@dodopayments/opencode-plugin 0.6.0 → 0.6.2

package/skills/framework-adapters/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: framework-adapters
-description: Guide for mounting official @dodopayments/* checkout, portal, and verified-webhook route handlers in supported web frameworks; use domain skills for payment and lifecycle logic.
+description: Official @dodopayments/* framework adapters that mount Checkout, CustomerPortal, and Webhooks route handlers. Use when integrating Dodo Payments into Next.js, Express, Fastify, Hono, Astro, Remix, SvelteKit, Nuxt, TanStack, Bun, or Convex, such as @dodopayments/nextjs; use domain skills for payment and subscription logic.
 ---
 
 # Framework Adapters
@@ -21,10 +21,12 @@ Dodo publishes `@dodopayments/*` packages that wrap the core SDK with framework-
 
 Each adapter exposes three handler families:
 
-- **Checkout:** static (GET only), dynamic (POST with cart), or session (POST with pre-built session).
+- **Checkout:** static (GET only), dynamic (POST, creates a payment or subscription via the deprecated `POST /payments` / `POST /subscriptions` endpoints - existing integrations only), or session (POST with a checkout session payload - use this for new integrations).
 - **CustomerPortal:** generates a time-bound portal session link.
 - **Webhooks:** verifies webhook signatures and dispatches typed events.
 
+> **Security - CustomerPortal does not authenticate.** Every `CustomerPortal` handler opens the portal for whatever `?customer_id=` it receives. Mounted as-is, any visitor can open any customer's portal by guessing or enumerating IDs. Put the route behind your own authentication and resolve the customer ID **server-side from the signed-in session**; never accept it from the client. The portal examples below do this.
+
 **Export names are not uniform across adapters.** Most export `Checkout` / `CustomerPortal` / `Webhooks`, but two differ, and the return shapes differ as well. Check this table before writing imports:
 
 | Adapter | Checkout export | Portal export | Handler shape |
@@ -34,7 +36,7 @@ Each adapter exposes three handler families:
 | `fastify` | `Checkout` | `CustomerPortal` | returns `{ getHandler, postHandler }` |
 | `sveltekit` | `Checkout` | `CustomerPortal` | returns `{ GET, POST }` / `{ GET }` |
 | `nuxt` | `checkoutHandler` (auto-imported) | `customerPortalHandler` | no import statement |
-| `convex` | `DodoPayments` component | — | `createDodoWebhookHandler` |
+| `convex` | `checkout` (from `dodo.api()`) | `customerPortal` (from `dodo.api()`, uses `identify`) | `createDodoWebhookHandler` |
 
 The adapters handle raw body preservation for webhook verification, environment variable mapping, and framework-specific request/response shapes. Checkout payload design belongs to the `checkout-integration` skill; webhook business logic belongs to `webhook-integration`; portal behavior belongs to `customer-management`.
 
@@ -71,7 +73,7 @@ DODO_PAYMENTS_RETURN_URL=https://yourdomain.com/checkout/success
 NUXT_PRIVATE_BEARER_TOKEN=dodo_test_...
 NUXT_PRIVATE_WEBHOOK_KEY=your-webhook-secret
 NUXT_PRIVATE_ENVIRONMENT=test_mode
-NUXT_PRIVATE_RETURNURL=https://yourdomain.com/checkout/success
+NUXT_PRIVATE_RETURN_URL=https://yourdomain.com/checkout/success
 ```
 
 **Convex** uses dashboard environment variables (not local `.env`):
@@ -108,6 +110,7 @@ Defaulting to `test_mode` is deliberate: a missing or misspelled variable must n
 ```typescript
 // app/api/checkout/route.ts
 import { Checkout } from "@dodopayments/nextjs";
+import { dodoEnvironment } from "@/lib/dodo-env";
 
 export const GET = Checkout({
   bearerToken: process.env.DODO_PAYMENTS_API_KEY,
@@ -128,12 +131,26 @@ export const POST = Checkout({
 
 ```typescript
 // app/api/customer-portal/route.ts
+import { NextRequest } from "next/server";
 import { CustomerPortal } from "@dodopayments/nextjs";
+import { dodoEnvironment } from "@/lib/dodo-env";
+// your auth helper
+import { getSessionUser } from "@/lib/auth";
 
-export const GET = CustomerPortal({
+const portal = CustomerPortal({
   bearerToken: process.env.DODO_PAYMENTS_API_KEY,
   environment: dodoEnvironment,
 });
+
+export async function GET(req: NextRequest) {
+  const user = await getSessionUser(req);
+  if (!user?.dodoCustomerId) return new Response("Unauthorized", { status: 401 });
+
+  // Overwrite any client-supplied ?customer_id= with the signed-in user's ID.
+  const url = new URL(req.url);
+  url.searchParams.set("customer_id", user.dodoCustomerId);
+  return portal(new NextRequest(url, req));
+}
 ```
 
 ### Webhooks
@@ -152,465 +169,89 @@ export const POST = Webhooks({
 
 ## Express
 
-**Package:** `@dodopayments/express`
-
-### Checkout
+Full guide: [references/express.md](references/express.md).
 
-The Express adapter names its checkout export `checkoutHandler` in lowercase, unlike every other adapter. `import { Checkout } from "@dodopayments/express"` does not resolve.
+Covers:
 
-```typescript
-import express from "express";
-import { checkoutHandler } from "@dodopayments/express";
-import { dodoEnvironment } from "./lib/dodo-env";
-
-const app = express();
-
-app.get("/api/checkout", checkoutHandler({
-  bearerToken: process.env.DODO_PAYMENTS_API_KEY,
-  returnUrl: process.env.DODO_PAYMENTS_RETURN_URL,
-  environment: dodoEnvironment,
-  type: "static",
-}));
-
-app.post("/api/checkout", checkoutHandler({
-  bearerToken: process.env.DODO_PAYMENTS_API_KEY,
-  returnUrl: process.env.DODO_PAYMENTS_RETURN_URL,
-  environment: dodoEnvironment,
-  type: "session",
-}));
-```
-
-### Customer Portal
-
-```typescript
-import { CustomerPortal } from "@dodopayments/express";
-
-app.get("/api/customer-portal", CustomerPortal({
-  bearerToken: process.env.DODO_PAYMENTS_API_KEY,
-  environment: dodoEnvironment,
-}));
-```
-
-### Webhooks
-
-```typescript
-import { Webhooks } from "@dodopayments/express";
-
-app.use(express.raw({ type: "application/json" }));
-
-app.post("/api/webhook", Webhooks({
-  webhookKey: process.env.DODO_PAYMENTS_WEBHOOK_KEY,
-  onPayload: async (payload) => {
-    console.log("Webhook:", payload.type);
-  },
-}));
-```
+- Checkout
+- Customer Portal
+- Webhooks
 
 ## Fastify
 
-**Package:** `@dodopayments/fastify`
-
-Fastify requires a string body parser to preserve the raw body for webhook verification.
-
-### Checkout
-
-`Checkout(config)` returns an object with `getHandler` and `postHandler`, not a single callable. Build it once and mount each method, rather than calling the result.
-
-```typescript
-import Fastify from "fastify";
-import { Checkout } from "@dodopayments/fastify";
-import { dodoEnvironment } from "./lib/dodo-env";
-
-const fastify = Fastify();
-
-const staticCheckout = Checkout({
-  bearerToken: process.env.DODO_PAYMENTS_API_KEY,
-  returnUrl: process.env.DODO_PAYMENTS_RETURN_URL,
-  environment: dodoEnvironment,
-  type: "static",
-});
-
-const sessionCheckout = Checkout({
-  bearerToken: process.env.DODO_PAYMENTS_API_KEY,
-  returnUrl: process.env.DODO_PAYMENTS_RETURN_URL,
-  environment: dodoEnvironment,
-  type: "session",
-});
-
-fastify.get("/api/checkout", staticCheckout.getHandler);
-fastify.post("/api/checkout", sessionCheckout.postHandler);
-```
+Full guide: [references/fastify.md](references/fastify.md).
 
-### Webhooks
+Covers:
 
-```typescript
-import { Webhooks } from "@dodopayments/fastify";
-
-fastify.addContentTypeParser(
-  "application/json",
-  { parseAs: "string" },
-  (req, body, done) => done(null, body)
-);
-
-fastify.post("/api/webhook", Webhooks({
-  webhookKey: process.env.DODO_PAYMENTS_WEBHOOK_KEY,
-  onPayload: async (payload) => {
-    console.log("Webhook:", payload.type);
-  },
-}));
-```
+- Checkout
+- Webhooks
 
 ## Hono
 
-**Package:** `@dodopayments/hono`
-
-### Checkout
-
-```typescript
-import { Hono } from "hono";
-import { Checkout } from "@dodopayments/hono";
-
-const app = new Hono();
-
-app.get("/api/checkout", Checkout({
-  bearerToken: process.env.DODO_PAYMENTS_API_KEY,
-  returnUrl: process.env.DODO_PAYMENTS_RETURN_URL,
-  environment: dodoEnvironment,
-  type: "static",
-}));
-
-app.post("/api/checkout", Checkout({
-  bearerToken: process.env.DODO_PAYMENTS_API_KEY,
-  returnUrl: process.env.DODO_PAYMENTS_RETURN_URL,
-  environment: dodoEnvironment,
-  type: "session",
-}));
-```
-
-### Customer Portal
-
-```typescript
-import { CustomerPortal } from "@dodopayments/hono";
-
-app.get("/api/customer-portal", CustomerPortal({
-  bearerToken: process.env.DODO_PAYMENTS_API_KEY,
-  environment: dodoEnvironment,
-}));
-```
-
-### Webhooks
+Full guide: [references/hono.md](references/hono.md).
 
-```typescript
-import { Webhooks } from "@dodopayments/hono";
+Covers:
 
-app.post("/api/webhook", Webhooks({
-  webhookKey: process.env.DODO_PAYMENTS_WEBHOOK_KEY,
-  onPayload: async (payload) => {
-    console.log("Webhook:", payload.type);
-  },
-}));
-```
+- Checkout
+- Customer Portal
+- Webhooks
 
 ## Astro
 
-**Package:** `@dodopayments/astro`  
-**Route placement:** `src/pages/api/checkout.ts`, `src/pages/api/customer-portal.ts`, `src/pages/api/webhook.ts`
-
-Disable prerendering for checkout routes.
-
-### Checkout
-
-```typescript
-// src/pages/api/checkout.ts
-import { Checkout } from "@dodopayments/astro";
-
-export const prerender = false;
-
-// Astro reads env from import.meta.env, which is typed as string - so it needs
-// the same narrowing as process.env. Define this alongside the other helper in
-// lib/dodo-env.ts if you use both.
-const dodoEnvironment =
-  import.meta.env.DODO_PAYMENTS_ENVIRONMENT === "live_mode" ? "live_mode" : "test_mode";
-
-export const GET = Checkout({
-  bearerToken: import.meta.env.DODO_PAYMENTS_API_KEY,
-  returnUrl: import.meta.env.DODO_PAYMENTS_RETURN_URL,
-  environment: dodoEnvironment,
-  type: "static",
-});
-
-export const POST = Checkout({
-  bearerToken: import.meta.env.DODO_PAYMENTS_API_KEY,
-  returnUrl: import.meta.env.DODO_PAYMENTS_RETURN_URL,
-  environment: dodoEnvironment,
-  type: "session",
-});
-```
-
-### Webhooks
-
-```typescript
-// src/pages/api/webhook.ts
-import { Webhooks } from "@dodopayments/astro";
+Full guide: [references/astro.md](references/astro.md).
 
-export const prerender = false;
+Covers:
 
-export const POST = Webhooks({
-  webhookKey: import.meta.env.DODO_PAYMENTS_WEBHOOK_KEY,
-  onPayload: async (payload) => {
-    console.log("Webhook:", payload.type);
-  },
-});
-```
+- Checkout
+- Webhooks
 
 ## Remix
 
-**Package:** `@dodopayments/remix`
+Full guide: [references/remix.md](references/remix.md).
 
-### Checkout
-
-```typescript
-// app/routes/api.checkout.tsx
-import { Checkout } from "@dodopayments/remix";
-import type { LoaderFunctionArgs, ActionFunctionArgs } from "@remix-run/node";
+Covers:
 
-const checkoutHandler = Checkout({
-  bearerToken: process.env.DODO_PAYMENTS_API_KEY,
-  returnUrl: process.env.DODO_PAYMENTS_RETURN_URL,
-  environment: dodoEnvironment,
-  type: "session",
-});
-
-export const loader = ({ request }: LoaderFunctionArgs) => checkoutHandler(request);
-export const action = ({ request }: ActionFunctionArgs) => checkoutHandler(request);
-```
-
-### Customer Portal
-
-```typescript
-// app/routes/api.customer-portal.tsx
-import { CustomerPortal } from "@dodopayments/remix";
-import type { LoaderFunctionArgs } from "@remix-run/node";
-
-const portalHandler = CustomerPortal({
-  bearerToken: process.env.DODO_PAYMENTS_API_KEY,
-  environment: dodoEnvironment,
-});
-
-export const loader = ({ request }: LoaderFunctionArgs) => portalHandler(request);
-```
-
-### Webhooks
-
-```typescript
-// app/routes/api.webhook.tsx
-import { Webhooks } from "@dodopayments/remix";
-import type { ActionFunctionArgs } from "@remix-run/node";
-
-export const action = ({ request }: ActionFunctionArgs) =>
-  Webhooks({
-    webhookKey: process.env.DODO_PAYMENTS_WEBHOOK_KEY,
-    onPayload: async (payload) => {
-      console.log("Webhook:", payload.type);
-    },
-  })(request);
-```
+- Checkout
+- Customer Portal
+- Webhooks
 
 ## SvelteKit
 
-**Package:** `@dodopayments/sveltekit`  
-**Route placement:** `src/routes/api/checkout/+server.ts`, `src/routes/api/customer-portal/+server.ts`, `src/routes/api/webhook/+server.ts`
-
-### Checkout
-
-```typescript
-// src/routes/api/checkout/+server.ts
-import { Checkout } from "@dodopayments/sveltekit";
-import { DODO_PAYMENTS_API_KEY, DODO_PAYMENTS_RETURN_URL, DODO_PAYMENTS_ENVIRONMENT } from "$env/static/private";
-
-const checkoutHandler = Checkout({
-  bearerToken: DODO_PAYMENTS_API_KEY,
-  returnUrl: DODO_PAYMENTS_RETURN_URL,
-  environment: DODO_PAYMENTS_ENVIRONMENT,
-  type: "session",
-});
-
-export const GET = checkoutHandler;
-export const POST = checkoutHandler;
-```
-
-### Webhooks
+Full guide: [references/sveltekit.md](references/sveltekit.md).
 
-```typescript
-// src/routes/api/webhook/+server.ts
-import { Webhooks } from "@dodopayments/sveltekit";
-import { DODO_PAYMENTS_WEBHOOK_KEY } from "$env/static/private";
+Covers:
 
-export const POST = Webhooks({
-  webhookKey: DODO_PAYMENTS_WEBHOOK_KEY,
-  onPayload: async (payload) => {
-    console.log("Webhook:", payload.type);
-  },
-});
-```
+- Checkout
+- Webhooks
 
 ## Nuxt
 
-**Package:** `@dodopayments/nuxt`
-
-Add the module to `nuxt.config.ts` and configure runtime variables:
-
-```typescript
-// nuxt.config.ts
-export default defineNuxtConfig({
-  modules: ["@dodopayments/nuxt"],
-  runtimeConfig: {
-    private: {
-      bearerToken: process.env.NUXT_PRIVATE_BEARER_TOKEN,
-      webhookKey: process.env.NUXT_PRIVATE_WEBHOOK_KEY,
-      environment: process.env.NUXT_PRIVATE_ENVIRONMENT,
-      returnUrl: process.env.NUXT_PRIVATE_RETURNURL,
-    },
-  },
-});
-```
-
-### Checkout
+Full guide: [references/nuxt.md](references/nuxt.md).
 
-The Nuxt module registers its handlers with `addServerImportsDir`, so `checkoutHandler`, `customerPortalHandler`, and `Webhooks` are **auto-imported** inside `server/`. Do not import them from `@dodopayments/nuxt` — that entry point exports only the Nuxt module itself, and a named import from it will not resolve.
+Covers:
 
-```typescript
-// server/routes/api/checkout.ts
-// checkoutHandler and useRuntimeConfig are auto-imported by the module.
-const config = useRuntimeConfig();
-
-export default checkoutHandler({
-  bearerToken: config.private.bearerToken,
-  returnUrl: config.private.returnUrl,
-  environment: config.private.environment,
-  type: "session",
-});
-```
-
-### Webhooks
-
-```typescript
-// server/routes/api/webhook.ts
-// Webhooks and useRuntimeConfig are auto-imported by the module.
-const config = useRuntimeConfig();
-
-export default Webhooks({
-  webhookKey: config.private.webhookKey,
-  onPayload: async (payload) => {
-    console.log("Webhook:", payload.type);
-  },
-});
-```
+- Checkout
+- Webhooks
 
 ## TanStack Start
 
-**Package:** `@dodopayments/tanstack`
-
-### Checkout
-
-`Checkout(config)` returns a plain `(request: Request) => Promise<Response>`, so export it directly as the route's method handler. The adapter's own documented usage is `export const GET = Checkout(config)`.
-
-```typescript
-// src/routes/api/checkout.ts
-import { Checkout } from "@dodopayments/tanstack";
-import { dodoEnvironment } from "./lib/dodo-env";
-
-export const GET = Checkout({
-  bearerToken: process.env.DODO_PAYMENTS_API_KEY,
-  returnUrl: process.env.DODO_PAYMENTS_RETURN_URL,
-  environment: dodoEnvironment,
-  type: "static",
-});
+Full guide: [references/tanstack-start.md](references/tanstack-start.md).
 
-export const POST = Checkout({
-  bearerToken: process.env.DODO_PAYMENTS_API_KEY,
-  returnUrl: process.env.DODO_PAYMENTS_RETURN_URL,
-  environment: dodoEnvironment,
-  type: "session",
-});
-```
+Covers:
 
-TanStack Start's server-route definition API has changed across releases (`createServerFileRoute` was removed). Wrap these exports in whatever route helper your installed version provides; the adapter handlers themselves are unaffected.
+- Checkout
 
 ## Bun
 
-**Package:** `@dodopayments/bun`
-
-### Checkout and Portal
-
-```typescript
-import { Checkout, CustomerPortal } from "@dodopayments/bun";
-
-const checkoutHandler = Checkout({
-  bearerToken: process.env.DODO_PAYMENTS_API_KEY,
-  returnUrl: process.env.DODO_PAYMENTS_RETURN_URL,
-  environment: dodoEnvironment,
-  type: "session",
-});
+Full guide: [references/bun.md](references/bun.md).
 
-const portalHandler = CustomerPortal({
-  bearerToken: process.env.DODO_PAYMENTS_API_KEY,
-  environment: dodoEnvironment,
-});
-
-Bun.serve({
-  port: 3000,
-  fetch(request) {
-    const url = new URL(request.url);
+Covers:
 
-    if (url.pathname === "/api/checkout") {
-      return checkoutHandler(request);
-    }
-    if (url.pathname === "/api/customer-portal" && request.method === "GET") {
-      return portalHandler(request);
-    }
-
-    return new Response("Not Found", { status: 404 });
-  },
-});
-```
+- Checkout and Portal
 
 ## Convex
 
-**Package:** `@dodopayments/convex`
-
-Convex uses a component-based architecture. Register the component in `convex.config.ts`:
-
-```typescript
-// convex/convex.config.ts
-import { defineApp } from "convex/server";
-import dodopayments from "@dodopayments/convex/convex.config";
-
-const app = defineApp();
-app.use(dodopayments);
-export default app;
-```
-
-Then use the component in your actions and HTTP routes:
-
-```typescript
-// convex/checkout.ts
-import { mutation } from "./_generated/server";
-import { components } from "./_generated/server";
-
-export const createCheckoutSession = mutation({
-  args: { customerId: v.string() },
-  handler: async (ctx, args) => {
-    const dodo = components.dodopayments;
-    return dodo.checkout.createSession(ctx, {
-      customerId: args.customerId,
-      // ... checkout params
-    });
-  },
-});
-```
-
-Convex only supports session checkout, not static or dynamic modes.
+Full guide: [references/convex.md](references/convex.md).
 
 ## Common mistakes
 
@@ -618,7 +259,7 @@ Convex only supports session checkout, not static or dynamic modes.
 
 2. **Wrong webhook variable name:** Check whether your adapter uses `DODO_PAYMENTS_WEBHOOK_KEY` or `DODO_PAYMENTS_WEBHOOK_SECRET`. The docs are inconsistent; use the name your adapter actually references.
 
-3. **Forgetting raw body preservation:** Webhook handlers must receive the raw request body, not a re-parsed JSON object. Fastify requires an explicit string body parser; Express needs `express.raw()`; other frameworks handle this automatically. Webhook signature verification is covered in the `webhook-integration` skill.
+3. **Forgetting raw body preservation:** Webhook handlers must receive the raw request body, not a re-parsed JSON object. Fastify requires an explicit string body parser; other frameworks handle this automatically. **Express is the exception:** its `Webhooks` handler verifies against the parsed `req.body`, so register `express.json()` before the route and do not use `express.raw()`, which makes every verification fail. Webhook signature verification is covered in the `webhook-integration` skill.
 
 4. **Mixing framework conventions:** Each framework has its own request/response shape. Don't try to use a Next.js handler in Express or vice versa. Use the adapter for your framework.
 
@@ -626,7 +267,9 @@ Convex only supports session checkout, not static or dynamic modes.
 
 6. **Skipping environment setup:** The adapters won't work without `DODO_PAYMENTS_API_KEY` and `DODO_PAYMENTS_ENVIRONMENT`. Set these before testing.
 
-7. **Using `@dodopayments/core` directly:** The core package is an internal dependency, not a documented public entry point. Use the framework adapter for your stack.
+7. **Exposing CustomerPortal unauthenticated:** The portal handlers trust `?customer_id=` from the request. Resolve the ID from the signed-in session on the server, as in the examples above, or anyone can open any customer's portal.
+
+8. **Using `@dodopayments/core` directly:** The core package is an internal dependency, not a documented public entry point. Use the framework adapter for your stack.
 
 ## Resources
 

package/skills/framework-adapters/references/astro.md

@@ -0,0 +1,52 @@
+# Framework Adapters: Astro
+
+
+**Package:** `@dodopayments/astro`  
+**Route placement:** `src/pages/api/checkout.ts`, `src/pages/api/customer-portal.ts`, `src/pages/api/webhook.ts`
+
+Disable prerendering for checkout routes.
+
+### Checkout
+
+```typescript
+// src/pages/api/checkout.ts
+import { Checkout } from "@dodopayments/astro";
+
+export const prerender = false;
+
+// Astro reads env from import.meta.env, which is typed as string - so it needs
+// the same narrowing as process.env. Define this alongside the other helper in
+// lib/dodo-env.ts if you use both.
+const dodoEnvironment =
+  import.meta.env.DODO_PAYMENTS_ENVIRONMENT === "live_mode" ? "live_mode" : "test_mode";
+
+export const GET = Checkout({
+  bearerToken: import.meta.env.DODO_PAYMENTS_API_KEY,
+  returnUrl: import.meta.env.DODO_PAYMENTS_RETURN_URL,
+  environment: dodoEnvironment,
+  type: "static",
+});
+
+export const POST = Checkout({
+  bearerToken: import.meta.env.DODO_PAYMENTS_API_KEY,
+  returnUrl: import.meta.env.DODO_PAYMENTS_RETURN_URL,
+  environment: dodoEnvironment,
+  type: "session",
+});
+```
+
+### Webhooks
+
+```typescript
+// src/pages/api/webhook.ts
+import { Webhooks } from "@dodopayments/astro";
+
+export const prerender = false;
+
+export const POST = Webhooks({
+  webhookKey: import.meta.env.DODO_PAYMENTS_WEBHOOK_KEY,
+  onPayload: async (payload) => {
+    console.log("Webhook:", payload.type);
+  },
+});
+```

package/skills/framework-adapters/references/bun.md

@@ -0,0 +1,45 @@
+# Framework Adapters: Bun
+
+
+**Package:** `@dodopayments/bun`
+
+### Checkout and Portal
+
+```typescript
+import { Checkout, CustomerPortal } from "@dodopayments/bun";
+import { dodoEnvironment } from "./lib/dodo-env";
+// your auth helper
+import { getSessionUser } from "./lib/auth";
+
+const checkoutHandler = Checkout({
+  bearerToken: process.env.DODO_PAYMENTS_API_KEY,
+  returnUrl: process.env.DODO_PAYMENTS_RETURN_URL,
+  environment: dodoEnvironment,
+  type: "session",
+});
+
+const portalHandler = CustomerPortal({
+  bearerToken: process.env.DODO_PAYMENTS_API_KEY,
+  environment: dodoEnvironment,
+});
+
+Bun.serve({
+  port: 3000,
+  async fetch(request) {
+    const url = new URL(request.url);
+
+    if (url.pathname === "/api/checkout") {
+      return checkoutHandler(request);
+    }
+    if (url.pathname === "/api/customer-portal" && request.method === "GET") {
+      const user = await getSessionUser(request);
+      if (!user?.dodoCustomerId) return new Response("Unauthorized", { status: 401 });
+      // Overwrite any client-supplied ?customer_id= with the signed-in user's ID.
+      url.searchParams.set("customer_id", user.dodoCustomerId);
+      return portalHandler(new Request(url, request));
+    }
+
+    return new Response("Not Found", { status: 404 });
+  },
+});
+```