@basaltkit/subscriptions 2.1.0 → 2.2.0

package/dist/index.d.ts

@@ -161,6 +161,24 @@ declare class WebhookInvalidError extends BasaltError {
     readonly status = 400;
     constructor();
 }
+/**
+ * Thrown when a gateway is asked to verify a webhook but no signing secret is
+ * configured. Verification fails closed: an unauthenticated callback must never
+ * be trusted (anyone could forge a `payment.succeeded`).
+ */
+declare class WebhookSecretMissingError extends BasaltError {
+    readonly status = 500;
+    constructor(gateway: string);
+}
+/**
+ * Thrown when a confirmed payment's amount does not match the amount that was
+ * originally requested for that payment id — an underpayment, or a forged /
+ * mis-routed callback trying to settle an invoice for less.
+ */
+declare class PaymentAmountMismatchError extends BasaltError {
+    readonly status = 400;
+    constructor(paymentId: string, expected: number, actual: number);
+}
 /** Gateway-agnostic webhook event, already translated to domain terms. */
 interface WebhookEvent {
     /** Unique id at the gateway — used for idempotent processing. */
@@ -847,4 +865,4 @@ declare function billingRoutes(options: BillingRoutesOptions): BasaltRoute[];
  */
 declare function billingWebhookRoute(gateway: BillingGateway): BasaltRoute;
 
-export { type BillingGateway, type BillingPeriod, type BillingRoutesOptions, type CheckoutInput, type CreateSubscriptionInput, FakeBillingGateway, FakePaymentGateway, FeatureUnavailableError, type FeatureValue, GatewayUnsupportedError, type HandleEventResult, MemoryPaymentStore, MemoryRecurringStore, MemorySubscriptionStore, MemoryUsageStore, MemoryWebhookStore, type Meter, type NewPayment, NotSubscribedError, type PaymentApplyResult, type PaymentEvent, type PaymentGateway, type PaymentInstruction, PaymentLedger, type PaymentLedgerEvent, type PaymentLedgerEvents, type PaymentLedgerListener, type PaymentLedgerOptions, type PaymentRecord, type PaymentRecordStatus, type PaymentRequest, type PaymentStore, type PlanDefinition, type Plans, type PortalInput, QuotaExceededError, type RecurringBillingOptions, type RecurringInterval, RecurringReferenceBilling, type RecurringStatus, type RecurringStore, type RecurringSubscription, type RedisLike, RedisUsageStore, type RedisUsageStoreOptions, type RedisWebhookClient, RedisWebhookStore, type RedisWebhookStoreOptions, SUBSCRIPTIONS, StripeBillingGateway, type StripeGatewayOptions, StripeRequestError, type SubscribeInput, type SubscriptionRecord, type SubscriptionStatus, type SubscriptionStore, Subscriptions, type SubscriptionsOptions, type SubscriptionsPluginOptions, type SwapInput, UnknownPlanError, type UsageConsumeResult, type UsageStore, type WebhookEvent, WebhookInvalidError, type WebhookStore, addInterval, assertMinorUnits, billingRoutes, billingWebhookRoute, currencyDecimals, definePlans, featureLimit, formatMoney, isMeter, isMinorUnits, meter, planPrice, subscriptionsPlugin, toMajor, toMinor };
+export { type BillingGateway, type BillingPeriod, type BillingRoutesOptions, type CheckoutInput, type CreateSubscriptionInput, FakeBillingGateway, FakePaymentGateway, FeatureUnavailableError, type FeatureValue, GatewayUnsupportedError, type HandleEventResult, MemoryPaymentStore, MemoryRecurringStore, MemorySubscriptionStore, MemoryUsageStore, MemoryWebhookStore, type Meter, type NewPayment, NotSubscribedError, PaymentAmountMismatchError, type PaymentApplyResult, type PaymentEvent, type PaymentGateway, type PaymentInstruction, PaymentLedger, type PaymentLedgerEvent, type PaymentLedgerEvents, type PaymentLedgerListener, type PaymentLedgerOptions, type PaymentRecord, type PaymentRecordStatus, type PaymentRequest, type PaymentStore, type PlanDefinition, type Plans, type PortalInput, QuotaExceededError, type RecurringBillingOptions, type RecurringInterval, RecurringReferenceBilling, type RecurringStatus, type RecurringStore, type RecurringSubscription, type RedisLike, RedisUsageStore, type RedisUsageStoreOptions, type RedisWebhookClient, RedisWebhookStore, type RedisWebhookStoreOptions, SUBSCRIPTIONS, StripeBillingGateway, type StripeGatewayOptions, StripeRequestError, type SubscribeInput, type SubscriptionRecord, type SubscriptionStatus, type SubscriptionStore, Subscriptions, type SubscriptionsOptions, type SubscriptionsPluginOptions, type SwapInput, UnknownPlanError, type UsageConsumeResult, type UsageStore, type WebhookEvent, WebhookInvalidError, WebhookSecretMissingError, type WebhookStore, addInterval, assertMinorUnits, billingRoutes, billingWebhookRoute, currencyDecimals, definePlans, featureLimit, formatMoney, isMeter, isMinorUnits, meter, planPrice, subscriptionsPlugin, toMajor, toMinor };

package/dist/index.js

@@ -160,6 +160,24 @@ var WebhookInvalidError = class extends BasaltError2 {
     super("BILLING_WEBHOOK_INVALID", "Webhook signature verification failed.");
   }
 };
+var WebhookSecretMissingError = class extends BasaltError2 {
+  status = 500;
+  constructor(gateway) {
+    super(
+      "BILLING_WEBHOOK_SECRET_MISSING",
+      `${gateway}: cannot verify a webhook without a configured signing secret \u2014 refusing to trust an unsigned callback.`
+    );
+  }
+};
+var PaymentAmountMismatchError = class extends BasaltError2 {
+  status = 400;
+  constructor(paymentId, expected, actual) {
+    super(
+      "BILLING_PAYMENT_AMOUNT_MISMATCH",
+      `Payment ${paymentId} was requested for ${expected} but the webhook confirmed ${actual} \u2014 refusing to mark it paid.`
+    );
+  }
+};
 var FakeBillingGateway = class {
   name = "fake";
   created = [];
@@ -303,6 +321,12 @@ var PaymentLedger = class {
     let record;
     try {
       const status = event.type === "payment.succeeded" ? "paid" : "failed";
+      if (status === "paid") {
+        const existing = await this.store.get(event.paymentId);
+        if (existing && existing.amount > 0 && event.amount !== existing.amount) {
+          throw new PaymentAmountMismatchError(event.paymentId, existing.amount, event.amount);
+        }
+      }
       await this.store.setStatus(event.paymentId, status, {
         amount: event.amount,
         ...event.raw !== void 0 ? { raw: event.raw } : {}
@@ -1002,6 +1026,7 @@ export {
   MemoryUsageStore,
   MemoryWebhookStore,
   NotSubscribedError,
+  PaymentAmountMismatchError,
   PaymentLedger,
   QuotaExceededError,
   RecurringReferenceBilling,
@@ -1013,6 +1038,7 @@ export {
   Subscriptions,
   UnknownPlanError,
   WebhookInvalidError,
+  WebhookSecretMissingError,
   addInterval,
   assertMinorUnits,
   billingRoutes,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@basaltkit/subscriptions",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "description": "Billing for Basalt, Cashier/Soulbscription-style: declarative plans, subscriptions with trials, feature flags, usage limits, gateway drivers and idempotent webhooks.",
   "license": "MIT",
   "type": "module",
@@ -14,8 +14,8 @@
     "dist"
   ],
   "dependencies": {
-    "@basaltkit/fastify": "^1.0.0",
-    "@basaltkit/core": "^1.0.0"
+    "@basaltkit/core": "^1.0.0",
+    "@basaltkit/fastify": "^1.1.0"
   },
   "peerDependencies": {
     "zod": "^3.24.0 || ^4.0.0"