@dodopayments/opencode-plugin 0.6.1 → 0.6.3

package/skills/checkout-integration/references/server-examples.md

@@ -0,0 +1,317 @@
+# Dodo Payments Checkout Integration: reference
+
+## Next.js App Router
+
+### API Route
+
+```typescript
+// app/api/checkout/route.ts
+import { NextResponse } from 'next/server';
+import DodoPayments from 'dodopayments';
+import { getCurrentUser } from '@/lib/auth';
+
+const client = new DodoPayments({
+  bearerToken: process.env.DODO_PAYMENTS_API_KEY!,
+  environment: process.env.NODE_ENV === 'production' ? 'live_mode' : 'test_mode'
+});
+
+type PlanId = 'starter' | 'pro';
+
+const PRODUCT_IDS: Record<PlanId, string> = {
+  starter: 'pdt_starter_monthly',
+  pro: 'pdt_pro_monthly'
+};
+
+function productIdForPlan(value: unknown): string | null {
+  if (typeof value !== 'string') return null;
+  return PRODUCT_IDS[value as PlanId] ?? null;
+}
+
+export async function POST(request: Request) {
+  const user = await getCurrentUser();
+  if (!user) {
+    return NextResponse.json({ error: 'Not authenticated' }, { status: 401 });
+  }
+
+  let body: unknown;
+  try {
+    body = await request.json();
+  } catch {
+    return NextResponse.json({ error: 'Invalid request body' }, { status: 400 });
+  }
+
+  if (!body || typeof body !== 'object') {
+    return NextResponse.json({ error: 'Invalid request body' }, { status: 400 });
+  }
+
+  const input = body as { planId?: unknown; quantity?: unknown };
+  const productId = productIdForPlan(input.planId);
+  const quantity = input.quantity ?? 1;
+
+  if (!productId) {
+    return NextResponse.json({ error: 'Unknown plan' }, { status: 400 });
+  }
+
+  if (!Number.isInteger(quantity) || (quantity as number) < 1) {
+    return NextResponse.json(
+      { error: 'Quantity must be a positive integer' },
+      { status: 400 }
+    );
+  }
+
+  try {
+    const session = await client.checkoutSessions.create({
+      product_cart: [{ product_id: productId, quantity: quantity as number }],
+      customer: { email: user.email, name: user.name },
+      metadata: { app_user_id: user.id },
+      return_url: `${process.env.NEXT_PUBLIC_APP_URL}/checkout/success`
+    });
+
+    return NextResponse.json({
+      checkoutUrl: session.checkout_url,
+      sessionId: session.session_id
+    });
+  } catch (error) {
+    console.error('Checkout error:', error);
+    return NextResponse.json(
+      { error: 'Failed to create checkout' },
+      { status: 500 }
+    );
+  }
+}
+```
+
+### Client Component
+
+```typescript
+// components/CheckoutButton.tsx
+'use client';
+
+import { useState } from 'react';
+
+interface CheckoutButtonProps {
+  planId: 'starter' | 'pro';
+  quantity?: number;
+  children: React.ReactNode;
+}
+
+export function CheckoutButton({ planId, quantity = 1, children }: CheckoutButtonProps) {
+  const [loading, setLoading] = useState(false);
+
+  const handleCheckout = async () => {
+    setLoading(true);
+    try {
+      const response = await fetch('/api/checkout', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ planId, quantity })
+      });
+
+      if (!response.ok) {
+        throw new Error('Failed to create checkout');
+      }
+
+      const data = (await response.json()) as { checkoutUrl?: string };
+      if (!data.checkoutUrl) throw new Error('Checkout URL was not returned');
+      window.location.href = data.checkoutUrl;
+    } catch (error) {
+      console.error('Checkout error:', error);
+      alert('Failed to start checkout. Please try again.');
+    } finally {
+      setLoading(false);
+    }
+  };
+
+  return (
+    <button onClick={handleCheckout} disabled={loading}>
+      {loading ? 'Loading...' : children}
+    </button>
+  );
+}
+```
+
+### Success Page
+
+```typescript
+// app/checkout/success/page.tsx
+import { Suspense } from 'react';
+
+function SuccessContent() {
+  return (
+    <div className="text-center py-20">
+      <h1 className="text-3xl font-bold">Payment Successful</h1>
+      <p className="mt-4 text-gray-600">
+        Thank you for your purchase. Check your email for a confirmation.
+      </p>
+      <a href="/" className="mt-8 inline-block text-blue-600 hover:underline">
+        Return to Home
+      </a>
+    </div>
+  );
+}
+
+export default function SuccessPage() {
+  return (
+    <Suspense fallback={<div>Loading...</div>}>
+      <SuccessContent />
+    </Suspense>
+  );
+}
+```
+
+---
+
+## Express.js
+
+```typescript
+import express from 'express';
+import DodoPayments from 'dodopayments';
+import { getCurrentUser } from './auth';
+import { fulfillOneTimePurchase, grantSubscriptionAccess } from './entitlements';
+
+const app = express();
+
+const client = new DodoPayments({
+  bearerToken: process.env.DODO_PAYMENTS_API_KEY!,
+  environment: process.env.NODE_ENV === 'production' ? 'live_mode' : 'test_mode'
+});
+
+// Mount the webhook before express.json() so verification receives signed bytes.
+app.post('/webhook', express.raw({ type: 'application/json' }), async (req, res) => {
+  try {
+    const event = client.webhooks.unwrap(req.body.toString('utf8'), {
+      headers: {
+        'webhook-id': req.headers['webhook-id'] as string,
+        'webhook-signature': req.headers['webhook-signature'] as string,
+        'webhook-timestamp': req.headers['webhook-timestamp'] as string
+      }
+    });
+
+    if (event.type === 'payment.succeeded') {
+      // This branch fulfills one-time purchases only.
+      await fulfillOneTimePurchase(event.data.customer.customer_id);
+    } else if (event.type === 'subscription.active') {
+      // Subscription access starts only after this verified event.
+      await grantSubscriptionAccess(event.data);
+    }
+
+    res.json({ received: true });
+  } catch (error) {
+    console.error('Webhook verification failed:', error);
+    res.status(401).json({ error: 'Invalid signature' });
+  }
+});
+
+app.use(express.json());
+
+type PlanId = 'starter' | 'pro';
+
+const PRODUCT_IDS: Record<PlanId, string> = {
+  starter: 'pdt_starter_monthly',
+  pro: 'pdt_pro_monthly'
+};
+
+function productIdForPlan(value: unknown): string | null {
+  if (typeof value !== 'string') return null;
+  return PRODUCT_IDS[value as PlanId] ?? null;
+}
+
+app.post('/api/checkout', async (req, res) => {
+  const user = await getCurrentUser(req);
+  if (!user) {
+    res.status(401).json({ error: 'Not authenticated' });
+    return;
+  }
+
+  const { planId, quantity = 1 } = req.body as {
+    planId?: unknown;
+    quantity?: unknown;
+  };
+  const productId = productIdForPlan(planId);
+
+  if (!productId) {
+    res.status(400).json({ error: 'Unknown plan' });
+    return;
+  }
+
+  if (!Number.isInteger(quantity) || (quantity as number) < 1) {
+    res.status(400).json({ error: 'Quantity must be a positive integer' });
+    return;
+  }
+
+  try {
+    const session = await client.checkoutSessions.create({
+      product_cart: [{ product_id: productId, quantity: quantity as number }],
+      customer: { email: user.email, name: user.name },
+      metadata: { app_user_id: user.id },
+      return_url: `${process.env.APP_URL}/success`
+    });
+
+    res.json({ checkoutUrl: session.checkout_url });
+  } catch (error) {
+    console.error('Checkout error:', error);
+    res.status(500).json({ error: 'Failed to create checkout' });
+  }
+});
+
+app.get('/success', (req, res) => {
+  res.send('Payment successful!');
+});
+```
+
+---
+
+## Python (FastAPI)
+
+```python
+import logging
+import os
+from typing import Annotated, Literal
+
+from dodopayments import DodoPayments
+from fastapi import Depends, FastAPI, HTTPException
+from pydantic import BaseModel, Field
+
+from app.auth import User, get_current_user
+
+app = FastAPI()
+logger = logging.getLogger(__name__)
+client = DodoPayments(
+    bearer_token=os.environ["DODO_PAYMENTS_API_KEY"],
+    environment="test_mode"
+)
+
+PRODUCT_IDS = {
+    "starter": "pdt_starter_monthly",
+    "pro": "pdt_pro_monthly",
+}
+
+class CheckoutRequest(BaseModel):
+    plan_id: Literal["starter", "pro"]
+    quantity: int = Field(default=1, gt=0)
+
+@app.post("/api/checkout")
+async def create_checkout(
+    request: CheckoutRequest,
+    user: Annotated[User, Depends(get_current_user)],
+):
+    try:
+        session = client.checkout_sessions.create(
+            product_cart=[{
+                "product_id": PRODUCT_IDS[request.plan_id],
+                "quantity": request.quantity
+            }],
+            customer={
+                "email": user.email,
+                "name": user.name
+            },
+            metadata={"app_user_id": user.id},
+            return_url=f"{os.environ['APP_URL']}/success"
+        )
+        return {"checkout_url": session.checkout_url}
+    except Exception as error:
+        logger.exception("Checkout session creation failed")
+        raise HTTPException(status_code=500, detail="Failed to create checkout") from error
+```
+
+---

package/skills/credit-based-billing/SKILL.md

@@ -366,162 +366,16 @@ Use the `usage-based-billing` skill to create the meter, choose `count`, `sum`,
 
 ## End-to-end AI token example
 
-Assume the dashboard/API configuration already has:
-
-- a custom-unit entitlement named `AI Token Credits`, precision `0`;
-- a subscription product that issues credits each cycle;
-- a `sum` meter whose case-sensitive event name is `ai.tokens` and key is `tokens`;
-- that meter linked through `credit_entitlement_id` and `meter_units_per_credit`;
-- a one-time product `pdt_ai_token_topup` with credits attached.
-
-The following server-side script records actual model usage, reads the credit balance, and creates a top-up checkout when your verified low-balance webhook flow prompts the customer:
-
-```typescript
-import DodoPayments from 'dodopayments';
-
-const client = new DodoPayments({
-  bearerToken: process.env['DODO_PAYMENTS_API_KEY'],
-  environment: 'test_mode',
-});
-
-async function recordTokenUsage(
-  customerId: string,
-  generationId: string,
-  model: string,
-  promptTokens: number,
-  completionTokens: number,
-): Promise<number> {
-  const tokens = promptTokens + completionTokens;
-  const response = await client.usageEvents.ingest({
-    events: [
-      {
-        event_id: `generation:${generationId}`,
-        customer_id: customerId,
-        event_name: 'ai.tokens',
-        timestamp: new Date().toISOString(),
-        metadata: {
-          tokens,
-          prompt_tokens: promptTokens,
-          completion_tokens: completionTokens,
-          model,
-        },
-      },
-    ],
-  });
-
-  return response.ingested_count;
-}
-
-async function readTokenBalance(
-  customerId: string,
-  creditEntitlementId: string,
-): Promise<string> {
-  const response = await client.creditEntitlements.balances.retrieve(
-    customerId,
-    { credit_entitlement_id: creditEntitlementId },
-  );
-  return response.balance;
-}
-
-async function createTopUpCheckout(customerEmail: string) {
-  return client.checkoutSessions.create({
-    product_cart: [
-      { product_id: 'pdt_ai_token_topup', quantity: 1 },
-    ],
-    customer: { email: customerEmail },
-    return_url: 'https://app.example.com/credits',
-  });
-}
-
-async function main(): Promise<void> {
-  const customerId = 'cus_8VbC6JDZzPEqfBPUdpj0K';
-  const creditEntitlementId = 'cde_ztxm5XJsKxWucRWA3rjdM';
-
-  const ingested = await recordTokenUsage(
-    customerId,
-    'gen_01JZAIEXAMPLE',
-    'example-model',
-    1800,
-    700,
-  );
-  console.log({ ingested });
-
-  // Meter deduction is asynchronous; this read may still show the prior balance.
-  const balance = await readTokenBalance(customerId, creditEntitlementId);
-  console.log({ balance });
-
-  // Call this after a verified credit.balance_low event and customer action.
-  const topUp = await createTopUpCheckout('customer@example.com');
-  console.log(topUp);
-}
-
-main().catch((error: unknown) => {
-  console.error(error instanceof Error ? error.message : error);
-  process.exitCode = 1;
-});
-```
-
-The lifecycle is:
-
-1. The model returns actual prompt and completion token counts.
-2. The app ingests one uniquely identified `ai.tokens` event.
-3. The meter aggregates the `tokens` metadata value.
-4. The worker converts units into credits and deducts from non-expired grants, earliest-expiring first.
-5. Dodo emits `credit.deducted`; when configured threshold conditions are met, it emits `credit.balance_low`.
-6. The app notifies the customer and offers checkout for the attached top-up product.
-
-Do not poll every minute to synthesize your own threshold event. Use the verified webhook and keep polling only for user-interface freshness.
+Full guide: [references/ai-token-example.md](references/ai-token-example.md).
 
 ## Handle credit webhooks
 
-Webhook signature verification, raw-body handling, retries, and event deduplication are covered in the `webhook-integration` skill. Verify with `client.webhooks.unwrap()` before dispatching any event; never trust a parsed, unverified body.
-
-All credit events except `credit.balance_low` use the full ledger payload.
-
-| Exact event | Application action |
-|---|---|
-| `credit.added` | Refresh cached balance; correlate the grant or purchase and ledger entry. |
-| `credit.deducted` | Refresh cached balance and usage display; reconcile the source usage/job. |
-| `credit.expired` | Refresh balance; notify only if your product policy promises expiry notices. |
-| `credit.rolled_over` | Refresh balance and expose the new rollover grant in account history. |
-| `credit.rollover_forfeited` | Refresh balance and explain forfeiture according to the configured rollover limit. |
-| `credit.overage_charged` | Reconcile the overage charge with billing and customer-visible history. |
-| `credit.overage_reset` | Clear cached overage state after confirming the ledger payload. |
-| `credit.manual_adjustment` | Reconcile the adjustment with its internal support/admin operation. |
-| `credit.balance_low` | Deduplicate, refresh the authoritative balance, notify the customer, and offer upgrade or top-up. |
-
-### Low-balance payload
-
-`credit.balance_low` has a dedicated payload:
-
-```json
-{
-  "business_id": "bus_H4ekzPSlcg",
-  "type": "credit.balance_low",
-  "timestamp": "2025-08-04T06:15:00.000000Z",
-  "data": {
-    "payload_type": "CreditBalanceLow",
-    "customer_id": "cus_8VbC6JDZzPEqfBPUdpj0K",
-    "subscription_id": "sub_7EeHq2ewQuadropD2ra",
-    "credit_entitlement_id": "cent_9xY2bKwQn5MjRpL8d",
-    "credit_entitlement_name": "API Credits",
-    "available_balance": "15",
-    "subscription_credits_amount": "100",
-    "threshold_percent": 20,
-    "threshold_amount": "20"
-  }
-}
-```
+Full guide: [references/credit-webhooks.md](references/credit-webhooks.md).
 
-### Low-balance notification flow
+Covers:
 
-1. Verify the raw webhook and deduplicate by `webhook-id` as described in `webhook-integration`.
-2. Confirm `type === 'credit.balance_low'` and validate the dedicated payload.
-3. Map `customer_id` to the authenticated application account; do not accept a customer ID supplied by a browser.
-4. Read the current balance with `balances.retrieve(...)` because another grant or deduction may have occurred since emission.
-5. If the balance is still below your customer-notification policy, enqueue one notification keyed by webhook ID or threshold occurrence.
-6. Link to a one-time top-up checkout or plan-upgrade flow.
-7. Record notification delivery separately from the Dodo ledger; never manufacture a ledger entry for an email.
+- Low-balance payload
+- Low-balance notification flow
 
 ## Enforce credits safely
 

package/skills/credit-based-billing/references/ai-token-example.md

@@ -0,0 +1,108 @@
+# Dodo Payments Credit-Based Billing: End-to-end AI token example
+
+
+Assume the dashboard/API configuration already has:
+
+- a custom-unit entitlement named `AI Token Credits`, precision `0`;
+- a subscription product that issues credits each cycle;
+- a `sum` meter whose case-sensitive event name is `ai.tokens` and key is `tokens`;
+- that meter linked through `credit_entitlement_id` and `meter_units_per_credit`;
+- a one-time product `pdt_ai_token_topup` with credits attached.
+
+The following server-side script records actual model usage, reads the credit balance, and creates a top-up checkout when your verified low-balance webhook flow prompts the customer:
+
+```typescript
+import DodoPayments from 'dodopayments';
+
+const client = new DodoPayments({
+  bearerToken: process.env['DODO_PAYMENTS_API_KEY'],
+  environment: 'test_mode',
+});
+
+async function recordTokenUsage(
+  customerId: string,
+  generationId: string,
+  model: string,
+  promptTokens: number,
+  completionTokens: number,
+): Promise<number> {
+  const tokens = promptTokens + completionTokens;
+  const response = await client.usageEvents.ingest({
+    events: [
+      {
+        event_id: `generation:${generationId}`,
+        customer_id: customerId,
+        event_name: 'ai.tokens',
+        timestamp: new Date().toISOString(),
+        metadata: {
+          tokens,
+          prompt_tokens: promptTokens,
+          completion_tokens: completionTokens,
+          model,
+        },
+      },
+    ],
+  });
+
+  return response.ingested_count;
+}
+
+async function readTokenBalance(
+  customerId: string,
+  creditEntitlementId: string,
+): Promise<string> {
+  const response = await client.creditEntitlements.balances.retrieve(
+    customerId,
+    { credit_entitlement_id: creditEntitlementId },
+  );
+  return response.balance;
+}
+
+async function createTopUpCheckout(customerEmail: string) {
+  return client.checkoutSessions.create({
+    product_cart: [
+      { product_id: 'pdt_ai_token_topup', quantity: 1 },
+    ],
+    customer: { email: customerEmail },
+    return_url: 'https://app.example.com/credits',
+  });
+}
+
+async function main(): Promise<void> {
+  const customerId = 'cus_8VbC6JDZzPEqfBPUdpj0K';
+  const creditEntitlementId = 'cde_ztxm5XJsKxWucRWA3rjdM';
+
+  const ingested = await recordTokenUsage(
+    customerId,
+    'gen_01JZAIEXAMPLE',
+    'example-model',
+    1800,
+    700,
+  );
+  console.log({ ingested });
+
+  // Meter deduction is asynchronous; this read may still show the prior balance.
+  const balance = await readTokenBalance(customerId, creditEntitlementId);
+  console.log({ balance });
+
+  // Call this after a verified credit.balance_low event and customer action.
+  const topUp = await createTopUpCheckout('customer@example.com');
+  console.log(topUp);
+}
+
+main().catch((error: unknown) => {
+  console.error(error instanceof Error ? error.message : error);
+  process.exitCode = 1;
+});
+```
+
+The lifecycle is:
+
+1. The model returns actual prompt and completion token counts.
+2. The app ingests one uniquely identified `ai.tokens` event.
+3. The meter aggregates the `tokens` metadata value.
+4. The worker converts units into credits and deducts from non-expired grants, earliest-expiring first.
+5. Dodo emits `credit.deducted`; when configured threshold conditions are met, it emits `credit.balance_low`.
+6. The app notifies the customer and offers checkout for the attached top-up product.
+
+Do not poll every minute to synthesize your own threshold event. Use the verified webhook and keep polling only for user-interface freshness.

package/skills/credit-based-billing/references/credit-webhooks.md

@@ -0,0 +1,51 @@
+# Dodo Payments Credit-Based Billing: Handle credit webhooks
+
+
+Webhook signature verification, raw-body handling, retries, and event deduplication are covered in the `webhook-integration` skill. Verify with `client.webhooks.unwrap()` before dispatching any event; never trust a parsed, unverified body.
+
+All credit events except `credit.balance_low` use the full ledger payload.
+
+| Exact event | Application action |
+|---|---|
+| `credit.added` | Refresh cached balance; correlate the grant or purchase and ledger entry. |
+| `credit.deducted` | Refresh cached balance and usage display; reconcile the source usage/job. |
+| `credit.expired` | Refresh balance; notify only if your product policy promises expiry notices. |
+| `credit.rolled_over` | Refresh balance and expose the new rollover grant in account history. |
+| `credit.rollover_forfeited` | Refresh balance and explain forfeiture according to the configured rollover limit. |
+| `credit.overage_charged` | Reconcile the overage charge with billing and customer-visible history. |
+| `credit.overage_reset` | Clear cached overage state after confirming the ledger payload. |
+| `credit.manual_adjustment` | Reconcile the adjustment with its internal support/admin operation. |
+| `credit.balance_low` | Deduplicate, refresh the authoritative balance, notify the customer, and offer upgrade or top-up. |
+
+### Low-balance payload
+
+`credit.balance_low` has a dedicated payload:
+
+```json
+{
+  "business_id": "bus_H4ekzPSlcg",
+  "type": "credit.balance_low",
+  "timestamp": "2025-08-04T06:15:00.000000Z",
+  "data": {
+    "payload_type": "CreditBalanceLow",
+    "customer_id": "cus_8VbC6JDZzPEqfBPUdpj0K",
+    "subscription_id": "sub_7EeHq2ewQuadropD2ra",
+    "credit_entitlement_id": "cent_9xY2bKwQn5MjRpL8d",
+    "credit_entitlement_name": "API Credits",
+    "available_balance": "15",
+    "subscription_credits_amount": "100",
+    "threshold_percent": 20,
+    "threshold_amount": "20"
+  }
+}
+```
+
+### Low-balance notification flow
+
+1. Verify the raw webhook and deduplicate by `webhook-id` as described in `webhook-integration`.
+2. Confirm `type === 'credit.balance_low'` and validate the dedicated payload.
+3. Map `customer_id` to the authenticated application account; do not accept a customer ID supplied by a browser.
+4. Read the current balance with `balances.retrieve(...)` because another grant or deduction may have occurred since emission.
+5. If the balance is still below your customer-notification policy, enqueue one notification keyed by webhook ID or threshold occurrence.
+6. Link to a one-time top-up checkout or plan-upgrade flow.
+7. Record notification delivery separately from the Dodo ledger; never manufacture a ledger entry for an email.