@01.software/cli 0.17.1 → 0.17.4

package/dist/index.js

@@ -1104,6 +1104,17 @@ function registerCrudCommands(program2, getClient2, getFormat2) {
 
 // ../../internal/contracts/src/tenant/index.ts
 import { z } from "zod";
+
+// ../../internal/contracts/src/tenant/features.ts
+var TENANT_CUSTOM_FIELD_TYPES = [
+  "text",
+  "number",
+  "select",
+  "boolean",
+  "date"
+];
+
+// ../../internal/contracts/src/tenant/index.ts
 var tenantFieldConfigStateSchema = z.object({
   hiddenFields: z.array(z.string()),
   isHidden: z.boolean()
@@ -1218,6 +1229,29 @@ var collectionFieldOptionSchema = z.object({
   label: z.string(),
   value: z.string()
 }).strict();
+var collectionCustomFieldRequiredSchema = z.literal(true).optional();
+var collectionCustomFieldDefinitionSchema = z.discriminatedUnion(
+  "type",
+  [
+    z.object({
+      key: z.string().min(1),
+      type: z.enum(
+        TENANT_CUSTOM_FIELD_TYPES.filter((type) => type !== "select")
+      ),
+      required: collectionCustomFieldRequiredSchema
+    }).strict(),
+    z.object({
+      key: z.string().min(1),
+      type: z.literal("select"),
+      required: collectionCustomFieldRequiredSchema,
+      options: z.array(z.string().min(1)).min(1)
+    }).strict()
+  ]
+);
+var collectionCustomFieldsSchema = z.object({
+  storagePath: z.literal("customData"),
+  definitions: z.array(collectionCustomFieldDefinitionSchema)
+}).strict();
 var collectionFieldSchema = z.lazy(
   () => z.object({
     name: z.string(),
@@ -1247,7 +1281,8 @@ var collectionSchemaResponseSchema = z.object({
       collectionHidden: z.boolean(),
       hiddenFields: z.array(z.string())
     }).strict(),
-    fields: z.array(collectionFieldSchema)
+    fields: z.array(collectionFieldSchema),
+    customFields: collectionCustomFieldsSchema.optional()
   }).strict()
 }).strict();
 
@@ -1855,9 +1890,74 @@ var createTossPaymentSessionBodySchema = z5.object({
   provider: z5.literal("toss"),
   providerOptions: z5.object({ profile: z5.literal("widget_v2") }).strict()
 }).strict();
-var createPaymentSessionParamsSchema = createTossPaymentSessionBodySchema.extend({
-  idempotencyKey: commerceIdempotencyKeySchema
-});
+var PORTONE_HOSTED_PAYMENT_METHODS = [
+  "CARD_KR",
+  "N_PAY",
+  "KAKAO_PAY",
+  "TOSS_PAY",
+  "CARD_INTERNATIONAL",
+  "PAY_PAL",
+  "UNION_PAY",
+  "ALIPAY_CN",
+  "ALIPAY_HK",
+  "TRUE_MONEY",
+  "DANA",
+  "TOUCH_N_GO",
+  "G_CASH",
+  "WE_CHAT_PAY",
+  "KLARNA",
+  "E_CONTEXT",
+  "GRAB_PAY_MY",
+  "GRAB_PAY_SG",
+  "SHOPEE_PAY_TH",
+  "PAY_PAY",
+  "BPI",
+  "RABBIT_LINE_PAY",
+  "CONVENIENCE_STORE_JP",
+  "AMAZON_PAY",
+  "RAKUTEN_PAY",
+  "D_BARAI",
+  "AU_PAY",
+  "MERPAY"
+];
+var portOneHostedPaymentMethodSchema = z5.enum(
+  PORTONE_HOSTED_PAYMENT_METHODS
+);
+var PORTONE_STANDARD_PAYMENT_METHODS = ["CARD"];
+var portOneStandardPaymentMethodSchema = z5.enum(
+  PORTONE_STANDARD_PAYMENT_METHODS
+);
+var PORTONE_STANDARD_CURRENCY = "CURRENCY_KRW";
+var portOneStandardProviderOptionsSchema = z5.object({
+  profile: z5.literal("standard_v2"),
+  paymentMethod: portOneStandardPaymentMethodSchema
+}).strict();
+var createPortOnePaymentSessionBodySchema = z5.object({
+  ...createPaymentSessionBaseBodyShape,
+  provider: z5.literal("portone"),
+  providerOptions: z5.discriminatedUnion("profile", [
+    z5.object({
+      profile: z5.literal("hosted_v2"),
+      paymentMethod: portOneHostedPaymentMethodSchema
+    }).strict(),
+    portOneStandardProviderOptionsSchema
+  ])
+}).strict();
+var createPaymentSessionBodySchema = z5.discriminatedUnion("provider", [
+  createTossPaymentSessionBodySchema,
+  createPortOnePaymentSessionBodySchema
+]);
+var createPaymentSessionParamsSchema = z5.discriminatedUnion(
+  "provider",
+  [
+    createTossPaymentSessionBodySchema.extend({
+      idempotencyKey: commerceIdempotencyKeySchema
+    }),
+    createPortOnePaymentSessionBodySchema.extend({
+      idempotencyKey: commerceIdempotencyKeySchema
+    })
+  ]
+);
 var retrieveBrowserPaymentSessionParamsSchema = z5.object({
   paymentSessionId: commerceResourceIdSchema,
   checkoutToken: commerceCapabilitySchema
@@ -1891,6 +1991,20 @@ var confirmTossPaymentSessionBodySchema = z5.object({
 var confirmTossPaymentSessionParamsSchema = confirmTossPaymentSessionBodySchema.extend({
   idempotencyKey: commerceIdempotencyKeySchema
 });
+var PAYMENT_PROVIDER_STATUSES = [
+  "requires_payment_method",
+  "requires_action",
+  "requires_confirmation",
+  "initializing",
+  "processing",
+  "authorized",
+  "canceling",
+  "unknown",
+  "captured",
+  "failed",
+  "canceled"
+];
+var paymentProviderStatusSchema = z5.enum(PAYMENT_PROVIDER_STATUSES);
 var customPaymentProviderSchema = z5.string().trim().min(1).max(64).regex(/^[a-z0-9][a-z0-9_-]{0,63}$/i, "provider must be a slug");
 var customPaymentIdentitySchema = z5.string().trim().min(1);
 var customPaymentCurrencyInputSchema = z5.string().trim().min(1).regex(/^[A-Za-z]{3}$/, "currency must be a three-letter ISO 4217 code").transform((currency) => currency.toUpperCase());
@@ -1907,6 +2021,29 @@ var customPaymentSessionSchema = z5.object({
   providerSessionId: customPaymentIdentitySchema,
   money: moneySchema
 }).strict();
+var customPaymentSessionLookupSchema = z5.union([
+  z5.object({
+    providerSessionId: customPaymentIdentitySchema
+  }).strict(),
+  z5.object({
+    providerPaymentId: customPaymentIdentitySchema
+  }).strict()
+]);
+var retrieveCustomPaymentSessionBodySchema = z5.object({
+  provider: customPaymentProviderSchema,
+  by: customPaymentSessionLookupSchema
+}).strict();
+var retrievedCustomPaymentSessionSchema = z5.object({
+  id: commerceResourceIdSchema,
+  provider: customPaymentProviderSchema,
+  providerSessionId: customPaymentIdentitySchema,
+  providerPaymentId: customPaymentIdentitySchema.nullable(),
+  status: z5.enum(["pending", "captured", "failed", "canceled"]),
+  providerStatus: paymentProviderStatusSchema,
+  finalizationStatus: z5.enum(["not_ready", "pending", "committed"]),
+  money: moneySchema,
+  orderId: commerceResourceIdSchema.nullable()
+}).strict();
 var confirmCustomPaymentSessionBodySchema = z5.object({
   provider: customPaymentProviderSchema,
   providerSessionId: customPaymentIdentitySchema,
@@ -1922,7 +2059,7 @@ var confirmCustomPaymentSessionResponseSchema = z5.object({
   status: z5.literal("paid"),
   alreadyConfirmed: z5.boolean().optional()
 }).strict();
-var paymentNextActionSchema = z5.object({
+var tossPaymentNextActionSchema = z5.object({
   type: z5.literal("toss_widget"),
   clientKey: z5.string().min(1).max(255),
   paymentMethodVariantKey: z5.string().min(1).max(255),
@@ -1933,6 +2070,34 @@ var paymentNextActionSchema = z5.object({
   customerName: z5.string().min(1).max(200).optional(),
   customerEmail: z5.string().email().max(254).optional()
 }).strict();
+var portOnePaymentNextActionSchema = z5.object({
+  type: z5.literal("portone_checkout"),
+  checkoutUrl: z5.string().url().startsWith("https://").max(2048).refine((value) => {
+    const url = new URL(value);
+    return url.username === "" && url.password === "";
+  }, "checkoutUrl must not contain embedded credentials")
+}).strict();
+var portOneSdkPaymentNextActionSchema = z5.object({
+  type: z5.literal("portone_sdk"),
+  version: z5.literal("v2"),
+  storeId: z5.string().min(1).max(255),
+  channelKey: z5.string().min(1).max(255),
+  paymentId: z5.string().regex(/^[A-Za-z0-9]{6,40}$/),
+  orderName: z5.string().min(1).max(200),
+  totalAmount: z5.number().int().positive().max(Number.MAX_SAFE_INTEGER),
+  currency: z5.literal(PORTONE_STANDARD_CURRENCY),
+  payMethod: portOneStandardPaymentMethodSchema,
+  redirectUrl: z5.string().url().max(2048).refine((value) => {
+    const url = new URL(value);
+    const loopback = url.protocol === "http:" && (url.hostname === "localhost" || url.hostname === "127.0.0.1");
+    return (url.protocol === "https:" || loopback) && !url.username && !url.password;
+  }, "redirectUrl must be HTTPS (or development loopback) without embedded credentials")
+}).strict();
+var paymentNextActionSchema = z5.discriminatedUnion("type", [
+  tossPaymentNextActionSchema,
+  portOnePaymentNextActionSchema,
+  portOneSdkPaymentNextActionSchema
+]);
 var PAYMENT_SESSION_ROLES = [
   "active",
   "canonical_candidate",
@@ -1941,20 +2106,6 @@ var PAYMENT_SESSION_ROLES = [
   "historical"
 ];
 var paymentSessionRoleSchema = z5.enum(PAYMENT_SESSION_ROLES);
-var PAYMENT_PROVIDER_STATUSES = [
-  "requires_payment_method",
-  "requires_action",
-  "requires_confirmation",
-  "initializing",
-  "processing",
-  "authorized",
-  "canceling",
-  "unknown",
-  "captured",
-  "failed",
-  "canceled"
-];
-var paymentProviderStatusSchema = z5.enum(PAYMENT_PROVIDER_STATUSES);
 var PAYMENT_RECONCILIATION_REASONS = [
   "provider_outcome_unknown",
   "local_commit_ambiguous",
@@ -2144,17 +2295,24 @@ function stateSchemas(nextAction) {
     })
   ];
 }
-function providerSessionSchemas(action) {
+function providerSessionSchemas(provider, action) {
   return stateSchemas(action).map(
     (state) => z5.object({
       ...paymentSessionBaseShape,
-      provider: z5.literal("toss"),
+      provider: z5.literal(provider),
       ...state.shape
     }).strict()
   );
 }
 var publicPaymentSessionVariants = [
-  ...providerSessionSchemas(paymentNextActionSchema)
+  ...providerSessionSchemas("toss", tossPaymentNextActionSchema),
+  ...providerSessionSchemas(
+    "portone",
+    z5.union([
+      portOnePaymentNextActionSchema,
+      portOneSdkPaymentNextActionSchema
+    ])
+  )
 ];
 var publicPaymentSessionSchema = z5.union(publicPaymentSessionVariants);
 var CreatePaymentSessionParamsSchema = createPaymentSessionParamsSchema;
@@ -2209,9 +2367,10 @@ var checkoutAmountsSchema = z6.object({
     });
   }
 });
+var CHECKOUT_PAYMENT_SESSION_PROVIDERS = ["toss", "portone"];
 var checkoutPaymentSessionRefSchema = z6.object({
   id: z6.string().min(1),
-  provider: z6.literal("toss"),
+  provider: z6.enum(CHECKOUT_PAYMENT_SESSION_PROVIDERS),
   providerStatus: paymentProviderStatusSchema
 }).strict();
 var openCheckoutPaymentStateSchema = z6.object({
@@ -3119,6 +3278,10 @@ function registerStockCommands(program2, getClient2, getFormat2) {
 }
 
 // src/commands/transaction.ts
+function paymentProvider(value) {
+  if (value === "toss" || value === "portone") return value;
+  throw new Error("payment provider must be toss or portone");
+}
 function registerCommerceSessionCommands(program2, getClient2, getFormat2) {
   const checkout = program2.command("checkout").description("Checkout management");
   checkout.command("create").description("Create a Checkout from a server-authoritative Cart").option("--data-stdin", "Read capability and customer JSON from stdin").option("--data-file <path>", "Read capability and customer JSON from file").option("--dry-run", "Validate inputs without executing").action(async (opts) => {
@@ -3180,20 +3343,23 @@ function registerCommerceSessionCommands(program2, getClient2, getFormat2) {
         );
         return;
       }
-      printResult(
-        await getClient2().commerce.paymentSessions.create(data),
-        getFormat2()
-      );
+      const paymentSessions = getClient2().commerce.paymentSessions;
+      const result = data.provider === "portone" ? await paymentSessions.createPortOne(data) : await paymentSessions.create(data);
+      printResult(result, getFormat2());
     } catch (error) {
       exitWithError(error);
     }
   });
-  sessions.command("retrieve <paymentSessionId>").description("Retrieve a PaymentSession").action(async (paymentSessionId) => {
+  sessions.command("retrieve <paymentSessionId>").description("Retrieve a PaymentSession").option(
+    "--provider <provider>",
+    "Payment provider (toss or portone)",
+    "toss"
+  ).action(async (paymentSessionId, opts) => {
     try {
+      const provider = paymentProvider(opts.provider);
+      const paymentSessions = getClient2().commerce.paymentSessions;
       printResult(
-        await getClient2().commerce.paymentSessions.retrieve({
-          paymentSessionId
-        }),
+        provider === "portone" ? await paymentSessions.retrievePortOne({ paymentSessionId }) : await paymentSessions.retrieve({ paymentSessionId }),
         getFormat2()
       );
     } catch (error) {
@@ -3203,6 +3369,10 @@ function registerCommerceSessionCommands(program2, getClient2, getFormat2) {
   sessions.command("cancel").description("Cancel a PaymentSession and release its payment slot").option("--data-stdin", "Read session ID and idempotency key from stdin").option(
     "--data-file <path>",
     "Read session ID and idempotency key from file"
+  ).option(
+    "--provider <provider>",
+    "Payment provider (toss or portone)",
+    "toss"
   ).option("--dry-run", "Validate inputs without executing").action(async (opts) => {
     try {
       const data = parseWithSchema(
@@ -3210,6 +3380,7 @@ function registerCommerceSessionCommands(program2, getClient2, getFormat2) {
         "payment-session cancel",
         CancelServerPaymentSessionParamsSchema
       );
+      const provider = paymentProvider(opts.provider);
       if (opts.dryRun) {
         printResult(
           sensitiveDryRunResult("payment-session cancel"),
@@ -3217,8 +3388,9 @@ function registerCommerceSessionCommands(program2, getClient2, getFormat2) {
         );
         return;
       }
+      const paymentSessions = getClient2().commerce.paymentSessions;
       printResult(
-        await getClient2().commerce.paymentSessions.cancel(data),
+        provider === "portone" ? await paymentSessions.cancelPortOne(data) : await paymentSessions.cancel(data),
         getFormat2()
       );
     } catch (error) {
@@ -3384,7 +3556,7 @@ import { randomBytes as randomBytes2 } from "crypto";
 import { createServer } from "http";
 import { execFile, exec } from "child_process";
 import { platform } from "os";
-import { URL } from "url";
+import { URL as URL2 } from "url";
 import pc2 from "picocolors";
 var WEB_URL = process.env.SOFTWARE_WEB_URL || "https://01.software";
 var TIMEOUT_MS = 3 * 60 * 1e3;
@@ -3477,7 +3649,7 @@ function startAuthServer(options) {
         res.writeHead(400).end();
         return;
       }
-      const url = new URL(req.url, `http://localhost`);
+      const url = new URL2(req.url, `http://localhost`);
       if (url.pathname !== "/callback" || req.method !== "GET") {
         res.writeHead(404).end();
         return;