@digimuza/saas-core 0.0.2

package/dist/billing/revolut.js

@@ -0,0 +1,181 @@
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { InvalidInputError } from "../errors.js";
+const DEFAULT_TIMESTAMP_TOLERANCE_SECONDS = 300;
+/**
+ * Map Revolut order/payment states onto the core's vocabulary.
+ *
+ * Unknown states deliberately fall through to `incomplete` rather than `active`:
+ * treating an unrecognised state as paid would grant entitlements the customer
+ * may not have.
+ */
+export function mapRevolutStatus(state) {
+    switch (state.toLowerCase()) {
+        case "completed":
+        case "paid":
+        case "authorised":
+        case "authorized":
+            return "active";
+        case "pending":
+        case "processing":
+            return "incomplete";
+        case "failed":
+        case "declined":
+            return "past_due";
+        case "cancelled":
+        case "canceled":
+            return "canceled";
+        default:
+            return "incomplete";
+    }
+}
+/**
+ * Verify a Revolut webhook signature.
+ *
+ * Revolut signs `v1.{timestamp}.{raw body}` with HMAC-SHA256 under the webhook
+ * signing secret, and sends the result as `Revolut-Signature: v1=<hex>`. During
+ * secret rotation the header may carry several comma-separated signatures, any
+ * one of which may match.
+ *
+ * Exported separately from the adapter so a route handler can verify without
+ * constructing API credentials it does not need.
+ */
+export function verifyRevolutSignature(input) {
+    const timestampMs = Number(input.timestamp);
+    if (!Number.isFinite(timestampMs)) {
+        return false;
+    }
+    const tolerance = (input.toleranceSeconds ?? DEFAULT_TIMESTAMP_TOLERANCE_SECONDS) * 1000;
+    const now = (input.now ?? Date.now)();
+    /**
+     * Reject stale timestamps, and future ones beyond the same tolerance: a clock
+     * far ahead would otherwise extend a captured request's replay window.
+     */
+    if (Math.abs(now - timestampMs) > tolerance) {
+        return false;
+    }
+    const expected = createHmac("sha256", input.secret)
+        .update(`v1.${input.timestamp}.${input.rawBody}`)
+        .digest("hex");
+    // Rotation can present several signatures; any match is sufficient.
+    const presented = input.signature
+        .split(",")
+        .map((part) => part.trim())
+        .map((part) => (part.startsWith("v1=") ? part.slice(3) : part))
+        .filter((part) => part.length > 0);
+    const expectedBuffer = Buffer.from(expected, "utf8");
+    return presented.some((candidate) => {
+        const candidateBuffer = Buffer.from(candidate, "utf8");
+        if (candidateBuffer.length !== expectedBuffer.length) {
+            return false;
+        }
+        return timingSafeEqual(candidateBuffer, expectedBuffer);
+    });
+}
+export function createRevolutProvider(options) {
+    const fetchImpl = options.fetchImpl ?? globalThis.fetch;
+    const baseUrl = options.apiUrl.replace(/\/+$/, "");
+    async function request(path, body) {
+        const response = await fetchImpl(`${baseUrl}${path}`, {
+            method: "POST",
+            headers: {
+                Authorization: `Bearer ${options.apiKey}`,
+                "Content-Type": "application/json",
+                Accept: "application/json",
+                // Revolut requires an explicit API version.
+                "Revolut-Api-Version": "2024-09-01",
+            },
+            body: JSON.stringify(body),
+        });
+        if (!response.ok) {
+            /**
+             * The response body is not included in the error: provider error payloads
+             * can echo request contents, and this message may reach logs.
+             */
+            throw new Error(`Revolut request to ${path} failed with status ${response.status}.`);
+        }
+        return (await response.json());
+    }
+    return {
+        name: "revolut",
+        async createCustomer(input) {
+            const created = await request("/api/customers", {
+                full_name: input.workspaceName,
+                ...(input.email !== undefined ? { email: input.email } : {}),
+            });
+            return { providerCustomerId: created.id };
+        },
+        async createCheckout(input) {
+            const quantity = input.quantity ?? 1;
+            const order = await request("/api/orders", {
+                amount: input.plan.amountCents * quantity,
+                currency: input.plan.currency,
+                customer: { id: input.providerCustomerId },
+                description: input.plan.name,
+                // Correlates the webhook back to the workspace that is paying.
+                merchant_order_ext_ref: `${input.workspaceId}:${input.plan.key}`,
+                redirect_url: input.successUrl,
+                cancel_url: input.cancelUrl,
+                ...(input.metadata !== undefined ? { metadata: input.metadata } : {}),
+            });
+            if (order.checkout_url === undefined) {
+                throw new Error("Revolut did not return a checkout URL for the created order.");
+            }
+            return { url: order.checkout_url, providerCheckoutId: order.id };
+        },
+        verifyWebhook(input) {
+            if (input.timestamp === undefined) {
+                // No timestamp means no replay protection, so the request is not trusted.
+                return false;
+            }
+            return verifyRevolutSignature({
+                rawBody: input.rawBody,
+                signature: input.signature,
+                timestamp: input.timestamp,
+                secret: options.webhookSecret,
+                ...(options.timestampToleranceSeconds !== undefined
+                    ? { toleranceSeconds: options.timestampToleranceSeconds }
+                    : {}),
+                ...(options.now !== undefined ? { now: options.now } : {}),
+            });
+        },
+        parseWebhookEvent(rawBody) {
+            let body;
+            try {
+                body = JSON.parse(rawBody);
+            }
+            catch (error) {
+                throw new InvalidInputError("Webhook body is not valid JSON.", { cause: error });
+            }
+            const type = typeof body.event === "string" ? body.event : "unknown";
+            const orderId = typeof body.order_id === "string" ? body.order_id : undefined;
+            const eventId = typeof body.id === "string" ? body.id : orderId;
+            if (eventId === undefined) {
+                /**
+                 * Without a stable provider event id there is nothing to deduplicate on,
+                 * and accepting the event would risk applying it repeatedly.
+                 */
+                throw new InvalidInputError("Webhook has no event or order identifier.");
+            }
+            const customerId = typeof body.customer_id === "string" ? body.customer_id : undefined;
+            const state = typeof body.state === "string" ? body.state : undefined;
+            const externalRef = typeof body.merchant_order_ext_ref === "string" ? body.merchant_order_ext_ref : undefined;
+            // `workspaceId:planKey`, as set when the order was created.
+            const planKey = externalRef?.split(":")[1];
+            const base = { providerEventId: eventId, type, payload: body };
+            if (orderId === undefined || customerId === undefined || state === undefined) {
+                return base;
+            }
+            return {
+                ...base,
+                subscription: {
+                    providerSubscriptionId: orderId,
+                    providerCustomerId: customerId,
+                    status: mapRevolutStatus(state),
+                    // Revolut has no price catalogue; the plan travels in the order ref.
+                    ...(planKey !== undefined ? { planKey } : {}),
+                },
+            };
+        },
+    };
+}
+//# sourceMappingURL=revolut.js.map

package/dist/billing/revolut.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revolut.js","sourceRoot":"","sources":["../../src/billing/revolut.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAkDjD,MAAM,mCAAmC,GAAG,GAAG,CAAC;AAEhD;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAa;IAC5C,QAAQ,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5B,KAAK,WAAW,CAAC;QACjB,KAAK,MAAM,CAAC;QACZ,KAAK,YAAY,CAAC;QAClB,KAAK,YAAY;YACf,OAAO,QAAQ,CAAC;QAClB,KAAK,SAAS,CAAC;QACf,KAAK,YAAY;YACf,OAAO,YAAY,CAAC;QACtB,KAAK,QAAQ,CAAC;QACd,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB,KAAK,WAAW,CAAC;QACjB,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB;YACE,OAAO,YAAY,CAAC;IACxB,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAOtC;IACC,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,gBAAgB,IAAI,mCAAmC,CAAC,GAAG,IAAI,CAAC;IACzF,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAEtC;;;OAGG;IACH,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,WAAW,CAAC,GAAG,SAAS,EAAE,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;SAChD,MAAM,CAAC,MAAM,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;SAChD,MAAM,CAAC,KAAK,CAAC,CAAC;IAEjB,oEAAoE;IACpE,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS;SAC9B,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;SAC1B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SAC9D,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAErC,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAErD,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE;QAClC,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACvD,IAAI,eAAe,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM,EAAE,CAAC;YACrD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,eAAe,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC;AAYD,MAAM,UAAU,qBAAqB,CAAC,OAA8B;IAClE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAC;IACxD,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEnD,KAAK,UAAU,OAAO,CAAI,IAAY,EAAE,IAAa;QACnD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,EAAE;YACpD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,OAAO,CAAC,MAAM,EAAE;gBACzC,cAAc,EAAE,kBAAkB;gBAClC,MAAM,EAAE,kBAAkB;gBAC1B,4CAA4C;gBAC5C,qBAAqB,EAAE,YAAY;aACpC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB;;;eAGG;YACH,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,uBAAuB,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;QACvF,CAAC;QAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAM,CAAC;IACtC,CAAC;IAED,OAAO;QACL,IAAI,EAAE,SAAS;QAEf,KAAK,CAAC,cAAc,CAAC,KAA0B;YAC7C,MAAM,OAAO,GAAG,MAAM,OAAO,CAAiB,gBAAgB,EAAE;gBAC9D,SAAS,EAAE,KAAK,CAAC,aAAa;gBAC9B,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7D,CAAC,CAAC;YAEH,OAAO,EAAE,kBAAkB,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC;QAC5C,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,KAA0B;YAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,IAAI,CAAC,CAAC;YAErC,MAAM,KAAK,GAAG,MAAM,OAAO,CACzB,aAAa,EACb;gBACE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,GAAG,QAAQ;gBACzC,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ;gBAC7B,QAAQ,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,kBAAkB,EAAE;gBAC1C,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;gBAC5B,+DAA+D;gBAC/D,sBAAsB,EAAE,GAAG,KAAK,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE;gBAChE,YAAY,EAAE,KAAK,CAAC,UAAU;gBAC9B,UAAU,EAAE,KAAK,CAAC,SAAS;gBAC3B,GAAG,CAAC,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACtE,CACF,CAAC;YAEF,IAAI,KAAK,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;YAClF,CAAC;YAED,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,YAAY,EAAE,kBAAkB,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QACnE,CAAC;QAED,aAAa,CAAC,KAA+B;YAC3C,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBAClC,0EAA0E;gBAC1E,OAAO,KAAK,CAAC;YACf,CAAC;YAED,OAAO,sBAAsB,CAAC;gBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,MAAM,EAAE,OAAO,CAAC,aAAa;gBAC7B,GAAG,CAAC,OAAO,CAAC,yBAAyB,KAAK,SAAS;oBACjD,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,yBAAyB,EAAE;oBACzD,CAAC,CAAC,EAAE,CAAC;gBACP,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC3D,CAAC,CAAC;QACL,CAAC;QAED,iBAAiB,CAAC,OAAe;YAC/B,IAAI,IAAwB,CAAC;YAC7B,IAAI,CAAC;gBACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAuB,CAAC;YACnD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,IAAI,iBAAiB,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;YACnF,CAAC;YAED,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACrE,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9E,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;YAEhE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B;;;mBAGG;gBACH,MAAM,IAAI,iBAAiB,CAAC,2CAA2C,CAAC,CAAC;YAC3E,CAAC;YAED,MAAM,UAAU,GAAG,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACvF,MAAM,KAAK,GAAG,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,MAAM,WAAW,GACf,OAAO,IAAI,CAAC,sBAAsB,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;YAE5F,4DAA4D;YAC5D,MAAM,OAAO,GAAG,WAAW,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAE3C,MAAM,IAAI,GAAyB,EAAE,eAAe,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAErF,IAAI,OAAO,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBAC7E,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO;gBACL,GAAG,IAAI;gBACP,YAAY,EAAE;oBACZ,sBAAsB,EAAE,OAAO;oBAC/B,kBAAkB,EAAE,UAAU;oBAC9B,MAAM,EAAE,gBAAgB,CAAC,KAAK,CAAC;oBAC/B,qEAAqE;oBACrE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC9C;aACF,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/billing/service.d.ts

@@ -0,0 +1,124 @@
+import type { CoreDatabase } from "../db/types.ts";
+import { type CoreEventPublisher } from "../events/publisher.ts";
+import type { BillingCustomer, EntitlementKindValue, Plan, Subscription } from "../db/schema/index.ts";
+import type { WorkspaceContext } from "../workspaces/context.ts";
+import type { BillingProvider, CheckoutSession } from "./provider.ts";
+/** Raised when a webhook's signature does not verify. */
+export declare class InvalidWebhookSignatureError extends Error {
+    readonly name = "InvalidWebhookSignatureError";
+    constructor();
+}
+export interface SubscriptionWithPlan {
+    readonly subscription: Subscription;
+    readonly plan: Plan;
+}
+export interface EntitlementDefinition {
+    readonly key: string;
+    readonly kind: EntitlementKindValue;
+    /** Quota for `kind: "limit"`. Null means unlimited. Ignored for features. */
+    readonly limitValue?: number | null;
+}
+export interface UpsertPlanInput {
+    readonly key: string;
+    readonly name: string;
+    readonly description?: string;
+    readonly providerPriceId?: string;
+    readonly amountCents?: number;
+    readonly currency?: string;
+    readonly interval?: "month" | "year" | "one_time";
+    readonly isActive?: boolean;
+    readonly sortOrder?: number;
+    /** Replaces the plan's entitlements when provided. */
+    readonly entitlements?: readonly EntitlementDefinition[];
+}
+export interface CreateCheckoutOptions {
+    readonly planKey: string;
+    readonly successUrl: string;
+    readonly cancelUrl: string;
+    readonly quantity?: number;
+    readonly metadata?: Record<string, string>;
+}
+export type WebhookOutcome = 
+/** Applied for the first time. */
+{
+    readonly status: "processed";
+    readonly eventId: string;
+    readonly type: string;
+}
+/** Already handled; the provider is retrying. Nothing was re-applied. */
+ | {
+    readonly status: "duplicate";
+    readonly type: string;
+}
+/** Verified and stored, but not actionable — unknown customer or event type. */
+ | {
+    readonly status: "ignored";
+    readonly eventId: string;
+    readonly type: string;
+};
+export interface WebhookRequest {
+    /** The request body exactly as received. Must not be parsed first. */
+    readonly rawBody: string;
+    readonly signature: string;
+    readonly timestamp?: string;
+}
+export interface BillingService {
+    /** The workspace's provider customer, if one has been created. */
+    getCustomer(context: WorkspaceContext): Promise<BillingCustomer | undefined>;
+    /** Get or lazily create the provider customer for this workspace. */
+    ensureCustomer(context: WorkspaceContext, options?: {
+        email?: string;
+    }): Promise<BillingCustomer>;
+    createCheckout(context: WorkspaceContext, options: CreateCheckoutOptions): Promise<CheckoutSession>;
+    /** The workspace's live subscription and its plan, if any. */
+    getSubscription(context: WorkspaceContext): Promise<SubscriptionWithPlan | undefined>;
+    /**
+     * Cancel the live subscription.
+     *
+     * Tells the provider when it supports cancellation, and always records the
+     * local state change so entitlements follow even for providers that do not.
+     */
+    cancelSubscription(context: WorkspaceContext, options?: {
+        atPeriodEnd?: boolean;
+    }): Promise<Subscription>;
+    /**
+     * A hosted billing portal URL, or `undefined` when the provider has none.
+     *
+     * Callers must handle `undefined` rather than assume a URL: Revolut has no
+     * portal, so an application needs its own billing screen.
+     */
+    getPortal(context: WorkspaceContext, options: {
+        returnUrl: string;
+    }): Promise<{
+        url: string | undefined;
+    }>;
+    readonly plans: {
+        list(options?: {
+            includeInactive?: boolean;
+        }): Promise<Plan[]>;
+        getByKey(key: string): Promise<Plan | undefined>;
+        /** Idempotent: safe to run on every boot to sync the catalogue. */
+        upsert(input: UpsertPlanInput): Promise<Plan>;
+        setEntitlements(planKey: string, definitions: readonly EntitlementDefinition[]): Promise<void>;
+    };
+    readonly webhooks: {
+        /**
+         * Verify, record and apply a provider webhook.
+         *
+         * @throws InvalidWebhookSignatureError before any state is touched.
+         */
+        handle(request: WebhookRequest): Promise<WebhookOutcome>;
+    };
+}
+export interface BillingServiceDeps {
+    readonly db: CoreDatabase;
+    readonly provider: BillingProvider;
+    /** Optional event publisher. Omit it and the service emits nothing. */
+    readonly events?: CoreEventPublisher;
+}
+export declare function createBillingService(deps: BillingServiceDeps): BillingService;
+/** Validate an entitlement definition set before it reaches the database. */
+export declare function assertEntitlementDefinitions(definitions: readonly EntitlementDefinition[]): void;
+/** Exposed for diagnostics: how many events are awaiting replay. */
+export declare function countFailedBillingEvents(db: CoreDatabase): Promise<number>;
+//# sourceMappingURL=service.d.ts.map

package/dist/billing/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/billing/service.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,YAAY,EAAmB,MAAM,gBAAgB,CAAC;AACpE,OAAO,EAAe,KAAK,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC9E,OAAO,KAAK,EACV,eAAe,EACf,oBAAoB,EACpB,IAAI,EACJ,YAAY,EACb,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EAEhB,MAAM,eAAe,CAAC;AAEvB,yDAAyD;AACzD,qBAAa,4BAA6B,SAAQ,KAAK;IACrD,SAAkB,IAAI,kCAAkC;IAExD,cAMC;CACF;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE,YAAY,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,MAAM,GAAG,UAAU,CAAC;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,sDAAsD;IACtD,QAAQ,CAAC,YAAY,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;CAC1D;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC5C;AAED,MAAM,MAAM,cAAc;AACxB,kCAAkC;AAChC;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACnF,yEAAyE;GACvE;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACzD,gFAAgF;GAC9E;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpF,MAAM,WAAW,cAAc;IAC7B,sEAAsE;IACtE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,cAAc;IAC7B,kEAAkE;IAClE,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAAC;IAE7E,qEAAqE;IACrE,cAAc,CAAC,OAAO,EAAE,gBAAgB,EAAE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAElG,cAAc,CAAC,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IAEpG,8DAA8D;IAC9D,eAAe,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;IAEtF;;;;;OAKG;IACH,kBAAkB,CAChB,OAAO,EAAE,gBAAgB,EACzB,OAAO,CAAC,EAAE;QAAE,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,GAClC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEzB;;;;;OAKG;IACH,SAAS,CACP,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAC7B,OAAO,CAAC;QAAE,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;KAAE,CAAC,CAAC;IAExC,QAAQ,CAAC,KAAK,EAAE;QACd,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,eAAe,CAAC,EAAE,OAAO,CAAA;SAAE,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAC/D,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,SAAS,CAAC,CAAC;QACjD,mEAAmE;QACnE,MAAM,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QAC9C,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,qBAAqB,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAChG,CAAC;IAEF,QAAQ,CAAC,QAAQ,EAAE;QACjB;;;;WAIG;QACH,MAAM,CAAC,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;KAC1D,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,YAAY,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,uEAAuE;IACvE,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC;CACtC;AAED,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,kBAAkB,GAAG,cAAc,CAghB7E;AAED,6EAA6E;AAC7E,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,SAAS,qBAAqB,EAAE,GAC5C,IAAI,CAmBN;AAED,oEAAoE;AACpE,wBAAsB,wBAAwB,CAAC,EAAE,EAAE,YAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAMhF"}