@ttt-productions/ttt-core 0.9.0 → 0.10.1

package/dist/doc-schemas/payments.js

@@ -0,0 +1,94 @@
+// Payment / pledge Firestore document SCHEMAS — the public-safe pledge ledger and its
+// server-only companions: provider refs (Stripe IDs), the idempotency sentinel, the
+// independent integrity trail, and the paid-event quarantine queue. Types inferred via
+// z.infer. Money data lives here, never in social.ts.
+// See docs/design/donation-payment-system.md and docs/PHASE_6_STRIPE.md.
+import { z } from 'zod';
+// pledgePayments/{pledgePaymentId} — public-safe canonical money record. One doc per completed
+// pledge; never deleted/archived. No Stripe IDs, no supporter message. Auth-readable; server-only
+// writes. netAmount = max(0, amount - refundedAmount - disputeLostAmount) is the sum() target.
+// At launch refundedAmount/disputeLostAmount are 0 so netAmount === amount.
+// (functions/src/payments/runProcessStripePledgeEvent.ts)
+export const PledgePaymentSchema = z.object({
+    pledgePaymentId: z.string(),
+    userId: z.string(),
+    amount: z.number(), // gross cents charged (Stripe-confirmed amount_total)
+    refundedAmount: z.number(), // cumulative refunded cents; LAUNCH default 0
+    disputeLostAmount: z.number(), // cents withdrawn on a lost dispute; LAUNCH default 0
+    netAmount: z.number(), // max(0, amount - refundedAmount - disputeLostAmount); sum() target
+    currency: z.string(), // "usd"
+    paymentInstrument: z.literal('card'),
+    status: z.literal('completed'),
+    refundState: z.enum(['none', 'partial', 'full']), // LAUNCH always 'none'
+    disputeState: z.enum(['none', 'underReview', 'won', 'lost']), // LAUNCH always 'none'
+    createdAt: z.number(),
+    updatedAt: z.number(),
+});
+// pledgePaymentProviderRefs/{pledgePaymentId} — server-only Stripe references for reconciliation
+// and (post-launch) refund/dispute lookup. Rule is permanently `if false` (Admin SDK only) so no
+// Stripe IDs ever sit on an auth-readable doc. One doc per pledge (singular). refundIds/disputeId
+// are refund-ready, defaulted ([] / null) at launch — zero migration when handlers ship.
+// (functions/src/payments/runProcessStripePledgeEvent.ts)
+export const PledgePaymentProviderRefSchema = z.object({
+    pledgePaymentId: z.string(),
+    userId: z.string(),
+    stripeSessionId: z.string(),
+    paymentIntentId: z.string(),
+    latestChargeId: z.string().nullable(), // resolved when known; null at launch if not fetched
+    refundIds: z.array(z.string()), // post-launch; LAUNCH default []
+    disputeId: z.string().nullable(), // post-launch; LAUNCH default null
+    createdAt: z.number(),
+    updatedAt: z.number(),
+});
+// processedStripeEvents/{stripeEventId} — idempotency sentinel, one doc per processed Stripe
+// event.id, kept forever. Checked + written in the same transaction as the side effect so a
+// redelivered event (completion, expiry, failure, or quarantine) produces no duplicate.
+// pledgePaymentId is set only when the event created a pledge. (runProcessStripePledgeEvent.ts)
+export const ProcessedStripeEventSchema = z.object({
+    eventId: z.string(),
+    eventType: z.string(),
+    processedAt: z.number(),
+    pledgePaymentId: z.string().nullable(),
+});
+// pledgePaymentLedgerEvents/{ledgerId} — independent integrity record from the onPledgePaymentWritten
+// trigger (mirrors stakeShareAuditEvents). before/after are raw doc snapshots (null on create/delete)
+// kept as permissive bags so a malformed/anomalous write is still captured forensically.
+// (functions/src/audit/runPledgePaymentLedgerAudit.ts)
+export const PledgePaymentLedgerEventSchema = z.object({
+    ledgerId: z.string(),
+    pledgePaymentId: z.string(),
+    subtype: z.string(), // e.g. 'created' | 'anomaly'
+    reason: z.string(),
+    before: z.record(z.string(), z.unknown()).nullable(),
+    after: z.record(z.string(), z.unknown()).nullable(),
+    source: z.literal('firestore-trigger'),
+    createdAt: z.number(),
+});
+// paymentWebhookQuarantine/{stripeEventId} — admin-readable repair queue for paid-but-malformed
+// events (e.g. missing metadata) that must NOT make Stripe retry. Redaction rule: never store raw
+// payloads, card/billing data, customer email, addresses, or receipt URLs — IDs + a short redacted
+// rawSafeSummary only. (functions/src/payments/runProcessStripePledgeEvent.ts)
+export const PaymentWebhookQuarantineSchema = z.object({
+    eventId: z.string(),
+    eventType: z.string(),
+    livemode: z.boolean(),
+    reason: z.string(),
+    recoverable: z.boolean(),
+    stripeObjectIds: z.object({
+        sessionId: z.string().optional(),
+        paymentIntentId: z.string().optional(),
+        chargeId: z.string().optional(),
+    }),
+    pledgePaymentId: z.string().optional(),
+    userId: z.string().optional(),
+    amount: z.number().optional(),
+    currency: z.string().optional(),
+    rawSafeSummary: z.string(),
+    status: z.enum(['open', 'resolved', 'ignored']),
+    adminTaskId: z.string().optional(),
+    createdAt: z.number(),
+    resolvedAt: z.number().optional(),
+    resolvedBy: z.string().optional(),
+    resolutionNote: z.string().optional(),
+});
+//# sourceMappingURL=payments.js.map

package/dist/doc-schemas/payments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payments.js","sourceRoot":"","sources":["../../src/doc-schemas/payments.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,oFAAoF;AACpF,uFAAuF;AACvF,sDAAsD;AACtD,yEAAyE;AAEzE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,+FAA+F;AAC/F,kGAAkG;AAClG,+FAA+F;AAC/F,4EAA4E;AAC5E,0DAA0D;AAC1D,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,sDAAsD;IAC1E,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,8CAA8C;IAC1E,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,sDAAsD;IACrF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,oEAAoE;IAC3F,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ;IAC9B,iBAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IACpC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC;IAC9B,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,EAAE,uBAAuB;IACzE,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,EAAE,uBAAuB;IACrF,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,iGAAiG;AACjG,iGAAiG;AACjG,kGAAkG;AAClG,yFAAyF;AACzF,0DAA0D;AAC1D,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,qDAAqD;IAC5F,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,iCAAiC;IACjE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,mCAAmC;IACrE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,6FAA6F;AAC7F,4FAA4F;AAC5F,wFAAwF;AACxF,gGAAgG;AAChG,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACvB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAGH,sGAAsG;AACtG,sGAAsG;AACtG,yFAAyF;AACzF,uDAAuD;AACvD,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,6BAA6B;IAClD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IACnD,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACtC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAC;AAGH,gGAAgG;AAChG,kGAAkG;AAClG,mGAAmG;AACnG,+EAA+E;AAC/E,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE;IACxB,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;QACxB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QACtC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC;IACF,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACtC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IAC/C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC"}