@visa/cli 4.1.0-rc.254 → 4.1.0-rc.255

package/dist/checkout-engine/mandate/mandate-ledger.d.ts

@@ -159,9 +159,10 @@ export declare class MandateLedger {
     applyApprovedCeiling(mandateId: string, approvedCeilingMinor: number): Promise<CardMandateRecord>;
     /**
      * Atomically reserve headroom for a draw. Fail-closed: refuses when the
-     * mandate is unknown, expired, or the amount exceeds remaining headroom. The
-     * reservation counts against availability immediately, closing the window in
-     * which two concurrent draws both see the same remaining balance.
+     * mandate is unknown, retired, expired, or the amount exceeds remaining
+     * headroom. The reservation counts against availability immediately, closing
+     * the window in which two concurrent draws both see the same remaining
+     * balance.
      */
     reserve(mandateId: string, amountMinor: number, now?: Date): Promise<string>;
     /** Commit a reservation to permanent spend and record the payable draw. */

package/dist/checkout-engine/mandate/mandate-ledger.js

@@ -325,9 +325,10 @@ export class MandateLedger {
     }
     /**
      * Atomically reserve headroom for a draw. Fail-closed: refuses when the
-     * mandate is unknown, expired, or the amount exceeds remaining headroom. The
-     * reservation counts against availability immediately, closing the window in
-     * which two concurrent draws both see the same remaining balance.
+     * mandate is unknown, retired, expired, or the amount exceeds remaining
+     * headroom. The reservation counts against availability immediately, closing
+     * the window in which two concurrent draws both see the same remaining
+     * balance.
      */
     reserve(mandateId, amountMinor, now = new Date()) {
         return this.run(async () => {
@@ -338,6 +339,15 @@ export class MandateLedger {
             const record = file.mandates.find((m) => m.mandateId === mandateId);
             if (!record)
                 throw new Error(`no such mandate ${mandateId}`);
+            if (record.serverRevokedAt) {
+                throw new Error(`mandate ${mandateId} was server-revoked at ${record.serverRevokedAt}`);
+            }
+            if (record.registerFailedAt) {
+                throw new Error(`mandate ${mandateId} registration failed at ${record.registerFailedAt}`);
+            }
+            if (record.unhonoredAt) {
+                throw new Error(`mandate ${mandateId} was unhonored at ${record.unhonoredAt}`);
+            }
             if (isExpired(record, now)) {
                 throw new Error(`mandate ${mandateId} expired at ${record.expiresAt}`);
             }
@@ -360,6 +370,11 @@ export class MandateLedger {
             const record = file.mandates.find((m) => m.mandateId === mandateId);
             if (!record)
                 throw new Error(`no such mandate ${mandateId}`);
+            // Revocation is authoritative even when it arrives after reserve(). Keep
+            // the reservation intact so this refusal cannot be mistaken for a commit.
+            if (record.serverRevokedAt) {
+                throw new Error(`mandate ${mandateId} was server-revoked at ${record.serverRevokedAt}`);
+            }
             const idx = record.reservations.findIndex((r) => r.reservationId === reservationId);
             if (idx === -1) {
                 throw new Error(`reservation ${reservationId} is not open (already committed or released)`);