@nlabs/reaktor 1.18.0 → 1.20.0-reactorbox.1

package/lib/actions/crmCanonicalPolicy.d.ts

@@ -0,0 +1,92 @@
+import type Stripe from 'stripe';
+export interface CrmCanonicalEvent {
+    adjustmentId?: string;
+    amountMinor?: number;
+    campaignId: string;
+    currency?: string;
+    deleted?: true;
+    eventId: string;
+    occurredAt: string;
+    orderId?: string;
+    productId?: string;
+    projectId: string;
+    revision: number;
+    type: 'lead' | 'qualified_lead' | 'lead_won' | 'lead_lost' | 'purchase' | 'refund' | 'order_canceled';
+    version: 1;
+}
+export interface CrmCanonicalAssociation {
+    appId: string;
+    campaignId: string;
+    canonicalConsent?: {
+        evidenceRef: string;
+        expiresAt: number;
+        purpose: 'canonical_campaign_outcomes';
+    };
+    id: string;
+    kind: string;
+    organizationId: string;
+    productId?: string;
+    projectId: string;
+    revision: number;
+    sourceId: string;
+    sourceRevision: string;
+    status: string;
+}
+export interface CrmCanonicalNativeHistory {
+    association: CrmCanonicalAssociation;
+    source: {
+        revision: string;
+        history: {
+            at: number;
+            id?: string;
+            revision?: number;
+            stage: string;
+            deleted?: boolean;
+        }[];
+        truncated?: boolean;
+        deleted?: boolean;
+    };
+    suppressed: boolean;
+}
+export declare const crmCanonicalDigest: (value: unknown) => string;
+/** Only real versioned native observations are eligible; legacy timestamps never become fabricated history. */
+export declare const crmCanonicalHistoryEvents: (row: CrmCanonicalNativeHistory, at: number) => {
+    events: CrmCanonicalEvent[];
+    held: string;
+    incomplete: boolean;
+};
+export interface CrmFinancialVerificationSource {
+    amountMinor: number;
+    chargeId: string;
+    currency: string;
+    customerId: string;
+    invoiceIssuedAt: number;
+    invoiceStatus: string;
+    invoiceTotalMinor: number;
+    nativePaymentAmountMinor: number;
+    nativePaymentChargeId: string;
+    nativePaymentCurrency: string;
+    nativePaymentUserId: string;
+    settlementReference: string;
+    userId: string;
+}
+export interface CrmVerifiedFinancialProviderEvidence {
+    amountMinor: number;
+    chargeId: string;
+    currency: string;
+    occurredAt: number;
+    provider: 'stripe';
+    refunds: {
+        amountMinor: number;
+        id: string;
+        occurredAt: number;
+    }[];
+    revision: string;
+}
+type ReadClient = Pick<Stripe, 'charges' | 'customers' | 'refunds'>;
+/** GET-only verification of an existing payment; legal registration alone cannot establish external settlement. */
+export declare const verifyCrmFinancialProviderEvidence: (source: CrmFinancialVerificationSource, at: number, client?: ReadClient) => Promise<{
+    evidence?: CrmVerifiedFinancialProviderEvidence;
+    held?: string;
+}>;
+export {};

package/lib/actions/crmCanonicalPolicy.js

@@ -0,0 +1,104 @@
+import { createHash } from 'node:crypto';
+import { getStripeClient } from '../utils/stripeUtils.js';
+export const crmCanonicalDigest = (value)=>createHash('sha256').update(JSON.stringify(value)).digest('hex');
+const stages = {
+    lost: 'lead_lost',
+    new: 'lead',
+    qualified: 'qualified_lead',
+    won: 'lead_won'
+};
+/** Only real versioned native observations are eligible; legacy timestamps never become fabricated history. */ export const crmCanonicalHistoryEvents = (row, at)=>{
+    const { association, source } = row;
+    if (association.status !== 'active' || row.suppressed || source.deleted || source.revision !== association.sourceRevision || association.canonicalConsent?.purpose !== 'canonical_campaign_outcomes' || !Number.isFinite(association.canonicalConsent.expiresAt) || association.canonicalConsent.expiresAt <= at) {
+        return {
+            events: [],
+            held: 'source_or_consent_withdrawn',
+            incomplete: false
+        };
+    }
+    if (source.truncated || source.history.length > 100 || source.history.some((event)=>!event.id || !/^[a-f0-9]{64}$/.test(event.id) || !Number.isSafeInteger(event.revision) || event.revision < 1 || !Number.isSafeInteger(event.at) || event.at > at + 60000 || !Object.hasOwn(stages, event.stage))) {
+        return {
+            events: [],
+            held: 'unversioned_or_truncated_history',
+            incomplete: true
+        };
+    }
+    const events = source.history.filter((event)=>!event.deleted).map((event)=>({
+            campaignId: association.campaignId,
+            eventId: crmCanonicalDigest([
+                association.appId,
+                association.organizationId,
+                association.projectId,
+                association.campaignId,
+                association.id,
+                event.id,
+                event.stage
+            ]),
+            occurredAt: new Date(event.at).toISOString(),
+            productId: association.productId,
+            projectId: association.projectId,
+            revision: event.revision,
+            type: stages[event.stage],
+            version: 1
+        }));
+    return {
+        events,
+        held: undefined,
+        incomplete: false
+    };
+};
+/** GET-only verification of an existing payment; legal registration alone cannot establish external settlement. */ export const verifyCrmFinancialProviderEvidence = async (source, at, client)=>{
+    if (typeof source.nativePaymentCurrency !== 'string' || typeof source.currency !== 'string' || !/^ch_[A-Za-z0-9]{1,160}$/.test(source.chargeId) || !/^cus_[A-Za-z0-9]{1,160}$/.test(source.customerId) || source.settlementReference !== source.chargeId || source.nativePaymentChargeId !== source.chargeId || source.nativePaymentUserId !== source.userId || source.nativePaymentAmountMinor !== source.amountMinor || source.nativePaymentCurrency.toUpperCase() !== source.currency || source.invoiceStatus !== 'issued' || source.invoiceTotalMinor !== source.amountMinor || !Number.isSafeInteger(source.amountMinor) || source.amountMinor <= 0 || !/^[A-Z]{3}$/.test(source.currency) || !Number.isSafeInteger(source.invoiceIssuedAt) || source.invoiceIssuedAt > at) {
+        return {
+            held: 'native_legal_payment_binding_unverified'
+        };
+    }
+    let charge;
+    let customer;
+    let refunds;
+    try {
+        const provider = client || getStripeClient();
+        [charge, customer, refunds] = await Promise.all([
+            provider.charges.retrieve(source.chargeId),
+            provider.customers.retrieve(source.customerId),
+            provider.refunds.list({
+                charge: source.chargeId,
+                limit: 100
+            })
+        ]);
+    } catch  {
+        return {
+            held: 'provider_verification_unavailable'
+        };
+    }
+    const chargeCustomerId = typeof charge.customer === 'string' ? charge.customer : charge.customer?.id;
+    if (charge.id !== source.chargeId || chargeCustomerId !== source.customerId || customer.id !== source.customerId || customer.deleted || !('metadata' in customer) || customer.metadata.userId !== source.userId || charge.paid !== true || charge.captured !== true || charge.status !== 'succeeded' || charge.disputed || charge.livemode !== true || charge.amount !== source.amountMinor || charge.amount_captured !== source.amountMinor || charge.currency.toUpperCase() !== source.currency || !Number.isSafeInteger(charge.created) || charge.created * 1000 > at + 60000 || charge.created * 1000 < source.invoiceIssuedAt) {
+        return {
+            held: 'provider_customer_or_settlement_mismatch'
+        };
+    }
+    if (refunds.has_more || refunds.data.length > 100 || refunds.data.some((refund)=>refund.charge !== charge.id || refund.currency.toUpperCase() !== source.currency || refund.status !== 'succeeded' || !Number.isSafeInteger(refund.amount) || refund.amount <= 0 || !Number.isSafeInteger(refund.created) || refund.created < charge.created || refund.created * 1000 > at + 60000) || new Set(refunds.data.map((refund)=>refund.id)).size !== refunds.data.length || refunds.data.reduce((sum, refund)=>sum + refund.amount, 0) !== charge.amount_refunded || charge.amount_refunded > charge.amount) {
+        return {
+            held: 'provider_refund_evidence_incomplete'
+        };
+    }
+    const evidence = {
+        amountMinor: charge.amount,
+        chargeId: charge.id,
+        currency: source.currency,
+        occurredAt: charge.created * 1000,
+        provider: 'stripe',
+        refunds: refunds.data.map((refund)=>({
+                amountMinor: refund.amount,
+                id: refund.id,
+                occurredAt: refund.created * 1000
+            })).sort((left, right)=>left.id.localeCompare(right.id)),
+        revision: ''
+    };
+    evidence.revision = crmCanonicalDigest(evidence);
+    return {
+        evidence
+    };
+};
+
+//# sourceMappingURL=data:application/json;base64,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

package/lib/actions/crmCheckoutRecovery.d.ts

@@ -0,0 +1,72 @@
+import { useDb } from '../utils/arangodbUtils.js';
+import { authorizeCrmExecutionGrant } from './crmExecution.js';
+import type { ApiContext } from '../types/auth.types.js';
+import type { CrmCheckoutRecoveryBinding } from './crmCheckoutRecoveryPolicy.js';
+type Db = ReturnType<typeof useDb>;
+type Grant = Awaited<ReturnType<typeof authorizeCrmExecutionGrant>>;
+export interface CrmCheckoutRecoveryCandidate {
+    appId: string;
+    campaignId: string;
+    email: string;
+    expiresAt: string;
+    id: string;
+    observedAt: string;
+    organizationId: string;
+    projectId: string;
+    reason: 'verified_unrecovered_checkout';
+    recoveryLinkHash?: string;
+    revision: string;
+    sourceId: string;
+    targetId: string;
+    targetRevision: string;
+}
+interface Candidate extends CrmCheckoutRecoveryCandidate {
+    _key: string;
+    bindingId: string;
+    bindingRevision: string;
+    proofRevision: string;
+}
+/** Only the authenticated customer can record this independent purpose; administrators cannot imply consent. */
+export declare const recordCrmCheckoutRecoveryConsent: (context: ApiContext, input: {
+    appId: string;
+    consent: boolean;
+    expectedUserRevision: string;
+    expiresAt: number;
+}, now?: () => number) => Promise<boolean>;
+/** Registration binds verified existing source identities; it neither grants consent nor sends a message. */
+export declare const registerCrmCheckoutRecoveryBinding: (context: ApiContext, input: {
+    appId: string;
+    associationId: string;
+    checkoutId: string;
+    expectedAssociationRevision: string;
+    expectedUserRevision: string;
+    sourceId: string;
+    userId: string;
+}, now?: () => number, request?: (url: string, params?: any, options?: import("@nlabs/rip-hunter").HunterOptionsType) => Promise<any>) => Promise<{
+    id: string;
+    status: 'registered';
+}>;
+/** Every review and execution repeats protected source and native identity checks. */
+export declare const validateCrmCheckoutRecoveryCandidate: (db: Db, grant: Grant, value: CrmCheckoutRecoveryBinding, now?: () => number, query?: any, request?: (url: string, params?: any, options?: import("@nlabs/rip-hunter").HunterOptionsType) => Promise<any>, receiptId?: string) => Promise<Candidate & {
+    verifiedRecoveryUrl?: string;
+}>;
+export declare const generateCrmCheckoutRecoveryCandidates: (context: ApiContext, input: {
+    appId: string;
+    campaignId: string;
+    limit: number;
+    organizationId: string;
+    projectId: string;
+    sourceId: string;
+}, now?: () => number, request?: (url: string, params?: any, options?: import("@nlabs/rip-hunter").HunterOptionsType) => Promise<any>) => Promise<{
+    appId: string;
+    campaignId: string;
+    candidates: CrmCheckoutRecoveryCandidate[];
+    generatedAt: string;
+    held: Record<string, number>;
+    organizationId: string;
+    projectId: string;
+    schemaVersion: string;
+    sourceId: string;
+    truncated: boolean;
+}>;
+export {};