@opencard-dev/core 0.1.0

package/dist/db.d.ts

@@ -0,0 +1,145 @@
+/**
+ * OpenCard SQLite Database
+ *
+ * ─── Instance-per-call pattern (intentional) ─────────────────────────────────
+ *
+ * Callers create a new OpenCardDatabase() per operation rather than sharing
+ * a singleton. This was a deliberate choice for launch:
+ *
+ *   Why: Each handler is self-contained — opens DB, does work, closes it.
+ *   No shared state, no initialization ordering bugs, no "who closed the
+ *   connection" surprises. Easy to test, easy to reason about.
+ *
+ *   Cost: ~5ms overhead per call (file handle + pragma setup). Negligible
+ *   at current call volumes (a few per minute). SQLite handles multiple
+ *   connections to the same file natively via WAL mode — no corruption
+ *   risk, no lock contention at this scale.
+ *
+ *   Future: If profiling shows this matters (it won't for a while),
+ *   switch to dependency injection — initialize once at server startup,
+ *   pass the instance into handlers. Same pattern the webhook server
+ *   already uses for TransactionReconciler.
+ *
+ * ─────────────────────────────────────────────────────────────────────────────
+ */
+import Database from 'better-sqlite3';
+export interface ApprovalRequest {
+    id: string;
+    card_id: string;
+    amount: number;
+    currency: string;
+    merchant_name: string;
+    merchant_category: string | null;
+    reason: string;
+    status: string;
+    decided_by: string | null;
+    decided_at: string | null;
+    decision_note: string | null;
+    created_at: string;
+    expires_at: string;
+}
+export interface StoredTransaction {
+    id: string;
+    stripe_id: string;
+    card_id: string;
+    amount: number;
+    currency: string;
+    merchant_name: string | null;
+    merchant_category: string | null;
+    status: string;
+    stripe_created_at: string | null;
+    recorded_at: string;
+}
+export interface StoredAuthorization {
+    id: string;
+    stripe_id: string;
+    card_id: string;
+    amount: number;
+    currency: string;
+    merchant_name: string | null;
+    merchant_category: string | null;
+    status: string;
+    decision_reason: string | null;
+    created_at: string;
+    updated_at: string;
+}
+export interface RuleVersion {
+    id: number;
+    rule_id: string;
+    version: number;
+    config: string;
+    changed_by: string | null;
+    changed_at: string;
+    change_type: string;
+}
+export interface StoredRule {
+    id: string;
+    card_id: string | null;
+    name: string | null;
+    config: string;
+    enabled: number;
+    created_at: string;
+    updated_at: string;
+}
+export interface StoredCard {
+    id: string;
+    stripe_id: string;
+    status: string;
+    created_at: string;
+}
+export interface StoredCardholder {
+    id: string;
+    name: string;
+    email: string;
+    created_at: string;
+}
+export declare class OpenCardDatabase {
+    private readonly dbPath;
+    private db;
+    constructor(dbPath?: string);
+    private initialize;
+    private runMigrations;
+    getDb(): Database.Database;
+    close(): void;
+    createTransaction(record: Omit<StoredTransaction, 'id' | 'recorded_at'>): StoredTransaction;
+    getTransaction(id: string): StoredTransaction | null;
+    getTransactionsForCard(cardId: string, limit?: number): StoredTransaction[];
+    createAuthorization(record: Omit<StoredAuthorization, 'id' | 'created_at' | 'updated_at'>): StoredAuthorization;
+    updateAuthorization(id: string, updates: Partial<Omit<StoredAuthorization, 'id' | 'stripe_id' | 'created_at'>>): StoredAuthorization;
+    getAuthorization(id: string): StoredAuthorization | null;
+    getAuthorizationByStripeId(stripeId: string): StoredAuthorization | null;
+    getPendingAuthorizationsOlderThan(cardId: string, hours: number): StoredAuthorization[];
+    createRuleVersion(ruleId: string, config: string, changeType: string, changedBy?: string): RuleVersion;
+    getRuleHistory(ruleId: string): RuleVersion[];
+    getRuleAtVersion(ruleId: string, version: number): RuleVersion | null;
+    saveRule(id: string, cardId: string | null, name: string | null, config: string): void;
+    getRule(id: string): {
+        id: string;
+        config: string;
+    } | null;
+    deleteRule(id: string): void;
+    createApprovalRequest(record: {
+        card_id: string;
+        amount: number;
+        currency?: string;
+        merchant_name: string;
+        merchant_category?: string | null;
+        reason: string;
+        timeout_seconds?: number;
+    }): ApprovalRequest;
+    getApprovalRequest(id: string): ApprovalRequest | null;
+    listPendingApprovalRequests(): ApprovalRequest[];
+    listAllApprovalRequests(limit?: number): ApprovalRequest[];
+    approveRequest(id: string, decidedBy: string, note?: string): ApprovalRequest;
+    denyRequest(id: string, decidedBy: string, note?: string): ApprovalRequest;
+    expireStaleApprovalRequests(): number;
+}
+/**
+ * Initialize and return a new database instance.
+ * Call this at server startup to get a DB instance to inject into services.
+ * Prefer this over the module-level singleton to avoid import-time side effects.
+ *
+ * @param dbPath - Optional path override. Defaults to OPENCARD_DB_PATH env var or ~/.opencard/opencard.db
+ */
+export declare function initDatabase(dbPath?: string): OpenCardDatabase;
+//# sourceMappingURL=db.d.ts.map

package/dist/db.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.d.ts","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,QAAQ,MAAM,gBAAgB,CAAC;AAKtC,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,EAAE,CAAkC;gBAEhC,MAAM,CAAC,EAAE,MAAM;IAmB3B,OAAO,CAAC,UAAU;IAWlB,OAAO,CAAC,aAAa;IAmDrB,KAAK,IAAI,QAAQ,CAAC,QAAQ;IAO1B,KAAK,IAAI,IAAI;IAQb,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,IAAI,GAAG,aAAa,CAAC,GAAG,iBAAiB;IAwB3F,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB,GAAG,IAAI;IAOpD,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,SAAM,GAAG,iBAAiB,EAAE;IAOxE,mBAAmB,CAAC,MAAM,EAAE,IAAI,CAAC,mBAAmB,EAAE,IAAI,GAAG,YAAY,GAAG,YAAY,CAAC,GAAG,mBAAmB;IAwB/G,mBAAmB,CACjB,EAAE,EAAE,MAAM,EACV,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,mBAAmB,EAAE,IAAI,GAAG,WAAW,GAAG,YAAY,CAAC,CAAC,GAC7E,mBAAmB;IAmCtB,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI;IAOxD,0BAA0B,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB,GAAG,IAAI;IAOxE,iCAAiC,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,mBAAmB,EAAE;IAcvF,iBAAiB,CACf,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,UAAU,EAAE,MAAM,EAClB,SAAS,CAAC,EAAE,MAAM,GACjB,WAAW;IAwBd,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,EAAE;IAO7C,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,WAAW,GAAG,IAAI;IAOrE,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI;IAuBtF,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI;IAO1D,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAQ5B,qBAAqB,CAAC,MAAM,EAAE;QAC5B,OAAO,EAAE,MAAM,CAAC;QAChB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,aAAa,EAAE,MAAM,CAAC;QACtB,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAClC,MAAM,EAAE,MAAM,CAAC;QACf,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,GAAG,eAAe;IAmCnB,kBAAkB,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI;IAOtD,2BAA2B,IAAI,eAAe,EAAE;IAOhD,uBAAuB,CAAC,KAAK,SAAK,GAAG,eAAe,EAAE;IAOtD,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,eAAe;IAwB7E,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,eAAe;IAwB1E,2BAA2B,IAAI,MAAM;CActC;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,gBAAgB,CAE9D"}

package/dist/db.js

@@ -0,0 +1,373 @@
+"use strict";
+/**
+ * OpenCard SQLite Database
+ *
+ * ─── Instance-per-call pattern (intentional) ─────────────────────────────────
+ *
+ * Callers create a new OpenCardDatabase() per operation rather than sharing
+ * a singleton. This was a deliberate choice for launch:
+ *
+ *   Why: Each handler is self-contained — opens DB, does work, closes it.
+ *   No shared state, no initialization ordering bugs, no "who closed the
+ *   connection" surprises. Easy to test, easy to reason about.
+ *
+ *   Cost: ~5ms overhead per call (file handle + pragma setup). Negligible
+ *   at current call volumes (a few per minute). SQLite handles multiple
+ *   connections to the same file natively via WAL mode — no corruption
+ *   risk, no lock contention at this scale.
+ *
+ *   Future: If profiling shows this matters (it won't for a while),
+ *   switch to dependency injection — initialize once at server startup,
+ *   pass the instance into handlers. Same pattern the webhook server
+ *   already uses for TransactionReconciler.
+ *
+ * ─────────────────────────────────────────────────────────────────────────────
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OpenCardDatabase = void 0;
+exports.initDatabase = initDatabase;
+const better_sqlite3_1 = __importDefault(require("better-sqlite3"));
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const os_1 = __importDefault(require("os"));
+class OpenCardDatabase {
+    dbPath;
+    db = null;
+    constructor(dbPath) {
+        if (dbPath) {
+            this.dbPath = dbPath;
+        }
+        else if (process.env.OPENCARD_DB_PATH) {
+            this.dbPath = process.env.OPENCARD_DB_PATH;
+        }
+        else {
+            const openCardDir = path_1.default.join(os_1.default.homedir(), '.opencard');
+            this.dbPath = path_1.default.join(openCardDir, 'opencard.db');
+        }
+        const dir = path_1.default.dirname(this.dbPath);
+        if (!fs_1.default.existsSync(dir)) {
+            fs_1.default.mkdirSync(dir, { recursive: true });
+            console.log(`[OpenCardDB] Created directory: ${dir}`);
+        }
+        this.initialize();
+    }
+    initialize() {
+        if (this.db)
+            return;
+        this.db = new better_sqlite3_1.default(this.dbPath);
+        this.db.pragma('journal_mode = WAL');
+        this.db.pragma('foreign_keys = ON');
+        console.log(`[OpenCardDB] Opened database: ${this.dbPath}`);
+        this.runMigrations();
+    }
+    runMigrations() {
+        if (!this.db) {
+            throw new Error('[OpenCardDB] Database not initialized');
+        }
+        const migrationsDir = path_1.default.join(__dirname, '..', 'migrations');
+        if (!fs_1.default.existsSync(migrationsDir)) {
+            console.warn(`[OpenCardDB] Migrations directory not found: ${migrationsDir}`);
+            return;
+        }
+        const files = fs_1.default.readdirSync(migrationsDir)
+            .filter(f => f.endsWith('.sql'))
+            .sort();
+        for (const file of files) {
+            const migrationName = file;
+            const migrationPath = path_1.default.join(migrationsDir, file);
+            const sql = fs_1.default.readFileSync(migrationPath, 'utf-8');
+            // Check if migrations table exists each iteration — the first migration creates it.
+            const migrationsTableExists = this.db
+                .prepare("SELECT 1 FROM sqlite_master WHERE type='table' AND name='migrations'")
+                .get();
+            if (migrationsTableExists) {
+                const alreadyApplied = this.db
+                    .prepare('SELECT 1 FROM migrations WHERE name = ?')
+                    .get(migrationName);
+                if (alreadyApplied) {
+                    console.log(`[OpenCardDB] Already applied: ${migrationName}`);
+                    continue;
+                }
+            }
+            try {
+                this.db.exec(sql);
+                this.db.prepare('INSERT INTO migrations (name) VALUES (?)').run(migrationName);
+                console.log(`[OpenCardDB] Applied migration: ${migrationName}`);
+            }
+            catch (error) {
+                throw new Error(`[OpenCardDB] Failed to apply migration ${migrationName}: ${error instanceof Error ? error.message : error}`);
+            }
+        }
+    }
+    getDb() {
+        if (!this.db) {
+            throw new Error('[OpenCardDB] Database not initialized');
+        }
+        return this.db;
+    }
+    close() {
+        if (this.db) {
+            this.db.close();
+            this.db = null;
+            console.log(`[OpenCardDB] Closed database`);
+        }
+    }
+    createTransaction(record) {
+        const db = this.getDb();
+        const id = `txn_${Date.now()}_${Math.random().toString(36).substring(7)}`;
+        const stmt = db.prepare(`
+      INSERT INTO transactions (
+        id, stripe_id, card_id, amount, currency,
+        merchant_name, merchant_category, status, stripe_created_at
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `);
+        stmt.run(id, record.stripe_id, record.card_id, record.amount, record.currency, record.merchant_name, record.merchant_category, record.status, record.stripe_created_at);
+        const result = db
+            .prepare('SELECT * FROM transactions WHERE id = ?')
+            .get(id);
+        console.log(`[OpenCardDB] Created transaction: ${id}`);
+        return result;
+    }
+    getTransaction(id) {
+        const db = this.getDb();
+        return db
+            .prepare('SELECT * FROM transactions WHERE id = ?')
+            .get(id) || null;
+    }
+    getTransactionsForCard(cardId, limit = 100) {
+        const db = this.getDb();
+        return db
+            .prepare('SELECT * FROM transactions WHERE card_id = ? ORDER BY stripe_created_at DESC LIMIT ?')
+            .all(cardId, limit);
+    }
+    createAuthorization(record) {
+        const db = this.getDb();
+        const id = `auth_${Date.now()}_${Math.random().toString(36).substring(7)}`;
+        const stmt = db.prepare(`
+      INSERT INTO authorizations (
+        id, stripe_id, card_id, amount, currency,
+        merchant_name, merchant_category, status, decision_reason
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `);
+        stmt.run(id, record.stripe_id, record.card_id, record.amount, record.currency, record.merchant_name, record.merchant_category, record.status, record.decision_reason);
+        const result = db
+            .prepare('SELECT * FROM authorizations WHERE id = ?')
+            .get(id);
+        console.log(`[OpenCardDB] Created authorization: ${id}`);
+        return result;
+    }
+    updateAuthorization(id, updates) {
+        const db = this.getDb();
+        const existingAuth = db
+            .prepare('SELECT * FROM authorizations WHERE id = ?')
+            .get(id);
+        if (!existingAuth) {
+            throw new Error(`[OpenCardDB] Authorization ${id} not found`);
+        }
+        const updatedAuth = { ...existingAuth, ...updates };
+        const stmt = db.prepare(`
+      UPDATE authorizations
+      SET card_id = ?, amount = ?, currency = ?,
+          merchant_name = ?, merchant_category = ?, status = ?, decision_reason = ?,
+          updated_at = CURRENT_TIMESTAMP
+      WHERE id = ?
+    `);
+        stmt.run(updatedAuth.card_id, updatedAuth.amount, updatedAuth.currency, updatedAuth.merchant_name, updatedAuth.merchant_category, updatedAuth.status, updatedAuth.decision_reason, id);
+        const result = db
+            .prepare('SELECT * FROM authorizations WHERE id = ?')
+            .get(id);
+        console.log(`[OpenCardDB] Updated authorization: ${id}`);
+        return result;
+    }
+    getAuthorization(id) {
+        const db = this.getDb();
+        return db
+            .prepare('SELECT * FROM authorizations WHERE id = ?')
+            .get(id) || null;
+    }
+    getAuthorizationByStripeId(stripeId) {
+        const db = this.getDb();
+        return db
+            .prepare('SELECT * FROM authorizations WHERE stripe_id = ?')
+            .get(stripeId) || null;
+    }
+    getPendingAuthorizationsOlderThan(cardId, hours) {
+        const db = this.getDb();
+        // Use SQLite's datetime() to compute the cutoff relative to 'now' — this
+        // avoids timezone/format mismatches between JS ISO strings and SQLite's
+        // CURRENT_TIMESTAMP format ('YYYY-MM-DD HH:MM:SS' without timezone).
+        const cutoffExpr = `-${hours} hours`;
+        return db
+            .prepare("SELECT * FROM authorizations WHERE card_id = ? AND status = ? AND created_at < datetime('now', ?) ORDER BY created_at")
+            .all(cardId, 'pending', cutoffExpr);
+    }
+    createRuleVersion(ruleId, config, changeType, changedBy) {
+        const db = this.getDb();
+        const maxVersion = db
+            .prepare('SELECT MAX(version) as v FROM rule_versions WHERE rule_id = ?')
+            .get(ruleId);
+        const nextVersion = (maxVersion.v || 0) + 1;
+        const stmt = db.prepare(`
+      INSERT INTO rule_versions (rule_id, version, config, changed_by, change_type)
+      VALUES (?, ?, ?, ?, ?)
+    `);
+        stmt.run(ruleId, nextVersion, config, changedBy || null, changeType);
+        const result = db
+            .prepare('SELECT * FROM rule_versions WHERE rule_id = ? AND version = ?')
+            .get(ruleId, nextVersion);
+        console.log(`[OpenCardDB] Created rule version: ${ruleId} v${nextVersion} (${changeType})`);
+        return result;
+    }
+    getRuleHistory(ruleId) {
+        const db = this.getDb();
+        return db
+            .prepare('SELECT * FROM rule_versions WHERE rule_id = ? ORDER BY version ASC')
+            .all(ruleId);
+    }
+    getRuleAtVersion(ruleId, version) {
+        const db = this.getDb();
+        return db
+            .prepare('SELECT * FROM rule_versions WHERE rule_id = ? AND version = ?')
+            .get(ruleId, version) || null;
+    }
+    saveRule(id, cardId, name, config) {
+        const db = this.getDb();
+        const existing = db
+            .prepare('SELECT 1 FROM rules WHERE id = ?')
+            .get(id);
+        if (existing) {
+            const stmt = db.prepare(`
+        UPDATE rules
+        SET card_id = ?, name = ?, config = ?, updated_at = CURRENT_TIMESTAMP
+        WHERE id = ?
+      `);
+            stmt.run(cardId, name, config, id);
+        }
+        else {
+            const stmt = db.prepare(`
+        INSERT INTO rules (id, card_id, name, config)
+        VALUES (?, ?, ?, ?)
+      `);
+            stmt.run(id, cardId, name, config);
+        }
+    }
+    getRule(id) {
+        const db = this.getDb();
+        return db
+            .prepare('SELECT id, config FROM rules WHERE id = ?')
+            .get(id) || null;
+    }
+    deleteRule(id) {
+        const db = this.getDb();
+        db.prepare('DELETE FROM rules WHERE id = ?').run(id);
+        console.log(`[OpenCardDB] Deleted rule: ${id}`);
+    }
+    // ─── Approval Requests ───────────────────────────────────────────────────
+    createApprovalRequest(record) {
+        const db = this.getDb();
+        const id = `apr_${Date.now()}_${Math.random().toString(36).substring(7)}`;
+        const timeoutSeconds = record.timeout_seconds ?? 300;
+        const expiresAt = new Date(Date.now() + timeoutSeconds * 1000)
+            .toISOString()
+            .replace('T', ' ')
+            .slice(0, 19);
+        const stmt = db.prepare(`
+      INSERT INTO approval_requests (
+        id, card_id, amount, currency, merchant_name, merchant_category,
+        reason, status, expires_at
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, 'pending', ?)
+    `);
+        stmt.run(id, record.card_id, record.amount, record.currency ?? 'usd', record.merchant_name, record.merchant_category ?? null, record.reason, expiresAt);
+        const result = db
+            .prepare('SELECT * FROM approval_requests WHERE id = ?')
+            .get(id);
+        console.log(`[OpenCardDB] Created approval request: ${id}`);
+        return result;
+    }
+    getApprovalRequest(id) {
+        const db = this.getDb();
+        return db
+            .prepare('SELECT * FROM approval_requests WHERE id = ?')
+            .get(id) || null;
+    }
+    listPendingApprovalRequests() {
+        const db = this.getDb();
+        return db
+            .prepare("SELECT * FROM approval_requests WHERE status = 'pending' ORDER BY created_at ASC")
+            .all();
+    }
+    listAllApprovalRequests(limit = 50) {
+        const db = this.getDb();
+        return db
+            .prepare('SELECT * FROM approval_requests ORDER BY created_at DESC LIMIT ?')
+            .all(limit);
+    }
+    approveRequest(id, decidedBy, note) {
+        const db = this.getDb();
+        const existing = db
+            .prepare('SELECT * FROM approval_requests WHERE id = ?')
+            .get(id);
+        if (!existing) {
+            throw new Error(`Approval request ${id} not found`);
+        }
+        if (existing.status !== 'pending') {
+            throw new Error(`Approval request ${id} is already ${existing.status}`);
+        }
+        const now = new Date().toISOString().replace('T', ' ').slice(0, 19);
+        db.prepare(`
+      UPDATE approval_requests
+      SET status = 'approved', decided_by = ?, decided_at = ?, decision_note = ?
+      WHERE id = ?
+    `).run(decidedBy, now, note ?? null, id);
+        console.log(`[OpenCardDB] Approved request: ${id} by ${decidedBy}`);
+        return db.prepare('SELECT * FROM approval_requests WHERE id = ?').get(id);
+    }
+    denyRequest(id, decidedBy, note) {
+        const db = this.getDb();
+        const existing = db
+            .prepare('SELECT * FROM approval_requests WHERE id = ?')
+            .get(id);
+        if (!existing) {
+            throw new Error(`Approval request ${id} not found`);
+        }
+        if (existing.status !== 'pending') {
+            throw new Error(`Approval request ${id} is already ${existing.status}`);
+        }
+        const now = new Date().toISOString().replace('T', ' ').slice(0, 19);
+        db.prepare(`
+      UPDATE approval_requests
+      SET status = 'denied', decided_by = ?, decided_at = ?, decision_note = ?
+      WHERE id = ?
+    `).run(decidedBy, now, note ?? null, id);
+        console.log(`[OpenCardDB] Denied request: ${id} by ${decidedBy}`);
+        return db.prepare('SELECT * FROM approval_requests WHERE id = ?').get(id);
+    }
+    expireStaleApprovalRequests() {
+        const db = this.getDb();
+        const now = new Date().toISOString().replace('T', ' ').slice(0, 19);
+        const result = db.prepare(`
+      UPDATE approval_requests
+      SET status = 'expired'
+      WHERE status = 'pending' AND expires_at <= ?
+    `).run(now);
+        if (result.changes > 0) {
+            console.log(`[OpenCardDB] Expired ${result.changes} stale approval request(s)`);
+        }
+        return result.changes;
+    }
+}
+exports.OpenCardDatabase = OpenCardDatabase;
+/**
+ * Initialize and return a new database instance.
+ * Call this at server startup to get a DB instance to inject into services.
+ * Prefer this over the module-level singleton to avoid import-time side effects.
+ *
+ * @param dbPath - Optional path override. Defaults to OPENCARD_DB_PATH env var or ~/.opencard/opencard.db
+ */
+function initDatabase(dbPath) {
+    return new OpenCardDatabase(dbPath);
+}
+//# sourceMappingURL=db.js.map

package/dist/db.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"db.js","sourceRoot":"","sources":["../src/db.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;;;;;;AAghBH,oCAEC;AAhhBD,oEAAsC;AACtC,4CAAoB;AACpB,gDAAwB;AACxB,4CAAoB;AA+EpB,MAAa,gBAAgB;IACV,MAAM,CAAS;IACxB,EAAE,GAA6B,IAAI,CAAC;IAE5C,YAAY,MAAe;QACzB,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACvB,CAAC;aAAM,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;YACxC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC;QAC7C,CAAC;aAAM,CAAC;YACN,MAAM,WAAW,GAAG,cAAI,CAAC,IAAI,CAAC,YAAE,CAAC,OAAO,EAAE,EAAE,WAAW,CAAC,CAAC;YACzD,IAAI,CAAC,MAAM,GAAG,cAAI,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;QACtD,CAAC;QAED,MAAM,GAAG,GAAG,cAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACxB,YAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACvC,OAAO,CAAC,GAAG,CAAC,mCAAmC,GAAG,EAAE,CAAC,CAAC;QACxD,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;IACpB,CAAC;IAEO,UAAU;QAChB,IAAI,IAAI,CAAC,EAAE;YAAE,OAAO;QAEpB,IAAI,CAAC,EAAE,GAAG,IAAI,wBAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACpC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACrC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC;QAEpC,OAAO,CAAC,GAAG,CAAC,iCAAiC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,aAAa,EAAE,CAAC;IACvB,CAAC;IAEO,aAAa;QACnB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QAED,MAAM,aAAa,GAAG,cAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;QAE/D,IAAI,CAAC,YAAE,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,gDAAgD,aAAa,EAAE,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,YAAE,CAAC,WAAW,CAAC,aAAa,CAAC;aACxC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;aAC/B,IAAI,EAAE,CAAC;QAEV,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,aAAa,GAAG,IAAI,CAAC;YAC3B,MAAM,aAAa,GAAG,cAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;YACrD,MAAM,GAAG,GAAG,YAAE,CAAC,YAAY,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;YAEpD,oFAAoF;YACpF,MAAM,qBAAqB,GAAG,IAAI,CAAC,EAAE;iBAClC,OAAO,CAAC,sEAAsE,CAAC;iBAC/E,GAAG,EAAE,CAAC;YAET,IAAI,qBAAqB,EAAE,CAAC;gBAC1B,MAAM,cAAc,GAAG,IAAI,CAAC,EAAE;qBAC3B,OAAO,CAAC,yCAAyC,CAAC;qBAClD,GAAG,CAAC,aAAa,CAAC,CAAC;gBAEtB,IAAI,cAAc,EAAE,CAAC;oBACnB,OAAO,CAAC,GAAG,CAAC,iCAAiC,aAAa,EAAE,CAAC,CAAC;oBAC9D,SAAS;gBACX,CAAC;YACH,CAAC;YAED,IAAI,CAAC;gBACH,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAClB,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,0CAA0C,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBAC/E,OAAO,CAAC,GAAG,CAAC,mCAAmC,aAAa,EAAE,CAAC,CAAC;YAClE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,KAAK,CACb,0CAA0C,aAAa,KACrD,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAC3C,EAAE,CACH,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;QAC3D,CAAC;QACD,OAAO,IAAI,CAAC,EAAE,CAAC;IACjB,CAAC;IAED,KAAK;QACH,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACZ,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC;YAChB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,iBAAiB,CAAC,MAAqD;QACrE,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAE1E,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;KAKvB,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CACN,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,EACpE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,iBAAiB,CACxF,CAAC;QAEF,MAAM,MAAM,GAAG,EAAE;aACd,OAAO,CAAC,yCAAyC,CAAC;aAClD,GAAG,CAAC,EAAE,CAAsB,CAAC;QAEhC,OAAO,CAAC,GAAG,CAAC,qCAAqC,EAAE,EAAE,CAAC,CAAC;QACvD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,cAAc,CAAC,EAAU;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,OAAQ,EAAE;aACP,OAAO,CAAC,yCAAyC,CAAC;aAClD,GAAG,CAAC,EAAE,CAAuB,IAAI,IAAI,CAAC;IAC3C,CAAC;IAED,sBAAsB,CAAC,MAAc,EAAE,KAAK,GAAG,GAAG;QAChD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO,EAAE;aACN,OAAO,CAAC,sFAAsF,CAAC;aAC/F,GAAG,CAAC,MAAM,EAAE,KAAK,CAAwB,CAAC;IAC/C,CAAC;IAED,mBAAmB,CAAC,MAAqE;QACvF,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,QAAQ,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAE3E,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;KAKvB,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CACN,EAAE,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,EACpE,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,eAAe,CACtF,CAAC;QAEF,MAAM,MAAM,GAAG,EAAE;aACd,OAAO,CAAC,2CAA2C,CAAC;aACpD,GAAG,CAAC,EAAE,CAAwB,CAAC;QAElC,OAAO,CAAC,GAAG,CAAC,uCAAuC,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,mBAAmB,CACjB,EAAU,EACV,OAA8E;QAE9E,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAExB,MAAM,YAAY,GAAG,EAAE;aACpB,OAAO,CAAC,2CAA2C,CAAC;aACpD,GAAG,CAAC,EAAE,CAAoC,CAAC;QAE9C,IAAI,CAAC,YAAY,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,8BAA8B,EAAE,YAAY,CAAC,CAAC;QAChE,CAAC;QAED,MAAM,WAAW,GAAG,EAAE,GAAG,YAAY,EAAE,GAAG,OAAO,EAAE,CAAC;QAEpD,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;;KAMvB,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CACN,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,QAAQ,EAC7D,WAAW,CAAC,aAAa,EAAE,WAAW,CAAC,iBAAiB,EAAE,WAAW,CAAC,MAAM,EAC5E,WAAW,CAAC,eAAe,EAAE,EAAE,CAChC,CAAC;QAEF,MAAM,MAAM,GAAG,EAAE;aACd,OAAO,CAAC,2CAA2C,CAAC;aACpD,GAAG,CAAC,EAAE,CAAwB,CAAC;QAElC,OAAO,CAAC,GAAG,CAAC,uCAAuC,EAAE,EAAE,CAAC,CAAC;QACzD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,gBAAgB,CAAC,EAAU;QACzB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,OAAQ,EAAE;aACP,OAAO,CAAC,2CAA2C,CAAC;aACpD,GAAG,CAAC,EAAE,CAAyB,IAAI,IAAI,CAAC;IAC7C,CAAC;IAED,0BAA0B,CAAC,QAAgB;QACzC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,OAAQ,EAAE;aACP,OAAO,CAAC,kDAAkD,CAAC;aAC3D,GAAG,CAAC,QAAQ,CAAyB,IAAI,IAAI,CAAC;IACnD,CAAC;IAED,iCAAiC,CAAC,MAAc,EAAE,KAAa;QAC7D,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,yEAAyE;QACzE,wEAAwE;QACxE,qEAAqE;QACrE,MAAM,UAAU,GAAG,IAAI,KAAK,QAAQ,CAAC;QAErC,OAAO,EAAE;aACN,OAAO,CACN,uHAAuH,CACxH;aACA,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,UAAU,CAA0B,CAAC;IACjE,CAAC;IAED,iBAAiB,CACf,MAAc,EACd,MAAc,EACd,UAAkB,EAClB,SAAkB;QAElB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAExB,MAAM,UAAU,GAAG,EAAE;aAClB,OAAO,CAAC,+DAA+D,CAAC;aACxE,GAAG,CAAC,MAAM,CAAyB,CAAC;QAEvC,MAAM,WAAW,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAE5C,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;KAGvB,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,IAAI,IAAI,EAAE,UAAU,CAAC,CAAC;QAErE,MAAM,MAAM,GAAG,EAAE;aACd,OAAO,CAAC,+DAA+D,CAAC;aACxE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAgB,CAAC;QAE3C,OAAO,CAAC,GAAG,CAAC,sCAAsC,MAAM,KAAK,WAAW,KAAK,UAAU,GAAG,CAAC,CAAC;QAC5F,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,cAAc,CAAC,MAAc;QAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO,EAAE;aACN,OAAO,CAAC,oEAAoE,CAAC;aAC7E,GAAG,CAAC,MAAM,CAAkB,CAAC;IAClC,CAAC;IAED,gBAAgB,CAAC,MAAc,EAAE,OAAe;QAC9C,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,OAAQ,EAAE;aACP,OAAO,CAAC,+DAA+D,CAAC;aACxE,GAAG,CAAC,MAAM,EAAE,OAAO,CAAiB,IAAI,IAAI,CAAC;IAClD,CAAC;IAED,QAAQ,CAAC,EAAU,EAAE,MAAqB,EAAE,IAAmB,EAAE,MAAc;QAC7E,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QAExB,MAAM,QAAQ,GAAG,EAAE;aAChB,OAAO,CAAC,kCAAkC,CAAC;aAC3C,GAAG,CAAC,EAAE,CAAC,CAAC;QAEX,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;;OAIvB,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;OAGvB,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IAED,OAAO,CAAC,EAAU;QAChB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,OAAQ,EAAE;aACP,OAAO,CAAC,2CAA2C,CAAC;aACpD,GAAG,CAAC,EAAE,CAAoC,IAAI,IAAI,CAAC;IACxD,CAAC;IAED,UAAU,CAAC,EAAU;QACnB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,EAAE,CAAC,OAAO,CAAC,gCAAgC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACrD,OAAO,CAAC,GAAG,CAAC,8BAA8B,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,4EAA4E;IAE5E,qBAAqB,CAAC,MAQrB;QACC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1E,MAAM,cAAc,GAAG,MAAM,CAAC,eAAe,IAAI,GAAG,CAAC;QACrD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,GAAG,IAAI,CAAC;aAC3D,WAAW,EAAE;aACb,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC;aACjB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAEhB,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC;;;;;KAKvB,CAAC,CAAC;QAEH,IAAI,CAAC,GAAG,CACN,EAAE,EACF,MAAM,CAAC,OAAO,EACd,MAAM,CAAC,MAAM,EACb,MAAM,CAAC,QAAQ,IAAI,KAAK,EACxB,MAAM,CAAC,aAAa,EACpB,MAAM,CAAC,iBAAiB,IAAI,IAAI,EAChC,MAAM,CAAC,MAAM,EACb,SAAS,CACV,CAAC;QAEF,MAAM,MAAM,GAAG,EAAE;aACd,OAAO,CAAC,8CAA8C,CAAC;aACvD,GAAG,CAAC,EAAE,CAAoB,CAAC;QAE9B,OAAO,CAAC,GAAG,CAAC,0CAA0C,EAAE,EAAE,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,kBAAkB,CAAC,EAAU;QAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,OAAQ,EAAE;aACP,OAAO,CAAC,8CAA8C,CAAC;aACvD,GAAG,CAAC,EAAE,CAAqB,IAAI,IAAI,CAAC;IACzC,CAAC;IAED,2BAA2B;QACzB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO,EAAE;aACN,OAAO,CAAC,kFAAkF,CAAC;aAC3F,GAAG,EAAuB,CAAC;IAChC,CAAC;IAED,uBAAuB,CAAC,KAAK,GAAG,EAAE;QAChC,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,OAAO,EAAE;aACN,OAAO,CAAC,kEAAkE,CAAC;aAC3E,GAAG,CAAC,KAAK,CAAsB,CAAC;IACrC,CAAC;IAED,cAAc,CAAC,EAAU,EAAE,SAAiB,EAAE,IAAa;QACzD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,EAAE;aAChB,OAAO,CAAC,8CAA8C,CAAC;aACvD,GAAG,CAAC,EAAE,CAAgC,CAAC;QAE1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,YAAY,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,eAAe,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpE,EAAE,CAAC,OAAO,CAAC;;;;KAIV,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QAEzC,OAAO,CAAC,GAAG,CAAC,kCAAkC,EAAE,OAAO,SAAS,EAAE,CAAC,CAAC;QACpE,OAAO,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,CAAC,EAAE,CAAoB,CAAC;IAC/F,CAAC;IAED,WAAW,CAAC,EAAU,EAAE,SAAiB,EAAE,IAAa;QACtD,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,QAAQ,GAAG,EAAE;aAChB,OAAO,CAAC,8CAA8C,CAAC;aACvD,GAAG,CAAC,EAAE,CAAgC,CAAC;QAE1C,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,YAAY,CAAC,CAAC;QACtD,CAAC;QACD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,IAAI,KAAK,CAAC,oBAAoB,EAAE,eAAe,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpE,EAAE,CAAC,OAAO,CAAC;;;;KAIV,CAAC,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE,IAAI,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC;QAEzC,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,OAAO,SAAS,EAAE,CAAC,CAAC;QAClE,OAAO,EAAE,CAAC,OAAO,CAAC,8CAA8C,CAAC,CAAC,GAAG,CAAC,EAAE,CAAoB,CAAC;IAC/F,CAAC;IAED,2BAA2B;QACzB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACpE,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC;;;;KAIzB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAEZ,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,wBAAwB,MAAM,CAAC,OAAO,4BAA4B,CAAC,CAAC;QAClF,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;CACF;AAnbD,4CAmbC;AAED;;;;;;GAMG;AACH,SAAgB,YAAY,CAAC,MAAe;IAC1C,OAAO,IAAI,gBAAgB,CAAC,MAAM,CAAC,CAAC;AACtC,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,72 @@
+/**
+ * OpenCard Error Classes
+ * ======================
+ * Custom error types for OpenCard, designed to wrap Stripe errors while
+ * preserving the original error code, message, and type.
+ *
+ * This allows callers to recover from specific errors (e.g., retry on
+ * rate limits, handle authorization failures differently) rather than
+ * treating all errors as opaque strings.
+ */
+/**
+ * Base class for all OpenCard errors.
+ * Extends Error and preserves the Stripe error context.
+ */
+export declare class OpenCardError extends Error {
+    /** Original error if this is wrapping a thrown error */
+    cause?: Error;
+    /** Context about what operation failed (stripe-client, rules-engine, etc.) */
+    component: string;
+    /** Stripe error code if available (e.g., 'rate_limit_error', 'authentication_error') */
+    stripeCode?: string;
+    /** Stripe error type if available (e.g., 'StripeInvalidRequestError') */
+    stripeType?: string;
+    /** Additional context (cardId, ruleId, etc.) */
+    context: Record<string, unknown>;
+    constructor(message: string, component: string, context?: Record<string, unknown>);
+}
+/**
+ * Wraps a Stripe error, preserving its type and code.
+ * Useful for error recovery based on the specific Stripe error.
+ *
+ * @param error - The original error (likely from a Stripe SDK call)
+ * @param message - User-friendly message describing what we were doing
+ * @param component - Component name (e.g., 'stripe-client')
+ * @param context - Additional context (cardId, etc.)
+ * @returns OpenCardError with Stripe error info preserved
+ *
+ * @example
+ * try {
+ *   await stripe.issuing.cards.create({ ... });
+ * } catch (err) {
+ *   throw wrapStripeError(err, 'Failed to create card', 'stripe-client', { cardholderId });
+ * }
+ */
+export declare function wrapStripeError(error: unknown, message: string, component: string, context?: Record<string, unknown>): OpenCardError;
+/**
+ * Specific error: Stripe authentication failed (invalid key, revoked key, etc.)
+ */
+export declare class StripeAuthenticationError extends OpenCardError {
+    constructor(message: string, context?: Record<string, unknown>);
+}
+/**
+ * Specific error: Rate limit exceeded — client should retry with backoff.
+ */
+export declare class RateLimitError extends OpenCardError {
+    /** Seconds to wait before retrying (from Stripe's Retry-After header) */
+    retryAfter?: number;
+    constructor(message: string, component: string, retryAfter?: number, context?: Record<string, unknown>);
+}
+/**
+ * Specific error: Invalid parameters (e.g., missing required field, bad enum value)
+ */
+export declare class InvalidParameterError extends OpenCardError {
+    constructor(message: string, context?: Record<string, unknown>);
+}
+/**
+ * Specific error: Rule not found or invalid in the rules store.
+ */
+export declare class RuleError extends OpenCardError {
+    constructor(message: string, context?: Record<string, unknown>);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;GAGG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,wDAAwD;IACxD,KAAK,CAAC,EAAE,KAAK,CAAC;IAEd,8EAA8E;IAC9E,SAAS,EAAE,MAAM,CAAC;IAElB,wFAAwF;IACxF,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAC;IAEpB,gDAAgD;IAChD,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAG/B,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CASxC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,OAAO,EACd,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACpC,aAAa,CAqBf;AAED;;GAEG;AACH,qBAAa,yBAA0B,SAAQ,aAAa;gBAC9C,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CAKnE;AAED;;GAEG;AACH,qBAAa,cAAe,SAAQ,aAAa;IAC/C,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAC;gBAGlB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,UAAU,CAAC,EAAE,MAAM,EACnB,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CAOxC;AAED;;GAEG;AACH,qBAAa,qBAAsB,SAAQ,aAAa;gBAC1C,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CAKnE;AAED;;GAEG;AACH,qBAAa,SAAU,SAAQ,aAAa;gBAC9B,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CAKnE"}