@crvouga/mockingbird-service-stripe 1.3.1 → 1.4.0

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog — @crvouga/mockingbird-service-stripe
 
+## 1.4.0 (2026-09-29)
+
+### Features
+
+- retry failed subscription renewals and apply the configured outcome ([c737a68](https://github.com/crvouga/mockingbird/commit/c737a6873a5e9b984b382b9f00c0b01f1712116c))
+
+### Fixes and improvements
+
+- validate list elements ahead of a schema issue in order ([5a09c88](https://github.com/crvouga/mockingbird/commit/5a09c880a432b4e13e2ef5b519a8a76962d372da))
+- answer a missing SetupIntent with Stripe's 404 resource_missing ([9e8368f](https://github.com/crvouga/mockingbird/commit/9e8368ff2d01303cf5ff5410afc3387c75163ca6))
+- leave the portal configuration list out of live parity walks ([9adfc89](https://github.com/crvouga/mockingbird/commit/9adfc89ed7dbe88d798724deaf9d9ccddea60800))
+- use --all-snapshot with Stripe CLI 1.52 in the webhook oracle ([d95804c](https://github.com/crvouga/mockingbird/commit/d95804cbdf98bcbd2199865dcdd13157d44b1d12))
+- pass --events to stripe listen so Stripe CLI 1.52 starts ([b31d3da](https://github.com/crvouga/mockingbird/commit/b31d3da44396f79630f21f732fd4fb2cc1d3fcc9))
+- report why stripe listen exited in the webhook oracle ([19461e4](https://github.com/crvouga/mockingbird/commit/19461e478a3d0489aac646820ecaad12b2d6ce2a))
+
 ## 1.3.1 (2026-09-29)
 
 ### Fixes and improvements

package/README.md

@@ -86,7 +86,7 @@ the mock's hosted page.
 
 State is partitioned by **account**, and the account is chosen by API key:
 
-- `PUT /__admin/accounts {"accounts": [{id, keys, apiVersion?, webhookSecrets?, corpus?, displayName?}]}`
+- `PUT /__admin/accounts {"accounts": [{id, keys, apiVersion?, webhookSecrets?, corpus?, displayName?, billing?}]}`
   (also `createRuntime({accounts})` / `serve --accounts <json|file>`). Every key listed on an
   account acts as it. Any other test key is an account of its own (`accountOfKey(key)`), so an MSO
   key reading a PC object gets Stripe's exact `404 resource_missing` (`No such payment_intent: 'pi_…'`).
@@ -94,6 +94,8 @@ State is partitioned by **account**, and the account is chosen by API key:
   its webhook payloads render at (default `2024-06-20`, what every backend receiver of ours pins).
 - `webhookSecrets: {"<receiver url>": "whsec_…"}` delivers every event of the account there.
 - `corpus: true` seeds the recorded catalog (below).
+- `billing: {retries: {scheduleDays?, afterAllFail?}}` sets the account's failed-renewal retries
+  (see Lifecycles and the clock); unset fields use `createRuntime({lifecycle: {paymentRetries}})`.
 
 **Namespaces** isolate parallel workers; each namespace has its own copy of every account. Carriers:
 the `x-mockingbird-namespace` header, the `/ns/<namespace>/…` path prefix, or **by API key**:
@@ -171,6 +173,18 @@ clock-driven lifecycle, so their webhooks fire at once; the served mock also tic
   voided (`void`), marked `uncollectible` (`mark_uncollectible`, `invoice.marked_uncollectible`) or
   left as drafts (`keep_as_draft`), never charged; the status holds. `pause_collection[resumes_at]`
   lifts the pause on its own before the renewal it precedes; `pause_collection=""` lifts it now.
+- **Payment retries**: a declined renewal (`charge_automatically`) leaves the invoice `open` with
+  `attempt_count: 1` and `next_payment_attempt`, and the subscription `past_due`. Each retry
+  `scheduleDays` after the first failure (default `[3, 5, 7]`, Stripe's classic "3 retries over
+  1 week") charges again when the clock reaches it: a decline bumps `attempt_count`, emits
+  `invoice.payment_failed` and moves `next_payment_attempt`; a working default payment method pays
+  the invoice (`invoice.paid`) and the subscription is `active` again
+  (`customer.subscription.updated`). After the last retry `next_payment_attempt` is `null` and
+  `afterAllFail` applies: `cancel` (the default: `canceled`, `cancellation_details.reason:
+  payment_failed`, `customer.subscription.deleted`), `unpaid` (`customer.subscription.updated`) or
+  `past_due` (nothing changes). An empty schedule applies it at the first failure. The schedule is
+  fixed, not Stripe's ML-timed Smart Retries; set it per account (`billing.retries`, also
+  `PUT /__admin/accounts`) or for the runtime (`lifecycle.paymentRetries`). Dunning emails are not sent.
 - `incomplete` subscriptions become `incomplete_expired` after 23 h (their invoice is voided).
 - Checkout Sessions expire at `expires_at` (`checkout.session.expired`).
 - Schedule phases advance; the last one releases or cancels per `end_behavior`.
@@ -367,8 +381,6 @@ plus `port`, `host`; resolves `{url, port, runtime, close}`), `serveTarget` (the
   PaymentSheet cannot be redirected (member-app native keeps its fake provider).
 - **Connect** (`Stripe-Account`, application fees, transfers), tax, shipping, Radar, mandates,
   meters, quotes, credit notes, payouts, and non-card payment methods (bank debits, wallets).
-- **Smart retries / dunning**: a failed renewal goes `past_due` once; later automatic retries,
-  `unpaid` and dunning emails are not run.
 - **Proration arithmetic** is day-fraction approximate (Stripe prorates to the second);
   `auto_advance` drafts are not finalized an hour later.
 - **Customer portal extras**: the login page (`login_page.url` is not served), `schedule_at_period_end`

package/dist/{chunk-E54EAWQ7.js → chunk-P77GCNSW.js}

@@ -1559,7 +1559,7 @@ var restoreNamespace = (sqlite, namespace, snapshot) => {
 };
 
 // ../core/dist/version.js
-var PACKAGE_VERSION = true ? "1.3.1" : UNRELEASED_VERSION;
+var PACKAGE_VERSION = true ? "1.4.0" : UNRELEASED_VERSION;
 
 // ../core/dist/signing.js
 var encoder = new TextEncoder();
@@ -2583,6 +2583,27 @@ var eraOf = (version) => {
 };
 
 // src/accounts.ts
+var DEFAULT_PAYMENT_RETRIES = {
+  scheduleDays: [3, 5, 7],
+  afterAllFail: "cancel"
+};
+var RETRY_OUTCOMES = ["cancel", "unpaid", "past_due"];
+var validateRetries = (id, value) => {
+  const raw = value?.retries;
+  if (typeof value !== "object" || value === null || typeof raw !== "object" || raw === null)
+    return `${id}: billing must be {"retries": {"scheduleDays": [3, 5, 7], "afterAllFail": "cancel"}}`;
+  const { scheduleDays, afterAllFail } = raw;
+  if (scheduleDays !== void 0 && (!Array.isArray(scheduleDays) || scheduleDays.some(
+    (day, index) => typeof day !== "number" || !Number.isFinite(day) || day <= 0 || index > 0 && day <= scheduleDays[index - 1]
+  )))
+    return `${id}: billing.retries.scheduleDays must be increasing positive numbers of days`;
+  if (afterAllFail !== void 0 && !RETRY_OUTCOMES.includes(afterAllFail))
+    return `${id}: billing.retries.afterAllFail must be one of ${RETRY_OUTCOMES.join(", ")}`;
+  return {
+    ...scheduleDays !== void 0 ? { scheduleDays } : {},
+    ...afterAllFail !== void 0 ? { afterAllFail } : {}
+  };
+};
 var DEFAULT_WEBHOOK_API_VERSION = "2024-06-20";
 var KEY = /^(?:sk|rk|pk)_(?:test|live)_[A-Za-z0-9_]+$/;
 var validateAccounts = (value) => {
@@ -2607,8 +2628,11 @@ var validateAccounts = (value) => {
     const secrets = raw.webhookSecrets;
     if (secrets !== void 0 && (typeof secrets !== "object" || secrets === null || Object.values(secrets).some((secret) => typeof secret !== "string")))
       return `${raw.id}: webhookSecrets must map receiver URLs to whsec_ secrets`;
+    const retries = raw.billing === void 0 ? void 0 : validateRetries(raw.id, raw.billing);
+    if (typeof retries === "string") return retries;
     accounts.push({
       id: raw.id,
+      ...retries ? { billing: { retries } } : {},
       keys: raw.keys,
       ...typeof raw.apiVersion === "string" ? { apiVersion: raw.apiVersion } : {},
       ...secrets ? { webhookSecrets: secrets } : {},
@@ -4875,11 +4899,19 @@ var activateAfterPayment = (scope, subscriptionId, intent) => {
 };
 var markPaymentFailed = (scope, invoice) => {
   const now = customerNow(scope, invoice.customer);
+  const attempts = invoice.attempt_count + 1;
+  let next = now + 3 * DAY;
+  if (invoice.subscription !== null) {
+    const days = scope.services.paymentRetries(scope.account.account).scheduleDays;
+    const first = attempts === 1 || invoice.next_payment_attempt === null ? now : invoice.next_payment_attempt - (days[attempts - 2] ?? 0) * DAY;
+    const day = days[attempts - 1];
+    next = day === void 0 ? null : first + day * DAY;
+  }
   const failed = {
     ...invoice,
-    attempt_count: invoice.attempt_count + 1,
+    attempt_count: attempts,
     attempted: true,
-    next_payment_attempt: now + 3 * DAY
+    next_payment_attempt: next
   };
   scope.account.invoices.update(failed.id, failed);
   scope.emit("invoice.payment_failed", renderInvoice(failed, scope.account));
@@ -5315,12 +5347,15 @@ var cycleSubscription = (scope, current) => {
   });
   claimInvoiceItems(scope, invoice);
   let status = moved.status;
+  let exhausted = false;
   if (!keepDraft) {
     const finalized = finalizeInvoice(scope, invoice);
     const collected = collectCycleInvoice(scope, current, finalized);
     invoice = collected.invoice;
-    if (finalized.status === "open" && current.pause_collection === null && finalized.collection_method === "charge_automatically")
+    if (finalized.status === "open" && current.pause_collection === null && finalized.collection_method === "charge_automatically") {
       status = collected.failed ? "past_due" : "active";
+      exhausted = collected.failed && invoice.attempt_count > 0 && invoice.next_payment_attempt === null;
+    }
   }
   const latest = scope.account.subscriptions.get(current.id) ?? moved;
   const next = {
@@ -5334,6 +5369,33 @@ var cycleSubscription = (scope, current) => {
   const after = renderSubscription(next, scope.account);
   const changed = changedFields(before, after);
   scope.emit("customer.subscription.updated", after, changed);
+  if (exhausted) applyFailedPaymentOutcome(scope, next);
+};
+var applyFailedPaymentOutcome = (scope, current) => {
+  const outcome = scope.services.paymentRetries(scope.account.account).afterAllFail;
+  if (outcome === "cancel") cancelSubscription(scope, current, "payment_failed");
+  else if (outcome === "unpaid") saveSubscription(scope, current, { ...current, status: "unpaid" });
+};
+var retryDueInvoices = (scope, subscription, now) => {
+  for (let guard2 = 0; guard2 < 50; guard2 += 1) {
+    const due = scope.account.invoices.list({
+      order: "oldest",
+      where: (invoice) => invoice.subscription === subscription.id && invoice.status === "open" && invoice.collection_method === "charge_automatically" && invoice.next_payment_attempt !== null && invoice.next_payment_attempt <= now
+    })[0]?.value;
+    if (due === void 0) return;
+    let settled;
+    try {
+      settled = payInvoice(scope, due, { offSession: true });
+    } catch (error) {
+      if (!(error instanceof StripeError)) throw error;
+      settled = scope.account.invoices.get(due.id) ?? due;
+    }
+    const current = scope.account.subscriptions.get(subscription.id);
+    if (settled.status !== "open" || current === void 0) return;
+    if (settled.next_payment_attempt === due.next_payment_attempt) return;
+    if (settled.next_payment_attempt === null) applyFailedPaymentOutcome(scope, current);
+    if (settled.next_payment_attempt === null || current.status !== "past_due") return;
+  }
 };
 var periodAmount = (scope, subscription, at) => {
   const lines = subscriptionItems(scope, subscription).map((item) => {
@@ -5744,7 +5806,8 @@ var releaseSchedule = (scope, schedule, now) => {
 var DEFAULT_LIFECYCLE = {
   upcomingInvoiceDays: 3,
   trialWillEndDays: 3,
-  incompleteExpiryHours: 23
+  incompleteExpiryHours: 23,
+  paymentRetries: DEFAULT_PAYMENT_RETRIES
 };
 var runLifecycle = (scope, settings, onlyCustomers) => {
   const inScope = (customer) => onlyCustomers === void 0 ? customer === null || !findCustomer(scope, customer)?.test_clock : customer !== null && onlyCustomers.has(customer);
@@ -5778,6 +5841,10 @@ var runLifecycle = (scope, settings, onlyCustomers) => {
       );
     }
     for (let guard2 = 0; guard2 < 120; guard2 += 1) {
+      if (subscription.status === "past_due") {
+        retryDueInvoices(scope, subscription, now2);
+        subscription = scope.account.subscriptions.get(subscription.id) ?? subscription;
+      }
       if (!["active", "trialing", "past_due"].includes(subscription.status)) break;
       const cancelAt = subscription.cancel_at;
       if (cancelAt !== null && cancelAt <= now2) {
@@ -6461,7 +6528,13 @@ var parseParams = (schema, raw, options = {}) => {
       if (error) throw error;
     }
     const issue = issues[0];
-    if (issue) throw issueToError(issue);
+    if (issue) {
+      const failing = /^[^[]+\[(\d+)\]/.exec(issue.path)?.[1];
+      const list = params[key];
+      if (failing !== void 0 && Number(failing) > 0 && Array.isArray(list))
+        options.validate?.[key]?.({ ...params, [key]: list.slice(0, Number(failing)) });
+      throw issueToError(issue);
+    }
     options.validate?.[key]?.(params);
   }
   const stray = parsed.issues[0];
@@ -9851,7 +9924,7 @@ var paymentIntentHandlers = (services) => {
 // src/setup-intents.ts
 var requireSetupIntent = (scope, id) => {
   const intent = scope.account.setupIntents.get(id);
-  if (!intent) throw invalidRequest(`No such setup_intent: '${id}'`, "intent", "resource_missing");
+  if (!intent) throw resourceMissing("setupintent", id, "intent");
   return intent;
 };
 var confirmSetup = (scope, intent, method, autoAuthenticate = false) => {
@@ -16942,6 +17015,10 @@ var StripeAPI = class {
       publish: options.onWebhook,
       accounts,
       deliveryVersion: (account) => accounts.config(account)?.apiVersion ?? webhookVersion,
+      paymentRetries: (account) => ({
+        ...this.settings.paymentRetries,
+        ...accounts.config(account)?.billing?.retries
+      }),
       pendingWebhooks: options.pendingWebhooks ?? (() => 0),
       namespacePrefix: options.publicNamespace === void 0 || options.publicNamespace === "default" ? "" : `/ns/${encodeURIComponent(options.publicNamespace)}`,
       publicUrl: options.publicUrl,
@@ -17244,4 +17321,4 @@ export {
   createRuntime2 as createRuntime,
   StripeAPI
 };
-//# sourceMappingURL=chunk-E54EAWQ7.js.map
+//# sourceMappingURL=chunk-P77GCNSW.js.map