@develit-services/bank 5.4.1 → 5.5.0

package/dist/shared/bank.B04qoHtD.cjs

@@ -0,0 +1,360 @@
+'use strict';
+
+const drizzleOrm = require('drizzle-orm');
+const paymentDirection = require('./bank.DMrkshJa.cjs');
+const backendSdk = require('@develit-io/backend-sdk');
+require('./bank.9Yw4KHyl.cjs');
+require('date-fns');
+require('jose');
+require('@develit-io/general-codes');
+const node_crypto = require('node:crypto');
+
+const createPaymentCommand = (db, { payment }) => {
+  return {
+    command: db.insert(paymentDirection.tables.payment).values({
+      ...payment,
+      creditorIban: payment.creditor.iban,
+      debtorIban: payment.debtor.iban
+    }).onConflictDoUpdate({
+      // Unique index: (connector_key, account_id, bank_ref_id)
+      target: [
+        paymentDirection.tables.payment.connectorKey,
+        paymentDirection.tables.payment.accountId,
+        paymentDirection.tables.payment.bankRefId
+      ],
+      set: {
+        status: drizzleOrm.sql`excluded.status`,
+        statusReason: drizzleOrm.sql`excluded.status_reason`,
+        processedAt: drizzleOrm.sql`excluded.processed_at`,
+        updatedAt: drizzleOrm.sql`excluded.updated_at`,
+        // Keep existing refId if already set, otherwise use enriched value
+        refId: drizzleOrm.sql`coalesce(payment.ref_id, excluded.ref_id)`,
+        // Keep existing batchId if already set, otherwise use enriched value
+        batchId: drizzleOrm.sql`coalesce(payment.bank_execution_batch_id, excluded.bank_execution_batch_id)`
+      }
+    }).returning()
+  };
+};
+
+const upsertBatchCommand = (db, { batch }) => {
+  const id = batch.id || backendSdk.uuidv4();
+  const command = db.insert(paymentDirection.tables.batch).values({
+    ...batch,
+    id
+  }).onConflictDoUpdate({
+    target: paymentDirection.tables.batch.id,
+    set: {
+      ...batch
+    }
+  }).returning();
+  return {
+    id,
+    command
+  };
+};
+
+const updatePaymentRequestStatusCommand = (db, values) => {
+  const { id, ...set } = values;
+  return {
+    command: db.update(paymentDirection.tables.paymentRequest).set(set).where(
+      drizzleOrm.and(
+        drizzleOrm.eq(paymentDirection.tables.paymentRequest.id, id),
+        drizzleOrm.isNull(paymentDirection.tables.paymentRequest.deletedAt)
+      )
+    ).returning()
+  };
+};
+
+const getAccountByIdQuery = async (db, { accountId }) => {
+  return await db.select().from(paymentDirection.tables.account).where(drizzleOrm.eq(paymentDirection.tables.account.id, accountId)).get();
+};
+
+const getBatchByIdQuery = async (db, { batchId }) => {
+  return await db.select().from(paymentDirection.tables.batch).where(drizzleOrm.eq(paymentDirection.tables.batch.id, batchId)).get();
+};
+
+const getCredentialsByAccountId = async (db, encryptionKey, { accountId }) => {
+  const cred = await db.select().from(paymentDirection.tables.accountCredentials).where(drizzleOrm.eq(paymentDirection.tables.accountCredentials.accountId, accountId)).get();
+  return cred ? {
+    ...cred,
+    value: await decrypt(cred.value, encryptionKey)
+  } : void 0;
+};
+
+const getPaymentRequestsByBatchIdQuery = async (db, { batchId }) => {
+  return await db.select().from(paymentDirection.tables.paymentRequest).where(
+    drizzleOrm.and(
+      drizzleOrm.eq(paymentDirection.tables.paymentRequest.batchId, batchId),
+      drizzleOrm.isNull(paymentDirection.tables.paymentRequest.deletedAt)
+    )
+  );
+};
+
+async function importAesKey(base64Key) {
+  const raw = Uint8Array.from(atob(base64Key), (c) => c.charCodeAt(0));
+  return await crypto.subtle.importKey("raw", raw, { name: "AES-GCM" }, false, [
+    "encrypt",
+    "decrypt"
+  ]);
+}
+async function encrypt(value, key) {
+  const encoder = new TextEncoder();
+  const iv = crypto.getRandomValues(new Uint8Array(12));
+  const ciphertext = await crypto.subtle.encrypt(
+    { name: "AES-GCM", iv },
+    key,
+    encoder.encode(value)
+  );
+  const combined = new Uint8Array(iv.length + ciphertext.byteLength);
+  combined.set(iv, 0);
+  combined.set(new Uint8Array(ciphertext), iv.length);
+  return btoa(String.fromCharCode(...combined));
+}
+async function decrypt(base64, key) {
+  const raw = Uint8Array.from(atob(base64), (c) => c.charCodeAt(0));
+  const iv = raw.slice(0, 12);
+  const ciphertext = raw.slice(12);
+  const decrypted = await crypto.subtle.decrypt(
+    { name: "AES-GCM", iv },
+    key,
+    ciphertext
+  );
+  return new TextDecoder().decode(decrypted);
+}
+function canonicalize(value) {
+  if (value === null || typeof value !== "object") return value;
+  if (Array.isArray(value)) {
+    return value.map(canonicalize);
+  }
+  const obj = value;
+  const sorted = Object.keys(obj).sort().reduce((acc, key) => {
+    acc[key] = canonicalize(obj[key]);
+    return acc;
+  }, {});
+  return sorted;
+}
+function checksum(input) {
+  const canonical = canonicalize(input);
+  const json = JSON.stringify(canonical);
+  return node_crypto.createHash("sha256").update(json).digest("hex");
+}
+
+const createCredentialsResolver = async (db, env) => {
+  const encryptionKey = await importAesKey(
+    (await env.SECRETS_STORE.get({
+      secretName: "BANK_SERVICE_ENCRYPTION_KEY"
+    })).data?.secretValue || ""
+  );
+  return (accountId) => getCredentialsByAccountId(db, encryptionKey, { accountId });
+};
+
+class AirBankConnector extends paymentDirection.FinbricksConnector {
+  constructor(config) {
+    super("AIRBANK", config);
+  }
+  supportsBatch() {
+    return false;
+  }
+}
+
+class CreditasConnector extends paymentDirection.FinbricksConnector {
+  constructor(config) {
+    super("CREDITAS", config);
+  }
+  /**
+   * Creditas bank doesn't support batch payments at all.
+   */
+  supportsBatch() {
+    return false;
+  }
+}
+
+class CSASConnector extends paymentDirection.FinbricksConnector {
+  constructor(config) {
+    super("CSAS", config);
+  }
+  supportsBatch(paymentType) {
+    return paymentType === "DOMESTIC";
+  }
+}
+
+class FioConnector extends paymentDirection.FinbricksConnector {
+  constructor(config) {
+    super("FIO", config);
+  }
+  /**
+   * FIO supports batch only for DOMESTIC (CZK) payments.
+   * SEPA and SWIFT batch support is planned by Finbricks.
+   */
+  supportsBatch(paymentType) {
+    return paymentType === "DOMESTIC";
+  }
+}
+
+class MonetaConnector extends paymentDirection.FinbricksConnector {
+  constructor(config) {
+    super("MONETA", config);
+  }
+  /**
+   * MONETA supports batch only for DOMESTIC (CZK) payments.
+   * SEPA and SWIFT batch support is planned by Finbricks.
+   */
+  supportsBatch(paymentType) {
+    return paymentType === "DOMESTIC";
+  }
+  /**
+   * MONETA rejects all special characters in endToEndIdentification.
+   * Boundaries between segments are unambiguous without a separator —
+   * `VS`/`SS`/`KS` prefixes are alphabetic and values are always numeric,
+   * so the parsing regex `VS[:\s]*(\d+)` extracts each value correctly.
+   *
+   * Format: `VS1234SS5678KS0308` (max 30 chars).
+   * Confirmed by Finbricks support (2026-04-23).
+   */
+  buildEndToEndId(payment) {
+    return paymentDirection.buildEndToEndId(payment, { separator: "" });
+  }
+}
+
+const initiateConnector = async ({
+  bank,
+  env,
+  connectedAccounts,
+  resolveCredentials
+}) => {
+  switch (bank) {
+    case "ERSTE":
+      return new paymentDirection.ErsteConnector({
+        API_KEY: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_ERSTE_API_KEY"
+        })).data?.secretValue || "",
+        CLIENT_ID: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_ERSTE_CLIENT_ID"
+        })).data?.secretValue || "",
+        CLIENT_SECRET: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_ERSTE_CLIENT_SECRET"
+        })).data?.secretValue || "",
+        REDIRECT_URI: env.REDIRECT_URI,
+        AUTH_URI: env.ERSTE_AUTH_URI,
+        PAYMENTS_URI: env.ERSTE_PAYMENTS_URI,
+        ACCOUNTS_URI: env.ERSTE_ACCOUNTS_URI,
+        connectedAccounts,
+        resolveCredentials
+      });
+    case "CREDITAS":
+      return new CreditasConnector({
+        BASE_URI: env.FINBRICKS_BASE_URI,
+        MERCHANT_ID: env.FINBRICKS_MERCHANT_ID,
+        PRIVATE_KEY_PEM: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_FINBRICKS_PRIVATE_KEY_PEM"
+        })).data?.secretValue || "",
+        REDIRECT_URI: env.REDIRECT_URI,
+        connectedAccounts,
+        resolveCredentials
+      });
+    case "MOCK_COBS":
+      return new paymentDirection.MockCobsConnector({
+        BASE_URI: env.FINBRICKS_BASE_URI,
+        MERCHANT_ID: env.FINBRICKS_MERCHANT_ID,
+        PRIVATE_KEY_PEM: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_FINBRICKS_PRIVATE_KEY_PEM"
+        })).data?.secretValue || "",
+        REDIRECT_URI: env.REDIRECT_URI,
+        connectedAccounts,
+        resolveCredentials
+      });
+    case "FIO":
+      return new FioConnector({
+        BASE_URI: env.FINBRICKS_BASE_URI,
+        MERCHANT_ID: env.FINBRICKS_MERCHANT_ID,
+        PRIVATE_KEY_PEM: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_FINBRICKS_PRIVATE_KEY_PEM"
+        })).data?.secretValue || "",
+        REDIRECT_URI: env.REDIRECT_URI,
+        connectedAccounts,
+        resolveCredentials
+      });
+    case "MONETA":
+      return new MonetaConnector({
+        BASE_URI: env.FINBRICKS_BASE_URI,
+        MERCHANT_ID: env.FINBRICKS_MERCHANT_ID,
+        PRIVATE_KEY_PEM: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_FINBRICKS_PRIVATE_KEY_PEM"
+        })).data?.secretValue || "",
+        REDIRECT_URI: env.REDIRECT_URI,
+        connectedAccounts,
+        resolveCredentials
+      });
+    case "AIRBANK":
+      return new AirBankConnector({
+        BASE_URI: env.FINBRICKS_BASE_URI,
+        MERCHANT_ID: env.FINBRICKS_MERCHANT_ID,
+        PRIVATE_KEY_PEM: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_FINBRICKS_PRIVATE_KEY_PEM"
+        })).data?.secretValue || "",
+        REDIRECT_URI: env.REDIRECT_URI,
+        connectedAccounts,
+        resolveCredentials
+      });
+    case "CSAS":
+      return new CSASConnector({
+        BASE_URI: env.FINBRICKS_BASE_URI,
+        MERCHANT_ID: env.FINBRICKS_MERCHANT_ID,
+        PRIVATE_KEY_PEM: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_FINBRICKS_PRIVATE_KEY_PEM"
+        })).data?.secretValue || "",
+        REDIRECT_URI: env.REDIRECT_URI,
+        connectedAccounts,
+        resolveCredentials
+      });
+    case "KB":
+      return new paymentDirection.KBConnector({
+        BASE_URI: env.FINBRICKS_BASE_URI,
+        MERCHANT_ID: env.FINBRICKS_MERCHANT_ID,
+        PRIVATE_KEY_PEM: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_FINBRICKS_PRIVATE_KEY_PEM"
+        })).data?.secretValue || "",
+        REDIRECT_URI: env.REDIRECT_URI,
+        connectedAccounts,
+        resolveCredentials
+      });
+    case "CSOB":
+      return new paymentDirection.CsobConnector({
+        BASE_URI: env.FINBRICKS_BASE_URI,
+        MERCHANT_ID: env.FINBRICKS_MERCHANT_ID,
+        PRIVATE_KEY_PEM: (await env.SECRETS_STORE.get({
+          secretName: "BANK_SERVICE_FINBRICKS_PRIVATE_KEY_PEM"
+        })).data?.secretValue || "",
+        REDIRECT_URI: env.REDIRECT_URI,
+        connectedAccounts,
+        resolveCredentials
+      });
+    case "DBU":
+      return new paymentDirection.DbuConnector({
+        BASE_URL: env.DBUCS_BASE_URI,
+        USERNAME: env.DBUCS_USERNAME,
+        APPLICATION_CODE: env.DBUCS_APPLICATION_CODE,
+        KV: env.BANK_KV,
+        API: env.DBU_CBS_BACKOFFICE_DEV,
+        REDIRECT_URI: env.REDIRECT_URI,
+        TX_AUTH_URI: env.DBUCS_TX_AUTH_URI,
+        connectedAccounts
+      });
+    default:
+      const mockConnector = new paymentDirection.MockConnector();
+      mockConnector.connectedAccounts = connectedAccounts;
+      return mockConnector;
+  }
+};
+
+exports.checksum = checksum;
+exports.createCredentialsResolver = createCredentialsResolver;
+exports.createPaymentCommand = createPaymentCommand;
+exports.encrypt = encrypt;
+exports.getAccountByIdQuery = getAccountByIdQuery;
+exports.getBatchByIdQuery = getBatchByIdQuery;
+exports.getPaymentRequestsByBatchIdQuery = getPaymentRequestsByBatchIdQuery;
+exports.importAesKey = importAesKey;
+exports.initiateConnector = initiateConnector;
+exports.updatePaymentRequestStatusCommand = updatePaymentRequestStatusCommand;
+exports.upsertBatchCommand = upsertBatchCommand;

package/dist/shared/{bank.BqTBTu_N.d.cts → bank.BuwSQL_7.d.mts}

@@ -1,4 +1,4 @@
-import { e as CurrencyCode, R as BankCode, a1 as CountryCode, P as PaymentRequestSelectType } from './bank.CGVCfq1B.cjs';
+import { e as CurrencyCode, R as BankCode, a1 as CountryCode, P as PaymentRequestSelectType } from './bank.CdkOsZE8.mjs';
 import { z } from 'zod';
 
 type ReferenceType = `${'VS' | 'SS' | 'KS'}:${number}`;

package/dist/shared/{bank.CGVCfq1B.d.cts → bank.CdkOsZE8.d.cts}

@@ -3230,7 +3230,7 @@ declare const batch: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
             name: string;
             tableName: "batch";
             dataType: "string enum";
-            data: "AUTHORIZED" | "PROCESSING" | "READY_TO_SIGN" | "COMPLETED" | "FAILED";
+            data: "AUTHORIZED" | "COMPLETED" | "PROCESSING" | "READY_TO_SIGN" | "FAILED";
             driverParam: string;
             notNull: false;
             hasDefault: false;
@@ -3606,7 +3606,7 @@ declare const payment: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
             name: string;
             tableName: "payment";
             dataType: "string enum";
-            data: "PROCESSING" | "BOOKED" | "REJECTED" | "PENDING" | "CANCELLED" | "SCHEDULED" | "HOLD" | "INFO";
+            data: "BOOKED" | "REJECTED" | "PENDING" | "PROCESSING" | "CANCELLED" | "SCHEDULED" | "HOLD" | "INFO";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -4110,7 +4110,7 @@ declare const paymentRequest: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
             name: string;
             tableName: "payment_request";
             dataType: "string enum";
-            data: "AUTHORIZED" | "COMPLETED" | "OPENED" | "BOOKED" | "SETTLED" | "REJECTED" | "CLOSED";
+            data: "OPENED" | "AUTHORIZED" | "COMPLETED" | "BOOKED" | "SETTLED" | "REJECTED" | "CLOSED";
             driverParam: string;
             notNull: true;
             hasDefault: false;

package/dist/shared/{bank.CGVCfq1B.d.mts → bank.CdkOsZE8.d.mts}

@@ -3230,7 +3230,7 @@ declare const batch: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
             name: string;
             tableName: "batch";
             dataType: "string enum";
-            data: "AUTHORIZED" | "PROCESSING" | "READY_TO_SIGN" | "COMPLETED" | "FAILED";
+            data: "AUTHORIZED" | "COMPLETED" | "PROCESSING" | "READY_TO_SIGN" | "FAILED";
             driverParam: string;
             notNull: false;
             hasDefault: false;
@@ -3606,7 +3606,7 @@ declare const payment: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
             name: string;
             tableName: "payment";
             dataType: "string enum";
-            data: "PROCESSING" | "BOOKED" | "REJECTED" | "PENDING" | "CANCELLED" | "SCHEDULED" | "HOLD" | "INFO";
+            data: "BOOKED" | "REJECTED" | "PENDING" | "PROCESSING" | "CANCELLED" | "SCHEDULED" | "HOLD" | "INFO";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -4110,7 +4110,7 @@ declare const paymentRequest: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
             name: string;
             tableName: "payment_request";
             dataType: "string enum";
-            data: "AUTHORIZED" | "COMPLETED" | "OPENED" | "BOOKED" | "SETTLED" | "REJECTED" | "CLOSED";
+            data: "OPENED" | "AUTHORIZED" | "COMPLETED" | "BOOKED" | "SETTLED" | "REJECTED" | "CLOSED";
             driverParam: string;
             notNull: true;
             hasDefault: false;

package/dist/shared/{bank.CGVCfq1B.d.ts → bank.CdkOsZE8.d.ts}

@@ -3230,7 +3230,7 @@ declare const batch: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
             name: string;
             tableName: "batch";
             dataType: "string enum";
-            data: "AUTHORIZED" | "PROCESSING" | "READY_TO_SIGN" | "COMPLETED" | "FAILED";
+            data: "AUTHORIZED" | "COMPLETED" | "PROCESSING" | "READY_TO_SIGN" | "FAILED";
             driverParam: string;
             notNull: false;
             hasDefault: false;
@@ -3606,7 +3606,7 @@ declare const payment: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
             name: string;
             tableName: "payment";
             dataType: "string enum";
-            data: "PROCESSING" | "BOOKED" | "REJECTED" | "PENDING" | "CANCELLED" | "SCHEDULED" | "HOLD" | "INFO";
+            data: "BOOKED" | "REJECTED" | "PENDING" | "PROCESSING" | "CANCELLED" | "SCHEDULED" | "HOLD" | "INFO";
             driverParam: string;
             notNull: true;
             hasDefault: false;
@@ -4110,7 +4110,7 @@ declare const paymentRequest: drizzle_orm_sqlite_core.SQLiteTableWithColumns<{
             name: string;
             tableName: "payment_request";
             dataType: "string enum";
-            data: "AUTHORIZED" | "COMPLETED" | "OPENED" | "BOOKED" | "SETTLED" | "REJECTED" | "CLOSED";
+            data: "OPENED" | "AUTHORIZED" | "COMPLETED" | "BOOKED" | "SETTLED" | "REJECTED" | "CLOSED";
             driverParam: string;
             notNull: true;
             hasDefault: false;