@owlmeans/server-payment 0.1.18-rc.20 → 0.1.18-rc.21

package/build/consumer/capture.js

@@ -0,0 +1,291 @@
+import { billingLanguageOf, ConsentKind, CONSUMER_RIGHTS_COPY_VERSION, inScope, PurchaseKind, regionOf, withdrawalDeadlineOf, } from '@owlmeans/payment';
+import { STRIPE_PAYGATE_ALIAS } from '../consts.js';
+import { billingProfiles, compact, conditionalSet, consumerConsents, dateOf, idOf, isMissingObject, payment, purchases, } from '../utils.js';
+import { sendConsumerMail } from './mail.js';
+import { createPurchase, hasEvent, lockProfile, patchPurchase, purchaseIdOf, } from './records.js';
+/**
+ * The buyer and totals of a Checkout Session. `presentment_details` (Adaptive Pricing) is not typed
+ * by the pinned SDK, hence the narrow accessor.
+ */
+export const sessionEvidenceOf = (session) => {
+    const details = session.customer_details;
+    const presentment = session.presentment_details;
+    const subtotal = session.amount_subtotal ?? 0;
+    const tax = session.total_details?.amount_tax ?? 0;
+    return compact({
+        country: details?.address?.country?.toUpperCase() ?? undefined,
+        email: details?.email ?? undefined,
+        name: details?.name ?? undefined,
+        business: (details?.tax_ids?.length ?? 0) > 0 || details?.tax_exempt === 'reverse' ? true : undefined,
+        currency: (session.currency ?? '').toLowerCase(),
+        subtotalMinor: subtotal,
+        taxMinor: tax,
+        totalMinor: session.amount_total ?? subtotal + tax,
+        presentmentCurrency: presentment?.presentment_currency?.toLowerCase(),
+        presentmentAmountMinor: presentment?.presentment_amount,
+        termsAccepted: session.consent?.terms_of_service === 'accepted' ? true
+            : session.consent?.terms_of_service != null ? false : undefined,
+    });
+};
+/**
+ * An invoice's evidence, best effort: an unreachable invoice is logged and yields nothing — the
+ * withdrawal reads it again when it needs it. `invoice.payment_intent` is top-level on the pinned
+ * API version.
+ */
+export const invoiceEvidenceOf = async (stripe, invoiceId) => {
+    if (stripe == null || invoiceId == null) {
+        return {};
+    }
+    try {
+        const invoice = await stripe.invoices.retrieve(invoiceId);
+        const typed = invoice;
+        return compact({
+            invoiceNumber: invoice.number ?? undefined,
+            invoiceLineId: invoice.lines?.data?.[0]?.id,
+            paymentIntentId: idOf(typed.payment_intent),
+            country: invoice.customer_address?.country?.toUpperCase() ?? undefined,
+            subtotalMinor: invoice.subtotal ?? undefined,
+            taxMinor: typed.tax ?? undefined,
+            totalMinor: invoice.total ?? undefined,
+            currency: invoice.currency ?? undefined,
+        });
+    }
+    catch (error) {
+        if (!isMissingObject(error)) {
+            console.warn(`[payment] invoice "${invoiceId}" unreadable for its purchase`, error);
+        }
+        return {};
+    }
+};
+const deadlineOf = (policy, scoped, purchasedAt) => scoped ? withdrawalDeadlineOf(purchasedAt, policy) : undefined;
+/** Lock the entity's billing country from a completed checkout, when the policy locks countries. */
+const lockFromSession = async (ctx, policy, entityId, session, evidence) => {
+    const metadata = session.metadata ?? {};
+    const country = evidence.country ?? metadata.country;
+    if (!policy.mechanisms.countryLock || country == null || country === '') {
+        return null;
+    }
+    const { record } = await lockProfile(ctx, policy, {
+        entityId, country, source: 'checkout', customerId: idOf(session.customer), sessionId: session.id,
+        ipCountry: metadata.ipCountry, email: evidence.email, name: evidence.name, business: evidence.business,
+        currency: evidence.currency, language: metadata.language,
+    });
+    return record;
+};
+/**
+ * Mail the purchase confirmation once per purchase: only the delivery that claims the purchase's
+ * `confirmationMailAt` (a conditional write — concurrent deliveries in several processes, a
+ * redelivery, the checkout refining a subscription) sends it; one that failed is retried by
+ * `reconcile`, never here. A purchase mailed before the claim existed is recognised by its event.
+ */
+const confirmPurchase = async (ctx, policy, purchase) => {
+    if (!policy.mechanisms.purchaseConfirmation || !purchase.inScope) {
+        return;
+    }
+    if (await hasEvent(ctx, purchase.purchaseId, 'mail', 'purchase')) {
+        return;
+    }
+    const claimed = await conditionalSet(purchases(ctx), { purchaseId: purchase.purchaseId, confirmationMailAt: null }, {
+        confirmationMailAt: new Date(),
+    });
+    if (!claimed) {
+        return;
+    }
+    await sendConsumerMail(ctx, policy, 'purchase', purchase.purchaseId);
+};
+/**
+ * A completed, paid ONE-TIME checkout as a purchase — the window and the contract registry. Runs
+ * BEFORE the credits are granted: the billing country is locked first (first write wins; another
+ * country is a `lock-mismatch` event), then the purchase row is written, then its confirmation is
+ * mailed. `null` when no consumer-rights policy is declared.
+ */
+export const capturePaymentPurchase = async (ctx, stripe, session, extra = {}, opts = {}) => {
+    const policy = await payment(ctx).consumerRightsPolicy();
+    if (policy == null) {
+        return null;
+    }
+    const metadata = session.metadata ?? {};
+    const entityId = metadata.entityId;
+    if (entityId == null || metadata.productSku == null) {
+        return null;
+    }
+    const evidence = sessionEvidenceOf(session);
+    const profile = await lockFromSession(ctx, policy, entityId, session, evidence);
+    const existing = await purchases(ctx).byPurchaseId(purchaseIdOf(session.id));
+    if (existing != null) {
+        if (opts.mail !== false)
+            await confirmPurchase(ctx, policy, existing);
+        return { purchase: existing, created: false };
+    }
+    const country = evidence.country ?? metadata.country ?? profile?.country;
+    const region = regionOf(country, policy);
+    // Protected when either the buyer's own address or the organization's locked country is in scope.
+    const scoped = inScope(region, country, policy) || (profile != null && inScope(profile.region, profile.country, policy));
+    const invoice = await invoiceEvidenceOf(stripe, idOf(session.invoice));
+    const purchasedAt = extra.at ?? new Date();
+    const draft = compact({
+        purchaseId: purchaseIdOf(session.id),
+        entityId,
+        kind: PurchaseKind.TopUp,
+        paygate: STRIPE_PAYGATE_ALIAS,
+        sessionId: session.id,
+        paymentIntentId: idOf(session.payment_intent) ?? invoice.paymentIntentId,
+        invoiceId: idOf(session.invoice),
+        invoiceNumber: invoice.invoiceNumber,
+        invoiceLineId: invoice.invoiceLineId,
+        productSku: metadata.productSku,
+        planSku: metadata.planSku,
+        profileId: metadata.profileId,
+        country,
+        region: region ?? undefined,
+        ipCountry: metadata.ipCountry,
+        inScope: scoped,
+        language: profile?.language ?? metadata.language ?? billingLanguageOf(country, policy),
+        email: evidence.email,
+        name: evidence.name,
+        business: evidence.business,
+        currency: evidence.currency,
+        amountSubtotalMinor: evidence.subtotalMinor,
+        amountTaxMinor: evidence.taxMinor,
+        amountTotalMinor: evidence.totalMinor,
+        presentmentCurrency: evidence.presentmentCurrency,
+        presentmentAmountMinor: evidence.presentmentAmountMinor,
+        netAmountMinor: extra.netAmountMinor,
+        amountCurrency: extra.amountCurrency,
+        units: extra.units,
+        taxBehavior: extra.taxBehavior,
+        termsAccepted: evidence.termsAccepted,
+        textVersion: metadata.termsVersion ?? policy.textVersion,
+        copyVersion: metadata.copyVersion ?? CONSUMER_RIGHTS_COPY_VERSION,
+        purchasedAt,
+        deadline: deadlineOf(policy, scoped, purchasedAt),
+    });
+    const { record, created } = await createPurchase(ctx, draft);
+    if (opts.mail !== false)
+        await confirmPurchase(ctx, policy, record);
+    return { purchase: record, created };
+};
+/** The start request a subscription's metadata names, when it is a real start request of that entity. */
+const startRequestOf = async (ctx, entityId, id) => {
+    if (id == null || id === '') {
+        return null;
+    }
+    const consent = await consumerConsents(ctx).load(id).catch(() => null);
+    return consent != null && consent.kind === ConsentKind.SubscriptionStart && consent.entityId === entityId ? consent : null;
+};
+/**
+ * A subscription's FIRST invoice as a purchase — called while the subscription is committed, BEFORE
+ * the `created` observers grant anything, so the window exists before the bundle can be spent. The
+ * buyer's country and totals are refined when the checkout completes. The start request (when the
+ * metadata names one) is the purchase's consent: `servicesStartedAt` and `consentedAt`.
+ */
+export const captureSubscriptionPurchase = async (ctx, stripe, subscription, row) => {
+    const policy = await payment(ctx).consumerRightsPolicy();
+    if (policy == null) {
+        return null;
+    }
+    const purchaseId = purchaseIdOf(subscription.id);
+    const existing = await purchases(ctx).byPurchaseId(purchaseId);
+    if (existing != null) {
+        return { purchase: existing, created: false };
+    }
+    const metadata = subscription.metadata ?? {};
+    const item = subscription.items?.data?.[0];
+    const invoiceId = idOf(subscription.latest_invoice);
+    const invoice = await invoiceEvidenceOf(stripe, invoiceId);
+    const profile = await billingProfiles(ctx).byEntity(row.entityId);
+    const country = invoice.country ?? profile?.country ?? metadata.country;
+    const region = regionOf(country, policy);
+    const scoped = inScope(region, country, policy) || (profile != null && inScope(profile.region, profile.country, policy));
+    const start = await startRequestOf(ctx, row.entityId, metadata.startRequestId);
+    const subtotal = invoice.subtotalMinor ?? (item?.price?.unit_amount ?? 0) * (item?.quantity ?? 1);
+    const tax = invoice.taxMinor ?? 0;
+    const purchasedAt = dateOf(subscription.created) ?? new Date();
+    const draft = compact({
+        purchaseId,
+        entityId: row.entityId,
+        kind: PurchaseKind.Subscription,
+        paygate: STRIPE_PAYGATE_ALIAS,
+        subscriptionId: subscription.id,
+        paymentIntentId: invoice.paymentIntentId,
+        invoiceId,
+        invoiceNumber: invoice.invoiceNumber,
+        invoiceLineId: invoice.invoiceLineId,
+        productSku: row.productSku,
+        planSku: row.planSku,
+        profileId: metadata.profileId,
+        country,
+        region: region ?? undefined,
+        ipCountry: metadata.ipCountry,
+        inScope: scoped,
+        language: profile?.language ?? metadata.language ?? billingLanguageOf(country, policy),
+        currency: (invoice.currency ?? subscription.currency ?? item?.price?.currency ?? 'usd').toLowerCase(),
+        amountSubtotalMinor: subtotal,
+        amountTaxMinor: tax,
+        amountTotalMinor: invoice.totalMinor ?? subtotal + tax,
+        taxBehavior: item?.price?.tax_behavior ?? undefined,
+        textVersion: metadata.termsVersion ?? policy.textVersion,
+        copyVersion: metadata.copyVersion ?? CONSUMER_RIGHTS_COPY_VERSION,
+        startRequestId: start?.id,
+        servicesStartedAt: start?.decidedAt,
+        consentId: start?.id,
+        consentedAt: start?.decidedAt,
+        purchasedAt,
+        deadline: deadlineOf(policy, scoped, purchasedAt),
+    });
+    const { record, created } = await createPurchase(ctx, draft);
+    return { purchase: record, created };
+};
+/**
+ * Refine a subscription purchase with its completed checkout: the buyer's own country (and so the
+ * scope and deadline), e-mail, the charged totals, the terms acceptance and the session id; lock
+ * the billing country; mail the confirmation once.
+ */
+export const completeSubscriptionPurchase = async (ctx, stripe, session, purchase, opts = {}) => {
+    const policy = await payment(ctx).consumerRightsPolicy();
+    if (policy == null) {
+        return purchase;
+    }
+    const evidence = sessionEvidenceOf(session);
+    const profile = await lockFromSession(ctx, policy, purchase.entityId, session, evidence);
+    const country = evidence.country ?? purchase.country ?? profile?.country;
+    const region = regionOf(country, policy);
+    const scoped = inScope(region, country, policy) || (profile != null && inScope(profile.region, profile.country, policy));
+    const invoice = purchase.invoiceLineId == null || purchase.paymentIntentId == null
+        ? await invoiceEvidenceOf(stripe, purchase.invoiceId ?? idOf(session.invoice)) : {};
+    const purchasedAt = new Date(purchase.purchasedAt);
+    const fields = compact({
+        sessionId: session.id,
+        invoiceId: purchase.invoiceId ?? idOf(session.invoice),
+        invoiceNumber: purchase.invoiceNumber ?? invoice.invoiceNumber,
+        invoiceLineId: purchase.invoiceLineId ?? invoice.invoiceLineId,
+        paymentIntentId: purchase.paymentIntentId ?? invoice.paymentIntentId,
+        country,
+        region: region ?? undefined,
+        inScope: scoped,
+        deadline: scoped ? purchase.deadline ?? withdrawalDeadlineOf(purchasedAt, policy) : undefined,
+        email: evidence.email ?? purchase.email,
+        name: evidence.name ?? purchase.name,
+        business: evidence.business ?? purchase.business,
+        currency: evidence.currency !== '' ? evidence.currency : purchase.currency,
+        amountSubtotalMinor: evidence.subtotalMinor,
+        amountTaxMinor: evidence.taxMinor,
+        amountTotalMinor: evidence.totalMinor,
+        presentmentCurrency: evidence.presentmentCurrency,
+        presentmentAmountMinor: evidence.presentmentAmountMinor,
+        termsAccepted: evidence.termsAccepted,
+        ipCountry: purchase.ipCountry ?? session.metadata?.ipCountry,
+        language: profile?.language ?? purchase.language,
+    });
+    await patchPurchase(ctx, purchase.purchaseId, fields);
+    const updated = { ...purchase, ...fields };
+    if (!scoped && purchase.deadline != null) {
+        // Out of scope after all (the buyer's own country): no window.
+        await patchPurchase(ctx, purchase.purchaseId, { deadline: null });
+        delete updated.deadline;
+    }
+    if (opts.mail !== false)
+        await confirmPurchase(ctx, policy, updated);
+    return updated;
+};
+//# sourceMappingURL=capture.js.map

package/build/consumer/capture.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capture.js","sourceRoot":"","sources":["../../src/consumer/capture.ts"],"names":[],"mappings":"AACA,OAAO,EACL,iBAAiB,EAAE,WAAW,EAAE,4BAA4B,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAC7F,oBAAoB,GACrB,MAAM,mBAAmB,CAAA;AAG1B,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AACnD,OAAO,EACL,eAAe,EAAE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,SAAS,GAC9G,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EACL,cAAc,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,GACnE,MAAM,cAAc,CAAA;AAmBrB;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAgC,EAAmB,EAAE;IACrF,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,CAAA;IACxC,MAAM,WAAW,GAAI,OAEnB,CAAC,mBAAmB,CAAA;IACtB,MAAM,QAAQ,GAAG,OAAO,CAAC,eAAe,IAAI,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,OAAO,CAAC,aAAa,EAAE,UAAU,IAAI,CAAC,CAAA;IAElD,OAAO,OAAO,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,SAAS;QAC9D,KAAK,EAAE,OAAO,EAAE,KAAK,IAAI,SAAS;QAClC,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,SAAS;QAChC,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,OAAO,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACrG,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE;QAChD,aAAa,EAAE,QAAQ;QACvB,QAAQ,EAAE,GAAG;QACb,UAAU,EAAE,OAAO,CAAC,YAAY,IAAI,QAAQ,GAAG,GAAG;QAClD,mBAAmB,EAAE,WAAW,EAAE,oBAAoB,EAAE,WAAW,EAAE;QACrE,sBAAsB,EAAE,WAAW,EAAE,kBAAkB;QACvD,aAAa,EAAE,OAAO,CAAC,OAAO,EAAE,gBAAgB,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI;YACpE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;KAClE,CAAoB,CAAA;AACvB,CAAC,CAAA;AAcD;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EAAE,MAAiC,EAAE,SAA6B,EAA4B,EAAE;IACpI,IAAI,MAAM,IAAI,IAAI,IAAI,SAAS,IAAI,IAAI,EAAE,CAAC;QACxC,OAAO,EAAE,CAAA;IACX,CAAC;IACD,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAA;QACzD,MAAM,KAAK,GAAG,OAA+F,CAAA;QAE7G,OAAO,OAAO,CAAC;YACb,aAAa,EAAE,OAAO,CAAC,MAAM,IAAI,SAAS;YAC1C,aAAa,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YAC3C,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC;YAC3C,OAAO,EAAE,OAAO,CAAC,gBAAgB,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,SAAS;YACtE,aAAa,EAAE,OAAO,CAAC,QAAQ,IAAI,SAAS;YAC5C,QAAQ,EAAE,KAAK,CAAC,GAAG,IAAI,SAAS;YAChC,UAAU,EAAE,OAAO,CAAC,KAAK,IAAI,SAAS;YACtC,QAAQ,EAAE,OAAO,CAAC,QAAQ,IAAI,SAAS;SACxC,CAAoB,CAAA;IACvB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,CAAC;YAC5B,OAAO,CAAC,IAAI,CAAC,sBAAsB,SAAS,+BAA+B,EAAE,KAAK,CAAC,CAAA;QACrF,CAAC;QACD,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC,CAAA;AAED,MAAM,UAAU,GAAG,CAAC,MAA4B,EAAE,MAAe,EAAE,WAAiB,EAAoB,EAAE,CACxG,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AAEhE,oGAAoG;AACpG,MAAM,eAAe,GAAG,KAAK,EAC3B,GAAe,EAAE,MAA4B,EAAE,QAAgB,EAAE,OAAgC,EACjG,QAAyB,EACa,EAAE;IACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAA;IACvC,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAA;IACpD,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACxE,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE;QAChD,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE;QAChG,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QACtG,QAAQ,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KACzD,CAAC,CAAA;IAEF,OAAO,MAAM,CAAA;AACf,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,eAAe,GAAG,KAAK,EAAE,GAAe,EAAE,MAA4B,EAAE,QAAwB,EAAiB,EAAE;IACvH,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,oBAAoB,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;QACjE,OAAM;IACR,CAAC;IACD,IAAI,MAAM,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC;QACjE,OAAM;IACR,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE;QAClH,kBAAkB,EAAE,IAAI,IAAI,EAAE;KAC/B,CAAC,CAAA;IACF,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAM;IACR,CAAC;IACD,MAAM,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAA;AACtE,CAAC,CAAA;AAOD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,EACzC,GAAe,EAAE,MAAqB,EAAE,OAAgC,EACxE,KAAK,GAA0G,EAAE,EACjH,IAAI,GAAuB,EAAE,EACK,EAAE;IACpC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,EAAE,CAAA;IACxD,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAA;IACvC,MAAM,QAAQ,GAAG,QAAQ,CAAC,QAAQ,CAAA;IAClC,IAAI,QAAQ,IAAI,IAAI,IAAI,QAAQ,CAAC,UAAU,IAAI,IAAI,EAAE,CAAC;QACpD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC3C,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;IAC/E,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAA;IAC5E,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;YAAE,MAAM,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAA;QACrE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAC/C,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,IAAI,OAAO,EAAE,OAAO,CAAA;IACxE,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACxC,kGAAkG;IAClG,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;IACxH,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAA;IACtE,MAAM,WAAW,GAAG,KAAK,CAAC,EAAE,IAAI,IAAI,IAAI,EAAE,CAAA;IAC1C,MAAM,KAAK,GAAG,OAAO,CAAC;QACpB,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;QACpC,QAAQ;QACR,IAAI,EAAE,YAAY,CAAC,KAAK;QACxB,OAAO,EAAE,oBAAoB;QAC7B,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,eAAe;QACxE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QAChC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,OAAO;QACP,MAAM,EAAE,MAAM,IAAI,SAAS;QAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC;QACtF,KAAK,EAAE,QAAQ,CAAC,KAAK;QACrB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,mBAAmB,EAAE,QAAQ,CAAC,aAAa;QAC3C,cAAc,EAAE,QAAQ,CAAC,QAAQ;QACjC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;QACrC,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;QACjD,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB;QACvD,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,cAAc,EAAE,KAAK,CAAC,cAAc;QACpC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,WAAW,EAAE,KAAK,CAAC,WAAW;QAC9B,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,WAAW,EAAE,QAAQ,CAAC,YAAY,IAAI,MAAM,CAAC,WAAW;QACxD,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,4BAA4B;QACjE,WAAW;QACX,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC;KAClD,CAAkB,CAAA;IACnB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAC5D,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;QAAE,MAAM,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;IAEnE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AACtC,CAAC,CAAA;AAED,yGAAyG;AACzG,MAAM,cAAc,GAAG,KAAK,EAAE,GAAe,EAAE,QAAgB,EAAE,EAAsB,EAAE,EAAE;IACzF,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;IAEtE,OAAO,OAAO,IAAI,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,iBAAiB,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAA;AAC5H,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,EAC9C,GAAe,EAAE,MAAqB,EAAE,YAAiC,EAAE,GAA8B,EACvE,EAAE;IACpC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,EAAE,CAAA;IACxD,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,UAAU,GAAG,YAAY,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;IAChD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,CAAA;IAC9D,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;QACrB,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;IAC/C,CAAC;IACD,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,IAAI,EAAE,CAAA;IAC5C,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,cAAc,CAAC,CAAA;IACnD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAA;IAC1D,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAA;IACjE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,OAAO,EAAE,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAA;IACvE,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;IACxH,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAA;IAC9E,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,WAAW,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAA;IACjG,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAA;IACjC,MAAM,WAAW,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,CAAA;IAC9D,MAAM,KAAK,GAAG,OAAO,CAAC;QACpB,UAAU;QACV,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,IAAI,EAAE,YAAY,CAAC,YAAY;QAC/B,OAAO,EAAE,oBAAoB;QAC7B,cAAc,EAAE,YAAY,CAAC,EAAE;QAC/B,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,SAAS;QACT,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,UAAU,EAAE,GAAG,CAAC,UAAU;QAC1B,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,OAAO;QACP,MAAM,EAAE,MAAM,IAAI,SAAS;QAC3B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,QAAQ,CAAC,QAAQ,IAAI,iBAAiB,CAAC,OAAO,EAAE,MAAM,CAAC;QACtF,QAAQ,EAAE,CAAC,OAAO,CAAC,QAAQ,IAAI,YAAY,CAAC,QAAQ,IAAI,IAAI,EAAE,KAAK,EAAE,QAAQ,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE;QACrG,mBAAmB,EAAE,QAAQ;QAC7B,cAAc,EAAE,GAAG;QACnB,gBAAgB,EAAE,OAAO,CAAC,UAAU,IAAI,QAAQ,GAAG,GAAG;QACtD,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,IAAI,SAAS;QACnD,WAAW,EAAE,QAAQ,CAAC,YAAY,IAAI,MAAM,CAAC,WAAW;QACxD,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,4BAA4B;QACjE,cAAc,EAAE,KAAK,EAAE,EAAE;QACzB,iBAAiB,EAAE,KAAK,EAAE,SAAS;QACnC,SAAS,EAAE,KAAK,EAAE,EAAE;QACpB,WAAW,EAAE,KAAK,EAAE,SAAS;QAC7B,WAAW;QACX,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,CAAC;KAClD,CAAkB,CAAA;IACnB,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;IAE5D,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,CAAA;AACtC,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,KAAK,EAC/C,GAAe,EAAE,MAAqB,EAAE,OAAgC,EAAE,QAAwB,EAClG,IAAI,GAAuB,EAAE,EACJ,EAAE;IAC3B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,oBAAoB,EAAE,CAAA;IACxD,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;QACnB,OAAO,QAAQ,CAAA;IACjB,CAAC;IACD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,OAAO,CAAC,CAAA;IAC3C,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAA;IACxF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,IAAI,OAAO,EAAE,OAAO,CAAA;IACxE,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;IACxC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;IACxH,MAAM,OAAO,GAAG,QAAQ,CAAC,aAAa,IAAI,IAAI,IAAI,QAAQ,CAAC,eAAe,IAAI,IAAI;QAChF,CAAC,CAAC,MAAM,iBAAiB,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IACrF,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;IAClD,MAAM,MAAM,GAAG,OAAO,CAAC;QACrB,SAAS,EAAE,OAAO,CAAC,EAAE;QACrB,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;QACtD,aAAa,EAAE,QAAQ,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa;QAC9D,aAAa,EAAE,QAAQ,CAAC,aAAa,IAAI,OAAO,CAAC,aAAa;QAC9D,eAAe,EAAE,QAAQ,CAAC,eAAe,IAAI,OAAO,CAAC,eAAe;QACpE,OAAO;QACP,MAAM,EAAE,MAAM,IAAI,SAAS;QAC3B,OAAO,EAAE,MAAM;QACf,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,IAAI,oBAAoB,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS;QAC7F,KAAK,EAAE,QAAQ,CAAC,KAAK,IAAI,QAAQ,CAAC,KAAK;QACvC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI;QACpC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ;QAChD,QAAQ,EAAE,QAAQ,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ;QAC1E,mBAAmB,EAAE,QAAQ,CAAC,aAAa;QAC3C,cAAc,EAAE,QAAQ,CAAC,QAAQ;QACjC,gBAAgB,EAAE,QAAQ,CAAC,UAAU;QACrC,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;QACjD,sBAAsB,EAAE,QAAQ,CAAC,sBAAsB;QACvD,aAAa,EAAE,QAAQ,CAAC,aAAa;QACrC,SAAS,EAAE,QAAQ,CAAC,SAAS,IAAI,OAAO,CAAC,QAAQ,EAAE,SAAS;QAC5D,QAAQ,EAAE,OAAO,EAAE,QAAQ,IAAI,QAAQ,CAAC,QAAQ;KACjD,CAA4B,CAAA;IAC7B,MAAM,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,CAAA;IACrD,MAAM,OAAO,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,MAAM,EAAoB,CAAA;IAC5D,IAAI,CAAC,MAAM,IAAI,QAAQ,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;QACzC,+DAA+D;QAC/D,MAAM,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,UAAU,EAAE,EAAE,QAAQ,EAAE,IAA4B,EAAE,CAAC,CAAA;QACzF,OAAO,OAAO,CAAC,QAAQ,CAAA;IACzB,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;QAAE,MAAM,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAA;IAEpE,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA"}

package/build/consumer/format.d.ts

@@ -0,0 +1,27 @@
+/** `CR-YYMMDD-XXXXXX` — the purchase's UTC date and six characters of an unambiguous alphabet. */
+export declare const makeContractRef: (at?: Date) => string;
+/** A contract reference as a person may type it: trimmed, upper-cased, look-alike dashes unified. */
+export declare const normalizeContractRef: (value: string) => string;
+export declare const normalizeEmail: (value: string | null | undefined) => string;
+/**
+ * Whether an address is on a reserved top-level domain (`.test`, `.example`, `.invalid`,
+ * `.localhost` — RFC 2606 / 6761), any subdomain included: `a@shop.test`, `a@mail.shop.test`,
+ * `a@localhost`. Case, surrounding spaces, a display-name form (`Name <a@shop.test>`) and a
+ * trailing root dot are all read through.
+ */
+export declare const isReservedAddress: (address: string) => boolean;
+export declare const escapeHtml: (value: string) => string;
+/** Minor units as a localized amount with its currency (`12,56 €`, `$12.56`). */
+export declare const formatMoney: (amountMinor: number, currency: string, lng: string) => string;
+/** A date and time in UTC, localized (`23 September 2026, 14:05`). */
+export declare const formatDateTime: (at: Date, lng: string) => string;
+/** A calendar date in UTC, localized. */
+export declare const formatDate: (at: Date, lng: string) => string;
+/**
+ * The last included day of a window whose deadline is EXCLUSIVE (the first instant it is over),
+ * as a UTC date — the copy says "until the end of <date>": 13 October 00:00 UTC is "12 October".
+ */
+export declare const formatDeadline: (deadline: Date, lng: string) => string;
+/** A country's name in a language, else its code. */
+export declare const countryName: (country: string, lng: string) => string;
+//# sourceMappingURL=format.d.ts.map

package/build/consumer/format.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.d.ts","sourceRoot":"","sources":["../../src/consumer/format.ts"],"names":[],"mappings":"AAIA,kGAAkG;AAClG,eAAO,MAAM,eAAe,QAAQ,IAAI,KAAgB,MAMvD,CAAA;AAED,qGAAqG;AACrG,eAAO,MAAM,oBAAoB,UAAW,MAAM,KAAG,MACE,CAAA;AAEvD,eAAO,MAAM,cAAc,UAAW,MAAM,GAAG,IAAI,GAAG,SAAS,KAAG,MAA4C,CAAA;AAE9G;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,YAAa,MAAM,KAAG,OAMnD,CAAA;AAED,eAAO,MAAM,UAAU,UAAW,MAAM,KAAG,MAEM,CAAA;AAWjD,iFAAiF;AACjF,eAAO,MAAM,WAAW,gBAAiB,MAAM,YAAY,MAAM,OAAO,MAAM,KAAG,MAQhF,CAAA;AAED,sEAAsE;AACtE,eAAO,MAAM,cAAc,OAAQ,IAAI,OAAO,MAAM,KAAG,MAMtD,CAAA;AAED,yCAAyC;AACzC,eAAO,MAAM,UAAU,OAAQ,IAAI,OAAO,MAAM,KAAG,MAMlD,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,cAAc,aAAc,IAAI,OAAO,MAAM,KAAG,MACb,CAAA;AAEhD,qDAAqD;AACrD,eAAO,MAAM,WAAW,YAAa,MAAM,OAAO,MAAM,KAAG,MAM1D,CAAA"}

package/build/consumer/format.js

@@ -0,0 +1,81 @@
+import { randomInt } from 'node:crypto';
+import { lastWithdrawalDayOf } from '@owlmeans/payment';
+import { CONTRACT_REF_ALPHABET, RESERVED_MAIL_TLDS } from '../consts.js';
+/** `CR-YYMMDD-XXXXXX` — the purchase's UTC date and six characters of an unambiguous alphabet. */
+export const makeContractRef = (at = new Date()) => {
+    const date = [at.getUTCFullYear() % 100, at.getUTCMonth() + 1, at.getUTCDate()]
+        .map(part => String(part).padStart(2, '0')).join('');
+    const suffix = Array.from({ length: 6 }, () => CONTRACT_REF_ALPHABET[randomInt(CONTRACT_REF_ALPHABET.length)]).join('');
+    return `CR-${date}-${suffix}`;
+};
+/** A contract reference as a person may type it: trimmed, upper-cased, look-alike dashes unified. */
+export const normalizeContractRef = (value) => value.trim().toUpperCase().replace(/[‐-―−\s]+/g, '-');
+export const normalizeEmail = (value) => (value ?? '').trim().toLowerCase();
+/**
+ * Whether an address is on a reserved top-level domain (`.test`, `.example`, `.invalid`,
+ * `.localhost` — RFC 2606 / 6761), any subdomain included: `a@shop.test`, `a@mail.shop.test`,
+ * `a@localhost`. Case, surrounding spaces, a display-name form (`Name <a@shop.test>`) and a
+ * trailing root dot are all read through.
+ */
+export const isReservedAddress = (address) => {
+    const bare = normalizeEmail(address).replace(/^.*<([^>]*)>.*$/, '$1');
+    const domain = (bare.split('@').pop() ?? '').trim().replace(/\.+$/, '');
+    const tld = domain.split('.').pop() ?? '';
+    return RESERVED_MAIL_TLDS.includes(tld);
+};
+export const escapeHtml = (value) => value
+    .replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;')
+    .replace(/"/g, '&quot;').replace(/'/g, '&#39;');
+const fractionDigitsOf = (currency) => {
+    try {
+        return new Intl.NumberFormat('en', { style: 'currency', currency: currency.toUpperCase() })
+            .resolvedOptions().maximumFractionDigits ?? 2;
+    }
+    catch {
+        return 2;
+    }
+};
+/** Minor units as a localized amount with its currency (`12,56 €`, `$12.56`). */
+export const formatMoney = (amountMinor, currency, lng) => {
+    const digits = fractionDigitsOf(currency);
+    const major = amountMinor / 10 ** digits;
+    try {
+        return new Intl.NumberFormat(lng, { style: 'currency', currency: currency.toUpperCase() }).format(major);
+    }
+    catch {
+        return `${major.toFixed(digits)} ${currency.toUpperCase()}`;
+    }
+};
+/** A date and time in UTC, localized (`23 September 2026, 14:05`). */
+export const formatDateTime = (at, lng) => {
+    try {
+        return new Intl.DateTimeFormat(lng, { dateStyle: 'long', timeStyle: 'short', timeZone: 'UTC' }).format(at);
+    }
+    catch {
+        return at.toISOString().replace('T', ' ').slice(0, 16);
+    }
+};
+/** A calendar date in UTC, localized. */
+export const formatDate = (at, lng) => {
+    try {
+        return new Intl.DateTimeFormat(lng, { dateStyle: 'long', timeZone: 'UTC' }).format(at);
+    }
+    catch {
+        return at.toISOString().slice(0, 10);
+    }
+};
+/**
+ * The last included day of a window whose deadline is EXCLUSIVE (the first instant it is over),
+ * as a UTC date — the copy says "until the end of <date>": 13 October 00:00 UTC is "12 October".
+ */
+export const formatDeadline = (deadline, lng) => formatDate(lastWithdrawalDayOf(deadline), lng);
+/** A country's name in a language, else its code. */
+export const countryName = (country, lng) => {
+    try {
+        return new Intl.DisplayNames([lng], { type: 'region' }).of(country.toUpperCase()) ?? country;
+    }
+    catch {
+        return country;
+    }
+};
+//# sourceMappingURL=format.js.map

package/build/consumer/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../../src/consumer/format.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AACvC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AAExE,kGAAkG;AAClG,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,EAAE,GAAS,IAAI,IAAI,EAAE,EAAU,EAAE;IAC/D,MAAM,IAAI,GAAG,CAAC,EAAE,CAAC,cAAc,EAAE,GAAG,GAAG,EAAE,EAAE,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,UAAU,EAAE,CAAC;SAC5E,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACtD,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,GAAG,EAAE,CAAC,qBAAqB,CAAC,SAAS,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAEvH,OAAO,MAAM,IAAI,IAAI,MAAM,EAAE,CAAA;AAC/B,CAAC,CAAA;AAED,qGAAqG;AACrG,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,KAAa,EAAU,EAAE,CAC5D,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,GAAG,CAAC,CAAA;AAEvD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAgC,EAAU,EAAE,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;AAE9G;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,OAAe,EAAW,EAAE;IAC5D,MAAM,IAAI,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAAA;IACrE,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;IACvE,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAA;IAEzC,OAAO,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAA;AACzC,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,KAAK;KACvD,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;KAClE,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;AAEjD,MAAM,gBAAgB,GAAG,CAAC,QAAgB,EAAU,EAAE;IACpD,IAAI,CAAC;QACH,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;aACxF,eAAe,EAAE,CAAC,qBAAqB,IAAI,CAAC,CAAA;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAA;IACV,CAAC;AACH,CAAC,CAAA;AAED,iFAAiF;AACjF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,WAAmB,EAAE,QAAgB,EAAE,GAAW,EAAU,EAAE;IACxF,MAAM,MAAM,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAA;IACzC,MAAM,KAAK,GAAG,WAAW,GAAG,EAAE,IAAI,MAAM,CAAA;IACxC,IAAI,CAAC;QACH,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IAC1G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAA;IAC7D,CAAC;AACH,CAAC,CAAA;AAED,sEAAsE;AACtE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,EAAQ,EAAE,GAAW,EAAU,EAAE;IAC9D,IAAI,CAAC;QACH,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IAC5G,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACxD,CAAC;AACH,CAAC,CAAA;AAED,yCAAyC;AACzC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,EAAQ,EAAE,GAAW,EAAU,EAAE;IAC1D,IAAI,CAAC;QACH,OAAO,IAAI,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;IACxF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACtC,CAAC;AACH,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,QAAc,EAAE,GAAW,EAAU,EAAE,CACpE,UAAU,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,CAAA;AAEhD,qDAAqD;AACrD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,OAAe,EAAE,GAAW,EAAU,EAAE;IAClE,IAAI,CAAC;QACH,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,OAAO,CAAA;IAC9F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAA;IAChB,CAAC;AACH,CAAC,CAAA"}

package/build/consumer/handlers.d.ts

@@ -0,0 +1,28 @@
+import type { EntrypointProtocolDeclaration } from '@owlmeans/entrypoint';
+import type { CheckoutReadProtocols, ConsumerRightsAccountProtocols, ConsumerRightsPublicProtocols } from '@owlmeans/payment';
+import type { ServerProtocolEntrypoint } from '@owlmeans/server-entrypoint';
+import type { CheckoutReadHandlerOptions, ConsumerRightsHandlerOptions } from '../types.js';
+type Bound = ServerProtocolEntrypoint<EntrypointProtocolDeclaration>;
+/** The protocol tree `makeConsumerRightsProtocols` builds, with or without its public subtree. */
+export type ConsumerRightsTree = ConsumerRightsAccountProtocols & {
+    public?: ConsumerRightsPublicProtocols;
+};
+/**
+ * Server bindings of `makeConsumerRightsProtocols`' tree over the consumer-rights service. The
+ * account routes act for the request's organization (`resolveEntity`, default `req.entity.id`);
+ * the money-moving acts (consent, start request, withdrawal, cancellation) pass `guardMoney` first
+ * (refuse an API key there). The public routes — the statutory functions without a login — need
+ * `throttle` (a wiring error otherwise), drop a filled honeypot silently, and answer every
+ * declaration with the same receipt shape after at least `publicMinMs`, matched or not. Every hook
+ * gets the request's context as its last argument.
+ *
+ * @throws SyntaxError when the tree has a public subtree and no `throttle` is given
+ */
+export declare const consumerRightsEntrypoints: (protocols: ConsumerRightsTree, opts?: ConsumerRightsHandlerOptions) => Bound[];
+/**
+ * Server bindings of `makeCheckoutReadProtocols`' tree: the entity's amount policy as the checkout
+ * plugins narrow it now (the same computation the checkout enforces) and the synced plan prices.
+ */
+export declare const checkoutReadEntrypoints: (protocols: CheckoutReadProtocols, opts?: CheckoutReadHandlerOptions) => Bound[];
+export {};
+//# sourceMappingURL=handlers.d.ts.map

package/build/consumer/handlers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/consumer/handlers.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAmB,6BAA6B,EAAE,MAAM,sBAAsB,CAAA;AAE1F,OAAO,KAAK,EACV,qBAAqB,EAAE,8BAA8B,EAAE,6BAA6B,EAErF,MAAM,mBAAmB,CAAA;AAI1B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,6BAA6B,CAAA;AAK3E,OAAO,KAAK,EACV,0BAA0B,EAAE,4BAA4B,EAEzD,MAAM,aAAa,CAAA;AAEpB,KAAK,KAAK,GAAG,wBAAwB,CAAC,6BAA6B,CAAC,CAAA;AAEpE,kGAAkG;AAClG,MAAM,MAAM,kBAAkB,GAAG,8BAA8B,GAAG;IAAE,MAAM,CAAC,EAAE,6BAA6B,CAAA;CAAE,CAAA;AAiC5G;;;;;;;;;;GAUG;AACH,eAAO,MAAM,yBAAyB,cACzB,kBAAkB,SAAQ,4BAA4B,KAChE,KAAK,EA8GP,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,uBAAuB,cAAe,qBAAqB,SAAQ,0BAA0B,KAAQ,KAAK,EAwBtH,CAAA"}

package/build/consumer/handlers.js

@@ -0,0 +1,173 @@
+import { randomBytes } from 'node:crypto';
+import { AuthForbidden } from '@owlmeans/auth';
+import { ConsumerRightsError, DeclarationChannel } from '@owlmeans/payment';
+import { handlers } from '@owlmeans/server-api';
+import { bind } from '@owlmeans/server-entrypoint';
+import { CONSUMER_RIGHTS_SERVICE, GATEWAY_SERVICE } from '../consts.js';
+import { payment } from '../utils.js';
+import { requestOriginOf } from './origin.js';
+import { unlockedProfileView } from './records.js';
+const defaultEntity = (req, _ctx) => req.entity?.id ?? null;
+const DEFAULT_PUBLIC_MIN_MS = 1000;
+const sleep = async (ms) => await new Promise(resolve => setTimeout(resolve, ms));
+/** Answer no sooner than `minMs` after the start — a matched declaration takes as long as an unmatched one. */
+const padded = async (minMs, run) => {
+    const started = Date.now();
+    try {
+        return await run();
+    }
+    finally {
+        const left = minMs - (Date.now() - started);
+        if (left > 0)
+            await sleep(left);
+    }
+};
+/** The public answer: what was declared and when — never a status, an amount or a match. */
+const publicPart = (receipt) => ({
+    declarationId: receipt.declarationId, receivedAt: receipt.receivedAt, content: receipt.content, mailed: receipt.mailed,
+});
+/** A form a bot filled (the honeypot) gets the same shape of answer, and nothing is recorded or sent. */
+const decoyReceipt = (content) => ({
+    declarationId: randomBytes(12).toString('hex'), receivedAt: new Date(), content, mailed: false,
+});
+const typed = (fields) => Object.fromEntries(Object.entries(fields).filter((entry) => typeof entry[1] === 'string' && entry[1].trim() !== ''));
+/**
+ * Server bindings of `makeConsumerRightsProtocols`' tree over the consumer-rights service. The
+ * account routes act for the request's organization (`resolveEntity`, default `req.entity.id`);
+ * the money-moving acts (consent, start request, withdrawal, cancellation) pass `guardMoney` first
+ * (refuse an API key there). The public routes — the statutory functions without a login — need
+ * `throttle` (a wiring error otherwise), drop a filled honeypot silently, and answer every
+ * declaration with the same receipt shape after at least `publicMinMs`, matched or not. Every hook
+ * gets the request's context as its last argument.
+ *
+ * @throws SyntaxError when the tree has a public subtree and no `throttle` is given
+ */
+export const consumerRightsEntrypoints = (protocols, opts = {}) => {
+    if (protocols.public != null && opts.throttle == null) {
+        throw new SyntaxError('consumer-rights: the public routes need a throttle');
+    }
+    const api = handlers();
+    const serviceOf = (ctx) => ctx.service(opts.serviceAlias ?? CONSUMER_RIGHTS_SERVICE);
+    const apiCtx = (ctx) => ctx;
+    const entityOf = (req, ctx) => {
+        const entityId = (opts.resolveEntity ?? defaultEntity)(req, apiCtx(ctx));
+        if (entityId == null || entityId === '') {
+            throw new AuthForbidden('entity');
+        }
+        return entityId;
+    };
+    const subjectFor = async (req, ctx) => ({
+        ...(await opts.subjectOf?.(req, apiCtx(ctx)) ?? {}),
+        entityId: entityOf(req, ctx),
+        channel: DeclarationChannel.InApp,
+    });
+    const metaOf = (req, ctx) => opts.metaOf != null ? opts.metaOf(req, apiCtx(ctx)) : requestOriginOf(req);
+    const guard = async (req, action, ctx) => {
+        await opts.guardMoney?.(req, action, apiCtx(ctx));
+    };
+    const minMs = opts.publicMinMs ?? DEFAULT_PUBLIC_MIN_MS;
+    const bound = [
+        bind(protocols.base),
+        bind(protocols.profile, api.request(protocols.profile, async (req, ctx) => await serviceOf(ctx).profile(entityOf(req, ctx))
+            ?? unlockedProfileView(await payment(ctx).consumerRightsPolicy()))),
+        bind(protocols.purchases, api.request(protocols.purchases, async (req, ctx) => ({ purchases: await serviceOf(ctx).purchases(entityOf(req, ctx)) }))),
+        bind(protocols.consent, api.request(protocols.consent, async (req, ctx) => await serviceOf(ctx).consentView(entityOf(req, ctx)))),
+        bind(protocols.giveConsent, api.body(protocols.giveConsent, async (body, ctx, req) => {
+            await guard(req, 'consent', ctx);
+            return await serviceOf(ctx).recordConsent(await subjectFor(req, ctx), body, metaOf(req, ctx));
+        })),
+        bind(protocols.start, api.request(protocols.start, async (req, ctx) => await serviceOf(ctx).startView(entityOf(req, ctx), String(req.query.planSku)))),
+        bind(protocols.requestStart, api.body(protocols.requestStart, async (body, ctx, req) => {
+            await guard(req, 'start', ctx);
+            const plan = await opts.planNameOf?.(body.planSku, body.language, req, apiCtx(ctx));
+            return await serviceOf(ctx).recordStartRequest(await subjectFor(req, ctx), body, metaOf(req, ctx), plan != null ? { plan } : {});
+        })),
+        bind(protocols.withdrawals, api.request(protocols.withdrawals, async (req, ctx) => {
+            const subject = await subjectFor(req, ctx);
+            return await serviceOf(ctx).withdrawalCandidates(subject.entityId, subject);
+        })),
+        bind(protocols.withdraw, api.body(protocols.withdraw, async (body, ctx, req) => {
+            await guard(req, 'withdraw', ctx);
+            return await serviceOf(ctx).withdraw(await subjectFor(req, ctx), body, metaOf(req, ctx));
+        })),
+        bind(protocols.cancel, api.body(protocols.cancel, async (body, ctx, req) => {
+            await guard(req, 'cancel', ctx);
+            return await serviceOf(ctx).cancel(await subjectFor(req, ctx), body, metaOf(req, ctx));
+        })),
+    ];
+    const pub = protocols.public;
+    if (pub == null) {
+        return bound;
+    }
+    const throttle = opts.throttle;
+    return [
+        ...bound,
+        bind(pub.base),
+        bind(pub.policy, api.request(pub.policy, async (_req, ctx) => {
+            const policy = await payment(ctx).consumerRightsPolicy();
+            if (policy == null) {
+                throw new ConsumerRightsError('policy:none');
+            }
+            const view = {
+                mechanisms: { withdrawal: policy.mechanisms.withdrawal, cancellation: policy.mechanisms.cancellation },
+                languages: Object.keys(policy.links),
+                links: policy.links,
+                textVersion: policy.textVersion,
+            };
+            return view;
+        })),
+        bind(pub.withdraw, api.body(pub.withdraw, async (body, ctx, req) => {
+            const origin = metaOf(req, ctx);
+            await throttle(req, { action: 'withdrawal', email: body.email, ...(origin.ip != null ? { ip: origin.ip } : {}) }, apiCtx(ctx));
+            return await padded(minMs, async () => {
+                const content = typed({ name: body.name, contract: body.contractRef, email: body.email });
+                if (body.honeypot != null && body.honeypot !== '') {
+                    return decoyReceipt(content);
+                }
+                return publicPart(await serviceOf(ctx).withdraw(null, body, origin));
+            });
+        })),
+        bind(pub.cancel, api.body(pub.cancel, async (body, ctx, req) => {
+            const origin = metaOf(req, ctx);
+            await throttle(req, { action: 'cancellation', email: body.email, ...(origin.ip != null ? { ip: origin.ip } : {}) }, apiCtx(ctx));
+            return await padded(minMs, async () => {
+                const content = typed({
+                    name: body.name, contract: body.contractRef, email: body.email, kind: body.kind, reason: body.reason,
+                    date: body.effective === 'date' ? body.date : undefined,
+                });
+                if (body.honeypot != null && body.honeypot !== '') {
+                    return decoyReceipt(content);
+                }
+                return publicPart(await serviceOf(ctx).cancel(null, body, origin));
+            });
+        })),
+    ];
+};
+/**
+ * Server bindings of `makeCheckoutReadProtocols`' tree: the entity's amount policy as the checkout
+ * plugins narrow it now (the same computation the checkout enforces) and the synced plan prices.
+ */
+export const checkoutReadEntrypoints = (protocols, opts = {}) => {
+    const api = handlers();
+    const gatewayOf = (ctx) => ctx.service(opts.gatewayAlias ?? GATEWAY_SERVICE);
+    const entityOf = (req, ctx) => {
+        const entityId = (opts.resolveEntity ?? defaultEntity)(req, ctx);
+        if (entityId == null || entityId === '') {
+            throw new AuthForbidden('entity');
+        }
+        return entityId;
+    };
+    return [
+        bind(protocols.base),
+        bind(protocols.amountPolicy, api.request(protocols.amountPolicy, async (req, ctx) => {
+            const { productSku, planSku } = req.query;
+            return await gatewayOf(ctx).amountPolicy(ctx, entityOf(req, ctx), productSku, planSku ?? undefined);
+        })),
+        bind(protocols.planPrices, api.request(protocols.planPrices, async (req, ctx) => {
+            entityOf(req, ctx);
+            const { productSku } = req.query;
+            return { prices: await gatewayOf(ctx).planPrices(ctx, productSku) };
+        })),
+    ];
+};
+//# sourceMappingURL=handlers.js.map