@crvouga/mockingbird-service-paddle 0.4.1 → 1.0.0

package/CHANGELOG.md

@@ -1,5 +1,42 @@
 # Changelog — @crvouga/mockingbird-service-paddle
 
+## 1.0.0 (2026-10-04)
+
+### ⚠️ Breaking changes
+
+- isolate internal routes ([5e19b21](https://github.com/crvouga/mockingbird/commit/5e19b21d403acc74b04778a8b545e80bcbdf8d51))
+
+### Features
+
+- add route filtering ([4e59b1d](https://github.com/crvouga/mockingbird/commit/4e59b1d42a76550f844b744f8431a637433a0781))
+- publish agent package indexes ([eca61d3](https://github.com/crvouga/mockingbird/commit/eca61d358b86982cf0b777ae8bd7feaa3663aaa6))
+
+### Fixes and improvements
+
+- honor configured prefixes ([4f569d7](https://github.com/crvouga/mockingbird/commit/4f569d74ca8089f2ed5e33a1abf32b90973f41dd))
+- explain configurable internal paths ([21b47ae](https://github.com/crvouga/mockingbird/commit/21b47ae4d4a096cdf63189aaeaf721ccb369bcf3))
+- parse ISO journal timestamps ([20b39a2](https://github.com/crvouga/mockingbird/commit/20b39a2c738e278533d610dfc91f1cb3ae9b3f1e))
+- harden shared controls ([7822614](https://github.com/crvouga/mockingbird/commit/7822614f6cba0387aeb60ba7320b0379aa1ef690))
+
+### Dependencies
+
+- `@crvouga/mockingbird-service-sqlite`
+
+## 0.5.0 (2026-10-01)
+
+### Features
+
+- coordinate HTTP and protocol mocks ([3168653](https://github.com/crvouga/mockingbird/commit/31686534c55a9823fdaa92afc9cc456cf741b809))
+
+### Fixes and improvements
+
+- decouple smoke types from built packages ([a4b31c6](https://github.com/crvouga/mockingbird/commit/a4b31c6205d92aa0c6f7c9de3518d5ae44d38829))
+- protect child admin endpoints ([5410b94](https://github.com/crvouga/mockingbird/commit/5410b948a30dcedc21e9a70e44fd415c1ea25394))
+- harden protocol startup and state ([6f5b557](https://github.com/crvouga/mockingbird/commit/6f5b557e87b48b31985949e04f3b5ef58f51d295))
+- preserve checkpoints and lifecycle ([50e8c32](https://github.com/crvouga/mockingbird/commit/50e8c322feded2f7f45afce9d8cdef43c37ab9ab))
+- clean branch state on reset ([3b714d4](https://github.com/crvouga/mockingbird/commit/3b714d4a5df8e75fee0bb31e98d7c7566e164381))
+- type signal listener cleanup ([5279852](https://github.com/crvouga/mockingbird/commit/5279852e56ea60262ccf17aa6e46b3c31091a34a))
+
 ## 0.4.1 (2026-10-01)
 
 ### Fixes and improvements

package/DISCOVERY.md

@@ -0,0 +1,55 @@
+# @crvouga/mockingbird-service-paddle discovery
+
+This is the installed-package index for coding agents and tooling. All relative links resolve
+inside `node_modules/@crvouga/mockingbird-service-paddle/`; no repository checkout is needed to discover the mock's
+supported surface or documented behavior.
+
+## Capability and behavior sources
+
+| Question | Authoritative file | What it contains |
+| --- | --- | --- |
+| Behaviour and integration | [`README.md`](README.md) | Routes, state transitions, auth, webhooks, controls, presets and deliberate omissions. |
+| Exact capabilities | [`SUPPORT.md`](SUPPORT.md) | Supported, unsupported and parity-covered operations or commands, including reasons for gaps. |
+| Wire contract | [`openapi.yaml`](openapi.yaml) | Machine-readable paths, methods, schemas, responses and parity annotations. |
+| Public API | [`dist/index.d.ts`](dist/index.d.ts) | The installed package's exact TypeScript exports and signatures. |
+| Package metadata | [`package.json`](package.json) | Runtime/entry-point claims, vendor links, parity scope/tier and `mockingbird.discovery`. |
+
+Read these together: the contract/capability matrix says *what* is available, while the README
+defines stateful behavior, lifecycle rules, test controls, and intentional oracle differences.
+If prose and an executable surface disagree, report a parity mismatch instead of adding a
+consumer-side workaround.
+
+## Parity and oracle
+
+- Declared parity surface: **Billing, subscriptions, and webhooks**.
+- Parity tier: **cold** (the repository controls when live checks run).
+- Oracle: **Live vendor API or sandbox**.
+- Repository command: `bun run parity:service -- paddle`.
+- Evidence model: Run from a Mockingbird checkout; credentials come only from .env.local or GitHub Actions secrets. Missing credentials exit 2.
+
+The npm package contains evidence summaries and the exact contract, not credentials or the
+repository-only parity harness. Self-parity/property and acceptance tests run in the Mockingbird
+repository; live parity is an additional oracle check, not a substitute for the packaged matrix.
+
+## Runtime introspection
+
+- `GET /__admin/health`
+- `GET /__admin`
+- `GET /__admin/state`
+- `GET /__admin/requests`
+- `GET /__admin/metrics`
+- `GET /__admin/faults/presets`
+- `GET /__admin/ui`
+
+For HTTP services, use `x-mockingbird-namespace` (or the documented credential/path carrier) so
+parallel tests do not share state. Admin state, journal, metrics and fault-preset endpoints are
+designed for assertions and diagnosis by consuming test suites.
+
+## Report a mismatch or missing capability
+
+Follow the [agent reporting contract](https://github.com/crvouga/mockingbird/blob/main/docs/REPORTING_ISSUES.md). Include package version,
+operation/command, a minimal redacted request, actual mock result, expected oracle result or vendor
+documentation, and whether the mismatch appears in the matrix. Never include keys, tokens,
+customer data, prompts, PHI, card data, or unredacted recordings.
+
+Service key: `paddle`.

package/README.md

@@ -183,7 +183,7 @@ answers 500 `internal_error`), `bad_gateway_html` (reads answer a 502 HTML page)
 
 `new Paddle(key)` cannot add a namespace header on its own (it can with `customHeaders`), so
 map API keys to namespaces: `PUT /__admin/credentials {"credentials": {"<PADDLE_API_KEY>":
-"<namespace>"}}`. Also `x-mockingbird-namespace`, or a `/ns/<name>` prefix on the base URL
+"<namespace>"}}`. Also `x-mockingbird-namespace`, or a `/__admin/ns/<name>` prefix on the base URL
 (`meta.pagination.next` keeps it).
 
 ### Deliberately not modelled

package/SUPPORT.md

@@ -0,0 +1,58 @@
+# Paddle Billing API (Mockingbird subset) — operation support
+
+Generated from `openapi.yaml`; do not edit by hand.
+
+- operations in spec: **48**
+- supported by the mock: **37**
+- parity enabled: **37**
+
+| operationId | route | mock | parity | notes |
+| --- | --- | --- | --- | --- |
+| `ListCustomers` | `GET /customers` | ✅ supported | ✅ |  |
+| `CreateCustomer` | `POST /customers` | ✅ supported | ⚠️ unsafe (opt-in) |  |
+| `GetCustomer` | `GET /customers/{customer_id}` | ✅ supported | ✅ |  |
+| `UpdateCustomer` | `PATCH /customers/{customer_id}` | ✅ supported | ⚠️ unsafe (opt-in) |  |
+| `GetCustomerCreditBalances` | `GET /customers/{customer_id}/credit-balances` | ✅ supported | ✅ |  |
+| `CreateCustomerAuthToken` | `POST /customers/{customer_id}/auth-token` | ✅ supported | ✅ |  |
+| `ListAddresses` | `GET /customers/{customer_id}/addresses` | ✅ supported | ✅ |  |
+| `CreateAddress` | `POST /customers/{customer_id}/addresses` | ✅ supported | ⚠️ unsafe (opt-in) |  |
+| `GetAddress` | `GET /customers/{customer_id}/addresses/{address_id}` | ✅ supported | ✅ |  |
+| `UpdateAddress` | `PATCH /customers/{customer_id}/addresses/{address_id}` | ✅ supported | ⚠️ unsafe (opt-in) |  |
+| `ListBusinesses` | `GET /customers/{customer_id}/businesses` | ✅ supported | ✅ |  |
+| `CreateBusiness` | `POST /customers/{customer_id}/businesses` | ✅ supported | ⚠️ unsafe (opt-in) |  |
+| `GetBusiness` | `GET /customers/{customer_id}/businesses/{business_id}` | ✅ supported | ✅ |  |
+| `UpdateBusiness` | `PATCH /customers/{customer_id}/businesses/{business_id}` | ✅ supported | ⚠️ unsafe (opt-in) |  |
+| `ListProducts` | `GET /products` | ✅ supported | ✅ |  |
+| `CreateProduct` | `POST /products` | ✅ supported | ⚠️ unsafe (opt-in) |  |
+| `GetProduct` | `GET /products/{product_id}` | ✅ supported | ✅ |  |
+| `UpdateProduct` | `PATCH /products/{product_id}` | ✅ supported | ⚠️ unsafe (opt-in) |  |
+| `ListPrices` | `GET /prices` | ✅ supported | ✅ |  |
+| `CreatePrice` | `POST /prices` | ✅ supported | ⚠️ unsafe (opt-in) |  |
+| `GetPrice` | `GET /prices/{price_id}` | ✅ supported | ✅ |  |
+| `UpdatePrice` | `PATCH /prices/{price_id}` | ✅ supported | ⚠️ unsafe (opt-in) |  |
+| `ListTransactions` | `GET /transactions` | ✅ supported | ✅ |  |
+| `CreateTransaction` | `POST /transactions` | ✅ supported | ⚠️ unsafe (opt-in) |  |
+| `PreviewTransaction` | `POST /transactions/preview` | ✅ supported | ✅ |  |
+| `GetTransaction` | `GET /transactions/{transaction_id}` | ✅ supported | ✅ |  |
+| `UpdateTransaction` | `PATCH /transactions/{transaction_id}` | ✅ supported | ⚠️ unsafe (opt-in) |  |
+| `GetTransactionInvoice` | `GET /transactions/{transaction_id}/invoice` | ✅ supported | ✅ |  |
+| `ReviseTransaction` | `POST /transactions/{transaction_id}/revise` | ❌ unsupported | — | Invoice revision (customer, business and address corrections on billed transactions) is not modelled. |
+| `ListSubscriptions` | `GET /subscriptions` | ✅ supported | ✅ |  |
+| `GetSubscription` | `GET /subscriptions/{subscription_id}` | ✅ supported | ✅ |  |
+| `UpdateSubscription` | `PATCH /subscriptions/{subscription_id}` | ✅ supported | ⚠️ unsafe (opt-in) |  |
+| `PreviewSubscriptionUpdate` | `PATCH /subscriptions/{subscription_id}/preview` | ❌ unsupported | — | Update previews (proration credit/charge summaries) are not modelled; apply the update instead. |
+| `ActivateSubscription` | `POST /subscriptions/{subscription_id}/activate` | ✅ supported | ⚠️ unsafe (opt-in) |  |
+| `PauseSubscription` | `POST /subscriptions/{subscription_id}/pause` | ✅ supported | ⚠️ unsafe (opt-in) |  |
+| `ResumeSubscription` | `POST /subscriptions/{subscription_id}/resume` | ✅ supported | ⚠️ unsafe (opt-in) |  |
+| `CancelSubscription` | `POST /subscriptions/{subscription_id}/cancel` | ✅ supported | ⚠️ unsafe (opt-in) |  |
+| `CreateSubscriptionCharge` | `POST /subscriptions/{subscription_id}/charge` | ✅ supported | ⚠️ unsafe (opt-in) |  |
+| `PreviewSubscriptionCharge` | `POST /subscriptions/{subscription_id}/charge/preview` | ❌ unsupported | — | One-time charge previews are not modelled; create the charge instead. |
+| `GetSubscriptionPaymentMethodChangeTransaction` | `GET /subscriptions/{subscription_id}/update-payment-method-transaction` | ❌ unsupported | — | Payment method changes go through the hosted checkout, which the mock does not serve. |
+| `ListEvents` | `GET /events` | ✅ supported | ✅ |  |
+| `ListNotificationSettings` | `GET /notification-settings` | ❌ unsupported | — | Notification destinations are configured on the mock (`--webhook-url`, `PUT /__admin/webhook-endpoints`), not through the API. |
+| `CreateNotificationSetting` | `POST /notification-settings` | ❌ unsupported | — | Notification destinations are configured on the mock (`--webhook-url`, `PUT /__admin/webhook-endpoints`), not through the API. |
+| `ListDiscounts` | `GET /discounts` | ❌ unsupported | — | Discounts are not modelled; totals carry a zero discount. |
+| `CreateDiscount` | `POST /discounts` | ❌ unsupported | — | Discounts are not modelled; totals carry a zero discount. |
+| `ListAdjustments` | `GET /adjustments` | ❌ unsupported | — | Refunds and credits (adjustments) are not modelled. |
+| `CreateAdjustment` | `POST /adjustments` | ❌ unsupported | — | Refunds and credits (adjustments) are not modelled. |
+| `CreateCustomerPortalSession` | `POST /customers/{customer_id}/portal-sessions` | ❌ unsupported | — | The hosted customer portal is not served; `management_urls` on a subscription point at placeholder links. |