@fleetless/contracts 6.3.0-next.1 → 6.3.0-next.2

package/artifacts/openapi.json

@@ -9605,7 +9605,7 @@
             }
           }
         },
-        "description": "`available: false` when `MOLLIE_API_KEY` is not configured — this cloud takes no payments, and every mutating route on this page answers `503 billing_unavailable` instead of acting. `account` is `null` before the org has ever checked out; the plan and its limits still come from `GET /api/org/plan` (#103) and are not repeated here."
+        "description": "`available: false` when `MOLLIE_API_KEY` is not configured — this cloud takes no payments, and every billing route that charges or opens a Mollie checkout answers `503 billing_unavailable` instead of acting; cancel, resume, the details and the VAT-ID check need no Mollie and answer normally. `account` is `null` before the org has ever checked out; the plan and its limits still come from `GET /api/org/plan` (#103) and are not repeated here."
       }
     },
     "/api/billing/checkout": {

package/artifacts/routes.json

@@ -6495,7 +6495,7 @@
         "tier_required"
       ],
       "transport": "http",
-      "notes": "`available: false` when `MOLLIE_API_KEY` is not configured — this cloud takes no payments, and every mutating route on this page answers `503 billing_unavailable` instead of acting. `account` is `null` before the org has ever checked out; the plan and its limits still come from `GET /api/org/plan` (#103) and are not repeated here."
+      "notes": "`available: false` when `MOLLIE_API_KEY` is not configured — this cloud takes no payments, and every billing route that charges or opens a Mollie checkout answers `503 billing_unavailable` instead of acting; cancel, resume, the details and the VAT-ID check need no Mollie and answer normally. `account` is `null` before the org has ever checked out; the plan and its limits still come from `GET /api/org/plan` (#103) and are not repeated here."
     },
     {
       "method": "POST",
@@ -6789,9 +6789,11 @@
       "query": null,
       "request": null,
       "response": null,
-      "errors": [],
+      "errors": [
+        "rate_limited"
+      ],
       "transport": "http",
-      "notes": "**The body is never trusted**: it names only a payment id (`id=tr_…`, form-encoded, Mollie's own shape), and this route does nothing with it but call `reconcilePayment(deps, molliePaymentId)` — the same function `GET /api/billing/checkout/:id` and the hourly sweep call — which fetches the payment from Mollie itself and applies what Mollie says, idempotently. Rate limited on the `billing.webhook` bucket, per ip, 600/min — generous, because this is Mollie's own infrastructure calling, not a browser. **Every answer is `200`**, including an id this cloud does not recognise, which is logged and otherwise ignored, **except a processing fault, which is `500`** so Mollie retries the notification rather than this cloud losing it. `auth: 'none'` because Mollie signs nothing Fleetless checks here — the payment is only ever trusted once fetched back from Mollie's own API with the configured key."
+      "notes": "**The body is never trusted**: it names only a payment id (`id=tr_…`, form-encoded, Mollie's own shape), and this route does nothing with it but call `reconcilePayment(deps, molliePaymentId)` — the same function `GET /api/billing/checkout/:id` and the hourly sweep call — which fetches the payment from Mollie itself and applies what Mollie says, idempotently. Rate limited on the `billing.webhook` bucket, per ip, 600/min — generous, because this is Mollie's own infrastructure calling, not a browser; over it the answer is `429 rate_limited`, and Mollie retries the notification later. **Every other answer is `200`**, including an id this cloud does not recognise, which is logged and otherwise ignored, **except a processing fault, which is `500`** so Mollie retries the notification rather than this cloud losing it. `auth: 'none'` because Mollie signs nothing Fleetless checks here — the payment is only ever trusted once fetched back from Mollie's own API with the configured key."
     },
     {
       "method": "POST",

package/dist/billing.d.ts

@@ -174,6 +174,11 @@ export interface CheckoutQuote extends ChargeAmounts {
  * The first charge of a checkout: one full period of `plan` + `addons`.
  * One line for the plan, then one line per add-on actually bought
  * (quantity 0 is omitted, not a zero-amount line).
+ *
+ * The VAT is rounded once, over the whole net amount, because that is what
+ * is charged. Rounding it per line can land a cent off that total, so the
+ * plan line absorbs the difference: the gross lines always add up to
+ * `gross_cents`, and the amount a person sees is the amount charged.
  */
 export declare function checkoutQuote(input: {
     plan: 'plus' | 'pro';

package/dist/billing.js

@@ -201,6 +201,11 @@ export function changeNetCents(input) {
  * The first charge of a checkout: one full period of `plan` + `addons`.
  * One line for the plan, then one line per add-on actually bought
  * (quantity 0 is omitted, not a zero-amount line).
+ *
+ * The VAT is rounded once, over the whole net amount, because that is what
+ * is charged. Rounding it per line can land a cent off that total, so the
+ * plan line absorbs the difference: the gross lines always add up to
+ * `gross_cents`, and the amount a person sees is the amount charged.
  */
 export function checkoutQuote(input) {
     const { plan, addons, cycle, currency, rate_percent } = input;
@@ -218,7 +223,9 @@ export function checkoutQuote(input) {
         }
     }
     const netCents = lines.reduce((sum, line) => sum + line.net_cents, 0);
-    return { ...chargeAmounts(netCents, rate_percent), lines, rate_percent, currency, cycle };
+    const total = chargeAmounts(netCents, rate_percent);
+    lines[0].gross_cents += total.gross_cents - lines.reduce((sum, line) => sum + line.gross_cents, 0);
+    return { ...total, lines, rate_percent, currency, cycle };
 }
 /** Dunning after a failed renewal: retries on these days after the charge's due date. */
 export const BILLING_RETRY_DAYS = [3, 7];

package/dist/errors.js

@@ -1042,8 +1042,10 @@ export const ERROR_CODES = [
     // 2026-10-04 — billing through Mollie (#104).
     /**
      * `503`: this cloud takes no payments, because no payment provider is
-     * configured — `MOLLIE_API_KEY` is unset. Every mutating
-     * billing route answers it, and `GET /api/billing` answers `200` with
+     * configured — `MOLLIE_API_KEY` is unset. Every billing route that
+     * charges or opens a Mollie checkout answers it; the routes that need no
+     * Mollie (cancel, resume, the details, the VAT-ID check) answer normally,
+     * and `GET /api/billing` answers `200` with
      * `available: false` instead, so a caller can render "billing is off"
      * without parsing an error. An upgrade or an add-on is a request to
      * Fleetless instead, exactly as it is today (#103's Feedback request).

package/dist/routes.js

@@ -99,8 +99,9 @@ const DEVELOPER_GUARD = ['unauthorized', 'token_expired', 'token_revoked'];
  * billing's own infrastructure rather than from what the caller sent
  * (2026-10-04, fleetless/fleetless#104): `BILLING_OFF` is no payment
  * provider configured at all, `MOLLIE` is Mollie itself not
- * answering. Every mutating billing route that talks to Mollie
- * lists both; a route that only reads or edits local state lists neither.
+ * answering. Every billing route that charges or opens a Mollie checkout
+ * lists both; a route that only reads or edits local state lists neither,
+ * and answers normally without a key.
  */
 const BILLING_OFF = ['billing_unavailable'];
 const MOLLIE = ['payment_provider_unavailable'];
@@ -2868,9 +2869,9 @@ export const ROUTES = [
      * developer answers `403 tier_required` and `GET /api/billing`
      * is no exception — a developer reads #103's plan cards from
      * `GET /api/org/plan` instead, without the payer, payment method or
-     * invoices (Offene Punkte 5). `billing_unavailable` and
-     * `payment_provider_unavailable` are declared in full on the two routes
-     * above as `BILLING_OFF` and `MOLLIE`.
+     * invoices. The routes that list `billing_unavailable` and
+     * `payment_provider_unavailable` spread them from the `BILLING_OFF` and
+     * `MOLLIE` constants near the top of this file.
      */
     {
         method: 'GET', path: '/api/billing', section: 'billing',
@@ -2878,8 +2879,9 @@ export const ROUTES = [
         audience: 'developer', auth: 'developer', rateLimited: false, ownerTier: true, status: 200,
         params: [], query: null, request: null, response: billingView,
         errors: [...DEVELOPER_GUARD, 'tier_required'], transport: 'http',
-        notes: '`available: false` when `MOLLIE_API_KEY` is not configured — this cloud takes no payments, and every mutating route on ' +
-            'this page answers `503 billing_unavailable` instead of acting. `account` is `null` before the org has ever checked out; the plan ' +
+        notes: '`available: false` when `MOLLIE_API_KEY` is not configured — this cloud takes no payments, and every billing route that ' +
+            'charges or opens a Mollie checkout answers `503 billing_unavailable` instead of acting; cancel, resume, the details and the ' +
+            'VAT-ID check need no Mollie and answer normally. `account` is `null` before the org has ever checked out; the plan ' +
             'and its limits still come from `GET /api/org/plan` (#103) and are not repeated here.',
     },
     {
@@ -3013,12 +3015,12 @@ export const ROUTES = [
         summary: "Takes Mollie's payment-changed notification and reconciles the payment.",
         audience: 'internal', auth: 'none', rateLimited: true, ownerTier: false, status: 200,
         params: [], query: null, request: null, response: null,
-        errors: [], transport: 'http',
+        errors: ['rate_limited'], transport: 'http',
         notes: '**The body is never trusted**: it names only a payment id (`id=tr_…`, form-encoded, Mollie\'s own shape), and this route ' +
             'does nothing with it but call `reconcilePayment(deps, molliePaymentId)` — the same function `GET /api/billing/checkout/:id` and ' +
             'the hourly sweep call — which fetches the payment from Mollie itself and applies what Mollie says, idempotently. Rate limited on ' +
-            'the `billing.webhook` bucket, per ip, 600/min — generous, because this is Mollie\'s own infrastructure calling, not a browser. ' +
-            '**Every answer is `200`**, including an id this cloud does not recognise, which is logged and otherwise ignored, **except a ' +
+            'the `billing.webhook` bucket, per ip, 600/min — generous, because this is Mollie\'s own infrastructure calling, not a browser; ' +
+            'over it the answer is `429 rate_limited`, and Mollie retries the notification later. **Every other answer is `200`**, including an id this cloud does not recognise, which is logged and otherwise ignored, **except a ' +
             'processing fault, which is `500`** so Mollie retries the notification rather than this cloud losing it. `auth: \'none\'` because ' +
             'Mollie signs nothing Fleetless checks here — the payment is only ever trusted once fetched back from Mollie\'s own API with the ' +
             'configured key.',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fleetless/contracts",
-  "version": "6.3.0-next.1",
+  "version": "6.3.0-next.2",
   "description": "Fleetless wire contracts: the bridge-cloud protocol, the REST API schemas and the error codes, as zod schemas with generated JSON Schema and OpenAPI artifacts.",
   "license": "Apache-2.0",
   "author": "Dehne Robotik GmbH",