: String
  state: String
  amountSubtotal: Float
  amountTax: Float
  amountTotal: Float
  amountPaid: Float
  lines: [PosOrderLine!]   # id, productId, productName, quantity,
  payments: [PosOrderPayment!] # unitPrice, discount, priceSubtotal, priceTotal
}

{
  "errors": [
    { "message": "Not Authorized to access getProducts" }
  ]
}

  YOUR SYSTEM              SBCoreX                        ODOO ERP

  createCart          ──▶  cart (prices resolved here)
  addItemToCart   ×N  ──▶  cart recalculated  ◀── read `total` back
  setCartCustomer     ──▶  cart

  createOrderFromCart ──▶  ORDER · DRAFT
  addPaymentToOrder ×N ─▶  payments attached
                             │
  confirmOrder        ──▶  ─┤ gate 1: amountPaid must cover amountTotal
                             ▼
                           ORDER · PAID
  setOrderEmployee    ──▶  cashier stamped
                             │
  syncOrderToOdoo     ──▶  ─┤ gate 2: cashier must be stamped
                             ▼
                                                        pos.order created
                                                        stock + accounting move
                           ◀── odooOrderId, barcode

#!/usr/bin/env bash
# Create one POS order end to end. Requires: curl, jq.
set -euo pipefail

ENDPOINT="https://<your-id>.appsync-api.us-east-2.amazonaws.com/graphql"
API_KEY="da2-xxxxxxxxxxxxxxxxxxxxxxxxxx"
ODOO_URL="https://dev.odoo-smartbamboo.mx"
ODOO_DB="smart-bamboo-dev"
USERNAME="partner@example.com"
PASSWORD="********"

POS_ID="366"            # pointOfSaleId
PRICELIST_ID="12"       # getPricelists
SESSION_ID="1187"       # open pos.session
VARIANT_ID="7210"       # ProductVariant.id from getProducts
QTY=1
PAYMENT_METHOD_ID="7"   # getPaymentMethods(posId)
EMPLOYEE_ID="3885"      # hr.employee id of the cashier
CUSTOMER_ID="88213"     # searchPartners; use null for an anonymous sale

# post <auth-header> <query> <variables-json>  → aborts on any GraphQL error
post() {
  curl -sS "$ENDPOINT" -H "$1" -H 'Content-Type: application/json' \
    --data "$(jq -nc --arg q "$2" --argjson v "$3" '{query:$q,variables:$v}')" \
  | jq -e 'if .errors then (.errors[0].message | halt_error(1)) else . end'
}

# 0 · authenticate ───────────────────────────────────────────────
JWT=$(post "x-api-key: $API_KEY" \
  'mutation($s:String!,$d:String!,$u:String!,$p:String!){
     login(serverUrl:$s,database:$d,username:$u,password:$p){ token } }' \
  "$(jq -nc --arg s "$ODOO_URL" --arg d "$ODOO_DB" \
            --arg u "$USERNAME" --arg p "$PASSWORD" '$ARGS.named')" \
  | jq -r '.data.login.token')
AUTH="Authorization: $JWT"
echo "authenticated"

# 1 · open a cart ────────────────────────────────────────────────
CART=$(post "$AUTH" \
  'mutation($pos:ID!,$pl:ID!){ createCart(pointOfSaleId:$pos,pricelistId:$pl){ id } }' \
  "$(jq -nc --arg pos "$POS_ID" --arg pl "$PRICELIST_ID" '$ARGS.named')" \
  | jq -r '.data.createCart.id')
echo "cart      $CART"

# 2 · add a line — the response is the authoritative price ───────
TOTAL=$(post "$AUTH" \
  'mutation($c:ID!,$v:ID!,$q:Int!){
     addItemToCart(cartId:$c,variantId:$v,quantity:$q){ total taxAmount } }' \
  "$(jq -nc --arg c "$CART" --arg v "$VARIANT_ID" --argjson q "$QTY" '$ARGS.named')" \
  | jq -r '.data.addItemToCart.total')
echo "total     $TOTAL"

# 3 · attach the customer (skip for an anonymous sale) ───────────
post "$AUTH" \
  'mutation($c:ID!,$p:ID){ setCartCustomer(cartId:$c,customerId:$p){ id customerName } }' \
  "$(jq -nc --arg c "$CART" --arg p "$CUSTOMER_ID" '$ARGS.named')" > /dev/null

# 4 · freeze the cart into a DRAFT order ─────────────────────────
ORDER=$(post "$AUTH" \
  'mutation($c:ID!,$s:ID){
     createOrderFromCart(cartId:$c,posSessionId:$s){ id state amountTotal } }' \
  "$(jq -nc --arg c "$CART" --arg s "$SESSION_ID" '$ARGS.named')" \
  | jq -r '.data.createOrderFromCart.id')
echo "order     $ORDER"

# 5 · pay it in full (repeat for a split tender) ─────────────────
post "$AUTH" \
  'mutation($o:ID!,$m:ID!,$a:Float!){
     addPaymentToOrder(orderId:$o,paymentMethodId:$m,amount:$a){ amountPaid amountTotal } }' \
  "$(jq -nc --arg o "$ORDER" --arg m "$PAYMENT_METHOD_ID" --argjson a "$TOTAL" '$ARGS.named')" \
  | jq -r '"paid      \(.data.addPaymentToOrder.amountPaid) of \(.data.addPaymentToOrder.amountTotal)"'

# 6 · confirm — DRAFT → PAID ─────────────────────────────────────
post "$AUTH" 'mutation($o:ID!){ confirmOrder(orderId:$o){ state } }' \
  "$(jq -nc --arg o "$ORDER" '$ARGS.named')" \
  | jq -r '"state     \(.data.confirmOrder.state)"'

# 7 · stamp the cashier — required before sync ───────────────────
post "$AUTH" \
  'mutation($o:ID!,$e:ID!){ setOrderEmployee(orderId:$o,employeeId:$e){ employeeId } }' \
  "$(jq -nc --arg o "$ORDER" --arg e "$EMPLOYEE_ID" '$ARGS.named')" > /dev/null

# 8 · push to the ERP ────────────────────────────────────────────
post "$AUTH" \
  'mutation($o:ID!,$s:Int){
     syncOrderToOdoo(orderId:$o,posSessionId:$s){ odooOrderId barcode } }' \
  "$(jq -nc --arg o "$ORDER" --argjson s "$SESSION_ID" '$ARGS.named')" \
  | jq -r '"odooOrder \(.data.syncOrderToOdoo.odooOrderId)  barcode \(.data.syncOrderToOdoo.barcode)"'

curl -X POST "$ENDPOINT" -H "Authorization: $JWT" \
  -H "Content-Type: application/json" -d '{
  "query": "mutation($pos: ID!, $pl: ID!) { createCart(pointOfSaleId: $pos, pricelistId: $pl) { id total } }",
  "variables": { "pos": "366", "pl": "12" }
}'

# → { "data": { "createCart": { "id": "cart-6f2a…", "total": 0 } } }

-d '{
  "query": "mutation($c: ID!, $v: ID!, $q: Int!) { addItemToCart(cartId: $c, variantId: $v, quantity: $q) { id subtotal taxAmount discountAmount total items { id productName quantity unitPrice } } }",
  "variables": { "c": "cart-6f2a…", "v": "7210", "q": 1 }
}'

# The response is the authoritative price. Read `total` — do not compute it.
# → "total": 449.00, "taxAmount": 61.93

-d '{
  "query": "mutation($c: ID!, $p: ID) { setCartCustomer(cartId: $c, customerId: $p) { id customerId customerName total } }",
  "variables": { "c": "cart-6f2a…", "p": "88213" }
}'

-d '{
  "query": "mutation($c: ID!, $s: ID) { createOrderFromCart(cartId: $c, posSessionId: $s) { id name state amountTotal amountTax amountPaid } }",
  "variables": { "c": "cart-6f2a…", "s": "1187" }
}'

# → "id": "order-9b41…", "state": "DRAFT", "amountTotal": 449.00, "amountPaid": 0

-d '{
  "query": "mutation($o: ID!, $m: ID!, $a: Float!) { addPaymentToOrder(orderId: $o, paymentMethodId: $m, amount: $a) { id state amountPaid amountTotal payments { id paymentMethodName amount state } } }",
  "variables": { "o": "order-9b41…", "m": "7", "a": 449.00 }
}'

# Repeat with a different paymentMethodId to split the tender.
# → "amountPaid": 449.00 — must reach amountTotal before step 6.

-d '{
  "query": "mutation($o: ID!) { confirmOrder(orderId: $o) { id state datePaid amountPaid } }",
  "variables": { "o": "order-9b41…" }
}'

# → "state": "PAID"

-d '{
  "query": "mutation($o: ID!, $e: ID!) { setOrderEmployee(orderId: $o, employeeId: $e) { id employeeId } }",
  "variables": { "o": "order-9b41…", "e": "3885" }
}'

-d '{
  "query": "mutation($o: ID!, $s: Int) { syncOrderToOdoo(orderId: $o, posSessionId: $s) { orderId odooOrderId barcode } }",
  "variables": { "o": "order-9b41…", "s": 1187 }
}'

# → { "orderId": "order-9b41…", "odooOrderId": 275190, "barcode": "…" }
#   odooOrderId is what getOrderById expects. Persist it.

-d '{
  "query": "query($id: ID!) { getOrderById(orderId: $id) { name posReference state amountTotal amountPaid datePaid lines { productName quantity priceTotal } } }",
  "variables": { "id": "275190" }
}'

# Pass the ERP id (275190), not order-<uuid>. Before step 8 this returns null.