@ambushsoftworks/nestjs-payments-graphql 0.8.0 → 0.10.0-rc.1

package/CHANGELOG.md

@@ -28,6 +28,160 @@ prose for buried obligations. The marker was introduced in v0.4.0 and
 
 ## [Unreleased]
 
+## [0.10.0] - 2026-09-29
+
+> **Upgrade note.** `PaymentMethodService` takes `ModuleRef` as a third
+> constructor argument. It is optional, so a consumer constructing the service
+> by hand — in tests, mostly — still compiles and behaves exactly as before;
+> without it no policy is resolved. Pass it if you want the policy honoured in a
+> hand-built container. Nothing else changes for an existing consumer, and
+> **absent a registered policy every path behaves exactly as it did in 0.9.0.**
+
+0.9.0 let a session say whether the card it kept should become the customer's
+default. This closes the class that switch guards case by case: **the package
+now asks before every default it writes, on every path, including ones not
+written yet.**
+
+### Added
+- **`IPaymentMethodPolicy`**, with the `PAYMENT_METHOD_POLICY` token and the
+  `paymentMethodPolicyInstance` module option. `mayBecomeDefault` is asked
+  before the provider is called, with the `trigger` that caused the write —
+  `explicit`, `setup` or `payment` — so a consumer can answer differently by
+  origin.
+
+  It exists because the knowledge and the write live in different places. A
+  consumer holding cards belonging to third parties knows which card is whose
+  and had already written guards on its own mutations; the package writes the
+  default inside webhook handling, where those guards never run. Rather than
+  teach the package what a third party is, it asks.
+
+- **`PaymentMethodDefaultRefusedException`** (`PAYMENT_METHOD_DEFAULT_REFUSED`),
+  thrown when a policy refuses an `explicit` request. Someone clicked a button
+  and is waiting; a silent no-op reads as success while the card does not stick.
+  The automatic paths log and leave the default alone instead — they run inside
+  a webhook, where throwing answers 500 and the provider redelivers for days.
+
+- **`paymentMethodPolicyTimeoutMs`** (default `5000`) and the
+  `PAYMENT_METHOD_POLICY_TIMEOUT` token.
+
+- **`resolveSetupPaymentMethod` on `RecurringPaymentGateway`** (optional):
+  reports the card a completed setup session collected, and whether the session
+  asked for it to be adopted, **without writing anything**. A setup session only
+  reveals its card on completion, so `adoptSetupPaymentMethod` resolved and
+  adopted in one call and left no point at which a policy could be consulted.
+  That method now builds on this one, so there is a single reading of the
+  session's answer.
+
+### Changed
+- **A policy that throws, rejects or times out is treated as a refusal**, logged
+  at error level. This is the opposite of every other consumer hook in the
+  package — a branding resolver or a charge-options resolver that fails lets the
+  payment proceed, because the cost of proceeding is cosmetic. The cost of
+  proceeding here is charging the wrong person. **Fail open for cosmetic, fail
+  closed for authority.**
+
+  The timeout is the only one in the package, and the inconsistency is
+  deliberate: everywhere else the safe answer to an unanswerable question is
+  "proceed", so a timeout could only cause harm.
+
+- **A gateway that cannot be gated refuses rather than proceeds.** With a policy
+  registered, a setup-session adoption on a gateway without
+  `resolveSetupPaymentMethod` is refused and logged with what to implement.
+  Without a policy, the legacy path is used unchanged.
+
+### Docs
+- New **Deciding which cards may become the default**, answering the question
+  **What "ownership" means** (v0.9.0) ends on: ownership means only that a card
+  is attached to that provider customer, and this is how you tell the package
+  which of those cards are not the payer's own.
+- `payment-method-policy-gate.spec.ts` fails the build if a new default-writing
+  call site skips the gate — the guarantee that makes a hook better than a
+  per-path switch, and the reason it is worth having at all.
+
+## [0.9.0] - 2026-09-29
+
+> **Not published separately — released as part of `0.10.0`.** Verifying this
+> release on its own would have verified code `0.10.0` replaces: the setup-card
+> path documented below was rewired a day later so a policy could be consulted
+> before anything is written. The two were verified together instead. Pin
+> `0.10.0`; everything here is in it.
+
+A card kept while paying is now usable, and **the caller decides whether it
+becomes the card everything else gets charged**. That second half is the
+release: the first draft of this work adopted automatically, which is wrong for
+any customer who pays on behalf of others, and the reporting consumer caught it
+on production before we shipped.
+
+### Added
+- **`savePaymentMethod` on `createPaymentSession`** — `{ providerCustomerId,
+  adoptAsDefault? }`. One object, so asking to keep a card without naming a
+  customer to attach it to cannot be expressed; that combination left a
+  consumer's card on a provider-invented customer nothing in their database
+  pointed at. For Stripe it becomes `customer` plus
+  `payment_intent_data.setup_future_usage: 'off_session'`.
+
+  `customer` and `setup_future_usage` remain **unreserved**, so passthrough code
+  written before this is unaffected. Only a contradiction is refused — a
+  different customer, or `on_session` alongside `savePaymentMethod` — on the
+  same precedent as `paymentIntentData.metadata.invoiceId`.
+
+- **`adoptAsDefault` on `createSetupSession`** and
+  `CustomerService.createSetupSession(..., { adoptAsDefault })`, **defaulting to
+  `true`** — what that path has always done. Pass `false` when collecting a card
+  for somebody the customer pays on behalf of.
+
+- **`adoptPaymentMethod` on `RecurringPaymentGateway`** (optional), for a card
+  whose id is already resolved. `adoptSetupPaymentMethod` now delegates to the
+  same private tail, so "default only when the customer has none" exists once.
+
+- **`customerId` in `providerData`** on payment-mode Checkout completions, and
+  **`providerCustomerId` / `paymentMethodId` on `PaidInvoiceEvent`** — both
+  nullable and "when present". A listener receives the event, not the normalised
+  webhook, so these ids were previously unreachable without re-reading the
+  payment and calling the provider.
+
+- **`STRIPE_ADOPT_AS_DEFAULT_METADATA_KEY`**, the metadata key carrying the
+  adoption decision from session creation to the webhook that acts on it.
+
+### Changed
+- **Adoption is opt-in for payments, and silence means no.** A card kept during
+  a payment becomes the default only when the session asked for it.
+
+  A customer who pays on behalf of others is one provider customer holding
+  several people's cards, and the default is what everyone *without* their own
+  card is charged. Adopting automatically makes one third party's card the payer
+  for all the rest, invisibly to the cardholder. A recruiting agency with 53
+  client companies hit exactly this: one client's card became the account
+  default and was on course to pay for the other 52. Nothing was charged.
+
+- **Only an `off_session` mandate is adopted.** A card kept `on_session` is
+  attached and logged and never becomes the off-session default: that consent is
+  for charges the customer is present for, and spending it on a renewal produces
+  an authentication-required decline nobody is there to answer.
+
+- **Adoption runs only for a settled payment**, after the payment is recorded,
+  and can never fail the webhook. A throw would answer 500 and the provider
+  would redeliver for about three days, re-running the payment handler each
+  time. Failures are reported through `webhook.errorReporter` instead of being
+  swallowed silently, as they were before.
+
+### Fixed
+- **The webhook never wrote `PaymentCustomer.defaultPaymentMethodId`.** Only
+  `PaymentMethodService` mirrored it, and the webhook called the gateway
+  directly — so a card saved through the *documented* setup flow set the
+  provider's default and left the mirrored column null, making this README's
+  promise that you can render the current card without a provider round trip
+  untrue for the main path. Both adoption paths now go through
+  `PaymentMethodService` and mirror what they set. Found while verifying a
+  consumer's report, not reported.
+
+### Docs
+- New **Saving a card while paying**, **Choosing whether a saved card becomes
+  the default**, and **What "ownership" means** sections. The last one says
+  plainly that ownership means "attached to this provider customer" and nothing
+  more, which is weaker than the word suggests and matters to anyone building a
+  card picker on `listPaymentMethods`.
+
 ## [0.8.0] - 2026-09-28
 
 Off-session charges can finally say **which brand is charging**. A consumer

package/README.md

@@ -24,6 +24,10 @@ Production-grade payments module for NestJS with GraphQL support. Invoicing (inc
     - [Pinning a schedule to one card](#pinning-a-schedule-to-one-card)
     - [Per-charge gateway options for renewals](#per-charge-gateway-options-for-renewals)
   - [Saved Cards](#saved-cards)
+    - [What "ownership" means](#what-ownership-means)
+    - [Deciding which cards may become the default](#deciding-which-cards-may-become-the-default)
+    - [Saving a card while paying](#saving-a-card-while-paying)
+    - [Choosing whether a saved card becomes the default](#choosing-whether-a-saved-card-becomes-the-default)
     - [Managing saved cards](#managing-saved-cards)
     - [Stripe-specific off-session options](#stripe-specific-off-session-options-gatewayoptions)
   - [E-Transfer](#e-transfer)
@@ -1062,7 +1066,125 @@ const { setupUrl, providerSetupId } = await customerService.createSetupSession(
 
 **Completing the setup is a webhook, not a redirect.** Your success URL fires in the customer's browser; the card is not usable until `checkout.session.completed` arrives and the package records it. Do not tell the client their card is saved based on the redirect alone.
 
-**Which card gets charged.** The provider is the source of truth — for Stripe, `invoice_settings.default_payment_method`. `PaymentCustomer.defaultPaymentMethodId` mirrors it so you can render the current card without a provider round trip, but the package never consults that column to decide what to charge. One authority is what stops the two disagreeing. On the completion webhook the collected card becomes the default **only when the customer has none**, so a client adding a second card does not silently change what gets billed.
+**Which card gets charged.** The provider is the source of truth — for Stripe, `invoice_settings.default_payment_method`. `PaymentCustomer.defaultPaymentMethodId` mirrors it so you can render the current card without a provider round trip, but the package never consults that column to decide what to charge. One authority is what stops the two disagreeing. A collected card becomes the default **only when the customer has none**, so a client adding a second card does not silently change what gets billed.
+
+> **The mirror was not written on the webhook path before v0.9.0.** Only `PaymentMethodService` ever updated `defaultPaymentMethodId`, and the webhook called the gateway directly — so a card saved through the ordinary setup flow set the provider's default and left the column null. If you have been rendering from that column, it has been blank for cards saved that way; it is maintained from v0.9.0 on, and a `confirmSetup` call or any card-management write refreshes it for existing rows.
+
+#### What "ownership" means
+
+`ownsPaymentMethod`, `assertOwned` and every method taking a `paymentMethodId` mean one thing by ownership: **the card is attached to that client's provider customer.** Nothing more.
+
+That is worth stating plainly, because a provider customer can end up holding cards that are not the payer's own. Anything paid with `savePaymentMethod` attaches, and so does any card saved through a setup session — so a customer who pays on behalf of others accumulates their cards in one wallet, and the package cannot tell them apart.
+
+The consequences are yours to manage:
+
+- `listPaymentMethods` returns **every** attached card, so a picker built straight onto it will offer a third party's card for somebody else's purchase.
+- `setDefaultPaymentMethod` accepts any attached card, because by this definition the client owns it.
+
+What the package guarantees is narrower and worth having: it never *chooses* a card. Adoption is opt-in per session (below), an existing default is never overridden, and `createOffSessionPayment` refuses rather than falling back to whatever is on file. The package still does not know *which* cards are not the payer's own — but as of v0.10.0 you can tell it, per decision, with a policy: see [Deciding which cards may become the default](#deciding-which-cards-may-become-the-default).
+
+
+
+#### Deciding which cards may become the default
+
+*Added in v0.10.0.*
+
+The section above ends by saying the package cannot tell a third party's card from the payer's own. This is how you tell it.
+
+```typescript
+import type { IPaymentMethodPolicy } from '@ambushsoftworks/nestjs-payments-graphql';
+
+class WalletPolicy implements IPaymentMethodPolicy {
+  constructor(private readonly cards: CardOwnershipService) {}
+
+  async mayBecomeDefault({ clientDetailsId, paymentMethodId, trigger }) {
+    // An account that pays for other people never gets an automatic default.
+    if (trigger !== 'explicit') {
+      return !(await this.cards.paysOnBehalfOfOthers(clientDetailsId));
+    }
+    // A deliberate click is allowed, unless the card is somebody else's.
+    return !(await this.cards.belongsToThirdParty(paymentMethodId));
+  }
+}
+
+// In forRootAsync's useFactory:
+paymentMethodPolicyInstance: new WalletPolicy(cards),
+```
+
+**It is asked at the only two places the package writes a default**, before the provider is called — so a refusal costs no network request. `trigger` says what caused the write:
+
+| Trigger | Cause | A refusal |
+|---|---|---|
+| `explicit` | `setDefaultPaymentMethod` — a person chose this card | **throws** `PaymentMethodDefaultRefusedException` |
+| `setup` | a setup session completed, via the webhook or `confirmSetup` | logs, leaves the default alone |
+| `payment` | a buyer kept a card while paying and the session asked to adopt it | logs, leaves the default alone |
+
+The explicit path throws because somebody is waiting for an answer, and a silent no-op reads as success while the card quietly does not stick. The automatic paths do not, because they run inside a webhook: throwing there answers 500 and Stripe redelivers for about three days.
+
+In every case the card stays attached and chargeable by id. Only the default is untouched.
+
+**A policy that fails is a refusal.** If `mayBecomeDefault` throws, rejects, or takes longer than `paymentMethodPolicyTimeoutMs` (default 5000), the package logs at error level and treats the answer as `false`.
+
+> This is the opposite of every other consumer hook here, and deliberately so. A branding resolver that fails lets the payment go through, because the cost of proceeding is a missing brand name on a statement. The cost of proceeding *here* is charging the wrong person's card; the cost of refusing is a customer with no default and a loud `no_payment_method` on their next renewal. **Fail open for cosmetic, fail closed for authority.** It is also the only timeout in the package — everywhere else a slow callback is left to finish, because there the safe answer is "proceed" and a timeout could only cause harm.
+
+**Why a hook and not a flag on each path.** [Saving a card while paying](#saving-a-card-while-paying) already lets a session say whether its card should be adopted, and that stays — it is the first line, and it is the right place to answer when you know at checkout time. The policy is the backstop: it guards the *two functions* rather than the paths anyone thought to list, so a path added in a later version inherits it. A spec fails the build if a new default-writing call site skips the gate.
+
+Use both. A session flag cannot help when the decision depends on something you only learn from the webhook that triggers the adoption.
+
+**Your gateway needs `resolveSetupPaymentMethod`** if you wrote your own and you register a policy. A setup session only reveals its card when it completes, so the package has to be able to ask what was collected before anything is written. Without it a setup-session adoption is **refused** rather than performed ungated, and the refusal is logged with what to implement. The bundled Stripe gateway has it.
+
+#### Saving a card while paying
+
+*Added in v0.9.0.*
+
+A buyer paying through hosted Checkout can keep the card for later. Pass `savePaymentMethod` and the gateway attaches it to the customer you name:
+
+```typescript
+const customer = await customerService.createOrLinkCustomer(
+  divisionId, clientDetailsId, email, name,
+);
+
+await gateway.createPaymentSession({
+  invoiceId, amount, currency: 'CAD', successUrl, cancelUrl,
+  savePaymentMethod: {
+    providerCustomerId: customer.providerCustomerId,
+    adoptAsDefault: true,   // see below — defaults to false
+  },
+});
+```
+
+**One object, not a flag and a customer id.** A card needs a customer to attach to; without one the provider either refuses or invents a customer nothing in your database points at, and the card is lost with no error anywhere. A consumer hit exactly that and spent a day on it. This shape makes it unrepresentable.
+
+**`adoptAsDefault` decides whether it becomes the card auto-renew uses, and it defaults to `false`.**
+
+| `adoptAsDefault` | customer has no default | customer has a default |
+|---|---|---|
+| `true` | the saved card becomes the default | unchanged — never overridden |
+| `false` or absent | unchanged: still no default | unchanged |
+
+The card is attached in every row, and chargeable by id via `createOffSessionPayment`'s `paymentMethodId`. Only the default differs.
+
+> **Why silence means no.** Keeping a card and choosing what everything *else* gets charged are different decisions, and only you know whether the payer owns the card they just typed. A customer who pays on behalf of others — an agency, a parent company, a bookkeeper — is one provider customer holding several people's cards, and the default is what everyone *without* their own card is charged. A consumer hit this on production: a recruiting agency with 53 client companies paid for one client's posting, that client's card became the account default, and it was on course to pay for the other 52. Nothing was charged; they caught it within the hour. Pass `true` when the payer is buying for themselves, and leave it out when they are not.
+
+The card id reaches your listener on `PaidInvoiceEvent` as `paymentMethodId`, with `providerCustomerId` beside it, so you can file it against whoever it belongs to without a provider round trip.
+
+**Only `off_session` counts.** The package adopts a card only when the mandate says the customer will not be present for future charges. A card kept `on_session` is attached and logged, and never becomes the off-session default — that consent is for charges the customer is there for, and using it for a renewal is how you get an authentication-required decline at 02:00.
+
+**Equivalent through `gatewayOptions`.** `customer` and `setup_future_usage` are not reserved, so code written before v0.9.0 keeps working. What is refused is a *contradiction* — naming a different customer, or asking for `on_session` alongside `savePaymentMethod` — because resolving it either way would be a guess. The package writes its decision into the PaymentIntent's metadata under `adoptAsDefault` (exported as `STRIPE_ADOPT_AS_DEFAULT_METADATA_KEY`); keep that key out of your own metadata.
+
+#### Choosing whether a saved card becomes the default
+
+The same choice applies to setup sessions, where it **defaults to `true`** — that is what `createSetupSession` has always done, so nothing changes for existing consumers:
+
+```typescript
+await customerService.createSetupSession(
+  divisionId, clientDetailsId, email, name, successUrl, cancelUrl,
+  'stripe', undefined,
+  { adoptAsDefault: false },   // a card you are collecting for a third party
+);
+```
+
+**The answer travels with the session.** Adoption happens in two places that cannot see each other — the `checkout.session.completed` webhook, and `confirmSetup` when you confirm on the redirect — and either may land first. The package writes the decision onto the SetupIntent at session creation, so both read the same answer and `confirmSetup` needs no extra argument. Clearing a default yourself afterwards does not work: the webhook can land after your clear and set it again.
 
 #### Managing saved cards
 
@@ -1137,7 +1259,7 @@ Declare `@@unique([clientDetailsId, provider])` on `PaymentCustomer` to match, a
 
 **Keep the `divisionId` column** even though you no longer key on it. The bundled adapter still writes it on create and `assertPaymentsSchema` still requires it, so dropping it because "we do not scope by division" fails at boot — or on the first card save if you skip the schema assertion. It stays useful as a record of which division first created the customer.
 
-A custom gateway must implement `adoptSetupPaymentMethod` to support saved cards. It is optional on `RecurringPaymentGateway` so v0.2.x gateways still compile; without it the webhook logs a warning and the card stays unusable for auto-charge.
+A custom gateway must implement `adoptSetupPaymentMethod` to support saved cards, `adoptPaymentMethod` (v0.9.0) to support a card kept while paying, and `resolveSetupPaymentMethod` (v0.10.0) so a setup session's card can be reported before it is adopted — the second takes a payment method id the gateway has already resolved, rather than a setup intent. Both are optional on `RecurringPaymentGateway` so older gateways still compile; without them the webhook logs a warning and the card stays unusable for auto-charge. Implement them over one shared code path: "default only when the customer has none, never override" stops being true the moment there are two copies of it.
 
 #### Stripe-specific off-session options (`gatewayOptions`)
 
@@ -1250,6 +1372,8 @@ paymentEventListenerInstance: {
 
 Event payloads include `metadata` from the invoice plus the full `lineItems` snapshot so consumers don't need to re-query.
 
+`PaidInvoiceEvent` also carries `providerCustomerId` and `paymentMethodId` (v0.9.0), so a listener can act on a card the payment kept — filing it against the party it belongs to, for instance — without re-reading the payment and calling the provider. Both are **nullable and "when present", not a guarantee**: five paths fire `onInvoicePaid`, and a manually recorded payment or an e-transfer confirmation has no card at all. The recurring auto-charge path knows the card but does not yet pass it here.
+
 ### Transactions
 
 `ITransactionManager.runInTransaction(fn)` gives the callback a `TransactionRepositories` bag with all repositories bound to the same ORM transaction. The package uses this internally when recording payments and mutating totals.
@@ -1523,6 +1647,8 @@ Two database constraints are load-bearing wherever you are coming from, because
 |--------|------|-------------|
 | `paymentEventListenerInstance` | `IPaymentEventListener` | Domain callbacks — see [Event Listeners](#event-listeners). Only `onInvoicePaid` is required. |
 | `recurringChargeOptionsResolverInstance` | `IRecurringChargeOptionsResolver` | Supplies `gatewayOptions` for each renewal charge — see [Per-charge gateway options for renewals](#per-charge-gateway-options-for-renewals). Absent, renewals charge as before; a resolver that throws degrades to charging without options rather than failing the renewal. |
+| `paymentMethodPolicyInstance` | `IPaymentMethodPolicy` | Decides whether a card may become a customer's default — see [Deciding which cards may become the default](#deciding-which-cards-may-become-the-default). Absent, every path behaves as before. A policy that throws, rejects or times out is treated as a **refusal**. |
+| `paymentMethodPolicyTimeoutMs` | `number` | How long `mayBecomeDefault` may take before the answer is treated as a refusal. Default `5000`. The only timeout in the package. |
 | `webhook` | `{ errorReporter? }` | `webhook.errorReporter` is called with anything a webhook handler throws. Route it somewhere you will see it: since v0.5.0 a failed handler answers 500 and Stripe retries for ~3 days. |
 | `tax` | `{ requireExplicit? }` | See [Tax](#tax). Set `tax.requireExplicit` if you bill in more than one jurisdiction. |
 | `features` | see below | Feature flags. Enabling one without its backing repository throws at boot. |
@@ -1600,6 +1726,8 @@ import {
   TRANSACTION_MANAGER,
   PAYMENT_EVENT_LISTENER,
   RECURRING_CHARGE_OPTIONS_RESOLVER,
+  PAYMENT_METHOD_POLICY,
+  PAYMENT_METHOD_POLICY_TIMEOUT,
   PAYMENT_EMAIL_SENDER,
   PAYMENT_CLIENT_RESOLVER,
   PAYMENT_EMAIL_BRANDING_RESOLVER,
@@ -1648,6 +1776,7 @@ All exceptions extend `PaymentException` (a plain `Error` subclass) with a stabl
 | `PaymentIntentOperationNotSupportedException` | `PAYMENT_INTENT_OPERATION_NOT_SUPPORTED` |
 | `InvalidTaxConfigurationException` | `INVALID_TAX_CONFIGURATION` |
 | `PaymentMethodNotOwnedException` | `PAYMENT_METHOD_NOT_OWNED` |
+| `PaymentMethodDefaultRefusedException` | `PAYMENT_METHOD_DEFAULT_REFUSED` |
 | `PaymentMethodOperationNotSupportedException` | `PAYMENT_METHOD_OPERATION_NOT_SUPPORTED` |
 | `NoChargeablePaymentMethodException` | `NO_CHARGEABLE_PAYMENT_METHOD` |
 

package/dist/constants.d.ts

@@ -9,6 +9,8 @@ export declare const PAYMENT_EVENT_LISTENER: unique symbol;
 export declare const RECURRING_INVOICE_REPOSITORY: unique symbol;
 export declare const PAYMENT_CUSTOMER_REPOSITORY: unique symbol;
 export declare const RECURRING_CHARGE_OPTIONS_RESOLVER: unique symbol;
+export declare const PAYMENT_METHOD_POLICY: unique symbol;
+export declare const PAYMENT_METHOD_POLICY_TIMEOUT: unique symbol;
 export declare const PAYMENT_EMAIL_SENDER: unique symbol;
 export declare const PAYMENT_CLIENT_RESOLVER: unique symbol;
 export declare const PAYMENT_EMAIL_BRANDING_RESOLVER: unique symbol;

package/dist/constants.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PAYMENT_SERVICE = exports.TAX_OPTIONS = exports.E_TRANSFER_CODE_PREFIX = exports.DEFAULT_CURRENCY = exports.WEBHOOK_ERROR_REPORTER = exports.PAYMENT_EMAIL_TEMPLATE_RENDERER = exports.PAYMENT_EMAIL_BRANDING_RESOLVER = exports.PAYMENT_CLIENT_RESOLVER = exports.PAYMENT_EMAIL_SENDER = exports.RECURRING_CHARGE_OPTIONS_RESOLVER = exports.PAYMENT_CUSTOMER_REPOSITORY = exports.RECURRING_INVOICE_REPOSITORY = exports.PAYMENT_EVENT_LISTENER = exports.TRANSACTION_MANAGER = exports.WEBHOOK_IDEMPOTENCY_REPOSITORY = exports.PAYMENT_CONFIG_REPOSITORY = exports.PAYMENT_PLAN_REPOSITORY = exports.REFUND_REPOSITORY = exports.PAYMENT_REPOSITORY = exports.INVOICE_REPOSITORY = void 0;
+exports.PAYMENT_SERVICE = exports.TAX_OPTIONS = exports.E_TRANSFER_CODE_PREFIX = exports.DEFAULT_CURRENCY = exports.WEBHOOK_ERROR_REPORTER = exports.PAYMENT_EMAIL_TEMPLATE_RENDERER = exports.PAYMENT_EMAIL_BRANDING_RESOLVER = exports.PAYMENT_CLIENT_RESOLVER = exports.PAYMENT_EMAIL_SENDER = exports.PAYMENT_METHOD_POLICY_TIMEOUT = exports.PAYMENT_METHOD_POLICY = exports.RECURRING_CHARGE_OPTIONS_RESOLVER = exports.PAYMENT_CUSTOMER_REPOSITORY = exports.RECURRING_INVOICE_REPOSITORY = exports.PAYMENT_EVENT_LISTENER = exports.TRANSACTION_MANAGER = exports.WEBHOOK_IDEMPOTENCY_REPOSITORY = exports.PAYMENT_CONFIG_REPOSITORY = exports.PAYMENT_PLAN_REPOSITORY = exports.REFUND_REPOSITORY = exports.PAYMENT_REPOSITORY = exports.INVOICE_REPOSITORY = void 0;
 exports.INVOICE_REPOSITORY = Symbol('IInvoiceRepository');
 exports.PAYMENT_REPOSITORY = Symbol('IPaymentRepository');
 exports.REFUND_REPOSITORY = Symbol('IRefundRepository');
@@ -12,6 +12,8 @@ exports.PAYMENT_EVENT_LISTENER = Symbol('IPaymentEventListener');
 exports.RECURRING_INVOICE_REPOSITORY = Symbol('IRecurringInvoiceRepository');
 exports.PAYMENT_CUSTOMER_REPOSITORY = Symbol('IPaymentCustomerRepository');
 exports.RECURRING_CHARGE_OPTIONS_RESOLVER = Symbol('IRecurringChargeOptionsResolver');
+exports.PAYMENT_METHOD_POLICY = Symbol('IPaymentMethodPolicy');
+exports.PAYMENT_METHOD_POLICY_TIMEOUT = Symbol('PaymentMethodPolicyTimeout');
 exports.PAYMENT_EMAIL_SENDER = Symbol('IPaymentEmailSender');
 exports.PAYMENT_CLIENT_RESOLVER = Symbol('IPaymentClientResolver');
 exports.PAYMENT_EMAIL_BRANDING_RESOLVER = Symbol('IPaymentEmailBrandingResolver');

package/dist/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,kBAAkB,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC;AAClD,QAAA,kBAAkB,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC;AAClD,QAAA,iBAAiB,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAChD,QAAA,uBAAuB,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAC3D,QAAA,yBAAyB,GAAG,MAAM,CAAC,0BAA0B,CAAC,CAAC;AAC/D,QAAA,8BAA8B,GAAG,MAAM,CAClD,+BAA+B,CAChC,CAAC;AACW,QAAA,mBAAmB,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAC;AACpD,QAAA,sBAAsB,GAAG,MAAM,CAAC,uBAAuB,CAAC,CAAC;AACzD,QAAA,4BAA4B,GAAG,MAAM,CAChD,6BAA6B,CAC9B,CAAC;AACW,QAAA,2BAA2B,GAAG,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAOnE,QAAA,iCAAiC,GAAG,MAAM,CACrD,iCAAiC,CAClC,CAAC;AAGW,QAAA,oBAAoB,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAC;AACrD,QAAA,uBAAuB,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAC3D,QAAA,+BAA+B,GAAG,MAAM,CACnD,+BAA+B,CAChC,CAAC;AACW,QAAA,+BAA+B,GAAG,MAAM,CACnD,+BAA+B,CAChC,CAAC;AAGW,QAAA,sBAAsB,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAAC;AAGxD,QAAA,gBAAgB,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAC7C,QAAA,sBAAsB,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAGvD,QAAA,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;AAYnC,QAAA,eAAe,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":";;;AAAa,QAAA,kBAAkB,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC;AAClD,QAAA,kBAAkB,GAAG,MAAM,CAAC,oBAAoB,CAAC,CAAC;AAClD,QAAA,iBAAiB,GAAG,MAAM,CAAC,mBAAmB,CAAC,CAAC;AAChD,QAAA,uBAAuB,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAC3D,QAAA,yBAAyB,GAAG,MAAM,CAAC,0BAA0B,CAAC,CAAC;AAC/D,QAAA,8BAA8B,GAAG,MAAM,CAClD,+BAA+B,CAChC,CAAC;AACW,QAAA,mBAAmB,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAC;AACpD,QAAA,sBAAsB,GAAG,MAAM,CAAC,uBAAuB,CAAC,CAAC;AACzD,QAAA,4BAA4B,GAAG,MAAM,CAChD,6BAA6B,CAC9B,CAAC;AACW,QAAA,2BAA2B,GAAG,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAOnE,QAAA,iCAAiC,GAAG,MAAM,CACrD,iCAAiC,CAClC,CAAC;AASW,QAAA,qBAAqB,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAAC;AAOvD,QAAA,6BAA6B,GAAG,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAGrE,QAAA,oBAAoB,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAC;AACrD,QAAA,uBAAuB,GAAG,MAAM,CAAC,wBAAwB,CAAC,CAAC;AAC3D,QAAA,+BAA+B,GAAG,MAAM,CACnD,+BAA+B,CAChC,CAAC;AACW,QAAA,+BAA+B,GAAG,MAAM,CACnD,+BAA+B,CAChC,CAAC;AAGW,QAAA,sBAAsB,GAAG,MAAM,CAAC,sBAAsB,CAAC,CAAC;AAGxD,QAAA,gBAAgB,GAAG,MAAM,CAAC,iBAAiB,CAAC,CAAC;AAC7C,QAAA,sBAAsB,GAAG,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAGvD,QAAA,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;AAYnC,QAAA,eAAe,GAAG,MAAM,CAAC,gBAAgB,CAAC,CAAC"}

package/dist/exceptions/index.d.ts

@@ -50,6 +50,9 @@ export declare class InvalidTaxConfigurationException extends PaymentException {
 export declare class PaymentMethodNotOwnedException extends PaymentException {
     constructor(message: string);
 }
+export declare class PaymentMethodDefaultRefusedException extends PaymentException {
+    constructor(message: string);
+}
 export declare class PaymentMethodOperationNotSupportedException extends PaymentException {
     constructor(message: string);
 }

package/dist/exceptions/index.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.NoChargeablePaymentMethodException = exports.PaymentMethodOperationNotSupportedException = exports.PaymentMethodNotOwnedException = exports.InvalidTaxConfigurationException = exports.PaymentIntentOperationNotSupportedException = exports.PaymentIntentNotCancellableException = exports.PaymentIntentNotReusableException = exports.PublishableKeyNotConfiguredException = exports.UniqueConstraintViolationException = exports.InvalidRecurringInvoiceStateException = exports.InvalidPaymentStateException = exports.RefundNotAllowedException = exports.InvoiceNumberExhaustedException = exports.InvoiceNotPayableException = exports.DuplicatePaymentException = exports.PaymentGatewayException = exports.PaymentAmountExceededException = exports.InvalidInvoiceStateException = exports.PaymentException = void 0;
+exports.NoChargeablePaymentMethodException = exports.PaymentMethodOperationNotSupportedException = exports.PaymentMethodDefaultRefusedException = exports.PaymentMethodNotOwnedException = exports.InvalidTaxConfigurationException = exports.PaymentIntentOperationNotSupportedException = exports.PaymentIntentNotCancellableException = exports.PaymentIntentNotReusableException = exports.PublishableKeyNotConfiguredException = exports.UniqueConstraintViolationException = exports.InvalidRecurringInvoiceStateException = exports.InvalidPaymentStateException = exports.RefundNotAllowedException = exports.InvoiceNumberExhaustedException = exports.InvoiceNotPayableException = exports.DuplicatePaymentException = exports.PaymentGatewayException = exports.PaymentAmountExceededException = exports.InvalidInvoiceStateException = exports.PaymentException = void 0;
 class PaymentException extends Error {
     constructor(message, code) {
         super(message);
@@ -108,6 +108,12 @@ class PaymentMethodNotOwnedException extends PaymentException {
     }
 }
 exports.PaymentMethodNotOwnedException = PaymentMethodNotOwnedException;
+class PaymentMethodDefaultRefusedException extends PaymentException {
+    constructor(message) {
+        super(message, 'PAYMENT_METHOD_DEFAULT_REFUSED');
+    }
+}
+exports.PaymentMethodDefaultRefusedException = PaymentMethodDefaultRefusedException;
 class PaymentMethodOperationNotSupportedException extends PaymentException {
     constructor(message) {
         super(message, 'PAYMENT_METHOD_OPERATION_NOT_SUPPORTED');

package/dist/exceptions/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/exceptions/index.ts"],"names":[],"mappings":";;;AAQA,MAAa,gBAAiB,SAAQ,KAAK;IAGzC,YAAY,OAAe,EAAE,IAAY;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QAElC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAVD,4CAUC;AAMD,MAAa,4BAA6B,SAAQ,gBAAgB;IAChE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IAC1C,CAAC;CACF;AAJD,oEAIC;AAKD,MAAa,8BAA+B,SAAQ,gBAAgB;IAClE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;IAC5C,CAAC;CACF;AAJD,wEAIC;AAKD,MAAa,uBAAwB,SAAQ,gBAAgB;IAC3D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IAC1C,CAAC;CACF;AAJD,0DAIC;AAgBD,MAAa,yBAA0B,SAAQ,gBAAgB;IAC7D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACtC,CAAC;CACF;AAJD,8DAIC;AAMD,MAAa,0BAA2B,SAAQ,gBAAgB;IAC9D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IACxC,CAAC;CACF;AAJD,gEAIC;AAMD,MAAa,+BAAgC,SAAQ,gBAAgB;IACnE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;IAC7C,CAAC;CACF;AAJD,0EAIC;AAMD,MAAa,yBAA0B,SAAQ,gBAAgB;IAC7D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IACvC,CAAC;CACF;AAJD,8DAIC;AAMD,MAAa,4BAA6B,SAAQ,gBAAgB;IAChE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IAC1C,CAAC;CACF;AAJD,oEAIC;AAMD,MAAa,qCAAsC,SAAQ,gBAAgB;IACzE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;IACpD,CAAC;CACF;AAJD,sFAIC;AASD,MAAa,kCAAmC,SAAQ,gBAAgB;IACtE,YAAY,UAAkB,6BAA6B;QACzD,KAAK,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;IAChD,CAAC;CACF;AAJD,gFAIC;AAWD,MAAa,oCAAqC,SAAQ,gBAAgB;IACxE,YACE,UAAkB,+CAA+C;QAC/D,mEAAmE;QACnE,yBAAyB;QAE3B,KAAK,CAAC,OAAO,EAAE,gCAAgC,CAAC,CAAC;IACnD,CAAC;CACF;AARD,oFAQC;AAWD,MAAa,iCAAkC,SAAQ,gBAAgB;IACrE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;IAChD,CAAC;CACF;AAJD,8EAIC;AAUD,MAAa,oCAAqC,SAAQ,gBAAgB;IACxE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,gCAAgC,CAAC,CAAC;IACnD,CAAC;CACF;AAJD,oFAIC;AASD,MAAa,2CAA4C,SAAQ,gBAAgB;IAC/E,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,wCAAwC,CAAC,CAAC;IAC3D,CAAC;CACF;AAJD,kGAIC;AAeD,MAAa,gCAAiC,SAAQ,gBAAgB;IACpE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAC9C,CAAC;CACF;AAJD,4EAIC;AAcD,MAAa,8BAA+B,SAAQ,gBAAgB;IAClE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;IAC7C,CAAC;CACF;AAJD,wEAIC;AAWD,MAAa,2CAA4C,SAAQ,gBAAgB;IAC/E,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,wCAAwC,CAAC,CAAC;IAC3D,CAAC;CACF;AAJD,kGAIC;AAYD,MAAa,kCAAmC,SAAQ,gBAAgB;IACtE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;IACjD,CAAC;CACF;AAJD,gFAIC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/exceptions/index.ts"],"names":[],"mappings":";;;AAQA,MAAa,gBAAiB,SAAQ,KAAK;IAGzC,YAAY,OAAe,EAAE,IAAY;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QAElC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACpD,CAAC;CACF;AAVD,4CAUC;AAMD,MAAa,4BAA6B,SAAQ,gBAAgB;IAChE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IAC1C,CAAC;CACF;AAJD,oEAIC;AAKD,MAAa,8BAA+B,SAAQ,gBAAgB;IAClE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,yBAAyB,CAAC,CAAC;IAC5C,CAAC;CACF;AAJD,wEAIC;AAKD,MAAa,uBAAwB,SAAQ,gBAAgB;IAC3D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IAC1C,CAAC;CACF;AAJD,0DAIC;AAgBD,MAAa,yBAA0B,SAAQ,gBAAgB;IAC7D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,mBAAmB,CAAC,CAAC;IACtC,CAAC;CACF;AAJD,8DAIC;AAMD,MAAa,0BAA2B,SAAQ,gBAAgB;IAC9D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IACxC,CAAC;CACF;AAJD,gEAIC;AAMD,MAAa,+BAAgC,SAAQ,gBAAgB;IACnE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;IAC7C,CAAC;CACF;AAJD,0EAIC;AAMD,MAAa,yBAA0B,SAAQ,gBAAgB;IAC7D,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,oBAAoB,CAAC,CAAC;IACvC,CAAC;CACF;AAJD,8DAIC;AAMD,MAAa,4BAA6B,SAAQ,gBAAgB;IAChE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,uBAAuB,CAAC,CAAC;IAC1C,CAAC;CACF;AAJD,oEAIC;AAMD,MAAa,qCAAsC,SAAQ,gBAAgB;IACzE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,iCAAiC,CAAC,CAAC;IACpD,CAAC;CACF;AAJD,sFAIC;AASD,MAAa,kCAAmC,SAAQ,gBAAgB;IACtE,YAAY,UAAkB,6BAA6B;QACzD,KAAK,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;IAChD,CAAC;CACF;AAJD,gFAIC;AAWD,MAAa,oCAAqC,SAAQ,gBAAgB;IACxE,YACE,UAAkB,+CAA+C;QAC/D,mEAAmE;QACnE,yBAAyB;QAE3B,KAAK,CAAC,OAAO,EAAE,gCAAgC,CAAC,CAAC;IACnD,CAAC;CACF;AARD,oFAQC;AAWD,MAAa,iCAAkC,SAAQ,gBAAgB;IACrE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,6BAA6B,CAAC,CAAC;IAChD,CAAC;CACF;AAJD,8EAIC;AAUD,MAAa,oCAAqC,SAAQ,gBAAgB;IACxE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,gCAAgC,CAAC,CAAC;IACnD,CAAC;CACF;AAJD,oFAIC;AASD,MAAa,2CAA4C,SAAQ,gBAAgB;IAC/E,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,wCAAwC,CAAC,CAAC;IAC3D,CAAC;CACF;AAJD,kGAIC;AAeD,MAAa,gCAAiC,SAAQ,gBAAgB;IACpE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,2BAA2B,CAAC,CAAC;IAC9C,CAAC;CACF;AAJD,4EAIC;AAcD,MAAa,8BAA+B,SAAQ,gBAAgB;IAClE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;IAC7C,CAAC;CACF;AAJD,wEAIC;AAkBD,MAAa,oCAAqC,SAAQ,gBAAgB;IACxE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,gCAAgC,CAAC,CAAC;IACnD,CAAC;CACF;AAJD,oFAIC;AAWD,MAAa,2CAA4C,SAAQ,gBAAgB;IAC/E,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,wCAAwC,CAAC,CAAC;IAC3D,CAAC;CACF;AAJD,kGAIC;AAYD,MAAa,kCAAmC,SAAQ,gBAAgB;IACtE,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,EAAE,8BAA8B,CAAC,CAAC;IACjD,CAAC;CACF;AAJD,gFAIC"}

package/dist/gateways/payment-gateway.interface.d.ts

@@ -11,6 +11,10 @@ export interface PaymentGateway {
         metadata?: Record<string, string>;
         expiresAt?: Date;
         gatewayOptions?: Record<string, unknown>;
+        savePaymentMethod?: {
+            providerCustomerId: string;
+            adoptAsDefault?: boolean;
+        };
         idempotencyKey?: string;
     }): Promise<{
         checkoutUrl: string;

package/dist/gateways/recurring-payment-gateway.interface.d.ts

@@ -30,6 +30,7 @@ export interface RecurringPaymentGateway {
         cancelUrl: string;
         metadata?: Record<string, string>;
         currency?: string;
+        adoptAsDefault?: boolean;
     }): Promise<{
         setupUrl: string;
         providerSetupId: string;
@@ -41,6 +42,19 @@ export interface RecurringPaymentGateway {
         paymentMethodId: string | null;
         madeDefault: boolean;
     }>;
+    resolveSetupPaymentMethod?(params: {
+        setupIntentId: string;
+    }): Promise<{
+        paymentMethodId: string | null;
+        adoptAsDefault: boolean;
+    }>;
+    adoptPaymentMethod?(params: {
+        providerCustomerId: string;
+        paymentMethodId: string;
+    }): Promise<{
+        paymentMethodId: string | null;
+        madeDefault: boolean;
+    }>;
     listPaymentMethods?(params: {
         providerCustomerId: string;
     }): Promise<SavedPaymentMethod[]>;

package/dist/gateways/stripe/stripe-webhook.controller.d.ts

@@ -5,7 +5,7 @@ import type { Request } from 'express';
 import { GatewayRegistryService } from '../gateway-registry.service';
 import { PaymentService } from '../../services/payment.service';
 import { RefundService } from '../../services/refund.service';
-import { CustomerService } from '../../services/customer.service';
+import { PaymentMethodService } from '../../services/payment-method.service';
 export declare const PAYMENTS_WEBHOOK = "payments_webhook";
 export declare const PaymentsWebhook: () => <TFunction extends Function, Y>(target: TFunction | object, propertyKey?: string | symbol, descriptor?: TypedPropertyDescriptor<Y>) => void;
 export declare class StripeWebhookController implements OnModuleInit {
@@ -13,15 +13,17 @@ export declare class StripeWebhookController implements OnModuleInit {
     private readonly gatewayRegistry;
     private readonly paymentService;
     private readonly refundService;
-    private readonly customerService;
+    private readonly paymentMethodService;
     private readonly logger;
     private errorReporter;
-    constructor(moduleRef: ModuleRef, gatewayRegistry: GatewayRegistryService, paymentService: PaymentService, refundService: RefundService, customerService: CustomerService);
+    constructor(moduleRef: ModuleRef, gatewayRegistry: GatewayRegistryService, paymentService: PaymentService, refundService: RefundService, paymentMethodService: PaymentMethodService);
     onModuleInit(): void;
     handleStripeWebhook(req: RawBodyRequest<Request>): Promise<{
         received: boolean;
     }>;
     private routeEvent;
     private adoptSetupPaymentMethod;
+    private adoptPaymentMethod;
+    private adopt;
     private handleWithRetry;
 }

package/dist/gateways/stripe/stripe-webhook.controller.js

@@ -19,7 +19,7 @@ const core_1 = require("@nestjs/core");
 const gateway_registry_service_1 = require("../gateway-registry.service");
 const payment_service_1 = require("../../services/payment.service");
 const refund_service_1 = require("../../services/refund.service");
-const customer_service_1 = require("../../services/customer.service");
+const payment_method_service_1 = require("../../services/payment-method.service");
 const constants_1 = require("../../constants");
 const MAX_RETRIES = 3;
 const RETRY_DELAY_MS = 2000;
@@ -27,12 +27,12 @@ exports.PAYMENTS_WEBHOOK = 'payments_webhook';
 const PaymentsWebhook = () => (0, common_1.applyDecorators)((0, common_1.SetMetadata)(exports.PAYMENTS_WEBHOOK, true), (0, common_1.SetMetadata)('isPublic', true), (0, common_1.SetMetadata)('skipTenant', true));
 exports.PaymentsWebhook = PaymentsWebhook;
 let StripeWebhookController = StripeWebhookController_1 = class StripeWebhookController {
-    constructor(moduleRef, gatewayRegistry, paymentService, refundService, customerService) {
+    constructor(moduleRef, gatewayRegistry, paymentService, refundService, paymentMethodService) {
         this.moduleRef = moduleRef;
         this.gatewayRegistry = gatewayRegistry;
         this.paymentService = paymentService;
         this.refundService = refundService;
-        this.customerService = customerService;
+        this.paymentMethodService = paymentMethodService;
         this.logger = new common_1.Logger(StripeWebhookController_1.name);
         this.errorReporter = null;
     }
@@ -99,6 +99,7 @@ let StripeWebhookController = StripeWebhookController_1 = class StripeWebhookCon
         switch (event.type) {
             case 'payment.succeeded':
                 await this.handleWithRetry(() => this.paymentService.handlePaymentSucceeded(event), event);
+                await this.adoptPaymentMethod(event);
                 break;
             case 'payment.failed':
                 await this.paymentService.handlePaymentFailed(event);
@@ -136,31 +137,49 @@ let StripeWebhookController = StripeWebhookController_1 = class StripeWebhookCon
                 `nothing to record.`);
             return;
         }
-        if (!(await this.customerService.knowsProviderCustomer(providerCustomerId))) {
-            this.logger.log(`Setup succeeded (event ${event.eventId}) for provider customer ` +
-                `${providerCustomerId}, which this deployment has no record of. ` +
-                `Most likely another environment sharing this provider account. ` +
-                `Skipped.`);
+        await this.adopt(event, { providerCustomerId, setupIntentId }, 'setup');
+    }
+    async adoptPaymentMethod(event) {
+        const providerCustomerId = event.providerData?.customerId;
+        const paymentMethodId = event.providerData?.savedPaymentMethodId;
+        if (typeof providerCustomerId !== 'string' ||
+            typeof paymentMethodId !== 'string') {
             return;
         }
+        if (event.providerData?.adoptSavedPaymentMethod !== true) {
+            this.logger.log(`A card was kept during payment ${event.providerPaymentId} ` +
+                `(event ${event.eventId}) without asking for it to become the ` +
+                `default. Attached and chargeable by id; the default is unchanged.`);
+            return;
+        }
+        await this.adopt(event, { providerCustomerId, paymentMethodId }, 'payment');
+    }
+    async adopt(event, params, kind) {
         try {
-            const gateway = this.gatewayRegistry.getRecurring('stripe');
-            if (!gateway.adoptSetupPaymentMethod) {
-                this.logger.warn(`Gateway "stripe" does not implement adoptSetupPaymentMethod — the saved ` +
-                    `card will not be usable for auto-charge.`);
+            const result = await this.paymentMethodService.adoptWebhookPaymentMethod({
+                ...params,
+                provider: 'stripe',
+            });
+            if (!result) {
+                this.logger.log(`A card was saved for provider customer ${params.providerCustomerId} ` +
+                    `(event ${event.eventId}), which this deployment has no record of, ` +
+                    `or which no gateway here can adopt. Skipped.`);
                 return;
             }
-            const { paymentMethodId, madeDefault } = await gateway.adoptSetupPaymentMethod({
-                providerCustomerId,
-                setupIntentId,
-            });
-            this.logger.log(`Payment method setup succeeded (event ${event.eventId}): ` +
-                `method=${paymentMethodId ?? 'none'}, ` +
-                `${madeDefault ? 'set as default' : 'existing default kept'}`);
+            this.logger.log(`Payment method recorded from a ${kind} event (${event.eventId}): ` +
+                `method=${result.paymentMethodId ?? 'none'}, ` +
+                `${result.madeDefault ? 'set as default' : 'existing default kept'}`);
         }
         catch (error) {
-            this.logger.error(`Failed to record the payment method from setup event ${event.eventId}: ` +
+            this.logger.error(`Failed to record the payment method from ${kind} event ${event.eventId}: ` +
                 `${error instanceof Error ? error.message : String(error)}`, error instanceof Error ? error.stack : undefined);
+            this.errorReporter?.(error, {
+                tags: {
+                    webhookEventType: event.type,
+                    webhookEventId: event.eventId,
+                    providerCustomerId: params.providerCustomerId,
+                },
+            });
         }
     }
     async handleWithRetry(handler, event) {
@@ -197,6 +216,6 @@ exports.StripeWebhookController = StripeWebhookController = StripeWebhookControl
         gateway_registry_service_1.GatewayRegistryService,
         payment_service_1.PaymentService,
         refund_service_1.RefundService,
-        customer_service_1.CustomerService])
+        payment_method_service_1.PaymentMethodService])
 ], StripeWebhookController);
 //# sourceMappingURL=stripe-webhook.controller.js.map