@saasicat/core 1.0.0-rc.16 → 1.0.0-rc.17

package/dist/.build-stamp

@@ -1 +1 @@
-ac1a4c0280cf9333a264b4d84b290ab32ab44dd67287ec6d1abd99c01bc863b9
+5a529cc8f17f234940c3b0844d6f20fce18fadd196d3b3485274b711635819af

package/dist/index.cjs

@@ -37,11 +37,14 @@ __export(index_exports, {
   OTP_TTL_MINUTES: () => OTP_TTL_MINUTES,
   OTP_VERIFY_MAX_ATTEMPTS: () => OTP_VERIFY_MAX_ATTEMPTS,
   PASSWORD_RESET_TTL_MINUTES: () => PASSWORD_RESET_TTL_MINUTES,
+  PAYMENT_ERROR_CODES: () => PAYMENT_ERROR_CODES,
+  PAYMENT_METHOD_TYPES: () => PAYMENT_METHOD_TYPES,
   PENDING_CHECKOUT_TTL_DAYS: () => PENDING_CHECKOUT_TTL_DAYS,
   PENDING_EMAIL_TTL_HOURS: () => PENDING_EMAIL_TTL_HOURS,
   PENDING_ONBOARDING_TTL_DAYS: () => PENDING_ONBOARDING_TTL_DAYS,
   PLATFORM_ERROR_CODES: () => PLATFORM_ERROR_CODES,
   PROMO_ERROR_CODES: () => PROMO_ERROR_CODES,
+  PaymentCallbackRejectedError: () => PaymentCallbackRejectedError,
   PersistenceCapabilityError: () => PersistenceCapabilityError,
   PlatformUserExistsError: () => PlatformUserExistsError,
   REGISTRATION_ERROR_CODES: () => REGISTRATION_ERROR_CODES,
@@ -70,6 +73,7 @@ __export(index_exports, {
   formatErrorMessage: () => formatErrorMessage,
   identityCorrectionDelta: () => identityCorrectionDelta,
   isBundleRedundant: () => isBundleRedundant,
+  isPaymentCallbackRejectedError: () => isPaymentCallbackRejectedError,
   isPlatformUserExistsError: () => isPlatformUserExistsError,
   isVersionEditable: () => isVersionEditable,
   keepOneRecommended: () => keepOneRecommended,
@@ -86,11 +90,13 @@ __export(index_exports, {
   settingsSubtreeOf: () => settingsSubtreeOf,
   startOfUtcDay: () => startOfUtcDay,
   subscriberFromRegistration: () => subscriberFromRegistration,
+  subscriberPaymentMethodColumns: () => subscriberPaymentMethodColumns,
   toBundleStemRow: () => toBundleStemRow,
   toContractLineItemRecord: () => toContractLineItemRecord,
   toPlanRow: () => toPlanRow,
   toPlanVersionRow: () => toPlanVersionRow,
   toSubscriberCorrectionRecord: () => toSubscriberCorrectionRecord,
+  toSubscriberPaymentMethodRecord: () => toSubscriberPaymentMethodRecord,
   toSubscriberRecord: () => toSubscriberRecord,
   toSubscriptionContractRecord: () => toSubscriptionContractRecord
 });
@@ -697,7 +703,10 @@ var SUBSCRIBER_ERROR_CODES = {
   SUBSCRIBER_ALREADY_EXISTS: "SUBSCRIBER_ALREADY_EXISTS",
   SUBSCRIBER_NOT_FOUND: "SUBSCRIBER_NOT_FOUND",
   SUBSCRIBER_LEGAL_NAME_REQUIRED: "SUBSCRIBER_LEGAL_NAME_REQUIRED",
-  /** A detail that has a form — the country, the invoice email — is not in it. Carries `field`. */
+  /**
+   * A detail that has a form — the country, the invoice email — is not in it,
+   * or one sign-up requires — the billing address — is missing. Carries `field`.
+   */
   SUBSCRIBER_DETAIL_INVALID: "SUBSCRIBER_DETAIL_INVALID",
   /** A contact change named a field of the legal identity. Carries `field`. */
   SUBSCRIBER_IDENTITY_NOT_A_CONTACT: "SUBSCRIBER_IDENTITY_NOT_A_CONTACT",
@@ -732,6 +741,12 @@ var AUTH_ERROR_CODES = {
   /** Neither `tenantId` nor `userId` could be resolved from the request. */
   TENANT_CONTEXT_MISSING: "TENANT_CONTEXT_MISSING",
   TENANT_ADMIN_REQUIRED: "TENANT_ADMIN_REQUIRED",
+  /**
+   * The tenant's billing area — its payment method, and later its invoices
+   * and account — needs the billing permission, which the application maps
+   * to its roles and the tenant's administrator holds by default.
+   */
+  BILLING_PERMISSION_REQUIRED: "BILLING_PERMISSION_REQUIRED",
   SUPER_ADMIN_REQUIRED: "SUPER_ADMIN_REQUIRED",
   /** TOTP MFA has never been set up for this user. */
   MFA_NOT_SET_UP: "MFA_NOT_SET_UP",
@@ -759,6 +774,22 @@ var PROMO_ERROR_CODES = {
   PROMO_WOULD_PRODUCE_ZERO_INVOICE: "PROMO_WOULD_PRODUCE_ZERO_INVOICE",
   PROMO_MAX_REDEMPTIONS_LOWERED: "PROMO_MAX_REDEMPTIONS_LOWERED"
 };
+var PAYMENT_ERROR_CODES = {
+  /**
+   * No gateway account takes new payment methods:
+   * `config/saas.yaml#payments.newPaymentMethods` names none.
+   */
+  PAYMENTS_NOT_CONFIGURED: "PAYMENTS_NOT_CONFIGURED",
+  /** A callback arrived for an account `config/saas.yaml#payments.accounts` does not name. Carries `account`. */
+  PAYMENT_GATEWAY_ACCOUNT_UNKNOWN: "PAYMENT_GATEWAY_ACCOUNT_UNKNOWN",
+  /** A callback the gateway did not send: its signature does not verify. */
+  PAYMENT_CALLBACK_REJECTED: "PAYMENT_CALLBACK_REJECTED",
+  /**
+   * A success or cancel URL at an origin `config/saas.yaml#payments.returnUrlOrigins`
+   * does not name. Carries `field`.
+   */
+  PAYMENT_RETURN_URL_NOT_ALLOWED: "PAYMENT_RETURN_URL_NOT_ALLOWED"
+};
 var SETTINGS_ERROR_CODES = {
   /** No recorded change has this id, or the installation keeps no record at all. */
   SETTINGS_CHANGE_NOT_FOUND: "SETTINGS_CHANGE_NOT_FOUND"
@@ -772,6 +803,7 @@ var PLATFORM_ERROR_CODES = {
   ...CONTRACT_ERROR_CODES,
   ...SUBSCRIBER_ERROR_CODES,
   ...REGISTRATION_ERROR_CODES,
+  ...PAYMENT_ERROR_CODES,
   ...SETTINGS_ERROR_CODES
 };
 
@@ -851,6 +883,19 @@ function selectChargeableBundles(planFeatures, selectedBundles) {
   }
 }
 
+// src/payment-gateway.types.ts
+var PAYMENT_CALLBACK_REJECTED = "PAYMENT_CALLBACK_REJECTED";
+var PaymentCallbackRejectedError = class extends Error {
+  code = PAYMENT_CALLBACK_REJECTED;
+  constructor(reason) {
+    super(`Payment callback rejected: ${reason}`);
+    this.name = "PaymentCallbackRejectedError";
+  }
+};
+function isPaymentCallbackRejectedError(err) {
+  return err instanceof Error && err.code === PAYMENT_CALLBACK_REJECTED;
+}
+
 // src/registration.types.ts
 var PENDING_EMAIL_TTL_HOURS = 72;
 var PENDING_ONBOARDING_TTL_DAYS = 14;
@@ -1014,7 +1059,17 @@ function issuerPartyOf(issuer) {
   };
 }
 function subscriberFromRegistration(pending) {
-  return { legalName: pending.tenantName, invoiceEmail: pending.email };
+  return {
+    legalName: pending.tenantName,
+    invoiceEmail: pending.email,
+    addressLine1: pending.addressLine1,
+    addressLine2: pending.addressLine2,
+    postalCode: pending.postalCode,
+    city: pending.city,
+    country: pending.country,
+    vatId: pending.vatId,
+    taxNumber: pending.taxNumber
+  };
 }
 function toIdentityValues(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) return {};
@@ -1028,6 +1083,59 @@ function toIdentityValues(value) {
   return values;
 }
 
+// src/subscriber-payment-method-mapping.ts
+var PAYMENT_METHOD_TYPES = ["card", "sepa_debit"];
+var STATUSES = ["ACTIVE", "REPLACED"];
+function toSubscriberPaymentMethodRecord(row) {
+  return {
+    id: row.id,
+    subscriberId: row.subscriberId,
+    gatewayAccount: row.gatewayAccount,
+    provider: row.provider,
+    customerRef: row.customerRef,
+    paymentMethodRef: row.paymentMethodRef,
+    type: oneOf(PAYMENT_METHOD_TYPES, row.type, "type", row.id),
+    brand: row.brand,
+    last4: row.last4,
+    expiryMonth: row.expiryMonth,
+    expiryYear: row.expiryYear,
+    country: row.country,
+    bankCode: row.bankCode,
+    mandateReference: row.mandateReference,
+    status: oneOf(STATUSES, row.status, "status", row.id),
+    confirmedAt: row.confirmedAt,
+    replacedAt: row.replacedAt,
+    createdAt: row.createdAt
+  };
+}
+function subscriberPaymentMethodColumns(data) {
+  return {
+    subscriberId: data.subscriberId,
+    gatewayAccount: data.gatewayAccount,
+    provider: data.provider,
+    customerRef: data.customerRef,
+    paymentMethodRef: data.paymentMethodRef,
+    type: data.type,
+    brand: data.brand,
+    last4: data.last4,
+    expiryMonth: data.expiryMonth,
+    expiryYear: data.expiryYear,
+    country: data.country,
+    bankCode: data.bankCode,
+    mandateReference: data.mandateReference,
+    confirmedAt: data.confirmedAt
+  };
+}
+function oneOf(allowed, value, column, id) {
+  const match = allowed.find((entry) => entry === value);
+  if (match === void 0) {
+    throw new Error(
+      `subscriber_payment_methods row '${id}' holds ${column} '${value}', which is none of ${allowed.join(", ")}.`
+    );
+  }
+  return match;
+}
+
 // src/subscription-contract-mapping.ts
 function toSubscriptionContractRecord(row, lineItems) {
   return {
@@ -1178,6 +1286,7 @@ var ERROR_MESSAGES_EN = {
   NO_TENANT_ASSIGNED: "No tenant assigned",
   TENANT_CONTEXT_MISSING: "No tenant ID found on the request",
   TENANT_ADMIN_REQUIRED: "This action requires the TENANT_ADMIN role.",
+  BILLING_PERMISSION_REQUIRED: "This part of the billing area requires the billing permission.",
   SUPER_ADMIN_REQUIRED: "Only the SUPER_ADMIN role is allowed",
   MFA_NOT_SET_UP: "Run the MFA setup via the CLI first.",
   MFA_REQUIRED: "TOTP code required in the X-Mfa-Code header.",
@@ -1345,6 +1454,11 @@ var ERROR_MESSAGES_EN = {
   PLAN_NOT_AVAILABLE: "This plan is not available.",
   PLAN_NOT_SELECTED: "Please select a plan first.",
   MODEL_NOT_AVAILABLE: "This option is not available.",
+  // ── payments ──
+  PAYMENTS_NOT_CONFIGURED: "Payment methods cannot be set up here yet.",
+  PAYMENT_GATEWAY_ACCOUNT_UNKNOWN: "No payment gateway account is configured under '{account}'.",
+  PAYMENT_CALLBACK_REJECTED: "The payment callback could not be verified.",
+  PAYMENT_RETURN_URL_NOT_ALLOWED: "The {field} leads to a site this installation does not return to.",
   // ── entitlement (code lives in upsell.types.ts) ──
   [FEATURE_NOT_LICENSED]: "Feature {featureKeys} is not included in the current plan.",
   // ── settings ──
@@ -1379,6 +1493,7 @@ var ERROR_MESSAGES_DE = {
   NO_TENANT_ASSIGNED: "Kein Mandant zugeordnet",
   TENANT_CONTEXT_MISSING: "Am Request wurde keine Mandanten-ID gefunden",
   TENANT_ADMIN_REQUIRED: "Diese Aktion erfordert die Rolle TENANT_ADMIN.",
+  BILLING_PERMISSION_REQUIRED: "Dieser Teil der Abrechnung erfordert die Abrechnungs-Berechtigung.",
   SUPER_ADMIN_REQUIRED: "Nur die Rolle SUPER_ADMIN ist zugelassen",
   MFA_NOT_SET_UP: "Richte MFA zuerst \xFCber die CLI ein.",
   MFA_REQUIRED: "TOTP-Code im Header X-Mfa-Code erforderlich.",
@@ -1546,6 +1661,11 @@ var ERROR_MESSAGES_DE = {
   PLAN_NOT_AVAILABLE: "Dieser Plan steht nicht zur Verf\xFCgung.",
   PLAN_NOT_SELECTED: "Bitte w\xE4hle zuerst einen Plan aus.",
   MODEL_NOT_AVAILABLE: "Diese Option steht nicht zur Verf\xFCgung.",
+  // ── payments ──
+  PAYMENTS_NOT_CONFIGURED: "Zahlungsmethoden k\xF6nnen hier noch nicht hinterlegt werden.",
+  PAYMENT_GATEWAY_ACCOUNT_UNKNOWN: "Unter '{account}' ist kein Konto eines Zahlungsanbieters eingerichtet.",
+  PAYMENT_CALLBACK_REJECTED: "Die R\xFCckmeldung des Zahlungsanbieters lie\xDF sich nicht pr\xFCfen.",
+  PAYMENT_RETURN_URL_NOT_ALLOWED: "Die {field} f\xFChrt auf eine Seite, zu der diese Installation nicht zur\xFCckleitet.",
   // ── entitlement (code lives in upsell.types.ts) ──
   [FEATURE_NOT_LICENSED]: "Das Feature {featureKeys} ist im aktuellen Plan nicht enthalten.",
   // ── settings ──
@@ -1570,11 +1690,14 @@ var ERROR_MESSAGES_DE = {
   OTP_TTL_MINUTES,
   OTP_VERIFY_MAX_ATTEMPTS,
   PASSWORD_RESET_TTL_MINUTES,
+  PAYMENT_ERROR_CODES,
+  PAYMENT_METHOD_TYPES,
   PENDING_CHECKOUT_TTL_DAYS,
   PENDING_EMAIL_TTL_HOURS,
   PENDING_ONBOARDING_TTL_DAYS,
   PLATFORM_ERROR_CODES,
   PROMO_ERROR_CODES,
+  PaymentCallbackRejectedError,
   PersistenceCapabilityError,
   PlatformUserExistsError,
   REGISTRATION_ERROR_CODES,
@@ -1603,6 +1726,7 @@ var ERROR_MESSAGES_DE = {
   formatErrorMessage,
   identityCorrectionDelta,
   isBundleRedundant,
+  isPaymentCallbackRejectedError,
   isPlatformUserExistsError,
   isVersionEditable,
   keepOneRecommended,
@@ -1619,11 +1743,13 @@ var ERROR_MESSAGES_DE = {
   settingsSubtreeOf,
   startOfUtcDay,
   subscriberFromRegistration,
+  subscriberPaymentMethodColumns,
   toBundleStemRow,
   toContractLineItemRecord,
   toPlanRow,
   toPlanVersionRow,
   toSubscriberCorrectionRecord,
+  toSubscriberPaymentMethodRecord,
   toSubscriberRecord,
   toSubscriptionContractRecord
 });