autumn-js 1.2.26 → 1.2.28

package/dist/backend/chunk-I7CD6EB6.mjs

@@ -0,0 +1,28 @@
+// src/backend/core/utils/sanitizeBody.ts
+var DEFAULT_PROTECTED_BODY_FIELDS = [
+  "customerId",
+  "customerData",
+  "name",
+  "email",
+  "stripeId"
+];
+var CUSTOMER_PROTECTED_BODY_FIELDS = [
+  ...DEFAULT_PROTECTED_BODY_FIELDS,
+  "metadata"
+];
+var sanitizeBody = (body, protectedFields = DEFAULT_PROTECTED_BODY_FIELDS) => {
+  const rawBody = body || {};
+  const sanitized = {};
+  for (const [key, value] of Object.entries(rawBody)) {
+    if (!protectedFields.includes(key)) {
+      sanitized[key] = value;
+    }
+  }
+  return sanitized;
+};
+
+export {
+  DEFAULT_PROTECTED_BODY_FIELDS,
+  CUSTOMER_PROTECTED_BODY_FIELDS,
+  sanitizeBody
+};

package/dist/backend/{chunk-55C2WWXQ.mjs → chunk-IXUCY7AU.mjs}

@@ -1,12 +1,12 @@
+import {
+  sanitizeBody
+} from "./chunk-I7CD6EB6.mjs";
 import {
   resolveIdentity
 } from "./chunk-TBQ27LIK.mjs";
 import {
   transformSdkError
 } from "./chunk-J44WR3QZ.mjs";
-import {
-  sanitizeBody
-} from "./chunk-Z6QP3YEA.mjs";
 import {
   backendSuccess,
   isBackendResult
@@ -15,9 +15,10 @@ import {
 // src/backend/core/handlers/executeRoute.ts
 var buildSdkArgs = ({
   body,
-  identity
+  identity,
+  route
 }) => {
-  const args = sanitizeBody(body);
+  const args = sanitizeBody(body, route.protectedBodyFields);
   if (identity.customerId) {
     args.customerId = identity.customerId;
   }
@@ -50,7 +51,7 @@ var executeRoute = async ({
       return transformSdkError(error);
     }
   }
-  const sdkArgs = buildSdkArgs({ body, identity });
+  const sdkArgs = buildSdkArgs({ body, identity, route });
   try {
     const result = await route.sdkMethod(autumn, sdkArgs);
     return backendSuccess({ body: result });

package/dist/backend/{chunk-D4BQG3DH.mjs → chunk-JNHJR2RN.mjs}

@@ -1,6 +1,6 @@
 import {
   createCoreHandler
-} from "./chunk-ZVZEA5YL.mjs";
+} from "./chunk-RBV55GF7.mjs";
 
 // src/backend/adapters/next.ts
 import { NextResponse } from "next/server";

package/dist/backend/{chunk-KJTWQSMK.mjs → chunk-N5DL6VA7.mjs}

@@ -1,6 +1,6 @@
 import {
   createCoreHandler
-} from "./chunk-ZVZEA5YL.mjs";
+} from "./chunk-RBV55GF7.mjs";
 
 // src/backend/adapters/fetch.ts
 function autumnHandler(options) {

package/dist/backend/{chunk-MPNJ2AXO.mjs → chunk-PG3VMMBU.mjs}

@@ -1,6 +1,6 @@
 import {
   createCoreHandler
-} from "./chunk-ZVZEA5YL.mjs";
+} from "./chunk-RBV55GF7.mjs";
 
 // src/backend/adapters/express.ts
 function autumnHandler(options) {

package/dist/backend/{chunk-ZVZEA5YL.mjs → chunk-RBV55GF7.mjs}

@@ -1,15 +1,15 @@
-import {
-  Autumn
-} from "./chunk-UCGI7CYU.mjs";
-import {
-  executeRoute
-} from "./chunk-55C2WWXQ.mjs";
 import {
   buildRouter
 } from "./chunk-UAR3TMWI.mjs";
+import {
+  Autumn
+} from "./chunk-GTZJYVV6.mjs";
 import {
   routeConfigs
-} from "./chunk-MAU6WWTL.mjs";
+} from "./chunk-W6NPZLA5.mjs";
+import {
+  executeRoute
+} from "./chunk-IXUCY7AU.mjs";
 import {
   secretKeyCheck
 } from "./chunk-VZIMT7AO.mjs";

package/dist/backend/{chunk-MAU6WWTL.mjs → chunk-W6NPZLA5.mjs}

@@ -1,6 +1,7 @@
 import {
+  CUSTOMER_PROTECTED_BODY_FIELDS,
   sanitizeBody
-} from "./chunk-Z6QP3YEA.mjs";
+} from "./chunk-I7CD6EB6.mjs";
 import {
   backendError,
   backendSuccess
@@ -97,7 +98,9 @@ var attachAddItemTierSchema = z2.object({
 var attachInvoiceModeSchema = z2.object({
   enabled: z2.boolean(),
   enablePlanImmediately: z2.union([z2.boolean(), z2.undefined()]).optional(),
-  finalize: z2.union([z2.boolean(), z2.undefined()]).optional()
+  finalize: z2.union([z2.boolean(), z2.undefined()]).optional(),
+  invoiceTemplateId: z2.union([z2.string(), z2.undefined()]).optional(),
+  netTermsDays: z2.union([z2.number(), z2.undefined()]).optional()
 });
 var attachAttachDiscountSchema = z2.object({
   rewardId: z2.union([z2.string(), z2.undefined()]).optional(),
@@ -231,7 +234,9 @@ var attachCustomizeOutboundSchema = z2.object({
 var attachInvoiceModeOutboundSchema = z2.object({
   enabled: z2.boolean(),
   enable_plan_immediately: z2.boolean(),
-  finalize: z2.boolean()
+  finalize: z2.boolean(),
+  invoice_template_id: z2.union([z2.string(), z2.undefined()]).optional(),
+  net_terms_days: z2.union([z2.number(), z2.undefined()]).optional()
 });
 var attachAttachDiscountOutboundSchema = z2.object({
   reward_id: z2.union([z2.string(), z2.undefined()]).optional(),
@@ -787,7 +792,9 @@ var multiAttachFeatureQuantitySchema = z7.object({
 var multiAttachInvoiceModeSchema = z7.object({
   enabled: z7.boolean(),
   enablePlanImmediately: z7.union([z7.boolean(), z7.undefined()]).optional(),
-  finalize: z7.union([z7.boolean(), z7.undefined()]).optional()
+  finalize: z7.union([z7.boolean(), z7.undefined()]).optional(),
+  invoiceTemplateId: z7.union([z7.string(), z7.undefined()]).optional(),
+  netTermsDays: z7.union([z7.number(), z7.undefined()]).optional()
 });
 var multiAttachAttachDiscountSchema = z7.object({
   rewardId: z7.union([z7.string(), z7.undefined()]).optional(),
@@ -878,7 +885,9 @@ var multiAttachFreeTrialParamsOutboundSchema = z7.object({
 var multiAttachInvoiceModeOutboundSchema = z7.object({
   enabled: z7.boolean(),
   enable_plan_immediately: z7.boolean(),
-  finalize: z7.boolean()
+  finalize: z7.boolean(),
+  invoice_template_id: z7.union([z7.string(), z7.undefined()]).optional(),
+  net_terms_days: z7.union([z7.number(), z7.undefined()]).optional()
 });
 var multiAttachAttachDiscountOutboundSchema = z7.object({
   reward_id: z7.union([z7.string(), z7.undefined()]).optional(),
@@ -1086,7 +1095,9 @@ var previewAttachAddItemTierSchema = z9.object({
 var previewAttachInvoiceModeSchema = z9.object({
   enabled: z9.boolean(),
   enablePlanImmediately: z9.union([z9.boolean(), z9.undefined()]).optional(),
-  finalize: z9.union([z9.boolean(), z9.undefined()]).optional()
+  finalize: z9.union([z9.boolean(), z9.undefined()]).optional(),
+  invoiceTemplateId: z9.union([z9.string(), z9.undefined()]).optional(),
+  netTermsDays: z9.union([z9.number(), z9.undefined()]).optional()
 });
 var previewAttachAttachDiscountSchema = z9.object({
   rewardId: z9.union([z9.string(), z9.undefined()]).optional(),
@@ -1290,7 +1301,9 @@ var previewAttachCustomizeOutboundSchema = z9.object({
 var previewAttachInvoiceModeOutboundSchema = z9.object({
   enabled: z9.boolean(),
   enable_plan_immediately: z9.boolean(),
-  finalize: z9.boolean()
+  finalize: z9.boolean(),
+  invoice_template_id: z9.union([z9.string(), z9.undefined()]).optional(),
+  net_terms_days: z9.union([z9.number(), z9.undefined()]).optional()
 });
 var previewAttachAttachDiscountOutboundSchema = z9.object({
   reward_id: z9.union([z9.string(), z9.undefined()]).optional(),
@@ -1541,7 +1554,9 @@ var previewMultiAttachPlanFeatureQuantitySchema = z10.object({
 var previewMultiAttachInvoiceModeSchema = z10.object({
   enabled: z10.boolean(),
   enablePlanImmediately: z10.union([z10.boolean(), z10.undefined()]).optional(),
-  finalize: z10.union([z10.boolean(), z10.undefined()]).optional()
+  finalize: z10.union([z10.boolean(), z10.undefined()]).optional(),
+  invoiceTemplateId: z10.union([z10.string(), z10.undefined()]).optional(),
+  netTermsDays: z10.union([z10.number(), z10.undefined()]).optional()
 });
 var previewMultiAttachAttachDiscountSchema = z10.object({
   rewardId: z10.union([z10.string(), z10.undefined()]).optional(),
@@ -1702,7 +1717,9 @@ var previewMultiAttachFreeTrialParamsOutboundSchema = z10.object({
 var previewMultiAttachInvoiceModeOutboundSchema = z10.object({
   enabled: z10.boolean(),
   enable_plan_immediately: z10.boolean(),
-  finalize: z10.boolean()
+  finalize: z10.boolean(),
+  invoice_template_id: z10.union([z10.string(), z10.undefined()]).optional(),
+  net_terms_days: z10.union([z10.number(), z10.undefined()]).optional()
 });
 var previewMultiAttachAttachDiscountOutboundSchema = z10.object({
   reward_id: z10.union([z10.string(), z10.undefined()]).optional(),
@@ -1928,7 +1945,9 @@ var previewUpdateAddItemTierSchema = z11.object({
 var previewUpdateInvoiceModeSchema = z11.object({
   enabled: z11.boolean(),
   enablePlanImmediately: z11.union([z11.boolean(), z11.undefined()]).optional(),
-  finalize: z11.union([z11.boolean(), z11.undefined()]).optional()
+  finalize: z11.union([z11.boolean(), z11.undefined()]).optional(),
+  invoiceTemplateId: z11.union([z11.string(), z11.undefined()]).optional(),
+  netTermsDays: z11.union([z11.number(), z11.undefined()]).optional()
 });
 var previewUpdateAttachDiscountSchema = z11.object({
   rewardId: z11.union([z11.string(), z11.undefined()]).optional(),
@@ -2123,7 +2142,9 @@ var previewUpdateCustomizeOutboundSchema = z11.object({
 var previewUpdateInvoiceModeOutboundSchema = z11.object({
   enabled: z11.boolean(),
   enable_plan_immediately: z11.boolean(),
-  finalize: z11.boolean()
+  finalize: z11.boolean(),
+  invoice_template_id: z11.union([z11.string(), z11.undefined()]).optional(),
+  net_terms_days: z11.union([z11.number(), z11.undefined()]).optional()
 });
 var previewUpdateAttachDiscountOutboundSchema = z11.object({
   reward_id: z11.union([z11.string(), z11.undefined()]).optional(),
@@ -2697,7 +2718,9 @@ var billingUpdateAddItemTierSchema = z14.object({
 var billingUpdateInvoiceModeSchema = z14.object({
   enabled: z14.boolean(),
   enablePlanImmediately: z14.union([z14.boolean(), z14.undefined()]).optional(),
-  finalize: z14.union([z14.boolean(), z14.undefined()]).optional()
+  finalize: z14.union([z14.boolean(), z14.undefined()]).optional(),
+  invoiceTemplateId: z14.union([z14.string(), z14.undefined()]).optional(),
+  netTermsDays: z14.union([z14.number(), z14.undefined()]).optional()
 });
 var billingUpdateAttachDiscountSchema = z14.object({
   rewardId: z14.union([z14.string(), z14.undefined()]).optional(),
@@ -2828,7 +2851,9 @@ var billingUpdateCustomizeOutboundSchema = z14.object({
 var billingUpdateInvoiceModeOutboundSchema = z14.object({
   enabled: z14.boolean(),
   enable_plan_immediately: z14.boolean(),
-  finalize: z14.boolean()
+  finalize: z14.boolean(),
+  invoice_template_id: z14.union([z14.string(), z14.undefined()]).optional(),
+  net_terms_days: z14.union([z14.number(), z14.undefined()]).optional()
 });
 var billingUpdateAttachDiscountOutboundSchema = z14.object({
   reward_id: z14.union([z14.string(), z14.undefined()]).optional(),
@@ -3012,8 +3037,9 @@ var routeConfigs = [
       // expand: z.array(z.enum(CustomerExpand)).optional(),
       expand: z15.array(z15.string()).optional()
     }),
+    protectedBodyFields: CUSTOMER_PROTECTED_BODY_FIELDS,
     customHandler: async ({ autumn, identity, body }) => {
-      const sanitizedBody = sanitizeBody(body);
+      const sanitizedBody = sanitizeBody(body, CUSTOMER_PROTECTED_BODY_FIELDS);
       if (!identity?.customerId && sanitizedBody.errorOnNotFound === false) {
         return backendSuccess({ statusCode: 204, body: null });
       }

package/dist/backend/{chunk-TJ7TRWN4.mjs → chunk-WK4VK7MP.mjs}

@@ -1,6 +1,6 @@
 import {
   createCoreHandler
-} from "./chunk-ZVZEA5YL.mjs";
+} from "./chunk-RBV55GF7.mjs";
 
 // src/backend/adapters/hono.ts
 function autumnHandler(options) {

package/dist/backend/core/handlers/coreHandler.d.mts

@@ -1,7 +1,8 @@
 import { CoreHandlerOptions, UnifiedRequest, UnifiedResponse } from '../types/handlerTypes.mjs';
-import '../../authTypes-B7b2mex1.mjs';
-import '../../routeTypes-BcR8yEXe.mjs';
+import '../../authTypes-CxFcWXh3.mjs';
+import '../../routeTypes-924R85Bn.mjs';
 import 'zod/v4';
+import '../utils/sanitizeBody.mjs';
 import '../types/responseTypes.mjs';
 
 /** Create the core handler that processes all requests */

package/dist/backend/core/handlers/coreHandler.d.ts

@@ -1,7 +1,8 @@
 import { CoreHandlerOptions, UnifiedRequest, UnifiedResponse } from '../types/handlerTypes.js';
-import '../../authTypes-B7b2mex1.js';
-import '../../routeTypes-CXj2d3BE.js';
+import '../../authTypes-CxFcWXh3.js';
+import '../../routeTypes-Db2ZFQC4.js';
 import 'zod/v4';
+import '../utils/sanitizeBody.js';
 import '../types/responseTypes.js';
 
 /** Create the core handler that processes all requests */