@auth-gate/billing 0.8.0 → 0.9.0

package/dist/{chunk-AHCLNQ6P.mjs → chunk-VLL3I4K4.mjs}

@@ -13,8 +13,11 @@ function validateTiers(price, prefix) {
   }
   for (let j = 0; j < price.tiers.length; j++) {
     const tier = price.tiers[j];
-    if (typeof tier.unitAmount !== "number" || tier.unitAmount < 0) {
-      throw new Error(`${prefix}.tiers[${j}].unitAmount must be a non-negative number.`);
+    if (typeof tier.unitAmount !== "number" || !Number.isFinite(tier.unitAmount) || tier.unitAmount < 0) {
+      throw new Error(`${prefix}.tiers[${j}].unitAmount must be a finite non-negative number.`);
+    }
+    if (tier.flatAmount !== void 0 && (typeof tier.flatAmount !== "number" || !Number.isFinite(tier.flatAmount) || tier.flatAmount < 0)) {
+      throw new Error(`${prefix}.tiers[${j}].flatAmount must be a finite non-negative number.`);
     }
   }
 }
@@ -206,7 +209,7 @@ function normalizeConfig(config) {
   const plans = {};
   for (const [key, plan] of Object.entries(config.plans)) {
     if (plan.entitlements) {
-      plans[key] = plan;
+      plans[key] = __spreadValues({}, plan);
     } else if (plan.features && plan.features.length > 0) {
       const entitlements = {};
       for (const f of plan.features) {
@@ -214,13 +217,28 @@ function normalizeConfig(config) {
       }
       plans[key] = __spreadProps(__spreadValues({}, plan), { entitlements });
     } else {
-      plans[key] = plan;
+      plans[key] = __spreadValues({}, plan);
     }
   }
   return __spreadProps(__spreadValues({}, config), { plans });
 }
 
 // src/diff.ts
+function deepEqual(a, b) {
+  if (a === b) return true;
+  if (a === null || b === null || typeof a !== "object" || typeof b !== "object") return false;
+  if (Array.isArray(a) !== Array.isArray(b)) return false;
+  if (Array.isArray(a) && Array.isArray(b)) {
+    if (a.length !== b.length) return false;
+    return a.every((val, i) => deepEqual(val, b[i]));
+  }
+  const keysA = Object.keys(a).sort();
+  const keysB = Object.keys(b).sort();
+  if (keysA.length !== keysB.length) return false;
+  return keysA.every(
+    (key, i) => key === keysB[i] && deepEqual(a[key], b[key])
+  );
+}
 function priceConfigKey(planKey, price) {
   var _a, _b;
   const interval = price.interval;
@@ -242,6 +260,30 @@ function priceConfigKey(planKey, price) {
   const p = price;
   return `${planKey}_${interval}${suffix}_${p.amount}_${p.currency}`;
 }
+function diffPrices(planKey, configPrices, serverPrices) {
+  const serverPricesByKey = /* @__PURE__ */ new Map();
+  for (const sp of serverPrices) {
+    if (sp.configKey && sp.isActive) {
+      serverPricesByKey.set(sp.configKey, sp);
+    }
+  }
+  const creates = [];
+  const archives = [];
+  const configPriceKeys = /* @__PURE__ */ new Set();
+  for (const price of configPrices) {
+    const pk = priceConfigKey(planKey, price);
+    configPriceKeys.add(pk);
+    if (!serverPricesByKey.has(pk)) {
+      creates.push({ type: "create", planKey, price, configKey: pk });
+    }
+  }
+  for (const [pk, sp] of serverPricesByKey) {
+    if (!configPriceKeys.has(pk)) {
+      archives.push({ type: "archive", planKey, existing: sp, configKey: pk });
+    }
+  }
+  return { creates, archives };
+}
 function computeDiff(config, server, subscriberCounts) {
   var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j;
   const planOps = [];
@@ -270,25 +312,8 @@ function computeDiff(config, server, subscriberCounts) {
       if (existing) {
         const subs = (_c = subscriberCounts[existing.id]) != null ? _c : 0;
         planOps.push({ type: "rename", key, oldKey: plan.renamedFrom, plan, existing, activeSubscribers: subs });
-        const serverPricesByKey = /* @__PURE__ */ new Map();
-        for (const sp of existing.prices) {
-          if (sp.configKey && sp.isActive) {
-            serverPricesByKey.set(sp.configKey, sp);
-          }
-        }
-        const configPriceKeys = /* @__PURE__ */ new Set();
-        for (const price of plan.prices) {
-          const pk = priceConfigKey(key, price);
-          configPriceKeys.add(pk);
-          if (!serverPricesByKey.has(pk)) {
-            priceOps.push({ type: "create", planKey: key, price, configKey: pk });
-          }
-        }
-        for (const [pk, sp] of serverPricesByKey) {
-          if (!configPriceKeys.has(pk)) {
-            priceOps.push({ type: "archive", planKey: key, existing: sp, configKey: pk });
-          }
-        }
+        const priceDiff = diffPrices(key, plan.prices, existing.prices);
+        priceOps.push(...priceDiff.creates, ...priceDiff.archives);
         serverByKey.delete(existing.configKey);
         serverByKey.delete(key);
         continue;
@@ -313,30 +338,12 @@ function computeDiff(config, server, subscriberCounts) {
       const existingFeatures = ((_f = existing.features) != null ? _f : []).sort().join(",");
       const configFeatures = ((_g = plan.features) != null ? _g : []).sort().join(",");
       if (existingFeatures !== configFeatures) changes.push(`features changed`);
-      const existingEntitlements = JSON.stringify((_h = existing.entitlements) != null ? _h : null);
-      const configEntitlements = JSON.stringify((_i = plan.entitlements) != null ? _i : null);
-      if (existingEntitlements !== configEntitlements) changes.push(`entitlements changed`);
-      const serverPricesByKey = /* @__PURE__ */ new Map();
-      for (const sp of existing.prices) {
-        if (sp.configKey && sp.isActive) {
-          serverPricesByKey.set(sp.configKey, sp);
-        }
-      }
-      const configPriceKeys = /* @__PURE__ */ new Set();
-      for (const price of plan.prices) {
-        const pk = priceConfigKey(key, price);
-        configPriceKeys.add(pk);
-        if (!serverPricesByKey.has(pk)) {
-          priceOps.push({ type: "create", planKey: key, price, configKey: pk });
-        }
-      }
-      let hasPriceArchives = false;
-      for (const [pk, sp] of serverPricesByKey) {
-        if (!configPriceKeys.has(pk)) {
-          priceOps.push({ type: "archive", planKey: key, existing: sp, configKey: pk });
-          hasPriceArchives = true;
-        }
+      if (!deepEqual((_h = existing.entitlements) != null ? _h : null, (_i = plan.entitlements) != null ? _i : null)) {
+        changes.push(`entitlements changed`);
       }
+      const priceDiff = diffPrices(key, plan.prices, existing.prices);
+      priceOps.push(...priceDiff.creates, ...priceDiff.archives);
+      const hasPriceArchives = priceDiff.archives.length > 0;
       if (changes.length > 0 || hasPriceArchives) {
         const versionBump = hasPriceArchives;
         if (versionBump) changes.push("prices changed");

package/dist/cli.cjs

@@ -54,11 +54,11 @@ async function fetchStripeState(stripeKey) {
   const Stripe = (await import("stripe")).default;
   const stripe = new Stripe(stripeKey);
   const [products, prices] = await Promise.all([
-    stripe.products.list({ active: true, limit: 100 }),
-    stripe.prices.list({ active: true, limit: 100 })
+    stripe.products.list({ active: true, limit: 100 }).autoPagingToArray({ limit: 1e4 }),
+    stripe.prices.list({ active: true, limit: 100 }).autoPagingToArray({ limit: 1e4 })
   ]);
   const pricesByProduct = /* @__PURE__ */ new Map();
-  for (const sp of prices.data) {
+  for (const sp of prices) {
     const productId = typeof sp.product === "string" ? sp.product : sp.product.id;
     const mapped = {
       id: sp.id,
@@ -75,7 +75,7 @@ async function fetchStripeState(stripeKey) {
       mapped
     ]);
   }
-  const serverProducts = products.data.map((p) => {
+  const serverProducts = products.map((p) => {
     var _a2;
     return {
       id: p.id,
@@ -112,8 +112,11 @@ function validateTiers(price, prefix) {
   }
   for (let j = 0; j < price.tiers.length; j++) {
     const tier = price.tiers[j];
-    if (typeof tier.unitAmount !== "number" || tier.unitAmount < 0) {
-      throw new Error(`${prefix}.tiers[${j}].unitAmount must be a non-negative number.`);
+    if (typeof tier.unitAmount !== "number" || !Number.isFinite(tier.unitAmount) || tier.unitAmount < 0) {
+      throw new Error(`${prefix}.tiers[${j}].unitAmount must be a finite non-negative number.`);
+    }
+    if (tier.flatAmount !== void 0 && (typeof tier.flatAmount !== "number" || !Number.isFinite(tier.flatAmount) || tier.flatAmount < 0)) {
+      throw new Error(`${prefix}.tiers[${j}].flatAmount must be a finite non-negative number.`);
     }
   }
 }
@@ -333,6 +336,21 @@ Run \`npx @auth-gate/billing init\` to create one.`
 }
 
 // src/diff.ts
+function deepEqual(a, b) {
+  if (a === b) return true;
+  if (a === null || b === null || typeof a !== "object" || typeof b !== "object") return false;
+  if (Array.isArray(a) !== Array.isArray(b)) return false;
+  if (Array.isArray(a) && Array.isArray(b)) {
+    if (a.length !== b.length) return false;
+    return a.every((val, i) => deepEqual(val, b[i]));
+  }
+  const keysA = Object.keys(a).sort();
+  const keysB = Object.keys(b).sort();
+  if (keysA.length !== keysB.length) return false;
+  return keysA.every(
+    (key, i) => key === keysB[i] && deepEqual(a[key], b[key])
+  );
+}
 function priceConfigKey(planKey, price) {
   var _a, _b;
   const interval = price.interval;
@@ -354,6 +372,30 @@ function priceConfigKey(planKey, price) {
   const p = price;
   return `${planKey}_${interval}${suffix}_${p.amount}_${p.currency}`;
 }
+function diffPrices(planKey, configPrices, serverPrices) {
+  const serverPricesByKey = /* @__PURE__ */ new Map();
+  for (const sp of serverPrices) {
+    if (sp.configKey && sp.isActive) {
+      serverPricesByKey.set(sp.configKey, sp);
+    }
+  }
+  const creates = [];
+  const archives = [];
+  const configPriceKeys = /* @__PURE__ */ new Set();
+  for (const price of configPrices) {
+    const pk = priceConfigKey(planKey, price);
+    configPriceKeys.add(pk);
+    if (!serverPricesByKey.has(pk)) {
+      creates.push({ type: "create", planKey, price, configKey: pk });
+    }
+  }
+  for (const [pk, sp] of serverPricesByKey) {
+    if (!configPriceKeys.has(pk)) {
+      archives.push({ type: "archive", planKey, existing: sp, configKey: pk });
+    }
+  }
+  return { creates, archives };
+}
 function computeDiff(config, server, subscriberCounts) {
   var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j;
   const planOps = [];
@@ -382,25 +424,8 @@ function computeDiff(config, server, subscriberCounts) {
       if (existing) {
         const subs = (_c = subscriberCounts[existing.id]) != null ? _c : 0;
         planOps.push({ type: "rename", key, oldKey: plan.renamedFrom, plan, existing, activeSubscribers: subs });
-        const serverPricesByKey = /* @__PURE__ */ new Map();
-        for (const sp of existing.prices) {
-          if (sp.configKey && sp.isActive) {
-            serverPricesByKey.set(sp.configKey, sp);
-          }
-        }
-        const configPriceKeys = /* @__PURE__ */ new Set();
-        for (const price of plan.prices) {
-          const pk = priceConfigKey(key, price);
-          configPriceKeys.add(pk);
-          if (!serverPricesByKey.has(pk)) {
-            priceOps.push({ type: "create", planKey: key, price, configKey: pk });
-          }
-        }
-        for (const [pk, sp] of serverPricesByKey) {
-          if (!configPriceKeys.has(pk)) {
-            priceOps.push({ type: "archive", planKey: key, existing: sp, configKey: pk });
-          }
-        }
+        const priceDiff = diffPrices(key, plan.prices, existing.prices);
+        priceOps.push(...priceDiff.creates, ...priceDiff.archives);
         serverByKey.delete(existing.configKey);
         serverByKey.delete(key);
         continue;
@@ -425,30 +450,12 @@ function computeDiff(config, server, subscriberCounts) {
       const existingFeatures = ((_f = existing.features) != null ? _f : []).sort().join(",");
       const configFeatures = ((_g = plan.features) != null ? _g : []).sort().join(",");
       if (existingFeatures !== configFeatures) changes.push(`features changed`);
-      const existingEntitlements = JSON.stringify((_h = existing.entitlements) != null ? _h : null);
-      const configEntitlements = JSON.stringify((_i = plan.entitlements) != null ? _i : null);
-      if (existingEntitlements !== configEntitlements) changes.push(`entitlements changed`);
-      const serverPricesByKey = /* @__PURE__ */ new Map();
-      for (const sp of existing.prices) {
-        if (sp.configKey && sp.isActive) {
-          serverPricesByKey.set(sp.configKey, sp);
-        }
-      }
-      const configPriceKeys = /* @__PURE__ */ new Set();
-      for (const price of plan.prices) {
-        const pk = priceConfigKey(key, price);
-        configPriceKeys.add(pk);
-        if (!serverPricesByKey.has(pk)) {
-          priceOps.push({ type: "create", planKey: key, price, configKey: pk });
-        }
-      }
-      let hasPriceArchives = false;
-      for (const [pk, sp] of serverPricesByKey) {
-        if (!configPriceKeys.has(pk)) {
-          priceOps.push({ type: "archive", planKey: key, existing: sp, configKey: pk });
-          hasPriceArchives = true;
-        }
+      if (!deepEqual((_h = existing.entitlements) != null ? _h : null, (_i = plan.entitlements) != null ? _i : null)) {
+        changes.push(`entitlements changed`);
       }
+      const priceDiff = diffPrices(key, plan.prices, existing.prices);
+      priceOps.push(...priceDiff.creates, ...priceDiff.archives);
+      const hasPriceArchives = priceDiff.archives.length > 0;
       if (changes.length > 0 || hasPriceArchives) {
         const versionBump = hasPriceArchives;
         if (versionBump) changes.push("prices changed");
@@ -608,6 +615,11 @@ var SyncClient = class {
     this.baseUrl = config.baseUrl.replace(/\/$/, "");
     this.apiKey = config.apiKey;
     this.environment = config.environment;
+    if (!this.baseUrl.startsWith("https://") && !this.baseUrl.startsWith("http://localhost") && !this.baseUrl.startsWith("http://127.0.0.1")) {
+      console.warn(
+        "WARNING: AUTHGATE_BASE_URL does not use HTTPS. API key may be transmitted insecurely."
+      );
+    }
   }
   async request(method, path, body) {
     var _a, _b;
@@ -629,9 +641,12 @@ var SyncClient = class {
       let message;
       try {
         const json = JSON.parse(text);
-        message = (_b = (_a = json.error) != null ? _a : json.message) != null ? _b : text;
+        message = (_b = (_a = json.error) != null ? _a : json.message) != null ? _b : "Unknown error";
       } catch (e) {
-        message = text;
+        message = text.length > 500 ? text.slice(0, 500) + "..." : text;
+      }
+      if (this.apiKey) {
+        message = message.replaceAll(this.apiKey, "[REDACTED]");
       }
       throw new Error(`API error (${res.status}): ${message}`);
     }
@@ -646,6 +661,7 @@ var SyncClient = class {
   async apply(config, force) {
     return this.request("POST", "/api/v1/billing/sync/apply", {
       plans: config.plans,
+      features: config.features,
       migrations: config.migrations,
       force
     });
@@ -653,13 +669,13 @@ var SyncClient = class {
   async getMigration(migrationId) {
     return this.request(
       "GET",
-      `/api/v1/billing/migrations/${migrationId}`
+      `/api/v1/billing/migrations/${encodeURIComponent(migrationId)}`
     );
   }
   async executeMigration(migrationId, opts) {
     return this.request(
       "POST",
-      `/api/v1/billing/migrations/${migrationId}/execute`,
+      `/api/v1/billing/migrations/${encodeURIComponent(migrationId)}/execute`,
       (opts == null ? void 0 : opts.batchSize) ? { batchSize: opts.batchSize } : void 0
     );
   }
@@ -781,14 +797,21 @@ function calculateRevenueImpact(diff, subscriberCounts) {
   var _a, _b;
   const breakdown = [];
   const archivedPrices = diff.priceOps.filter((op) => op.type === "archive");
+  const planKeyToProductId = /* @__PURE__ */ new Map();
+  for (const op of diff.planOps) {
+    if (op.type === "update" || op.type === "archive" || op.type === "rename") {
+      planKeyToProductId.set(op.key, op.existing.id);
+    }
+  }
   for (const archived of archivedPrices) {
     if (archived.type !== "archive") continue;
     const matching = diff.priceOps.find(
       (op) => op.type === "create" && op.planKey === archived.planKey && op.price.interval === archived.existing.interval && op.price.currency === archived.existing.currency
     );
-    const subs = (_a = subscriberCounts[archived.planKey]) != null ? _a : 0;
+    const productId = planKeyToProductId.get(archived.planKey);
+    const subs = (_a = subscriberCounts[productId != null ? productId : archived.planKey]) != null ? _a : 0;
     const oldAmount = (_b = archived.existing.amount) != null ? _b : 0;
-    const newAmount = (matching == null ? void 0 : matching.type) === "create" ? matching.price.amount : 0;
+    const newAmount = (matching == null ? void 0 : matching.type) === "create" && "amount" in matching.price ? matching.price.amount : 0;
     const normalizer = archived.existing.interval === "yearly" ? 12 : 1;
     const delta = Math.round((newAmount - oldAmount) / normalizer * subs);
     if (delta !== 0) {
@@ -837,7 +860,7 @@ function mapPriceOp(op) {
     configKey: op.configKey
   };
   if (op.type === "create") {
-    base.amount = op.price.amount;
+    base.amount = "amount" in op.price ? op.price.amount : void 0;
     base.currency = op.price.currency;
     base.interval = op.price.interval;
   } else {
@@ -998,7 +1021,13 @@ Environment:
 `;
 function parseEnvFlag(args) {
   const idx = args.indexOf("--env");
-  return idx !== -1 ? args[idx + 1] : void 0;
+  if (idx === -1) return void 0;
+  const value = args[idx + 1];
+  if (!value || value.startsWith("--")) {
+    console.error(import_chalk2.default.red("--env requires a value (e.g., --env staging)."));
+    process.exit(1);
+  }
+  return value;
 }
 async function main() {
   const args = process.argv.slice(2);
@@ -1054,7 +1083,16 @@ async function main() {
     const batchIndex = args.indexOf("--batch-size");
     const batchSize = batchIndex !== -1 ? parseInt(args[batchIndex + 1], 10) : void 0;
     const dryRun = args.includes("--dry-run");
-    const positionalArgs = args.slice(1).filter((a) => !a.startsWith("--") && args[args.indexOf(a) - 1] !== "--id" && args[args.indexOf(a) - 1] !== "--batch-size");
+    const positionalArgs = [];
+    const migrateArgs = args.slice(1);
+    for (let i = 0; i < migrateArgs.length; i++) {
+      const a = migrateArgs[i];
+      if (a.startsWith("--")) {
+        if (a === "--id" || a === "--batch-size") i++;
+        continue;
+      }
+      positionalArgs.push(a);
+    }
     const fromKey = positionalArgs[0];
     const toKey = positionalArgs[1];
     await runMigrate({ migrationId, fromKey, toKey, batchSize, dryRun });

package/dist/cli.mjs

@@ -4,7 +4,7 @@ import {
   renderConfigAsTypeScript,
   serverStateToBillingConfig,
   validateConfig
-} from "./chunk-AHCLNQ6P.mjs";
+} from "./chunk-VLL3I4K4.mjs";
 import "./chunk-I4E63NIC.mjs";
 
 // src/config-loader.ts
@@ -168,6 +168,11 @@ var SyncClient = class {
     this.baseUrl = config.baseUrl.replace(/\/$/, "");
     this.apiKey = config.apiKey;
     this.environment = config.environment;
+    if (!this.baseUrl.startsWith("https://") && !this.baseUrl.startsWith("http://localhost") && !this.baseUrl.startsWith("http://127.0.0.1")) {
+      console.warn(
+        "WARNING: AUTHGATE_BASE_URL does not use HTTPS. API key may be transmitted insecurely."
+      );
+    }
   }
   async request(method, path, body) {
     var _a, _b;
@@ -189,9 +194,12 @@ var SyncClient = class {
       let message;
       try {
         const json = JSON.parse(text);
-        message = (_b = (_a = json.error) != null ? _a : json.message) != null ? _b : text;
+        message = (_b = (_a = json.error) != null ? _a : json.message) != null ? _b : "Unknown error";
       } catch (e) {
-        message = text;
+        message = text.length > 500 ? text.slice(0, 500) + "..." : text;
+      }
+      if (this.apiKey) {
+        message = message.replaceAll(this.apiKey, "[REDACTED]");
       }
       throw new Error(`API error (${res.status}): ${message}`);
     }
@@ -206,6 +214,7 @@ var SyncClient = class {
   async apply(config, force) {
     return this.request("POST", "/api/v1/billing/sync/apply", {
       plans: config.plans,
+      features: config.features,
       migrations: config.migrations,
       force
     });
@@ -213,13 +222,13 @@ var SyncClient = class {
   async getMigration(migrationId) {
     return this.request(
       "GET",
-      `/api/v1/billing/migrations/${migrationId}`
+      `/api/v1/billing/migrations/${encodeURIComponent(migrationId)}`
     );
   }
   async executeMigration(migrationId, opts) {
     return this.request(
       "POST",
-      `/api/v1/billing/migrations/${migrationId}/execute`,
+      `/api/v1/billing/migrations/${encodeURIComponent(migrationId)}/execute`,
       (opts == null ? void 0 : opts.batchSize) ? { batchSize: opts.batchSize } : void 0
     );
   }
@@ -237,14 +246,21 @@ function calculateRevenueImpact(diff, subscriberCounts) {
   var _a, _b;
   const breakdown = [];
   const archivedPrices = diff.priceOps.filter((op) => op.type === "archive");
+  const planKeyToProductId = /* @__PURE__ */ new Map();
+  for (const op of diff.planOps) {
+    if (op.type === "update" || op.type === "archive" || op.type === "rename") {
+      planKeyToProductId.set(op.key, op.existing.id);
+    }
+  }
   for (const archived of archivedPrices) {
     if (archived.type !== "archive") continue;
     const matching = diff.priceOps.find(
       (op) => op.type === "create" && op.planKey === archived.planKey && op.price.interval === archived.existing.interval && op.price.currency === archived.existing.currency
     );
-    const subs = (_a = subscriberCounts[archived.planKey]) != null ? _a : 0;
+    const productId = planKeyToProductId.get(archived.planKey);
+    const subs = (_a = subscriberCounts[productId != null ? productId : archived.planKey]) != null ? _a : 0;
     const oldAmount = (_b = archived.existing.amount) != null ? _b : 0;
-    const newAmount = (matching == null ? void 0 : matching.type) === "create" ? matching.price.amount : 0;
+    const newAmount = (matching == null ? void 0 : matching.type) === "create" && "amount" in matching.price ? matching.price.amount : 0;
     const normalizer = archived.existing.interval === "yearly" ? 12 : 1;
     const delta = Math.round((newAmount - oldAmount) / normalizer * subs);
     if (delta !== 0) {
@@ -293,7 +309,7 @@ function mapPriceOp(op) {
     configKey: op.configKey
   };
   if (op.type === "create") {
-    base.amount = op.price.amount;
+    base.amount = "amount" in op.price ? op.price.amount : void 0;
     base.currency = op.price.currency;
     base.interval = op.price.interval;
   } else {
@@ -454,7 +470,13 @@ Environment:
 `;
 function parseEnvFlag(args) {
   const idx = args.indexOf("--env");
-  return idx !== -1 ? args[idx + 1] : void 0;
+  if (idx === -1) return void 0;
+  const value = args[idx + 1];
+  if (!value || value.startsWith("--")) {
+    console.error(chalk2.red("--env requires a value (e.g., --env staging)."));
+    process.exit(1);
+  }
+  return value;
 }
 async function main() {
   const args = process.argv.slice(2);
@@ -510,7 +532,16 @@ async function main() {
     const batchIndex = args.indexOf("--batch-size");
     const batchSize = batchIndex !== -1 ? parseInt(args[batchIndex + 1], 10) : void 0;
     const dryRun = args.includes("--dry-run");
-    const positionalArgs = args.slice(1).filter((a) => !a.startsWith("--") && args[args.indexOf(a) - 1] !== "--id" && args[args.indexOf(a) - 1] !== "--batch-size");
+    const positionalArgs = [];
+    const migrateArgs = args.slice(1);
+    for (let i = 0; i < migrateArgs.length; i++) {
+      const a = migrateArgs[i];
+      if (a.startsWith("--")) {
+        if (a === "--id" || a === "--batch-size") i++;
+        continue;
+      }
+      positionalArgs.push(a);
+    }
     const fromKey = positionalArgs[0];
     const toKey = positionalArgs[1];
     await runMigrate({ migrationId, fromKey, toKey, batchSize, dryRun });
@@ -551,7 +582,7 @@ async function runPull(opts) {
       );
       process.exit(1);
     }
-    const { fetchStripeState } = await import("./pull-from-stripe-GX2Y5XMC.mjs");
+    const { fetchStripeState } = await import("./pull-from-stripe-AAY6MWMX.mjs");
     state = await fetchStripeState(stripeKey);
   } else {
     const apiKey = process.env.AUTHGATE_API_KEY;

package/dist/index.cjs

@@ -58,8 +58,11 @@ function validateTiers(price, prefix) {
   }
   for (let j = 0; j < price.tiers.length; j++) {
     const tier = price.tiers[j];
-    if (typeof tier.unitAmount !== "number" || tier.unitAmount < 0) {
-      throw new Error(`${prefix}.tiers[${j}].unitAmount must be a non-negative number.`);
+    if (typeof tier.unitAmount !== "number" || !Number.isFinite(tier.unitAmount) || tier.unitAmount < 0) {
+      throw new Error(`${prefix}.tiers[${j}].unitAmount must be a finite non-negative number.`);
+    }
+    if (tier.flatAmount !== void 0 && (typeof tier.flatAmount !== "number" || !Number.isFinite(tier.flatAmount) || tier.flatAmount < 0)) {
+      throw new Error(`${prefix}.tiers[${j}].flatAmount must be a finite non-negative number.`);
     }
   }
 }
@@ -251,7 +254,7 @@ function normalizeConfig(config) {
   const plans = {};
   for (const [key, plan] of Object.entries(config.plans)) {
     if (plan.entitlements) {
-      plans[key] = plan;
+      plans[key] = __spreadValues({}, plan);
     } else if (plan.features && plan.features.length > 0) {
       const entitlements = {};
       for (const f of plan.features) {
@@ -259,13 +262,28 @@ function normalizeConfig(config) {
       }
       plans[key] = __spreadProps(__spreadValues({}, plan), { entitlements });
     } else {
-      plans[key] = plan;
+      plans[key] = __spreadValues({}, plan);
     }
   }
   return __spreadProps(__spreadValues({}, config), { plans });
 }
 
 // src/diff.ts
+function deepEqual(a, b) {
+  if (a === b) return true;
+  if (a === null || b === null || typeof a !== "object" || typeof b !== "object") return false;
+  if (Array.isArray(a) !== Array.isArray(b)) return false;
+  if (Array.isArray(a) && Array.isArray(b)) {
+    if (a.length !== b.length) return false;
+    return a.every((val, i) => deepEqual(val, b[i]));
+  }
+  const keysA = Object.keys(a).sort();
+  const keysB = Object.keys(b).sort();
+  if (keysA.length !== keysB.length) return false;
+  return keysA.every(
+    (key, i) => key === keysB[i] && deepEqual(a[key], b[key])
+  );
+}
 function priceConfigKey(planKey, price) {
   var _a, _b;
   const interval = price.interval;
@@ -287,6 +305,30 @@ function priceConfigKey(planKey, price) {
   const p = price;
   return `${planKey}_${interval}${suffix}_${p.amount}_${p.currency}`;
 }
+function diffPrices(planKey, configPrices, serverPrices) {
+  const serverPricesByKey = /* @__PURE__ */ new Map();
+  for (const sp of serverPrices) {
+    if (sp.configKey && sp.isActive) {
+      serverPricesByKey.set(sp.configKey, sp);
+    }
+  }
+  const creates = [];
+  const archives = [];
+  const configPriceKeys = /* @__PURE__ */ new Set();
+  for (const price of configPrices) {
+    const pk = priceConfigKey(planKey, price);
+    configPriceKeys.add(pk);
+    if (!serverPricesByKey.has(pk)) {
+      creates.push({ type: "create", planKey, price, configKey: pk });
+    }
+  }
+  for (const [pk, sp] of serverPricesByKey) {
+    if (!configPriceKeys.has(pk)) {
+      archives.push({ type: "archive", planKey, existing: sp, configKey: pk });
+    }
+  }
+  return { creates, archives };
+}
 function computeDiff(config, server, subscriberCounts) {
   var _a, _b, _c, _d, _e, _f, _g, _h, _i, _j;
   const planOps = [];
@@ -315,25 +357,8 @@ function computeDiff(config, server, subscriberCounts) {
       if (existing) {
         const subs = (_c = subscriberCounts[existing.id]) != null ? _c : 0;
         planOps.push({ type: "rename", key, oldKey: plan.renamedFrom, plan, existing, activeSubscribers: subs });
-        const serverPricesByKey = /* @__PURE__ */ new Map();
-        for (const sp of existing.prices) {
-          if (sp.configKey && sp.isActive) {
-            serverPricesByKey.set(sp.configKey, sp);
-          }
-        }
-        const configPriceKeys = /* @__PURE__ */ new Set();
-        for (const price of plan.prices) {
-          const pk = priceConfigKey(key, price);
-          configPriceKeys.add(pk);
-          if (!serverPricesByKey.has(pk)) {
-            priceOps.push({ type: "create", planKey: key, price, configKey: pk });
-          }
-        }
-        for (const [pk, sp] of serverPricesByKey) {
-          if (!configPriceKeys.has(pk)) {
-            priceOps.push({ type: "archive", planKey: key, existing: sp, configKey: pk });
-          }
-        }
+        const priceDiff = diffPrices(key, plan.prices, existing.prices);
+        priceOps.push(...priceDiff.creates, ...priceDiff.archives);
         serverByKey.delete(existing.configKey);
         serverByKey.delete(key);
         continue;
@@ -358,30 +383,12 @@ function computeDiff(config, server, subscriberCounts) {
       const existingFeatures = ((_f = existing.features) != null ? _f : []).sort().join(",");
       const configFeatures = ((_g = plan.features) != null ? _g : []).sort().join(",");
       if (existingFeatures !== configFeatures) changes.push(`features changed`);
-      const existingEntitlements = JSON.stringify((_h = existing.entitlements) != null ? _h : null);
-      const configEntitlements = JSON.stringify((_i = plan.entitlements) != null ? _i : null);
-      if (existingEntitlements !== configEntitlements) changes.push(`entitlements changed`);
-      const serverPricesByKey = /* @__PURE__ */ new Map();
-      for (const sp of existing.prices) {
-        if (sp.configKey && sp.isActive) {
-          serverPricesByKey.set(sp.configKey, sp);
-        }
-      }
-      const configPriceKeys = /* @__PURE__ */ new Set();
-      for (const price of plan.prices) {
-        const pk = priceConfigKey(key, price);
-        configPriceKeys.add(pk);
-        if (!serverPricesByKey.has(pk)) {
-          priceOps.push({ type: "create", planKey: key, price, configKey: pk });
-        }
-      }
-      let hasPriceArchives = false;
-      for (const [pk, sp] of serverPricesByKey) {
-        if (!configPriceKeys.has(pk)) {
-          priceOps.push({ type: "archive", planKey: key, existing: sp, configKey: pk });
-          hasPriceArchives = true;
-        }
+      if (!deepEqual((_h = existing.entitlements) != null ? _h : null, (_i = plan.entitlements) != null ? _i : null)) {
+        changes.push(`entitlements changed`);
       }
+      const priceDiff = diffPrices(key, plan.prices, existing.prices);
+      priceOps.push(...priceDiff.creates, ...priceDiff.archives);
+      const hasPriceArchives = priceDiff.archives.length > 0;
       if (changes.length > 0 || hasPriceArchives) {
         const versionBump = hasPriceArchives;
         if (versionBump) changes.push("prices changed");

package/dist/index.mjs

@@ -6,7 +6,7 @@ import {
   serverStateToBillingConfig,
   slugify,
   validateConfig
-} from "./chunk-AHCLNQ6P.mjs";
+} from "./chunk-VLL3I4K4.mjs";
 import "./chunk-I4E63NIC.mjs";
 
 // src/index.ts

package/dist/{pull-from-stripe-GX2Y5XMC.mjs → pull-from-stripe-AAY6MWMX.mjs}

@@ -6,11 +6,11 @@ async function fetchStripeState(stripeKey) {
   const Stripe = (await import("stripe")).default;
   const stripe = new Stripe(stripeKey);
   const [products, prices] = await Promise.all([
-    stripe.products.list({ active: true, limit: 100 }),
-    stripe.prices.list({ active: true, limit: 100 })
+    stripe.products.list({ active: true, limit: 100 }).autoPagingToArray({ limit: 1e4 }),
+    stripe.prices.list({ active: true, limit: 100 }).autoPagingToArray({ limit: 1e4 })
   ]);
   const pricesByProduct = /* @__PURE__ */ new Map();
-  for (const sp of prices.data) {
+  for (const sp of prices) {
     const productId = typeof sp.product === "string" ? sp.product : sp.product.id;
     const mapped = {
       id: sp.id,
@@ -27,7 +27,7 @@ async function fetchStripeState(stripeKey) {
       mapped
     ]);
   }
-  const serverProducts = products.data.map((p) => {
+  const serverProducts = products.map((p) => {
     var _a2;
     return {
       id: p.id,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@auth-gate/billing",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "type": "module",
   "exports": {
     ".": {