@opencard-dev/core 0.1.0

package/dist/tracker.d.ts

@@ -0,0 +1,130 @@
+/**
+ * Transaction Tracker
+ * ===================
+ * Keeps running totals of spending per card so the rules engine can enforce
+ * daily and monthly budget limits without needing a database.
+ *
+ * How it works:
+ *  - All data lives in memory (a plain JS Map).
+ *  - Totals are keyed by cardId.
+ *  - Daily totals reset automatically when a new UTC calendar day starts.
+ *  - Monthly totals reset on the first UTC day of each calendar month.
+ *  - Amounts are always in cents (same unit Stripe uses).
+ *
+ * Limitations:
+ *  - Data is lost on process restart. Phase 2 will add persistent storage.
+ *  - In a multi-process / horizontally-scaled deployment, each process has
+ *    its own tracker. For Phase 1 (single webhook server) this is fine.
+ */
+/**
+ * All the spend data we track for a single card.
+ */
+export interface CardSpend {
+    /** Running total of approved spending today (cents, UTC day). */
+    dailySpend: number;
+    /** Running total of approved spending this calendar month (cents, UTC month). */
+    monthlySpend: number;
+    /** How many transactions we've recorded for this card (all time, resets on restart). */
+    transactionCount: number;
+    /**
+     * The UTC date string (YYYY-MM-DD) when dailySpend was last reset.
+     * We compare this to today's date to know when to auto-reset.
+     */
+    lastDailyReset: string;
+    /**
+     * The UTC month string (YYYY-MM) when monthlySpend was last reset.
+     * e.g. "2026-03"
+     */
+    lastMonthlyReset: string;
+}
+/**
+ * TransactionTracker — the main class you interact with.
+ *
+ * Typical usage:
+ *   const tracker = new TransactionTracker();
+ *   tracker.addTransaction('card_abc', 2500); // $25.00
+ *   const daily = tracker.getDailySpend('card_abc'); // 2500
+ */
+export declare class TransactionTracker {
+    /**
+     * In-memory store: cardId → CardSpend.
+     * We use a Map because lookups are O(1) and it's easy to iterate.
+     */
+    private store;
+    /**
+     * Retrieves the spend record for a card, creating a new one if it doesn't
+     * exist yet. Also handles auto-reset of stale daily/monthly totals.
+     */
+    private getOrCreate;
+    /**
+     * Records a transaction for a card and adds its amount to daily and
+     * monthly running totals.
+     *
+     * Call this AFTER an authorization is approved — not before.
+     *
+     * @param cardId - Stripe card ID (e.g. "ic_abc123")
+     * @param amountCents - Transaction amount in cents (e.g. 2500 = $25.00)
+     */
+    addTransaction(cardId: string, amountCents: number): void;
+    /**
+     * Returns how many cents this card has spent today (UTC calendar day).
+     * Returns 0 if the card has never been seen or if the day has rolled over.
+     *
+     * @param cardId - Stripe card ID
+     */
+    getDailySpend(cardId: string): number;
+    /**
+     * Returns how many cents this card has spent this calendar month (UTC).
+     * Returns 0 if no transactions recorded yet.
+     *
+     * @param cardId - Stripe card ID
+     */
+    getMonthlySpend(cardId: string): number;
+    /**
+     * Returns the full spend record for a card, or null if we've never seen it.
+     * Useful for debugging and tests.
+     *
+     * @param cardId - Stripe card ID
+     */
+    getSpend(cardId: string): CardSpend | null;
+    /**
+     * Checks whether adding a hypothetical transaction would blow the daily limit.
+     *
+     * @param cardId - Stripe card ID
+     * @param amountCents - Amount to check (not yet recorded)
+     * @param limitCents - The daily limit in cents
+     * @returns true if the transaction would stay within the limit
+     */
+    wouldExceedDailyLimit(cardId: string, amountCents: number, limitCents: number): boolean;
+    /**
+     * Checks whether adding a hypothetical transaction would blow the monthly limit.
+     *
+     * @param cardId - Stripe card ID
+     * @param amountCents - Amount to check (not yet recorded)
+     * @param limitCents - The monthly limit in cents
+     * @returns true if the transaction would exceed the limit
+     */
+    wouldExceedMonthlyLimit(cardId: string, amountCents: number, limitCents: number): boolean;
+    /**
+     * Manually resets the daily and monthly spend for a card to zero.
+     * Primarily useful in tests — in production, resets happen automatically.
+     *
+     * @param cardId - Stripe card ID
+     */
+    reset(cardId: string): void;
+    /**
+     * Clears ALL spend data for ALL cards.
+     * Useful for test teardown. Don't call this in production.
+     */
+    resetAll(): void;
+}
+/**
+ * Module-level singleton tracker.
+ *
+ * The webhook server imports and uses this shared instance so that all
+ * authorization requests see the same running totals. If you're writing
+ * tests, either import this instance and call `.resetAll()` in beforeEach,
+ * or instantiate your own `new TransactionTracker()` for isolation.
+ */
+export declare const tracker: TransactionTracker;
+//# sourceMappingURL=tracker.d.ts.map

package/dist/tracker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracker.d.ts","sourceRoot":"","sources":["../src/tracker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IAEnB,iFAAiF;IACjF,YAAY,EAAE,MAAM,CAAC;IAErB,wFAAwF;IACxF,gBAAgB,EAAE,MAAM,CAAC;IAEzB;;;OAGG;IACH,cAAc,EAAE,MAAM,CAAC;IAEvB;;;OAGG;IACH,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAsCD;;;;;;;GAOG;AACH,qBAAa,kBAAkB;IAC7B;;;OAGG;IACH,OAAO,CAAC,KAAK,CAAqC;IAIlD;;;OAGG;IACH,OAAO,CAAC,WAAW;IA8BnB;;;;;;;;OAQG;IACH,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI;IAczD;;;;;OAKG;IACH,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAIrC;;;;;OAKG;IACH,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM;IAIvC;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI;IAM1C;;;;;;;OAOG;IACH,qBAAqB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO;IAIvF;;;;;;;OAOG;IACH,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO;IAIzF;;;;;OAKG;IACH,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;IAI3B;;;OAGG;IACH,QAAQ,IAAI,IAAI;CAGjB;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,OAAO,oBAA2B,CAAC"}

package/dist/tracker.js

@@ -0,0 +1,196 @@
+"use strict";
+/**
+ * Transaction Tracker
+ * ===================
+ * Keeps running totals of spending per card so the rules engine can enforce
+ * daily and monthly budget limits without needing a database.
+ *
+ * How it works:
+ *  - All data lives in memory (a plain JS Map).
+ *  - Totals are keyed by cardId.
+ *  - Daily totals reset automatically when a new UTC calendar day starts.
+ *  - Monthly totals reset on the first UTC day of each calendar month.
+ *  - Amounts are always in cents (same unit Stripe uses).
+ *
+ * Limitations:
+ *  - Data is lost on process restart. Phase 2 will add persistent storage.
+ *  - In a multi-process / horizontally-scaled deployment, each process has
+ *    its own tracker. For Phase 1 (single webhook server) this is fine.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.tracker = exports.TransactionTracker = void 0;
+// ─── Helpers ─────────────────────────────────────────────────────────────────
+/**
+ * Returns today's UTC date as a string like "2026-03-19".
+ * We use UTC everywhere so resets happen at a predictable time regardless
+ * of where the server is running.
+ */
+function utcDateString() {
+    const now = new Date();
+    return now.toISOString().slice(0, 10); // "YYYY-MM-DD"
+}
+/**
+ * Returns the current UTC month as a string like "2026-03".
+ */
+function utcMonthString() {
+    const now = new Date();
+    return now.toISOString().slice(0, 7); // "YYYY-MM"
+}
+/**
+ * Returns a fresh CardSpend record with all counters zeroed out.
+ * Used both for new cards and after resets.
+ */
+function freshSpend() {
+    return {
+        dailySpend: 0,
+        monthlySpend: 0,
+        transactionCount: 0,
+        lastDailyReset: utcDateString(),
+        lastMonthlyReset: utcMonthString(),
+    };
+}
+// ─── TransactionTracker ───────────────────────────────────────────────────────
+/**
+ * TransactionTracker — the main class you interact with.
+ *
+ * Typical usage:
+ *   const tracker = new TransactionTracker();
+ *   tracker.addTransaction('card_abc', 2500); // $25.00
+ *   const daily = tracker.getDailySpend('card_abc'); // 2500
+ */
+class TransactionTracker {
+    /**
+     * In-memory store: cardId → CardSpend.
+     * We use a Map because lookups are O(1) and it's easy to iterate.
+     */
+    store = new Map();
+    // ─── Private helpers ────────────────────────────────────────────────────
+    /**
+     * Retrieves the spend record for a card, creating a new one if it doesn't
+     * exist yet. Also handles auto-reset of stale daily/monthly totals.
+     */
+    getOrCreate(cardId) {
+        // Create a fresh record if this card hasn't been seen before.
+        if (!this.store.has(cardId)) {
+            this.store.set(cardId, freshSpend());
+        }
+        const spend = this.store.get(cardId);
+        // ── Daily reset ──────────────────────────────────────────────────────
+        // If the stored "last reset date" is earlier than today, it's a new day
+        // and we should zero out the daily total.
+        const today = utcDateString();
+        if (spend.lastDailyReset !== today) {
+            spend.dailySpend = 0;
+            spend.lastDailyReset = today;
+        }
+        // ── Monthly reset ────────────────────────────────────────────────────
+        // Same logic, but for the calendar month.
+        const thisMonth = utcMonthString();
+        if (spend.lastMonthlyReset !== thisMonth) {
+            spend.monthlySpend = 0;
+            spend.lastMonthlyReset = thisMonth;
+        }
+        return spend;
+    }
+    // ─── Public API ─────────────────────────────────────────────────────────
+    /**
+     * Records a transaction for a card and adds its amount to daily and
+     * monthly running totals.
+     *
+     * Call this AFTER an authorization is approved — not before.
+     *
+     * @param cardId - Stripe card ID (e.g. "ic_abc123")
+     * @param amountCents - Transaction amount in cents (e.g. 2500 = $25.00)
+     */
+    addTransaction(cardId, amountCents) {
+        if (amountCents < 0) {
+            // Negative amounts would corrupt our totals. Stripe refunds/reversals
+            // should be handled separately (Phase 2). For now, just ignore them.
+            console.warn(`[Tracker] Ignoring negative amount for card ${cardId}: ${amountCents}`);
+            return;
+        }
+        const spend = this.getOrCreate(cardId);
+        spend.dailySpend += amountCents;
+        spend.monthlySpend += amountCents;
+        spend.transactionCount += 1;
+    }
+    /**
+     * Returns how many cents this card has spent today (UTC calendar day).
+     * Returns 0 if the card has never been seen or if the day has rolled over.
+     *
+     * @param cardId - Stripe card ID
+     */
+    getDailySpend(cardId) {
+        return this.getOrCreate(cardId).dailySpend;
+    }
+    /**
+     * Returns how many cents this card has spent this calendar month (UTC).
+     * Returns 0 if no transactions recorded yet.
+     *
+     * @param cardId - Stripe card ID
+     */
+    getMonthlySpend(cardId) {
+        return this.getOrCreate(cardId).monthlySpend;
+    }
+    /**
+     * Returns the full spend record for a card, or null if we've never seen it.
+     * Useful for debugging and tests.
+     *
+     * @param cardId - Stripe card ID
+     */
+    getSpend(cardId) {
+        if (!this.store.has(cardId))
+            return null;
+        // Run getOrCreate so resets are applied before we return the record.
+        return this.getOrCreate(cardId);
+    }
+    /**
+     * Checks whether adding a hypothetical transaction would blow the daily limit.
+     *
+     * @param cardId - Stripe card ID
+     * @param amountCents - Amount to check (not yet recorded)
+     * @param limitCents - The daily limit in cents
+     * @returns true if the transaction would stay within the limit
+     */
+    wouldExceedDailyLimit(cardId, amountCents, limitCents) {
+        return this.getDailySpend(cardId) + amountCents > limitCents;
+    }
+    /**
+     * Checks whether adding a hypothetical transaction would blow the monthly limit.
+     *
+     * @param cardId - Stripe card ID
+     * @param amountCents - Amount to check (not yet recorded)
+     * @param limitCents - The monthly limit in cents
+     * @returns true if the transaction would exceed the limit
+     */
+    wouldExceedMonthlyLimit(cardId, amountCents, limitCents) {
+        return this.getMonthlySpend(cardId) + amountCents > limitCents;
+    }
+    /**
+     * Manually resets the daily and monthly spend for a card to zero.
+     * Primarily useful in tests — in production, resets happen automatically.
+     *
+     * @param cardId - Stripe card ID
+     */
+    reset(cardId) {
+        this.store.set(cardId, freshSpend());
+    }
+    /**
+     * Clears ALL spend data for ALL cards.
+     * Useful for test teardown. Don't call this in production.
+     */
+    resetAll() {
+        this.store.clear();
+    }
+}
+exports.TransactionTracker = TransactionTracker;
+/**
+ * Module-level singleton tracker.
+ *
+ * The webhook server imports and uses this shared instance so that all
+ * authorization requests see the same running totals. If you're writing
+ * tests, either import this instance and call `.resetAll()` in beforeEach,
+ * or instantiate your own `new TransactionTracker()` for isolation.
+ */
+exports.tracker = new TransactionTracker();
+//# sourceMappingURL=tracker.js.map

package/dist/tracker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracker.js","sourceRoot":"","sources":["../src/tracker.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;GAiBG;;;AA8BH,gFAAgF;AAEhF;;;;GAIG;AACH,SAAS,aAAa;IACpB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,eAAe;AACxD,CAAC;AAED;;GAEG;AACH,SAAS,cAAc;IACrB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;IACvB,OAAO,GAAG,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY;AACpD,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU;IACjB,OAAO;QACL,UAAU,EAAE,CAAC;QACb,YAAY,EAAE,CAAC;QACf,gBAAgB,EAAE,CAAC;QACnB,cAAc,EAAE,aAAa,EAAE;QAC/B,gBAAgB,EAAE,cAAc,EAAE;KACnC,CAAC;AACJ,CAAC;AAED,iFAAiF;AAEjF;;;;;;;GAOG;AACH,MAAa,kBAAkB;IAC7B;;;OAGG;IACK,KAAK,GAA2B,IAAI,GAAG,EAAE,CAAC;IAElD,2EAA2E;IAE3E;;;OAGG;IACK,WAAW,CAAC,MAAc;QAChC,8DAA8D;QAC9D,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;QACvC,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC;QAEtC,wEAAwE;QACxE,wEAAwE;QACxE,0CAA0C;QAC1C,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;QAC9B,IAAI,KAAK,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;YACnC,KAAK,CAAC,UAAU,GAAG,CAAC,CAAC;YACrB,KAAK,CAAC,cAAc,GAAG,KAAK,CAAC;QAC/B,CAAC;QAED,wEAAwE;QACxE,0CAA0C;QAC1C,MAAM,SAAS,GAAG,cAAc,EAAE,CAAC;QACnC,IAAI,KAAK,CAAC,gBAAgB,KAAK,SAAS,EAAE,CAAC;YACzC,KAAK,CAAC,YAAY,GAAG,CAAC,CAAC;YACvB,KAAK,CAAC,gBAAgB,GAAG,SAAS,CAAC;QACrC,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAED,2EAA2E;IAE3E;;;;;;;;OAQG;IACH,cAAc,CAAC,MAAc,EAAE,WAAmB;QAChD,IAAI,WAAW,GAAG,CAAC,EAAE,CAAC;YACpB,sEAAsE;YACtE,qEAAqE;YACrE,OAAO,CAAC,IAAI,CAAC,+CAA+C,MAAM,KAAK,WAAW,EAAE,CAAC,CAAC;YACtF,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;QACvC,KAAK,CAAC,UAAU,IAAI,WAAW,CAAC;QAChC,KAAK,CAAC,YAAY,IAAI,WAAW,CAAC;QAClC,KAAK,CAAC,gBAAgB,IAAI,CAAC,CAAC;IAC9B,CAAC;IAED;;;;;OAKG;IACH,aAAa,CAAC,MAAc;QAC1B,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC;IAC7C,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,MAAc;QAC5B,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC;IAC/C,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,MAAc;QACrB,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC;QACzC,qEAAqE;QACrE,OAAO,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IAED;;;;;;;OAOG;IACH,qBAAqB,CAAC,MAAc,EAAE,WAAmB,EAAE,UAAkB;QAC3E,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,WAAW,GAAG,UAAU,CAAC;IAC/D,CAAC;IAED;;;;;;;OAOG;IACH,uBAAuB,CAAC,MAAc,EAAE,WAAmB,EAAE,UAAkB;QAC7E,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,GAAG,WAAW,GAAG,UAAU,CAAC;IACjE,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAc;QAClB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACvC,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;CACF;AA3ID,gDA2IC;AAED;;;;;;;GAOG;AACU,QAAA,OAAO,GAAG,IAAI,kBAAkB,EAAE,CAAC"}

package/dist/transaction-reconciler.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Transaction Reconciliation - Phase 1
+ * Handles Stripe issuing events
+ */
+import Stripe from 'stripe';
+import { StoredAuthorization, StoredTransaction, OpenCardDatabase } from './db';
+export interface ReconciliationResult {
+    created: number;
+    updated: number;
+    orphaned: number;
+    errors: string[];
+}
+export declare class TransactionReconciler {
+    private database;
+    constructor(database?: OpenCardDatabase);
+    /**
+     * Handle an authorization request event.
+     * Persists the authorization with 'pending' status and the given decision reason.
+     *
+     * @param auth - Stripe authorization object
+     * @param decisionReason - The actual reason string from the rules engine (optional)
+     */
+    handleAuthorizationRequest(auth: Stripe.Issuing.Authorization, decisionReason?: string): StoredAuthorization;
+    handleAuthorizationCreated(auth: Stripe.Issuing.Authorization): StoredAuthorization | null;
+    handleTransactionCreated(txn: Stripe.Issuing.Transaction): StoredTransaction;
+    handleTransactionUpdated(txn: Stripe.Issuing.Transaction): StoredTransaction | null;
+    findOrphanedAuthorizations(cardId?: string, hoursOld?: number): StoredAuthorization[];
+    reconcile(): Promise<ReconciliationResult>;
+}
+//# sourceMappingURL=transaction-reconciler.d.ts.map

package/dist/transaction-reconciler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction-reconciler.d.ts","sourceRoot":"","sources":["../src/transaction-reconciler.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,gBAAgB,EAAgB,MAAM,MAAM,CAAC;AAK9F,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAmB;gBAEvB,QAAQ,CAAC,EAAE,gBAAgB;IAIvC;;;;;;OAMG;IACH,0BAA0B,CACxB,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,EAClC,cAAc,CAAC,EAAE,MAAM,GACtB,mBAAmB;IAkBtB,0BAA0B,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,aAAa,GAAG,mBAAmB,GAAG,IAAI;IAiC1F,wBAAwB,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,GAAG,iBAAiB;IAuB5E,wBAAwB,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,WAAW,GAAG,iBAAiB,GAAG,IAAI;IAwBnF,0BAA0B,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,SAAI,GAAG,mBAAmB,EAAE;IAe1E,SAAS,IAAI,OAAO,CAAC,oBAAoB,CAAC;CAqBjD"}

package/dist/transaction-reconciler.js

@@ -0,0 +1,131 @@
+"use strict";
+/**
+ * Transaction Reconciliation - Phase 1
+ * Handles Stripe issuing events
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TransactionReconciler = void 0;
+const db_1 = require("./db");
+const logger_1 = require("./logger");
+const logger = (0, logger_1.getLogger)('reconciler');
+class TransactionReconciler {
+    database;
+    constructor(database) {
+        this.database = database || (0, db_1.initDatabase)();
+    }
+    /**
+     * Handle an authorization request event.
+     * Persists the authorization with 'pending' status and the given decision reason.
+     *
+     * @param auth - Stripe authorization object
+     * @param decisionReason - The actual reason string from the rules engine (optional)
+     */
+    handleAuthorizationRequest(auth, decisionReason) {
+        const cardId = typeof auth.card === 'string' ? auth.card : auth.card.id;
+        const result = this.database.createAuthorization({
+            stripe_id: auth.id,
+            card_id: cardId,
+            amount: auth.amount,
+            currency: auth.currency,
+            merchant_name: auth.merchant_data?.name || null,
+            merchant_category: auth.merchant_data?.category || null,
+            status: 'pending',
+            decision_reason: decisionReason || null,
+        });
+        logger.info('Created pending authorization', { stripe_id: auth.id, decision_reason: decisionReason });
+        return result;
+    }
+    handleAuthorizationCreated(auth) {
+        const existing = this.database.getAuthorizationByStripeId(auth.id);
+        if (!existing) {
+            logger.warn('Authorization.created for unknown auth', { stripe_id: auth.id });
+            return null;
+        }
+        // Use auth.approved (boolean) — it's on the Stripe type and maps cleanly to status.
+        // auth.status covers the lifecycle states: 'closed' | 'expired' | 'pending' | 'reversed'
+        // For .created events, approved/declined are the relevant states; we derive from auth.approved.
+        const newStatus = auth.approved ? 'approved' : 'declined';
+        let decisionReason = null;
+        if (auth.approved) {
+            decisionReason = 'approved_by_stripe';
+        }
+        else {
+            decisionReason = 'declined_by_stripe';
+        }
+        // If the existing record already has a specific decision reason (set during .request),
+        // don't overwrite it — the .request reason is richer and more valuable.
+        const finalReason = existing.decision_reason || decisionReason;
+        const updated = this.database.updateAuthorization(existing.id, {
+            status: newStatus,
+            decision_reason: finalReason,
+        });
+        logger.info('Updated authorization status', { stripe_id: auth.id, status: newStatus });
+        return updated;
+    }
+    handleTransactionCreated(txn) {
+        const cardId = typeof txn.card === 'string' ? txn.card : txn.card.id;
+        // Stripe's Issuing.Transaction does not have a 'status' field.
+        // Transactions are always captured by the time we receive issuing_transaction.created.
+        // Refunds/reversals come via issuing_transaction.updated with a different type check.
+        const status = 'captured';
+        const result = this.database.createTransaction({
+            stripe_id: txn.id,
+            card_id: cardId,
+            amount: txn.amount,
+            currency: txn.currency,
+            merchant_name: txn.merchant_data?.name || null,
+            merchant_category: txn.merchant_data?.category || null,
+            status,
+            stripe_created_at: new Date(txn.created * 1000).toISOString(),
+        });
+        logger.info('Created transaction', { stripe_id: txn.id, amount: txn.amount });
+        return result;
+    }
+    handleTransactionUpdated(txn) {
+        const existing = this.database.getTransaction(txn.id);
+        if (!existing) {
+            logger.warn('Transaction.updated for unknown txn', { stripe_id: txn.id });
+            return null;
+        }
+        // Transactions don't have a .status field on Stripe's type.
+        // For transaction.updated events, check the transaction type to determine
+        // if it's a refund/reversal; otherwise assume captured.
+        const isRefund = txn.type === 'refund';
+        const newStatus = isRefund ? 'reversed' : 'captured';
+        const db_inst = this.database.getDb();
+        const stmt = db_inst.prepare('UPDATE transactions SET amount = ?, status = ? WHERE stripe_id = ?');
+        stmt.run(txn.amount, newStatus, txn.id);
+        const result = this.database.getTransaction(txn.id);
+        logger.info('Updated transaction', { stripe_id: txn.id, status: newStatus });
+        return result || null;
+    }
+    findOrphanedAuthorizations(cardId, hoursOld = 1) {
+        const orphaned = [];
+        if (cardId) {
+            const pending = this.database.getPendingAuthorizationsOlderThan(cardId, hoursOld);
+            orphaned.push(...pending);
+        }
+        if (orphaned.length > 0) {
+            logger.warn('Found orphaned authorizations', { count: orphaned.length });
+        }
+        return orphaned;
+    }
+    async reconcile() {
+        const result = {
+            created: 0,
+            updated: 0,
+            orphaned: 0,
+            errors: [],
+        };
+        try {
+            const orphaned = this.findOrphanedAuthorizations(undefined, 1);
+            result.orphaned = orphaned.length;
+        }
+        catch (error) {
+            result.errors.push(`Error checking for orphaned authorizations: ${error instanceof Error ? error.message : String(error)}`);
+        }
+        return result;
+    }
+}
+exports.TransactionReconciler = TransactionReconciler;
+//# sourceMappingURL=transaction-reconciler.js.map

package/dist/transaction-reconciler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transaction-reconciler.js","sourceRoot":"","sources":["../src/transaction-reconciler.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAGH,6BAA8F;AAC9F,qCAAqC;AAErC,MAAM,MAAM,GAAG,IAAA,kBAAS,EAAC,YAAY,CAAC,CAAC;AASvC,MAAa,qBAAqB;IACxB,QAAQ,CAAmB;IAEnC,YAAY,QAA2B;QACrC,IAAI,CAAC,QAAQ,GAAG,QAAQ,IAAI,IAAA,iBAAY,GAAE,CAAC;IAC7C,CAAC;IAED;;;;;;OAMG;IACH,0BAA0B,CACxB,IAAkC,EAClC,cAAuB;QAEvB,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAExE,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAC/C,SAAS,EAAE,IAAI,CAAC,EAAE;YAClB,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,IAAI,IAAI,IAAI;YAC/C,iBAAiB,EAAE,IAAI,CAAC,aAAa,EAAE,QAAQ,IAAI,IAAI;YACvD,MAAM,EAAE,SAAS;YACjB,eAAe,EAAE,cAAc,IAAI,IAAI;SACxC,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC,CAAC;QACtG,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,0BAA0B,CAAC,IAAkC;QAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAEnE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YAC9E,OAAO,IAAI,CAAC;QACd,CAAC;QAED,oFAAoF;QACpF,yFAAyF;QACzF,gGAAgG;QAChG,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;QAE1D,IAAI,cAAc,GAAkB,IAAI,CAAC;QACzC,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,cAAc,GAAG,oBAAoB,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,cAAc,GAAG,oBAAoB,CAAC;QACxC,CAAC;QAED,uFAAuF;QACvF,wEAAwE;QACxE,MAAM,WAAW,GAAG,QAAQ,CAAC,eAAe,IAAI,cAAc,CAAC;QAE/D,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,EAAE;YAC7D,MAAM,EAAE,SAAS;YACjB,eAAe,EAAE,WAAW;SAC7B,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACvF,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,wBAAwB,CAAC,GAA+B;QACtD,MAAM,MAAM,GAAG,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAErE,+DAA+D;QAC/D,uFAAuF;QACvF,sFAAsF;QACtF,MAAM,MAAM,GAAG,UAAU,CAAC;QAE1B,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC;YAC7C,SAAS,EAAE,GAAG,CAAC,EAAE;YACjB,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,IAAI,IAAI,IAAI;YAC9C,iBAAiB,EAAE,GAAG,CAAC,aAAa,EAAE,QAAQ,IAAI,IAAI;YACtD,MAAM;YACN,iBAAiB,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;SAC9D,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9E,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,wBAAwB,CAAC,GAA+B;QACtD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAEtD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;YAC1E,OAAO,IAAI,CAAC;QACd,CAAC;QAED,4DAA4D;QAC5D,0EAA0E;QAC1E,wDAAwD;QACxD,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC;QACvC,MAAM,SAAS,GAAG,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;QAErD,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,oEAAoE,CAAC,CAAC;QAEnG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;QAExC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7E,OAAO,MAAM,IAAI,IAAI,CAAC;IACxB,CAAC;IAED,0BAA0B,CAAC,MAAe,EAAE,QAAQ,GAAG,CAAC;QACtD,MAAM,QAAQ,GAA0B,EAAE,CAAC;QAE3C,IAAI,MAAM,EAAE,CAAC;YACX,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,iCAAiC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;YAClF,QAAQ,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;QAC5B,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,MAAM,GAAyB;YACnC,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,CAAC;YACX,MAAM,EAAE,EAAE;SACX,CAAC;QAEF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,IAAI,CAAC,0BAA0B,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;YAC/D,MAAM,CAAC,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,MAAM,CAAC,IAAI,CAChB,+CACE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CACvD,EAAE,CACH,CAAC;QACJ,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;CACF;AAvJD,sDAuJC"}