alepha 0.20.2 → 0.20.4

package/dist/api/payments/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/api/payments/entities/paymentIntents.ts","../../../src/api/payments/schemas/intentSchemas.ts","../../../src/api/payments/entities/refunds.ts","../../../src/api/payments/schemas/refundSchemas.ts","../../../src/api/payments/errors/PaymentError.ts","../../../src/api/payments/providers/PaymentProvider.ts","../../../src/api/payments/services/PaymentService.ts","../../../src/api/payments/controllers/AdminPaymentController.ts","../../../src/api/payments/entities/paymentMethods.ts","../../../src/api/payments/schemas/paymentMethodSchemas.ts","../../../src/api/payments/services/PaymentMethodService.ts","../../../src/api/payments/controllers/PaymentController.ts","../../../src/api/payments/providers/MemoryPaymentProvider.ts","../../../src/api/payments/index.ts"],"sourcesContent":["import { type Static, t } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\n\nexport const paymentIntents = $entity({\n  name: \"payment_intents\",\n  schema: t.object({\n    id: db.primaryKey(t.uuid()),\n    version: db.version(),\n    createdAt: db.createdAt(),\n    updatedAt: db.updatedAt(),\n    organizationId: db.organization(),\n    amount: t.integer(),\n    currency: t.text({ size: \"short\" }),\n    status: t.enum([\n      \"created\",\n      \"processing\",\n      \"authorized\",\n      \"captured\",\n      \"partially_refunded\",\n      \"voided\",\n      \"failed\",\n      \"cancelled\",\n      \"refunded\",\n      \"expired\",\n    ]),\n    providerRef: t.optional(t.text()),\n    providerRaw: t.optional(t.json()),\n    metadata: t.optional(t.json()),\n    paymentMethodId: t.optional(t.uuid()),\n    userId: t.optional(t.uuid()),\n  }),\n  indexes: [\"status\", \"organizationId\", \"userId\", \"createdAt\"],\n});\n\nexport type PaymentIntentEntity = Static<typeof paymentIntents.schema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\nimport { pageQuerySchema } from \"alepha/orm\";\nimport { paymentIntents } from \"../entities/paymentIntents.ts\";\n\nexport const createIntentSchema = t.object({\n  amount: t.integer({ minimum: 1 }),\n  currency: t.text({ size: \"short\" }),\n  metadata: t.optional(t.json()),\n  paymentMethodId: t.optional(t.uuid()),\n});\n\nexport type CreateIntent = Static<typeof createIntentSchema>;\n\nexport const createCheckoutSchema = t.object({\n  intentId: t.uuid(),\n  returnUrl: t.text(),\n  authorize: t.optional(t.boolean()),\n});\n\nexport type CreateCheckout = Static<typeof createCheckoutSchema>;\n\nexport const checkoutResponseSchema = t.object({\n  url: t.text(),\n  intentId: t.text(),\n});\n\nexport type CheckoutResponse = Static<typeof checkoutResponseSchema>;\n\nexport const captureIntentSchema = t.object({\n  amount: t.optional(t.integer({ minimum: 1 })),\n});\n\nexport type CaptureIntent = Static<typeof captureIntentSchema>;\n\nexport const refundIntentSchema = t.object({\n  amount: t.integer({ minimum: 1 }),\n  reason: t.optional(t.text()),\n});\n\nexport type RefundIntent = Static<typeof refundIntentSchema>;\n\nexport const recordCashSchema = t.object({\n  amount: t.integer({ minimum: 1 }),\n  currency: t.text({ size: \"short\" }),\n  metadata: t.optional(t.json()),\n});\n\nexport type RecordCash = Static<typeof recordCashSchema>;\n\nexport const intentQuerySchema = t.extend(pageQuerySchema, {\n  status: t.optional(t.text({ description: \"Filter by status\" })),\n  userId: t.optional(t.uuid({ description: \"Filter by user ID\" })),\n});\n\nexport type IntentQuery = Static<typeof intentQuerySchema>;\n\nexport const intentResourceSchema = paymentIntents.schema;\n\nexport type IntentResource = Static<typeof intentResourceSchema>;\n","import { type Static, t } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\n\nexport const refunds = $entity({\n  name: \"refunds\",\n  schema: t.object({\n    id: db.primaryKey(t.uuid()),\n    version: db.version(),\n    createdAt: db.createdAt(),\n    updatedAt: db.updatedAt(),\n    organizationId: db.organization(),\n    intentId: t.uuid(),\n    amount: t.integer(),\n    currency: t.text({ size: \"short\" }),\n    status: t.enum([\"pending\", \"processing\", \"completed\", \"failed\"]),\n    reason: t.optional(t.text()),\n    providerRef: t.optional(t.text()),\n  }),\n  indexes: [\"intentId\", \"organizationId\", \"status\"],\n});\n\nexport type RefundEntity = Static<typeof refunds.schema>;\n","import type { Static } from \"alepha\";\nimport { refunds } from \"../entities/refunds.ts\";\n\nexport const refundResourceSchema = refunds.schema;\n\nexport type RefundResource = Static<typeof refundResourceSchema>;\n","import { AlephaError } from \"alepha\";\n\nexport class PaymentError extends AlephaError {\n  public readonly status = 400;\n}\n","import type { PaymentIntentEntity } from \"../entities/paymentIntents.ts\";\n\nexport interface CreateSessionResult {\n  url: string;\n  providerRef: string;\n}\n\nexport interface RefundResult {\n  providerRef: string;\n}\n\nexport interface WebhookEvent {\n  providerRef: string;\n  status: string;\n  raw: unknown;\n}\n\nexport interface CreatePaymentMethodResult {\n  providerRef: string;\n  type: string;\n  brand?: string;\n  last4?: string;\n  expMonth?: number;\n  expYear?: number;\n}\n\nexport abstract class PaymentProvider {\n  /**\n   * Create a checkout session with the PSP.\n   * Returns a URL to redirect the user to, and the PSP's reference ID.\n   */\n  abstract createSession(\n    intent: PaymentIntentEntity,\n    options: { returnUrl: string; authorize?: boolean },\n  ): Promise<CreateSessionResult>;\n\n  /**\n   * Capture a previously authorized payment.\n   * Amount can differ from the original authorization (partial capture).\n   */\n  abstract capturePayment(providerRef: string, amount: number): Promise<void>;\n\n  /**\n   * Void/cancel a previously authorized payment before capture.\n   */\n  abstract voidPayment(providerRef: string): Promise<void>;\n\n  /**\n   * Refund a captured payment (partial or full).\n   */\n  abstract refundPayment(\n    providerRef: string,\n    amount: number,\n  ): Promise<RefundResult>;\n\n  /**\n   * Parse and verify an incoming PSP webhook request.\n   *\n   * Implementations MUST verify the webhook signature before returning.\n   * Throw an error if the signature is invalid or missing — this is the\n   * only authentication on the webhook endpoint (no $secure middleware).\n   *\n   * Failure to verify signatures allows attackers to forge payment\n   * confirmations by POSTing fake webhook events.\n   */\n  abstract parseWebhook(request: Request): Promise<WebhookEvent>;\n\n  /**\n   * Store a payment method token with the PSP.\n   */\n  abstract createPaymentMethod(\n    userId: string,\n    token: string,\n  ): Promise<CreatePaymentMethodResult>;\n\n  /**\n   * Delete a stored payment method from the PSP.\n   */\n  abstract deletePaymentMethod(providerRef: string): Promise<void>;\n\n  /**\n   * Expire/cancel a checkout session on the PSP side.\n   * Called during stale session cleanup.\n   */\n  abstract expireSession(providerRef: string): Promise<void>;\n}\n","import { $inject, Alepha } from \"alepha\";\nimport { $job } from \"alepha/api/jobs\";\nimport { DateTimeProvider } from \"alepha/datetime\";\nimport { $logger } from \"alepha/logger\";\nimport { $repository } from \"alepha/orm\";\nimport {\n  type PaymentIntentEntity,\n  paymentIntents,\n} from \"../entities/paymentIntents.ts\";\nimport { type RefundEntity, refunds } from \"../entities/refunds.ts\";\nimport { PaymentError } from \"../errors/PaymentError.ts\";\nimport { PaymentProvider } from \"../providers/PaymentProvider.ts\";\n\nexport class PaymentService {\n  protected readonly alepha = $inject(Alepha);\n  protected readonly log = $logger();\n  protected readonly dateTime = $inject(DateTimeProvider);\n  protected readonly provider = $inject(PaymentProvider);\n  protected readonly intentRepo = $repository(paymentIntents);\n  protected readonly refundRepo = $repository(refunds);\n\n  /**\n   * Expires stale payment intents that have been in \"processing\" status\n   * for more than 30 minutes. Runs every 5 minutes — shares the CF wrangler\n   * trigger with the jobs sweep so no extra binding is consumed.\n   */\n  protected readonly expireStaleIntents = $job({\n    name: \"api:payments:expireStaleIntents\",\n    cron: \"*/5 * * * *\",\n    handler: async () => {\n      const cutoff = this.dateTime.now().subtract(30, \"minutes\").toISOString();\n\n      const stale = await this.intentRepo.findMany({\n        where: { status: { eq: \"processing\" }, createdAt: { lt: cutoff } },\n      });\n\n      for (const intent of stale) {\n        if (intent.providerRef) {\n          try {\n            await this.provider.expireSession(intent.providerRef);\n          } catch (error) {\n            this.log.warn(\n              `Failed to expire session for intent ${intent.id}`,\n              error,\n            );\n          }\n        }\n        await this.intentRepo.updateById(intent.id, { status: \"expired\" });\n        this.log.info(`Expired stale intent ${intent.id}`);\n      }\n    },\n  });\n\n  /**\n   * Create a new payment intent in \"created\" status.\n   */\n  public async createIntent(\n    amount: number,\n    currency: string,\n    metadata?: unknown,\n    options?: { paymentMethodId?: string; userId?: string },\n  ): Promise<PaymentIntentEntity> {\n    return await this.intentRepo.create({\n      amount,\n      currency: currency.toLowerCase(),\n      status: \"created\",\n      metadata: metadata as any,\n      paymentMethodId: options?.paymentMethodId,\n      userId: options?.userId,\n    });\n  }\n\n  /**\n   * Create a checkout session with the payment provider and\n   * transition the intent to \"processing\".\n   */\n  public async createSession(\n    intentId: string,\n    returnUrl: string,\n    authorize?: boolean,\n    userId?: string,\n  ): Promise<{ url: string; intentId: string }> {\n    const intent = await this.getIntent(intentId);\n    this.assertStatus(intent, \"created\", \"createSession\");\n\n    // Verify intent ownership if userId is provided\n    if (userId && intent.userId && intent.userId !== userId) {\n      throw new PaymentError(\"Payment intent does not belong to this user\");\n    }\n\n    // Associate intent with user if not already set\n    if (userId && !intent.userId) {\n      await this.intentRepo.updateById(intent.id, { userId });\n    }\n\n    const result = await this.provider.createSession(intent, {\n      returnUrl,\n      authorize,\n    });\n\n    await this.intentRepo.updateById(intent.id, {\n      status: \"processing\",\n      providerRef: result.providerRef,\n    });\n\n    return { url: result.url, intentId: intent.id };\n  }\n\n  /**\n   * Handle an incoming webhook from the payment provider.\n   */\n  public async handleWebhook(request: Request): Promise<void> {\n    const event = await this.provider.parseWebhook(request);\n    const intents = await this.intentRepo.findMany({\n      where: { providerRef: { eq: event.providerRef } },\n      limit: 1,\n    });\n\n    if (intents.length === 0) {\n      this.log.warn(`Webhook for unknown providerRef: ${event.providerRef}`);\n      return;\n    }\n\n    const intent = intents[0];\n    await this.handleWebhookEvent(intent.id, event.status, event.raw);\n  }\n\n  /**\n   * Process a webhook event by updating the intent status and emitting\n   * the corresponding payment event.\n   */\n  /**\n   * Valid status transitions from webhook events.\n   * Only these transitions are allowed — all others are silently ignored.\n   */\n  protected static readonly VALID_WEBHOOK_TRANSITIONS: Record<\n    string,\n    string[]\n  > = {\n    processing: [\"authorized\", \"captured\", \"failed\"],\n    authorized: [\"captured\", \"failed\"],\n  };\n\n  public async handleWebhookEvent(\n    intentId: string,\n    status: string,\n    raw?: unknown,\n  ): Promise<void> {\n    const intent = await this.getIntent(intentId);\n\n    const eventMap = {\n      authorized: \"payments:authorized\",\n      captured: \"payments:captured\",\n      failed: \"payments:failed\",\n    } as const;\n\n    type WebhookStatus = keyof typeof eventMap;\n    if (!(status in eventMap)) {\n      this.log.warn(`Unknown webhook status: ${status}`);\n      return;\n    }\n\n    const webhookStatus = status as WebhookStatus;\n\n    // Validate status transition\n    const allowed = PaymentService.VALID_WEBHOOK_TRANSITIONS[intent.status];\n    if (!allowed?.includes(webhookStatus)) {\n      this.log.warn(\n        `Ignoring webhook: cannot transition ${intent.status} → ${webhookStatus}`,\n        { intentId: intent.id },\n      );\n      return;\n    }\n\n    await this.intentRepo.updateById(intent.id, {\n      status: webhookStatus,\n      providerRaw: raw as any,\n    });\n\n    await this.alepha.events.emit(eventMap[webhookStatus], {\n      intentId: intent.id,\n      amount: intent.amount,\n      currency: intent.currency,\n      metadata: intent.metadata,\n    });\n  }\n\n  /**\n   * Capture a previously authorized payment. Optionally specify a different\n   * amount for partial capture.\n   */\n  public async capture(\n    intentId: string,\n    finalAmount?: number,\n  ): Promise<PaymentIntentEntity> {\n    const intent = await this.getIntent(intentId);\n    this.assertStatus(intent, \"authorized\", \"capture\");\n\n    const amount = finalAmount ?? intent.amount;\n    if (amount > intent.amount) {\n      throw new PaymentError(\n        `Capture amount ${amount} exceeds authorized amount ${intent.amount}`,\n      );\n    }\n\n    if (intent.providerRef) {\n      await this.provider.capturePayment(intent.providerRef, amount);\n    }\n\n    const updated = await this.intentRepo.updateById(intent.id, {\n      status: \"captured\",\n      amount,\n    });\n\n    await this.alepha.events.emit(\"payments:captured\", {\n      intentId: intent.id,\n      amount,\n      currency: intent.currency,\n      metadata: intent.metadata,\n    });\n\n    return updated;\n  }\n\n  /**\n   * Void a previously authorized payment before capture.\n   */\n  public async void(intentId: string): Promise<PaymentIntentEntity> {\n    const intent = await this.getIntent(intentId);\n    this.assertStatus(intent, \"authorized\", \"void\");\n\n    if (intent.providerRef) {\n      await this.provider.voidPayment(intent.providerRef);\n    }\n\n    const updated = await this.intentRepo.updateById(intent.id, {\n      status: \"voided\",\n    });\n\n    await this.alepha.events.emit(\"payments:voided\", {\n      intentId: intent.id,\n      amount: intent.amount,\n      currency: intent.currency,\n      metadata: intent.metadata,\n    });\n\n    return updated;\n  }\n\n  /**\n   * Refund a captured payment (partial or full).\n   */\n  public async refund(\n    intentId: string,\n    amount: number,\n    reason?: string,\n  ): Promise<RefundEntity> {\n    const intent = await this.getIntent(intentId);\n\n    // Allow refunds from both \"captured\" and \"partially_refunded\" states\n    if (\n      intent.status !== \"captured\" &&\n      intent.status !== \"partially_refunded\"\n    ) {\n      throw new PaymentError(\n        `Cannot refund: intent ${intent.id} is '${intent.status}', expected 'captured' or 'partially_refunded'`,\n      );\n    }\n\n    // Validate refund amount against remaining refundable amount\n    const existingRefunds = await this.refundRepo.findMany({\n      where: { intentId: { eq: intent.id } },\n    });\n    const totalRefunded = existingRefunds.reduce((sum, r) => sum + r.amount, 0);\n    const remaining = intent.amount - totalRefunded;\n\n    if (amount > remaining) {\n      throw new PaymentError(\n        `Refund amount ${amount} exceeds remaining refundable amount ${remaining}`,\n      );\n    }\n\n    let refundProviderRef: string | undefined;\n    if (intent.providerRef) {\n      const result = await this.provider.refundPayment(\n        intent.providerRef,\n        amount,\n      );\n      refundProviderRef = result.providerRef;\n    }\n\n    const refund = await this.refundRepo.create({\n      intentId: intent.id,\n      organizationId: intent.organizationId,\n      amount,\n      currency: intent.currency,\n      status: \"completed\",\n      reason,\n      providerRef: refundProviderRef,\n    });\n\n    // Set status based on whether fully or partially refunded\n    const newTotalRefunded = totalRefunded + amount;\n    const newStatus =\n      newTotalRefunded >= intent.amount ? \"refunded\" : \"partially_refunded\";\n    await this.intentRepo.updateById(intent.id, {\n      status: newStatus,\n    });\n\n    await this.alepha.events.emit(\"payments:refunded\", {\n      intentId: intent.id,\n      refundId: refund.id,\n      amount,\n      currency: intent.currency,\n      metadata: intent.metadata,\n    });\n\n    return refund;\n  }\n\n  /**\n   * Record a cash or offline payment directly as captured,\n   * bypassing the checkout flow.\n   */\n  public async recordCashPayment(\n    amount: number,\n    currency: string,\n    metadata?: unknown,\n  ): Promise<PaymentIntentEntity> {\n    const intent = await this.intentRepo.create({\n      amount,\n      currency: currency.toLowerCase(),\n      status: \"captured\",\n      metadata: metadata as any,\n    });\n\n    await this.alepha.events.emit(\"payments:captured\", {\n      intentId: intent.id,\n      amount,\n      currency,\n      metadata,\n    });\n\n    return intent;\n  }\n\n  /**\n   * Cancel a payment intent that has not yet entered processing.\n   */\n  public async cancel(intentId: string): Promise<PaymentIntentEntity> {\n    const intent = await this.getIntent(intentId);\n    this.assertStatus(intent, \"created\", \"cancel\");\n\n    const cancelled = await this.intentRepo.updateById(intent.id, {\n      status: \"cancelled\",\n    });\n\n    await this.alepha.events.emit(\"payments:cancelled\", {\n      intentId: intent.id,\n      amount: intent.amount,\n      currency: intent.currency,\n      metadata: intent.metadata,\n    });\n\n    return cancelled;\n  }\n\n  /**\n   * Get a payment intent by ID. Throws NotFoundError if not found.\n   */\n  public async getIntent(intentId: string): Promise<PaymentIntentEntity> {\n    return await this.intentRepo.getById(intentId);\n  }\n\n  /**\n   * Find payment intents with optional filters and pagination.\n   */\n  public async findIntents(query: {\n    status?: string;\n    userId?: string;\n    sort?: string;\n    size?: number;\n    page?: number;\n  }) {\n    const where = this.intentRepo.createQueryWhere();\n    if (query.status)\n      where.status = { eq: query.status as PaymentIntentEntity[\"status\"] };\n    if (query.userId) where.userId = { eq: query.userId };\n    return await this.intentRepo.paginate(query, { where }, { count: true });\n  }\n\n  protected assertStatus(\n    intent: PaymentIntentEntity,\n    expected: PaymentIntentEntity[\"status\"],\n    operation: string,\n  ): void {\n    if (intent.status !== expected) {\n      throw new PaymentError(\n        `Cannot ${operation}: intent ${intent.id} is '${intent.status}', expected '${expected}'`,\n      );\n    }\n  }\n}\n","import { $inject, t } from \"alepha\";\nimport { $secure } from \"alepha/security\";\nimport { $action, okSchema } from \"alepha/server\";\nimport {\n  captureIntentSchema,\n  intentQuerySchema,\n  intentResourceSchema,\n  recordCashSchema,\n  refundIntentSchema,\n} from \"../schemas/intentSchemas.ts\";\nimport { refundResourceSchema } from \"../schemas/refundSchemas.ts\";\nimport { PaymentService } from \"../services/PaymentService.ts\";\n\nexport class AdminPaymentController {\n  protected readonly url = \"/admin/payments\";\n  protected readonly group = \"admin:payments\";\n  protected readonly payments = $inject(PaymentService);\n\n  /**\n   * List payment intents with pagination and filtering.\n   */\n  public readonly listIntents = $action({\n    path: `${this.url}/intents`,\n    group: this.group,\n    use: [$secure({ permissions: [\"payments:read\"] })],\n    description: \"List payment intents\",\n    schema: {\n      query: intentQuerySchema,\n      response: t.page(intentResourceSchema),\n    },\n    handler: ({ query }) => this.payments.findIntents(query),\n  });\n\n  /**\n   * Get a payment intent by ID.\n   */\n  public readonly getIntent = $action({\n    path: `${this.url}/intents/:id`,\n    group: this.group,\n    use: [$secure({ permissions: [\"payments:read\"] })],\n    description: \"Get payment intent details\",\n    schema: {\n      params: t.object({ id: t.uuid() }),\n      response: intentResourceSchema,\n    },\n    handler: ({ params }) => this.payments.getIntent(params.id),\n  });\n\n  /**\n   * Capture an authorized intent.\n   */\n  public readonly captureIntent = $action({\n    method: \"POST\",\n    path: `${this.url}/intents/:id/capture`,\n    group: this.group,\n    use: [$secure({ permissions: [\"payments:write\"] })],\n    description: \"Capture an authorized payment intent\",\n    schema: {\n      params: t.object({ id: t.uuid() }),\n      body: captureIntentSchema,\n      response: intentResourceSchema,\n    },\n    handler: ({ params, body }) =>\n      this.payments.capture(params.id, body.amount),\n  });\n\n  /**\n   * Void an authorized intent.\n   */\n  public readonly voidIntent = $action({\n    method: \"POST\",\n    path: `${this.url}/intents/:id/void`,\n    group: this.group,\n    use: [$secure({ permissions: [\"payments:write\"] })],\n    description: \"Void an authorized payment intent\",\n    schema: {\n      params: t.object({ id: t.uuid() }),\n      response: intentResourceSchema,\n    },\n    handler: ({ params }) => this.payments.void(params.id),\n  });\n\n  /**\n   * Refund a captured intent.\n   */\n  public readonly refundIntent = $action({\n    method: \"POST\",\n    path: `${this.url}/intents/:id/refund`,\n    group: this.group,\n    use: [$secure({ permissions: [\"payments:write\"] })],\n    description: \"Issue partial or full refund\",\n    schema: {\n      params: t.object({ id: t.uuid() }),\n      body: refundIntentSchema,\n      response: refundResourceSchema,\n    },\n    handler: ({ params, body }) =>\n      this.payments.refund(params.id, body.amount, body.reason),\n  });\n\n  /**\n   * Cancel a created intent.\n   */\n  public readonly cancelIntent = $action({\n    method: \"POST\",\n    path: `${this.url}/intents/:id/cancel`,\n    group: this.group,\n    use: [$secure({ permissions: [\"payments:write\"] })],\n    description: \"Cancel a created payment intent\",\n    schema: {\n      params: t.object({ id: t.uuid() }),\n      response: intentResourceSchema,\n    },\n    handler: ({ params }) => this.payments.cancel(params.id),\n  });\n\n  /**\n   * Record a cash payment.\n   */\n  public readonly recordCash = $action({\n    method: \"POST\",\n    path: `${this.url}/cash`,\n    group: this.group,\n    use: [$secure({ permissions: [\"payments:write\"] })],\n    description: \"Record a cash payment\",\n    schema: {\n      body: recordCashSchema,\n      response: intentResourceSchema,\n    },\n    handler: ({ body }) =>\n      this.payments.recordCashPayment(\n        body.amount,\n        body.currency,\n        body.metadata,\n      ),\n  });\n\n  /**\n   * PSP webhook endpoint (not under /admin, no auth — verified by provider).\n   */\n  public readonly webhook = $action({\n    method: \"POST\",\n    path: \"/payments/webhook\",\n    group: this.group,\n    description: \"PSP webhook endpoint\",\n    schema: {\n      response: okSchema,\n    },\n    handler: async (request) => {\n      await this.payments.handleWebhook(request.raw.web!.req);\n      return { ok: true };\n    },\n  });\n}\n","import { type Static, t } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\n\nexport const paymentMethods = $entity({\n  name: \"payment_methods\",\n  schema: t.object({\n    id: db.primaryKey(t.uuid()),\n    version: db.version(),\n    createdAt: db.createdAt(),\n    updatedAt: db.updatedAt(),\n    organizationId: db.organization(),\n    userId: t.uuid(),\n    type: t.text({ size: \"short\" }),\n    brand: t.optional(t.text({ size: \"short\" })),\n    last4: t.optional(t.text({ size: \"short\" })),\n    expMonth: t.optional(t.integer()),\n    expYear: t.optional(t.integer()),\n    isDefault: t.boolean(),\n    providerRef: t.text(),\n  }),\n  indexes: [\"userId\", \"organizationId\"],\n});\n\nexport type PaymentMethodEntity = Static<typeof paymentMethods.schema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\nimport { paymentMethods } from \"../entities/paymentMethods.ts\";\n\nexport const addPaymentMethodSchema = t.object({\n  token: t.text(),\n});\n\nexport type AddPaymentMethod = Static<typeof addPaymentMethodSchema>;\n\nexport const paymentMethodResourceSchema = paymentMethods.schema;\n\nexport type PaymentMethodResource = Static<typeof paymentMethodResourceSchema>;\n","import { $inject } from \"alepha\";\nimport { $logger } from \"alepha/logger\";\nimport { $repository } from \"alepha/orm\";\nimport {\n  type PaymentMethodEntity,\n  paymentMethods,\n} from \"../entities/paymentMethods.ts\";\nimport { PaymentError } from \"../errors/PaymentError.ts\";\nimport { PaymentProvider } from \"../providers/PaymentProvider.ts\";\n\nexport class PaymentMethodService {\n  protected readonly log = $logger();\n  protected readonly provider = $inject(PaymentProvider);\n  protected readonly methodRepo = $repository(paymentMethods);\n\n  public async addPaymentMethod(\n    userId: string,\n    organizationId: string,\n    token: string,\n  ): Promise<PaymentMethodEntity> {\n    const result = await this.provider.createPaymentMethod(userId, token);\n\n    const existing = await this.methodRepo.findMany({\n      where: { userId: { eq: userId } },\n    });\n\n    return await this.methodRepo.create({\n      userId,\n      organizationId,\n      type: result.type,\n      brand: result.brand,\n      last4: result.last4,\n      expMonth: result.expMonth,\n      expYear: result.expYear,\n      isDefault: existing.length === 0,\n      providerRef: result.providerRef,\n    });\n  }\n\n  public async listPaymentMethods(\n    userId: string,\n  ): Promise<PaymentMethodEntity[]> {\n    return await this.methodRepo.findMany({\n      where: { userId: { eq: userId } },\n    });\n  }\n\n  public async removePaymentMethod(\n    methodId: string,\n    userId: string,\n  ): Promise<void> {\n    const method = await this.methodRepo.getById(methodId);\n    if (method.userId !== userId) {\n      throw new PaymentError(\"Cannot remove another user's payment method\");\n    }\n\n    await this.provider.deletePaymentMethod(method.providerRef);\n    await this.methodRepo.deleteById(method.id);\n  }\n\n  public async setDefault(\n    methodId: string,\n    userId: string,\n  ): Promise<PaymentMethodEntity> {\n    const method = await this.methodRepo.getById(methodId);\n    if (method.userId !== userId) {\n      throw new PaymentError(\"Cannot modify another user's payment method\");\n    }\n\n    const userMethods = await this.methodRepo.findMany({\n      where: { userId: { eq: userId } },\n    });\n\n    for (const m of userMethods) {\n      if (m.isDefault) {\n        await this.methodRepo.updateById(m.id, { isDefault: false });\n      }\n    }\n\n    return await this.methodRepo.updateById(method.id, { isDefault: true });\n  }\n}\n","import { $inject, t } from \"alepha\";\nimport { $secure } from \"alepha/security\";\nimport { $action, okSchema } from \"alepha/server\";\nimport { PaymentError } from \"../errors/PaymentError.ts\";\nimport {\n  checkoutResponseSchema,\n  createCheckoutSchema,\n} from \"../schemas/intentSchemas.ts\";\nimport {\n  addPaymentMethodSchema,\n  paymentMethodResourceSchema,\n} from \"../schemas/paymentMethodSchemas.ts\";\nimport { PaymentMethodService } from \"../services/PaymentMethodService.ts\";\nimport { PaymentService } from \"../services/PaymentService.ts\";\n\nexport class PaymentController {\n  protected readonly url = \"/payments\";\n  protected readonly group = \"payments\";\n  protected readonly payments = $inject(PaymentService);\n  protected readonly paymentMethods = $inject(PaymentMethodService);\n\n  /**\n   * List the current user's saved payment methods.\n   */\n  public readonly listPaymentMethods = $action({\n    path: `${this.url}/payment-methods`,\n    group: this.group,\n    use: [$secure()],\n    description: \"List current user's saved payment methods\",\n    schema: {\n      response: t.array(paymentMethodResourceSchema),\n    },\n    handler: ({ user }) => this.paymentMethods.listPaymentMethods(user.id),\n  });\n\n  /**\n   * Add a new payment method.\n   */\n  public readonly addPaymentMethod = $action({\n    method: \"POST\",\n    path: `${this.url}/payment-methods`,\n    group: this.group,\n    use: [$secure()],\n    description: \"Tokenize and store a new payment method\",\n    schema: {\n      body: addPaymentMethodSchema,\n      response: paymentMethodResourceSchema,\n    },\n    handler: ({ body, user }) => {\n      if (!user.organization) {\n        throw new PaymentError(\n          \"Organization is required to add a payment method\",\n        );\n      }\n      return this.paymentMethods.addPaymentMethod(\n        user.id,\n        user.organization,\n        body.token,\n      );\n    },\n  });\n\n  /**\n   * Remove a payment method.\n   */\n  public readonly removePaymentMethod = $action({\n    method: \"DELETE\",\n    path: `${this.url}/payment-methods/:id`,\n    group: this.group,\n    use: [$secure()],\n    description: \"Remove own payment method\",\n    schema: {\n      params: t.object({ id: t.uuid() }),\n      response: okSchema,\n    },\n    handler: async ({ params, user }) => {\n      await this.paymentMethods.removePaymentMethod(params.id, user.id);\n      return { ok: true, id: params.id };\n    },\n  });\n\n  /**\n   * Set a payment method as default.\n   */\n  public readonly setDefaultPaymentMethod = $action({\n    method: \"PATCH\",\n    path: `${this.url}/payment-methods/:id/default`,\n    group: this.group,\n    use: [$secure()],\n    description: \"Set as default payment method\",\n    schema: {\n      params: t.object({ id: t.uuid() }),\n      response: paymentMethodResourceSchema,\n    },\n    handler: ({ params, user }) =>\n      this.paymentMethods.setDefault(params.id, user.id),\n  });\n\n  /**\n   * Create a checkout session.\n   */\n  public readonly createCheckout = $action({\n    method: \"POST\",\n    path: `${this.url}/checkout`,\n    group: this.group,\n    use: [$secure()],\n    description: \"Create checkout session and return URL\",\n    schema: {\n      body: createCheckoutSchema,\n      response: checkoutResponseSchema,\n    },\n    handler: ({ body, user }) =>\n      this.payments.createSession(\n        body.intentId,\n        body.returnUrl,\n        body.authorize,\n        user.id,\n      ),\n  });\n}\n","import { randomUUID } from \"node:crypto\";\nimport type { PaymentIntentEntity } from \"../entities/paymentIntents.ts\";\nimport type {\n  CreatePaymentMethodResult,\n  CreateSessionResult,\n  PaymentProvider,\n  RefundResult,\n  WebhookEvent,\n} from \"./PaymentProvider.ts\";\n\ninterface MemoryCharge {\n  providerRef: string;\n  amount: number;\n  status: string;\n}\n\ninterface MemoryRefund {\n  providerRef: string;\n  chargeRef: string;\n  amount: number;\n}\n\nexport class MemoryPaymentProvider implements PaymentProvider {\n  protected readonly charges: Map<string, MemoryCharge> = new Map();\n  protected readonly refundRecords: Map<string, MemoryRefund> = new Map();\n  protected readonly methods: Map<string, CreatePaymentMethodResult> =\n    new Map();\n  protected readonly expiredSessions: Set<string> = new Set();\n\n  public async createSession(\n    intent: PaymentIntentEntity,\n    options: { returnUrl: string; authorize?: boolean },\n  ): Promise<CreateSessionResult> {\n    const providerRef = `mem_session_${randomUUID()}`;\n    const status = options.authorize ? \"authorized\" : \"captured\";\n    this.charges.set(providerRef, {\n      providerRef,\n      amount: intent.amount,\n      status,\n    });\n    return {\n      url: `/payments/mock-checkout/${intent.id}`,\n      providerRef,\n    };\n  }\n\n  public async capturePayment(\n    providerRef: string,\n    amount: number,\n  ): Promise<void> {\n    const charge = this.charges.get(providerRef);\n    if (charge) {\n      charge.status = \"captured\";\n      charge.amount = amount;\n    }\n  }\n\n  public async voidPayment(providerRef: string): Promise<void> {\n    const charge = this.charges.get(providerRef);\n    if (charge) {\n      charge.status = \"voided\";\n    }\n  }\n\n  public async refundPayment(\n    providerRef: string,\n    amount: number,\n  ): Promise<RefundResult> {\n    const refundRef = `mem_refund_${randomUUID()}`;\n    this.refundRecords.set(refundRef, {\n      providerRef: refundRef,\n      chargeRef: providerRef,\n      amount,\n    });\n    return { providerRef: refundRef };\n  }\n\n  public async parseWebhook(request: Request): Promise<WebhookEvent> {\n    const body = (await request.json()) as {\n      providerRef: string;\n      status: string;\n    };\n    return {\n      providerRef: body.providerRef,\n      status: body.status,\n      raw: body,\n    };\n  }\n\n  public async createPaymentMethod(\n    userId: string,\n    token: string,\n  ): Promise<CreatePaymentMethodResult> {\n    const providerRef = `mem_pm_${randomUUID()}`;\n    const result: CreatePaymentMethodResult = {\n      providerRef,\n      type: \"card\",\n      brand: \"visa\",\n      last4: \"4242\",\n      expMonth: 12,\n      expYear: 2030,\n    };\n    this.methods.set(providerRef, result);\n    return result;\n  }\n\n  public async deletePaymentMethod(providerRef: string): Promise<void> {\n    this.methods.delete(providerRef);\n  }\n\n  public async expireSession(providerRef: string): Promise<void> {\n    this.expiredSessions.add(providerRef);\n  }\n\n  // --- Test assertion helpers ---\n\n  public wasCharged(providerRef: string): boolean {\n    const charge = this.charges.get(providerRef);\n    return charge?.status === \"captured\";\n  }\n\n  public wasRefunded(providerRef: string): boolean {\n    return Array.from(this.refundRecords.values()).some(\n      (r) => r.chargeRef === providerRef,\n    );\n  }\n\n  public wasExpired(providerRef: string): boolean {\n    return this.expiredSessions.has(providerRef);\n  }\n\n  public getCharges(): MemoryCharge[] {\n    return Array.from(this.charges.values());\n  }\n\n  public getRefunds(): MemoryRefund[] {\n    return Array.from(this.refundRecords.values());\n  }\n}\n","import { $module } from \"alepha\";\nimport { AdminPaymentController } from \"./controllers/AdminPaymentController.ts\";\nimport { PaymentController } from \"./controllers/PaymentController.ts\";\nimport { MemoryPaymentProvider } from \"./providers/MemoryPaymentProvider.ts\";\nimport { PaymentProvider } from \"./providers/PaymentProvider.ts\";\nimport { PaymentMethodService } from \"./services/PaymentMethodService.ts\";\nimport { PaymentService } from \"./services/PaymentService.ts\";\n\nexport * from \"./controllers/AdminPaymentController.ts\";\nexport * from \"./controllers/PaymentController.ts\";\nexport * from \"./entities/paymentIntents.ts\";\nexport * from \"./entities/paymentMethods.ts\";\nexport * from \"./entities/refunds.ts\";\nexport * from \"./errors/PaymentError.ts\";\nexport * from \"./providers/MemoryPaymentProvider.ts\";\nexport * from \"./providers/PaymentProvider.ts\";\nexport * from \"./schemas/intentSchemas.ts\";\nexport * from \"./schemas/paymentMethodSchemas.ts\";\nexport * from \"./schemas/refundSchemas.ts\";\nexport * from \"./services/PaymentMethodService.ts\";\nexport * from \"./services/PaymentService.ts\";\n\ndeclare module \"alepha\" {\n  interface Hooks {\n    \"payments:authorized\": {\n      intentId: string;\n      amount: number;\n      currency: string;\n      metadata?: unknown;\n    };\n    \"payments:captured\": {\n      intentId: string;\n      amount: number;\n      currency: string;\n      metadata?: unknown;\n    };\n    \"payments:failed\": {\n      intentId: string;\n      amount: number;\n      currency: string;\n      metadata?: unknown;\n    };\n    \"payments:voided\": {\n      intentId: string;\n      amount: number;\n      currency: string;\n      metadata?: unknown;\n    };\n    \"payments:refunded\": {\n      intentId: string;\n      refundId: string;\n      amount: number;\n      currency: string;\n      metadata?: unknown;\n    };\n    \"payments:cancelled\": {\n      intentId: string;\n      amount: number;\n      currency: string;\n      metadata?: unknown;\n    };\n  }\n}\n\nexport const AlephaApiPayments = $module({\n  name: \"alepha.api.payments\",\n  services: [\n    AdminPaymentController,\n    PaymentController,\n    PaymentProvider,\n    PaymentService,\n    PaymentMethodService,\n  ],\n  variants: [MemoryPaymentProvider],\n  register: (alepha) => {\n    alepha.with({\n      optional: true,\n      provide: PaymentProvider,\n      use: MemoryPaymentProvider,\n    });\n  },\n});\n"],"mappings":";;;;;;;;;AAGA,MAAa,iBAAiB,QAAQ;CACpC,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,MAAM,CAAC;EAC3B,SAAS,GAAG,SAAS;EACrB,WAAW,GAAG,WAAW;EACzB,WAAW,GAAG,WAAW;EACzB,gBAAgB,GAAG,cAAc;EACjC,QAAQ,EAAE,SAAS;EACnB,UAAU,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;EACnC,QAAQ,EAAE,KAAK;GACb;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACD,CAAC;EACF,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC;EACjC,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC;EACjC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC;EAC9B,iBAAiB,EAAE,SAAS,EAAE,MAAM,CAAC;EACrC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;EAC7B,CAAC;CACF,SAAS;EAAC;EAAU;EAAkB;EAAU;EAAY;CAC7D,CAAC;;;AC3BF,MAAa,qBAAqB,EAAE,OAAO;CACzC,QAAQ,EAAE,QAAQ,EAAE,SAAS,GAAG,CAAC;CACjC,UAAU,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;CACnC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC;CAC9B,iBAAiB,EAAE,SAAS,EAAE,MAAM,CAAC;CACtC,CAAC;AAIF,MAAa,uBAAuB,EAAE,OAAO;CAC3C,UAAU,EAAE,MAAM;CAClB,WAAW,EAAE,MAAM;CACnB,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC;CACnC,CAAC;AAIF,MAAa,yBAAyB,EAAE,OAAO;CAC7C,KAAK,EAAE,MAAM;CACb,UAAU,EAAE,MAAM;CACnB,CAAC;AAIF,MAAa,sBAAsB,EAAE,OAAO,EAC1C,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,GAAG,CAAC,CAAC,EAC9C,CAAC;AAIF,MAAa,qBAAqB,EAAE,OAAO;CACzC,QAAQ,EAAE,QAAQ,EAAE,SAAS,GAAG,CAAC;CACjC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;CAC7B,CAAC;AAIF,MAAa,mBAAmB,EAAE,OAAO;CACvC,QAAQ,EAAE,QAAQ,EAAE,SAAS,GAAG,CAAC;CACjC,UAAU,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;CACnC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC;CAC/B,CAAC;AAIF,MAAa,oBAAoB,EAAE,OAAO,iBAAiB;CACzD,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,oBAAoB,CAAC,CAAC;CAC/D,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,qBAAqB,CAAC,CAAC;CACjE,CAAC;AAIF,MAAa,uBAAuB,eAAe;;;ACtDnD,MAAa,UAAU,QAAQ;CAC7B,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,MAAM,CAAC;EAC3B,SAAS,GAAG,SAAS;EACrB,WAAW,GAAG,WAAW;EACzB,WAAW,GAAG,WAAW;EACzB,gBAAgB,GAAG,cAAc;EACjC,UAAU,EAAE,MAAM;EAClB,QAAQ,EAAE,SAAS;EACnB,UAAU,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;EACnC,QAAQ,EAAE,KAAK;GAAC;GAAW;GAAc;GAAa;GAAS,CAAC;EAChE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;EAC5B,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC;EAClC,CAAC;CACF,SAAS;EAAC;EAAY;EAAkB;EAAS;CAClD,CAAC;;;AChBF,MAAa,uBAAuB,QAAQ;;;ACD5C,IAAa,eAAb,cAAkC,YAAY;CAC5C,SAAyB;;;;ACuB3B,IAAsB,kBAAtB,MAAsC;;;ACbtC,IAAa,iBAAb,MAAa,eAAe;CAC1B,SAA4B,QAAQ,OAAO;CAC3C,MAAyB,SAAS;CAClC,WAA8B,QAAQ,iBAAiB;CACvD,WAA8B,QAAQ,gBAAgB;CACtD,aAAgC,YAAY,eAAe;CAC3D,aAAgC,YAAY,QAAQ;;;;;;CAOpD,qBAAwC,KAAK;EAC3C,MAAM;EACN,MAAM;EACN,SAAS,YAAY;GACnB,MAAM,SAAS,KAAK,SAAS,KAAK,CAAC,SAAS,IAAI,UAAU,CAAC,aAAa;GAExE,MAAM,QAAQ,MAAM,KAAK,WAAW,SAAS,EAC3C,OAAO;IAAE,QAAQ,EAAE,IAAI,cAAc;IAAE,WAAW,EAAE,IAAI,QAAQ;IAAE,EACnE,CAAC;AAEF,QAAK,MAAM,UAAU,OAAO;AAC1B,QAAI,OAAO,YACT,KAAI;AACF,WAAM,KAAK,SAAS,cAAc,OAAO,YAAY;aAC9C,OAAO;AACd,UAAK,IAAI,KACP,uCAAuC,OAAO,MAC9C,MACD;;AAGL,UAAM,KAAK,WAAW,WAAW,OAAO,IAAI,EAAE,QAAQ,WAAW,CAAC;AAClE,SAAK,IAAI,KAAK,wBAAwB,OAAO,KAAK;;;EAGvD,CAAC;;;;CAKF,MAAa,aACX,QACA,UACA,UACA,SAC8B;AAC9B,SAAO,MAAM,KAAK,WAAW,OAAO;GAClC;GACA,UAAU,SAAS,aAAa;GAChC,QAAQ;GACE;GACV,iBAAiB,SAAS;GAC1B,QAAQ,SAAS;GAClB,CAAC;;;;;;CAOJ,MAAa,cACX,UACA,WACA,WACA,QAC4C;EAC5C,MAAM,SAAS,MAAM,KAAK,UAAU,SAAS;AAC7C,OAAK,aAAa,QAAQ,WAAW,gBAAgB;AAGrD,MAAI,UAAU,OAAO,UAAU,OAAO,WAAW,OAC/C,OAAM,IAAI,aAAa,8CAA8C;AAIvE,MAAI,UAAU,CAAC,OAAO,OACpB,OAAM,KAAK,WAAW,WAAW,OAAO,IAAI,EAAE,QAAQ,CAAC;EAGzD,MAAM,SAAS,MAAM,KAAK,SAAS,cAAc,QAAQ;GACvD;GACA;GACD,CAAC;AAEF,QAAM,KAAK,WAAW,WAAW,OAAO,IAAI;GAC1C,QAAQ;GACR,aAAa,OAAO;GACrB,CAAC;AAEF,SAAO;GAAE,KAAK,OAAO;GAAK,UAAU,OAAO;GAAI;;;;;CAMjD,MAAa,cAAc,SAAiC;EAC1D,MAAM,QAAQ,MAAM,KAAK,SAAS,aAAa,QAAQ;EACvD,MAAM,UAAU,MAAM,KAAK,WAAW,SAAS;GAC7C,OAAO,EAAE,aAAa,EAAE,IAAI,MAAM,aAAa,EAAE;GACjD,OAAO;GACR,CAAC;AAEF,MAAI,QAAQ,WAAW,GAAG;AACxB,QAAK,IAAI,KAAK,oCAAoC,MAAM,cAAc;AACtE;;EAGF,MAAM,SAAS,QAAQ;AACvB,QAAM,KAAK,mBAAmB,OAAO,IAAI,MAAM,QAAQ,MAAM,IAAI;;;;;;;;;;CAWnE,OAA0B,4BAGtB;EACF,YAAY;GAAC;GAAc;GAAY;GAAS;EAChD,YAAY,CAAC,YAAY,SAAS;EACnC;CAED,MAAa,mBACX,UACA,QACA,KACe;EACf,MAAM,SAAS,MAAM,KAAK,UAAU,SAAS;EAE7C,MAAM,WAAW;GACf,YAAY;GACZ,UAAU;GACV,QAAQ;GACT;AAGD,MAAI,EAAE,UAAU,WAAW;AACzB,QAAK,IAAI,KAAK,2BAA2B,SAAS;AAClD;;EAGF,MAAM,gBAAgB;AAItB,MAAI,CADY,eAAe,0BAA0B,OAAO,SAClD,SAAS,cAAc,EAAE;AACrC,QAAK,IAAI,KACP,uCAAuC,OAAO,OAAO,KAAK,iBAC1D,EAAE,UAAU,OAAO,IAAI,CACxB;AACD;;AAGF,QAAM,KAAK,WAAW,WAAW,OAAO,IAAI;GAC1C,QAAQ;GACR,aAAa;GACd,CAAC;AAEF,QAAM,KAAK,OAAO,OAAO,KAAK,SAAS,gBAAgB;GACrD,UAAU,OAAO;GACjB,QAAQ,OAAO;GACf,UAAU,OAAO;GACjB,UAAU,OAAO;GAClB,CAAC;;;;;;CAOJ,MAAa,QACX,UACA,aAC8B;EAC9B,MAAM,SAAS,MAAM,KAAK,UAAU,SAAS;AAC7C,OAAK,aAAa,QAAQ,cAAc,UAAU;EAElD,MAAM,SAAS,eAAe,OAAO;AACrC,MAAI,SAAS,OAAO,OAClB,OAAM,IAAI,aACR,kBAAkB,OAAO,6BAA6B,OAAO,SAC9D;AAGH,MAAI,OAAO,YACT,OAAM,KAAK,SAAS,eAAe,OAAO,aAAa,OAAO;EAGhE,MAAM,UAAU,MAAM,KAAK,WAAW,WAAW,OAAO,IAAI;GAC1D,QAAQ;GACR;GACD,CAAC;AAEF,QAAM,KAAK,OAAO,OAAO,KAAK,qBAAqB;GACjD,UAAU,OAAO;GACjB;GACA,UAAU,OAAO;GACjB,UAAU,OAAO;GAClB,CAAC;AAEF,SAAO;;;;;CAMT,MAAa,KAAK,UAAgD;EAChE,MAAM,SAAS,MAAM,KAAK,UAAU,SAAS;AAC7C,OAAK,aAAa,QAAQ,cAAc,OAAO;AAE/C,MAAI,OAAO,YACT,OAAM,KAAK,SAAS,YAAY,OAAO,YAAY;EAGrD,MAAM,UAAU,MAAM,KAAK,WAAW,WAAW,OAAO,IAAI,EAC1D,QAAQ,UACT,CAAC;AAEF,QAAM,KAAK,OAAO,OAAO,KAAK,mBAAmB;GAC/C,UAAU,OAAO;GACjB,QAAQ,OAAO;GACf,UAAU,OAAO;GACjB,UAAU,OAAO;GAClB,CAAC;AAEF,SAAO;;;;;CAMT,MAAa,OACX,UACA,QACA,QACuB;EACvB,MAAM,SAAS,MAAM,KAAK,UAAU,SAAS;AAG7C,MACE,OAAO,WAAW,cAClB,OAAO,WAAW,qBAElB,OAAM,IAAI,aACR,yBAAyB,OAAO,GAAG,OAAO,OAAO,OAAO,gDACzD;EAOH,MAAM,iBAHkB,MAAM,KAAK,WAAW,SAAS,EACrD,OAAO,EAAE,UAAU,EAAE,IAAI,OAAO,IAAI,EAAE,EACvC,CAAC,EACoC,QAAQ,KAAK,MAAM,MAAM,EAAE,QAAQ,EAAE;EAC3E,MAAM,YAAY,OAAO,SAAS;AAElC,MAAI,SAAS,UACX,OAAM,IAAI,aACR,iBAAiB,OAAO,uCAAuC,YAChE;EAGH,IAAI;AACJ,MAAI,OAAO,YAKT,sBAJe,MAAM,KAAK,SAAS,cACjC,OAAO,aACP,OACD,EAC0B;EAG7B,MAAM,SAAS,MAAM,KAAK,WAAW,OAAO;GAC1C,UAAU,OAAO;GACjB,gBAAgB,OAAO;GACvB;GACA,UAAU,OAAO;GACjB,QAAQ;GACR;GACA,aAAa;GACd,CAAC;EAIF,MAAM,YADmB,gBAAgB,UAEnB,OAAO,SAAS,aAAa;AACnD,QAAM,KAAK,WAAW,WAAW,OAAO,IAAI,EAC1C,QAAQ,WACT,CAAC;AAEF,QAAM,KAAK,OAAO,OAAO,KAAK,qBAAqB;GACjD,UAAU,OAAO;GACjB,UAAU,OAAO;GACjB;GACA,UAAU,OAAO;GACjB,UAAU,OAAO;GAClB,CAAC;AAEF,SAAO;;;;;;CAOT,MAAa,kBACX,QACA,UACA,UAC8B;EAC9B,MAAM,SAAS,MAAM,KAAK,WAAW,OAAO;GAC1C;GACA,UAAU,SAAS,aAAa;GAChC,QAAQ;GACE;GACX,CAAC;AAEF,QAAM,KAAK,OAAO,OAAO,KAAK,qBAAqB;GACjD,UAAU,OAAO;GACjB;GACA;GACA;GACD,CAAC;AAEF,SAAO;;;;;CAMT,MAAa,OAAO,UAAgD;EAClE,MAAM,SAAS,MAAM,KAAK,UAAU,SAAS;AAC7C,OAAK,aAAa,QAAQ,WAAW,SAAS;EAE9C,MAAM,YAAY,MAAM,KAAK,WAAW,WAAW,OAAO,IAAI,EAC5D,QAAQ,aACT,CAAC;AAEF,QAAM,KAAK,OAAO,OAAO,KAAK,sBAAsB;GAClD,UAAU,OAAO;GACjB,QAAQ,OAAO;GACf,UAAU,OAAO;GACjB,UAAU,OAAO;GAClB,CAAC;AAEF,SAAO;;;;;CAMT,MAAa,UAAU,UAAgD;AACrE,SAAO,MAAM,KAAK,WAAW,QAAQ,SAAS;;;;;CAMhD,MAAa,YAAY,OAMtB;EACD,MAAM,QAAQ,KAAK,WAAW,kBAAkB;AAChD,MAAI,MAAM,OACR,OAAM,SAAS,EAAE,IAAI,MAAM,QAAyC;AACtE,MAAI,MAAM,OAAQ,OAAM,SAAS,EAAE,IAAI,MAAM,QAAQ;AACrD,SAAO,MAAM,KAAK,WAAW,SAAS,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,MAAM,CAAC;;CAG1E,aACE,QACA,UACA,WACM;AACN,MAAI,OAAO,WAAW,SACpB,OAAM,IAAI,aACR,UAAU,UAAU,WAAW,OAAO,GAAG,OAAO,OAAO,OAAO,eAAe,SAAS,GACvF;;;;;AClYP,IAAa,yBAAb,MAAoC;CAClC,MAAyB;CACzB,QAA2B;CAC3B,WAA8B,QAAQ,eAAe;;;;CAKrD,cAA8B,QAAQ;EACpC,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,gBAAgB,EAAE,CAAC,CAAC;EAClD,aAAa;EACb,QAAQ;GACN,OAAO;GACP,UAAU,EAAE,KAAK,qBAAqB;GACvC;EACD,UAAU,EAAE,YAAY,KAAK,SAAS,YAAY,MAAM;EACzD,CAAC;;;;CAKF,YAA4B,QAAQ;EAClC,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,gBAAgB,EAAE,CAAC,CAAC;EAClD,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;GAClC,UAAU;GACX;EACD,UAAU,EAAE,aAAa,KAAK,SAAS,UAAU,OAAO,GAAG;EAC5D,CAAC;;;;CAKF,gBAAgC,QAAQ;EACtC,QAAQ;EACR,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,iBAAiB,EAAE,CAAC,CAAC;EACnD,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;GAClC,MAAM;GACN,UAAU;GACX;EACD,UAAU,EAAE,QAAQ,WAClB,KAAK,SAAS,QAAQ,OAAO,IAAI,KAAK,OAAO;EAChD,CAAC;;;;CAKF,aAA6B,QAAQ;EACnC,QAAQ;EACR,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,iBAAiB,EAAE,CAAC,CAAC;EACnD,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;GAClC,UAAU;GACX;EACD,UAAU,EAAE,aAAa,KAAK,SAAS,KAAK,OAAO,GAAG;EACvD,CAAC;;;;CAKF,eAA+B,QAAQ;EACrC,QAAQ;EACR,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,iBAAiB,EAAE,CAAC,CAAC;EACnD,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;GAClC,MAAM;GACN,UAAU;GACX;EACD,UAAU,EAAE,QAAQ,WAClB,KAAK,SAAS,OAAO,OAAO,IAAI,KAAK,QAAQ,KAAK,OAAO;EAC5D,CAAC;;;;CAKF,eAA+B,QAAQ;EACrC,QAAQ;EACR,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,iBAAiB,EAAE,CAAC,CAAC;EACnD,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;GAClC,UAAU;GACX;EACD,UAAU,EAAE,aAAa,KAAK,SAAS,OAAO,OAAO,GAAG;EACzD,CAAC;;;;CAKF,aAA6B,QAAQ;EACnC,QAAQ;EACR,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,iBAAiB,EAAE,CAAC,CAAC;EACnD,aAAa;EACb,QAAQ;GACN,MAAM;GACN,UAAU;GACX;EACD,UAAU,EAAE,WACV,KAAK,SAAS,kBACZ,KAAK,QACL,KAAK,UACL,KAAK,SACN;EACJ,CAAC;;;;CAKF,UAA0B,QAAQ;EAChC,QAAQ;EACR,MAAM;EACN,OAAO,KAAK;EACZ,aAAa;EACb,QAAQ,EACN,UAAU,UACX;EACD,SAAS,OAAO,YAAY;AAC1B,SAAM,KAAK,SAAS,cAAc,QAAQ,IAAI,IAAK,IAAI;AACvD,UAAO,EAAE,IAAI,MAAM;;EAEtB,CAAC;;;;ACrJJ,MAAa,iBAAiB,QAAQ;CACpC,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,MAAM,CAAC;EAC3B,SAAS,GAAG,SAAS;EACrB,WAAW,GAAG,WAAW;EACzB,WAAW,GAAG,WAAW;EACzB,gBAAgB,GAAG,cAAc;EACjC,QAAQ,EAAE,MAAM;EAChB,MAAM,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;EAC/B,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC,CAAC;EAC5C,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC,CAAC;EAC5C,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC;EACjC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;EAChC,WAAW,EAAE,SAAS;EACtB,aAAa,EAAE,MAAM;EACtB,CAAC;CACF,SAAS,CAAC,UAAU,iBAAiB;CACtC,CAAC;;;ACjBF,MAAa,yBAAyB,EAAE,OAAO,EAC7C,OAAO,EAAE,MAAM,EAChB,CAAC;AAIF,MAAa,8BAA8B,eAAe;;;ACA1D,IAAa,uBAAb,MAAkC;CAChC,MAAyB,SAAS;CAClC,WAA8B,QAAQ,gBAAgB;CACtD,aAAgC,YAAY,eAAe;CAE3D,MAAa,iBACX,QACA,gBACA,OAC8B;EAC9B,MAAM,SAAS,MAAM,KAAK,SAAS,oBAAoB,QAAQ,MAAM;EAErE,MAAM,WAAW,MAAM,KAAK,WAAW,SAAS,EAC9C,OAAO,EAAE,QAAQ,EAAE,IAAI,QAAQ,EAAE,EAClC,CAAC;AAEF,SAAO,MAAM,KAAK,WAAW,OAAO;GAClC;GACA;GACA,MAAM,OAAO;GACb,OAAO,OAAO;GACd,OAAO,OAAO;GACd,UAAU,OAAO;GACjB,SAAS,OAAO;GAChB,WAAW,SAAS,WAAW;GAC/B,aAAa,OAAO;GACrB,CAAC;;CAGJ,MAAa,mBACX,QACgC;AAChC,SAAO,MAAM,KAAK,WAAW,SAAS,EACpC,OAAO,EAAE,QAAQ,EAAE,IAAI,QAAQ,EAAE,EAClC,CAAC;;CAGJ,MAAa,oBACX,UACA,QACe;EACf,MAAM,SAAS,MAAM,KAAK,WAAW,QAAQ,SAAS;AACtD,MAAI,OAAO,WAAW,OACpB,OAAM,IAAI,aAAa,8CAA8C;AAGvE,QAAM,KAAK,SAAS,oBAAoB,OAAO,YAAY;AAC3D,QAAM,KAAK,WAAW,WAAW,OAAO,GAAG;;CAG7C,MAAa,WACX,UACA,QAC8B;EAC9B,MAAM,SAAS,MAAM,KAAK,WAAW,QAAQ,SAAS;AACtD,MAAI,OAAO,WAAW,OACpB,OAAM,IAAI,aAAa,8CAA8C;EAGvE,MAAM,cAAc,MAAM,KAAK,WAAW,SAAS,EACjD,OAAO,EAAE,QAAQ,EAAE,IAAI,QAAQ,EAAE,EAClC,CAAC;AAEF,OAAK,MAAM,KAAK,YACd,KAAI,EAAE,UACJ,OAAM,KAAK,WAAW,WAAW,EAAE,IAAI,EAAE,WAAW,OAAO,CAAC;AAIhE,SAAO,MAAM,KAAK,WAAW,WAAW,OAAO,IAAI,EAAE,WAAW,MAAM,CAAC;;;;;AChE3E,IAAa,oBAAb,MAA+B;CAC7B,MAAyB;CACzB,QAA2B;CAC3B,WAA8B,QAAQ,eAAe;CACrD,iBAAoC,QAAQ,qBAAqB;;;;CAKjE,qBAAqC,QAAQ;EAC3C,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,SAAS,CAAC;EAChB,aAAa;EACb,QAAQ,EACN,UAAU,EAAE,MAAM,4BAA4B,EAC/C;EACD,UAAU,EAAE,WAAW,KAAK,eAAe,mBAAmB,KAAK,GAAG;EACvE,CAAC;;;;CAKF,mBAAmC,QAAQ;EACzC,QAAQ;EACR,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,SAAS,CAAC;EAChB,aAAa;EACb,QAAQ;GACN,MAAM;GACN,UAAU;GACX;EACD,UAAU,EAAE,MAAM,WAAW;AAC3B,OAAI,CAAC,KAAK,aACR,OAAM,IAAI,aACR,mDACD;AAEH,UAAO,KAAK,eAAe,iBACzB,KAAK,IACL,KAAK,cACL,KAAK,MACN;;EAEJ,CAAC;;;;CAKF,sBAAsC,QAAQ;EAC5C,QAAQ;EACR,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,SAAS,CAAC;EAChB,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;GAClC,UAAU;GACX;EACD,SAAS,OAAO,EAAE,QAAQ,WAAW;AACnC,SAAM,KAAK,eAAe,oBAAoB,OAAO,IAAI,KAAK,GAAG;AACjE,UAAO;IAAE,IAAI;IAAM,IAAI,OAAO;IAAI;;EAErC,CAAC;;;;CAKF,0BAA0C,QAAQ;EAChD,QAAQ;EACR,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,SAAS,CAAC;EAChB,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;GAClC,UAAU;GACX;EACD,UAAU,EAAE,QAAQ,WAClB,KAAK,eAAe,WAAW,OAAO,IAAI,KAAK,GAAG;EACrD,CAAC;;;;CAKF,iBAAiC,QAAQ;EACvC,QAAQ;EACR,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,SAAS,CAAC;EAChB,aAAa;EACb,QAAQ;GACN,MAAM;GACN,UAAU;GACX;EACD,UAAU,EAAE,MAAM,WAChB,KAAK,SAAS,cACZ,KAAK,UACL,KAAK,WACL,KAAK,WACL,KAAK,GACN;EACJ,CAAC;;;;AChGJ,IAAa,wBAAb,MAA8D;CAC5D,0BAAwD,IAAI,KAAK;CACjE,gCAA8D,IAAI,KAAK;CACvE,0BACE,IAAI,KAAK;CACX,kCAAkD,IAAI,KAAK;CAE3D,MAAa,cACX,QACA,SAC8B;EAC9B,MAAM,cAAc,eAAe,YAAY;EAC/C,MAAM,SAAS,QAAQ,YAAY,eAAe;AAClD,OAAK,QAAQ,IAAI,aAAa;GAC5B;GACA,QAAQ,OAAO;GACf;GACD,CAAC;AACF,SAAO;GACL,KAAK,2BAA2B,OAAO;GACvC;GACD;;CAGH,MAAa,eACX,aACA,QACe;EACf,MAAM,SAAS,KAAK,QAAQ,IAAI,YAAY;AAC5C,MAAI,QAAQ;AACV,UAAO,SAAS;AAChB,UAAO,SAAS;;;CAIpB,MAAa,YAAY,aAAoC;EAC3D,MAAM,SAAS,KAAK,QAAQ,IAAI,YAAY;AAC5C,MAAI,OACF,QAAO,SAAS;;CAIpB,MAAa,cACX,aACA,QACuB;EACvB,MAAM,YAAY,cAAc,YAAY;AAC5C,OAAK,cAAc,IAAI,WAAW;GAChC,aAAa;GACb,WAAW;GACX;GACD,CAAC;AACF,SAAO,EAAE,aAAa,WAAW;;CAGnC,MAAa,aAAa,SAAyC;EACjE,MAAM,OAAQ,MAAM,QAAQ,MAAM;AAIlC,SAAO;GACL,aAAa,KAAK;GAClB,QAAQ,KAAK;GACb,KAAK;GACN;;CAGH,MAAa,oBACX,QACA,OACoC;EACpC,MAAM,cAAc,UAAU,YAAY;EAC1C,MAAM,SAAoC;GACxC;GACA,MAAM;GACN,OAAO;GACP,OAAO;GACP,UAAU;GACV,SAAS;GACV;AACD,OAAK,QAAQ,IAAI,aAAa,OAAO;AACrC,SAAO;;CAGT,MAAa,oBAAoB,aAAoC;AACnE,OAAK,QAAQ,OAAO,YAAY;;CAGlC,MAAa,cAAc,aAAoC;AAC7D,OAAK,gBAAgB,IAAI,YAAY;;CAKvC,WAAkB,aAA8B;AAE9C,SADe,KAAK,QAAQ,IAAI,YAAY,EAC7B,WAAW;;CAG5B,YAAmB,aAA8B;AAC/C,SAAO,MAAM,KAAK,KAAK,cAAc,QAAQ,CAAC,CAAC,MAC5C,MAAM,EAAE,cAAc,YACxB;;CAGH,WAAkB,aAA8B;AAC9C,SAAO,KAAK,gBAAgB,IAAI,YAAY;;CAG9C,aAAoC;AAClC,SAAO,MAAM,KAAK,KAAK,QAAQ,QAAQ,CAAC;;CAG1C,aAAoC;AAClC,SAAO,MAAM,KAAK,KAAK,cAAc,QAAQ,CAAC;;;;;ACxElD,MAAa,oBAAoB,QAAQ;CACvC,MAAM;CACN,UAAU;EACR;EACA;EACA;EACA;EACA;EACD;CACD,UAAU,CAAC,sBAAsB;CACjC,WAAW,WAAW;AACpB,SAAO,KAAK;GACV,UAAU;GACV,SAAS;GACT,KAAK;GACN,CAAC;;CAEL,CAAC"}
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/api/payments/entities/paymentIntents.ts","../../../src/api/payments/schemas/intentSchemas.ts","../../../src/api/payments/entities/refunds.ts","../../../src/api/payments/schemas/refundSchemas.ts","../../../src/api/payments/errors/PaymentError.ts","../../../src/api/payments/providers/PaymentProvider.ts","../../../src/api/payments/services/PaymentService.ts","../../../src/api/payments/controllers/AdminPaymentController.ts","../../../src/api/payments/entities/paymentMethods.ts","../../../src/api/payments/schemas/paymentMethodSchemas.ts","../../../src/api/payments/services/PaymentMethodService.ts","../../../src/api/payments/controllers/PaymentController.ts","../../../src/api/payments/providers/MemoryPaymentProvider.ts","../../../src/api/payments/index.ts"],"sourcesContent":["import { type Static, t } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\n\nexport const paymentIntents = $entity({\n  name: \"payment_intents\",\n  schema: t.object({\n    id: db.primaryKey(t.uuid()),\n    version: db.version(),\n    createdAt: db.createdAt(),\n    updatedAt: db.updatedAt(),\n    organizationId: db.organization(),\n    amount: t.integer(),\n    currency: t.text({ size: \"short\" }),\n    status: t.enum([\n      \"created\",\n      \"processing\",\n      \"authorized\",\n      \"captured\",\n      \"partially_refunded\",\n      \"voided\",\n      \"failed\",\n      \"cancelled\",\n      \"refunded\",\n      \"expired\",\n    ]),\n    providerRef: t.optional(t.text()),\n    providerRaw: t.optional(t.json()),\n    metadata: t.optional(t.json()),\n    paymentMethodId: t.optional(t.uuid()),\n    userId: t.optional(t.uuid()),\n  }),\n  indexes: [\"status\", \"organizationId\", \"userId\", \"createdAt\"],\n});\n\nexport type PaymentIntentEntity = Static<typeof paymentIntents.schema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\nimport { pageQuerySchema } from \"alepha/orm\";\nimport { paymentIntents } from \"../entities/paymentIntents.ts\";\n\nexport const createIntentSchema = t.object({\n  amount: t.integer({ minimum: 1 }),\n  currency: t.text({ size: \"short\" }),\n  metadata: t.optional(t.json()),\n  paymentMethodId: t.optional(t.uuid()),\n});\n\nexport type CreateIntent = Static<typeof createIntentSchema>;\n\nexport const createCheckoutSchema = t.object({\n  intentId: t.uuid(),\n  returnUrl: t.text(),\n  authorize: t.optional(t.boolean()),\n});\n\nexport type CreateCheckout = Static<typeof createCheckoutSchema>;\n\nexport const checkoutResponseSchema = t.object({\n  url: t.text(),\n  intentId: t.text(),\n});\n\nexport type CheckoutResponse = Static<typeof checkoutResponseSchema>;\n\nexport const captureIntentSchema = t.object({\n  amount: t.optional(t.integer({ minimum: 1 })),\n});\n\nexport type CaptureIntent = Static<typeof captureIntentSchema>;\n\nexport const refundIntentSchema = t.object({\n  amount: t.integer({ minimum: 1 }),\n  reason: t.optional(t.text()),\n});\n\nexport type RefundIntent = Static<typeof refundIntentSchema>;\n\nexport const recordCashSchema = t.object({\n  amount: t.integer({ minimum: 1 }),\n  currency: t.text({ size: \"short\" }),\n  metadata: t.optional(t.json()),\n});\n\nexport type RecordCash = Static<typeof recordCashSchema>;\n\nexport const intentQuerySchema = t.extend(pageQuerySchema, {\n  status: t.optional(t.text({ description: \"Filter by status\" })),\n  userId: t.optional(t.uuid({ description: \"Filter by user ID\" })),\n});\n\nexport type IntentQuery = Static<typeof intentQuerySchema>;\n\nexport const intentResourceSchema = paymentIntents.schema;\n\nexport type IntentResource = Static<typeof intentResourceSchema>;\n","import { type Static, t } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\n\nexport const refunds = $entity({\n  name: \"refunds\",\n  schema: t.object({\n    id: db.primaryKey(t.uuid()),\n    version: db.version(),\n    createdAt: db.createdAt(),\n    updatedAt: db.updatedAt(),\n    organizationId: db.organization(),\n    intentId: t.uuid(),\n    amount: t.integer(),\n    currency: t.text({ size: \"short\" }),\n    status: t.enum([\"pending\", \"processing\", \"completed\", \"failed\"]),\n    reason: t.optional(t.text()),\n    providerRef: t.optional(t.text()),\n  }),\n  indexes: [\"intentId\", \"organizationId\", \"status\"],\n});\n\nexport type RefundEntity = Static<typeof refunds.schema>;\n","import type { Static } from \"alepha\";\nimport { refunds } from \"../entities/refunds.ts\";\n\nexport const refundResourceSchema = refunds.schema;\n\nexport type RefundResource = Static<typeof refundResourceSchema>;\n","import { AlephaError } from \"alepha\";\n\nexport class PaymentError extends AlephaError {\n  public readonly status = 400;\n}\n","import type { PaymentIntentEntity } from \"../entities/paymentIntents.ts\";\n\nexport interface CreateSessionResult {\n  url: string;\n  providerRef: string;\n}\n\nexport interface RefundResult {\n  providerRef: string;\n}\n\nexport interface WebhookEvent {\n  providerRef: string;\n  status: string;\n  raw: unknown;\n}\n\nexport interface CreatePaymentMethodResult {\n  providerRef: string;\n  type: string;\n  brand?: string;\n  last4?: string;\n  expMonth?: number;\n  expYear?: number;\n}\n\nexport abstract class PaymentProvider {\n  /**\n   * Create a checkout session with the PSP.\n   * Returns a URL to redirect the user to, and the PSP's reference ID.\n   */\n  abstract createSession(\n    intent: PaymentIntentEntity,\n    options: { returnUrl: string; authorize?: boolean },\n  ): Promise<CreateSessionResult>;\n\n  /**\n   * Capture a previously authorized payment.\n   * Amount can differ from the original authorization (partial capture).\n   */\n  abstract capturePayment(providerRef: string, amount: number): Promise<void>;\n\n  /**\n   * Void/cancel a previously authorized payment before capture.\n   */\n  abstract voidPayment(providerRef: string): Promise<void>;\n\n  /**\n   * Refund a captured payment (partial or full).\n   */\n  abstract refundPayment(\n    providerRef: string,\n    amount: number,\n  ): Promise<RefundResult>;\n\n  /**\n   * Parse and verify an incoming PSP webhook request.\n   *\n   * Implementations MUST verify the webhook signature before returning.\n   * Throw an error if the signature is invalid or missing — this is the\n   * only authentication on the webhook endpoint (no $secure middleware).\n   *\n   * Failure to verify signatures allows attackers to forge payment\n   * confirmations by POSTing fake webhook events.\n   */\n  abstract parseWebhook(request: Request): Promise<WebhookEvent>;\n\n  /**\n   * Store a payment method token with the PSP.\n   */\n  abstract createPaymentMethod(\n    userId: string,\n    token: string,\n  ): Promise<CreatePaymentMethodResult>;\n\n  /**\n   * Delete a stored payment method from the PSP.\n   */\n  abstract deletePaymentMethod(providerRef: string): Promise<void>;\n\n  /**\n   * Expire/cancel a checkout session on the PSP side.\n   * Called during stale session cleanup.\n   */\n  abstract expireSession(providerRef: string): Promise<void>;\n}\n","import { $inject, Alepha } from \"alepha\";\nimport { $job } from \"alepha/api/jobs\";\nimport { DateTimeProvider } from \"alepha/datetime\";\nimport { $logger } from \"alepha/logger\";\nimport { $repository } from \"alepha/orm\";\nimport {\n  type PaymentIntentEntity,\n  paymentIntents,\n} from \"../entities/paymentIntents.ts\";\nimport { type RefundEntity, refunds } from \"../entities/refunds.ts\";\nimport { PaymentError } from \"../errors/PaymentError.ts\";\nimport { PaymentProvider } from \"../providers/PaymentProvider.ts\";\n\nexport class PaymentService {\n  protected readonly alepha = $inject(Alepha);\n  protected readonly log = $logger();\n  protected readonly dateTime = $inject(DateTimeProvider);\n  protected readonly provider = $inject(PaymentProvider);\n  protected readonly intentRepo = $repository(paymentIntents);\n  protected readonly refundRepo = $repository(refunds);\n\n  /**\n   * Expires stale payment intents that have been in \"processing\" status\n   * for more than 30 minutes. Runs every 5 minutes — shares the CF wrangler\n   * trigger with the jobs sweep so no extra binding is consumed.\n   */\n  protected readonly expireStaleIntents = $job({\n    name: \"api:payments:expireStaleIntents\",\n    cron: \"*/5 * * * *\",\n    handler: async () => {\n      const cutoff = this.dateTime.now().subtract(30, \"minutes\").toISOString();\n\n      const stale = await this.intentRepo.findMany({\n        where: { status: { eq: \"processing\" }, createdAt: { lt: cutoff } },\n      });\n\n      for (const intent of stale) {\n        if (intent.providerRef) {\n          try {\n            await this.provider.expireSession(intent.providerRef);\n          } catch (error) {\n            this.log.warn(\n              `Failed to expire session for intent ${intent.id}`,\n              error,\n            );\n          }\n        }\n        await this.intentRepo.updateById(intent.id, { status: \"expired\" });\n        this.log.info(`Expired stale intent ${intent.id}`);\n      }\n    },\n  });\n\n  /**\n   * Create a new payment intent in \"created\" status.\n   */\n  public async createIntent(\n    amount: number,\n    currency: string,\n    metadata?: unknown,\n    options?: { paymentMethodId?: string; userId?: string },\n  ): Promise<PaymentIntentEntity> {\n    return await this.intentRepo.create({\n      amount,\n      currency: currency.toLowerCase(),\n      status: \"created\",\n      metadata: metadata as any,\n      paymentMethodId: options?.paymentMethodId,\n      userId: options?.userId,\n    });\n  }\n\n  /**\n   * Create a checkout session with the payment provider and\n   * transition the intent to \"processing\".\n   */\n  public async createSession(\n    intentId: string,\n    returnUrl: string,\n    authorize?: boolean,\n    userId?: string,\n  ): Promise<{ url: string; intentId: string }> {\n    const intent = await this.getIntent(intentId);\n    this.assertStatus(intent, \"created\", \"createSession\");\n\n    // Verify intent ownership if userId is provided\n    if (userId && intent.userId && intent.userId !== userId) {\n      throw new PaymentError(\"Payment intent does not belong to this user\");\n    }\n\n    // Associate intent with user if not already set\n    if (userId && !intent.userId) {\n      await this.intentRepo.updateById(intent.id, { userId });\n    }\n\n    const result = await this.provider.createSession(intent, {\n      returnUrl,\n      authorize,\n    });\n\n    await this.intentRepo.updateById(intent.id, {\n      status: \"processing\",\n      providerRef: result.providerRef,\n    });\n\n    return { url: result.url, intentId: intent.id };\n  }\n\n  /**\n   * Handle an incoming webhook from the payment provider.\n   */\n  public async handleWebhook(request: Request): Promise<void> {\n    const event = await this.provider.parseWebhook(request);\n    const intents = await this.intentRepo.findMany({\n      where: { providerRef: { eq: event.providerRef } },\n      limit: 1,\n    });\n\n    if (intents.length === 0) {\n      this.log.warn(`Webhook for unknown providerRef: ${event.providerRef}`);\n      return;\n    }\n\n    const intent = intents[0];\n    await this.handleWebhookEvent(intent.id, event.status, event.raw);\n  }\n\n  /**\n   * Process a webhook event by updating the intent status and emitting\n   * the corresponding payment event.\n   */\n  /**\n   * Valid status transitions from webhook events.\n   * Only these transitions are allowed — all others are silently ignored.\n   */\n  protected static readonly VALID_WEBHOOK_TRANSITIONS: Record<\n    string,\n    string[]\n  > = {\n    processing: [\"authorized\", \"captured\", \"failed\"],\n    authorized: [\"captured\", \"failed\"],\n  };\n\n  public async handleWebhookEvent(\n    intentId: string,\n    status: string,\n    raw?: unknown,\n  ): Promise<void> {\n    const intent = await this.getIntent(intentId);\n\n    const eventMap = {\n      authorized: \"payments:authorized\",\n      captured: \"payments:captured\",\n      failed: \"payments:failed\",\n    } as const;\n\n    type WebhookStatus = keyof typeof eventMap;\n    if (!(status in eventMap)) {\n      this.log.warn(`Unknown webhook status: ${status}`);\n      return;\n    }\n\n    const webhookStatus = status as WebhookStatus;\n\n    // Validate status transition\n    const allowed = PaymentService.VALID_WEBHOOK_TRANSITIONS[intent.status];\n    if (!allowed?.includes(webhookStatus)) {\n      this.log.warn(\n        `Ignoring webhook: cannot transition ${intent.status} → ${webhookStatus}`,\n        { intentId: intent.id },\n      );\n      return;\n    }\n\n    await this.intentRepo.updateById(intent.id, {\n      status: webhookStatus,\n      providerRaw: raw as any,\n    });\n\n    await this.alepha.events.emit(eventMap[webhookStatus], {\n      intentId: intent.id,\n      amount: intent.amount,\n      currency: intent.currency,\n      metadata: intent.metadata,\n    });\n  }\n\n  /**\n   * Capture a previously authorized payment. Optionally specify a different\n   * amount for partial capture.\n   */\n  public async capture(\n    intentId: string,\n    finalAmount?: number,\n  ): Promise<PaymentIntentEntity> {\n    const intent = await this.getIntent(intentId);\n    this.assertStatus(intent, \"authorized\", \"capture\");\n\n    const amount = finalAmount ?? intent.amount;\n    if (amount > intent.amount) {\n      throw new PaymentError(\n        `Capture amount ${amount} exceeds authorized amount ${intent.amount}`,\n      );\n    }\n\n    if (intent.providerRef) {\n      await this.provider.capturePayment(intent.providerRef, amount);\n    }\n\n    const updated = await this.intentRepo.updateById(intent.id, {\n      status: \"captured\",\n      amount,\n    });\n\n    await this.alepha.events.emit(\"payments:captured\", {\n      intentId: intent.id,\n      amount,\n      currency: intent.currency,\n      metadata: intent.metadata,\n    });\n\n    return updated;\n  }\n\n  /**\n   * Void a previously authorized payment before capture.\n   */\n  public async void(intentId: string): Promise<PaymentIntentEntity> {\n    const intent = await this.getIntent(intentId);\n    this.assertStatus(intent, \"authorized\", \"void\");\n\n    if (intent.providerRef) {\n      await this.provider.voidPayment(intent.providerRef);\n    }\n\n    const updated = await this.intentRepo.updateById(intent.id, {\n      status: \"voided\",\n    });\n\n    await this.alepha.events.emit(\"payments:voided\", {\n      intentId: intent.id,\n      amount: intent.amount,\n      currency: intent.currency,\n      metadata: intent.metadata,\n    });\n\n    return updated;\n  }\n\n  /**\n   * Refund a captured payment (partial or full).\n   */\n  public async refund(\n    intentId: string,\n    amount: number,\n    reason?: string,\n  ): Promise<RefundEntity> {\n    const intent = await this.getIntent(intentId);\n\n    // Allow refunds from both \"captured\" and \"partially_refunded\" states\n    if (\n      intent.status !== \"captured\" &&\n      intent.status !== \"partially_refunded\"\n    ) {\n      throw new PaymentError(\n        `Cannot refund: intent ${intent.id} is '${intent.status}', expected 'captured' or 'partially_refunded'`,\n      );\n    }\n\n    // Validate refund amount against remaining refundable amount\n    const existingRefunds = await this.refundRepo.findMany({\n      where: { intentId: { eq: intent.id } },\n    });\n    const totalRefunded = existingRefunds.reduce((sum, r) => sum + r.amount, 0);\n    const remaining = intent.amount - totalRefunded;\n\n    if (amount > remaining) {\n      throw new PaymentError(\n        `Refund amount ${amount} exceeds remaining refundable amount ${remaining}`,\n      );\n    }\n\n    let refundProviderRef: string | undefined;\n    if (intent.providerRef) {\n      const result = await this.provider.refundPayment(\n        intent.providerRef,\n        amount,\n      );\n      refundProviderRef = result.providerRef;\n    }\n\n    const refund = await this.refundRepo.create({\n      intentId: intent.id,\n      organizationId: intent.organizationId,\n      amount,\n      currency: intent.currency,\n      status: \"completed\",\n      reason,\n      providerRef: refundProviderRef,\n    });\n\n    // Set status based on whether fully or partially refunded\n    const newTotalRefunded = totalRefunded + amount;\n    const newStatus =\n      newTotalRefunded >= intent.amount ? \"refunded\" : \"partially_refunded\";\n    await this.intentRepo.updateById(intent.id, {\n      status: newStatus,\n    });\n\n    await this.alepha.events.emit(\"payments:refunded\", {\n      intentId: intent.id,\n      refundId: refund.id,\n      amount,\n      currency: intent.currency,\n      metadata: intent.metadata,\n    });\n\n    return refund;\n  }\n\n  /**\n   * Record a cash or offline payment directly as captured,\n   * bypassing the checkout flow.\n   */\n  public async recordCashPayment(\n    amount: number,\n    currency: string,\n    metadata?: unknown,\n  ): Promise<PaymentIntentEntity> {\n    const intent = await this.intentRepo.create({\n      amount,\n      currency: currency.toLowerCase(),\n      status: \"captured\",\n      metadata: metadata as any,\n    });\n\n    await this.alepha.events.emit(\"payments:captured\", {\n      intentId: intent.id,\n      amount,\n      currency,\n      metadata,\n    });\n\n    return intent;\n  }\n\n  /**\n   * Cancel a payment intent that has not yet entered processing.\n   */\n  public async cancel(intentId: string): Promise<PaymentIntentEntity> {\n    const intent = await this.getIntent(intentId);\n    this.assertStatus(intent, \"created\", \"cancel\");\n\n    const cancelled = await this.intentRepo.updateById(intent.id, {\n      status: \"cancelled\",\n    });\n\n    await this.alepha.events.emit(\"payments:cancelled\", {\n      intentId: intent.id,\n      amount: intent.amount,\n      currency: intent.currency,\n      metadata: intent.metadata,\n    });\n\n    return cancelled;\n  }\n\n  /**\n   * Get a payment intent by ID. Throws NotFoundError if not found.\n   */\n  public async getIntent(intentId: string): Promise<PaymentIntentEntity> {\n    return await this.intentRepo.getById(intentId);\n  }\n\n  /**\n   * Find payment intents with optional filters and pagination.\n   */\n  public async findIntents(query: {\n    status?: string;\n    userId?: string;\n    sort?: string;\n    size?: number;\n    page?: number;\n  }) {\n    const where = this.intentRepo.createQueryWhere();\n    if (query.status)\n      where.status = { eq: query.status as PaymentIntentEntity[\"status\"] };\n    if (query.userId) where.userId = { eq: query.userId };\n    return await this.intentRepo.paginate(query, { where }, { count: true });\n  }\n\n  protected assertStatus(\n    intent: PaymentIntentEntity,\n    expected: PaymentIntentEntity[\"status\"],\n    operation: string,\n  ): void {\n    if (intent.status !== expected) {\n      throw new PaymentError(\n        `Cannot ${operation}: intent ${intent.id} is '${intent.status}', expected '${expected}'`,\n      );\n    }\n  }\n}\n","import { $inject, t } from \"alepha\";\nimport { $secure } from \"alepha/security\";\nimport { $action, okSchema } from \"alepha/server\";\nimport {\n  captureIntentSchema,\n  intentQuerySchema,\n  intentResourceSchema,\n  recordCashSchema,\n  refundIntentSchema,\n} from \"../schemas/intentSchemas.ts\";\nimport { refundResourceSchema } from \"../schemas/refundSchemas.ts\";\nimport { PaymentService } from \"../services/PaymentService.ts\";\n\nexport class AdminPaymentController {\n  protected readonly url = \"/admin/payments\";\n  protected readonly group = \"admin:payments\";\n  protected readonly payments = $inject(PaymentService);\n\n  /**\n   * List payment intents with pagination and filtering.\n   */\n  public readonly listIntents = $action({\n    path: `${this.url}/intents`,\n    group: this.group,\n    use: [$secure({ permissions: [\"payments:read\"] })],\n    description: \"List payment intents\",\n    schema: {\n      query: intentQuerySchema,\n      response: t.page(intentResourceSchema),\n    },\n    handler: ({ query }) => this.payments.findIntents(query),\n  });\n\n  /**\n   * Get a payment intent by ID.\n   */\n  public readonly getIntent = $action({\n    path: `${this.url}/intents/:id`,\n    group: this.group,\n    use: [$secure({ permissions: [\"payments:read\"] })],\n    description: \"Get payment intent details\",\n    schema: {\n      params: t.object({ id: t.uuid() }),\n      response: intentResourceSchema,\n    },\n    handler: ({ params }) => this.payments.getIntent(params.id),\n  });\n\n  /**\n   * Capture an authorized intent.\n   */\n  public readonly captureIntent = $action({\n    method: \"POST\",\n    path: `${this.url}/intents/:id/capture`,\n    group: this.group,\n    use: [$secure({ permissions: [\"payments:write\"] })],\n    description: \"Capture an authorized payment intent\",\n    schema: {\n      params: t.object({ id: t.uuid() }),\n      body: captureIntentSchema,\n      response: intentResourceSchema,\n    },\n    handler: ({ params, body }) =>\n      this.payments.capture(params.id, body.amount),\n  });\n\n  /**\n   * Void an authorized intent.\n   */\n  public readonly voidIntent = $action({\n    method: \"POST\",\n    path: `${this.url}/intents/:id/void`,\n    group: this.group,\n    use: [$secure({ permissions: [\"payments:write\"] })],\n    description: \"Void an authorized payment intent\",\n    schema: {\n      params: t.object({ id: t.uuid() }),\n      response: intentResourceSchema,\n    },\n    handler: ({ params }) => this.payments.void(params.id),\n  });\n\n  /**\n   * Refund a captured intent.\n   */\n  public readonly refundIntent = $action({\n    method: \"POST\",\n    path: `${this.url}/intents/:id/refund`,\n    group: this.group,\n    use: [$secure({ permissions: [\"payments:write\"] })],\n    description: \"Issue partial or full refund\",\n    schema: {\n      params: t.object({ id: t.uuid() }),\n      body: refundIntentSchema,\n      response: refundResourceSchema,\n    },\n    handler: ({ params, body }) =>\n      this.payments.refund(params.id, body.amount, body.reason),\n  });\n\n  /**\n   * Cancel a created intent.\n   */\n  public readonly cancelIntent = $action({\n    method: \"POST\",\n    path: `${this.url}/intents/:id/cancel`,\n    group: this.group,\n    use: [$secure({ permissions: [\"payments:write\"] })],\n    description: \"Cancel a created payment intent\",\n    schema: {\n      params: t.object({ id: t.uuid() }),\n      response: intentResourceSchema,\n    },\n    handler: ({ params }) => this.payments.cancel(params.id),\n  });\n\n  /**\n   * Record a cash payment.\n   */\n  public readonly recordCash = $action({\n    method: \"POST\",\n    path: `${this.url}/cash`,\n    group: this.group,\n    use: [$secure({ permissions: [\"payments:write\"] })],\n    description: \"Record a cash payment\",\n    schema: {\n      body: recordCashSchema,\n      response: intentResourceSchema,\n    },\n    handler: ({ body }) =>\n      this.payments.recordCashPayment(\n        body.amount,\n        body.currency,\n        body.metadata,\n      ),\n  });\n\n  /**\n   * PSP webhook endpoint (not under /admin, no auth — verified by provider).\n   */\n  public readonly webhook = $action({\n    method: \"POST\",\n    path: \"/payments/webhook\",\n    group: this.group,\n    description: \"PSP webhook endpoint\",\n    schema: {\n      response: okSchema,\n    },\n    handler: async (request) => {\n      await this.payments.handleWebhook(request.raw.web!.req);\n      return { ok: true };\n    },\n  });\n}\n","import { type Static, t } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\n\nexport const paymentMethods = $entity({\n  name: \"payment_methods\",\n  schema: t.object({\n    id: db.primaryKey(t.uuid()),\n    version: db.version(),\n    createdAt: db.createdAt(),\n    updatedAt: db.updatedAt(),\n    organizationId: db.organization(),\n    userId: t.uuid(),\n    type: t.text({ size: \"short\" }),\n    brand: t.optional(t.text({ size: \"short\" })),\n    last4: t.optional(t.text({ size: \"short\" })),\n    expMonth: t.optional(t.integer()),\n    expYear: t.optional(t.integer()),\n    isDefault: t.boolean(),\n    providerRef: t.text(),\n  }),\n  indexes: [\"userId\", \"organizationId\"],\n});\n\nexport type PaymentMethodEntity = Static<typeof paymentMethods.schema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\nimport { paymentMethods } from \"../entities/paymentMethods.ts\";\n\nexport const addPaymentMethodSchema = t.object({\n  token: t.text(),\n});\n\nexport type AddPaymentMethod = Static<typeof addPaymentMethodSchema>;\n\nexport const paymentMethodResourceSchema = paymentMethods.schema;\n\nexport type PaymentMethodResource = Static<typeof paymentMethodResourceSchema>;\n","import { $inject } from \"alepha\";\nimport { $logger } from \"alepha/logger\";\nimport { $repository } from \"alepha/orm\";\nimport {\n  type PaymentMethodEntity,\n  paymentMethods,\n} from \"../entities/paymentMethods.ts\";\nimport { PaymentError } from \"../errors/PaymentError.ts\";\nimport { PaymentProvider } from \"../providers/PaymentProvider.ts\";\n\nexport class PaymentMethodService {\n  protected readonly log = $logger();\n  protected readonly provider = $inject(PaymentProvider);\n  protected readonly methodRepo = $repository(paymentMethods);\n\n  public async addPaymentMethod(\n    userId: string,\n    organizationId: string,\n    token: string,\n  ): Promise<PaymentMethodEntity> {\n    const result = await this.provider.createPaymentMethod(userId, token);\n\n    const existing = await this.methodRepo.findMany({\n      where: { userId: { eq: userId } },\n    });\n\n    return await this.methodRepo.create({\n      userId,\n      organizationId,\n      type: result.type,\n      brand: result.brand,\n      last4: result.last4,\n      expMonth: result.expMonth,\n      expYear: result.expYear,\n      isDefault: existing.length === 0,\n      providerRef: result.providerRef,\n    });\n  }\n\n  public async listPaymentMethods(\n    userId: string,\n  ): Promise<PaymentMethodEntity[]> {\n    return await this.methodRepo.findMany({\n      where: { userId: { eq: userId } },\n    });\n  }\n\n  public async removePaymentMethod(\n    methodId: string,\n    userId: string,\n  ): Promise<void> {\n    const method = await this.methodRepo.getById(methodId);\n    if (method.userId !== userId) {\n      throw new PaymentError(\"Cannot remove another user's payment method\");\n    }\n\n    await this.provider.deletePaymentMethod(method.providerRef);\n    await this.methodRepo.deleteById(method.id);\n  }\n\n  public async setDefault(\n    methodId: string,\n    userId: string,\n  ): Promise<PaymentMethodEntity> {\n    const method = await this.methodRepo.getById(methodId);\n    if (method.userId !== userId) {\n      throw new PaymentError(\"Cannot modify another user's payment method\");\n    }\n\n    const userMethods = await this.methodRepo.findMany({\n      where: { userId: { eq: userId } },\n    });\n\n    for (const m of userMethods) {\n      if (m.isDefault) {\n        await this.methodRepo.updateById(m.id, { isDefault: false });\n      }\n    }\n\n    return await this.methodRepo.updateById(method.id, { isDefault: true });\n  }\n}\n","import { $inject, t } from \"alepha\";\nimport { $secure } from \"alepha/security\";\nimport { $action, okSchema } from \"alepha/server\";\nimport { PaymentError } from \"../errors/PaymentError.ts\";\nimport {\n  checkoutResponseSchema,\n  createCheckoutSchema,\n} from \"../schemas/intentSchemas.ts\";\nimport {\n  addPaymentMethodSchema,\n  paymentMethodResourceSchema,\n} from \"../schemas/paymentMethodSchemas.ts\";\nimport { PaymentMethodService } from \"../services/PaymentMethodService.ts\";\nimport { PaymentService } from \"../services/PaymentService.ts\";\n\nexport class PaymentController {\n  protected readonly url = \"/payments\";\n  protected readonly group = \"payments\";\n  protected readonly payments = $inject(PaymentService);\n  protected readonly paymentMethods = $inject(PaymentMethodService);\n\n  /**\n   * List the current user's saved payment methods.\n   */\n  public readonly listPaymentMethods = $action({\n    path: `${this.url}/payment-methods`,\n    group: this.group,\n    use: [$secure()],\n    description: \"List current user's saved payment methods\",\n    schema: {\n      response: t.array(paymentMethodResourceSchema),\n    },\n    handler: ({ user }) => this.paymentMethods.listPaymentMethods(user.id),\n  });\n\n  /**\n   * Add a new payment method.\n   */\n  public readonly addPaymentMethod = $action({\n    method: \"POST\",\n    path: `${this.url}/payment-methods`,\n    group: this.group,\n    use: [$secure()],\n    description: \"Tokenize and store a new payment method\",\n    schema: {\n      body: addPaymentMethodSchema,\n      response: paymentMethodResourceSchema,\n    },\n    handler: ({ body, user }) => {\n      if (!user.organization) {\n        throw new PaymentError(\n          \"Organization is required to add a payment method\",\n        );\n      }\n      return this.paymentMethods.addPaymentMethod(\n        user.id,\n        user.organization,\n        body.token,\n      );\n    },\n  });\n\n  /**\n   * Remove a payment method.\n   */\n  public readonly removePaymentMethod = $action({\n    method: \"DELETE\",\n    path: `${this.url}/payment-methods/:id`,\n    group: this.group,\n    use: [$secure()],\n    description: \"Remove own payment method\",\n    schema: {\n      params: t.object({ id: t.uuid() }),\n      response: okSchema,\n    },\n    handler: async ({ params, user }) => {\n      await this.paymentMethods.removePaymentMethod(params.id, user.id);\n      return { ok: true, id: params.id };\n    },\n  });\n\n  /**\n   * Set a payment method as default.\n   */\n  public readonly setDefaultPaymentMethod = $action({\n    method: \"PATCH\",\n    path: `${this.url}/payment-methods/:id/default`,\n    group: this.group,\n    use: [$secure()],\n    description: \"Set as default payment method\",\n    schema: {\n      params: t.object({ id: t.uuid() }),\n      response: paymentMethodResourceSchema,\n    },\n    handler: ({ params, user }) =>\n      this.paymentMethods.setDefault(params.id, user.id),\n  });\n\n  /**\n   * Create a checkout session.\n   */\n  public readonly createCheckout = $action({\n    method: \"POST\",\n    path: `${this.url}/checkout`,\n    group: this.group,\n    use: [$secure()],\n    description: \"Create checkout session and return URL\",\n    schema: {\n      body: createCheckoutSchema,\n      response: checkoutResponseSchema,\n    },\n    handler: ({ body, user }) =>\n      this.payments.createSession(\n        body.intentId,\n        body.returnUrl,\n        body.authorize,\n        user.id,\n      ),\n  });\n}\n","import { randomUUID } from \"node:crypto\";\nimport type { PaymentIntentEntity } from \"../entities/paymentIntents.ts\";\nimport type {\n  CreatePaymentMethodResult,\n  CreateSessionResult,\n  PaymentProvider,\n  RefundResult,\n  WebhookEvent,\n} from \"./PaymentProvider.ts\";\n\ninterface MemoryCharge {\n  providerRef: string;\n  amount: number;\n  status: string;\n}\n\ninterface MemoryRefund {\n  providerRef: string;\n  chargeRef: string;\n  amount: number;\n}\n\nexport class MemoryPaymentProvider implements PaymentProvider {\n  protected readonly charges: Map<string, MemoryCharge> = new Map();\n  protected readonly refundRecords: Map<string, MemoryRefund> = new Map();\n  protected readonly methods: Map<string, CreatePaymentMethodResult> =\n    new Map();\n  protected readonly expiredSessions: Set<string> = new Set();\n\n  public async createSession(\n    intent: PaymentIntentEntity,\n    options: { returnUrl: string; authorize?: boolean },\n  ): Promise<CreateSessionResult> {\n    const providerRef = `mem_session_${randomUUID()}`;\n    const status = options.authorize ? \"authorized\" : \"captured\";\n    this.charges.set(providerRef, {\n      providerRef,\n      amount: intent.amount,\n      status,\n    });\n    return {\n      url: `/payments/mock-checkout/${intent.id}`,\n      providerRef,\n    };\n  }\n\n  public async capturePayment(\n    providerRef: string,\n    amount: number,\n  ): Promise<void> {\n    const charge = this.charges.get(providerRef);\n    if (charge) {\n      charge.status = \"captured\";\n      charge.amount = amount;\n    }\n  }\n\n  public async voidPayment(providerRef: string): Promise<void> {\n    const charge = this.charges.get(providerRef);\n    if (charge) {\n      charge.status = \"voided\";\n    }\n  }\n\n  public async refundPayment(\n    providerRef: string,\n    amount: number,\n  ): Promise<RefundResult> {\n    const refundRef = `mem_refund_${randomUUID()}`;\n    this.refundRecords.set(refundRef, {\n      providerRef: refundRef,\n      chargeRef: providerRef,\n      amount,\n    });\n    return { providerRef: refundRef };\n  }\n\n  public async parseWebhook(request: Request): Promise<WebhookEvent> {\n    const body = (await request.json()) as {\n      providerRef: string;\n      status: string;\n    };\n    return {\n      providerRef: body.providerRef,\n      status: body.status,\n      raw: body,\n    };\n  }\n\n  public async createPaymentMethod(\n    userId: string,\n    token: string,\n  ): Promise<CreatePaymentMethodResult> {\n    const providerRef = `mem_pm_${randomUUID()}`;\n    const result: CreatePaymentMethodResult = {\n      providerRef,\n      type: \"card\",\n      brand: \"visa\",\n      last4: \"4242\",\n      expMonth: 12,\n      expYear: 2030,\n    };\n    this.methods.set(providerRef, result);\n    return result;\n  }\n\n  public async deletePaymentMethod(providerRef: string): Promise<void> {\n    this.methods.delete(providerRef);\n  }\n\n  public async expireSession(providerRef: string): Promise<void> {\n    this.expiredSessions.add(providerRef);\n  }\n\n  // --- Test assertion helpers ---\n\n  public wasCharged(providerRef: string): boolean {\n    const charge = this.charges.get(providerRef);\n    return charge?.status === \"captured\";\n  }\n\n  public wasRefunded(providerRef: string): boolean {\n    return Array.from(this.refundRecords.values()).some(\n      (r) => r.chargeRef === providerRef,\n    );\n  }\n\n  public wasExpired(providerRef: string): boolean {\n    return this.expiredSessions.has(providerRef);\n  }\n\n  public getCharges(): MemoryCharge[] {\n    return Array.from(this.charges.values());\n  }\n\n  public getRefunds(): MemoryRefund[] {\n    return Array.from(this.refundRecords.values());\n  }\n}\n","import { $module } from \"alepha\";\nimport { AdminPaymentController } from \"./controllers/AdminPaymentController.ts\";\nimport { PaymentController } from \"./controllers/PaymentController.ts\";\nimport { MemoryPaymentProvider } from \"./providers/MemoryPaymentProvider.ts\";\nimport { PaymentProvider } from \"./providers/PaymentProvider.ts\";\nimport { PaymentMethodService } from \"./services/PaymentMethodService.ts\";\nimport { PaymentService } from \"./services/PaymentService.ts\";\n\nexport * from \"./controllers/AdminPaymentController.ts\";\nexport * from \"./controllers/PaymentController.ts\";\nexport * from \"./entities/paymentIntents.ts\";\nexport * from \"./entities/paymentMethods.ts\";\nexport * from \"./entities/refunds.ts\";\nexport * from \"./errors/PaymentError.ts\";\nexport * from \"./providers/MemoryPaymentProvider.ts\";\nexport * from \"./providers/PaymentProvider.ts\";\nexport * from \"./schemas/intentSchemas.ts\";\nexport * from \"./schemas/paymentMethodSchemas.ts\";\nexport * from \"./schemas/refundSchemas.ts\";\nexport * from \"./services/PaymentMethodService.ts\";\nexport * from \"./services/PaymentService.ts\";\n\ndeclare module \"alepha\" {\n  interface Hooks {\n    \"payments:authorized\": {\n      intentId: string;\n      amount: number;\n      currency: string;\n      metadata?: unknown;\n    };\n    \"payments:captured\": {\n      intentId: string;\n      amount: number;\n      currency: string;\n      metadata?: unknown;\n    };\n    \"payments:failed\": {\n      intentId: string;\n      amount: number;\n      currency: string;\n      metadata?: unknown;\n    };\n    \"payments:voided\": {\n      intentId: string;\n      amount: number;\n      currency: string;\n      metadata?: unknown;\n    };\n    \"payments:refunded\": {\n      intentId: string;\n      refundId: string;\n      amount: number;\n      currency: string;\n      metadata?: unknown;\n    };\n    \"payments:cancelled\": {\n      intentId: string;\n      amount: number;\n      currency: string;\n      metadata?: unknown;\n    };\n  }\n}\n\nexport const AlephaApiPayments = $module({\n  name: \"alepha.api.payments\",\n  services: [\n    AdminPaymentController,\n    PaymentController,\n    PaymentProvider,\n    PaymentService,\n    PaymentMethodService,\n  ],\n  variants: [MemoryPaymentProvider],\n  register: (alepha) => {\n    alepha.with({\n      optional: true,\n      provide: PaymentProvider,\n      use: MemoryPaymentProvider,\n    });\n  },\n});\n"],"mappings":";;;;;;;;;AAGA,MAAa,iBAAiB,QAAQ;CACpC,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,MAAM,CAAC;EAC3B,SAAS,GAAG,SAAS;EACrB,WAAW,GAAG,WAAW;EACzB,WAAW,GAAG,WAAW;EACzB,gBAAgB,GAAG,cAAc;EACjC,QAAQ,EAAE,SAAS;EACnB,UAAU,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;EACnC,QAAQ,EAAE,KAAK;GACb;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACD,CAAC;EACF,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC;EACjC,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC;EACjC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC;EAC9B,iBAAiB,EAAE,SAAS,EAAE,MAAM,CAAC;EACrC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;EAC7B,CAAC;CACF,SAAS;EAAC;EAAU;EAAkB;EAAU;EAAY;CAC7D,CAAC;;;AC3BF,MAAa,qBAAqB,EAAE,OAAO;CACzC,QAAQ,EAAE,QAAQ,EAAE,SAAS,GAAG,CAAC;CACjC,UAAU,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;CACnC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC;CAC9B,iBAAiB,EAAE,SAAS,EAAE,MAAM,CAAC;CACtC,CAAC;AAIF,MAAa,uBAAuB,EAAE,OAAO;CAC3C,UAAU,EAAE,MAAM;CAClB,WAAW,EAAE,MAAM;CACnB,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC;CACnC,CAAC;AAIF,MAAa,yBAAyB,EAAE,OAAO;CAC7C,KAAK,EAAE,MAAM;CACb,UAAU,EAAE,MAAM;CACnB,CAAC;AAIF,MAAa,sBAAsB,EAAE,OAAO,EAC1C,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,GAAG,CAAC,CAAC,EAC9C,CAAC;AAIF,MAAa,qBAAqB,EAAE,OAAO;CACzC,QAAQ,EAAE,QAAQ,EAAE,SAAS,GAAG,CAAC;CACjC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;CAC7B,CAAC;AAIF,MAAa,mBAAmB,EAAE,OAAO;CACvC,QAAQ,EAAE,QAAQ,EAAE,SAAS,GAAG,CAAC;CACjC,UAAU,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;CACnC,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC;CAC/B,CAAC;AAIF,MAAa,oBAAoB,EAAE,OAAO,iBAAiB;CACzD,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,oBAAoB,CAAC,CAAC;CAC/D,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,qBAAqB,CAAC,CAAC;CACjE,CAAC;AAIF,MAAa,uBAAuB,eAAe;;;ACtDnD,MAAa,UAAU,QAAQ;CAC7B,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,MAAM,CAAC;EAC3B,SAAS,GAAG,SAAS;EACrB,WAAW,GAAG,WAAW;EACzB,WAAW,GAAG,WAAW;EACzB,gBAAgB,GAAG,cAAc;EACjC,UAAU,EAAE,MAAM;EAClB,QAAQ,EAAE,SAAS;EACnB,UAAU,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;EACnC,QAAQ,EAAE,KAAK;GAAC;GAAW;GAAc;GAAa;GAAS,CAAC;EAChE,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC;EAC5B,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC;EAClC,CAAC;CACF,SAAS;EAAC;EAAY;EAAkB;EAAS;CAClD,CAAC;;;AChBF,MAAa,uBAAuB,QAAQ;;;ACD5C,IAAa,eAAb,cAAkC,YAAY;CAC5C,SAAyB;;;;ACuB3B,IAAsB,kBAAtB,MAAsC;;;ACbtC,IAAa,iBAAb,MAAa,eAAe;CAC1B,SAA4B,QAAQ,OAAO;CAC3C,MAAyB,SAAS;CAClC,WAA8B,QAAQ,iBAAiB;CACvD,WAA8B,QAAQ,gBAAgB;CACtD,aAAgC,YAAY,eAAe;CAC3D,aAAgC,YAAY,QAAQ;;;;;;CAOpD,qBAAwC,KAAK;EAC3C,MAAM;EACN,MAAM;EACN,SAAS,YAAY;GACnB,MAAM,SAAS,KAAK,SAAS,KAAK,CAAC,SAAS,IAAI,UAAU,CAAC,aAAa;GAExE,MAAM,QAAQ,MAAM,KAAK,WAAW,SAAS,EAC3C,OAAO;IAAE,QAAQ,EAAE,IAAI,cAAc;IAAE,WAAW,EAAE,IAAI,QAAQ;IAAE,EACnE,CAAC;AAEF,QAAK,MAAM,UAAU,OAAO;AAC1B,QAAI,OAAO,YACT,KAAI;AACF,WAAM,KAAK,SAAS,cAAc,OAAO,YAAY;aAC9C,OAAO;AACd,UAAK,IAAI,KACP,uCAAuC,OAAO,MAC9C,MACD;;AAGL,UAAM,KAAK,WAAW,WAAW,OAAO,IAAI,EAAE,QAAQ,WAAW,CAAC;AAClE,SAAK,IAAI,KAAK,wBAAwB,OAAO,KAAK;;;EAGvD,CAAC;;;;CAKF,MAAa,aACX,QACA,UACA,UACA,SAC8B;AAC9B,SAAO,MAAM,KAAK,WAAW,OAAO;GAClC;GACA,UAAU,SAAS,aAAa;GAChC,QAAQ;GACE;GACV,iBAAiB,SAAS;GAC1B,QAAQ,SAAS;GAClB,CAAC;;;;;;CAOJ,MAAa,cACX,UACA,WACA,WACA,QAC4C;EAC5C,MAAM,SAAS,MAAM,KAAK,UAAU,SAAS;AAC7C,OAAK,aAAa,QAAQ,WAAW,gBAAgB;AAGrD,MAAI,UAAU,OAAO,UAAU,OAAO,WAAW,OAC/C,OAAM,IAAI,aAAa,8CAA8C;AAIvE,MAAI,UAAU,CAAC,OAAO,OACpB,OAAM,KAAK,WAAW,WAAW,OAAO,IAAI,EAAE,QAAQ,CAAC;EAGzD,MAAM,SAAS,MAAM,KAAK,SAAS,cAAc,QAAQ;GACvD;GACA;GACD,CAAC;AAEF,QAAM,KAAK,WAAW,WAAW,OAAO,IAAI;GAC1C,QAAQ;GACR,aAAa,OAAO;GACrB,CAAC;AAEF,SAAO;GAAE,KAAK,OAAO;GAAK,UAAU,OAAO;GAAI;;;;;CAMjD,MAAa,cAAc,SAAiC;EAC1D,MAAM,QAAQ,MAAM,KAAK,SAAS,aAAa,QAAQ;EACvD,MAAM,UAAU,MAAM,KAAK,WAAW,SAAS;GAC7C,OAAO,EAAE,aAAa,EAAE,IAAI,MAAM,aAAa,EAAE;GACjD,OAAO;GACR,CAAC;AAEF,MAAI,QAAQ,WAAW,GAAG;AACxB,QAAK,IAAI,KAAK,oCAAoC,MAAM,cAAc;AACtE;;EAGF,MAAM,SAAS,QAAQ;AACvB,QAAM,KAAK,mBAAmB,OAAO,IAAI,MAAM,QAAQ,MAAM,IAAI;;;;;;;;;;CAWnE,OAA0B,4BAGtB;EACF,YAAY;GAAC;GAAc;GAAY;GAAS;EAChD,YAAY,CAAC,YAAY,SAAS;EACnC;CAED,MAAa,mBACX,UACA,QACA,KACe;EACf,MAAM,SAAS,MAAM,KAAK,UAAU,SAAS;EAE7C,MAAM,WAAW;GACf,YAAY;GACZ,UAAU;GACV,QAAQ;GACT;AAGD,MAAI,EAAE,UAAU,WAAW;AACzB,QAAK,IAAI,KAAK,2BAA2B,SAAS;AAClD;;EAGF,MAAM,gBAAgB;AAItB,MAAI,CADY,eAAe,0BAA0B,OAAO,SAClD,SAAS,cAAc,EAAE;AACrC,QAAK,IAAI,KACP,uCAAuC,OAAO,OAAO,KAAK,iBAC1D,EAAE,UAAU,OAAO,IAAI,CACxB;AACD;;AAGF,QAAM,KAAK,WAAW,WAAW,OAAO,IAAI;GAC1C,QAAQ;GACR,aAAa;GACd,CAAC;AAEF,QAAM,KAAK,OAAO,OAAO,KAAK,SAAS,gBAAgB;GACrD,UAAU,OAAO;GACjB,QAAQ,OAAO;GACf,UAAU,OAAO;GACjB,UAAU,OAAO;GAClB,CAAC;;;;;;CAOJ,MAAa,QACX,UACA,aAC8B;EAC9B,MAAM,SAAS,MAAM,KAAK,UAAU,SAAS;AAC7C,OAAK,aAAa,QAAQ,cAAc,UAAU;EAElD,MAAM,SAAS,eAAe,OAAO;AACrC,MAAI,SAAS,OAAO,OAClB,OAAM,IAAI,aACR,kBAAkB,OAAO,6BAA6B,OAAO,SAC9D;AAGH,MAAI,OAAO,YACT,OAAM,KAAK,SAAS,eAAe,OAAO,aAAa,OAAO;EAGhE,MAAM,UAAU,MAAM,KAAK,WAAW,WAAW,OAAO,IAAI;GAC1D,QAAQ;GACR;GACD,CAAC;AAEF,QAAM,KAAK,OAAO,OAAO,KAAK,qBAAqB;GACjD,UAAU,OAAO;GACjB;GACA,UAAU,OAAO;GACjB,UAAU,OAAO;GAClB,CAAC;AAEF,SAAO;;;;;CAMT,MAAa,KAAK,UAAgD;EAChE,MAAM,SAAS,MAAM,KAAK,UAAU,SAAS;AAC7C,OAAK,aAAa,QAAQ,cAAc,OAAO;AAE/C,MAAI,OAAO,YACT,OAAM,KAAK,SAAS,YAAY,OAAO,YAAY;EAGrD,MAAM,UAAU,MAAM,KAAK,WAAW,WAAW,OAAO,IAAI,EAC1D,QAAQ,UACT,CAAC;AAEF,QAAM,KAAK,OAAO,OAAO,KAAK,mBAAmB;GAC/C,UAAU,OAAO;GACjB,QAAQ,OAAO;GACf,UAAU,OAAO;GACjB,UAAU,OAAO;GAClB,CAAC;AAEF,SAAO;;;;;CAMT,MAAa,OACX,UACA,QACA,QACuB;EACvB,MAAM,SAAS,MAAM,KAAK,UAAU,SAAS;AAG7C,MACE,OAAO,WAAW,cAClB,OAAO,WAAW,qBAElB,OAAM,IAAI,aACR,yBAAyB,OAAO,GAAG,OAAO,OAAO,OAAO,gDACzD;EAOH,MAAM,iBAAgB,MAHQ,KAAK,WAAW,SAAS,EACrD,OAAO,EAAE,UAAU,EAAE,IAAI,OAAO,IAAI,EAAE,EACvC,CAAC,EACoC,QAAQ,KAAK,MAAM,MAAM,EAAE,QAAQ,EAAE;EAC3E,MAAM,YAAY,OAAO,SAAS;AAElC,MAAI,SAAS,UACX,OAAM,IAAI,aACR,iBAAiB,OAAO,uCAAuC,YAChE;EAGH,IAAI;AACJ,MAAI,OAAO,YAKT,sBAAoB,MAJC,KAAK,SAAS,cACjC,OAAO,aACP,OACD,EAC0B;EAG7B,MAAM,SAAS,MAAM,KAAK,WAAW,OAAO;GAC1C,UAAU,OAAO;GACjB,gBAAgB,OAAO;GACvB;GACA,UAAU,OAAO;GACjB,QAAQ;GACR;GACA,aAAa;GACd,CAAC;EAIF,MAAM,YADmB,gBAAgB,UAEnB,OAAO,SAAS,aAAa;AACnD,QAAM,KAAK,WAAW,WAAW,OAAO,IAAI,EAC1C,QAAQ,WACT,CAAC;AAEF,QAAM,KAAK,OAAO,OAAO,KAAK,qBAAqB;GACjD,UAAU,OAAO;GACjB,UAAU,OAAO;GACjB;GACA,UAAU,OAAO;GACjB,UAAU,OAAO;GAClB,CAAC;AAEF,SAAO;;;;;;CAOT,MAAa,kBACX,QACA,UACA,UAC8B;EAC9B,MAAM,SAAS,MAAM,KAAK,WAAW,OAAO;GAC1C;GACA,UAAU,SAAS,aAAa;GAChC,QAAQ;GACE;GACX,CAAC;AAEF,QAAM,KAAK,OAAO,OAAO,KAAK,qBAAqB;GACjD,UAAU,OAAO;GACjB;GACA;GACA;GACD,CAAC;AAEF,SAAO;;;;;CAMT,MAAa,OAAO,UAAgD;EAClE,MAAM,SAAS,MAAM,KAAK,UAAU,SAAS;AAC7C,OAAK,aAAa,QAAQ,WAAW,SAAS;EAE9C,MAAM,YAAY,MAAM,KAAK,WAAW,WAAW,OAAO,IAAI,EAC5D,QAAQ,aACT,CAAC;AAEF,QAAM,KAAK,OAAO,OAAO,KAAK,sBAAsB;GAClD,UAAU,OAAO;GACjB,QAAQ,OAAO;GACf,UAAU,OAAO;GACjB,UAAU,OAAO;GAClB,CAAC;AAEF,SAAO;;;;;CAMT,MAAa,UAAU,UAAgD;AACrE,SAAO,MAAM,KAAK,WAAW,QAAQ,SAAS;;;;;CAMhD,MAAa,YAAY,OAMtB;EACD,MAAM,QAAQ,KAAK,WAAW,kBAAkB;AAChD,MAAI,MAAM,OACR,OAAM,SAAS,EAAE,IAAI,MAAM,QAAyC;AACtE,MAAI,MAAM,OAAQ,OAAM,SAAS,EAAE,IAAI,MAAM,QAAQ;AACrD,SAAO,MAAM,KAAK,WAAW,SAAS,OAAO,EAAE,OAAO,EAAE,EAAE,OAAO,MAAM,CAAC;;CAG1E,aACE,QACA,UACA,WACM;AACN,MAAI,OAAO,WAAW,SACpB,OAAM,IAAI,aACR,UAAU,UAAU,WAAW,OAAO,GAAG,OAAO,OAAO,OAAO,eAAe,SAAS,GACvF;;;;;AClYP,IAAa,yBAAb,MAAoC;CAClC,MAAyB;CACzB,QAA2B;CAC3B,WAA8B,QAAQ,eAAe;;;;CAKrD,cAA8B,QAAQ;EACpC,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,gBAAgB,EAAE,CAAC,CAAC;EAClD,aAAa;EACb,QAAQ;GACN,OAAO;GACP,UAAU,EAAE,KAAK,qBAAqB;GACvC;EACD,UAAU,EAAE,YAAY,KAAK,SAAS,YAAY,MAAM;EACzD,CAAC;;;;CAKF,YAA4B,QAAQ;EAClC,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,gBAAgB,EAAE,CAAC,CAAC;EAClD,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;GAClC,UAAU;GACX;EACD,UAAU,EAAE,aAAa,KAAK,SAAS,UAAU,OAAO,GAAG;EAC5D,CAAC;;;;CAKF,gBAAgC,QAAQ;EACtC,QAAQ;EACR,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,iBAAiB,EAAE,CAAC,CAAC;EACnD,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;GAClC,MAAM;GACN,UAAU;GACX;EACD,UAAU,EAAE,QAAQ,WAClB,KAAK,SAAS,QAAQ,OAAO,IAAI,KAAK,OAAO;EAChD,CAAC;;;;CAKF,aAA6B,QAAQ;EACnC,QAAQ;EACR,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,iBAAiB,EAAE,CAAC,CAAC;EACnD,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;GAClC,UAAU;GACX;EACD,UAAU,EAAE,aAAa,KAAK,SAAS,KAAK,OAAO,GAAG;EACvD,CAAC;;;;CAKF,eAA+B,QAAQ;EACrC,QAAQ;EACR,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,iBAAiB,EAAE,CAAC,CAAC;EACnD,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;GAClC,MAAM;GACN,UAAU;GACX;EACD,UAAU,EAAE,QAAQ,WAClB,KAAK,SAAS,OAAO,OAAO,IAAI,KAAK,QAAQ,KAAK,OAAO;EAC5D,CAAC;;;;CAKF,eAA+B,QAAQ;EACrC,QAAQ;EACR,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,iBAAiB,EAAE,CAAC,CAAC;EACnD,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;GAClC,UAAU;GACX;EACD,UAAU,EAAE,aAAa,KAAK,SAAS,OAAO,OAAO,GAAG;EACzD,CAAC;;;;CAKF,aAA6B,QAAQ;EACnC,QAAQ;EACR,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,QAAQ,EAAE,aAAa,CAAC,iBAAiB,EAAE,CAAC,CAAC;EACnD,aAAa;EACb,QAAQ;GACN,MAAM;GACN,UAAU;GACX;EACD,UAAU,EAAE,WACV,KAAK,SAAS,kBACZ,KAAK,QACL,KAAK,UACL,KAAK,SACN;EACJ,CAAC;;;;CAKF,UAA0B,QAAQ;EAChC,QAAQ;EACR,MAAM;EACN,OAAO,KAAK;EACZ,aAAa;EACb,QAAQ,EACN,UAAU,UACX;EACD,SAAS,OAAO,YAAY;AAC1B,SAAM,KAAK,SAAS,cAAc,QAAQ,IAAI,IAAK,IAAI;AACvD,UAAO,EAAE,IAAI,MAAM;;EAEtB,CAAC;;;;ACrJJ,MAAa,iBAAiB,QAAQ;CACpC,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,MAAM,CAAC;EAC3B,SAAS,GAAG,SAAS;EACrB,WAAW,GAAG,WAAW;EACzB,WAAW,GAAG,WAAW;EACzB,gBAAgB,GAAG,cAAc;EACjC,QAAQ,EAAE,MAAM;EAChB,MAAM,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;EAC/B,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC,CAAC;EAC5C,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC,CAAC;EAC5C,UAAU,EAAE,SAAS,EAAE,SAAS,CAAC;EACjC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC;EAChC,WAAW,EAAE,SAAS;EACtB,aAAa,EAAE,MAAM;EACtB,CAAC;CACF,SAAS,CAAC,UAAU,iBAAiB;CACtC,CAAC;;;ACjBF,MAAa,yBAAyB,EAAE,OAAO,EAC7C,OAAO,EAAE,MAAM,EAChB,CAAC;AAIF,MAAa,8BAA8B,eAAe;;;ACA1D,IAAa,uBAAb,MAAkC;CAChC,MAAyB,SAAS;CAClC,WAA8B,QAAQ,gBAAgB;CACtD,aAAgC,YAAY,eAAe;CAE3D,MAAa,iBACX,QACA,gBACA,OAC8B;EAC9B,MAAM,SAAS,MAAM,KAAK,SAAS,oBAAoB,QAAQ,MAAM;EAErE,MAAM,WAAW,MAAM,KAAK,WAAW,SAAS,EAC9C,OAAO,EAAE,QAAQ,EAAE,IAAI,QAAQ,EAAE,EAClC,CAAC;AAEF,SAAO,MAAM,KAAK,WAAW,OAAO;GAClC;GACA;GACA,MAAM,OAAO;GACb,OAAO,OAAO;GACd,OAAO,OAAO;GACd,UAAU,OAAO;GACjB,SAAS,OAAO;GAChB,WAAW,SAAS,WAAW;GAC/B,aAAa,OAAO;GACrB,CAAC;;CAGJ,MAAa,mBACX,QACgC;AAChC,SAAO,MAAM,KAAK,WAAW,SAAS,EACpC,OAAO,EAAE,QAAQ,EAAE,IAAI,QAAQ,EAAE,EAClC,CAAC;;CAGJ,MAAa,oBACX,UACA,QACe;EACf,MAAM,SAAS,MAAM,KAAK,WAAW,QAAQ,SAAS;AACtD,MAAI,OAAO,WAAW,OACpB,OAAM,IAAI,aAAa,8CAA8C;AAGvE,QAAM,KAAK,SAAS,oBAAoB,OAAO,YAAY;AAC3D,QAAM,KAAK,WAAW,WAAW,OAAO,GAAG;;CAG7C,MAAa,WACX,UACA,QAC8B;EAC9B,MAAM,SAAS,MAAM,KAAK,WAAW,QAAQ,SAAS;AACtD,MAAI,OAAO,WAAW,OACpB,OAAM,IAAI,aAAa,8CAA8C;EAGvE,MAAM,cAAc,MAAM,KAAK,WAAW,SAAS,EACjD,OAAO,EAAE,QAAQ,EAAE,IAAI,QAAQ,EAAE,EAClC,CAAC;AAEF,OAAK,MAAM,KAAK,YACd,KAAI,EAAE,UACJ,OAAM,KAAK,WAAW,WAAW,EAAE,IAAI,EAAE,WAAW,OAAO,CAAC;AAIhE,SAAO,MAAM,KAAK,WAAW,WAAW,OAAO,IAAI,EAAE,WAAW,MAAM,CAAC;;;;;AChE3E,IAAa,oBAAb,MAA+B;CAC7B,MAAyB;CACzB,QAA2B;CAC3B,WAA8B,QAAQ,eAAe;CACrD,iBAAoC,QAAQ,qBAAqB;;;;CAKjE,qBAAqC,QAAQ;EAC3C,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,SAAS,CAAC;EAChB,aAAa;EACb,QAAQ,EACN,UAAU,EAAE,MAAM,4BAA4B,EAC/C;EACD,UAAU,EAAE,WAAW,KAAK,eAAe,mBAAmB,KAAK,GAAG;EACvE,CAAC;;;;CAKF,mBAAmC,QAAQ;EACzC,QAAQ;EACR,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,SAAS,CAAC;EAChB,aAAa;EACb,QAAQ;GACN,MAAM;GACN,UAAU;GACX;EACD,UAAU,EAAE,MAAM,WAAW;AAC3B,OAAI,CAAC,KAAK,aACR,OAAM,IAAI,aACR,mDACD;AAEH,UAAO,KAAK,eAAe,iBACzB,KAAK,IACL,KAAK,cACL,KAAK,MACN;;EAEJ,CAAC;;;;CAKF,sBAAsC,QAAQ;EAC5C,QAAQ;EACR,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,SAAS,CAAC;EAChB,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;GAClC,UAAU;GACX;EACD,SAAS,OAAO,EAAE,QAAQ,WAAW;AACnC,SAAM,KAAK,eAAe,oBAAoB,OAAO,IAAI,KAAK,GAAG;AACjE,UAAO;IAAE,IAAI;IAAM,IAAI,OAAO;IAAI;;EAErC,CAAC;;;;CAKF,0BAA0C,QAAQ;EAChD,QAAQ;EACR,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,SAAS,CAAC;EAChB,aAAa;EACb,QAAQ;GACN,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;GAClC,UAAU;GACX;EACD,UAAU,EAAE,QAAQ,WAClB,KAAK,eAAe,WAAW,OAAO,IAAI,KAAK,GAAG;EACrD,CAAC;;;;CAKF,iBAAiC,QAAQ;EACvC,QAAQ;EACR,MAAM,GAAG,KAAK,IAAI;EAClB,OAAO,KAAK;EACZ,KAAK,CAAC,SAAS,CAAC;EAChB,aAAa;EACb,QAAQ;GACN,MAAM;GACN,UAAU;GACX;EACD,UAAU,EAAE,MAAM,WAChB,KAAK,SAAS,cACZ,KAAK,UACL,KAAK,WACL,KAAK,WACL,KAAK,GACN;EACJ,CAAC;;;;AChGJ,IAAa,wBAAb,MAA8D;CAC5D,0BAAwD,IAAI,KAAK;CACjE,gCAA8D,IAAI,KAAK;CACvE,0BACE,IAAI,KAAK;CACX,kCAAkD,IAAI,KAAK;CAE3D,MAAa,cACX,QACA,SAC8B;EAC9B,MAAM,cAAc,eAAe,YAAY;EAC/C,MAAM,SAAS,QAAQ,YAAY,eAAe;AAClD,OAAK,QAAQ,IAAI,aAAa;GAC5B;GACA,QAAQ,OAAO;GACf;GACD,CAAC;AACF,SAAO;GACL,KAAK,2BAA2B,OAAO;GACvC;GACD;;CAGH,MAAa,eACX,aACA,QACe;EACf,MAAM,SAAS,KAAK,QAAQ,IAAI,YAAY;AAC5C,MAAI,QAAQ;AACV,UAAO,SAAS;AAChB,UAAO,SAAS;;;CAIpB,MAAa,YAAY,aAAoC;EAC3D,MAAM,SAAS,KAAK,QAAQ,IAAI,YAAY;AAC5C,MAAI,OACF,QAAO,SAAS;;CAIpB,MAAa,cACX,aACA,QACuB;EACvB,MAAM,YAAY,cAAc,YAAY;AAC5C,OAAK,cAAc,IAAI,WAAW;GAChC,aAAa;GACb,WAAW;GACX;GACD,CAAC;AACF,SAAO,EAAE,aAAa,WAAW;;CAGnC,MAAa,aAAa,SAAyC;EACjE,MAAM,OAAQ,MAAM,QAAQ,MAAM;AAIlC,SAAO;GACL,aAAa,KAAK;GAClB,QAAQ,KAAK;GACb,KAAK;GACN;;CAGH,MAAa,oBACX,QACA,OACoC;EACpC,MAAM,cAAc,UAAU,YAAY;EAC1C,MAAM,SAAoC;GACxC;GACA,MAAM;GACN,OAAO;GACP,OAAO;GACP,UAAU;GACV,SAAS;GACV;AACD,OAAK,QAAQ,IAAI,aAAa,OAAO;AACrC,SAAO;;CAGT,MAAa,oBAAoB,aAAoC;AACnE,OAAK,QAAQ,OAAO,YAAY;;CAGlC,MAAa,cAAc,aAAoC;AAC7D,OAAK,gBAAgB,IAAI,YAAY;;CAKvC,WAAkB,aAA8B;AAE9C,SADe,KAAK,QAAQ,IAAI,YACnB,EAAE,WAAW;;CAG5B,YAAmB,aAA8B;AAC/C,SAAO,MAAM,KAAK,KAAK,cAAc,QAAQ,CAAC,CAAC,MAC5C,MAAM,EAAE,cAAc,YACxB;;CAGH,WAAkB,aAA8B;AAC9C,SAAO,KAAK,gBAAgB,IAAI,YAAY;;CAG9C,aAAoC;AAClC,SAAO,MAAM,KAAK,KAAK,QAAQ,QAAQ,CAAC;;CAG1C,aAAoC;AAClC,SAAO,MAAM,KAAK,KAAK,cAAc,QAAQ,CAAC;;;;;ACxElD,MAAa,oBAAoB,QAAQ;CACvC,MAAM;CACN,UAAU;EACR;EACA;EACA;EACA;EACA;EACD;CACD,UAAU,CAAC,sBAAsB;CACjC,WAAW,WAAW;AACpB,SAAO,KAAK;GACV,UAAU;GACV,SAAS;GACT,KAAK;GACN,CAAC;;CAEL,CAAC"}

package/dist/api/users/index.browser.js

@@ -77,6 +77,12 @@ const sessions = $entity({
 		refreshToken: t.uuid(),
 		userId: db.ref(t.uuid(), () => users.cols.id),
 		expiresAt: t.datetime(),
+		/**
+		* Last time the session was used to refresh an access token.
+		* Used by realm `refreshToken.expirationIdle` to invalidate idle sessions.
+		* `null` on existing rows pre-migration — falls back to `createdAt`.
+		*/
+		lastUsedAt: t.optional(t.datetime()),
 		ip: t.optional(t.text()),
 		userAgent: t.optional(t.object({
 			os: t.text(),

package/dist/api/users/index.browser.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.browser.js","names":[],"sources":["../../../src/api/users/entities/users.ts","../../../src/api/users/entities/identities.ts","../../../src/api/users/entities/sessions.ts","../../../src/api/users/schemas/registerSchema.ts","../../../src/api/users/schemas/resetPasswordSchema.ts","../../../src/api/users/index.browser.ts"],"sourcesContent":["import { type Static, t } from \"alepha\";\nimport { $entity, db, sql } from \"alepha/orm\";\n\nexport const DEFAULT_USER_REALM_NAME = \"default\";\n\nexport const users = $entity({\n  name: \"users\",\n  schema: t.object({\n    id: db.primaryKey(t.uuid()),\n    version: db.version(),\n    createdAt: db.createdAt(),\n    updatedAt: db.updatedAt(),\n\n    realm: db.default(t.text(), DEFAULT_USER_REALM_NAME),\n\n    username: t.optional(\n      t.shortText({\n        minLength: 3,\n        maxLength: 30,\n        // pattern is handled at the realm settings level\n      }),\n    ),\n\n    email: t.optional(t.string({ format: \"email\" })),\n\n    phoneNumber: t.optional(t.e164()),\n\n    roles: db.default(t.array(t.string()), []),\n    firstName: t.optional(t.string()),\n    lastName: t.optional(t.string()),\n    picture: t.optional(t.string()),\n    enabled: db.default(t.boolean(), true),\n\n    emailVerified: db.default(t.boolean(), false),\n\n    organizationId: db.organization(),\n  }),\n  indexes: [\n    {\n      expressions: (self) => [self.realm, sql`LOWER(${self.username})`],\n      unique: true,\n      name: \"users_realm_username_lower_idx\",\n    },\n    { columns: [\"realm\", \"email\"], unique: true },\n    { columns: [\"realm\", \"phoneNumber\"], unique: true },\n  ],\n});\n\nexport type UserEntity = Static<typeof users.schema>;\n","import { type Static, t } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\nimport { users } from \"./users.ts\";\n\nexport const identities = $entity({\n  name: \"identities\",\n  schema: t.object({\n    id: db.primaryKey(t.uuid()),\n    version: db.version(),\n    createdAt: db.createdAt(),\n    updatedAt: db.updatedAt(),\n    userId: db.ref(t.uuid(), () => users.cols.id),\n    password: t.optional(t.text()),\n    provider: t.text(),\n    providerUserId: t.optional(t.text()),\n    providerData: t.optional(t.json()),\n  }),\n  indexes: [\n    \"userId\",\n    \"provider\",\n    { columns: [\"userId\", \"provider\"] },\n    { columns: [\"provider\", \"providerUserId\"], unique: true },\n  ],\n});\n\nexport type IdentityEntity = Static<typeof identities.schema>;\n","import { type Static, t } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\nimport { users } from \"./users.ts\";\n\nexport const sessions = $entity({\n  name: \"sessions\",\n  schema: t.object({\n    id: db.primaryKey(t.uuid()),\n    version: db.version(),\n    createdAt: db.createdAt(),\n    updatedAt: db.updatedAt(),\n    refreshToken: t.uuid(),\n    userId: db.ref(t.uuid(), () => users.cols.id),\n    expiresAt: t.datetime(),\n    ip: t.optional(t.text()),\n    userAgent: t.optional(\n      t.object({\n        os: t.text(),\n        browser: t.text(),\n        device: t.enum([\"MOBILE\", \"DESKTOP\", \"TABLET\"]),\n      }),\n    ),\n  }),\n  indexes: [\"userId\", \"expiresAt\", { column: \"refreshToken\", unique: true }],\n});\n\nexport type SessionEntity = Static<typeof sessions.schema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const registerSchema = t.object({\n  username: t.string({\n    minLength: 3,\n    maxLength: 20,\n    pattern: /^[a-zA-Z0-9_]+$/,\n    description: \"Username for the new account\",\n  }),\n  email: t.email({\n    description: \"Email address for the new account\",\n  }),\n  password: t.string({\n    minLength: 8,\n    description: \"Password for the new account\",\n  }),\n  confirmPassword: t.string({\n    minLength: 8,\n    description: \"Confirmation of the password\",\n  }),\n  firstName: t.optional(\n    t.string({\n      maxLength: 100,\n      description: \"User's first name\",\n    }),\n  ),\n  lastName: t.optional(\n    t.string({\n      maxLength: 100,\n      description: \"User's last name\",\n    }),\n  ),\n});\n\nexport type RegisterInput = Static<typeof registerSchema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const resetPasswordRequestSchema = t.object({\n  email: t.email({\n    description: \"Email address to send password reset link\",\n  }),\n});\n\nexport const resetPasswordSchema = t.object({\n  token: t.string({\n    description: \"Password reset token from email\",\n  }),\n  password: t.string({\n    minLength: 8,\n    description: \"New password\",\n  }),\n  confirmPassword: t.string({\n    minLength: 8,\n    description: \"Confirmation of the new password\",\n  }),\n});\n\nexport type ResetPasswordRequest = Static<typeof resetPasswordRequestSchema>;\nexport type ResetPasswordInput = Static<typeof resetPasswordSchema>;\n","import { $module } from \"alepha\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./entities/identities.ts\";\nexport * from \"./entities/sessions.ts\";\nexport * from \"./entities/users.ts\";\nexport * from \"./schemas/registerSchema.ts\";\nexport * from \"./schemas/resetPasswordSchema.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport const AlephaApiUsers = $module({\n  name: \"alepha.api.users\",\n  services: [],\n});\n"],"mappings":";;;AAGA,MAAa,0BAA0B;AAEvC,MAAa,QAAQ,QAAQ;CAC3B,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,MAAM,CAAC;EAC3B,SAAS,GAAG,SAAS;EACrB,WAAW,GAAG,WAAW;EACzB,WAAW,GAAG,WAAW;EAEzB,OAAO,GAAG,QAAQ,EAAE,MAAM,EAAE,wBAAwB;EAEpD,UAAU,EAAE,SACV,EAAE,UAAU;GACV,WAAW;GACX,WAAW;GAEZ,CAAC,CACH;EAED,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,SAAS,CAAC,CAAC;EAEhD,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC;EAEjC,OAAO,GAAG,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;EAC1C,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC;EACjC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC;EAChC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;EAC/B,SAAS,GAAG,QAAQ,EAAE,SAAS,EAAE,KAAK;EAEtC,eAAe,GAAG,QAAQ,EAAE,SAAS,EAAE,MAAM;EAE7C,gBAAgB,GAAG,cAAc;EAClC,CAAC;CACF,SAAS;EACP;GACE,cAAc,SAAS,CAAC,KAAK,OAAO,GAAG,SAAS,KAAK,SAAS,GAAG;GACjE,QAAQ;GACR,MAAM;GACP;EACD;GAAE,SAAS,CAAC,SAAS,QAAQ;GAAE,QAAQ;GAAM;EAC7C;GAAE,SAAS,CAAC,SAAS,cAAc;GAAE,QAAQ;GAAM;EACpD;CACF,CAAC;;;AC1CF,MAAa,aAAa,QAAQ;CAChC,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,MAAM,CAAC;EAC3B,SAAS,GAAG,SAAS;EACrB,WAAW,GAAG,WAAW;EACzB,WAAW,GAAG,WAAW;EACzB,QAAQ,GAAG,IAAI,EAAE,MAAM,QAAQ,MAAM,KAAK,GAAG;EAC7C,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC;EAC9B,UAAU,EAAE,MAAM;EAClB,gBAAgB,EAAE,SAAS,EAAE,MAAM,CAAC;EACpC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC;EACnC,CAAC;CACF,SAAS;EACP;EACA;EACA,EAAE,SAAS,CAAC,UAAU,WAAW,EAAE;EACnC;GAAE,SAAS,CAAC,YAAY,iBAAiB;GAAE,QAAQ;GAAM;EAC1D;CACF,CAAC;;;ACnBF,MAAa,WAAW,QAAQ;CAC9B,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,MAAM,CAAC;EAC3B,SAAS,GAAG,SAAS;EACrB,WAAW,GAAG,WAAW;EACzB,WAAW,GAAG,WAAW;EACzB,cAAc,EAAE,MAAM;EACtB,QAAQ,GAAG,IAAI,EAAE,MAAM,QAAQ,MAAM,KAAK,GAAG;EAC7C,WAAW,EAAE,UAAU;EACvB,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC;EACxB,WAAW,EAAE,SACX,EAAE,OAAO;GACP,IAAI,EAAE,MAAM;GACZ,SAAS,EAAE,MAAM;GACjB,QAAQ,EAAE,KAAK;IAAC;IAAU;IAAW;IAAS,CAAC;GAChD,CAAC,CACH;EACF,CAAC;CACF,SAAS;EAAC;EAAU;EAAa;GAAE,QAAQ;GAAgB,QAAQ;GAAM;EAAC;CAC3E,CAAC;;;ACrBF,MAAa,iBAAiB,EAAE,OAAO;CACrC,UAAU,EAAE,OAAO;EACjB,WAAW;EACX,WAAW;EACX,SAAS;EACT,aAAa;EACd,CAAC;CACF,OAAO,EAAE,MAAM,EACb,aAAa,qCACd,CAAC;CACF,UAAU,EAAE,OAAO;EACjB,WAAW;EACX,aAAa;EACd,CAAC;CACF,iBAAiB,EAAE,OAAO;EACxB,WAAW;EACX,aAAa;EACd,CAAC;CACF,WAAW,EAAE,SACX,EAAE,OAAO;EACP,WAAW;EACX,aAAa;EACd,CAAC,CACH;CACD,UAAU,EAAE,SACV,EAAE,OAAO;EACP,WAAW;EACX,aAAa;EACd,CAAC,CACH;CACF,CAAC;;;AC9BF,MAAa,6BAA6B,EAAE,OAAO,EACjD,OAAO,EAAE,MAAM,EACb,aAAa,6CACd,CAAC,EACH,CAAC;AAEF,MAAa,sBAAsB,EAAE,OAAO;CAC1C,OAAO,EAAE,OAAO,EACd,aAAa,mCACd,CAAC;CACF,UAAU,EAAE,OAAO;EACjB,WAAW;EACX,aAAa;EACd,CAAC;CACF,iBAAiB,EAAE,OAAO;EACxB,WAAW;EACX,aAAa;EACd,CAAC;CACH,CAAC;;;ACTF,MAAa,iBAAiB,QAAQ;CACpC,MAAM;CACN,UAAU,EAAE;CACb,CAAC"}
+{"version":3,"file":"index.browser.js","names":[],"sources":["../../../src/api/users/entities/users.ts","../../../src/api/users/entities/identities.ts","../../../src/api/users/entities/sessions.ts","../../../src/api/users/schemas/registerSchema.ts","../../../src/api/users/schemas/resetPasswordSchema.ts","../../../src/api/users/index.browser.ts"],"sourcesContent":["import { type Static, t } from \"alepha\";\nimport { $entity, db, sql } from \"alepha/orm\";\n\nexport const DEFAULT_USER_REALM_NAME = \"default\";\n\nexport const users = $entity({\n  name: \"users\",\n  schema: t.object({\n    id: db.primaryKey(t.uuid()),\n    version: db.version(),\n    createdAt: db.createdAt(),\n    updatedAt: db.updatedAt(),\n\n    realm: db.default(t.text(), DEFAULT_USER_REALM_NAME),\n\n    username: t.optional(\n      t.shortText({\n        minLength: 3,\n        maxLength: 30,\n        // pattern is handled at the realm settings level\n      }),\n    ),\n\n    email: t.optional(t.string({ format: \"email\" })),\n\n    phoneNumber: t.optional(t.e164()),\n\n    roles: db.default(t.array(t.string()), []),\n    firstName: t.optional(t.string()),\n    lastName: t.optional(t.string()),\n    picture: t.optional(t.string()),\n    enabled: db.default(t.boolean(), true),\n\n    emailVerified: db.default(t.boolean(), false),\n\n    organizationId: db.organization(),\n  }),\n  indexes: [\n    {\n      expressions: (self) => [self.realm, sql`LOWER(${self.username})`],\n      unique: true,\n      name: \"users_realm_username_lower_idx\",\n    },\n    { columns: [\"realm\", \"email\"], unique: true },\n    { columns: [\"realm\", \"phoneNumber\"], unique: true },\n  ],\n});\n\nexport type UserEntity = Static<typeof users.schema>;\n","import { type Static, t } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\nimport { users } from \"./users.ts\";\n\nexport const identities = $entity({\n  name: \"identities\",\n  schema: t.object({\n    id: db.primaryKey(t.uuid()),\n    version: db.version(),\n    createdAt: db.createdAt(),\n    updatedAt: db.updatedAt(),\n    userId: db.ref(t.uuid(), () => users.cols.id),\n    password: t.optional(t.text()),\n    provider: t.text(),\n    providerUserId: t.optional(t.text()),\n    providerData: t.optional(t.json()),\n  }),\n  indexes: [\n    \"userId\",\n    \"provider\",\n    { columns: [\"userId\", \"provider\"] },\n    { columns: [\"provider\", \"providerUserId\"], unique: true },\n  ],\n});\n\nexport type IdentityEntity = Static<typeof identities.schema>;\n","import { type Static, t } from \"alepha\";\nimport { $entity, db } from \"alepha/orm\";\nimport { users } from \"./users.ts\";\n\nexport const sessions = $entity({\n  name: \"sessions\",\n  schema: t.object({\n    id: db.primaryKey(t.uuid()),\n    version: db.version(),\n    createdAt: db.createdAt(),\n    updatedAt: db.updatedAt(),\n    refreshToken: t.uuid(),\n    userId: db.ref(t.uuid(), () => users.cols.id),\n    expiresAt: t.datetime(),\n    /**\n     * Last time the session was used to refresh an access token.\n     * Used by realm `refreshToken.expirationIdle` to invalidate idle sessions.\n     * `null` on existing rows pre-migration — falls back to `createdAt`.\n     */\n    lastUsedAt: t.optional(t.datetime()),\n    ip: t.optional(t.text()),\n    userAgent: t.optional(\n      t.object({\n        os: t.text(),\n        browser: t.text(),\n        device: t.enum([\"MOBILE\", \"DESKTOP\", \"TABLET\"]),\n      }),\n    ),\n  }),\n  indexes: [\"userId\", \"expiresAt\", { column: \"refreshToken\", unique: true }],\n});\n\nexport type SessionEntity = Static<typeof sessions.schema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const registerSchema = t.object({\n  username: t.string({\n    minLength: 3,\n    maxLength: 20,\n    pattern: /^[a-zA-Z0-9_]+$/,\n    description: \"Username for the new account\",\n  }),\n  email: t.email({\n    description: \"Email address for the new account\",\n  }),\n  password: t.string({\n    minLength: 8,\n    description: \"Password for the new account\",\n  }),\n  confirmPassword: t.string({\n    minLength: 8,\n    description: \"Confirmation of the password\",\n  }),\n  firstName: t.optional(\n    t.string({\n      maxLength: 100,\n      description: \"User's first name\",\n    }),\n  ),\n  lastName: t.optional(\n    t.string({\n      maxLength: 100,\n      description: \"User's last name\",\n    }),\n  ),\n});\n\nexport type RegisterInput = Static<typeof registerSchema>;\n","import type { Static } from \"alepha\";\nimport { t } from \"alepha\";\n\nexport const resetPasswordRequestSchema = t.object({\n  email: t.email({\n    description: \"Email address to send password reset link\",\n  }),\n});\n\nexport const resetPasswordSchema = t.object({\n  token: t.string({\n    description: \"Password reset token from email\",\n  }),\n  password: t.string({\n    minLength: 8,\n    description: \"New password\",\n  }),\n  confirmPassword: t.string({\n    minLength: 8,\n    description: \"Confirmation of the new password\",\n  }),\n});\n\nexport type ResetPasswordRequest = Static<typeof resetPasswordRequestSchema>;\nexport type ResetPasswordInput = Static<typeof resetPasswordSchema>;\n","import { $module } from \"alepha\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport * from \"./entities/identities.ts\";\nexport * from \"./entities/sessions.ts\";\nexport * from \"./entities/users.ts\";\nexport * from \"./schemas/registerSchema.ts\";\nexport * from \"./schemas/resetPasswordSchema.ts\";\n\n// ---------------------------------------------------------------------------------------------------------------------\n\nexport const AlephaApiUsers = $module({\n  name: \"alepha.api.users\",\n  services: [],\n});\n"],"mappings":";;;AAGA,MAAa,0BAA0B;AAEvC,MAAa,QAAQ,QAAQ;CAC3B,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,MAAM,CAAC;EAC3B,SAAS,GAAG,SAAS;EACrB,WAAW,GAAG,WAAW;EACzB,WAAW,GAAG,WAAW;EAEzB,OAAO,GAAG,QAAQ,EAAE,MAAM,EAAE,wBAAwB;EAEpD,UAAU,EAAE,SACV,EAAE,UAAU;GACV,WAAW;GACX,WAAW;GAEZ,CAAC,CACH;EAED,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,SAAS,CAAC,CAAC;EAEhD,aAAa,EAAE,SAAS,EAAE,MAAM,CAAC;EAEjC,OAAO,GAAG,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;EAC1C,WAAW,EAAE,SAAS,EAAE,QAAQ,CAAC;EACjC,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC;EAChC,SAAS,EAAE,SAAS,EAAE,QAAQ,CAAC;EAC/B,SAAS,GAAG,QAAQ,EAAE,SAAS,EAAE,KAAK;EAEtC,eAAe,GAAG,QAAQ,EAAE,SAAS,EAAE,MAAM;EAE7C,gBAAgB,GAAG,cAAc;EAClC,CAAC;CACF,SAAS;EACP;GACE,cAAc,SAAS,CAAC,KAAK,OAAO,GAAG,SAAS,KAAK,SAAS,GAAG;GACjE,QAAQ;GACR,MAAM;GACP;EACD;GAAE,SAAS,CAAC,SAAS,QAAQ;GAAE,QAAQ;GAAM;EAC7C;GAAE,SAAS,CAAC,SAAS,cAAc;GAAE,QAAQ;GAAM;EACpD;CACF,CAAC;;;AC1CF,MAAa,aAAa,QAAQ;CAChC,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,MAAM,CAAC;EAC3B,SAAS,GAAG,SAAS;EACrB,WAAW,GAAG,WAAW;EACzB,WAAW,GAAG,WAAW;EACzB,QAAQ,GAAG,IAAI,EAAE,MAAM,QAAQ,MAAM,KAAK,GAAG;EAC7C,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC;EAC9B,UAAU,EAAE,MAAM;EAClB,gBAAgB,EAAE,SAAS,EAAE,MAAM,CAAC;EACpC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC;EACnC,CAAC;CACF,SAAS;EACP;EACA;EACA,EAAE,SAAS,CAAC,UAAU,WAAW,EAAE;EACnC;GAAE,SAAS,CAAC,YAAY,iBAAiB;GAAE,QAAQ;GAAM;EAC1D;CACF,CAAC;;;ACnBF,MAAa,WAAW,QAAQ;CAC9B,MAAM;CACN,QAAQ,EAAE,OAAO;EACf,IAAI,GAAG,WAAW,EAAE,MAAM,CAAC;EAC3B,SAAS,GAAG,SAAS;EACrB,WAAW,GAAG,WAAW;EACzB,WAAW,GAAG,WAAW;EACzB,cAAc,EAAE,MAAM;EACtB,QAAQ,GAAG,IAAI,EAAE,MAAM,QAAQ,MAAM,KAAK,GAAG;EAC7C,WAAW,EAAE,UAAU;;;;;;EAMvB,YAAY,EAAE,SAAS,EAAE,UAAU,CAAC;EACpC,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC;EACxB,WAAW,EAAE,SACX,EAAE,OAAO;GACP,IAAI,EAAE,MAAM;GACZ,SAAS,EAAE,MAAM;GACjB,QAAQ,EAAE,KAAK;IAAC;IAAU;IAAW;IAAS,CAAC;GAChD,CAAC,CACH;EACF,CAAC;CACF,SAAS;EAAC;EAAU;EAAa;GAAE,QAAQ;GAAgB,QAAQ;GAAM;EAAC;CAC3E,CAAC;;;AC3BF,MAAa,iBAAiB,EAAE,OAAO;CACrC,UAAU,EAAE,OAAO;EACjB,WAAW;EACX,WAAW;EACX,SAAS;EACT,aAAa;EACd,CAAC;CACF,OAAO,EAAE,MAAM,EACb,aAAa,qCACd,CAAC;CACF,UAAU,EAAE,OAAO;EACjB,WAAW;EACX,aAAa;EACd,CAAC;CACF,iBAAiB,EAAE,OAAO;EACxB,WAAW;EACX,aAAa;EACd,CAAC;CACF,WAAW,EAAE,SACX,EAAE,OAAO;EACP,WAAW;EACX,aAAa;EACd,CAAC,CACH;CACD,UAAU,EAAE,SACV,EAAE,OAAO;EACP,WAAW;EACX,aAAa;EACd,CAAC,CACH;CACF,CAAC;;;AC9BF,MAAa,6BAA6B,EAAE,OAAO,EACjD,OAAO,EAAE,MAAM,EACb,aAAa,6CACd,CAAC,EACH,CAAC;AAEF,MAAa,sBAAsB,EAAE,OAAO;CAC1C,OAAO,EAAE,OAAO,EACd,aAAa,mCACd,CAAC;CACF,UAAU,EAAE,OAAO;EACjB,WAAW;EACX,aAAa;EACd,CAAC;CACF,iBAAiB,EAAE,OAAO;EACxB,WAAW;EACX,aAAa;EACd,CAAC;CACH,CAAC;;;ACTF,MAAa,iBAAiB,QAAQ;CACpC,MAAM;CACN,UAAU,EAAE;CACb,CAAC"}