b2b-platform-utils 1.1.99 → 1.1.101

package/errorsMap.js

@@ -1842,6 +1842,30 @@ const STATIC_ERRORS = [
     httpCode: 422,
     description: "Risk permission conditions contain an unsupported permission or condition.",
   },
+  {
+    errorCode: 1300,
+    errorKey: "withdrawalTwoFaChallengeRequired",
+    httpCode: 422,
+    description: "Withdrawal requires a valid authenticator code. No withdrawal was created.",
+  },
+  {
+    errorCode: 1301,
+    errorKey: "withdrawalTwoFaSetupRequired",
+    httpCode: 422,
+    description: "Withdrawal requires authenticator enrollment. No withdrawal was created.",
+  },
+  {
+    errorCode: 1302,
+    errorKey: "withdrawalTwoFaInvalidOtp",
+    httpCode: 422,
+    description: "Withdrawal authenticator code is incorrect. Another attempt is allowed.",
+  },
+  {
+    errorCode: 1303,
+    errorKey: "withdrawalTwoFaChallengeExpired",
+    httpCode: 422,
+    description: "Withdrawal authenticator challenge expired or was invalidated.",
+  },
 ];
 
 const STATIC_BY_KEY = Object.fromEntries(

package/financialAdmissionPlan.js

@@ -4,6 +4,8 @@ const { createHash } = require('node:crypto');
 const A = require('./financialAdmissionMath');
 const failure = (code) => Object.assign(new TypeError(code), { code });
 const sequence = (v) => typeof v === 'string' && /^(0|[1-9]\d{0,35})$/.test(v);
+// AccountPrecisionState/Entry.precision_version is an existing signed SQL BIGINT.
+const precisionVersion = (v) => sequence(v) && BigInt(v) <= 9223372036854775807n;
 const minor = (v) => typeof v === 'string' && v !== '-0' && /^-?(0|[1-9]\d{0,35})$/.test(v);
 const id = (v) => typeof v === 'string' && v.length > 0 && v.length <= 200 && !/[\x00-\x1f\x7f]/.test(v);
 const fingerprint = (v) => typeof v === 'string' && /^[a-f0-9]{64}$/.test(v);
@@ -50,7 +52,7 @@ function state(value) {
     throw failure('financial_admission_state_invalid');
   for (const prefix of ['cash', 'bonus']) {
     const r = fraction(value[`${prefix}RemainderNumerator`], value[`${prefix}RemainderDenominator`]);
-    if (!sequence(value[`${prefix}PrecisionVersion`]) || (prefix === 'cash' && (r.n < 0n || r.n >= r.d)))
+    if (!precisionVersion(value[`${prefix}PrecisionVersion`]) || (prefix === 'cash' && (r.n < 0n || r.n >= r.d)))
       throw failure('financial_admission_state_invalid');
   }
   return Object.fromEntries(STATE_FIELDS.map((field) => [field, value[field]]));
@@ -117,7 +119,7 @@ function preparePlan(input) {
       after[`${bucket}RemainderNumerator`] = String(next.remainder.n);
       after[`${bucket}RemainderDenominator`] = String(next.remainder.d);
       after[`${bucket}PrecisionVersion`] = String(BigInt(after[`${bucket}PrecisionVersion`]) + (dr.n === 0n ? 0n : 1n));
-      if (!sequence(after[`${bucket}PrecisionVersion`])) throw failure('financial_admission_version_exhausted');
+      if (!precisionVersion(after[`${bucket}PrecisionVersion`])) throw failure('financial_admission_version_exhausted');
       // Existing RG eligibility is based on actual real-wallet debit, not bonus.
       // Freespin/free-bet/session eligibility still belongs to the caller's
       // established policy checks, independently verified by Payment.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "b2b-platform-utils",
-  "version": "1.1.99",
+  "version": "1.1.101",
   "description": "Shared utilities for Node.js microservices: errors map, local cache, logger, numbers, dates, filesystem, media optimization, paginator, slugger, crypto wrapper, sanitize HTML, sorting.",
   "type": "commonjs",
   "license": "KingSizer",