@saasicat/core 1.0.0-rc.16 → 1.0.0-rc.18

package/dist/index.js

@@ -599,7 +599,10 @@ var SUBSCRIBER_ERROR_CODES = {
   SUBSCRIBER_ALREADY_EXISTS: "SUBSCRIBER_ALREADY_EXISTS",
   SUBSCRIBER_NOT_FOUND: "SUBSCRIBER_NOT_FOUND",
   SUBSCRIBER_LEGAL_NAME_REQUIRED: "SUBSCRIBER_LEGAL_NAME_REQUIRED",
-  /** A detail that has a form — the country, the invoice email — is not in it. Carries `field`. */
+  /**
+   * A detail that has a form — the country, the invoice email — is not in it,
+   * or one sign-up requires — the billing address — is missing. Carries `field`.
+   */
   SUBSCRIBER_DETAIL_INVALID: "SUBSCRIBER_DETAIL_INVALID",
   /** A contact change named a field of the legal identity. Carries `field`. */
   SUBSCRIBER_IDENTITY_NOT_A_CONTACT: "SUBSCRIBER_IDENTITY_NOT_A_CONTACT",
@@ -634,6 +637,12 @@ var AUTH_ERROR_CODES = {
   /** Neither `tenantId` nor `userId` could be resolved from the request. */
   TENANT_CONTEXT_MISSING: "TENANT_CONTEXT_MISSING",
   TENANT_ADMIN_REQUIRED: "TENANT_ADMIN_REQUIRED",
+  /**
+   * The tenant's billing area — its payment method, and later its invoices
+   * and account — needs the billing permission, which the application maps
+   * to its roles and the tenant's administrator holds by default.
+   */
+  BILLING_PERMISSION_REQUIRED: "BILLING_PERMISSION_REQUIRED",
   SUPER_ADMIN_REQUIRED: "SUPER_ADMIN_REQUIRED",
   /** TOTP MFA has never been set up for this user. */
   MFA_NOT_SET_UP: "MFA_NOT_SET_UP",
@@ -661,6 +670,22 @@ var PROMO_ERROR_CODES = {
   PROMO_WOULD_PRODUCE_ZERO_INVOICE: "PROMO_WOULD_PRODUCE_ZERO_INVOICE",
   PROMO_MAX_REDEMPTIONS_LOWERED: "PROMO_MAX_REDEMPTIONS_LOWERED"
 };
+var PAYMENT_ERROR_CODES = {
+  /**
+   * No gateway account takes new payment methods:
+   * `config/saas.yaml#payments.newPaymentMethods` names none.
+   */
+  PAYMENTS_NOT_CONFIGURED: "PAYMENTS_NOT_CONFIGURED",
+  /** A callback arrived for an account `config/saas.yaml#payments.accounts` does not name. Carries `account`. */
+  PAYMENT_GATEWAY_ACCOUNT_UNKNOWN: "PAYMENT_GATEWAY_ACCOUNT_UNKNOWN",
+  /** A callback the gateway did not send: its signature does not verify. */
+  PAYMENT_CALLBACK_REJECTED: "PAYMENT_CALLBACK_REJECTED",
+  /**
+   * A success or cancel URL at an origin `config/saas.yaml#payments.returnUrlOrigins`
+   * does not name. Carries `field`.
+   */
+  PAYMENT_RETURN_URL_NOT_ALLOWED: "PAYMENT_RETURN_URL_NOT_ALLOWED"
+};
 var SETTINGS_ERROR_CODES = {
   /** No recorded change has this id, or the installation keeps no record at all. */
   SETTINGS_CHANGE_NOT_FOUND: "SETTINGS_CHANGE_NOT_FOUND"
@@ -674,6 +699,7 @@ var PLATFORM_ERROR_CODES = {
   ...CONTRACT_ERROR_CODES,
   ...SUBSCRIBER_ERROR_CODES,
   ...REGISTRATION_ERROR_CODES,
+  ...PAYMENT_ERROR_CODES,
   ...SETTINGS_ERROR_CODES
 };
 
@@ -753,6 +779,19 @@ function selectChargeableBundles(planFeatures, selectedBundles) {
   }
 }
 
+// src/payment-gateway.types.ts
+var PAYMENT_CALLBACK_REJECTED = "PAYMENT_CALLBACK_REJECTED";
+var PaymentCallbackRejectedError = class extends Error {
+  code = PAYMENT_CALLBACK_REJECTED;
+  constructor(reason) {
+    super(`Payment callback rejected: ${reason}`);
+    this.name = "PaymentCallbackRejectedError";
+  }
+};
+function isPaymentCallbackRejectedError(err) {
+  return err instanceof Error && err.code === PAYMENT_CALLBACK_REJECTED;
+}
+
 // src/registration.types.ts
 var PENDING_EMAIL_TTL_HOURS = 72;
 var PENDING_ONBOARDING_TTL_DAYS = 14;
@@ -916,7 +955,17 @@ function issuerPartyOf(issuer) {
   };
 }
 function subscriberFromRegistration(pending) {
-  return { legalName: pending.tenantName, invoiceEmail: pending.email };
+  return {
+    legalName: pending.tenantName,
+    invoiceEmail: pending.email,
+    addressLine1: pending.addressLine1,
+    addressLine2: pending.addressLine2,
+    postalCode: pending.postalCode,
+    city: pending.city,
+    country: pending.country,
+    vatId: pending.vatId,
+    taxNumber: pending.taxNumber
+  };
 }
 function toIdentityValues(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) return {};
@@ -930,6 +979,59 @@ function toIdentityValues(value) {
   return values;
 }
 
+// src/subscriber-payment-method-mapping.ts
+var PAYMENT_METHOD_TYPES = ["card", "sepa_debit"];
+var STATUSES = ["ACTIVE", "REPLACED"];
+function toSubscriberPaymentMethodRecord(row) {
+  return {
+    id: row.id,
+    subscriberId: row.subscriberId,
+    gatewayAccount: row.gatewayAccount,
+    provider: row.provider,
+    customerRef: row.customerRef,
+    paymentMethodRef: row.paymentMethodRef,
+    type: oneOf(PAYMENT_METHOD_TYPES, row.type, "type", row.id),
+    brand: row.brand,
+    last4: row.last4,
+    expiryMonth: row.expiryMonth,
+    expiryYear: row.expiryYear,
+    country: row.country,
+    bankCode: row.bankCode,
+    mandateReference: row.mandateReference,
+    status: oneOf(STATUSES, row.status, "status", row.id),
+    confirmedAt: row.confirmedAt,
+    replacedAt: row.replacedAt,
+    createdAt: row.createdAt
+  };
+}
+function subscriberPaymentMethodColumns(data) {
+  return {
+    subscriberId: data.subscriberId,
+    gatewayAccount: data.gatewayAccount,
+    provider: data.provider,
+    customerRef: data.customerRef,
+    paymentMethodRef: data.paymentMethodRef,
+    type: data.type,
+    brand: data.brand,
+    last4: data.last4,
+    expiryMonth: data.expiryMonth,
+    expiryYear: data.expiryYear,
+    country: data.country,
+    bankCode: data.bankCode,
+    mandateReference: data.mandateReference,
+    confirmedAt: data.confirmedAt
+  };
+}
+function oneOf(allowed, value, column, id) {
+  const match = allowed.find((entry) => entry === value);
+  if (match === void 0) {
+    throw new Error(
+      `subscriber_payment_methods row '${id}' holds ${column} '${value}', which is none of ${allowed.join(", ")}.`
+    );
+  }
+  return match;
+}
+
 // src/subscription-contract-mapping.ts
 function toSubscriptionContractRecord(row, lineItems) {
   return {
@@ -1080,6 +1182,7 @@ var ERROR_MESSAGES_EN = {
   NO_TENANT_ASSIGNED: "No tenant assigned",
   TENANT_CONTEXT_MISSING: "No tenant ID found on the request",
   TENANT_ADMIN_REQUIRED: "This action requires the TENANT_ADMIN role.",
+  BILLING_PERMISSION_REQUIRED: "This part of the billing area requires the billing permission.",
   SUPER_ADMIN_REQUIRED: "Only the SUPER_ADMIN role is allowed",
   MFA_NOT_SET_UP: "Run the MFA setup via the CLI first.",
   MFA_REQUIRED: "TOTP code required in the X-Mfa-Code header.",
@@ -1247,6 +1350,11 @@ var ERROR_MESSAGES_EN = {
   PLAN_NOT_AVAILABLE: "This plan is not available.",
   PLAN_NOT_SELECTED: "Please select a plan first.",
   MODEL_NOT_AVAILABLE: "This option is not available.",
+  // ── payments ──
+  PAYMENTS_NOT_CONFIGURED: "Payment methods cannot be set up here yet.",
+  PAYMENT_GATEWAY_ACCOUNT_UNKNOWN: "No payment gateway account is configured under '{account}'.",
+  PAYMENT_CALLBACK_REJECTED: "The payment callback could not be verified.",
+  PAYMENT_RETURN_URL_NOT_ALLOWED: "The {field} leads to a site this installation does not return to.",
   // ── entitlement (code lives in upsell.types.ts) ──
   [FEATURE_NOT_LICENSED]: "Feature {featureKeys} is not included in the current plan.",
   // ── settings ──
@@ -1281,6 +1389,7 @@ var ERROR_MESSAGES_DE = {
   NO_TENANT_ASSIGNED: "Kein Mandant zugeordnet",
   TENANT_CONTEXT_MISSING: "Am Request wurde keine Mandanten-ID gefunden",
   TENANT_ADMIN_REQUIRED: "Diese Aktion erfordert die Rolle TENANT_ADMIN.",
+  BILLING_PERMISSION_REQUIRED: "Dieser Teil der Abrechnung erfordert die Abrechnungs-Berechtigung.",
   SUPER_ADMIN_REQUIRED: "Nur die Rolle SUPER_ADMIN ist zugelassen",
   MFA_NOT_SET_UP: "Richte MFA zuerst \xFCber die CLI ein.",
   MFA_REQUIRED: "TOTP-Code im Header X-Mfa-Code erforderlich.",
@@ -1448,6 +1557,11 @@ var ERROR_MESSAGES_DE = {
   PLAN_NOT_AVAILABLE: "Dieser Plan steht nicht zur Verf\xFCgung.",
   PLAN_NOT_SELECTED: "Bitte w\xE4hle zuerst einen Plan aus.",
   MODEL_NOT_AVAILABLE: "Diese Option steht nicht zur Verf\xFCgung.",
+  // ── payments ──
+  PAYMENTS_NOT_CONFIGURED: "Zahlungsmethoden k\xF6nnen hier noch nicht hinterlegt werden.",
+  PAYMENT_GATEWAY_ACCOUNT_UNKNOWN: "Unter '{account}' ist kein Konto eines Zahlungsanbieters eingerichtet.",
+  PAYMENT_CALLBACK_REJECTED: "Die R\xFCckmeldung des Zahlungsanbieters lie\xDF sich nicht pr\xFCfen.",
+  PAYMENT_RETURN_URL_NOT_ALLOWED: "Die {field} f\xFChrt auf eine Seite, zu der diese Installation nicht zur\xFCckleitet.",
   // ── entitlement (code lives in upsell.types.ts) ──
   [FEATURE_NOT_LICENSED]: "Das Feature {featureKeys} ist im aktuellen Plan nicht enthalten.",
   // ── settings ──
@@ -1471,11 +1585,14 @@ export {
   OTP_TTL_MINUTES,
   OTP_VERIFY_MAX_ATTEMPTS,
   PASSWORD_RESET_TTL_MINUTES,
+  PAYMENT_ERROR_CODES,
+  PAYMENT_METHOD_TYPES,
   PENDING_CHECKOUT_TTL_DAYS,
   PENDING_EMAIL_TTL_HOURS,
   PENDING_ONBOARDING_TTL_DAYS,
   PLATFORM_ERROR_CODES,
   PROMO_ERROR_CODES,
+  PaymentCallbackRejectedError,
   PersistenceCapabilityError,
   PlatformUserExistsError,
   REGISTRATION_ERROR_CODES,
@@ -1504,6 +1621,7 @@ export {
   formatErrorMessage,
   identityCorrectionDelta,
   isBundleRedundant,
+  isPaymentCallbackRejectedError,
   isPlatformUserExistsError,
   isVersionEditable,
   keepOneRecommended,
@@ -1520,11 +1638,13 @@ export {
   settingsSubtreeOf,
   startOfUtcDay,
   subscriberFromRegistration,
+  subscriberPaymentMethodColumns,
   toBundleStemRow,
   toContractLineItemRecord,
   toPlanRow,
   toPlanVersionRow,
   toSubscriberCorrectionRecord,
+  toSubscriberPaymentMethodRecord,
   toSubscriberRecord,
   toSubscriptionContractRecord
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@saasicat/core",
-  "version": "1.0.0-rc.16",
+  "version": "1.0.0-rc.18",
   "description": "TypeScript contracts for SaaSiCat — capabilities, catalogs, subscriptions, entitlements, admin manifests, persistence ports — and the pure domain logic both server and browser run: error catalogues, plan-diff classification, promo arithmetic, feature requirements.",
   "type": "module",
   "main": "./dist/index.cjs",