@openlup/platform 0.26.0 → 0.28.0

package/dist/account-support/customerAccountReadDiagnostics.js

@@ -0,0 +1,71 @@
+export class CustomerAccountReadModelError extends Error {
+    stage;
+    cause;
+    constructor(stage, cause) {
+        super(`Customer account read model failed at ${stage}`);
+        this.name = "CustomerAccountReadModelError";
+        this.stage = stage;
+        this.cause = cause;
+    }
+}
+export async function withCustomerAccountReadStage(stage, operation) {
+    try {
+        return await operation();
+    }
+    catch (error) {
+        if (error instanceof CustomerAccountReadModelError)
+            throw error;
+        throw new CustomerAccountReadModelError(stage, error);
+    }
+}
+export function customerAccountReadFailureDetails(error) {
+    if (!(error instanceof CustomerAccountReadModelError)) {
+        return { reason: "read_model_failed", stage: "unknown" };
+    }
+    return {
+        reason: "read_model_failed",
+        stage: error.stage,
+        providerCode: diagnosticText(readRecord(error.cause).code),
+    };
+}
+export function logCustomerAccountReadFailure(error) {
+    if (error instanceof CustomerAccountReadModelError) {
+        console.error("[customer-account] read model failed:", JSON.stringify({
+            stage: error.stage,
+            cause: safeCause(error.cause),
+        }));
+        return;
+    }
+    console.error("[customer-account] read failed:", JSON.stringify({ cause: safeCause(error) }));
+}
+function safeCause(error) {
+    if (error instanceof Error) {
+        const record = readRecord(error);
+        return compact({
+            name: error.name,
+            message: error.message,
+            code: diagnosticText(record.code),
+            hint: diagnosticText(record.hint),
+            details: diagnosticText(record.details),
+        });
+    }
+    return compact({
+        type: typeof error,
+        code: diagnosticText(readRecord(error).code),
+        message: diagnosticText(readRecord(error).message),
+    });
+}
+function readRecord(value) {
+    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
+}
+function diagnosticText(value) {
+    if (typeof value !== "string")
+        return undefined;
+    const trimmed = value.trim();
+    if (!trimmed)
+        return undefined;
+    return trimmed.slice(0, 300);
+}
+function compact(value) {
+    return Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== undefined));
+}

package/dist/account-support/index.d.ts

@@ -0,0 +1,26 @@
+export { createAccountReadFacade } from "./accountReadFacade.js";
+export { CustomerAccountReadModelError, withCustomerAccountReadStage, customerAccountReadFailureDetails, logCustomerAccountReadFailure } from "./customerAccountReadDiagnostics.js";
+export type { CustomerAccountReadStage } from "./customerAccountReadDiagnostics.js";
+export type * from "./contracts/index.js";
+export { CUSTOMER_ACCOUNT_V2_CONTRACT_VERSION, readAccountSnapshot, isCustomerVisibleSubscription, recurringPrice, computeEditState, editCutoff, buildActionRequired } from "./accountReadModels.js";
+export type { AccountReadSources, AccountReadProjectionPolicy, CustomerSubscriptionEligibilityInput, CustomerSubscriptionEligibility, SubscriptionActionState } from "./accountReadModels.js";
+export { CUSTOMER_ORDERS_CONTRACT_VERSION, readCustomerOrderSummaries, readCustomerOrderDetail, customerOrderMoney, toOrderMoneyHeader, toOrderMoneyItem, mapCustomerOrderLines, lineListTotalMinor } from "./orderHistory.js";
+export type { CustomerOrderHistoryRow, CustomerOrderHistoryReadStore, CustomerOrderLinePresentationPort, CustomerOrderHistoryProjectionPort } from "./orderHistory.js";
+export { SUPPORT_CUSTOMER_360_CONTRACT_VERSION, projectCustomer360Snapshot, deriveContactHealth, boundedCustomerJourneyAudit, createCustomer360ReadFacade } from "./customer360.js";
+export type { Customer360ProjectionInput, Customer360ProjectionPolicy, ContactHealthDelivery, CustomerJourneyAuditEvent } from "./customer360.js";
+export { createInvoiceAccess, downloadOwnedInvoicePdf, deriveCustomerDocumentDeliveryStatus } from "./invoiceAccess.js";
+export type { InvoiceOwnerAccessPort, InvoiceArtifactDownloadPort, InvoiceAccessOptions, CustomerInvoiceDocumentStatusInput } from "./invoiceAccess.js";
+export { createSelfServiceCommandFacade } from "./selfService.js";
+export { encodeNativeSubscriptionCommand, decodeNativeSubscriptionPreview, createNativeSubscriptionDriver } from "./subscriptionCommandCodec.js";
+export { createPaymentMethodComposition } from "./paymentMethodComposition.js";
+export { createOperatorRecovery, moveIdentityForEmailCorrection, OperatorIdentityMoveRefusedError, executeOperatorAccountLink, linkThenApply } from "./operatorRecovery.js";
+export type { OperatorRecoverySelection } from "./operatorRecovery.js";
+export { createManagedOperatorAuthority, operatorAuthorityCapabilities, CustomerSupportCommandInvalidError, CustomerSupportCommandIdempotencyConflictError, OperatorSubscriptionAuthorityUnavailableError, CustomerSupportCommandRequiresHumanError, CustomerSupportOperatorInactiveError, CustomerSupportOperatorNotProvisionedError } from "./operatorAuthority.js";
+export type { OperatorRpcExecutor, OperatorAuthorityOptions } from "./operatorAuthority.js";
+export { createPostgresOperatorAuthority } from "./postgresOperatorAuthority.js";
+export type { OperatorQueryExecutor, OperatorTransactionExecutor } from "./postgresOperatorAuthority.js";
+export { ACCOUNT_SUPPORT_MIGRATIONS } from "./migrations.js";
+export { createAccountSupportBindings } from "./bindings.js";
+export type { AccountSupportCallable, AccountSupportOperations, AccountSupportHostBindingRequired } from "./bindings.js";
+export { createAccountSupportServices } from "./contribution.js";
+export type { AccountSupportBindingRefusal, AccountSupportReadiness, GuardedAccountSupportOperation, GuardedAccountSupportOperations } from "./contribution.js";

package/dist/account-support/index.js

@@ -0,0 +1,15 @@
+export { createAccountReadFacade } from "./accountReadFacade.js";
+export { CustomerAccountReadModelError, withCustomerAccountReadStage, customerAccountReadFailureDetails, logCustomerAccountReadFailure } from "./customerAccountReadDiagnostics.js";
+export { CUSTOMER_ACCOUNT_V2_CONTRACT_VERSION, readAccountSnapshot, isCustomerVisibleSubscription, recurringPrice, computeEditState, editCutoff, buildActionRequired } from "./accountReadModels.js";
+export { CUSTOMER_ORDERS_CONTRACT_VERSION, readCustomerOrderSummaries, readCustomerOrderDetail, customerOrderMoney, toOrderMoneyHeader, toOrderMoneyItem, mapCustomerOrderLines, lineListTotalMinor } from "./orderHistory.js";
+export { SUPPORT_CUSTOMER_360_CONTRACT_VERSION, projectCustomer360Snapshot, deriveContactHealth, boundedCustomerJourneyAudit, createCustomer360ReadFacade } from "./customer360.js";
+export { createInvoiceAccess, downloadOwnedInvoicePdf, deriveCustomerDocumentDeliveryStatus } from "./invoiceAccess.js";
+export { createSelfServiceCommandFacade } from "./selfService.js";
+export { encodeNativeSubscriptionCommand, decodeNativeSubscriptionPreview, createNativeSubscriptionDriver } from "./subscriptionCommandCodec.js";
+export { createPaymentMethodComposition } from "./paymentMethodComposition.js";
+export { createOperatorRecovery, moveIdentityForEmailCorrection, OperatorIdentityMoveRefusedError, executeOperatorAccountLink, linkThenApply } from "./operatorRecovery.js";
+export { createManagedOperatorAuthority, operatorAuthorityCapabilities, CustomerSupportCommandInvalidError, CustomerSupportCommandIdempotencyConflictError, OperatorSubscriptionAuthorityUnavailableError, CustomerSupportCommandRequiresHumanError, CustomerSupportOperatorInactiveError, CustomerSupportOperatorNotProvisionedError } from "./operatorAuthority.js";
+export { createPostgresOperatorAuthority } from "./postgresOperatorAuthority.js";
+export { ACCOUNT_SUPPORT_MIGRATIONS } from "./migrations.js";
+export { createAccountSupportBindings } from "./bindings.js";
+export { createAccountSupportServices } from "./contribution.js";

package/dist/account-support/invoiceAccess.d.ts

@@ -0,0 +1,57 @@
+import type { InvoiceHostPorts } from "../invoicing/contracts/index.js";
+import type { CustomerDocumentDeliveryStatus } from "./contracts/invoice.js";
+export type InvoiceOwnerAccessPort = InvoiceHostPorts["accountHistory"];
+export type InvoiceArtifactDownloadPort = Pick<InvoiceHostPorts["artifacts"], "download">;
+export interface InvoiceAccessOptions {
+    accountHistory?: InvoiceOwnerAccessPort;
+    artifacts?: InvoiceArtifactDownloadPort;
+}
+export declare function createInvoiceAccess(options?: InvoiceAccessOptions): {
+    history: (input: Parameters<InvoiceHostPorts["accountHistory"]["read"]>[0]) => ReturnType<InvoiceHostPorts["accountHistory"]["read"]>;
+    download: (input: Parameters<InvoiceHostPorts["accountHistory"]["resolveDownload"]>[0]) => Promise<{
+        readonly kind: "unsupported";
+        readonly code: "host_binding_required";
+        readonly retryable: false;
+        readonly effectMayHaveSucceeded: false;
+    } | {
+        readonly kind: "unknown";
+        readonly code: "unknown";
+    } | {
+        kind: "denied";
+        content?: undefined;
+        contentType?: undefined;
+        fileName?: undefined;
+        parentDocumentRef?: undefined;
+    } | {
+        kind: "downloaded";
+        content: Uint8Array<ArrayBufferLike>;
+        contentType: string;
+        fileName: string;
+        parentDocumentRef: string | null;
+    }>;
+};
+export declare function downloadOwnedInvoicePdf<Ticket, Pdf extends {
+    content: Uint8Array;
+    contentType: string;
+}>(input: {
+    resolve(): Promise<Ticket | null>;
+    download(ticket: Ticket): Promise<Pdf>;
+}): Promise<{
+    kind: "denied";
+    ticket?: undefined;
+    pdf?: undefined;
+} | {
+    kind: "downloaded";
+    ticket: NonNullable<Awaited<Ticket>>;
+    pdf: Pdf;
+}>;
+export interface CustomerInvoiceDocumentStatusInput {
+    blockedReason: string | null;
+    status: string | null;
+    documentKind: string | null;
+    ksefStatus: string | null;
+    emailStatus: string | null;
+    outboxStatus: string | null;
+    downloadAvailable: boolean;
+}
+export declare function deriveCustomerDocumentDeliveryStatus(input: CustomerInvoiceDocumentStatusInput): CustomerDocumentDeliveryStatus;

package/dist/account-support/invoiceAccess.js

@@ -0,0 +1,40 @@
+import { createInvoiceReadModel } from "../invoicing/index.js";
+export function createInvoiceAccess(options = {}) {
+    const accountHistory = options.accountHistory;
+    const owner = createInvoiceReadModel({
+        ...options,
+        accountHistory: accountHistory && {
+            read: input => accountHistory.read(input),
+            async resolveDownload(input) {
+                const history = await accountHistory.read({ accountRef: input.accountRef, orderId: input.orderId });
+                if (history.kind !== "found")
+                    return history;
+                if (history.accountRef !== input.accountRef || history.orderId !== input.orderId
+                    || !history.documents.some(document => document.documentRef === input.documentRef))
+                    return { kind: "denied" };
+                return accountHistory.resolveDownload(input);
+            }
+        }
+    });
+    return { history: owner.history, download: owner.download };
+}
+export function downloadOwnedInvoicePdf(input) {
+    return createInvoiceReadModel().ownedPdf(input);
+}
+export function deriveCustomerDocumentDeliveryStatus(input) {
+    const status = normalized(input.status), clearance = normalized(input.ksefStatus), email = normalized(input.emailStatus), outbox = normalized(input.outboxStatus);
+    if (input.blockedReason || ["rejected", "voided", "cancelled"].includes(status) || clearance === "rejected")
+        return "requires_correction";
+    if (email === "failed" || ["failed", "uncertain", "cancelled"].includes(outbox))
+        return "delivery_failed";
+    if (input.documentKind === "b2b_vat" && !["accepted", "not_required"].includes(clearance))
+        return "ksef_pending";
+    if (["sent", "provider_accepted"].includes(email) || outbox === "succeeded")
+        return "email_provider_accepted";
+    if (email === "pending" || ["pending", "processing"].includes(outbox))
+        return "email_pending";
+    return input.downloadAvailable ? "pdf_ready" : "not_ready";
+}
+function normalized(value) {
+    return value?.trim().toLowerCase() ?? "";
+}

package/dist/account-support/migrations.d.ts

@@ -0,0 +1,14 @@
+/** Sparse projections only. Install the complete native/managed prefix, never this list alone. */
+export declare const ACCOUNT_SUPPORT_MIGRATIONS: {
+    readonly native: {
+        readonly units: readonly [{
+            readonly position: 87;
+            readonly catalogPath: "db/platform/migrations/20261026120000_account_support_operator_authority.sql";
+            readonly sha256: "ac1e31679179e712d7558e7b1d82e8113f264abf9aaa44c2562ab988acdc7508";
+            readonly url: URL;
+        }];
+    };
+    readonly managed: {
+        readonly units: readonly ["supabase/migrations/20261026120100_account_support_current_authority.sql"];
+    };
+};

package/dist/account-support/migrations.js

@@ -0,0 +1,7 @@
+/** Sparse projections only. Install the complete native/managed prefix, never this list alone. */
+export const ACCOUNT_SUPPORT_MIGRATIONS = {
+    native: { units: [{ position: 87, catalogPath: "db/platform/migrations/20261026120000_account_support_operator_authority.sql",
+                sha256: "ac1e31679179e712d7558e7b1d82e8113f264abf9aaa44c2562ab988acdc7508",
+                url: new URL("../../sql/20261026120000_account_support_operator_authority.sql", import.meta.url) }] },
+    managed: { units: ["supabase/migrations/20261026120100_account_support_current_authority.sql"] },
+};

package/dist/account-support/operatorAuthority.d.ts

@@ -0,0 +1,67 @@
+import type { OperatorSubscriptionRefusal as OperatorSubscriptionRefusalCode, OperatorSubscriptionResult as OperatorSubscriptionCommandResult, OperatorEmailCorrectionResult, OperatorPhoneCorrectionResult, OperatorEmailCorrectionAdmission, OperatorEmailCorrectionExecution, OperatorEmailCorrectionSettlement, NativeOperatorSubscriptionResult, ManagedOperatorAuthorityPort, OperatorAuthorityCapabilities, OperatorAccountLinkResult, OperatorLeadAbsorptionResult, CustomerRecoveryAuthorityResult } from "./contracts/index.js";
+export declare class CustomerSupportCommandInvalidError extends Error {
+    constructor();
+}
+export declare class CustomerSupportCommandIdempotencyConflictError extends Error {
+    constructor();
+}
+export declare class OperatorSubscriptionAuthorityUnavailableError extends Error {
+    constructor();
+}
+export declare class CustomerSupportCommandRequiresHumanError extends Error {
+    constructor();
+}
+export declare class CustomerSupportOperatorInactiveError extends Error {
+    constructor();
+}
+export declare class CustomerSupportOperatorNotProvisionedError extends Error {
+    constructor();
+}
+export declare const SUBSCRIPTION_REFUSALS: Set<OperatorSubscriptionRefusalCode>;
+export declare function emailCorrection(value: unknown): OperatorEmailCorrectionResult;
+/** Admission authorizes a command; only a service claim authorizes its execution. */
+export declare function emailCorrectionAdmission(value: unknown): OperatorEmailCorrectionAdmission;
+export declare function emailCorrectionExecution(value: unknown): OperatorEmailCorrectionExecution;
+export declare function emailCorrectionSettlement(value: unknown): OperatorEmailCorrectionSettlement;
+export declare function phoneCorrection(value: unknown): OperatorPhoneCorrectionResult;
+export declare function subscriptionCommand(value: unknown): OperatorSubscriptionCommandResult;
+/**
+ * Translate the routine's raised SQLSTATEs into failures the route can price as
+ * HTTP without reading a driver error. Anything unrecognized stays an opaque
+ * upstream failure rather than being guessed into a client fault.
+ */
+export declare function operatorCommandFailure(error: unknown, fallback: string): Error;
+/** Translate the routine's JSON into the one result shape both lanes report. */
+export declare function leadAbsorption(value: unknown): OperatorLeadAbsorptionResult;
+/** Translate the routine's JSON into the one result shape the route reports. */
+export declare function accountLink(value: unknown): OperatorAccountLinkResult;
+export declare function recoveryResult(value: unknown): CustomerRecoveryAuthorityResult;
+/** Native-only additions never enter the managed subscription decoder. */
+export declare function nativeSubscriptionCommand(value: unknown): NativeOperatorSubscriptionResult;
+export declare function operatorAuthorityCapabilities(graph: "managed" | "native"): OperatorAuthorityCapabilities;
+export interface OperatorRpcExecutor {
+    rpc(name: string, args: Record<string, unknown>): PromiseLike<{
+        data: unknown;
+        error: unknown;
+    }>;
+}
+/** Injected recovery material is private to the adapter; paths belong to the host. */
+export interface OperatorRecoveryMaterial {
+    tokenHash: string;
+    payloadFingerprint: string;
+    expiresAt: string;
+    recoveryPath: string;
+}
+export interface OperatorAuthorityOptions {
+    operatorId: string;
+    now: () => number;
+    recoveryPath: (rawToken: string) => string;
+    /** Defaults to 32 random bytes from Web Crypto, encoded as base64url. */
+    createOpaqueToken?: () => string;
+}
+export declare function operatorRecoveryMaterial(input: {
+    subjectId: string;
+    caseId: string;
+}, options: OperatorAuthorityOptions): Promise<OperatorRecoveryMaterial>;
+/** Current managed calls over an injected executor; no provider, credentials or defaults. */
+export declare function createManagedOperatorAuthority(executor: OperatorRpcExecutor, options: OperatorAuthorityOptions): ManagedOperatorAuthorityPort;