@adonis-agora/payments 0.2.0 → 0.3.0

package/dist/src/billing/webhook_processor.js

@@ -1,5 +1,20 @@
 import { publishPayments } from '../diagnostics.js';
-import { isPaymentWebhookData, isSubscriptionWebhookData } from './webhook_events.js';
+import { isDisputeWebhookData, isPaymentWebhookData, isSubscriptionWebhookData, } from './webhook_events.js';
+/**
+ * A gateway-sent instant (`actionableUntil`, `paidAt`) as a `Date`, or `null` when there is
+ * nothing usable to store.
+ *
+ * An unparseable value is dropped rather than written: `new Date('soon')` is an Invalid Date,
+ * which Postgres rejects — so a driver with one bad field would fail the whole webhook and,
+ * through the ledger, every redelivery of it. Dropping one field loses a deadline's urgency;
+ * throwing here loses the chargeback itself.
+ */
+function parseInstant(value) {
+    if (value === undefined)
+        return null;
+    const parsed = new Date(value);
+    return Number.isNaN(parsed.getTime()) ? null : parsed;
+}
 /**
  * Routes normalized webhook events to handlers, enforcing idempotency through the
  * `billing_webhook_events` ledger (keyed by gateway event id), and keeps the local
@@ -29,6 +44,10 @@ export class WebhookProcessor {
             provider: event.provider,
             type: event.type,
             payload: event.raw,
+            // The NORMALIZED event, stored beside the raw payload so the dashboard's retry can
+            // replay this delivery without calling `parseWebhook` again — which would re-verify a
+            // signature computed from headers the ledger never kept.
+            normalized: event.data,
         });
         // Already seen → idempotent replay, skip.
         if (ledger === null)
@@ -72,6 +91,14 @@ export class WebhookProcessor {
                 return this.#onPaymentFailed(event);
             case 'payment.refunded':
                 return this.#onPaymentRefunded(event);
+            case 'payment.disputed':
+                return this.#onPaymentDisputed(event);
+            case 'payment.dispute_warning':
+                return this.#onDisputeWarning(event);
+            case 'payment.dispute_closed':
+                return this.#onDisputeClosed(event);
+            case 'payment.updated':
+                return this.#onPaymentUpdated(event);
             case 'subscription.created':
             case 'subscription.updated':
                 return this.#onSubscriptionChanged(event);
@@ -85,7 +112,7 @@ export class WebhookProcessor {
         if (!isPaymentWebhookData(event.data)) {
             throw new Error(`[payments] Malformed payment.succeeded payload for event ${event.id}.`);
         }
-        const { gatewayId, amount, currency, customerId, subscriptionId } = event.data;
+        const { gatewayId, amount, currency, customerId, subscriptionId, externalReference } = event.data;
         await this.#store.savePayment({
             gatewayId,
             provider: event.provider,
@@ -94,7 +121,15 @@ export class WebhookProcessor {
             currency,
             ...(customerId !== undefined ? { customerId } : {}),
             ...(subscriptionId !== undefined ? { subscriptionId } : {}),
-            paidAt: new Date(),
+            // Spread away when absent, never passed as `null`: the store keeps what it already has
+            // for an `undefined` reference, and a later event that does not echo one must not blank
+            // the key the app routes on.
+            ...(externalReference !== undefined ? { externalReference } : {}),
+            // The GATEWAY's settlement date when it sent one, and the arrival time only as a last
+            // resort. `revenue()` windows on `paid_at`, so stamping "now" over a confirmation that
+            // is being redelivered — or replayed from the ledger a month later — files the money in
+            // the wrong month.
+            paidAt: parseInstant(event.data.paidAt) ?? new Date(),
             payload: event.raw,
         });
         publishPayments('payment.succeeded', {
@@ -111,7 +146,7 @@ export class WebhookProcessor {
         if (!isPaymentWebhookData(event.data)) {
             throw new Error(`[payments] Malformed payment.failed payload for event ${event.id}.`);
         }
-        const { gatewayId, amount, currency, customerId, subscriptionId } = event.data;
+        const { gatewayId, amount, currency, customerId, subscriptionId, externalReference } = event.data;
         await this.#store.savePayment({
             gatewayId,
             provider: event.provider,
@@ -120,6 +155,7 @@ export class WebhookProcessor {
             currency,
             ...(customerId !== undefined ? { customerId } : {}),
             ...(subscriptionId !== undefined ? { subscriptionId } : {}),
+            ...(externalReference !== undefined ? { externalReference } : {}),
             payload: event.raw,
         });
         publishPayments('payment.failed', {
@@ -127,6 +163,10 @@ export class WebhookProcessor {
             provider: event.provider,
             amount,
             currency,
+            // `reason` is on the payload type and was never published, so a subscriber could not
+            // see it even on the gateways that normalize one. It is the field that answers "why",
+            // which is the only question anyone asks of a failed payment.
+            ...(event.data.reason !== undefined ? { reason: event.data.reason } : {}),
             ...(event.data.externalReference !== undefined
                 ? { externalReference: event.data.externalReference }
                 : {}),
@@ -136,7 +176,7 @@ export class WebhookProcessor {
         if (!isPaymentWebhookData(event.data)) {
             throw new Error(`[payments] Malformed payment.refunded payload for event ${event.id}.`);
         }
-        const { gatewayId, amount, currency } = event.data;
+        const { gatewayId, amount, currency, externalReference } = event.data;
         const existing = await this.#store.findPaymentByGatewayId(gatewayId);
         if (existing) {
             await this.#store.savePayment({
@@ -145,6 +185,11 @@ export class WebhookProcessor {
                 status: 'refunded',
                 amount,
                 currency,
+                // A FULL refund, by definition — a partial one arrives as `payment.updated`, because
+                // this handler writes the whole charge off. Recorded so `amount - refundedAmount` is
+                // the net figure on every refunded row, not just the partial ones.
+                refundedAmount: amount,
+                ...(externalReference !== undefined ? { externalReference } : {}),
                 ...(existing.customerId !== undefined ? { customerId: existing.customerId } : {}),
                 ...(existing.subscriptionId !== undefined
                     ? { subscriptionId: existing.subscriptionId }
@@ -159,6 +204,281 @@ export class WebhookProcessor {
             currency,
         });
     }
+    /**
+     * "This payment changed" — the catch-all every driver falls back to, and until now the one
+     * case `#runBuiltIn` answered with `Promise.resolve()`.
+     *
+     * The cost of that no-op was not theoretical. A **partial refund** arrives as exactly this
+     * type on Asaas (`PAYMENT_PARTIALLY_REFUNDED`), deliberately: routing it to
+     * `payment.refunded` would overwrite the row's status with `refunded` and write off the
+     * whole charge. So the money came back, the ledger row went to `processed`, and nothing
+     * else happened — revenue stayed overstated by the refunded part, permanently. Same for a
+     * deleted charge, a restored one, a denied refund, and a cash receipt taken back.
+     *
+     * What it does now: keeps the row CURRENT — status, amount, refunded amount, settlement
+     * date — and nothing more. It never creates a row (an update about a charge this install
+     * never recorded is not a charge; a `payment.succeeded` or a reconcile creates those), and
+     * it moves nothing when the driver sends no `status`.
+     */
+    async #onPaymentUpdated(event) {
+        if (!isPaymentWebhookData(event.data)) {
+            throw new Error(`[payments] Malformed payment.updated payload for event ${event.id}.`);
+        }
+        const { gatewayId, amount, currency, status, refundedAmount, externalReference } = event.data;
+        const existing = await this.#store.findPaymentByGatewayId(gatewayId);
+        if (existing === null)
+            return;
+        const settledAt = parseInstant(event.data.paidAt);
+        const target = this.#updatedStatus(existing.status, status);
+        await this.#store.savePayment({
+            gatewayId,
+            provider: event.provider,
+            status: target,
+            // The charge's own amount, which an update CAN legitimately change — editing the value
+            // of a pending boleto is what `PAYMENT_UPDATED` means on Asaas. A partial refund does
+            // not change it: the refunded part travels as `refundedAmount`, so `amount` stays the
+            // charge and `amount - refundedAmount` stays the net. Never divide either.
+            amount,
+            currency,
+            ...(existing.customerId !== null ? { customerId: existing.customerId } : {}),
+            ...(existing.subscriptionId !== null ? { subscriptionId: existing.subscriptionId } : {}),
+            ...(externalReference !== undefined ? { externalReference } : {}),
+            ...(refundedAmount !== undefined ? { refundedAmount } : {}),
+            // Absent leaves the stored one alone — see `savePayment`. An update is exactly the
+            // event that carries no settlement date, and blanking `paid_at` here would drop the row
+            // out of every windowed revenue figure.
+            ...(settledAt !== null ? { paidAt: settledAt } : {}),
+            payload: event.raw,
+        });
+        publishPayments('payment.updated', {
+            gatewayId,
+            provider: event.provider,
+            status: target,
+        });
+    }
+    /**
+     * The status an update is allowed to write, given what the row already says.
+     *
+     * Two rules, both about not losing money:
+     *
+     * 1. **No status, no move.** Most drivers normalize no status onto `payment.updated` — the
+     *    event says only "something changed" — and inventing one from an event that named none
+     *    is how a paid row becomes pending.
+     * 2. **An update never moves a row OUT of `disputed`.** A chargeback is the one webhook that
+     *    takes revenue away, and the gateway's own payment resource often goes on reporting the
+     *    charge as received while the bank holds the money. Only `payment.dispute_closed`, which
+     *    carries an outcome, resolves a dispute — the same rule `payments:sync` follows, for the
+     *    same reason.
+     */
+    #updatedStatus(current, incoming) {
+        if (incoming === undefined)
+            return current;
+        if (current === 'disputed' && incoming !== 'disputed')
+            return current;
+        return incoming;
+    }
+    /**
+     * A chargeback: the customer's bank has pulled the money back.
+     *
+     * The one webhook that takes revenue AWAY, and until now the library had no name for it —
+     * `BillingStatus` carried `'disputed'` while nothing could ever set it, so a dispute
+     * arrived as an unknown type, passed through unprocessed, and the payment row went on
+     * saying `paid`. The app found out from its bank statement.
+     *
+     * Deliberately does NOT invent the resolution event. A dispute that is later won or lost
+     * is reported differently by every gateway, and a canonical type no driver emits is worse
+     * than none — those arrive as `payment.updated`.
+     */
+    async #onPaymentDisputed(event) {
+        if (!isPaymentWebhookData(event.data)) {
+            throw new Error(`[payments] Malformed payment.disputed payload for event ${event.id}.`);
+        }
+        const { gatewayId, amount, currency, externalReference } = event.data;
+        const existing = await this.#store.findPaymentByGatewayId(gatewayId);
+        if (existing) {
+            await this.#store.savePayment({
+                gatewayId,
+                provider: event.provider,
+                status: 'disputed',
+                amount,
+                currency,
+                ...(externalReference !== undefined ? { externalReference } : {}),
+                ...(existing.customerId !== undefined ? { customerId: existing.customerId } : {}),
+                ...(existing.subscriptionId !== undefined
+                    ? { subscriptionId: existing.subscriptionId }
+                    : {}),
+                payload: event.raw,
+            });
+        }
+        // The dispute row is written whether or not the payment is one we recorded: a chargeback
+        // against a charge this install never saw is exactly the one somebody has to be told
+        // about, and its deadline is the only thing that makes it actionable.
+        if (isDisputeWebhookData(event.data)) {
+            await this.#persistDispute(event, event.data, { status: 'open' });
+        }
+        publishPayments('payment.disputed', {
+            gatewayId,
+            provider: event.provider,
+            amount,
+            currency,
+        });
+    }
+    /**
+     * A pre-dispute alert: a Stripe inquiry or early fraud warning, an Adyen notification of
+     * chargeback or fraud. **The PAYMENT row is not touched** — a dispute row is written, so the
+     * deadline is somewhere, but no money has moved and a payment that says `paid` is telling
+     * the truth, and the one useful thing to do with the alert is put it in
+     * front of somebody while a refund still prevents the chargeback.
+     *
+     * That is what the diagnostics publish is for — and until this method existed, the event
+     * was declared on the bus with a payload type and published by nothing at all.
+     */
+    async #onDisputeWarning(event) {
+        if (!isDisputeWebhookData(event.data)) {
+            throw new Error(`[payments] Malformed payment.dispute_warning payload for event ${event.id}.`);
+        }
+        const { gatewayId, reason, actionableUntil } = event.data;
+        // Still NOTHING is written to the payment — no money has moved, and a row that says
+        // `paid` is telling the truth. The DISPUTE row is new, and is the point: this is the
+        // moment the clock starts, and the alert is only actionable while it has somewhere to
+        // live. `warning` is a dispute status of its own, so nothing here can be mistaken for a
+        // chargeback that took money.
+        await this.#persistDispute(event, event.data, { status: 'warning' });
+        publishPayments('payment.dispute_warning', {
+            gatewayId,
+            provider: event.provider,
+            ...(reason !== undefined ? { reason } : {}),
+            ...(actionableUntil !== undefined ? { actionableUntil } : {}),
+        });
+    }
+    /**
+     * A dispute reaching its outcome. A WON dispute returns the money, and the row has been
+     * sitting at `disputed` since the chargeback arrived — `revenue()` sums rows that are
+     * `paid`, so leaving it there writes off money that came back.
+     *
+     * Only `won` moves it. `lost` and `expired` are money that is gone, and `canceled` — the
+     * cardholder withdrawing — is deliberately NOT treated as a win: on Stripe a withdrawn
+     * dispute still has to be closed in your favour with evidence, so calling it settled would
+     * count revenue the acquirer has not returned. Understating is the safe direction here.
+     */
+    async #onDisputeClosed(event) {
+        if (!isDisputeWebhookData(event.data)) {
+            throw new Error(`[payments] Malformed payment.dispute_closed payload for event ${event.id}.`);
+        }
+        const { gatewayId, disputeId, outcome, amount, currency } = event.data;
+        // A close with no outcome is not a close. Defaulting it — to `lost`, to anything —
+        // would report a result the gateway never sent, which is the failure this whole event
+        // exists to avoid: a driver that cannot read the outcome is supposed to emit
+        // `payment.updated` instead.
+        if (outcome === undefined) {
+            throw new Error(`[payments] payment.dispute_closed for event ${event.id} carries no outcome. A driver that cannot read one must emit payment.updated instead.`);
+        }
+        const existing = await this.#store.findPaymentByGatewayId(gatewayId);
+        // A close moves the payment row in BOTH directions, and the second one is easy to miss.
+        //
+        // `won` returns money that a chargeback took, so a row sitting at `disputed` goes back
+        // to `paid` — `revenue()` sums `paid`, and leaving it writes off money that came back.
+        //
+        // `lost` is the mirror, and it does not assume a `payment.disputed` ever arrived. Plenty
+        // of gateways never send one: Razorpay documents that it does not debit provisionally at
+        // all, PayPal opens at an inquiry that takes nothing, and Woovi only blocks the balance.
+        // On those the sequence is warning → closed(lost), with nothing in between to move the
+        // row — so a payment whose money is definitively gone would still read `paid`.
+        //
+        // `expired` and `canceled` deliberately move nothing. Expired means the window closed
+        // with no verdict published, and canceled means the cardholder withdrew — on Stripe a
+        // withdrawn dispute still has to be closed in your favour with evidence. Neither is a
+        // statement about where the money ended up.
+        const target = outcome === 'won' && existing?.status === 'disputed'
+            ? 'paid'
+            : outcome === 'lost' && existing !== null && existing.status !== 'disputed'
+                ? 'disputed'
+                : undefined;
+        if (target !== undefined && existing !== null) {
+            await this.#store.savePayment({
+                gatewayId,
+                provider: event.provider,
+                status: target,
+                // The dispute's amount can differ from the charge's — a partial dispute, or a
+                // currency conversion between the charge and the chargeback. The ROW keeps the
+                // amount it was charged for; the dispute's own figure stays on the payload.
+                amount: existing.amount,
+                currency: existing.currency,
+                ...(existing.customerId !== null ? { customerId: existing.customerId } : {}),
+                ...(existing.subscriptionId !== null ? { subscriptionId: existing.subscriptionId } : {}),
+                payload: event.raw,
+            });
+        }
+        // The outcome IS the status: `won`/`lost`/`canceled`/`expired` are all `DisputeStatus`
+        // members, so a closed dispute stops matching the open-window read the moment it closes —
+        // which is what stops the deadline check alerting on a window nobody has to answer.
+        await this.#persistDispute(event, event.data, { status: outcome, closedAt: new Date() });
+        publishPayments('payment.dispute_closed', {
+            gatewayId,
+            provider: event.provider,
+            disputeId: disputeId ?? gatewayId,
+            outcome,
+            ...(amount !== undefined ? { amount } : {}),
+            ...(currency !== undefined ? { currency } : {}),
+        });
+    }
+    /**
+     * The key a dispute row is upserted on — the DISPUTE's own gateway id where the event
+     * carries one, and a reconcilable stand-in where it does not.
+     *
+     * Several gateways send no dispute id at all, and several more send one when the dispute
+     * opens and omit it when it closes. Both have to land on the SAME row, or the close opens a
+     * second dispute and the deadline check keeps alerting on a window that was already
+     * answered. So, in order:
+     *
+     * 1. `disputeId`, when the event carries one. That is the gateway's own identity.
+     * 2. Otherwise the payment's newest UNRESOLVED dispute, if there is one — this is the close
+     *    (or the chargeback after a warning) rejoining the row its own opening event created.
+     * 3. Otherwise `dispute:<provider>:<payment gateway id>`, synthesized.
+     *
+     * The `dispute:` prefix is what makes step 3 safe to store in the same unique column as a
+     * real gateway id: no gateway issues an id in that shape, so a synthesized key can never
+     * collide with a real one, and it stays reconcilable by hand because the payment it names
+     * is right there in it. What it costs: a payment disputed TWICE by a gateway that sends no
+     * dispute id collapses into one row, because such a gateway gives us nothing to tell the
+     * two apart. Overwriting one row is the lesser error — a second row keyed on nothing could
+     * never be closed, and would alert on its deadline forever.
+     */
+    async #disputeKey(provider, data) {
+        if (data.disputeId !== undefined && data.disputeId !== '')
+            return data.disputeId;
+        const open = await this.#store.findOpenDisputeByPayment(data.gatewayId);
+        if (open !== null)
+            return open.gatewayId;
+        return `dispute:${provider}:${data.gatewayId}`;
+    }
+    /**
+     * Write the dispute row that goes with a dispute event.
+     *
+     * ADDITIONAL to what each handler already does, never a replacement: the warning still
+     * moves no money, the chargeback still moves the payment to `disputed`, and a won close
+     * still puts it back to `paid`. What this adds is the one thing none of them kept — the
+     * response deadline, which arrived on the event, was published once, and was then gone.
+     */
+    async #persistDispute(event, data, fields) {
+        const deadline = parseInstant(data.actionableUntil);
+        await this.#store.saveDispute({
+            gatewayId: await this.#disputeKey(event.provider, data),
+            paymentGatewayId: data.gatewayId,
+            provider: event.provider,
+            status: fields.status,
+            // Spread away when absent, never passed as `null`: the store keeps what it already has
+            // for an `undefined` field, and the closing event — which carries no reason, no amount
+            // and no deadline — must not blank what the opening event recorded.
+            ...(data.reason !== undefined ? { reason: data.reason } : {}),
+            ...(data.amount !== undefined ? { amount: data.amount } : {}),
+            ...(data.currency !== undefined ? { currency: data.currency } : {}),
+            ...(deadline !== null ? { evidenceDueBy: deadline } : {}),
+            ...(data.outcome !== undefined ? { outcome: data.outcome } : {}),
+            ...(fields.closedAt !== undefined ? { closedAt: fields.closedAt } : {}),
+            payload: event.raw,
+        });
+    }
     async #onSubscriptionChanged(event) {
         if (!isSubscriptionWebhookData(event.data)) {
             throw new Error(`[payments] Malformed subscription payload for event ${event.id}.`);

package/dist/src/billing/webhook_processor.js.map

@@ -1 +1 @@
-{"version":3,"file":"webhook_processor.js","sourceRoot":"","sources":["../../../src/billing/webhook_processor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAIpD,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAoBtF;;;;;;;;;GASG;AACH,MAAM,OAAO,gBAAgB;IAC3B,MAAM,CAAe;IACrB,OAAO,CAA6B;IACpC,SAAS,CAAiC;IAE1C,YAAY,OAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,KAAmB;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;YAClD,cAAc,EAAE,KAAK,CAAC,EAAE;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,GAAG;SACnB,CAAC,CAAC;QAEH,0CAA0C;QAC1C,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAElC,eAAe,CAAC,kBAAkB,EAAE;YAClC,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAClD,eAAe,CAAC,mBAAmB,EAAE;gBACnC,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YACxD,eAAe,CAAC,gBAAgB,EAAE;gBAChC,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,OAAO;aACf,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,qFAAqF;IACrF,WAAW,CAAC,KAAmB;QAC7B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,mBAAmB;gBACtB,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACzC,KAAK,gBAAgB;gBACnB,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACtC,KAAK,kBAAkB;gBACrB,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACxC,KAAK,sBAAsB,CAAC;YAC5B,KAAK,sBAAsB;gBACzB,OAAO,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;YAC5C,KAAK,uBAAuB;gBAC1B,OAAO,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;YAC7C;gBACE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,KAAmB;QAC3C,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,4DAA4D,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;QAC/E,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC5B,SAAS;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,MAAM;YACd,MAAM;YACN,QAAQ;YACR,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,MAAM,EAAE,IAAI,IAAI,EAAE;YAClB,OAAO,EAAE,KAAK,CAAC,GAAG;SACnB,CAAC,CAAC;QACH,eAAe,CAAC,mBAAmB,EAAE;YACnC,SAAS;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM;YACN,QAAQ;YACR,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,KAAK,SAAS;gBAC5C,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE;gBACrD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAmB;QACxC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,yDAAyD,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;QAC/E,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC5B,SAAS;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,QAAQ;YAChB,MAAM;YACN,QAAQ;YACR,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,OAAO,EAAE,KAAK,CAAC,GAAG;SACnB,CAAC,CAAC;QACH,eAAe,CAAC,gBAAgB,EAAE;YAChC,SAAS;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM;YACN,QAAQ;YACR,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,KAAK,SAAS;gBAC5C,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE;gBACrD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAAmB;QAC1C,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,2DAA2D,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;QACnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;gBAC5B,SAAS;gBACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,UAAU;gBAClB,MAAM;gBACN,QAAQ;gBACR,GAAG,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjF,GAAG,CAAC,QAAQ,CAAC,cAAc,KAAK,SAAS;oBACvC,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE;oBAC7C,CAAC,CAAC,EAAE,CAAC;gBACP,OAAO,EAAE,KAAK,CAAC,GAAG;aACnB,CAAC,CAAC;QACL,CAAC;QACD,eAAe,CAAC,kBAAkB,EAAE;YAClC,SAAS;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM;YACN,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,KAAmB;QAC9C,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,uDAAuD,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;YACzB,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,OAAO,EAAE,KAAK,CAAC,GAAG;SACnB,CAAC,CAAC;QACH,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,KAAK,sBAAsB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,sBAAsB,CAAC;QAC1F,eAAe,CAAC,IAAI,EAAE;YACpB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,KAAmB;QAC/C,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,gEAAgE,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/E,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;gBACjC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtF,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,OAAO,EAAE,KAAK,CAAC,GAAG;aACnB,CAAC,CAAC;QACL,CAAC;QACD,eAAe,CAAC,uBAAuB,EAAE;YACvC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;IACL,CAAC;CACF"}
+{"version":3,"file":"webhook_processor.js","sourceRoot":"","sources":["../../../src/billing/webhook_processor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAIpD,OAAO,EAEL,oBAAoB,EACpB,oBAAoB,EACpB,yBAAyB,GAC1B,MAAM,qBAAqB,CAAC;AAoB7B;;;;;;;;GAQG;AACH,SAAS,YAAY,CAAC,KAAyB;IAC7C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;AACxD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,gBAAgB;IAC3B,MAAM,CAAe;IACrB,OAAO,CAA6B;IACpC,SAAS,CAAiC;IAE1C,YAAY,OAAgC;QAC1C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAC9B,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;IAC1C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,OAAO,CAAC,KAAmB;QAC/B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC;YAClD,cAAc,EAAE,KAAK,CAAC,EAAE;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,OAAO,EAAE,KAAK,CAAC,GAAG;YAClB,mFAAmF;YACnF,sFAAsF;YACtF,yDAAyD;YACzD,UAAU,EAAE,KAAK,CAAC,IAAI;SACvB,CAAC,CAAC;QAEH,0CAA0C;QAC1C,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAElC,eAAe,CAAC,kBAAkB,EAAE;YAClC,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,OAAO;gBAAE,MAAM,OAAO,CAAC,KAAK,CAAC,CAAC;YAClC,MAAM,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YAClD,eAAe,CAAC,mBAAmB,EAAE;gBACnC,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;aACjB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YACxD,eAAe,CAAC,gBAAgB,EAAE;gBAChC,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,OAAO;aACf,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,qFAAqF;IACrF,WAAW,CAAC,KAAmB;QAC7B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,mBAAmB;gBACtB,OAAO,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;YACzC,KAAK,gBAAgB;gBACnB,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACtC,KAAK,kBAAkB;gBACrB,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACxC,KAAK,kBAAkB;gBACrB,OAAO,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACxC,KAAK,yBAAyB;gBAC5B,OAAO,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YACvC,KAAK,wBAAwB;gBAC3B,OAAO,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;YACtC,KAAK,iBAAiB;gBACpB,OAAO,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;YAEvC,KAAK,sBAAsB,CAAC;YAC5B,KAAK,sBAAsB;gBACzB,OAAO,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC;YAC5C,KAAK,uBAAuB;gBAC1B,OAAO,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;YAC7C;gBACE,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;QAC7B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,KAAmB;QAC3C,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,4DAA4D,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QAC3F,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,iBAAiB,EAAE,GAClF,KAAK,CAAC,IAAI,CAAC;QACb,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC5B,SAAS;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,MAAM;YACd,MAAM;YACN,QAAQ;YACR,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,uFAAuF;YACvF,wFAAwF;YACxF,6BAA6B;YAC7B,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,sFAAsF;YACtF,uFAAuF;YACvF,wFAAwF;YACxF,mBAAmB;YACnB,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,EAAE;YACrD,OAAO,EAAE,KAAK,CAAC,GAAG;SACnB,CAAC,CAAC;QACH,eAAe,CAAC,mBAAmB,EAAE;YACnC,SAAS;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM;YACN,QAAQ;YACR,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,KAAK,SAAS;gBAC5C,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE;gBACrD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,KAAmB;QACxC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,yDAAyD,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,cAAc,EAAE,iBAAiB,EAAE,GAClF,KAAK,CAAC,IAAI,CAAC;QACb,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC5B,SAAS;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,QAAQ;YAChB,MAAM;YACN,QAAQ;YACR,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnD,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,OAAO,EAAE,KAAK,CAAC,GAAG;SACnB,CAAC,CAAC;QACH,eAAe,CAAC,gBAAgB,EAAE;YAChC,SAAS;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM;YACN,QAAQ;YACR,qFAAqF;YACrF,sFAAsF;YACtF,8DAA8D;YAC9D,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,iBAAiB,KAAK,SAAS;gBAC5C,CAAC,CAAC,EAAE,iBAAiB,EAAE,KAAK,CAAC,IAAI,CAAC,iBAAiB,EAAE;gBACrD,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,KAAmB;QAC1C,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,2DAA2D,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;QACtE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;gBAC5B,SAAS;gBACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,UAAU;gBAClB,MAAM;gBACN,QAAQ;gBACR,qFAAqF;gBACrF,qFAAqF;gBACrF,mEAAmE;gBACnE,cAAc,EAAE,MAAM;gBACtB,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjF,GAAG,CAAC,QAAQ,CAAC,cAAc,KAAK,SAAS;oBACvC,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE;oBAC7C,CAAC,CAAC,EAAE,CAAC;gBACP,OAAO,EAAE,KAAK,CAAC,GAAG;aACnB,CAAC,CAAC;QACL,CAAC;QACD,eAAe,CAAC,kBAAkB,EAAE;YAClC,SAAS;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM;YACN,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;OAeG;IACH,KAAK,CAAC,iBAAiB,CAAC,KAAmB;QACzC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,0DAA0D,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QACzF,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,cAAc,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;QAC9F,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,QAAQ,KAAK,IAAI;YAAE,OAAO;QAE9B,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC5D,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC5B,SAAS;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,MAAM;YACd,uFAAuF;YACvF,sFAAsF;YACtF,sFAAsF;YACtF,2EAA2E;YAC3E,MAAM;YACN,QAAQ;YACR,GAAG,CAAC,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5E,GAAG,CAAC,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,mFAAmF;YACnF,wFAAwF;YACxF,wCAAwC;YACxC,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpD,OAAO,EAAE,KAAK,CAAC,GAAG;SACnB,CAAC,CAAC;QAEH,eAAe,CAAC,iBAAiB,EAAE;YACjC,SAAS;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,MAAM;SACf,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;OAaG;IACH,cAAc,CAAC,OAAe,EAAE,QAA4B;QAC1D,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,OAAO,CAAC;QAC3C,IAAI,OAAO,KAAK,UAAU,IAAI,QAAQ,KAAK,UAAU;YAAE,OAAO,OAAO,CAAC;QACtE,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;;;;;;;;;OAWG;IACH,KAAK,CAAC,kBAAkB,CAAC,KAAmB;QAC1C,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,2DAA2D,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QAC1F,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,iBAAiB,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;QACtE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QACrE,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;gBAC5B,SAAS;gBACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,UAAU;gBAClB,MAAM;gBACN,QAAQ;gBACR,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjF,GAAG,CAAC,QAAQ,CAAC,cAAc,KAAK,SAAS;oBACvC,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE;oBAC7C,CAAC,CAAC,EAAE,CAAC;gBACP,OAAO,EAAE,KAAK,CAAC,GAAG;aACnB,CAAC,CAAC;QACL,CAAC;QACD,yFAAyF;QACzF,qFAAqF;QACrF,sEAAsE;QACtE,IAAI,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACrC,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;QACD,eAAe,CAAC,kBAAkB,EAAE;YAClC,SAAS;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM;YACN,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,iBAAiB,CAAC,KAAmB;QACzC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CACb,kEAAkE,KAAK,CAAC,EAAE,GAAG,CAC9E,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;QAC1D,oFAAoF;QACpF,qFAAqF;QACrF,sFAAsF;QACtF,wFAAwF;QACxF,8BAA8B;QAC9B,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACrE,eAAe,CAAC,yBAAyB,EAAE;YACzC,SAAS;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,gBAAgB,CAAC,KAAmB;QACxC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,KAAK,CAAC,iEAAiE,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,IAAI,CAAC;QACvE,mFAAmF;QACnF,sFAAsF;QACtF,6EAA6E;QAC7E,6BAA6B;QAC7B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,+CAA+C,KAAK,CAAC,EAAE,uFAAuF,CAC/I,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,sBAAsB,CAAC,SAAS,CAAC,CAAC;QAErE,wFAAwF;QACxF,EAAE;QACF,uFAAuF;QACvF,uFAAuF;QACvF,EAAE;QACF,yFAAyF;QACzF,yFAAyF;QACzF,yFAAyF;QACzF,uFAAuF;QACvF,+EAA+E;QAC/E,EAAE;QACF,sFAAsF;QACtF,sFAAsF;QACtF,sFAAsF;QACtF,4CAA4C;QAC5C,MAAM,MAAM,GACV,OAAO,KAAK,KAAK,IAAI,QAAQ,EAAE,MAAM,KAAK,UAAU;YAClD,CAAC,CAAC,MAAM;YACR,CAAC,CAAC,OAAO,KAAK,MAAM,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU;gBACzE,CAAC,CAAC,UAAU;gBACZ,CAAC,CAAC,SAAS,CAAC;QAElB,IAAI,MAAM,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC9C,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;gBAC5B,SAAS;gBACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,MAAM,EAAE,MAAM;gBACd,8EAA8E;gBAC9E,+EAA+E;gBAC/E,4EAA4E;gBAC5E,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;gBAC3B,GAAG,CAAC,QAAQ,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5E,GAAG,CAAC,QAAQ,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxF,OAAO,EAAE,KAAK,CAAC,GAAG;aACnB,CAAC,CAAC;QACL,CAAC;QAED,uFAAuF;QACvF,0FAA0F;QAC1F,oFAAoF;QACpF,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QAEzF,eAAe,CAAC,wBAAwB,EAAE;YACxC,SAAS;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,SAAS,IAAI,SAAS;YACjC,OAAO;YACP,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAChD,CAAC,CAAC;IACL,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,KAAK,CAAC,WAAW,CAAC,QAAgB,EAAE,IAAwB;QAC1D,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,IAAI,IAAI,CAAC,SAAS,KAAK,EAAE;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QACjF,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,wBAAwB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxE,IAAI,IAAI,KAAK,IAAI;YAAE,OAAO,IAAI,CAAC,SAAS,CAAC;QACzC,OAAO,WAAW,QAAQ,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;IACjD,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,eAAe,CACnB,KAAmB,EACnB,IAAwB,EACxB,MAA2C;QAE3C,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACpD,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC;YAC5B,SAAS,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC;YACvD,gBAAgB,EAAE,IAAI,CAAC,SAAS;YAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,uFAAuF;YACvF,uFAAuF;YACvF,oEAAoE;YACpE,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnE,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChE,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,OAAO,EAAE,KAAK,CAAC,GAAG;SACnB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,sBAAsB,CAAC,KAAmB;QAC9C,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,uDAAuD,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;YACjC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,EAAE;YACzB,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,OAAO,EAAE,KAAK,CAAC,GAAG;SACnB,CAAC,CAAC;QACH,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,KAAK,sBAAsB,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,sBAAsB,CAAC;QAC1F,eAAe,CAAC,IAAI,EAAE;YACpB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,uBAAuB,CAAC,KAAmB;QAC/C,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,KAAK,CAAC,gEAAgE,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC;QAC/F,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QACxB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC/E,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,CAAC,MAAM,CAAC,gBAAgB,CAAC;gBACjC,SAAS,EAAE,IAAI,CAAC,SAAS;gBACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,MAAM,EAAE,UAAU;gBAClB,MAAM,EAAE,QAAQ,CAAC,MAAM;gBACvB,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtF,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvE,OAAO,EAAE,KAAK,CAAC,GAAG;aACnB,CAAC,CAAC;QACL,CAAC;QACD,eAAe,CAAC,uBAAuB,EAAE;YACvC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/src/client/define_config.d.ts

@@ -0,0 +1,150 @@
+import type { HttpContext } from '@adonisjs/core/http';
+import type { BillingStore } from '../billing/billing_store.js';
+/**
+ * The app-side row a payment belongs to — the same `{ type, id }` pair
+ * `ensureCustomer({ owner })` writes into `billing_customers`.
+ */
+export interface PaymentOwner {
+    type: string;
+    id: string;
+}
+/** A normalized payment, built from named columns only. See `handlers.ts`. */
+export interface ClientPayment {
+    gatewayId: string;
+    provider: string;
+    status: string;
+    /** Integer minor units, exactly as stored. */
+    amount: number;
+    currency: string;
+    customerId: string | null;
+    paidAt: Date | null;
+}
+/** Whether this request may talk to the client endpoint at all. */
+export type ClientAuthorizeHook = (ctx: HttpContext) => boolean | Promise<boolean>;
+/** Who is asking. `null` denies the request (`401`). */
+export type ClientOwnerHook = (ctx: HttpContext) => PaymentOwner | null | Promise<PaymentOwner | null>;
+/**
+ * Whether this caller may see the payment behind `externalReference`.
+ *
+ * The reference is the ONLY thing the browser supplies, so this hook is where an app says
+ * how a reference is tied back to a caller. It is never given the payment: a hook that
+ * received the row it is guarding invites "return true if the row exists", which is the
+ * IDOR this endpoint exists to make unwritable.
+ */
+export type ClientAuthorizeReferenceHook = (ctx: HttpContext, externalReference: string) => boolean | Promise<boolean>;
+/**
+ * Map the reference the browser polls with onto the `gateway_id` the billing store keys
+ * payments by. Return `null` for "no such reference" (the endpoint answers `404`).
+ *
+ * **An escape hatch, and no longer the normal path.** `billing_payments.external_reference`
+ * now stores the reference a charge carried, so by default the endpoint looks the payment up
+ * by it directly and falls back to reading the reference AS a gateway id — which covers both
+ * the gateways that make the two equal (Woovi's `correlationID`, Efí's `txid`) and any row
+ * written before an earlier schema ran.
+ *
+ * Configure this only when your browser polls with something that is NEITHER — a checkout
+ * session id you map yourself, a hashed token. Doing so REPLACES the default lookup: the
+ * endpoint then reads only what this returns, by gateway id.
+ *
+ * This is a LOOKUP, not a guard: {@link ClientAuthorizeReferenceHook} still runs on what it
+ * resolves.
+ */
+export type ClientResolveReferenceHook = (ctx: HttpContext, reference: string) => string | null | Promise<string | null>;
+/** Shape of `config/payments_client.ts`. */
+export interface PaymentsClientConfig {
+    /**
+     * Master switch. Defaults to **`false`**: a payments endpoint reachable from a browser is
+     * an authorization surface, and an app takes one on deliberately or not at all.
+     */
+    enabled?: boolean;
+    /** URL prefix the endpoint mounts under. Defaults to `/payments/client`. */
+    path?: string;
+    /**
+     * Is this request allowed at all. Defaults to "there is a resolved user" — read
+     * structurally off `ctx.auth` (see {@link resolveRequestUser}). A denial is `401`.
+     */
+    authorize?: ClientAuthorizeHook;
+    /**
+     * Who is asking, as `{ type, id }`. Defaults to `{ type: 'User', id: String(user.id) }`
+     * from that same resolved user. `null` is a `401`.
+     */
+    owner?: ClientOwnerHook;
+    /**
+     * May this caller see THIS payment. **The load-bearing one.**
+     *
+     * Defaults to the customer-registry check: resolve the owner, look them up with
+     * `findCustomerByOwner`, and allow only when the payment's `customerId` is the gateway
+     * customer that owner actually holds. An app that never recorded customers is DENIED with
+     * a message saying so — never allowed by default.
+     */
+    authorizeReference?: ClientAuthorizeReferenceHook;
+    /**
+     * See {@link ClientResolveReferenceHook}. Unset by default — the endpoint looks the payment
+     * up by `external_reference`, then by gateway id.
+     */
+    resolveReference?: ClientResolveReferenceHook;
+}
+/** Why a reference was refused. Developer-facing — it never reaches the browser. */
+export interface ReferenceDenied {
+    allowed: false;
+    reason: string;
+}
+export type ReferenceOutcome = {
+    allowed: true;
+} | ReferenceDenied;
+/** Everything the ownership guard is allowed to see. */
+export interface ReferenceGuardRequest {
+    ctx: HttpContext;
+    /** The reference as the browser sent it (before {@link ClientResolveReferenceHook}). */
+    reference: string;
+    /** The already-loaded payment, normalized. */
+    payment: ClientPayment;
+    /** The already-resolved caller. Never `null` — a request with no owner never gets here. */
+    owner: PaymentOwner;
+    store: BillingStore;
+}
+/**
+ * The internal form of the ownership check. Always present on a resolved config, so there
+ * is no code path through the handler that reaches a payment without running one.
+ */
+export type ReferenceGuard = (request: ReferenceGuardRequest) => Promise<ReferenceOutcome>;
+/** A fully-resolved config — every field present (defaults applied). */
+export interface ResolvedPaymentsClientConfig {
+    enabled: boolean;
+    path: string;
+    authorize: ClientAuthorizeHook;
+    owner: ClientOwnerHook;
+    /**
+     * `null` — the common case — means "no app-supplied mapping": the handler uses the built-in
+     * `external_reference` → gateway-id lookup. A hook here replaces it entirely.
+     */
+    resolveReference: ClientResolveReferenceHook | null;
+    /** The app's `authorizeReference`, adapted — or the built-in registry check. */
+    guard: ReferenceGuard;
+}
+/**
+ * The user behind a request, or `null`.
+ *
+ * A throwing `getUser()` (some guards throw rather than return `null` for an anonymous
+ * request) is a denial, not a `500`.
+ */
+export declare function resolveRequestUser(ctx: unknown): Promise<unknown>;
+/** The default {@link PaymentsClientConfig.authorize}: there must be a resolved user. */
+export declare function defaultAuthorize(ctx: HttpContext): Promise<boolean>;
+/** The default {@link PaymentsClientConfig.owner}: `{ type: 'User', id: String(user.id) }`. */
+export declare function defaultOwner(ctx: HttpContext): Promise<PaymentOwner | null>;
+/**
+ * The default ownership check: the payment's gateway customer must be the one this owner
+ * holds at that gateway, per `billing_customers`.
+ *
+ * Every branch that cannot PROVE ownership denies. In particular an app that never called
+ * `ensureCustomer({ store, owner })` has an empty registry, and an empty registry means
+ * "unknown", not "allowed" — the failure mode of the opposite choice is that every
+ * authenticated user can read every payment by guessing a reference.
+ */
+export declare const registryReferenceGuard: ReferenceGuard;
+/** Apply defaults to a partial config, producing a fully-resolved one. */
+export declare function resolveConfig(config?: PaymentsClientConfig): ResolvedPaymentsClientConfig;
+/** Identity helper giving `config/payments_client.ts` full type-checking. */
+export declare function defineConfig(config?: PaymentsClientConfig): PaymentsClientConfig;
+//# sourceMappingURL=define_config.d.ts.map

package/dist/src/client/define_config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"define_config.d.ts","sourceRoot":"","sources":["../../../src/client/define_config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAEhE;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACZ;AAED,8EAA8E;AAC9E,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,8CAA8C;IAC9C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC;CACrB;AAED,mEAAmE;AACnE,MAAM,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,WAAW,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEnF,wDAAwD;AACxD,MAAM,MAAM,eAAe,GAAG,CAC5B,GAAG,EAAE,WAAW,KACb,YAAY,GAAG,IAAI,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;AAExD;;;;;;;GAOG;AACH,MAAM,MAAM,4BAA4B,GAAG,CACzC,GAAG,EAAE,WAAW,EAChB,iBAAiB,EAAE,MAAM,KACtB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;AAEhC;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,MAAM,0BAA0B,GAAG,CACvC,GAAG,EAAE,WAAW,EAChB,SAAS,EAAE,MAAM,KACd,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAE5C,4CAA4C;AAC5C,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC;;;OAGG;IACH,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,4BAA4B,CAAC;IAClD;;;OAGG;IACH,gBAAgB,CAAC,EAAE,0BAA0B,CAAC;CAC/C;AAED,oFAAoF;AACpF,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,KAAK,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,gBAAgB,GAAG;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG,eAAe,CAAC;AAEnE,wDAAwD;AACxD,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,WAAW,CAAC;IACjB,wFAAwF;IACxF,SAAS,EAAE,MAAM,CAAC;IAClB,8CAA8C;IAC9C,OAAO,EAAE,aAAa,CAAC;IACvB,2FAA2F;IAC3F,KAAK,EAAE,YAAY,CAAC;IACpB,KAAK,EAAE,YAAY,CAAC;CACrB;AAED;;;GAGG;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,EAAE,qBAAqB,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;AAE3F,wEAAwE;AACxE,MAAM,WAAW,4BAA4B;IAC3C,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,mBAAmB,CAAC;IAC/B,KAAK,EAAE,eAAe,CAAC;IACvB;;;OAGG;IACH,gBAAgB,EAAE,0BAA0B,GAAG,IAAI,CAAC;IACpD,gFAAgF;IAChF,KAAK,EAAE,cAAc,CAAC;CACvB;AAcD;;;;;GAKG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAQvE;AAED,yFAAyF;AACzF,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAEzE;AAED,+FAA+F;AAC/F,wBAAsB,YAAY,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC,CAKjF;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,sBAAsB,EAAE,cA4BpC,CAAC;AAiBF,0EAA0E;AAC1E,wBAAgB,aAAa,CAAC,MAAM,GAAE,oBAAyB,GAAG,4BAA4B,CAe7F;AAED,6EAA6E;AAC7E,wBAAgB,YAAY,CAAC,MAAM,GAAE,oBAAyB,GAAG,oBAAoB,CAEpF"}