Mali Fişleme — fiscal.de ⏳ Yakında

POST {RESTOMENUM_BASE}/plugin-api/capabilities/fiscal.de/invoke
Authorization: Bearer <apiKey>
Content-Type: application/json

{
  "payload": {
    "receiptType": "RECEIPT",
    "amountsPerVatRate": [
      { "vatRate": 19, "amount": 1990 },
      { "vatRate": 7,  "amount": 700 }
    ],
    "amountsPerPaymentType": [
      { "paymentType": "CASH",     "amount": 1690 },
      { "paymentType": "NON_CASH", "amount": 1000 }
    ],
    "reference": "masa-5",
    "idempotencyKey": "close-masa5-1785438065"
  }
}

import { RestomenumClient } from '@restomenum/plugin-sdk';

// Tüketici (scope: capability:fiscal.de:consume) — tutarlar CENT (integer):
const r = await client.capabilities.invoke('fiscal.de', {
  amountsPerVatRate:     [{ vatRate: 19, amount: 1990 }],   // 19,90 € → 1990
  amountsPerPaymentType: [{ paymentType: 'CASH', amount: 1990 }],
  reference: tableId,
  idempotencyKey: `close-${tableId}-${docNo}`,             // ZORUNLU
});

if (r.status === 'signed')  { /* mali blok hazır */ }
if (r.status === 'ausfall') { /* HATA DEĞİL — fişe "Ausfall" basılır */ }

import { verifyAndParseCapability, capabilityResponse } from '@restomenum/plugin-sdk';
import type { FiscalDePayload, FiscalDeStatus } from '@restomenum/plugin-sdk';

// 1) İMZA + şekil doğrula (webhook ile AYNI HMAC şeması). null → 401.
const req = await verifyAndParseCapability<FiscalDePayload>(rawBody, sigHeader, {
  getSecret: (tenantId) => installStore.find(tenantId)?.webhookSecret,
});
if (!req) return res.status(401).json({ error: 'invalid_signature' });

// 2) requestId DEDUPE (ZORUNLU): aynı fişi İKİ KEZ imzalamak TSE'de mükerrer işlem = mali/yasal sorun.
const prior = await store.find(req.requestId);
if (prior) return res.json(capabilityResponse(prior.status, { providerMessageId: prior.providerMessageId }));

// 3) Dengeyi SEN doğrula — platform KDV/ödeme toplamını kontrol etmez.
const sum = (rows) => rows.reduce((t, r) => t + r.amount, 0);
if (sum(req.payload.amountsPerVatRate) !== sum(req.payload.amountsPerPaymentType))
  return res.json(capabilityResponse<FiscalDeStatus>('failed', { error: { code: 'unbalanced_receipt' } }));

// 4) TSE'ye ulaşılamıyorsa 'ausfall' — 'failed' DÖNME (işlem geçerli, fişe "Ausfall" basılır).
if (!(await tseReachable())) return res.json(capabilityResponse<FiscalDeStatus>('ausfall'));

const providerMessageId = await signAtTse(req.payload);   // CENT tutarlar, negatif olabilir (storno)
await store.save(req.requestId, { status: 'signed', providerMessageId });
res.json(capabilityResponse<FiscalDeStatus>('signed', { providerMessageId }));

{ "decision":"allow",
  "receiptExtras":[
    { "key":"tse.qr",               "type":"qr",   "value":"V0;…" },
    { "key":"tse.txNumber",         "type":"text", "label":"Beleg-Nr",   "value":"366" },
    { "key":"tse.signatureCounter", "type":"text", "label":"Sig-Zähler", "value":"774" },
    { "key":"tse.timeStart",        "type":"text", "label":"TSE-Start",  "value":"1785438065" },
    { "key":"tse.status",           "type":"text", "value":"signed" }
  ] }