@fayz-ai/plugin-fiscal-br 0.10.3 → 0.12.0

package/functions/fiscalbr-plugnotas/index.ts

@@ -1,222 +0,0 @@
-// fiscalbr-plugnotas — consult, cancel and fetch the PDF of an issued note.
-//
-// Env: PLUGNOTAS_API_KEY (server-only), PLUGNOTAS_BASE_URL (optional; the
-//      sandbox host for tests), SUPABASE_URL, SUPABASE_ANON_KEY.
-//
-// Port of the V1 `fiscal-plugnotas-issue` (cancel / poll_status / get_pdf).
-// Unlike the V1, nothing here runs as service role: every read and write goes
-// through `fiscalbr_note_for_provider` / `fiscalbr_note_apply` with the
-// caller's JWT, which check financial.read / financial.edit on the note's unit.
-import { createClient } from 'https://esm.sh/@supabase/supabase-js@2.45.0'
-
-const corsHeaders = {
-  'Access-Control-Allow-Origin': '*',
-  'Access-Control-Allow-Headers': 'authorization, x-client-info, apikey, content-type',
-}
-
-const json = (body: unknown, status = 200) =>
-  new Response(JSON.stringify(body), { status, headers: { ...corsHeaders, 'Content-Type': 'application/json' } })
-
-// deno-lint-ignore no-explicit-any
-type Any = any
-
-const API = () => (Deno.env.get('PLUGNOTAS_BASE_URL') || 'https://api.plugnotas.com.br').replace(/\/$/, '')
-
-/** PlugNotas answers 502/504 under load; retry those, never a 4xx. */
-async function pnFetch(path: string, init: RequestInit, apiKey: string): Promise<Response> {
-  const headers = {
-    'x-api-key': apiKey,
-    Accept: 'application/json',
-    ...(init.body ? { 'Content-Type': 'application/json' } : {}),
-    ...(init.headers || {}),
-  } as Record<string, string>
-  let res: Response | null = null
-  for (let attempt = 0; attempt < 3; attempt++) {
-    res = await fetch(`${API()}${path}`, { ...init, headers })
-    if (res.status < 500) return res
-    if (attempt < 2) await new Promise((r) => setTimeout(r, 1500 * (attempt + 1)))
-  }
-  return res!
-}
-
-async function readBody(res: Response): Promise<Any> {
-  const text = await res.text().catch(() => '')
-  try { return JSON.parse(text) } catch { return text || null }
-}
-
-const REMOTE_STATUS: Record<string, string> = {
-  CONCLUIDO: 'authorized', AUTORIZADO: 'authorized', REJEITADO: 'rejected', DENEGADO: 'rejected',
-  CANCELADO: 'cancelled', SUBSTITUIDO: 'substituted', PROCESSANDO: 'processing', PENDENTE: 'processing',
-  AGENDADO: 'processing', AGUARDANDO_CANCELAMENTO: 'processing',
-}
-
-function remoteStatus(body: Any): string {
-  const first = Array.isArray(body) ? body[0] : body
-  return String(first?.situacao || first?.status || '').toUpperCase()
-}
-
-/** PlugNotas sends authorization dates as dd/MM/yyyy as well as ISO. */
-function parseDate(v: unknown): string | null {
-  if (!v) return null
-  const s = String(v)
-  const br = s.match(/^(\d{2})\/(\d{2})\/(\d{4})/)
-  const d = br ? new Date(`${br[3]}-${br[2]}-${br[1]}T00:00:00-03:00`) : new Date(s)
-  return Number.isNaN(d.getTime()) ? null : d.toISOString()
-}
-
-function consultPath(note: Any): string {
-  return note.model === 'nfse'
-    ? `/nfse/consultar/${note.provider_document_id}`
-    : `/${note.model}/${note.provider_document_id}/resumo`
-}
-
-/** One consult, turned into the patch `fiscalbr_note_apply` accepts. */
-async function consult(note: Any, apiKey: string): Promise<{ patch: Any; remote: string; body: Any }> {
-  const res = await pnFetch(consultPath(note), { method: 'GET' }, apiKey)
-  const body = await readBody(res)
-  const remote = res.ok ? remoteStatus(body) : ''
-  const first = Array.isArray(body) ? body[0] : body
-  const patch: Any = { status_payload: body }
-  let status = REMOTE_STATUS[remote]
-
-  // A requested cancellation keeps answering CONCLUIDO until the city hall
-  // finishes; showing "Autorizada" then would hide the cancellation in flight.
-  if (note.cancelled_at && status === 'authorized') status = 'processing'
-  // The cancellation itself was refused: the note is valid again.
-  if (note.cancelled_at && remote && (remote === 'REJEITADO' || remote === 'DENEGADO')) {
-    status = 'authorized'
-    patch.cancelled_at = null
-    patch.cancel_reason = null
-  } else if (remote === 'REJEITADO' || remote === 'DENEGADO') {
-    patch.rejection_payload = body
-  }
-  if (status) patch.status = status
-
-  const number = first?.numero || first?.numeroNfse || first?.nfse?.numero
-  const series = first?.serie ?? first?.nfse?.serie
-  const key = first?.chave || first?.chaveAcesso || first?.protocolo?.chave
-  const code = first?.codigoVerificacao || first?.nfse?.codigoVerificacao
-  if (number) patch.number = String(number)
-  if (series != null) patch.series = String(series)
-  if (key) patch.access_key = String(key)
-  if (code) patch.verification_code = String(code)
-  if (status === 'authorized' && !note.cancelled_at) {
-    const at = parseDate(first?.dataAutorizacao || first?.emissao || first?.dataEmissao)
-    if (at) patch.authorized_at = at
-  }
-  return { patch, remote, body }
-}
-
-function isPdf(b: Uint8Array) {
-  return b.length > 4 && b[0] === 0x25 && b[1] === 0x50 && b[2] === 0x44 && b[3] === 0x46
-}
-
-Deno.serve(async (req) => {
-  if (req.method === 'OPTIONS') return new Response('ok', { headers: corsHeaders })
-  try {
-    const apiKey = Deno.env.get('PLUGNOTAS_API_KEY')
-    if (!apiKey) return json({ error: 'O emissor fiscal não está configurado neste ambiente.' }, 503)
-    const auth = req.headers.get('Authorization') || ''
-    if (!auth) return json({ error: 'Unauthorized' }, 401)
-    const body: Any = await req.json().catch(() => ({}))
-    // A user with two accounts has no tenant without this; it only chooses among
-    // the caller's own memberships (app.requested_tenant), never widens.
-    const tenantId = typeof body?.tenantId === 'string' ? body.tenantId : ''
-    const db = createClient(Deno.env.get('SUPABASE_URL')!, Deno.env.get('SUPABASE_ANON_KEY')!, {
-      global: { headers: { Authorization: auth, ...(tenantId ? { 'x-fayz-tenant': tenantId } : {}) } },
-    })
-
-    const action = String(body?.action || '')
-    const documentId = String(body?.document_id || '')
-    if (!['poll_status', 'cancel', 'get_pdf'].includes(action) || !documentId) {
-      return json({ error: 'Pedido inválido.' }, 400)
-    }
-
-    const gate = action === 'cancel' ? 'cancel' : 'poll'
-    const { data: note, error: noteError } = await db.rpc('fiscalbr_note_for_provider', {
-      p_document_id: documentId, p_action: gate,
-    })
-    if (noteError) {
-      const denied = noteError.code === '42501'
-      return json({ error: denied ? 'Sem permissão para esta nota.' : noteError.message }, denied ? 403 : 404)
-    }
-    if (!note?.provider_document_id) return json({ error: 'Esta nota não tem registro no emissor fiscal.' }, 422)
-
-    const apply = async (patch: Any, event: Any | null) => {
-      const { error } = await db.rpc('fiscalbr_note_apply', {
-        p_document_id: documentId, p_action: action === 'cancel' ? 'cancel' : 'poll', p_patch: patch, p_event: event,
-      })
-      if (error) throw new Error(error.message)
-    }
-
-    if (action === 'poll_status') {
-      const { patch, remote } = await consult(note, apiKey)
-      await apply(patch, { event_type: 'consulta', status: remote || null })
-      return json({ ok: true, status: patch.status ?? note.status })
-    }
-
-    if (action === 'get_pdf') {
-      if (!['authorized', 'cancelled'].includes(note.status)) {
-        return json({ error: 'O PDF só existe para nota autorizada.' }, 422)
-      }
-      const path = note.model === 'nfse'
-        ? `/nfse/pdf/${note.provider_document_id}`
-        : `/${note.model}/${note.provider_document_id}/pdf`
-      const res = await pnFetch(path, { method: 'GET', headers: { Accept: 'application/pdf,application/json' } }, apiKey)
-      let bytes = new Uint8Array(await res.arrayBuffer())
-      // Some city halls hand back a link instead of the bytes.
-      if (res.ok && !isPdf(bytes)) {
-        try {
-          const j = JSON.parse(new TextDecoder().decode(bytes))
-          const link = [j?.url, j?.link, j?.pdf, j?.data?.url, j?.data?.link, j?.data?.pdf]
-            .find((v: unknown) => typeof v === 'string' && /^https?:\/\//.test(v))
-          if (link) {
-            const r2 = await fetch(link)
-            if (r2.ok) bytes = new Uint8Array(await r2.arrayBuffer())
-          }
-        } catch { /* falls through to the error below */ }
-      }
-      if (!isPdf(bytes)) return json({ error: 'O emissor ainda não devolveu o PDF desta nota.' }, 502)
-      // octet-stream: supabase-js hands that back as a Blob; application/pdf would arrive as text.
-      return new Response(bytes, { headers: { ...corsHeaders, 'Content-Type': 'application/octet-stream' } })
-    }
-
-    // cancel
-    if (note.status !== 'authorized' || note.cancelled_at) {
-      return json({ error: 'Só é possível cancelar uma nota autorizada.' }, 422)
-    }
-    const reason = String(body?.justification || '').trim()
-    const min = note.model === 'nfce' ? 15 : 10
-    if (reason.length < min) return json({ error: `A justificativa precisa de pelo menos ${min} caracteres.` }, 422)
-    if (reason.length > 255) return json({ error: 'A justificativa pode ter no máximo 255 caracteres.' }, 422)
-
-    const isNfse = note.model === 'nfse'
-    const res = await pnFetch(
-      isNfse ? `/nfse/cancelar/${note.provider_document_id}` : `/${note.model}/${note.provider_document_id}/cancelamento`,
-      { method: 'POST', body: JSON.stringify(isNfse ? { codigo: String(body?.code || '2'), motivo: reason } : { justificativa: reason }) },
-      apiKey,
-    )
-    const answer = await readBody(res)
-    if (!res.ok) {
-      const message = String(answer?.error?.message || answer?.message || `HTTP ${res.status}`)
-      await apply({}, { event_type: 'cancelamento', status: 'ERRO', justification: reason, response_payload: answer })
-      return json({
-        error: /prazo|30 min|tempo/i.test(message)
-          ? `Cancelamento fora do prazo permitido pela SEFAZ/prefeitura: ${message}`
-          : message,
-      }, 422)
-    }
-
-    // Accepted, not done: the city hall answers "em processamento" and concludes later.
-    const now = new Date().toISOString()
-    await apply(
-      { status: 'processing', cancelled_at: now, cancel_reason: reason },
-      { event_type: 'cancelamento', status: 'SOLICITADO', justification: reason, response_payload: answer },
-    )
-    const { patch, remote } = await consult({ ...note, cancelled_at: now }, apiKey)
-    await apply(patch, { event_type: 'consulta', status: remote || null })
-    return json({ ok: true, status: patch.status ?? 'processing' })
-  } catch (e) {
-    return json({ error: e instanceof Error ? e.message : String(e) }, 500)
-  }
-})