@wopr-network/platform-core 1.45.0 → 1.47.0

package/src/trpc/org-remove-payment-method-router.ts

@@ -0,0 +1,80 @@
+import { TRPCError } from "@trpc/server";
+import { z } from "zod";
+import type { IPaymentProcessor } from "../billing/payment-processor.js";
+import { PaymentMethodOwnershipError } from "../billing/payment-processor.js";
+import type { IAutoTopupSettingsRepository } from "../credits/auto-topup-settings-repository.js";
+import { orgAdminProcedure, router } from "./init.js";
+
+export interface OrgRemovePaymentMethodDeps {
+  processor: IPaymentProcessor;
+  autoTopupSettingsStore?: IAutoTopupSettingsRepository;
+}
+
+export function createOrgRemovePaymentMethodRouter(getDeps: () => OrgRemovePaymentMethodDeps) {
+  return router({
+    orgRemovePaymentMethod: orgAdminProcedure
+      .input(
+        z.object({
+          orgId: z.string().min(1),
+          paymentMethodId: z.string().min(1),
+        }),
+      )
+      .mutation(async ({ input }) => {
+        const { processor, autoTopupSettingsStore } = getDeps();
+
+        if (!autoTopupSettingsStore) {
+          console.warn(
+            "orgRemovePaymentMethod: autoTopupSettingsStore not provided — last-payment-method guard is inactive",
+          );
+        }
+
+        // Guard: prevent removing the last payment method when auto-topup is enabled
+        if (autoTopupSettingsStore) {
+          const methods = await processor.listPaymentMethods(input.orgId);
+          if (methods.length <= 1) {
+            const settings = await autoTopupSettingsStore.getByTenant(input.orgId);
+            if (settings && (settings.usageEnabled || settings.scheduleEnabled)) {
+              throw new TRPCError({
+                code: "FORBIDDEN",
+                message: "Cannot remove last payment method while auto-topup is enabled. Disable auto-topup first.",
+              });
+            }
+          }
+        }
+
+        try {
+          await processor.detachPaymentMethod(input.orgId, input.paymentMethodId);
+        } catch (err) {
+          if (err instanceof PaymentMethodOwnershipError) {
+            throw new TRPCError({
+              code: "FORBIDDEN",
+              message: "Payment method does not belong to this organization",
+            });
+          }
+          throw new TRPCError({
+            code: "INTERNAL_SERVER_ERROR",
+            message: "Failed to remove payment method. Please try again.",
+          });
+        }
+
+        // TOCTOU guard: re-check count after detach. A concurrent request
+        // may have already removed another payment method between our pre-check
+        // and this detach, leaving the org with 0 methods while auto-topup is
+        // still enabled. Warn operators — the method is already gone.
+        if (autoTopupSettingsStore) {
+          const remaining = await processor.listPaymentMethods(input.orgId);
+          if (remaining.length === 0) {
+            const settings = await autoTopupSettingsStore.getByTenant(input.orgId);
+            if (settings && (settings.usageEnabled || settings.scheduleEnabled)) {
+              console.warn(
+                "orgRemovePaymentMethod: TOCTOU — org %s now has 0 payment methods with auto-topup enabled. Operator must add a payment method or disable auto-topup.",
+                input.orgId,
+              );
+            }
+          }
+        }
+
+        return { removed: true };
+      }),
+  });
+}