@delightstack/stripe 0.1.0

package/dist/server/billing.sync.js

@@ -0,0 +1,122 @@
+import { getStripe, stripeCall } from './billing.stripe';
+/** Max pages fetched when listing a customer's subscriptions (100 per page) */
+const MAX_SUBSCRIPTION_PAGES = 10;
+/** Status priority used to pick the most relevant subscription */
+const STATUS_PRIORITY = [
+    'active',
+    'trialing',
+    'past_due',
+    'canceled',
+];
+/** Lists ALL subscriptions for a customer (paginated, not capped at one page) */
+async function listAllSubscriptions(config, customer_id) {
+    const stripe = getStripe(config);
+    const all = [];
+    let starting_after;
+    for (let page = 0; page < MAX_SUBSCRIPTION_PAGES; page++) {
+        const result = await stripeCall(() => stripe.subscriptions.list({
+            customer: customer_id,
+            status: 'all',
+            limit: 100,
+            ...(starting_after ? { starting_after } : {}),
+            expand: ['data.items.data.price.product'],
+        }));
+        all.push(...result.data);
+        if (!result.has_more || result.data.length === 0)
+            break;
+        starting_after = result.data[result.data.length - 1].id;
+    }
+    return all;
+}
+/** Computes the SubscriptionState for the most relevant subscription (or null) */
+function computeState(config, subscriptions) {
+    // Find the most relevant subscription (active > trialing > past_due > canceled)
+    const sorted = subscriptions
+        .filter((s) => STATUS_PRIORITY.includes(s.status))
+        .sort((a, b) => STATUS_PRIORITY.indexOf(a.status) - STATUS_PRIORITY.indexOf(b.status));
+    const subscription = sorted[0] ?? null;
+    if (!subscription)
+        return null;
+    // Extract plan IDs and entitlements from the subscription's products
+    const plan_ids = [];
+    const granted_entitlements = [];
+    for (const item of subscription.items.data) {
+        const product = item.price.product;
+        const plan_id = product.metadata?.plan_id;
+        if (plan_id) {
+            plan_ids.push(plan_id);
+            // Find the matching plan definition
+            const plan_def = config.plans?.find((p) => p.id === plan_id);
+            if (plan_def?.entitlements) {
+                granted_entitlements.push(...plan_def.entitlements);
+            }
+        }
+    }
+    return {
+        subscription_id: subscription.id,
+        status: subscription.status,
+        plan_ids,
+        entitlements: [...new Set(granted_entitlements)],
+        current_period_start: subscription.current_period_start * 1000,
+        current_period_end: subscription.current_period_end * 1000,
+        cancel_at: subscription.cancel_at ? subscription.cancel_at * 1000 : undefined,
+        canceled_at: subscription.canceled_at ? subscription.canceled_at * 1000 : undefined,
+        trial_start: subscription.trial_start ? subscription.trial_start * 1000 : undefined,
+        trial_end: subscription.trial_end ? subscription.trial_end * 1000 : undefined,
+    };
+}
+/** Whether a subscription state grants its plans/entitlements */
+function isStateActive(state) {
+    return state?.status === 'active' || state?.status === 'trialing';
+}
+/**
+ * Lightweight read of the current subscription state from Stripe.
+ * Does NOT update auth entitlements or broadcast — use for GET endpoints.
+ */
+export async function fetchSubscriptionState(config, customer_id) {
+    const subscriptions = await listAllSubscriptions(config, customer_id);
+    return computeState(config, subscriptions);
+}
+/** The plan ids that should be cached in org_state for `requirePlan()` */
+export function activePlanIds(state) {
+    return isStateActive(state) ? state.plan_ids : [];
+}
+/**
+ * Fetches the latest subscription state from Stripe and syncs entitlements
+ * to the auth package. Returns the current subscription state.
+ */
+export async function syncSubscription(ctx) {
+    const subscriptions = await listAllSubscriptions(ctx.config, ctx.customer_id);
+    const state = computeState(ctx.config, subscriptions);
+    // Update auth entitlements (cleared unless active/trialing)
+    await updateEntitlements(ctx, isStateActive(state) ? state.entitlements : []);
+    // Cache active plan ids in org_state so requirePlan() guards work
+    ctx.setOrgState?.({ billing_plan_ids: activePlanIds(state) });
+    broadcastChange(ctx, state);
+    return state;
+}
+/** Encode entitlement names to a bitwise integer and update the auth org */
+async function updateEntitlements(ctx, entitlement_names) {
+    if (!ctx.auth || !ctx.org_id || !ctx.config.entitlements?.length)
+        return;
+    const entitlements_array = ctx.config.entitlements;
+    let encoded = 0;
+    for (const name of entitlement_names) {
+        const bit = entitlements_array.indexOf(name);
+        if (bit !== -1)
+            encoded |= 1 << bit;
+    }
+    await ctx.auth.updateOrg(ctx.org_id, { plan: encoded });
+}
+/** Broadcast subscription change via WebSocket */
+function broadcastChange(ctx, state) {
+    if (!ctx.ws)
+        return;
+    ctx.ws.broadcast({
+        event: 'billing:subscription:changed',
+        subscription_id: state?.subscription_id ?? null,
+        status: state?.status ?? 'canceled',
+        plan_ids: state?.plan_ids ?? [],
+        entitlements: state?.entitlements ?? [],
+    });
+}

package/dist/server/billing.webhook.d.ts

@@ -0,0 +1,10 @@
+import type { RequestEvent } from '@sveltejs/kit';
+import type { ResolvedBillingConfig, AuthServerRpc, WebsocketRpc } from './billing.config';
+export interface WebhookContext {
+    getAuthServer?: (event: RequestEvent) => AuthServerRpc | undefined;
+    getWebsocket?: (event: RequestEvent) => WebsocketRpc | undefined;
+}
+/** Resets the cached webhook secret (for tests) @internal */
+export declare function resetWebhookSecretCache(): void;
+export declare function handleWebhook(event: RequestEvent, config: ResolvedBillingConfig, ctx: WebhookContext): Promise<Response>;
+//# sourceMappingURL=billing.webhook.d.ts.map

package/dist/server/billing.webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.webhook.d.ts","sourceRoot":"","sources":["../../src/server/billing.webhook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAElD,OAAO,KAAK,EACX,qBAAqB,EACrB,aAAa,EACb,YAAY,EACZ,MAAM,kBAAkB,CAAC;AAM1B,MAAM,WAAW,cAAc;IAC9B,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,aAAa,GAAG,SAAS,CAAC;IACnE,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,YAAY,GAAG,SAAS,CAAC;CACjE;AASD,6DAA6D;AAC7D,wBAAgB,uBAAuB,IAAI,IAAI,CAE9C;AAuED,wBAAsB,aAAa,CAClC,KAAK,EAAE,YAAY,EACnB,MAAM,EAAE,qBAAqB,EAC7B,GAAG,EAAE,cAAc,GACjB,OAAO,CAAC,QAAQ,CAAC,CAwKnB"}

package/dist/server/billing.webhook.js

@@ -0,0 +1,222 @@
+import { DelightError } from '@delightstack/utilities';
+import { getStripe } from './billing.stripe';
+import { syncSubscription } from './billing.sync';
+import { ensureWebhookRegistered } from './billing.webhook.register';
+/**
+ * In-flight/cached webhook secret registration (auto-registered).
+ * A single shared promise guards against two simultaneous cold-start webhooks
+ * both auto-registering a webhook endpoint.
+ */
+let webhook_secret_promise = null;
+/** Resets the cached webhook secret (for tests) @internal */
+export function resetWebhookSecretCache() {
+    webhook_secret_promise = null;
+}
+/** Resolve the webhook signing secret, auto-registering if needed */
+async function resolveWebhookSecret(event, config) {
+    if (config.webhook_secret)
+        return config.webhook_secret;
+    if (!webhook_secret_promise) {
+        const app_url = config.app_url ?? event.url.origin;
+        webhook_secret_promise = ensureWebhookRegistered(config, app_url).catch((error) => {
+            // Allow a retry on the next request instead of caching the failure
+            webhook_secret_promise = null;
+            throw error;
+        });
+    }
+    return webhook_secret_promise;
+}
+// ── Webhook idempotency ────────────────────────────────────────────
+/** How long processed event IDs are remembered by the default store */
+const EVENT_ID_TTL_MS = 24 * 60 * 60 * 1000;
+/** Max processed event IDs kept by the default store */
+const EVENT_ID_CAP = 5000;
+/** Default in-memory idempotency store (per-isolate, TTL + cap) */
+const processed_event_ids = new Map();
+function defaultEventStoreHas(event_id) {
+    const now = Date.now();
+    // Prune expired entries (Map preserves insertion order — oldest first)
+    for (const [id, added_at] of processed_event_ids) {
+        if (now - added_at <= EVENT_ID_TTL_MS)
+            break;
+        processed_event_ids.delete(id);
+    }
+    return processed_event_ids.has(event_id);
+}
+function defaultEventStoreAdd(event_id) {
+    processed_event_ids.set(event_id, Date.now());
+    // Enforce the cap (evict oldest first)
+    while (processed_event_ids.size > EVENT_ID_CAP) {
+        const oldest = processed_event_ids.keys().next().value;
+        if (oldest === undefined)
+            break;
+        processed_event_ids.delete(oldest);
+    }
+}
+/** Resolve customer_id to org_id via Stripe customer metadata */
+async function resolveOrgIdFromCustomer(stripe, customer_id) {
+    const customer = await stripe.customers.retrieve(customer_id);
+    if (customer.deleted)
+        return undefined;
+    return customer.metadata?.org_id ?? undefined;
+}
+/** Extract customer_id string from a Stripe object's customer field */
+function extractCustomerId(customer) {
+    if (typeof customer === 'string')
+        return customer;
+    return customer?.id ?? '';
+}
+export async function handleWebhook(event, config, ctx) {
+    const stripe = getStripe(config);
+    const webhook_secret = await resolveWebhookSecret(event, config);
+    if (!webhook_secret) {
+        throw new DelightError({
+            message: 'Webhook secret not configured',
+            status: 500,
+            code: 'billing/webhook_secret_missing',
+        });
+    }
+    // Verify the webhook signature
+    const body = await event.request.text();
+    const sig = event.request.headers.get('stripe-signature');
+    if (!sig) {
+        throw DelightError.badRequest('Missing Stripe signature');
+    }
+    let stripe_event;
+    try {
+        stripe_event = stripe.webhooks.constructEvent(body, sig, webhook_secret);
+    }
+    catch {
+        throw DelightError.badRequest('Invalid webhook signature');
+    }
+    // Idempotency — skip events that were already fully processed so Stripe
+    // retries don't double-apply side effects
+    const event_store = config.webhook_event_store;
+    const already_processed = event_store
+        ? await event_store.has(stripe_event.id)
+        : defaultEventStoreHas(stripe_event.id);
+    if (already_processed) {
+        return new Response(JSON.stringify({ received: true, duplicate: true }), {
+            status: 200,
+            headers: { 'Content-Type': 'application/json' },
+        });
+    }
+    // Dispatch event
+    switch (stripe_event.type) {
+        case 'customer.subscription.created':
+        case 'customer.subscription.updated':
+        case 'customer.subscription.deleted': {
+            const subscription = stripe_event.data.object;
+            const customer_id = extractCustomerId(subscription.customer);
+            const org_id = await resolveOrgIdFromCustomer(stripe, customer_id);
+            const state = await syncSubscription({
+                config,
+                customer_id,
+                org_id,
+                auth: org_id ? ctx.getAuthServer?.(event) : undefined,
+                ws: org_id ? ctx.getWebsocket?.(event) : undefined,
+            });
+            if (config.hooks?.onSubscriptionChange) {
+                if (state) {
+                    await config.hooks.onSubscriptionChange({
+                        customer_id,
+                        subscription_id: state.subscription_id,
+                        status: state.status,
+                        plan_id: state.plan_ids[0] ?? null,
+                        entitlements: state.entitlements,
+                        event,
+                    });
+                }
+                else if (stripe_event.type === 'customer.subscription.deleted') {
+                    // No remaining subscription — still fire the hook so apps can
+                    // react to cancellations (the most important lifecycle event)
+                    await config.hooks.onSubscriptionChange({
+                        customer_id,
+                        subscription_id: subscription.id,
+                        status: 'canceled',
+                        plan_id: null,
+                        entitlements: [],
+                        event,
+                    });
+                }
+            }
+            break;
+        }
+        case 'invoice.paid': {
+            const invoice = stripe_event.data.object;
+            const customer_id = extractCustomerId(invoice.customer);
+            const org_id = await resolveOrgIdFromCustomer(stripe, customer_id);
+            const ws = org_id ? ctx.getWebsocket?.(event) : undefined;
+            // Amounts stay as integer cents end-to-end — no float division
+            if (ws) {
+                ws.broadcast({
+                    event: 'billing:payment:succeeded',
+                    invoice_id: invoice.id,
+                    amount: invoice.amount_paid ?? 0,
+                    currency: invoice.currency,
+                });
+            }
+            if (config.hooks?.onPaymentSuccess) {
+                await config.hooks.onPaymentSuccess({
+                    customer_id,
+                    amount: invoice.amount_paid ?? 0,
+                    currency: invoice.currency,
+                    invoice_id: invoice.id,
+                });
+            }
+            break;
+        }
+        case 'invoice.payment_failed': {
+            const invoice = stripe_event.data.object;
+            const customer_id = extractCustomerId(invoice.customer);
+            const org_id = await resolveOrgIdFromCustomer(stripe, customer_id);
+            const ws = org_id ? ctx.getWebsocket?.(event) : undefined;
+            // Amounts stay as integer cents end-to-end — no float division
+            if (ws) {
+                ws.broadcast({
+                    event: 'billing:payment:failed',
+                    invoice_id: invoice.id,
+                    amount: invoice.amount_due ?? 0,
+                    currency: invoice.currency,
+                });
+            }
+            if (config.hooks?.onPaymentFailed) {
+                await config.hooks.onPaymentFailed({
+                    customer_id,
+                    amount: invoice.amount_due ?? 0,
+                    currency: invoice.currency,
+                    invoice_id: invoice.id,
+                });
+            }
+            break;
+        }
+        case 'checkout.session.completed': {
+            const session = stripe_event.data.object;
+            if (session.mode === 'subscription' && session.customer) {
+                const customer_id = extractCustomerId(session.customer);
+                const org_id = await resolveOrgIdFromCustomer(stripe, customer_id);
+                await syncSubscription({
+                    config,
+                    customer_id,
+                    org_id,
+                    auth: org_id ? ctx.getAuthServer?.(event) : undefined,
+                    ws: org_id ? ctx.getWebsocket?.(event) : undefined,
+                });
+            }
+            break;
+        }
+        default:
+            // Unhandled event type — no-op
+            break;
+    }
+    // Mark the event as processed AFTER all side effects succeeded so a
+    // failed handler is retried by Stripe (at-least-once with dedupe)
+    if (event_store)
+        await event_store.add(stripe_event.id);
+    else
+        defaultEventStoreAdd(stripe_event.id);
+    return new Response(JSON.stringify({ received: true }), {
+        status: 200,
+        headers: { 'Content-Type': 'application/json' },
+    });
+}

package/dist/server/billing.webhook.register.d.ts

@@ -0,0 +1,12 @@
+import type { ResolvedBillingConfig } from './billing.config';
+/**
+ * Ensures a webhook endpoint is registered in Stripe for this app.
+ * Called automatically on first webhook request if webhook_secret is not provided.
+ *
+ * In dev mode: deletes any existing webhook with the same URL and creates a fresh one.
+ * In production: warns that webhook_secret should be configured.
+ *
+ * Returns the webhook signing secret.
+ */
+export declare function ensureWebhookRegistered(config: ResolvedBillingConfig, app_url: string): Promise<string>;
+//# sourceMappingURL=billing.webhook.register.d.ts.map

package/dist/server/billing.webhook.register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.webhook.register.d.ts","sourceRoot":"","sources":["../../src/server/billing.webhook.register.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAmB9D;;;;;;;;GAQG;AACH,wBAAsB,uBAAuB,CAC5C,MAAM,EAAE,qBAAqB,EAC7B,OAAO,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAwCjB"}

package/dist/server/billing.webhook.register.js

@@ -0,0 +1,57 @@
+import { DelightError } from '@delightstack/utilities';
+import { getStripe, stripeCall } from './billing.stripe';
+/** Webhook events the billing system needs to listen to */
+const REQUIRED_EVENTS = [
+    'customer.subscription.created',
+    'customer.subscription.updated',
+    'customer.subscription.deleted',
+    'invoice.paid',
+    'invoice.payment_failed',
+    'invoice.finalized',
+    'checkout.session.completed',
+    'customer.created',
+    'customer.updated',
+    'payment_method.attached',
+    'payment_method.detached',
+];
+/**
+ * Ensures a webhook endpoint is registered in Stripe for this app.
+ * Called automatically on first webhook request if webhook_secret is not provided.
+ *
+ * In dev mode: deletes any existing webhook with the same URL and creates a fresh one.
+ * In production: warns that webhook_secret should be configured.
+ *
+ * Returns the webhook signing secret.
+ */
+export async function ensureWebhookRegistered(config, app_url) {
+    const stripe = getStripe(config);
+    const webhook_url = `${app_url}${config.base_path}/webhook`;
+    // Check for existing webhook with this URL
+    const existing = await stripeCall(() => stripe.webhookEndpoints.list({ limit: 100 }));
+    const match = existing.data.find((wh) => wh.url === webhook_url && wh.status === 'enabled');
+    if (match) {
+        if (config.dev) {
+            // In dev mode, delete and recreate to get a fresh secret
+            await stripeCall(() => stripe.webhookEndpoints.del(match.id));
+        }
+        else {
+            // In production, the secret of an existing webhook can't be read back
+            // from Stripe — fail loudly with a clear setup error instead of an
+            // opaque "Webhook secret not configured" 500 later on
+            throw new DelightError({
+                message: 'A Stripe webhook endpoint already exists for this app but webhook_secret is not configured. ' +
+                    'Set webhook_secret in your billing config (from the Stripe dashboard) for production use.',
+                status: 500,
+                code: 'billing/webhook_secret_missing',
+            });
+        }
+    }
+    // Create new webhook endpoint
+    const webhook = await stripeCall(() => stripe.webhookEndpoints.create({
+        url: webhook_url,
+        enabled_events: REQUIRED_EVENTS,
+        description: '@delightstack/stripe auto-registered webhook',
+        metadata: { delightstack: 'true' },
+    }));
+    return webhook.secret;
+}

package/dist/server/index.d.ts

@@ -0,0 +1,9 @@
+export { defineBillingConfig, type BillingConfig, type ResolvedBillingConfig, type PlanDefinition, type MeterDefinition, type AuthServerRpc, type WebsocketRpc, type WebhookEventStore, } from './billing.config';
+export { createBillingHandle, type BillingHandleOptions } from './billing.handler';
+export { syncSubscription, fetchSubscriptionState, type SyncContext, } from './billing.sync';
+export { syncProducts, syncMeters, syncAll } from './billing.products';
+export { reportMeterEvent, createMeterReporter } from './billing.meter';
+export { getStripe, stripeCall } from './billing.stripe';
+export { handleWebhook } from './billing.webhook';
+export { ensureWebhookRegistered } from './billing.webhook.register';
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,mBAAmB,EACnB,KAAK,aAAa,EAClB,KAAK,qBAAqB,EAC1B,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,aAAa,EAClB,KAAK,YAAY,EACjB,KAAK,iBAAiB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,mBAAmB,EAAE,KAAK,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACnF,OAAO,EACN,gBAAgB,EAChB,sBAAsB,EACtB,KAAK,WAAW,GAChB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/server/index.js

@@ -0,0 +1,8 @@
+export { defineBillingConfig, } from './billing.config';
+export { createBillingHandle } from './billing.handler';
+export { syncSubscription, fetchSubscriptionState, } from './billing.sync';
+export { syncProducts, syncMeters, syncAll } from './billing.products';
+export { reportMeterEvent, createMeterReporter } from './billing.meter';
+export { getStripe, stripeCall } from './billing.stripe';
+export { handleWebhook } from './billing.webhook';
+export { ensureWebhookRegistered } from './billing.webhook.register';

package/dist/sveltekit/guards.d.ts

@@ -0,0 +1,29 @@
+import type { ServerLoadEvent } from '@sveltejs/kit';
+interface BillingGuardOptions {
+    /** URL to redirect unauthenticated users to @default '/signin' */
+    redirect_to?: string;
+    /** URL to redirect users without a subscription to @default '/pricing' */
+    subscription_redirect?: string;
+}
+/**
+ * Creates billing-specific guard functions for SvelteKit load functions.
+ *
+ * @example
+ * ```ts
+ * const { requireSubscription, requirePlan } = createBillingGuards({
+ *   plans: ['starter-monthly', 'pro-monthly'] as const,
+ * });
+ *
+ * // In +page.server.ts:
+ * export const load = requireSubscription(({ locals }) => ({ ... }));
+ * export const load = requirePlan('pro-monthly', ({ locals }) => ({ ... }));
+ * ```
+ */
+export declare function createBillingGuards<const P extends string>(_options: {
+    plans: readonly P[];
+}): {
+    requireSubscription: <T>(loadFn: (event: ServerLoadEvent) => T | Promise<T>, guardOptions?: BillingGuardOptions) => (event: ServerLoadEvent) => Promise<T>;
+    requirePlan: <T>(plan_id: P, loadFn: (event: ServerLoadEvent) => T | Promise<T>, guardOptions?: BillingGuardOptions) => (event: ServerLoadEvent) => Promise<T>;
+};
+export {};
+//# sourceMappingURL=guards.d.ts.map

package/dist/sveltekit/guards.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"guards.d.ts","sourceRoot":"","sources":["../../src/sveltekit/guards.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAErD,UAAU,mBAAmB;IAC5B,kEAAkE;IAClE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0EAA0E;IAC1E,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,CAAC,CAAC,SAAS,MAAM,EAAE,QAAQ,EAAE;IACrE,KAAK,EAAE,SAAS,CAAC,EAAE,CAAC;CACpB;0BAO6B,CAAC,UACrB,CAAC,KAAK,EAAE,eAAe,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,iBACnC,mBAAmB,KAChC,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,CAAC,CAAC;kBAsBpB,CAAC,sBAEb,CAAC,KAAK,EAAE,eAAe,KAAK,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,iBACnC,mBAAmB,KAChC,CAAC,KAAK,EAAE,eAAe,KAAK,OAAO,CAAC,CAAC,CAAC;EAoBzC"}

package/dist/sveltekit/guards.js

@@ -0,0 +1,57 @@
+import { redirect } from '@sveltejs/kit';
+/**
+ * Creates billing-specific guard functions for SvelteKit load functions.
+ *
+ * @example
+ * ```ts
+ * const { requireSubscription, requirePlan } = createBillingGuards({
+ *   plans: ['starter-monthly', 'pro-monthly'] as const,
+ * });
+ *
+ * // In +page.server.ts:
+ * export const load = requireSubscription(({ locals }) => ({ ... }));
+ * export const load = requirePlan('pro-monthly', ({ locals }) => ({ ... }));
+ * ```
+ */
+export function createBillingGuards(_options) {
+    /**
+     * Requires any active subscription (entitlements > 0 on the org).
+     * Redirects to /pricing if no subscription.
+     */
+    function requireSubscription(loadFn, guardOptions) {
+        return async (event) => {
+            const locals = event.locals;
+            if (!locals.session) {
+                const target = guardOptions?.redirect_to ?? '/signin';
+                const return_to = encodeURIComponent(event.url.pathname + event.url.search);
+                throw redirect(302, `${target}?redirect=${return_to}`);
+            }
+            const org = locals.org;
+            if (!org || org.entitlements == null || org.entitlements === 0) {
+                throw redirect(302, guardOptions?.subscription_redirect ?? '/pricing');
+            }
+            return loadFn(event);
+        };
+    }
+    /**
+     * Requires a specific plan. Checks the org_state cookie for cached billing_plan_ids.
+     * Redirects to /pricing if the plan is not active.
+     */
+    function requirePlan(plan_id, loadFn, guardOptions) {
+        return async (event) => {
+            const locals = event.locals;
+            if (!locals.session) {
+                const target = guardOptions?.redirect_to ?? '/signin';
+                const return_to = encodeURIComponent(event.url.pathname + event.url.search);
+                throw redirect(302, `${target}?redirect=${return_to}`);
+            }
+            const org_state = locals.org_state;
+            const plan_ids = org_state?.billing_plan_ids;
+            if (!plan_ids?.includes(plan_id)) {
+                throw redirect(302, guardOptions?.subscription_redirect ?? '/pricing');
+            }
+            return loadFn(event);
+        };
+    }
+    return { requireSubscription, requirePlan };
+}

package/dist/sveltekit/index.d.ts

@@ -0,0 +1,2 @@
+export { createBillingGuards } from './guards';
+//# sourceMappingURL=index.d.ts.map

package/dist/sveltekit/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/sveltekit/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC"}

package/dist/sveltekit/index.js

@@ -0,0 +1 @@
+export { createBillingGuards } from './guards';

package/dist/types/billing.type.d.ts

@@ -0,0 +1,61 @@
+import type Stripe from 'stripe';
+/** Current subscription state — returned from sync and stored reactively on the client */
+export interface SubscriptionState {
+    subscription_id: string;
+    status: Stripe.Subscription.Status;
+    plan_ids: string[];
+    entitlements: string[];
+    current_period_start: number;
+    current_period_end: number;
+    cancel_at?: number;
+    canceled_at?: number;
+    trial_start?: number;
+    trial_end?: number;
+}
+/** Client-safe plan information */
+export interface PlanInfo {
+    id: string;
+    name: string;
+    description?: string;
+    amount: number;
+    currency: string;
+    interval: 'month' | 'year' | 'week' | 'day';
+    interval_count: number;
+    entitlements: string[];
+    trial_days?: number;
+}
+/** Formatted payment method info for client display */
+export interface PaymentMethodInfo {
+    id: string;
+    type: string;
+    brand?: string;
+    last4?: string;
+    exp_month?: number;
+    exp_year?: number;
+    display_name: string;
+    is_default: boolean;
+}
+/**
+ * Formatted invoice info for client display.
+ * All monetary amounts are integers in the smallest currency unit
+ * (e.g. cents — 499 = $4.99), matching `PlanDefinition.amount`.
+ */
+export interface InvoiceInfo {
+    id: string;
+    number: string | null;
+    status: string | null;
+    /** Integer amount in the smallest currency unit (e.g. cents) */
+    amount_paid: number;
+    /** Integer amount in the smallest currency unit (e.g. cents) */
+    amount_due: number;
+    /** Integer amount in the smallest currency unit (e.g. cents) */
+    total: number;
+    currency: string;
+    created: number;
+    due_date: number | null;
+    period_start: number | null;
+    period_end: number | null;
+    pdf: string | null;
+    hosted_invoice_url: string | null;
+}
+//# sourceMappingURL=billing.type.d.ts.map

package/dist/types/billing.type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.type.d.ts","sourceRoot":"","sources":["../../src/types/billing.type.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAEjC,0FAA0F;AAC1F,MAAM,WAAW,iBAAiB;IACjC,eAAe,EAAE,MAAM,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC;IACnC,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,mCAAmC;AACnC,MAAM,WAAW,QAAQ;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,KAAK,CAAC;IAC5C,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,uDAAuD;AACvD,MAAM,WAAW,iBAAiB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC;IACpB,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAC;IACnB,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,kBAAkB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC"}

package/dist/types/billing.type.js

@@ -0,0 +1 @@
+export {};

package/dist/types/index.d.ts

@@ -0,0 +1,3 @@
+export * from './billing.type';
+export * from './webhook.type';
+//# sourceMappingURL=index.d.ts.map

package/dist/types/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/types/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC"}

package/dist/types/index.js

@@ -0,0 +1,2 @@
+export * from './billing.type';
+export * from './webhook.type';