@hartl-services/medusa-base 2.10.0 → 3.0.0

package/.medusa/server/src/tax-compliance/integrations/finanzonline/client.js

@@ -0,0 +1,222 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FinanzOnlineClient = exports.FINANZONLINE_LOGOUT_TIMEOUT_MS = exports.FINANZONLINE_VALIDATION_TIMEOUT_MS = exports.NodeSoapFinanzOnlineOperations = exports.buildStage2UidRequest = exports.FINANZONLINE_UID_WSDL = exports.FINANZONLINE_SESSION_WSDL = void 0;
+const lib_1 = require("../../../shared/lib");
+const soap_1 = require("soap");
+exports.FINANZONLINE_SESSION_WSDL = "https://finanzonline.bmf.gv.at/fonws/ws/sessionService.wsdl";
+exports.FINANZONLINE_UID_WSDL = "https://finanzonline.bmf.gv.at/fonuid/ws/uidAbfrageService.wsdl";
+const buildStage2UidRequest = (input) => ({
+    tid: input.participantId,
+    benid: input.userId,
+    id: input.sessionId,
+    uid_tn: input.requestingVatNumber,
+    uid: input.targetVatNumber,
+    stufe: "2",
+});
+exports.buildStage2UidRequest = buildStage2UidRequest;
+const asNumber = (value) => {
+    const parsed = typeof value === "number" ? value : Number(value);
+    return Number.isFinite(parsed) ? parsed : Number.NaN;
+};
+const optionalString = (value) => typeof value === "string" && value.length > 0 ? value : undefined;
+const firstSoapResult = (value) => {
+    if (!Array.isArray(value)) {
+        return {};
+    }
+    return (0, lib_1.asRecord)(value[0]);
+};
+const scrubSoapTransportState = (client) => {
+    const mutableClient = client;
+    for (const key of Object.getOwnPropertyNames(mutableClient)) {
+        if (key.startsWith("last")) {
+            delete mutableClient[key];
+        }
+    }
+};
+const withValidationScopedSoapClient = async (wsdl, timeoutMs, operation) => {
+    const deadline = Date.now() + timeoutMs;
+    const client = await (0, soap_1.createClientAsync)(wsdl, {
+        wsdl_options: { timeout: timeoutMs },
+    });
+    try {
+        return await operation(client, {
+            timeout: Math.max(1, deadline - Date.now()),
+        });
+    }
+    finally {
+        scrubSoapTransportState(client);
+    }
+};
+/**
+ * The only class that knows the node-soap dynamic method names and the official
+ * FinanzOnline wire parameter names. Raw SOAP requests and responses never
+ * leave this boundary.
+ */
+class NodeSoapFinanzOnlineOperations {
+    async login(input, timeoutMs) {
+        const result = await withValidationScopedSoapClient(exports.FINANZONLINE_SESSION_WSDL, timeoutMs, async (client, requestOptions) => firstSoapResult(await client.loginAsync({
+            tid: input.participantId,
+            benid: input.userId,
+            pin: input.password,
+            herstellerid: input.manufacturerId,
+        }, requestOptions)));
+        return {
+            id: optionalString(result.id),
+            rc: asNumber(result.rc),
+            msg: optionalString(result.msg),
+        };
+    }
+    async queryUid(input, timeoutMs) {
+        const result = await withValidationScopedSoapClient(exports.FINANZONLINE_UID_WSDL, timeoutMs, async (client, requestOptions) => firstSoapResult(await client.uidAbfrageAsync((0, exports.buildStage2UidRequest)(input), requestOptions)));
+        return {
+            rc: asNumber(result.rc),
+            msg: optionalString(result.msg),
+            name: optionalString(result.name),
+            adrz1: optionalString(result.adrz1),
+            adrz2: optionalString(result.adrz2),
+            adrz3: optionalString(result.adrz3),
+            adrz4: optionalString(result.adrz4),
+            adrz5: optionalString(result.adrz5),
+            adrz6: optionalString(result.adrz6),
+        };
+    }
+    async logout(input, timeoutMs) {
+        const result = await withValidationScopedSoapClient(exports.FINANZONLINE_SESSION_WSDL, timeoutMs, async (client, requestOptions) => firstSoapResult(await client.logoutAsync({
+            tid: input.participantId,
+            benid: input.userId,
+            id: input.sessionId,
+        }, requestOptions)));
+        return {
+            rc: asNumber(result.rc),
+            msg: optionalString(result.msg),
+        };
+    }
+}
+exports.NodeSoapFinanzOnlineOperations = NodeSoapFinanzOnlineOperations;
+const INVALID_TARGET_UID_RETURN_CODES = new Set([1, 4]);
+/**
+ * Login and UID query share this budget. The checkout waits 15 s for the
+ * whole tax-identification request, which also recomputes the cart, and the
+ * check runs inside a database transaction that holds the UID lock.
+ */
+exports.FINANZONLINE_VALIDATION_TIMEOUT_MS = 10_000;
+/** Best-effort logout after the budget above. */
+exports.FINANZONLINE_LOGOUT_TIMEOUT_MS = 3_000;
+const MAX_DIAGNOSTIC_LENGTH = 500;
+const describeReturnCode = (response) => `rc=${response.rc}${response.msg ? `: ${response.msg}` : ""}`;
+class FinanzOnlineClient {
+    constructor(operations_, credentials_, logger_, now_ = Date.now) {
+        this.operations_ = operations_;
+        this.credentials_ = credentials_;
+        this.logger_ = logger_;
+        this.now_ = now_;
+    }
+    /**
+     * The shopper only sees "nicht verfügbar"; the FinanzOnline answer goes to
+     * the log. The PIN is masked in case a provider message ever echoes it.
+     */
+    warn_(message) {
+        try {
+            const masked = message
+                .split(this.credentials_.password)
+                .join("***")
+                .slice(0, MAX_DIAGNOSTIC_LENGTH);
+            this.logger_?.warn(`Tax compliance: FinanzOnline-UID-Prüfung nicht verfügbar – ${masked}`);
+        }
+        catch {
+            // Logging must not change the validation outcome.
+        }
+    }
+    async validateUid(input) {
+        let sessionId;
+        let stage = "Login";
+        const deadline = this.now_() + exports.FINANZONLINE_VALIDATION_TIMEOUT_MS;
+        const remaining = () => Math.max(1, deadline - this.now_());
+        try {
+            const login = await this.operations_.login({
+                ...this.credentials_,
+                manufacturerId: input.requestingVatNumber,
+            }, remaining());
+            if (login.rc !== 0 || !login.id) {
+                this.warn_(`Login abgelehnt (${describeReturnCode(login)})`);
+                return {
+                    status: "unavailable",
+                    provider: null,
+                    reason: "provider_unavailable",
+                };
+            }
+            sessionId = login.id;
+            stage = "UID-Abfrage";
+            const result = await this.operations_.queryUid({
+                participantId: this.credentials_.participantId,
+                requestingVatNumber: input.requestingVatNumber,
+                sessionId,
+                targetVatNumber: input.targetVatNumber,
+                userId: this.credentials_.userId,
+            }, remaining());
+            if (result.rc === 0 && result.name) {
+                return {
+                    status: "valid",
+                    provider: {
+                        valid: true,
+                        name: result.name,
+                        addressLines: [
+                            result.adrz1,
+                            result.adrz2,
+                            result.adrz3,
+                            result.adrz4,
+                            result.adrz5,
+                            result.adrz6,
+                        ].filter((line) => Boolean(line)),
+                        reference: null,
+                        returnCode: result.rc,
+                    },
+                    reason: "provider_valid",
+                };
+            }
+            if (INVALID_TARGET_UID_RETURN_CODES.has(result.rc)) {
+                return {
+                    status: "invalid",
+                    provider: {
+                        valid: false,
+                        name: null,
+                        addressLines: [],
+                        reference: null,
+                        returnCode: result.rc,
+                    },
+                    reason: "provider_invalid",
+                };
+            }
+            this.warn_(`UID-Abfrage ohne Ergebnis (${describeReturnCode(result)})`);
+            return {
+                status: "unavailable",
+                provider: null,
+                reason: "provider_unavailable",
+            };
+        }
+        catch (error) {
+            this.warn_(`${stage} fehlgeschlagen: ${error instanceof Error ? error.message : String(error)}`);
+            return {
+                status: "unavailable",
+                provider: null,
+                reason: "technical_error",
+            };
+        }
+        finally {
+            if (sessionId) {
+                try {
+                    await this.operations_.logout({
+                        participantId: this.credentials_.participantId,
+                        sessionId,
+                        userId: this.credentials_.userId,
+                    }, exports.FINANZONLINE_LOGOUT_TIMEOUT_MS);
+                }
+                catch {
+                    // Validation evidence is still usable when best-effort logout fails.
+                }
+            }
+        }
+    }
+}
+exports.FinanzOnlineClient = FinanzOnlineClient;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/tax-compliance/integrations/finanzonline/validator.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FinanzOnlineQualifiedVatValidator = void 0;
+const lib_1 = require("../../../shared/lib");
+const validation_policy_1 = require("../../../modules/tax-compliance/domain/validation-policy");
+class FinanzOnlineQualifiedVatValidator {
+    constructor(client_) {
+        this.client_ = client_;
+        this.availability = "available";
+        this.provider = "at-finanzonline";
+    }
+    async validate(input) {
+        const requestingVatNumber = (0, lib_1.normalizeVatNumber)(input.merchantVatNumber);
+        const targetVatNumber = (0, lib_1.normalizeVatNumber)(input.customerVatNumber);
+        if (requestingVatNumber === lib_1.VAT_NUMBER_PLACEHOLDER ||
+            targetVatNumber === lib_1.VAT_NUMBER_PLACEHOLDER) {
+            return {
+                status: "unavailable",
+                provider: null,
+                reason: "uid_sentinel",
+            };
+        }
+        const result = await this.client_.validateUid({
+            requestingVatNumber,
+            targetVatNumber,
+        });
+        if (result.status !== "valid") {
+            return {
+                status: result.status,
+                provider: result.provider,
+                reason: result.reason,
+            };
+        }
+        const decision = (0, validation_policy_1.evaluateEligibility)({
+            billingAddress: input.billingAddress,
+            companyName: input.companyName,
+            customerVatNumber: input.customerVatNumber,
+            deliveryCountryCode: input.deliveryCountryCode,
+            merchantCountryCode: input.merchantCountryCode,
+            provider: result.provider,
+        });
+        return {
+            status: decision.status,
+            provider: result.provider,
+            reason: decision.reason,
+        };
+    }
+}
+exports.FinanzOnlineQualifiedVatValidator = FinanzOnlineQualifiedVatValidator;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/tax-compliance/integrations/registry.js

@@ -0,0 +1,26 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.selectQualifiedVatValidator = void 0;
+const lib_1 = require("../../shared/lib");
+const validator_1 = require("./validator");
+const client_1 = require("./finanzonline/client");
+const validator_2 = require("./finanzonline/validator");
+const selectQualifiedVatValidator = (input) => {
+    if (input.merchantCountryCode.toLowerCase() !== "at") {
+        return new validator_1.UnavailableQualifiedVatValidator("unsupported_merchant_country");
+    }
+    if ((0, lib_1.normalizeVatNumber)(input.merchantVatNumber) ===
+        lib_1.VAT_NUMBER_PLACEHOLDER) {
+        return new validator_1.UnavailableQualifiedVatValidator("merchant_uid_sentinel");
+    }
+    if (!input.credentials?.participantId.trim() ||
+        !input.credentials.userId.trim() ||
+        !input.credentials.password.trim()) {
+        return new validator_1.UnavailableQualifiedVatValidator("missing_credentials");
+    }
+    const client = input.client ??
+        new client_1.FinanzOnlineClient(new client_1.NodeSoapFinanzOnlineOperations(), input.credentials, input.logger);
+    return new validator_2.FinanzOnlineQualifiedVatValidator(client);
+};
+exports.selectQualifiedVatValidator = selectQualifiedVatValidator;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/tax-compliance/integrations/validator.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UnavailableQualifiedVatValidator = void 0;
+class UnavailableQualifiedVatValidator {
+    constructor(reason_) {
+        this.reason_ = reason_;
+        this.availability = "unavailable";
+        this.provider = "local-unavailable";
+    }
+    async validate() {
+        return {
+            status: "unavailable",
+            provider: null,
+            reason: this.reason_,
+        };
+    }
+}
+exports.UnavailableQualifiedVatValidator = UnavailableQualifiedVatValidator;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/tax-compliance/lib/order-tax-context.js

@@ -0,0 +1,100 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createOrderTaxContextFromContainer = exports.createOrderTaxContext = void 0;
+const utils_1 = require("@medusajs/framework/utils");
+const tax_compliance_state_1 = require("./tax-compliance-state");
+const resolve_services_1 = require("../resolve-services");
+const shipping_tax_apportionment_1 = require("../../workflows/hooks/shipping-tax-apportionment");
+const createOrderTaxContext = async (service, order) => {
+    const validationId = await service.getOrderValidationId(order.id);
+    return validationId
+        ? {
+            tax_compliance_order_id: order.id,
+            tax_compliance_validation_id: validationId,
+        }
+        : undefined;
+};
+exports.createOrderTaxContext = createOrderTaxContext;
+/**
+ * `updateOrderTaxLinesWorkflow`'s `setTaxLineContext` hook only carries the
+ * full item list on `order` for a whole-order recompute; a partial recompute
+ * (explicit item_ids/shipping_method_ids) fetches `order` without its items
+ * (see @medusajs/core-flows order/workflows/update-tax-lines.js `orderFields`
+ * vs `completeOrderFields`). Apportioning shipping tax always needs every
+ * item's current rate, not just the ones this particular call is touching,
+ * so this queries the order fresh whenever the hook's own order isn't
+ * already carrying its items.
+ */
+const resolveOrderForShippingApportionment = async (container, order) => {
+    if (Array.isArray(order.items) && order.currency_code) {
+        return order;
+    }
+    try {
+        const query = container.resolve(utils_1.ContainerRegistrationKeys.QUERY);
+        const { data } = await query.graph({
+            entity: "order",
+            filters: { id: order.id },
+            fields: [
+                "id",
+                "currency_code",
+                "items.id",
+                "items.product_id",
+                "items.product_type_id",
+                "items.quantity",
+                // The order module fills `items.quantity` from the item detail only
+                // when the query joins it; without it every item weighs 0 and the
+                // order loses its apportioned shipping rate.
+                "items.detail.quantity",
+                "items.unit_price",
+                "shipping_address.country_code",
+                "shipping_address.province",
+                "shipping_address.address_1",
+                "shipping_address.address_2",
+                "shipping_address.city",
+                "shipping_address.postal_code",
+                "customer.id",
+                "customer.email",
+                "customer.groups.id",
+            ],
+        });
+        return data[0] ?? null;
+    }
+    catch {
+        return null;
+    }
+};
+const createOrderTaxContextFromContainer = async (container, order) => {
+    let validationContext;
+    try {
+        validationContext = await (0, exports.createOrderTaxContext)((0, resolve_services_1.resolveTaxComplianceService)(container), order);
+    }
+    catch {
+        try {
+            container
+                .resolve(utils_1.ContainerRegistrationKeys.LOGGER)
+                .warn("Tax compliance order context is unavailable; using ordinary B2C tax rates.");
+        }
+        catch {
+            // A missing logger must not turn a tax-only failure into checkout failure.
+        }
+        validationContext = undefined;
+    }
+    // Frozen evidence of a completed order counts whatever `b2b` says now;
+    // only the shipping apportionment follows the stored toggle mirror.
+    if (!(await (0, tax_compliance_state_1.readTaxComplianceState)(container)).shipping_tax_active) {
+        return validationContext;
+    }
+    const fullOrder = await resolveOrderForShippingApportionment(container, order);
+    if (!fullOrder) {
+        return validationContext;
+    }
+    return (0, shipping_tax_apportionment_1.resolveShippingRateContext)(container, {
+        currencyCode: fullOrder.currency_code,
+        items: await (0, shipping_tax_apportionment_1.withLineDiscounts)(container, "order", fullOrder.id, fullOrder.items ?? []),
+        address: fullOrder.shipping_address,
+        customer: fullOrder.customer,
+        additionalContext: validationContext,
+    });
+};
+exports.createOrderTaxContextFromContainer = createOrderTaxContextFromContainer;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/tax-compliance/lib/tax-compliance-state.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readTaxComplianceState = exports.storeTaxComplianceState = void 0;
+const public_1 = require("../../public");
+const tax_compliance_1 = require("@hartl-services/medusa-food-supplements-contracts/paths/tax-compliance");
+const utils_1 = require("@medusajs/framework/utils");
+const plugin_features_1 = require("../plugin-features");
+const resolve_services_1 = require("../resolve-services");
+const STATE_SYNC_LOCK_KEY = "tax-compliance-state-sync";
+const SYNC_LOCK_TIMEOUT_SECONDS = 60;
+/** Used when the mirror cannot be read: ordinary B2C rates, Medusa's shipping tax. */
+const FAIL_SAFE_STATE = {
+    b2b_active: false,
+    shipping_tax_active: false,
+};
+/**
+ * Copies the effective `b2b` and `shipping_tax` toggles (false while the
+ * plugin switch is off; `b2b` also while `vat_validation` is off) into the
+ * module's mirror, which the tax hooks and the order-evidence freeze read
+ * instead of the toggles. Toggle read and write share one lock, so the last
+ * run stores the latest values; a read failure propagates and nothing is
+ * written.
+ */
+const storeTaxComplianceState = async (container) => {
+    const locking = container.resolve(utils_1.Modules.LOCKING);
+    return await locking.execute(STATE_SYNC_LOCK_KEY, async () => {
+        const state = {
+            b2b_active: await (0, public_1.isPluginFeatureEnabled)(container, plugin_features_1.taxCompliancePluginFeatures, tax_compliance_1.TAX_COMPLIANCE_FEATURES.b2b),
+            shipping_tax_active: await (0, public_1.isPluginFeatureEnabled)(container, plugin_features_1.taxCompliancePluginFeatures, tax_compliance_1.TAX_COMPLIANCE_FEATURES.shippingTax),
+        };
+        await (0, resolve_services_1.resolveTaxComplianceService)(container).storeTaxComplianceState(state);
+        return state;
+    }, { timeout: SYNC_LOCK_TIMEOUT_SECONDS });
+};
+exports.storeTaxComplianceState = storeTaxComplianceState;
+/**
+ * Reads the stored mirror. Safe on the tax path: it reads module data, never
+ * a toggle, and a failed read answers "both off" (ordinary B2C rates,
+ * Medusa's shipping tax) instead of failing the cart operation; unlike the
+ * Affiliate mirror, because charging VAT is the safe fallback for taxes.
+ */
+const readTaxComplianceState = async (container) => {
+    try {
+        return await (0, resolve_services_1.resolveTaxComplianceService)(container).getTaxComplianceState();
+    }
+    catch (error) {
+        try {
+            container
+                .resolve(utils_1.ContainerRegistrationKeys.LOGGER)
+                .warn(`Tax compliance state could not be read; using ordinary B2C tax rates and Medusa's shipping tax: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        catch {
+            // A missing logger must not turn a tax-only failure into checkout failure.
+        }
+        return FAIL_SAFE_STATE;
+    }
+};
+exports.readTaxComplianceState = readTaxComplianceState;
+//# sourceMappingURL=data:application/json;base64,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

package/.medusa/server/src/tax-compliance/lib/tax-runtime-settings.js

@@ -0,0 +1,79 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveMerchantProfile = resolveMerchantProfile;
+exports.resolveFinanzOnlineCredentials = resolveFinanzOnlineCredentials;
+const public_1 = require("../../public");
+const lib_1 = require("../../shared/lib");
+const utils_1 = require("@medusajs/framework/utils");
+const runtime_settings_1 = require("../../modules/tax-compliance/runtime-settings");
+const plugin_features_1 = require("../plugin-features");
+/**
+ * App-level readers for the runtime settings the tax checks need. They run
+ * with an application container (route scope, workflow step, hook), read
+ * through the base plugin and hand the result to the module service as a
+ * parameter: a module service does not reach into other modules.
+ */
+// One warning per process and not-configured state, not per validation. A
+// configured read re-arms it.
+const warnOnce = (0, lib_1.createWarnOnce)();
+const FINANZONLINE_NOT_CONFIGURED_KEY = "finanzonline-not-configured";
+/**
+ * Merchant country and UID from the shop master data (base plugin; there is
+ * no config fallback), normalized; `null` while either is unset.
+ */
+async function resolveMerchantProfile(container, options) {
+    try {
+        const { values } = await (0, public_1.getShopMasterData)(container);
+        return (0, runtime_settings_1.toMerchantProfile)(values);
+    }
+    catch (error) {
+        if (!options.failSafe) {
+            throw error;
+        }
+        logError(container, `Tax compliance: shop master data could not be read for ${options.subject ?? "tax identification"}; continuing without B2B tax evidence.`, error);
+        return null;
+    }
+}
+/**
+ * FinanzOnline credentials from the plugin settings. Not configured or not
+ * readable (logged) means `undefined`: the registry then answers
+ * "unavailable" (`missing_credentials`) without calling FinanzOnline.
+ */
+async function resolveFinanzOnlineCredentials(container) {
+    let values;
+    try {
+        ;
+        ({ values } = await (0, public_1.getPluginSettings)(container, plugin_features_1.taxCompliancePluginFeatures));
+    }
+    catch (error) {
+        logError(container, "Tax compliance: FinanzOnline settings could not be read; the qualified UID check is unavailable.", error);
+        return undefined;
+    }
+    const { credentials, missing } = (0, runtime_settings_1.toFinanzOnlineCredentials)(values);
+    if (credentials) {
+        warnOnce.reset(FINANZONLINE_NOT_CONFIGURED_KEY);
+        return credentials;
+    }
+    warnOnce(FINANZONLINE_NOT_CONFIGURED_KEY, missing.join(","), () => {
+        try {
+            container
+                .resolve(utils_1.ContainerRegistrationKeys.LOGGER)
+                .warn(`Tax compliance: FinanzOnline ist nicht konfiguriert (fehlend: ${missing.join(", ")}). Bis die Zugangsdaten im Admin unter „Hartl Services Plugins“ → Steuer-Compliance gepflegt sind, ist die qualifizierte UID-Prüfung nicht verfügbar.`);
+        }
+        catch {
+            // Logging must not change the validation outcome.
+        }
+    });
+    return undefined;
+}
+function logError(container, message, error) {
+    try {
+        container
+            .resolve(utils_1.ContainerRegistrationKeys.LOGGER)
+            .error(message, error instanceof Error ? error : new Error(String(error)));
+    }
+    catch {
+        // A missing logger must not turn the fail-safe itself into a failure.
+    }
+}
+//# sourceMappingURL=data:application/json;base64,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