@endora-commerce/mod-payment-methods 0.100.0

package/dist/backend/index.d.ts

@@ -0,0 +1,103 @@
+import type { FastifyRequest } from 'fastify';
+import type { EntityManager } from '@mikro-orm/postgresql';
+import type { ChannelMemberEntityType } from '@endora-commerce/contracts';
+import { type ModuleContext } from '@endora-commerce/platform/kernel';
+import type { CommandBus } from '@endora-commerce/platform/commands';
+import type { RequireAdminAnyFactory, RequireAdminFactory } from '@endora-commerce/platform/kernel';
+import type { SalesChannelMembershipPort } from '@endora-commerce/platform/kernel';
+import { EnumOrderStatusRegistry } from './services/order-status-registry.port.js';
+import { PaymentMethodEligibilityService } from './services/payment-method-eligibility.js';
+import { paymentAdapterRegistry } from './services/registry-singleton.js';
+import { PaymentMethod } from './entities/payment-method.entity.js';
+/**
+ * `payment_methods` — the module `orders` was mounting (feature 072, wave 1,
+ * T097).
+ *
+ * `orders/plugin.ts` imported both route files, seeded the built-in adapters,
+ * built the order-status registry and mounted the lot inside `commerceModule`.
+ * The same shape `audit_logs` had, with the same consequence: the payment-method
+ * surface could not exist without the orders module being composed, and the
+ * eligibility service that feature 034 wrote for it went unwired for two
+ * releases because the wiring lived in somebody else's file.
+ *
+ * **The adapter registry stays the process singleton, on purpose.** `stripe`,
+ * `autopay`, `tpay` and `payu` all `import { paymentAdapterRegistry }` and
+ * register into it, so building a second one here and registering *that* under
+ * the container name would give the platform two registries — precisely the
+ * multi-instance defect this wave has already fixed twice (`currencies`,
+ * `addresses`). Registering the existing instance as the container's value
+ * keeps exactly one and makes the container the single place that decides what
+ * it is, which is what turns the eventual replacement into a one-line change.
+ *
+ * (The singleton's own comment justifies itself with "the install-hook context
+ * cannot carry services". That is stale: all four providers register from their
+ * `plugin.ts`, at composition time, where the container is available. The
+ * replacement belongs to the wave that converts them.)
+ */
+export interface PaymentMethodsCradle {
+    /**
+     * Feature 120 (FR-015) — the platform's channel-bridge registry, resolved by
+     * **container name** rather than imported. The shape is the narrow one this
+     * module needs, which is what `ctx.cradle<C>()` asks an author to declare;
+     * the registry itself is the kernel's and is published on no barrel.
+     */
+    readonly salesChannelBridgeRegistry: {
+        register(bridge: {
+            entityType: ChannelMemberEntityType;
+            table: string;
+            entityIdColumn: string;
+        }): void;
+    };
+    readonly emFactory: () => EntityManager;
+    readonly requireAdmin: RequireAdminFactory;
+    /**
+     * The any-of form of the same `auth` guard, for the one admin route two
+     * editors read (`GET /admin/order-statuses`); `routes.ts` says why.
+     */
+    readonly requireAdminAny: RequireAdminAnyFactory;
+    readonly commandBus: CommandBus;
+    readonly salesChannelMembershipPort: SalesChannelMembershipPort | undefined;
+    /**
+     * The two halves the allow-list is composed from (T138). This used to be one
+     * `organizationPaymentMethodAllowList` contribution point that a root filled
+     * with a closure fusing an actor read and an `organizations` table read.
+     * `organizations` could not fill it once converted — a module may not write a
+     * name another module owns — and the fusion was the defect anyway: one half
+     * is a deployment input, the other is a port.
+     */
+    readonly customerOrganizationIdResolver: (req: FastifyRequest) => string | null;
+    readonly organizationRestrictionPort: {
+        allowedIdsFor(organizationId: string, kind: 'paymentMethodIds' | 'deliveryMethodIds' | 'warehouseIds'): Promise<string[] | null>;
+    };
+    readonly paymentAdapterRegistry: typeof paymentAdapterRegistry;
+    readonly paymentMethodEligibility: PaymentMethodEligibilityService;
+    readonly paymentOrderStatusRegistry: EnumOrderStatusRegistry;
+}
+export declare function registerModule(ctx: ModuleContext): void;
+/**
+ * The module's persisted entity classes, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table→owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ */
+export declare const entities: (typeof PaymentMethod)[];
+/**
+ * The sales-channel membership bridge this module owns (feature 120, FR-015).
+ *
+ * Exported as well as registered because the owning module is the only honest
+ * source for it: a caller that composes no platform — the bare-database test
+ * harness, which constructs the kernel's membership service directly — declares
+ * these from here rather than from a list of nine it keeps itself, which is
+ * exactly the total map this feature deleted.
+ */
+export declare const salesChannelBridges: ReadonlyArray<{
+    readonly entityType: ChannelMemberEntityType;
+    readonly table: string;
+    readonly entityIdColumn: string;
+}>;
+//# sourceMappingURL=index.d.ts.map

package/dist/backend/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC;AAE1E,OAAO,EAAY,KAAK,aAAa,EAAE,MAAM,kCAAkC,CAAC;AAEhF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AACrE,OAAO,KAAK,EACV,sBAAsB,EACtB,mBAAmB,EACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AAKnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAE3F,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,WAAW,oBAAoB;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,0BAA0B,EAAE;QACnC,QAAQ,CAAC,MAAM,EAAE;YACf,UAAU,EAAE,uBAAuB,CAAC;YACpC,KAAK,EAAE,MAAM,CAAC;YACd,cAAc,EAAE,MAAM,CAAC;SACxB,GAAG,IAAI,CAAC;KACV,CAAC;IACF,QAAQ,CAAC,SAAS,EAAE,MAAM,aAAa,CAAC;IACxC,QAAQ,CAAC,YAAY,EAAE,mBAAmB,CAAC;IAC3C;;;OAGG;IACH,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAC;IACjD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAChC,QAAQ,CAAC,0BAA0B,EAAE,0BAA0B,GAAG,SAAS,CAAC;IAC5E;;;;;;;OAOG;IACH,QAAQ,CAAC,8BAA8B,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,MAAM,GAAG,IAAI,CAAC;IAChF,QAAQ,CAAC,2BAA2B,EAAE;QACpC,aAAa,CACX,cAAc,EAAE,MAAM,EACtB,IAAI,EAAE,kBAAkB,GAAG,mBAAmB,GAAG,cAAc,GAC9D,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;KAC7B,CAAC;IACF,QAAQ,CAAC,sBAAsB,EAAE,OAAO,sBAAsB,CAAC;IAC/D,QAAQ,CAAC,wBAAwB,EAAE,+BAA+B,CAAC;IACnE,QAAQ,CAAC,0BAA0B,EAAE,uBAAuB,CAAC;CAC9D;AAED,wBAAgB,cAAc,CAAC,GAAG,EAAE,aAAa,GAAG,IAAI,CA2IvD;AAED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,QAAQ,0BAEpB,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,EAAE,aAAa,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC,CAEA,CAAC"}

package/dist/backend/index.js

@@ -0,0 +1,151 @@
+import { lazyPort } from '@endora-commerce/platform/kernel';
+import { effectiveState } from '@endora-commerce/platform/kernel';
+import { registerPaymentMethodsAdminRoutes, registerPaymentMethodsPublicRoutes, } from './routes.js';
+import { EnumOrderStatusRegistry } from './services/order-status-registry.port.js';
+import { PaymentMethodEligibilityService } from './services/payment-method-eligibility.js';
+import { PaymentMethodReadService } from './services/payment-method-read-port.js';
+import { paymentAdapterRegistry } from './services/registry-singleton.js';
+import { PaymentMethod } from './entities/payment-method.entity.js';
+export function registerModule(ctx) {
+    /**
+     * Feature 120 (FR-015) — the sales-channel membership bridge this module owns.
+     *
+     * The platform used to hold a map **total** over
+     * `ChannelMemberEntityTypeSchema`, naming this module's bridge table from
+     * inside the kernel. That is D-52/D-53's prohibition expressed in a contract
+     * instead of an import, and it meant a membership call for 'payment-method' on an
+     * instance that never installed this module executed SQL against a relation
+     * that is not there (D-226). The module whose migration creates the table is
+     * the one that says where it is; a member nothing registers now refuses at
+     * the call instead.
+     *
+     * A **contribution** hook and deliberately **unprobed** (D-62/D-68): a
+     * registration is an inert statement about the schema rather than a
+     * capability, the rows outlive an operator switching this module off, and
+     * probing would make a runtime activation flip require a restart. It is
+     * declared first in this module so any later hook of its own that binds a
+     * membership finds the bridge already there.
+     */
+    ctx.onBoot(() => {
+        const { salesChannelBridgeRegistry } = ctx.cradle();
+        for (const bridge of salesChannelBridges)
+            salesChannelBridgeRegistry.register(bridge);
+    });
+    ctx.di.register({
+        // The built-in adapters are **not** seeded here: they live in `payments`
+        // (`payments/adapters/built-in-adapters.ts`), so seeding them from this
+        // module would be a reach into another module's internals to populate a
+        // registry this one merely holds. `payments` pushes them from its own boot
+        // hook (T143a), exactly as each gateway module registers its own — this
+        // module holds the table and never decides what is in it.
+        //
+        // And it stays a plain `di.register`. `PaymentAdapterRegistryPort` is
+        // published over this name, which makes it look like the odd one out beside
+        // the ports below; it is not. Five modules push into it from `ctx.onBoot`,
+        // where a `providePort` gate would throw `MODULE_DISABLED` during
+        // composition, and converting it would move every edge into it from
+        // `contributes` to `fails-closed` in the deactivation-consequence ledger —
+        // changing the sentence the operator's confirmation dialog renders
+        // (issue #192; port-publication.md §1.4). Presence is answered at
+        // enumeration instead, keyed on the module recorded with each entry.
+        paymentAdapterRegistry: ctx.asFunction(() => paymentAdapterRegistry).singleton(),
+        paymentMethodEligibility: ctx
+            .asFunction((cradle) => new PaymentMethodEligibilityService(cradle.paymentAdapterRegistry))
+            .singleton(),
+        paymentOrderStatusRegistry: ctx.asFunction(() => new EnumOrderStatusRegistry()).singleton(),
+    });
+    /**
+     * Feature 075, Phase P — the row-level read model.
+     *
+     * A **port**, unlike the two registrations above. The distinction is the one
+     * the deactivation-consequence ledger draws: the two registries are
+     * contribution seams whose absent-owner policy lives inside them and whose
+     * edges classify as `contributes`, so a gate over the registration would
+     * withdraw the table rather than one contributor's entry. A read of this
+     * module's own table is nothing of the kind — with `payment_methods` off, a
+     * caller asking which methods exist should be told the module is off.
+     */
+    ctx.di.providePort('paymentMethodReadPort', ctx
+        .asFunction(({ emFactory }) => new PaymentMethodReadService(emFactory))
+        .singleton());
+    ctx.routes(async (app) => {
+        const { emFactory, requireAdmin, requireAdminAny, paymentAdapterRegistry: registry, paymentMethodEligibility, paymentOrderStatusRegistry, } = ctx.cradle();
+        const membership = ctx.cradle().salesChannelMembershipPort;
+        /**
+         * Composed here from the two halves, and deliberately without a `catch`.
+         * The root closure this replaces wrapped the read in one, so a
+         * `ModuleDisabledError` from the port would have read as "no restriction" —
+         * fail-open on the one path whose whole job is to restrict. The single
+         * degrade that belongs here ("this caller has no Organization") is the
+         * resolver's own `null`, and the other ("the Organization is gone") is in
+         * `allowedIdsFor`'s return type.
+         */
+        const resolveAllowList = async (req) => {
+            const cradle = ctx.cradle();
+            const organizationId = cradle.customerOrganizationIdResolver(req);
+            if (organizationId === null)
+                return null;
+            return cradle.organizationRestrictionPort.allowedIdsFor(organizationId, 'paymentMethodIds');
+        };
+        await registerPaymentMethodsPublicRoutes(app, {
+            emFactory,
+            registry,
+            eligibility: paymentMethodEligibility,
+            resolveOrganizationPaymentMethodAllowList: resolveAllowList,
+        });
+        /**
+         * The delete-guard's one question for `payments`: how many attempts point
+         * at the method an operator is deleting (FR-003).
+         *
+         * Resolved per call and never captured — `payments` is deactivatable, so a
+         * port taken once at registration would go on answering after an operator
+         * switched it off. `null` while it is absent, which the Command turns into
+         * a 409 that says so; the alternative, deleting a method whose references
+         * nobody could count, is the orphan the guard exists to prevent. Declared
+         * in this module's manifest as `degrades-without` rather than in
+         * `dependencies`, because `payments` already declares this module and the
+         * reverse would close a cycle — and acknowledging it would keep the bind
+         * and make `payments.enabled` unusable.
+         */
+        const paymentRead = () => effectiveState.isPresent('payments')
+            ? lazyPort(ctx, 'paymentReadPort')
+            : null;
+        await registerPaymentMethodsAdminRoutes(app, {
+            emFactory,
+            requireAdmin,
+            requireAdminAny,
+            commandBus: ctx.cradle().commandBus,
+            registry,
+            orderStatusRegistry: paymentOrderStatusRegistry,
+            paymentRead,
+            ...(membership === undefined ? {} : { salesChannelMembership: membership }),
+        });
+    });
+}
+/**
+ * The module's persisted entity classes, on the `./backend` subpath, as one
+ * array and **no named class export** (D-168).
+ *
+ * This is the shape the platform reads when the package is *installed*: the
+ * boot-time loader (`src/packages/package-runtime.ts`, `exported['entities']`)
+ * and the static declaration reader (`scripts/lib/package-declarations.ts`),
+ * which is the third source of `check:module-boundary`'s `table→owner` map and
+ * the package pass of `check-entity-tenant-classification`. A missing array is
+ * answered with `[]` — zero entities registered, no error anywhere.
+ */
+export const entities = [
+    PaymentMethod,
+];
+/**
+ * The sales-channel membership bridge this module owns (feature 120, FR-015).
+ *
+ * Exported as well as registered because the owning module is the only honest
+ * source for it: a caller that composes no platform — the bare-database test
+ * harness, which constructs the kernel's membership service directly — declares
+ * these from here rather than from a list of nine it keeps itself, which is
+ * exactly the total map this feature deleted.
+ */
+export const salesChannelBridges = [
+    { entityType: 'payment-method', table: 'sales_channel_payment_methods', entityIdColumn: 'payment_method_id' },
+];
+//# sourceMappingURL=index.js.map

package/dist/backend/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/backend/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,QAAQ,EAAsB,MAAM,kCAAkC,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,MAAM,kCAAkC,CAAC;AAOlE,OAAO,EACL,iCAAiC,EACjC,kCAAkC,GACnC,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,uBAAuB,EAAE,MAAM,0CAA0C,CAAC;AACnF,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAC3F,OAAO,EAAE,wBAAwB,EAAE,MAAM,wCAAwC,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAuEpE,MAAM,UAAU,cAAc,CAAC,GAAkB;IAC/C;;;;;;;;;;;;;;;;;;OAkBG;IACH,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE;QACd,MAAM,EAAE,0BAA0B,EAAE,GAAG,GAAG,CAAC,MAAM,EAAwB,CAAC;QAC1E,KAAK,MAAM,MAAM,IAAI,mBAAmB;YAAE,0BAA0B,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxF,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC;QACd,yEAAyE;QACzE,wEAAwE;QACxE,wEAAwE;QACxE,2EAA2E;QAC3E,wEAAwE;QACxE,0DAA0D;QAC1D,EAAE;QACF,sEAAsE;QACtE,4EAA4E;QAC5E,2EAA2E;QAC3E,kEAAkE;QAClE,oEAAoE;QACpE,2EAA2E;QAC3E,mEAAmE;QACnE,kEAAkE;QAClE,qEAAqE;QACrE,sBAAsB,EAAE,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,sBAAsB,CAAC,CAAC,SAAS,EAAE;QAEhF,wBAAwB,EAAE,GAAG;aAC1B,UAAU,CACT,CAAC,MAA4B,EAAE,EAAE,CAC/B,IAAI,+BAA+B,CAAC,MAAM,CAAC,sBAAsB,CAAC,CACrE;aACA,SAAS,EAAE;QAEd,0BAA0B,EAAE,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,uBAAuB,EAAE,CAAC,CAAC,SAAS,EAAE;KAE5F,CAAC,CAAC;IAEH;;;;;;;;;;OAUG;IACH,GAAG,CAAC,EAAE,CAAC,WAAW,CAChB,uBAAuB,EACvB,GAAG;SACA,UAAU,CACT,CAAC,EAAE,SAAS,EAAwB,EAAE,EAAE,CAAC,IAAI,wBAAwB,CAAC,SAAS,CAAC,CACjF;SACA,SAAS,EAAE,CACf,CAAC;IAEF,GAAG,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACvB,MAAM,EACJ,SAAS,EACT,YAAY,EACZ,eAAe,EACf,sBAAsB,EAAE,QAAQ,EAChC,wBAAwB,EACxB,0BAA0B,GAC3B,GAAG,GAAG,CAAC,MAAM,EAAwB,CAAC;QACvC,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,EAAwB,CAAC,0BAA0B,CAAC;QAEjF;;;;;;;;WAQG;QACH,MAAM,gBAAgB,GAAG,KAAK,EAAE,GAAmB,EAA4B,EAAE;YAC/E,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,EAAwB,CAAC;YAClD,MAAM,cAAc,GAAG,MAAM,CAAC,8BAA8B,CAAC,GAAG,CAAC,CAAC;YAClE,IAAI,cAAc,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YACzC,OAAO,MAAM,CAAC,2BAA2B,CAAC,aAAa,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;QAC9F,CAAC,CAAC;QAEF,MAAM,kCAAkC,CAAC,GAAG,EAAE;YAC5C,SAAS;YACT,QAAQ;YACR,WAAW,EAAE,wBAAwB;YACrC,yCAAyC,EAAE,gBAAgB;SAC5D,CAAC,CAAC;QAEH;;;;;;;;;;;;;WAaG;QACH,MAAM,WAAW,GAAG,GAA2B,EAAE,CAC/C,cAAc,CAAC,SAAS,CAAC,UAAU,CAAC;YAClC,CAAC,CAAC,QAAQ,CAAkB,GAAG,EAAE,iBAAiB,CAAC;YACnD,CAAC,CAAC,IAAI,CAAC;QAEX,MAAM,iCAAiC,CAAC,GAAG,EAAE;YAC3C,SAAS;YACT,YAAY;YACZ,eAAe;YACf,UAAU,EAAE,GAAG,CAAC,MAAM,EAAwB,CAAC,UAAU;YACzD,QAAQ;YACR,mBAAmB,EAAE,0BAA0B;YAC/C,WAAW;YACX,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,UAAU,EAAE,CAAC;SAC5E,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,aAAa;CACd,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAI3B;IACH,EAAE,UAAU,EAAE,gBAAgB,EAAE,KAAK,EAAE,+BAA+B,EAAE,cAAc,EAAE,mBAAmB,EAAE;CAC9G,CAAC"}

package/dist/backend/routes.d.ts

@@ -0,0 +1,55 @@
+import type { FastifyInstance, FastifyRequest } from 'fastify';
+import type { EntityManager } from '@mikro-orm/postgresql';
+import { type PaymentReadPort } from '@endora-commerce/contracts';
+import type { CommandBus } from '@endora-commerce/platform/commands';
+import type { SalesChannelMembershipPort } from '@endora-commerce/platform/kernel';
+import type { PaymentAdapterRegistry } from './services/payment-adapter-registry.js';
+import type { PaymentMethodEligibilityService } from './services/payment-method-eligibility.js';
+import { type OrderStatusRegistry } from './services/order-status-registry.port.js';
+import type { RequireAdminAnyFactory, RequireAdminFactory } from '@endora-commerce/platform/kernel';
+/**
+ * Public read endpoint: list active payment methods (storefront checkout).
+ * Admin mutation lives under `/api/v1/admin/payment-methods`. Eligibility
+ * validators (validateUseOnStorefront) are layered on in US2 via the
+ * eligibility service; this endpoint keeps the active ∩ org-allow-list
+ * filtering.
+ */
+export interface PaymentMethodsPublicDeps {
+    emFactory: () => EntityManager;
+    /**
+     * Feature 026 US4 — per-Organization allow-list of payment-method IDs.
+     * Empty / null ⇒ platform defaults apply (every active method is offered).
+     */
+    resolveOrganizationPaymentMethodAllowList?: (req: FastifyRequest) => Promise<string[] | null>;
+    /** Feature 034 — resolves a method's storefront renderer key. */
+    registry?: PaymentAdapterRegistry;
+    /** Feature 034 — applies adapter `validateUseOnStorefront` + registered-adapter filtering. */
+    eligibility?: PaymentMethodEligibilityService;
+}
+export interface PaymentMethodsAdminDeps {
+    emFactory: () => EntityManager;
+    requireAdmin: RequireAdminFactory;
+    /**
+     * Only `GET /api/v1/admin/order-statuses` uses it, and only because that one
+     * route is read by two editors — see the comment on its registration below.
+     */
+    requireAdminAny: RequireAdminAnyFactory;
+    /** Issue #125 — the two admin writes run on the bus (Principle XIII). */
+    commandBus: CommandBus;
+    /** Feature 005 / T027b — new payment methods auto-bind to the system default. */
+    salesChannelMembership?: SalesChannelMembershipPort;
+    /** Feature 034 — validates `adapter` against the registered adapters. */
+    registry?: PaymentAdapterRegistry;
+    /** Feature 034 — validates `statusOn*` references + powers /admin/order-statuses. */
+    orderStatusRegistry?: OrderStatusRegistry;
+    /**
+     * Feature 075 — the delete-guard's read of `payments`, or `null` when that
+     * module is not effectively present. Required, unlike the optional deps
+     * above: a missing guard would silently delete a method attempts still point
+     * at, which is the one failure FR-003 exists to prevent.
+     */
+    paymentRead: () => PaymentReadPort | null;
+}
+export declare function registerPaymentMethodsPublicRoutes(app: FastifyInstance, deps: PaymentMethodsPublicDeps): Promise<void>;
+export declare function registerPaymentMethodsAdminRoutes(app: FastifyInstance, deps: PaymentMethodsAdminDeps): Promise<void>;
+//# sourceMappingURL=routes.d.ts.map

package/dist/backend/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../src/backend/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EAML,KAAK,eAAe,EACrB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oCAAoC,CAAC;AAWrE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AACrF,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAChG,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,0CAA0C,CAAC;AAClD,OAAO,KAAK,EACV,sBAAsB,EACtB,mBAAmB,EACpB,MAAM,kCAAkC,CAAC;AAE1C;;;;;;GAMG;AACH,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,aAAa,CAAC;IAC/B;;;OAGG;IACH,yCAAyC,CAAC,EAAE,CAAC,GAAG,EAAE,cAAc,KAAK,OAAO,CAAC,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC;IAC9F,iEAAiE;IACjE,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,8FAA8F;IAC9F,WAAW,CAAC,EAAE,+BAA+B,CAAC;CAC/C;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,aAAa,CAAC;IAC/B,YAAY,EAAE,mBAAmB,CAAC;IAClC;;;OAGG;IACH,eAAe,EAAE,sBAAsB,CAAC;IACxC,yEAAyE;IACzE,UAAU,EAAE,UAAU,CAAC;IACvB,iFAAiF;IACjF,sBAAsB,CAAC,EAAE,0BAA0B,CAAC;IACpD,yEAAyE;IACzE,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAClC,qFAAqF;IACrF,mBAAmB,CAAC,EAAE,mBAAmB,CAAC;IAC1C;;;;;OAKG;IACH,WAAW,EAAE,MAAM,eAAe,GAAG,IAAI,CAAC;CAC3C;AAMD,wBAAsB,kCAAkC,CACtD,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC,IAAI,CAAC,CA4Bf;AAED,wBAAsB,iCAAiC,CACrD,GAAG,EAAE,eAAe,EACpB,IAAI,EAAE,uBAAuB,GAC5B,OAAO,CAAC,IAAI,CAAC,CA4Jf"}

package/dist/backend/routes.js

@@ -0,0 +1,226 @@
+import { ERROR_CODES, paymentMethodStatusPatchSchema, paymentMethodUpsertSchema, } from '@endora-commerce/contracts';
+import { HttpError } from '@endora-commerce/platform/http';
+import { makeDeletePaymentMethodCommand, makeSetPaymentMethodStatusCommand, makeUpsertPaymentMethodCommand, } from './commands/payment-method.commands.js';
+import { effectiveState, toModulePresenceDto, } from '@endora-commerce/platform/kernel';
+import { PaymentMethod } from './entities/payment-method.entity.js';
+import { OrderStatusRegistryError, } from './services/order-status-registry.port.js';
+function rendererKeyFor(deps, adapter) {
+    return deps.registry?.get(adapter)?.renderers?.storefront ?? null;
+}
+export async function registerPaymentMethodsPublicRoutes(app, deps) {
+    app.get('/api/v1/payment-methods', async (request) => {
+        const em = deps.emFactory();
+        let rows = await em.find(PaymentMethod, { status: 'active' }, { orderBy: { code: 'asc' } });
+        if (deps.resolveOrganizationPaymentMethodAllowList) {
+            const allowList = await deps.resolveOrganizationPaymentMethodAllowList(request);
+            if (allowList && allowList.length > 0) {
+                const allowSet = new Set(allowList);
+                rows = rows.filter((m) => allowSet.has(m.id));
+            }
+        }
+        // Feature 034 — adapter validateUseOnStorefront + registered-adapter filter.
+        // Sales-channel-assignment filtering is applied upstream once the storefront
+        // checkout passes the resolved channel; org/customer context is best-effort
+        // here (built-in validators do not depend on it).
+        if (deps.eligibility) {
+            rows = await deps.eligibility.filter(rows, {
+                salesChannelId: null,
+                organizationId: null,
+                customerAccountId: null,
+                surface: 'storefront',
+            });
+        }
+        return { data: rows.map((m) => serializePublic(m, deps)) };
+    });
+}
+export async function registerPaymentMethodsAdminRoutes(app, deps) {
+    const requireAdmin = deps.requireAdmin;
+    app.get('/api/v1/admin/payment-methods', { preHandler: requireAdmin('payment_methods:read') }, async () => {
+        const em = deps.emFactory();
+        const rows = await em.find(PaymentMethod, {}, { orderBy: { code: 'asc' } });
+        const data = await Promise.all(rows.map((m) => serializeAdmin(m, deps)));
+        return { data };
+    });
+    /**
+     * T017a — Order-status options for the admin status selectors (FR-009).
+     *
+     * The one route of this module's six that is **not** gated on
+     * `payment_methods:read` alone, and the exception is a fact about its
+     * consumers rather than about its data. It is registered once, here, and read
+     * by two editors: the payment-method screen and — through
+     * `admin/src/modules/delivery_methods/api/delivery-methods-client.ts` — the
+     * delivery-method one. Gating it on `payment_methods:read` alone would leave
+     * the delivery-method status selectors 403 for a role that holds only the
+     * delivery pair, which is every role that can open that screen and not this
+     * one.
+     *
+     * So it is an any-of over the two editors' read codes: holding either one is
+     * sufficient, which is what `requireAdminAny` means. The second member was
+     * `catalog:read` for as long as `delivery_methods` borrowed the catalogue's
+     * authority (MR !1078), and both members were asserted in
+     * `test/contract/payment_methods/permission-authority.test.ts` so that the
+     * merge request giving that module its own pair had to replace it visibly
+     * rather than widen the gate in silence. This is that replacement: the member
+     * is now `delivery_methods:read`, and no catalogue holder reaches the shared
+     * list any more, because no catalogue holder opens either editor.
+     *
+     * The edge does not bind: an operator may switch `delivery_methods` off, and
+     * when they do the code stops being grantable while `payment_methods:read`
+     * goes on opening the list for the only screen still asking for it.
+     */
+    app.get('/api/v1/admin/order-statuses', { preHandler: deps.requireAdminAny(['payment_methods:read', 'delivery_methods:read']) }, async () => {
+        const list = deps.orderStatusRegistry?.list() ?? [];
+        return { data: list };
+    });
+    // Registered payment adapters (feature 034) — powers the admin adapter picker
+    // so an admin can bind a payment method to a specific backend driver
+    // (e.g. `stripe`, `bank_transfer`) rather than defaulting to its `kind`.
+    app.get('/api/v1/admin/payment-methods/adapters', { preHandler: requireAdmin('payment_methods:read') }, async () => {
+        const list = deps.registry?.list() ?? [];
+        return { data: list };
+    });
+    app.put('/api/v1/admin/payment-methods/:code', {
+        preHandler: requireAdmin('payment_methods:write'),
+        schema: { body: paymentMethodUpsertSchema },
+    }, async (request) => {
+        const body = paymentMethodUpsertSchema.parse(request.body);
+        const em = deps.emFactory();
+        const adapter = body.adapter ?? body.kind;
+        if (deps.registry && !deps.registry.isRegistered(adapter)) {
+            throw new HttpError(400, ERROR_CODES.VALIDATION_FAILED, `Unknown payment adapter "${adapter}". Register an adapter module first.`);
+        }
+        // Validate any explicitly-provided Order-status references (FR-009).
+        if (deps.orderStatusRegistry) {
+            for (const ref of [body.statusOnPending, body.statusOnSuccess, body.statusOnFailure]) {
+                if (ref !== undefined)
+                    assertValidStatus(deps.orderStatusRegistry, ref);
+            }
+        }
+        // Which methods a shop offers, and which order status each payment result
+        // moves an order to, is operator configuration. The read below only tells
+        // the Command whether this call creates or updates — the write itself
+        // happens inside the bus transaction (issue #125).
+        const existing = await em.findOne(PaymentMethod, { code: request.params.code });
+        const { method: row, created } = await deps.commandBus.run(makeUpsertPaymentMethodCommand({
+            code: request.params.code,
+            body,
+            adapter,
+            existingId: existing?.id ?? null,
+        }));
+        // Channel membership is the sales-channel bridge's own write, on its own
+        // EntityManager, so it stays outside the Command rather than pretending to
+        // share its transaction.
+        if (created && deps.salesChannelMembership) {
+            await deps.salesChannelMembership.bindToDefaultIfEmpty('payment-method', row.id);
+        }
+        // Replace sales-channel membership when an explicit (non-empty) set is given.
+        if (body.salesChannelIds && body.salesChannelIds.length > 0 && deps.salesChannelMembership) {
+            await replaceChannelMembership(deps.salesChannelMembership, row.id, body.salesChannelIds);
+        }
+        return { data: await serializeAdmin(row, deps) };
+    });
+    /**
+     * Availability — feature 076, D-82. The one write that decides whether a
+     * method is offered to buyers, wherever an operator arrives from: the four
+     * gateway screens link here rather than writing the column themselves.
+     *
+     * Keyed by **id**, like the `DELETE` beside it and unlike the `PUT` above:
+     * the `PUT` is an upsert, so it is keyed by the natural key it may create,
+     * while this operates on a row that must already exist. The 404 is inside the
+     * Command, on its own transaction.
+     */
+    app.patch('/api/v1/admin/payment-methods/:id/status', {
+        preHandler: requireAdmin('payment_methods:write'),
+        schema: { body: paymentMethodStatusPatchSchema },
+    }, async (request) => {
+        const body = paymentMethodStatusPatchSchema.parse(request.body);
+        const row = await deps.commandBus.run(makeSetPaymentMethodStatusCommand(request.params.id, body.status));
+        return { data: await serializeAdmin(row, deps) };
+    });
+    app.delete('/api/v1/admin/payment-methods/:id', { preHandler: requireAdmin('payment_methods:write') }, async (request, reply) => {
+        // The 404 and the T017b delete-guard (FR-003) live inside the Command.
+        // The guard's count runs on `paymentReadPort`, so it is `payments`
+        // answering for its own table rather than this module reading it; with
+        // that module switched off the guard has no answer and the delete is
+        // refused rather than taken on trust.
+        await deps.commandBus.run(makeDeletePaymentMethodCommand(request.params.id, { paymentRead: deps.paymentRead }));
+        return reply.status(204).send();
+    });
+}
+function assertValidStatus(registry, ref) {
+    try {
+        registry.assertValid(ref);
+    }
+    catch (err) {
+        if (err instanceof OrderStatusRegistryError) {
+            throw new HttpError(400, ERROR_CODES.VALIDATION_FAILED, `Unknown order status "${ref}".`);
+        }
+        throw err;
+    }
+}
+async function replaceChannelMembership(membership, methodId, desiredChannelIds) {
+    const current = await membership.listChannelsForEntity('payment-method', methodId);
+    const currentIds = new Set(current.map((c) => c.id));
+    const desired = new Set(desiredChannelIds);
+    // Add first so a later removal never transiently leaves zero channels.
+    for (const id of desired) {
+        if (!currentIds.has(id))
+            await membership.addToChannel(id, 'payment-method', methodId);
+    }
+    for (const id of currentIds) {
+        if (!desired.has(id))
+            await membership.removeFromChannel(id, 'payment-method', methodId);
+    }
+}
+function serializePublic(m, deps) {
+    return {
+        id: m.id,
+        code: m.code,
+        name: m.name,
+        kind: m.kind,
+        adapter: m.adapter,
+        status: m.status,
+        additionalPrice: Number(m.additionalPrice),
+        rendererKey: rendererKeyFor(deps, m.adapter),
+    };
+}
+/**
+ * Why this method is, or is not, offered to a buyer (issue #96).
+ *
+ * The admin keeps every row — switching a gateway off drops nothing — so the
+ * list carries the reason instead of the row. The reason is the owning module's
+ * presence, taken from the projection `/platform/modules` already renders, so
+ * no second vocabulary and no hard-coded module list on either frontend.
+ */
+function availabilityOf(m, deps) {
+    const ownerModule = deps.registry?.ownerOf(m.adapter) ?? null;
+    const presence = ownerModule === null ? undefined : effectiveState.presence(ownerModule);
+    return {
+        ownerModule,
+        available: deps.registry?.isAvailable(m.adapter) ?? false,
+        ownerPresence: presence ? toModulePresenceDto(presence) : null,
+    };
+}
+async function serializeAdmin(m, deps) {
+    const channels = deps.salesChannelMembership
+        ? await deps.salesChannelMembership.listChannelsForEntity('payment-method', m.id)
+        : [];
+    return {
+        id: m.id,
+        code: m.code,
+        adapter: m.adapter,
+        kind: m.kind,
+        name: m.name,
+        status: m.status,
+        additionalPrice: Number(m.additionalPrice),
+        statusOnPending: m.statusOnPending,
+        statusOnSuccess: m.statusOnSuccess,
+        statusOnFailure: m.statusOnFailure,
+        salesChannelIds: channels.map((c) => c.id),
+        // Presence-blind: an admin screen goes on rendering a Stripe row the way
+        // Stripe renders it while Stripe is switched off.
+        rendererKey: deps.registry?.entry(m.adapter)?.adapter.renderers?.admin ?? null,
+        availability: availabilityOf(m, deps),
+    };
+}
+//# sourceMappingURL=routes.js.map

package/dist/backend/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../src/backend/routes.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,WAAW,EACX,8BAA8B,EAC9B,yBAAyB,GAI1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,gCAAgC,CAAC;AAE3D,OAAO,EACL,8BAA8B,EAC9B,iCAAiC,EACjC,8BAA8B,GAC/B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,cAAc,EACd,mBAAmB,GACpB,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,qCAAqC,CAAC;AAIpE,OAAO,EACL,wBAAwB,GAEzB,MAAM,0CAA0C,CAAC;AAmDlD,SAAS,cAAc,CAAC,IAA2C,EAAE,OAAe;IAClF,OAAO,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,SAAS,EAAE,UAAU,IAAI,IAAI,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,GAAoB,EACpB,IAA8B;IAE9B,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACnD,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAE5F,IAAI,IAAI,CAAC,yCAAyC,EAAE,CAAC;YACnD,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,yCAAyC,CAAC,OAAO,CAAC,CAAC;YAChF,IAAI,SAAS,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtC,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;gBACpC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QAED,6EAA6E;QAC7E,6EAA6E;QAC7E,4EAA4E;QAC5E,kDAAkD;QAClD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YACrB,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE;gBACzC,cAAc,EAAE,IAAI;gBACpB,cAAc,EAAE,IAAI;gBACpB,iBAAiB,EAAE,IAAI;gBACvB,OAAO,EAAE,YAAY;aACtB,CAAC,CAAC;QACL,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC;IAC7D,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,GAAoB,EACpB,IAA6B;IAE7B,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC;IAEvC,GAAG,CAAC,GAAG,CACL,+BAA+B,EAC/B,EAAE,UAAU,EAAE,YAAY,CAAC,sBAAsB,CAAC,EAAE,EACpD,KAAK,IAAI,EAAE;QACT,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QACzE,OAAO,EAAE,IAAI,EAAE,CAAC;IAClB,CAAC,CACF,CAAC;IAEF;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,GAAG,CAAC,GAAG,CACL,8BAA8B,EAC9B,EAAE,UAAU,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC,sBAAsB,EAAE,uBAAuB,CAAC,CAAC,EAAE,EACvF,KAAK,IAAI,EAAE;QACT,MAAM,IAAI,GAAG,IAAI,CAAC,mBAAmB,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACpD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC,CACF,CAAC;IAEF,8EAA8E;IAC9E,qEAAqE;IACrE,yEAAyE;IACzE,GAAG,CAAC,GAAG,CACL,wCAAwC,EACxC,EAAE,UAAU,EAAE,YAAY,CAAC,sBAAsB,CAAC,EAAE,EACpD,KAAK,IAAI,EAAE;QACT,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;QACzC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACxB,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,qCAAqC,EACrC;QACE,UAAU,EAAE,YAAY,CAAC,uBAAuB,CAAC;QACjD,MAAM,EAAE,EAAE,IAAI,EAAE,yBAAyB,EAAE;KAC5C,EACD,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3D,MAAM,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;QAE5B,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC;QAC1C,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1D,MAAM,IAAI,SAAS,CACjB,GAAG,EACH,WAAW,CAAC,iBAAiB,EAC7B,4BAA4B,OAAO,sCAAsC,CAC1E,CAAC;QACJ,CAAC;QACD,qEAAqE;QACrE,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC7B,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;gBACrF,IAAI,GAAG,KAAK,SAAS;oBAAE,iBAAiB,CAAC,IAAI,CAAC,mBAAmB,EAAE,GAAG,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAED,0EAA0E;QAC1E,0EAA0E;QAC1E,sEAAsE;QACtE,mDAAmD;QACnD,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;QAChF,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CACxD,8BAA8B,CAAC;YAC7B,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI;YACzB,IAAI;YACJ,OAAO;YACP,UAAU,EAAE,QAAQ,EAAE,EAAE,IAAI,IAAI;SACjC,CAAC,CACH,CAAC;QAEF,yEAAyE;QACzE,2EAA2E;QAC3E,yBAAyB;QACzB,IAAI,OAAO,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC3C,MAAM,IAAI,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,gBAAgB,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,8EAA8E;QAC9E,IAAI,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;YAC3F,MAAM,wBAAwB,CAAC,IAAI,CAAC,sBAAsB,EAAE,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;QAC5F,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;IACnD,CAAC,CACF,CAAC;IAEF;;;;;;;;;OASG;IACH,GAAG,CAAC,KAAK,CACP,0CAA0C,EAC1C;QACE,UAAU,EAAE,YAAY,CAAC,uBAAuB,CAAC;QACjD,MAAM,EAAE,EAAE,IAAI,EAAE,8BAA8B,EAAE;KACjD,EACD,KAAK,EAAE,OAAO,EAAE,EAAE;QAChB,MAAM,IAAI,GAAG,8BAA8B,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAChE,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CACnC,iCAAiC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAClE,CAAC;QACF,OAAO,EAAE,IAAI,EAAE,MAAM,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;IACnD,CAAC,CACF,CAAC;IAEF,GAAG,CAAC,MAAM,CACR,mCAAmC,EACnC,EAAE,UAAU,EAAE,YAAY,CAAC,uBAAuB,CAAC,EAAE,EACrD,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE;QACvB,uEAAuE;QACvE,mEAAmE;QACnE,uEAAuE;QACvE,qEAAqE;QACrE,sCAAsC;QACtC,MAAM,IAAI,CAAC,UAAU,CAAC,GAAG,CACvB,8BAA8B,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CACrF,CAAC;QACF,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,CAAC,CACF,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,QAA6B,EAAE,GAAW;IACnE,IAAI,CAAC;QACH,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,YAAY,wBAAwB,EAAE,CAAC;YAC5C,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,WAAW,CAAC,iBAAiB,EAAE,yBAAyB,GAAG,IAAI,CAAC,CAAC;QAC5F,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,KAAK,UAAU,wBAAwB,CACrC,UAAsC,EACtC,QAAgB,EAChB,iBAA2B;IAE3B,MAAM,OAAO,GAAG,MAAM,UAAU,CAAC,qBAAqB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACnF,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAC3C,uEAAuE;IACvE,KAAK,MAAM,EAAE,IAAI,OAAO,EAAE,CAAC;QACzB,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,UAAU,CAAC,YAAY,CAAC,EAAE,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IACzF,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,UAAU,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,MAAM,UAAU,CAAC,iBAAiB,CAAC,EAAE,EAAE,gBAAgB,EAAE,QAAQ,CAAC,CAAC;IAC3F,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,CAAgB,EAAE,IAA2C;IACpF,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC;QAC1C,WAAW,EAAE,cAAc,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC;KAC7C,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,cAAc,CACrB,CAAgB,EAChB,IAA2C;IAE3C,MAAM,WAAW,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC;IAC9D,MAAM,QAAQ,GAAG,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACzF,OAAO;QACL,WAAW;QACX,SAAS,EAAE,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK;QACzD,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;KAC/D,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,CAAgB,EAChB,IAA6B;IAE7B,MAAM,QAAQ,GAAG,IAAI,CAAC,sBAAsB;QAC1C,CAAC,CAAC,MAAM,IAAI,CAAC,sBAAsB,CAAC,qBAAqB,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,CAAC;QACjF,CAAC,CAAC,EAAE,CAAC;IACP,OAAO;QACL,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC;QAC1C,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,eAAe,EAAE,CAAC,CAAC,eAAe;QAClC,eAAe,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,yEAAyE;QACzE,kDAAkD;QAClD,WAAW,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,SAAS,EAAE,KAAK,IAAI,IAAI;QAC9E,YAAY,EAAE,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC;KACtC,CAAC;AACJ,CAAC"}

package/dist/backend/services/name-resolver.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Resolve a payment-method display name (feature 034, FR-008).
+ *
+ * A method's `name` is a `lang → label` record. Resolution order:
+ *   1. exact language match (`name[lang]`),
+ *   2. the `default` key,
+ *   3. the first available value.
+ *
+ * Returns an empty string only for an empty record (which the schema rejects).
+ */
+export declare function resolvePaymentMethodName(name: Record<string, string>, lang?: string | null): string;
+//# sourceMappingURL=name-resolver.d.ts.map

package/dist/backend/services/name-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"name-resolver.d.ts","sourceRoot":"","sources":["../../../src/backend/services/name-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CACtC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC5B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,GACnB,MAAM,CAKR"}

package/dist/backend/services/name-resolver.js

@@ -0,0 +1,19 @@
+/**
+ * Resolve a payment-method display name (feature 034, FR-008).
+ *
+ * A method's `name` is a `lang → label` record. Resolution order:
+ *   1. exact language match (`name[lang]`),
+ *   2. the `default` key,
+ *   3. the first available value.
+ *
+ * Returns an empty string only for an empty record (which the schema rejects).
+ */
+export function resolvePaymentMethodName(name, lang) {
+    if (lang && name[lang])
+        return name[lang];
+    if (name.default)
+        return name.default;
+    const first = Object.values(name)[0];
+    return first ?? '';
+}
+//# sourceMappingURL=name-resolver.js.map

package/dist/backend/services/name-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"name-resolver.js","sourceRoot":"","sources":["../../../src/backend/services/name-resolver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,UAAU,wBAAwB,CACtC,IAA4B,EAC5B,IAAoB;IAEpB,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,OAAO,KAAK,IAAI,EAAE,CAAC;AACrB,CAAC"}