@darraghor/nest-backend-libs 5.7.5 → 6.0.0

package/dist/stripe-payments/entities/stripe-payment-event.entity.js

@@ -0,0 +1,101 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { ApiProperty, ApiPropertyOptional } from "@nestjs/swagger";
+import { Column, CreateDateColumn, Entity, Index, PrimaryGeneratedColumn, UpdateDateColumn, } from "typeorm";
+let StripeCheckoutEvent = class StripeCheckoutEvent {
+    id;
+    stripeEventId;
+    stripeObjectId;
+    eventType;
+    clientReferenceId;
+    status;
+    stripeData;
+    errorMessage;
+    processingStartedAt;
+    processedAt;
+    processingAttempts;
+    createdDate;
+    updatedDate;
+    get stripeDataAsString() {
+        return JSON.stringify(this.stripeData, undefined, 4);
+    }
+};
+__decorate([
+    PrimaryGeneratedColumn(),
+    ApiProperty(),
+    __metadata("design:type", Number)
+], StripeCheckoutEvent.prototype, "id", void 0);
+__decorate([
+    Column({ length: 255 }),
+    ApiProperty(),
+    __metadata("design:type", String)
+], StripeCheckoutEvent.prototype, "stripeEventId", void 0);
+__decorate([
+    Column({ length: 255 }),
+    ApiProperty(),
+    __metadata("design:type", String)
+], StripeCheckoutEvent.prototype, "stripeObjectId", void 0);
+__decorate([
+    Column({ length: 128 }),
+    ApiProperty(),
+    __metadata("design:type", String)
+], StripeCheckoutEvent.prototype, "eventType", void 0);
+__decorate([
+    Column({ nullable: true, length: 255 }),
+    ApiPropertyOptional(),
+    __metadata("design:type", String)
+], StripeCheckoutEvent.prototype, "clientReferenceId", void 0);
+__decorate([
+    Column({ length: 32, default: "received" }),
+    ApiProperty(),
+    __metadata("design:type", String)
+], StripeCheckoutEvent.prototype, "status", void 0);
+__decorate([
+    Column({ type: "jsonb" }),
+    __metadata("design:type", Object)
+], StripeCheckoutEvent.prototype, "stripeData", void 0);
+__decorate([
+    Column({ nullable: true, type: "text" }),
+    __metadata("design:type", String)
+], StripeCheckoutEvent.prototype, "errorMessage", void 0);
+__decorate([
+    Column({ nullable: true, type: "timestamptz" }),
+    __metadata("design:type", Date)
+], StripeCheckoutEvent.prototype, "processingStartedAt", void 0);
+__decorate([
+    Column({ nullable: true, type: "timestamptz" }),
+    __metadata("design:type", Date)
+], StripeCheckoutEvent.prototype, "processedAt", void 0);
+__decorate([
+    Column({ default: 0 }),
+    __metadata("design:type", Number)
+], StripeCheckoutEvent.prototype, "processingAttempts", void 0);
+__decorate([
+    CreateDateColumn(),
+    ApiProperty({ format: "date-time" }),
+    __metadata("design:type", Date)
+], StripeCheckoutEvent.prototype, "createdDate", void 0);
+__decorate([
+    UpdateDateColumn(),
+    __metadata("design:type", Date)
+], StripeCheckoutEvent.prototype, "updatedDate", void 0);
+__decorate([
+    ApiProperty({ type: String, name: "stripeDataAsString" }),
+    __metadata("design:type", String),
+    __metadata("design:paramtypes", [])
+], StripeCheckoutEvent.prototype, "stripeDataAsString", null);
+StripeCheckoutEvent = __decorate([
+    Entity("stripe_payment_event"),
+    Index(["stripeEventId"], { unique: true }),
+    Index(["stripeObjectId", "eventType"]),
+    Index(["status", "processingStartedAt"])
+], StripeCheckoutEvent);
+export { StripeCheckoutEvent };
+//# sourceMappingURL=stripe-payment-event.entity.js.map

package/dist/stripe-payments/entities/stripe-payment-event.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe-payment-event.entity.js","sourceRoot":"","sources":["../../../src/stripe-payments/entities/stripe-payment-event.entity.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAC,WAAW,EAAE,mBAAmB,EAAC,MAAM,iBAAiB,CAAC;AACjE,OAAO,EACH,MAAM,EACN,gBAAgB,EAChB,MAAM,EACN,KAAK,EACL,sBAAsB,EACtB,gBAAgB,GACnB,MAAM,SAAS,CAAC;AAMV,IAAM,mBAAmB,GAAzB,MAAM,mBAAmB;IAG5B,EAAE,CAAU;IAIZ,aAAa,CAAU;IAIvB,cAAc,CAAU;IAIxB,SAAS,CAAU;IAInB,iBAAiB,CAAU;IAI3B,MAAM,CAAsD;IAG5D,UAAU,CAAW;IAGrB,YAAY,CAAU;IAGtB,mBAAmB,CAAQ;IAG3B,WAAW,CAAQ;IAGnB,kBAAkB,CAAU;IAI5B,WAAW,CAAQ;IAGnB,WAAW,CAAQ;IAEnB,IACI,kBAAkB;QAClB,OAAO,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;IACzD,CAAC;CACJ,CAAA;AAhDG;IAFC,sBAAsB,EAAE;IACxB,WAAW,EAAE;;+CACF;AAIZ;IAFC,MAAM,CAAC,EAAC,MAAM,EAAE,GAAG,EAAC,CAAC;IACrB,WAAW,EAAE;;0DACS;AAIvB;IAFC,MAAM,CAAC,EAAC,MAAM,EAAE,GAAG,EAAC,CAAC;IACrB,WAAW,EAAE;;2DACU;AAIxB;IAFC,MAAM,CAAC,EAAC,MAAM,EAAE,GAAG,EAAC,CAAC;IACrB,WAAW,EAAE;;sDACK;AAInB;IAFC,MAAM,CAAC,EAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAC,CAAC;IACrC,mBAAmB,EAAE;;8DACK;AAI3B;IAFC,MAAM,CAAC,EAAC,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,UAAU,EAAC,CAAC;IACzC,WAAW,EAAE;;mDAC8C;AAG5D;IADC,MAAM,CAAC,EAAC,IAAI,EAAE,OAAO,EAAC,CAAC;;uDACH;AAGrB;IADC,MAAM,CAAC,EAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAC,CAAC;;yDACjB;AAGtB;IADC,MAAM,CAAC,EAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAC,CAAC;8BACxB,IAAI;gEAAC;AAG3B;IADC,MAAM,CAAC,EAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAC,CAAC;8BAChC,IAAI;wDAAC;AAGnB;IADC,MAAM,CAAC,EAAC,OAAO,EAAE,CAAC,EAAC,CAAC;;+DACO;AAI5B;IAFC,gBAAgB,EAAE;IAClB,WAAW,CAAC,EAAC,MAAM,EAAE,WAAW,EAAC,CAAC;8BACrB,IAAI;wDAAC;AAGnB;IADC,gBAAgB,EAAE;8BACL,IAAI;wDAAC;AAEnB;IAAC,WAAW,CAAC,EAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAC,CAAC;;;6DAGvD;AAlDQ,mBAAmB;IAJ/B,MAAM,CAAC,sBAAsB,CAAC;IAC9B,KAAK,CAAC,CAAC,eAAe,CAAC,EAAE,EAAC,MAAM,EAAE,IAAI,EAAC,CAAC;IACxC,KAAK,CAAC,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC;IACtC,KAAK,CAAC,CAAC,QAAQ,EAAE,qBAAqB,CAAC,CAAC;GAC5B,mBAAmB,CAmD/B"}

package/dist/stripe-payments/entities/stripe-payment-state.entity.d.ts

@@ -0,0 +1,9 @@
+export declare class StripePaymentState {
+    id: number;
+    paymentSystemTransactionId: string;
+    lastStripeEventId: string;
+    lastStripeEventCreatedAt: Date;
+    status: string;
+    createdDate: Date;
+    updatedDate: Date;
+}

package/dist/stripe-payments/entities/stripe-payment-state.entity.js

@@ -0,0 +1,53 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Column, CreateDateColumn, Entity, Index, PrimaryGeneratedColumn, UpdateDateColumn, } from "typeorm";
+let StripePaymentState = class StripePaymentState {
+    id;
+    paymentSystemTransactionId;
+    lastStripeEventId;
+    lastStripeEventCreatedAt;
+    status;
+    createdDate;
+    updatedDate;
+};
+__decorate([
+    PrimaryGeneratedColumn(),
+    __metadata("design:type", Number)
+], StripePaymentState.prototype, "id", void 0);
+__decorate([
+    Column({ length: 255 }),
+    __metadata("design:type", String)
+], StripePaymentState.prototype, "paymentSystemTransactionId", void 0);
+__decorate([
+    Column({ length: 255 }),
+    __metadata("design:type", String)
+], StripePaymentState.prototype, "lastStripeEventId", void 0);
+__decorate([
+    Column({ type: "timestamptz" }),
+    __metadata("design:type", Date)
+], StripePaymentState.prototype, "lastStripeEventCreatedAt", void 0);
+__decorate([
+    Column({ length: 64 }),
+    __metadata("design:type", String)
+], StripePaymentState.prototype, "status", void 0);
+__decorate([
+    CreateDateColumn(),
+    __metadata("design:type", Date)
+], StripePaymentState.prototype, "createdDate", void 0);
+__decorate([
+    UpdateDateColumn(),
+    __metadata("design:type", Date)
+], StripePaymentState.prototype, "updatedDate", void 0);
+StripePaymentState = __decorate([
+    Entity("stripe_payment_state"),
+    Index(["paymentSystemTransactionId"], { unique: true })
+], StripePaymentState);
+export { StripePaymentState };
+//# sourceMappingURL=stripe-payment-state.entity.js.map

package/dist/stripe-payments/entities/stripe-payment-state.entity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe-payment-state.entity.js","sourceRoot":"","sources":["../../../src/stripe-payments/entities/stripe-payment-state.entity.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EACH,MAAM,EACN,gBAAgB,EAChB,MAAM,EACN,KAAK,EACL,sBAAsB,EACtB,gBAAgB,GACnB,MAAM,SAAS,CAAC;AAIV,IAAM,kBAAkB,GAAxB,MAAM,kBAAkB;IAE3B,EAAE,CAAU;IAGZ,0BAA0B,CAAU;IAGpC,iBAAiB,CAAU;IAG3B,wBAAwB,CAAQ;IAGhC,MAAM,CAAU;IAGhB,WAAW,CAAQ;IAGnB,WAAW,CAAQ;CACtB,CAAA;AAnBG;IADC,sBAAsB,EAAE;;8CACb;AAGZ;IADC,MAAM,CAAC,EAAC,MAAM,EAAE,GAAG,EAAC,CAAC;;sEACc;AAGpC;IADC,MAAM,CAAC,EAAC,MAAM,EAAE,GAAG,EAAC,CAAC;;6DACK;AAG3B;IADC,MAAM,CAAC,EAAC,IAAI,EAAE,aAAa,EAAC,CAAC;8BACH,IAAI;oEAAC;AAGhC;IADC,MAAM,CAAC,EAAC,MAAM,EAAE,EAAE,EAAC,CAAC;;kDACL;AAGhB;IADC,gBAAgB,EAAE;8BACL,IAAI;uDAAC;AAGnB;IADC,gBAAgB,EAAE;8BACL,IAAI;uDAAC;AApBV,kBAAkB;IAF9B,MAAM,CAAC,sBAAsB,CAAC;IAC9B,KAAK,CAAC,CAAC,4BAA4B,CAAC,EAAE,EAAC,MAAM,EAAE,IAAI,EAAC,CAAC;GACzC,kBAAkB,CAqB9B"}

package/dist/stripe-payments/models/secure-checkout.dto.d.ts

@@ -0,0 +1,14 @@
+export declare class StripeCheckoutSessionRequestDto {
+    organisationUuid: string;
+    productKey: string;
+    successFrontendPath: string;
+    cancelFrontendPath?: string;
+}
+export declare class StripeCustomerPortalRequestDto {
+    subscriptionRecordUuid: string;
+    returnUrl: string;
+}
+export declare class StripeEventsQueryDto {
+    skip: number;
+    take: number;
+}

package/dist/stripe-payments/models/secure-checkout.dto.js

@@ -0,0 +1,105 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { ApiProperty, ApiPropertyOptional } from "@nestjs/swagger";
+import { Type } from "class-transformer";
+import { IsInt, IsNotEmpty, IsOptional, IsString, IsUUID, Matches, Max, MaxLength, Min, } from "class-validator";
+const relativePathPattern = /^\/(?!\/)[^\s]*$/;
+export class StripeCheckoutSessionRequestDto {
+    organisationUuid;
+    productKey;
+    successFrontendPath;
+    cancelFrontendPath;
+}
+__decorate([
+    ApiProperty(),
+    IsUUID("4"),
+    __metadata("design:type", String)
+], StripeCheckoutSessionRequestDto.prototype, "organisationUuid", void 0);
+__decorate([
+    ApiProperty({
+        description: "A product key from the server-side Stripe product catalog",
+    }),
+    IsString(),
+    IsNotEmpty(),
+    Matches(/^[a-z0-9][a-z0-9_-]{0,63}$/),
+    __metadata("design:type", String)
+], StripeCheckoutSessionRequestDto.prototype, "productKey", void 0);
+__decorate([
+    ApiProperty({
+        description: "A relative frontend path on the configured application origin",
+    }),
+    IsString(),
+    IsNotEmpty(),
+    MaxLength(200),
+    Matches(relativePathPattern),
+    __metadata("design:type", String)
+], StripeCheckoutSessionRequestDto.prototype, "successFrontendPath", void 0);
+__decorate([
+    ApiPropertyOptional({
+        description: "A relative frontend path on the configured application origin",
+    }),
+    IsOptional(),
+    IsString(),
+    MaxLength(200),
+    Matches(relativePathPattern),
+    __metadata("design:type", String)
+], StripeCheckoutSessionRequestDto.prototype, "cancelFrontendPath", void 0);
+export class StripeCustomerPortalRequestDto {
+    subscriptionRecordUuid;
+    returnUrl;
+}
+__decorate([
+    ApiProperty(),
+    IsUUID("4"),
+    __metadata("design:type", String)
+], StripeCustomerPortalRequestDto.prototype, "subscriptionRecordUuid", void 0);
+__decorate([
+    ApiProperty({
+        description: "A relative frontend path on the configured application origin",
+    }),
+    IsString(),
+    IsNotEmpty(),
+    MaxLength(200),
+    Matches(relativePathPattern),
+    __metadata("design:type", String)
+], StripeCustomerPortalRequestDto.prototype, "returnUrl", void 0);
+export class StripeEventsQueryDto {
+    skip = 0;
+    take = 50;
+}
+__decorate([
+    ApiPropertyOptional({
+        type: Number,
+        default: 0,
+        minimum: 0,
+        maximum: 1000,
+    }),
+    IsOptional(),
+    Type(() => Number),
+    IsInt(),
+    Min(0),
+    Max(1000),
+    __metadata("design:type", Object)
+], StripeEventsQueryDto.prototype, "skip", void 0);
+__decorate([
+    ApiPropertyOptional({
+        type: Number,
+        default: 50,
+        minimum: 1,
+        maximum: 1000,
+    }),
+    IsOptional(),
+    Type(() => Number),
+    IsInt(),
+    Min(1),
+    Max(1000),
+    __metadata("design:type", Object)
+], StripeEventsQueryDto.prototype, "take", void 0);
+//# sourceMappingURL=secure-checkout.dto.js.map

package/dist/stripe-payments/models/secure-checkout.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-checkout.dto.js","sourceRoot":"","sources":["../../../src/stripe-payments/models/secure-checkout.dto.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAC,WAAW,EAAE,mBAAmB,EAAC,MAAM,iBAAiB,CAAC;AACjE,OAAO,EAAC,IAAI,EAAC,MAAM,mBAAmB,CAAC;AACvC,OAAO,EACH,KAAK,EACL,UAAU,EACV,UAAU,EACV,QAAQ,EACR,MAAM,EACN,OAAO,EACP,GAAG,EACH,SAAS,EACT,GAAG,GACN,MAAM,iBAAiB,CAAC;AAEzB,MAAM,mBAAmB,GAAG,kBAAkB,CAAC;AAE/C,MAAM,OAAO,+BAA+B;IAGxC,gBAAgB,CAAU;IAS1B,UAAU,CAAU;IAUpB,mBAAmB,CAAU;IAU7B,kBAAkB,CAAU;CAC/B;AA9BG;IAFC,WAAW,EAAE;IACb,MAAM,CAAC,GAAG,CAAC;;yEACc;AAS1B;IAPC,WAAW,CAAC;QACT,WAAW,EACP,2DAA2D;KAClE,CAAC;IACD,QAAQ,EAAE;IACV,UAAU,EAAE;IACZ,OAAO,CAAC,4BAA4B,CAAC;;mEAClB;AAUpB;IARC,WAAW,CAAC;QACT,WAAW,EACP,+DAA+D;KACtE,CAAC;IACD,QAAQ,EAAE;IACV,UAAU,EAAE;IACZ,SAAS,CAAC,GAAG,CAAC;IACd,OAAO,CAAC,mBAAmB,CAAC;;4EACA;AAU7B;IARC,mBAAmB,CAAC;QACjB,WAAW,EACP,+DAA+D;KACtE,CAAC;IACD,UAAU,EAAE;IACZ,QAAQ,EAAE;IACV,SAAS,CAAC,GAAG,CAAC;IACd,OAAO,CAAC,mBAAmB,CAAC;;2EACD;AAGhC,MAAM,OAAO,8BAA8B;IAGvC,sBAAsB,CAAU;IAUhC,SAAS,CAAU;CACtB;AAXG;IAFC,WAAW,EAAE;IACb,MAAM,CAAC,GAAG,CAAC;;8EACoB;AAUhC;IARC,WAAW,CAAC;QACT,WAAW,EACP,+DAA+D;KACtE,CAAC;IACD,QAAQ,EAAE;IACV,UAAU,EAAE;IACZ,SAAS,CAAC,GAAG,CAAC;IACd,OAAO,CAAC,mBAAmB,CAAC;;iEACV;AAGvB,MAAM,OAAO,oBAAoB;IAY7B,IAAI,GAAG,CAAC,CAAC;IAaT,IAAI,GAAG,EAAE,CAAC;CACb;AAdG;IAXC,mBAAmB,CAAC;QACjB,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,IAAI;KAChB,CAAC;IACD,UAAU,EAAE;IACZ,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,KAAK,EAAE;IACP,GAAG,CAAC,CAAC,CAAC;IACN,GAAG,CAAC,IAAI,CAAC;;kDACD;AAaT;IAXC,mBAAmB,CAAC;QACjB,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,CAAC;QACV,OAAO,EAAE,IAAI;KAChB,CAAC;IACD,UAAU,EAAE;IACZ,IAAI,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,KAAK,EAAE;IACP,GAAG,CAAC,CAAC,CAAC;IACN,GAAG,CAAC,IAAI,CAAC;;kDACA"}

package/dist/stripe-payments/models/secure-payment-response.dto.d.ts

@@ -0,0 +1,7 @@
+export declare class StripeCheckoutSessionResponseDto {
+    stripeSessionId: string;
+    stripeSessionUrl: string;
+}
+export declare class StripeCustomerPortalResponseDto {
+    sessionUrl: string;
+}

package/dist/stripe-payments/models/secure-payment-response.dto.js

@@ -0,0 +1,30 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { ApiProperty } from "@nestjs/swagger";
+export class StripeCheckoutSessionResponseDto {
+    stripeSessionId;
+    stripeSessionUrl;
+}
+__decorate([
+    ApiProperty(),
+    __metadata("design:type", String)
+], StripeCheckoutSessionResponseDto.prototype, "stripeSessionId", void 0);
+__decorate([
+    ApiProperty(),
+    __metadata("design:type", String)
+], StripeCheckoutSessionResponseDto.prototype, "stripeSessionUrl", void 0);
+export class StripeCustomerPortalResponseDto {
+    sessionUrl;
+}
+__decorate([
+    ApiProperty(),
+    __metadata("design:type", String)
+], StripeCustomerPortalResponseDto.prototype, "sessionUrl", void 0);
+//# sourceMappingURL=secure-payment-response.dto.js.map

package/dist/stripe-payments/models/secure-payment-response.dto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-payment-response.dto.js","sourceRoot":"","sources":["../../../src/stripe-payments/models/secure-payment-response.dto.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAC,WAAW,EAAC,MAAM,iBAAiB,CAAC;AAE5C,MAAM,OAAO,gCAAgC;IAEzC,eAAe,CAAU;IAGzB,gBAAgB,CAAU;CAC7B;AAJG;IADC,WAAW,EAAE;;yEACW;AAGzB;IADC,WAAW,EAAE;;0EACY;AAG9B,MAAM,OAAO,+BAA+B;IAExC,UAAU,CAAU;CACvB;AADG;IADC,WAAW,EAAE;;mEACM"}

package/dist/stripe-payments/services/default-stripe-payments-entitlement-store.d.ts

@@ -0,0 +1,12 @@
+import { StripePaymentsEntitlement, StripePaymentsEntitlementInput, StripePaymentsEntitlementStore, StripePaymentsRevocationInput } from "../stripe-payments.extensions.js";
+import { SecureSubscriptionService } from "./secure-subscription.service.js";
+export declare class DefaultStripePaymentsEntitlementStore implements StripePaymentsEntitlementStore {
+    private readonly subscriptionService;
+    constructor(subscriptionService: SecureSubscriptionService);
+    findByUuid(uuid: string): Promise<StripePaymentsEntitlement>;
+    findByTransactionId(paymentSystemTransactionId: string): Promise<StripePaymentsEntitlement | null>;
+    save(input: StripePaymentsEntitlementInput): Promise<void>;
+    revokeCustomerPayments(customerId: string, input: StripePaymentsRevocationInput): Promise<void>;
+    revokePayment(paymentSystemTransactionId: string, input: StripePaymentsRevocationInput): Promise<boolean>;
+    private map;
+}

package/dist/stripe-payments/services/default-stripe-payments-entitlement-store.js

@@ -0,0 +1,49 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+import { Injectable } from "@nestjs/common";
+import { SecureSubscriptionService } from "./secure-subscription.service.js";
+let DefaultStripePaymentsEntitlementStore = class DefaultStripePaymentsEntitlementStore {
+    subscriptionService;
+    constructor(subscriptionService) {
+        this.subscriptionService = subscriptionService;
+    }
+    async findByUuid(uuid) {
+        const record = await this.subscriptionService.findByUuid(uuid);
+        return this.map(record);
+    }
+    async findByTransactionId(paymentSystemTransactionId) {
+        const record = await this.subscriptionService.findByTransactionId(paymentSystemTransactionId);
+        return record ? this.map(record) : null;
+    }
+    async save(input) {
+        await this.subscriptionService.save(input);
+    }
+    revokeCustomerPayments(customerId, input) {
+        return this.subscriptionService.revokeCustomerPayments(customerId, input);
+    }
+    revokePayment(paymentSystemTransactionId, input) {
+        return this.subscriptionService.revokePayment(paymentSystemTransactionId, input);
+    }
+    map(record) {
+        return {
+            uuid: record.uuid,
+            organisationUuid: record.organisation.uuid,
+            paymentSystemTransactionId: record.paymentSystemTransactionId,
+            paymentSystemCustomerId: record.paymentSystemCustomerId,
+            paymentSystemMode: record.paymentSystemMode,
+        };
+    }
+};
+DefaultStripePaymentsEntitlementStore = __decorate([
+    Injectable(),
+    __metadata("design:paramtypes", [SecureSubscriptionService])
+], DefaultStripePaymentsEntitlementStore);
+export { DefaultStripePaymentsEntitlementStore };
+//# sourceMappingURL=default-stripe-payments-entitlement-store.js.map

package/dist/stripe-payments/services/default-stripe-payments-entitlement-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"default-stripe-payments-entitlement-store.js","sourceRoot":"","sources":["../../../src/stripe-payments/services/default-stripe-payments-entitlement-store.ts"],"names":[],"mappings":";;;;;;;;;AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,gBAAgB,CAAC;AAO1C,OAAO,EAAC,yBAAyB,EAAC,MAAM,kCAAkC,CAAC;AAGpE,IAAM,qCAAqC,GAA3C,MAAM,qCAAqC;IAEzB;IADrB,YACqB,mBAA8C;QAA9C,wBAAmB,GAAnB,mBAAmB,CAA2B;IAChE,CAAC;IAEJ,KAAK,CAAC,UAAU,CAAC,IAAY;QACzB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,mBAAmB,CACrB,0BAAkC;QAElC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,mBAAmB,CAC7D,0BAA0B,CAC7B,CAAC;QACF,OAAO,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,KAAqC;QAC5C,MAAM,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;IAED,sBAAsB,CAClB,UAAkB,EAClB,KAAoC;QAEpC,OAAO,IAAI,CAAC,mBAAmB,CAAC,sBAAsB,CAClD,UAAU,EACV,KAAK,CACR,CAAC;IACN,CAAC;IAED,aAAa,CACT,0BAAkC,EAClC,KAAoC;QAEpC,OAAO,IAAI,CAAC,mBAAmB,CAAC,aAAa,CACzC,0BAA0B,EAC1B,KAAK,CACR,CAAC;IACN,CAAC;IAEO,GAAG,CAAC,MAMX;QACG,OAAO;YACH,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,gBAAgB,EAAE,MAAM,CAAC,YAAY,CAAC,IAAI;YAC1C,0BAA0B,EAAE,MAAM,CAAC,0BAA0B;YAC7D,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;YACvD,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;SAC9C,CAAC;IACN,CAAC;CACJ,CAAA;AA1DY,qCAAqC;IADjD,UAAU,EAAE;qCAGiC,yBAAyB;GAF1D,qCAAqC,CA0DjD"}

package/dist/stripe-payments/services/secure-stripe-checkout.service.d.ts

@@ -0,0 +1,24 @@
+import { RequestUser } from "../../authorization/models/RequestWithUser.js";
+import Stripe from "stripe";
+import { Repository } from "typeorm";
+import { StripeCheckoutSessionRequestDto, StripeCustomerPortalRequestDto } from "../models/secure-checkout.dto.js";
+import { StripeCheckoutSessionResponseDto, StripeCustomerPortalResponseDto } from "../models/secure-payment-response.dto.js";
+import { StripeCheckoutAttempt } from "../entities/stripe-checkout-attempt.entity.js";
+import { SecureStripeProductService } from "./secure-stripe-product.service.js";
+import { StripePaymentsAccessPolicy, StripePaymentsEntitlementStore } from "../stripe-payments.extensions.js";
+import { StripePaymentsTelemetryService } from "./stripe-payments-telemetry.service.js";
+export declare class SecureStripeCheckoutService {
+    private readonly stripe;
+    private readonly attemptRepository;
+    private readonly productService;
+    private readonly entitlementStore;
+    private readonly accessPolicy;
+    private readonly telemetry;
+    private readonly logger;
+    constructor(stripe: Stripe, attemptRepository: Repository<StripeCheckoutAttempt>, productService: SecureStripeProductService, entitlementStore: StripePaymentsEntitlementStore, accessPolicy: StripePaymentsAccessPolicy, telemetry: StripePaymentsTelemetryService);
+    createCheckoutSession(request: StripeCheckoutSessionRequestDto, user: RequestUser, idempotencyKey: string | undefined): Promise<StripeCheckoutSessionResponseDto>;
+    createCustomerPortalSession(request: StripeCustomerPortalRequestDto, user: RequestUser, idempotencyKey: string | undefined): Promise<StripeCustomerPortalResponseDto>;
+    private requireIdempotencyKey;
+    private assertMatchingAttempt;
+    private isUniqueViolation;
+}

package/dist/stripe-payments/services/secure-stripe-checkout.service.js

@@ -0,0 +1,213 @@
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+var __param = (this && this.__param) || function (paramIndex, decorator) {
+    return function (target, key) { decorator(target, key, paramIndex); }
+};
+var SecureStripeCheckoutService_1;
+import { ConflictException, Inject, Injectable, Logger, ServiceUnavailableException, } from "@nestjs/common";
+import Stripe from "stripe";
+import { InjectRepository } from "@nestjs/typeorm";
+import { QueryFailedError, Repository } from "typeorm";
+import { StripeCheckoutAttempt } from "../entities/stripe-checkout-attempt.entity.js";
+import { SecureStripeProductService } from "./secure-stripe-product.service.js";
+import { STRIPE_PAYMENTS_ACCESS_POLICY, STRIPE_PAYMENTS_ENTITLEMENT_STORE, } from "../stripe-payments.extensions.js";
+import { StripePaymentsTelemetryService } from "./stripe-payments-telemetry.service.js";
+const idempotencyKeyPattern = /^[A-Za-z0-9._-]{8,255}$/;
+let SecureStripeCheckoutService = SecureStripeCheckoutService_1 = class SecureStripeCheckoutService {
+    stripe;
+    attemptRepository;
+    productService;
+    entitlementStore;
+    accessPolicy;
+    telemetry;
+    logger = new Logger(SecureStripeCheckoutService_1.name);
+    constructor(stripe, attemptRepository, productService, entitlementStore, accessPolicy, telemetry) {
+        this.stripe = stripe;
+        this.attemptRepository = attemptRepository;
+        this.productService = productService;
+        this.entitlementStore = entitlementStore;
+        this.accessPolicy = accessPolicy;
+        this.telemetry = telemetry;
+    }
+    async createCheckoutSession(request, user, idempotencyKey) {
+        const key = this.requireIdempotencyKey(idempotencyKey);
+        await this.accessPolicy.assertCanManageOrganisation({
+            organisationUuid: request.organisationUuid,
+            user,
+            operation: "checkout",
+        });
+        const product = this.productService.getByKey(request.productKey);
+        const successUrl = this.productService.buildRedirectUrl(request.successFrontendPath);
+        const cancelUrl = request.cancelFrontendPath
+            ? this.productService.buildRedirectUrl(request.cancelFrontendPath)
+            : undefined;
+        const existingAttempt = await this.attemptRepository.findOne({
+            where: { idempotencyKey: key },
+        });
+        if (existingAttempt) {
+            this.assertMatchingAttempt(existingAttempt, request, user, product.priceId);
+            if (existingAttempt.status === "created" &&
+                existingAttempt.stripeSessionId &&
+                existingAttempt.stripeSessionUrl) {
+                return {
+                    stripeSessionId: existingAttempt.stripeSessionId,
+                    stripeSessionUrl: existingAttempt.stripeSessionUrl,
+                };
+            }
+            if (existingAttempt.updatedDate.getTime() >
+                Date.now() - 10 * 60 * 1000) {
+                throw new ConflictException("Checkout attempt is already in progress");
+            }
+        }
+        const attempt = existingAttempt ??
+            this.attemptRepository.create({
+                idempotencyKey: key,
+                organisationUuid: request.organisationUuid,
+                userUuid: user.uuid,
+                productKey: product.key,
+                priceId: product.priceId,
+                mode: product.mode,
+                status: "creating",
+            });
+        attempt.status = "creating";
+        attempt.errorMessage = undefined;
+        try {
+            await this.attemptRepository.save(attempt);
+        }
+        catch (error) {
+            if (!this.isUniqueViolation(error)) {
+                throw error;
+            }
+            const concurrentAttempt = await this.attemptRepository.findOne({
+                where: { idempotencyKey: key },
+            });
+            if (!concurrentAttempt) {
+                throw error;
+            }
+            this.assertMatchingAttempt(concurrentAttempt, request, user, product.priceId);
+            if (concurrentAttempt.status === "created" &&
+                concurrentAttempt.stripeSessionId &&
+                concurrentAttempt.stripeSessionUrl) {
+                return {
+                    stripeSessionId: concurrentAttempt.stripeSessionId,
+                    stripeSessionUrl: concurrentAttempt.stripeSessionUrl,
+                };
+            }
+            throw new ConflictException("Checkout attempt is already in progress");
+        }
+        try {
+            const metadata = {
+                organisationUuid: request.organisationUuid,
+                userUuid: user.uuid,
+                productKey: product.key,
+                internalSku: product.internalSku,
+                checkoutAttemptId: String(attempt.id),
+            };
+            const session = await this.stripe.checkout.sessions.create({
+                mode: product.mode,
+                client_reference_id: String(attempt.id),
+                line_items: [{ price: product.priceId, quantity: 1 }],
+                success_url: successUrl,
+                cancel_url: cancelUrl,
+                metadata,
+                ...(product.mode === "subscription"
+                    ? { subscription_data: { metadata } }
+                    : { payment_intent_data: { metadata } }),
+            }, { idempotencyKey: key });
+            if (!session.url) {
+                throw new Error("Stripe did not return a Checkout URL");
+            }
+            attempt.status = "created";
+            attempt.stripeSessionId = session.id;
+            attempt.stripeSessionUrl = session.url;
+            await this.attemptRepository.save(attempt);
+            await this.telemetry.record({
+                name: "checkout.created",
+                attemptId: attempt.id,
+                organisationUuid: attempt.organisationUuid,
+                productKey: attempt.productKey,
+                stripeSessionId: session.id,
+            });
+            return {
+                stripeSessionId: session.id,
+                stripeSessionUrl: session.url,
+            };
+        }
+        catch (error) {
+            attempt.status = "failed";
+            const errorMessage = error instanceof Error
+                ? error.message.slice(0, 500)
+                : "Stripe error";
+            attempt.errorMessage = errorMessage;
+            await this.attemptRepository.save(attempt);
+            await this.telemetry.record({
+                name: "checkout.failed",
+                attemptId: attempt.id,
+                organisationUuid: attempt.organisationUuid,
+                productKey: attempt.productKey,
+                error: errorMessage,
+            });
+            this.logger.error("Stripe Checkout session creation failed", {
+                attemptId: attempt.id,
+                productKey: product.key,
+                error: error instanceof Error ? error.message : String(error),
+            });
+            throw new ServiceUnavailableException("Unable to start checkout right now. Please try again.");
+        }
+    }
+    async createCustomerPortalSession(request, user, idempotencyKey) {
+        const key = this.requireIdempotencyKey(idempotencyKey);
+        const subscription = await this.entitlementStore.findByUuid(request.subscriptionRecordUuid);
+        await this.accessPolicy.assertCanManageOrganisation({
+            organisationUuid: subscription.organisationUuid,
+            user,
+            operation: "customer-portal",
+        });
+        if (!/^cus_[A-Za-z0-9]+$/.test(subscription.paymentSystemCustomerId)) {
+            throw new ConflictException("This subscription has no valid Stripe customer");
+        }
+        const session = await this.stripe.billingPortal.sessions.create({
+            customer: subscription.paymentSystemCustomerId,
+            return_url: this.productService.buildRedirectUrl(request.returnUrl),
+        }, { idempotencyKey: key });
+        return { sessionUrl: session.url };
+    }
+    requireIdempotencyKey(idempotencyKey) {
+        if (!idempotencyKey || !idempotencyKeyPattern.test(idempotencyKey)) {
+            throw new ConflictException("An Idempotency-Key header is required for payment requests");
+        }
+        return idempotencyKey;
+    }
+    assertMatchingAttempt(attempt, request, user, priceId) {
+        if (attempt.organisationUuid !== request.organisationUuid ||
+            attempt.userUuid !== user.uuid ||
+            attempt.productKey !== request.productKey ||
+            attempt.priceId !== priceId) {
+            throw new ConflictException("The Idempotency-Key was already used for another checkout");
+        }
+    }
+    isUniqueViolation(error) {
+        return (error instanceof QueryFailedError &&
+            error
+                .driverError.code === "23505");
+    }
+};
+SecureStripeCheckoutService = SecureStripeCheckoutService_1 = __decorate([
+    Injectable(),
+    __param(0, Inject("SecureStripeClient")),
+    __param(1, InjectRepository(StripeCheckoutAttempt)),
+    __param(3, Inject(STRIPE_PAYMENTS_ENTITLEMENT_STORE)),
+    __param(4, Inject(STRIPE_PAYMENTS_ACCESS_POLICY)),
+    __metadata("design:paramtypes", [Stripe,
+        Repository,
+        SecureStripeProductService, Object, Object, StripePaymentsTelemetryService])
+], SecureStripeCheckoutService);
+export { SecureStripeCheckoutService };
+//# sourceMappingURL=secure-stripe-checkout.service.js.map