@frigear-nu/payments 0.1.1 → 0.1.3

package/dist/module.d.mts

@@ -85,6 +85,13 @@ type CheckoutBeforeContext = {
 type ResumeResponse = {
     url: string;
 };
+/** Context of the `payments:authorize` hook. */
+type AuthorizeContext = {
+    event: H3Event;
+    userId: number;
+    /** Set `ctx.allowed = true` to let the user see the dashboard's recent payments and revenue. Denied by default. */
+    allowed: boolean;
+};
 
 declare module '@nuxt/schema' {
     interface NuxtConfig {
@@ -96,6 +103,8 @@ declare module '@nuxt/schema' {
 }
 declare module 'nitropack' {
     interface NitroRuntimeHooks {
+        /** Staff gate (the dashboard's recent payments): set `ctx.allowed = true` to let the user in. Denied by default. */
+        'payments:authorize': (ctx: AuthorizeContext) => void | Promise<void>;
         /** Policy hook: throw to deny a checkout, or adjust `ctx.params` before it reaches Stripe. */
         'payments:checkout:before': (ctx: CheckoutBeforeContext) => void | Promise<void>;
         /** A payment became `paid` (fired once, from the verified Stripe event). */
@@ -111,4 +120,4 @@ declare module 'nitropack' {
 declare const _default: _nuxt_schema.NuxtModule<ModuleOptions, ModuleOptions, false>;
 
 export { _default as default };
-export type { CheckoutBeforeContext, CreatePaymentInput, CreatePaymentResult, InvoicePaymentInput, ModuleOptions, PaymentDto, PaymentHookContext, PaymentItem, PaymentReference, PaymentStatus, PaymentsRuntimeConfig, ResumeResponse };
+export type { AuthorizeContext, CheckoutBeforeContext, CreatePaymentInput, CreatePaymentResult, InvoicePaymentInput, ModuleOptions, PaymentDto, PaymentHookContext, PaymentItem, PaymentReference, PaymentStatus, PaymentsRuntimeConfig, ResumeResponse };

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "@frigear-nu/payments",
   "configKey": "payments",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "builder": {
     "@nuxt/module-builder": "1.0.3",
     "unbuild": "unknown"

package/dist/module.mjs

@@ -1,5 +1,5 @@
-import { defineNuxtModule, createResolver, addServerHandler, hasNuxtModule, addServerImportsDir, addServerPlugin, addImports } from '@nuxt/kit';
-import { registerModule, registerTailwindSource, registerLocales, registerDatabaseTable, moduleApiUrl, inlineModuleRuntime } from '@frigear-nu/module-kit/utils';
+import { defineNuxtModule, createResolver, hasNuxtModule, addServerImportsDir, addServerPlugin, addImports } from '@nuxt/kit';
+import { registerModule, registerTailwindSource, registerLocales, registerDatabaseTable, addModuleRoutes, inlineModuleRuntime } from '@frigear-nu/module-kit/utils';
 import { addAuthScope } from '@frigear-nu/auth/utils';
 import { extendUsersAdmin } from '@frigear-nu/users/utils';
 import { addMcpDefinitions } from '@frigear-nu/mcp/utils';
@@ -21,6 +21,8 @@ const module$1 = defineNuxtModule({
     "@frigear-nu/users": { version: ">=0.0.1" },
     "@frigear-nu/stripe": { version: ">=0.0.1" },
     "@frigear-nu/mcp": { version: ">=0.0.1" },
+    // `usePayments` loads through `useCachedFetch`; the widgets and the admin tab use its components and helpers.
+    "@frigear-nu/ui": { version: ">=0.0.1" },
     "@frigear-nu/widget": { version: ">=0.0.0", optional: true },
     // The admin user tab and card are built from its components, so they are only added with it.
     "@frigear-nu/admin": { version: ">=0.0.0", optional: true }
@@ -30,7 +32,8 @@ const module$1 = defineNuxtModule({
     addAuthScope(
       nuxt,
       { name: "payments:read", description: "Read your payments" },
-      { name: "payments:write", description: "Resume your payments" }
+      { name: "payments:write", description: "Resume your payments" },
+      { name: "payments:manage", description: "See recent payments and revenue (staff)" }
     );
     const resolver = createResolver(import.meta.url);
     registerTailwindSource(nuxt, resolver.resolve("./runtime/app"));
@@ -52,16 +55,10 @@ const module$1 = defineNuxtModule({
       ],
       handler: resolver.resolve("./runtime/server/stripe/payment-events")
     });
-    addServerHandler({
-      route: moduleApiUrl("payments"),
-      method: "get",
-      handler: resolver.resolve("./runtime/server/routes/payments/index.get")
-    });
-    addServerHandler({
-      route: moduleApiUrl("payments", "resume"),
-      method: "post",
-      handler: resolver.resolve("./runtime/server/routes/payments/resume.post")
-    });
+    addModuleRoutes(resolver, [
+      { method: "get", path: "me", file: "me/payments.get" },
+      { method: "post", path: "me/:id/resume", file: "me/resume.post" }
+    ], { base: "/api/payments" });
     await extendUsersAdmin(nuxt, {
       routes: [{ method: "get", path: "payments", handler: resolver.resolve("./runtime/server/routes/admin/user-payments.get") }],
       tab: {
@@ -79,11 +76,9 @@ const module$1 = defineNuxtModule({
         span: 2
       }
     });
-    addServerHandler({
-      route: moduleApiUrl("payments", "admin/recent"),
-      method: "get",
-      handler: resolver.resolve("./runtime/server/routes/admin/recent.get")
-    });
+    addModuleRoutes(resolver, [
+      { method: "get", path: "recent", file: "admin/recent.get" }
+    ], { base: "/api/admin/payments" });
     if (hasNuxtModule("@frigear-nu/admin") && hasNuxtModule("@frigear-nu/widget")) {
       const { extendWidgets } = await import('@frigear-nu/widget/utils');
       extendWidgets(nuxt, "admin.dashboard.top", { id: "payments-revenue-stat", component: resolver.resolve("./runtime/app/widgets/RevenueStat.vue"), order: 30 });
@@ -99,6 +94,7 @@ const module$1 = defineNuxtModule({
     addServerImportsDir(resolver.resolve("./runtime/server/utils"));
     inlineModuleRuntime(nuxt, resolver);
     addServerPlugin(resolver.resolve("./runtime/server/plugins/invoice-payments"));
+    addServerPlugin(resolver.resolve("./runtime/server/plugins/staff-scopes"));
     if (options.settings?.mcp === true) addMcpDefinitions(nuxt, resolver.resolve("./runtime/server/mcp"));
     addImports([
       { name: "usePayments", from: resolver.resolve("./runtime/app/composables/usePayments") }

package/dist/runtime/app/composables/usePayments.d.ts

@@ -1,7 +1,5 @@
-/** The signed-in user's payments, plus a helper to resume an unpaid one. */
-export declare function usePayments(): {
-    payments: any;
-    refresh: any;
-    status: any;
-    resume: (paymentId: string) => Promise<void>;
-};
+/**
+ * The signed-in user's payments, plus a helper to resume an unpaid one. Awaitable: `await usePayments()` in a page
+ * renders them on the server. `payments` is `[]` until loaded and after an error: check `loading` and `error` first.
+ */
+export declare function usePayments(): any;

package/dist/runtime/app/composables/usePayments.js

@@ -1,14 +1,21 @@
+import { paymentsApi } from "../../utils/index.js";
 export function usePayments() {
   const { loggedIn } = useUserSession();
-  const { data, refresh, status } = useFetch("/api/payments", {
+  const fetched = useCachedFetch(paymentsApi.me.list, {
     key: "payments:mine",
-    immediate: loggedIn.value,
-    watch: false,
-    default: () => []
+    ttl: 60 * 1e3,
+    watch: false
   });
+  const { status, error, loading, refresh, clear } = fetched;
+  watch(loggedIn, (value) => {
+    if (value) refresh();
+    else clear();
+  });
+  const payments = computed(() => fetched.data.value ?? []);
   async function resume(paymentId) {
-    const { url } = await $fetch("/api/payments/resume", { method: "POST", body: { paymentId } });
+    const { url } = await $fetch(paymentsApi.me.resume(paymentId), { method: "POST" });
     await navigateTo(url, { external: true });
   }
-  return { payments: data, refresh, status, resume };
+  const api = { payments, refresh, status, error, loading, resume };
+  return Object.assign(fetched.then(() => api), api);
 }

package/dist/runtime/app/tabs/Payments.vue

@@ -1,4 +1,5 @@
 <script setup>
+import { paymentsApi } from "../../utils";
 defineOptions({ name: "UsersAdminPayments" });
 const props = defineProps({
   user: { type: Object, required: true }
@@ -6,11 +7,13 @@ const props = defineProps({
 const t = useModuleT("payments.admin");
 const status = useModuleT("payments.status");
 const format = useFormat();
-const { data: payments, status: fetchStatus } = useLazyFetch(
-  () => `/api/admin/users/${props.user.id}/payments`,
+const { data: payments, status: fetchStatus, error } = useLazyFetch(
+  () => paymentsApi.admin.userPayments(props.user.id),
   { key: () => `admin-payments-${props.user.id}` }
 );
+const loading = computed(() => fetchStatus.value === "pending" && !payments.value);
 const statusLabel = (value) => status(value, value);
+const paymentDate = (payment) => format.dateTime(payment.paidAt ?? payment.createdAt) || "";
 const columns = computed(() => [
   { accessorKey: "createdAt", header: t("date", "Date") },
   { accessorKey: "description", header: t("description", "Description") },
@@ -22,42 +25,69 @@ const columns = computed(() => [
 </script>
 
 <template>
-  <TableCard>
-    <template #header>
-      <h2 class="text-highlighted text-sm font-semibold">
-        {{ t("title", "Payments") }}
-      </h2>
-    </template>
+  <TableCard
+    :title="t('title', 'Payments')"
+    :loading="loading"
+    :refreshing="fetchStatus === 'pending' && !loading"
+  >
     <UTable
       :data="payments ?? []"
       :columns="columns"
-      :loading="fetchStatus === 'pending'"
       :ui="tableUi({ tr: '' })"
     >
       <template #createdAt-cell="{ row }">
-        <span class="whitespace-nowrap">{{ format.dateTime(row.original.paidAt ?? row.original.createdAt) || "\u2013" }}</span>
+        <span
+          v-if="paymentDate(row.original)"
+          class="whitespace-nowrap tabular-nums"
+        >{{ paymentDate(row.original) }}</span>
+        <span
+          v-else
+          class="text-dimmed"
+        >–</span>
       </template>
       <template #description-cell="{ row }">
         {{ row.original.description ?? t("defaultDescription", "Payment") }}
       </template>
       <template #amount-cell="{ row }">
-        <span class="whitespace-nowrap">{{ format.money(row.original.amount, row.original.currency) }}</span>
+        <span class="whitespace-nowrap tabular-nums">{{ format.money(row.original.amount, row.original.currency) }}</span>
       </template>
       <template #status-cell="{ row }">
-        <UBadge
-          variant="subtle"
-          :color="statusColor(row.original.status, { partially_refunded: 'warning' })"
+        <StatusBadge
+          :status="row.original.status"
           :label="statusLabel(row.original.status)"
+          :colors="{ partially_refunded: 'warning' }"
         />
       </template>
       <template #refundedAmount-cell="{ row }">
-        <span class="whitespace-nowrap">{{ row.original.refundedAmount ? format.money(row.original.refundedAmount, row.original.currency) : "\u2013" }}</span>
+        <span
+          v-if="row.original.refundedAmount"
+          class="whitespace-nowrap tabular-nums"
+        >{{ format.money(row.original.refundedAmount, row.original.currency) }}</span>
+        <span
+          v-else
+          class="text-dimmed"
+        >–</span>
       </template>
       <template #referenceType-cell="{ row }">
-        <span class="text-muted">{{ row.original.referenceType ? `${row.original.referenceType} ${row.original.referenceId ?? ""}`.trim() : "\u2013" }}</span>
+        <span
+          v-if="row.original.referenceType"
+          class="text-muted"
+        >{{ `${row.original.referenceType} ${row.original.referenceId ?? ""}`.trim() }}</span>
+        <span
+          v-else
+          class="text-dimmed"
+        >–</span>
       </template>
       <template #empty>
         <UEmpty
+          v-if="error"
+          icon="i-lucide-circle-alert"
+          variant="naked"
+          :title="t('loadFailed', 'The payments could not be loaded')"
+          :description="errorMessage(error, '')"
+        />
+        <UEmpty
+          v-else
           icon="i-lucide-credit-card"
           variant="naked"
           :title="t('empty', 'No payments yet')"

package/dist/runtime/app/widgets/AdminLastPayment.vue

@@ -1,4 +1,5 @@
 <script setup>
+import { paymentsApi } from "../../utils";
 defineOptions({ name: "UsersAdminLastPayment" });
 const props = defineProps({
   user: { type: Object, required: true }
@@ -7,7 +8,7 @@ const t = useModuleT("payments.admin");
 const status = useModuleT("payments.status");
 const format = useFormat();
 const { data: payments, status: fetchStatus } = useLazyFetch(
-  () => `/api/admin/users/${props.user.id}/payments`,
+  () => paymentsApi.admin.userPayments(props.user.id),
   { key: () => `admin-last-payment-${props.user.id}`, query: { limit: 1 } }
 );
 const last = computed(() => payments.value?.[0]);

package/dist/runtime/app/widgets/RecentTransactions.vue

@@ -1,4 +1,5 @@
 <script setup>
+import { paymentsApi } from "../../utils";
 defineOptions({ name: "PaymentsRecentTransactions" });
 const props = defineProps({
   tabId: { type: String, required: false, default: "payments" }
@@ -9,7 +10,7 @@ const format = useFormat();
 const { localize } = useLocaleLink();
 const usersPage = useRuntimeConfig().public.users?.pages?.admin;
 const usersPath = usersPage ? localize(usersPage.replace(/\/+$/, "")) : void 0;
-const { data, status: fetchStatus } = useLazyFetch("/api/payments/admin/recent", { key: "admin-payments-recent" });
+const { data, status: fetchStatus } = useLazyFetch(paymentsApi.admin.recent, { key: "admin-payments-recent" });
 const userTo = (id) => usersPath ? { path: `${usersPath}/${id}`, query: { tab: props.tabId } } : void 0;
 </script>
 

package/dist/runtime/app/widgets/RevenueStat.vue

@@ -1,8 +1,9 @@
 <script setup>
+import { paymentsApi } from "../../utils";
 defineOptions({ name: "PaymentsRevenueStat" });
 const t = useModuleT("payments.admin");
 const format = useFormat();
-const { data, status } = useLazyFetch("/api/payments/admin/recent", { key: "admin-payments-recent" });
+const { data, status } = useLazyFetch(paymentsApi.admin.recent, { key: "admin-payments-recent" });
 const main = computed(() => data.value?.revenue[0]);
 </script>
 

package/dist/runtime/i18n/lang/da.json

@@ -14,6 +14,7 @@
       "title": "Betalinger",
       "lastPayment": "Seneste betaling",
       "empty": "Ingen betalinger endnu",
+      "loadFailed": "Betalingerne kunne ikke hentes",
       "date": "Dato",
       "description": "Beskrivelse",
       "amount": "Beløb",

package/dist/runtime/i18n/lang/en.json

@@ -14,6 +14,7 @@
       "title": "Payments",
       "lastPayment": "Last payment",
       "empty": "No payments yet",
+      "loadFailed": "The payments could not be loaded",
       "date": "Date",
       "description": "Description",
       "amount": "Amount",

package/dist/runtime/server/plugins/staff-scopes.js

@@ -0,0 +1 @@
+export default defineStaffScopes(["payments:manage"], (event, userId) => paymentsStaff.can(event, userId));

package/dist/runtime/server/routes/admin/recent.get.js

@@ -3,7 +3,7 @@ import { and, count, desc, eq, gte, inArray, sql } from "drizzle-orm";
 const DAYS = 30;
 const LIMIT = 8;
 export default defineEventHandler(async (event) => {
-  await authorizeUsersAdmin(event, "view");
+  await paymentsStaff.require(event);
   const since = new Date(Date.now() - DAYS * 24 * 60 * 60 * 1e3);
   const settled = inArray(schema.payments.status, ["paid", "partially_refunded"]);
   const when = sql`coalesce(${schema.payments.paidAt}, ${schema.payments.createdAt})`;

package/dist/runtime/server/routes/admin/user-payments.get.js

@@ -1,5 +1,7 @@
+import { z } from "zod";
+const querySchema = z.object({ limit: z.coerce.number().int().min(1).max(500).default(100) });
 export default defineEventHandler(async (event) => {
   const { target } = await loadUsersAdminTarget(event, "view");
-  const limit = Number(getQuery(event).limit);
-  return listUserPayments(target.id, { limit: Number.isInteger(limit) && limit > 0 ? Math.min(limit, 500) : 100 });
+  const { limit } = await getValidatedQuery(event, querySchema.parse);
+  return listUserPayments(target.id, { limit });
 });

package/dist/runtime/server/routes/me/resume.post.d.ts

@@ -0,0 +1,2 @@
+declare const _default: any;
+export default _default;

package/dist/runtime/server/routes/me/resume.post.js

@@ -0,0 +1,6 @@
+import { idParams } from "@frigear-nu/module-kit/server";
+export default defineEventHandler(async (event) => {
+  const user = await requireUser(event, { scopes: ["payments:write"] });
+  const { id } = await getValidatedRouterParams(event, idParams().parse);
+  return resumePayment(id, user.id, event);
+});

package/dist/runtime/server/utils/auth.d.ts

@@ -0,0 +1,5 @@
+/**
+ * The staff gate of `/api/admin/payments`. The host decides who is staff through the `payments:authorize` Nitro hook;
+ * denied by default. Bearer tokens need the `payments:manage` scope.
+ */
+export declare const paymentsStaff: any;

package/dist/runtime/server/utils/auth.js

@@ -0,0 +1,5 @@
+export const paymentsStaff = defineStaffGuard({
+  hook: "payments:authorize",
+  scope: "payments:manage",
+  message: "You are not allowed to see payments."
+});

package/dist/runtime/server/utils/payments.js

@@ -1,6 +1,6 @@
 import { db, schema } from "@nuxthub/db";
 import { and, desc, eq, sql } from "drizzle-orm";
-import { resolveSameOriginUrl } from "@frigear-nu/stripe/utils";
+import { apiError, badRequest, conflict, notFound, resolveSameOriginUrl } from "@frigear-nu/module-kit/server";
 import { sumItems } from "../../utils/index.js";
 export function toPaymentDto(row) {
   return {
@@ -21,12 +21,10 @@ const newPaymentId = () => `pay_${crypto.randomUUID().replaceAll("-", "")}`;
 function safeReturnUrl(input, event, name) {
   if (!event) {
     const absolute = URL.canParse(input) && ["http:", "https:"].includes(new URL(input).protocol);
-    if (!absolute) throw createError({ statusCode: 400, statusMessage: `${name} must be an absolute http(s) URL.` });
+    if (!absolute) throw badRequest(`${name} must be an absolute http(s) URL.`);
     return input;
   }
-  const resolved = resolveSameOriginUrl(input, getRequestURL(event).origin);
-  if (!resolved) throw createError({ statusCode: 400, statusMessage: `${name} must be a relative path or an URL on the same origin.` });
-  return resolved;
+  return resolveSameOriginUrl(event, input, { name });
 }
 function toLineItems(items, currency) {
   return items.map((item) => ({
@@ -64,13 +62,13 @@ function expiresAt(minutes) {
   return Math.floor(Date.now() / 1e3) + clamped * 60;
 }
 export async function createPayment(input, event) {
-  if (input.items.length === 0) throw createError({ statusCode: 400, statusMessage: "A payment needs at least one item." });
+  if (input.items.length === 0) throw badRequest("A payment needs at least one item.");
   const currency = input.items[0].currency.toLowerCase();
   if (input.items.some((item) => item.currency.toLowerCase() !== currency)) {
-    throw createError({ statusCode: 400, statusMessage: "All items in a payment must share one currency." });
+    throw badRequest("All items in a payment must share one currency.");
   }
   const amount = sumItems(input.items);
-  if (amount <= 0) throw createError({ statusCode: 400, statusMessage: "The payment amount must be greater than zero." });
+  if (amount <= 0) throw badRequest("The payment amount must be greater than zero.");
   const config = useRuntimeConfig().payments;
   const stripe = useStripe();
   const customer = await ensureStripeCustomer(input.userId);
@@ -89,7 +87,7 @@ export async function createPayment(input, event) {
     event
   });
   const session = await stripe.checkout.sessions.create(params);
-  if (!session.url) throw createError({ statusCode: 502, statusMessage: "Stripe did not return a checkout URL." });
+  if (!session.url) throw apiError(502, "bad_gateway", "Stripe did not return a checkout URL.");
   try {
     const [row] = await db.insert(schema.payments).values({
       id,
@@ -124,19 +122,19 @@ export async function listUserPayments(userId, options = {}) {
 }
 export async function resumePayment(paymentId, userId, event) {
   const [row] = await db.select().from(schema.payments).where(and(eq(schema.payments.id, paymentId), eq(schema.payments.userId, userId))).limit(1);
-  if (!row) throw createError({ statusCode: 404, statusMessage: "Payment not found." });
+  if (!row) throw notFound("Payment not found.");
   if (row.status === "paid" || row.status === "refunded" || row.status === "partially_refunded") {
-    throw createError({ statusCode: 409, statusMessage: "This payment is already paid." });
+    throw conflict("This payment is already paid.");
   }
   const stripe = useStripe();
-  if (!row.checkoutSessionId) throw createError({ statusCode: 409, statusMessage: "This payment cannot be resumed." });
+  if (!row.checkoutSessionId) throw conflict("This payment cannot be resumed.");
   const session = await stripe.checkout.sessions.retrieve(row.checkoutSessionId);
   if (session.status === "open" && session.url) return { url: session.url };
-  if (session.status === "complete") throw createError({ statusCode: 409, statusMessage: "This payment is already paid." });
+  if (session.status === "complete") throw conflict("This payment is already paid.");
   const origin = event ? getRequestURL(event).origin : void 0;
   const successUrl = session.success_url ?? origin;
   const cancelUrl = session.cancel_url ?? origin;
-  if (!successUrl || !cancelUrl) throw createError({ statusCode: 409, statusMessage: "Cannot resume this payment." });
+  if (!successUrl || !cancelUrl) throw conflict("Cannot resume this payment.");
   const items = row.items?.length ? row.items : [{ name: row.description ?? "Payment", amount: row.amount, currency: row.currency }];
   const customer = await ensureStripeCustomer(userId);
   const params = await buildCheckoutParams({
@@ -153,18 +151,18 @@ export async function resumePayment(paymentId, userId, event) {
     event
   });
   const next = await stripe.checkout.sessions.create(params);
-  if (!next.url) throw createError({ statusCode: 502, statusMessage: "Stripe did not return a checkout URL." });
+  if (!next.url) throw apiError(502, "bad_gateway", "Stripe did not return a checkout URL.");
   await db.update(schema.payments).set({ checkoutSessionId: next.id, status: "pending" }).where(eq(schema.payments.id, row.id));
   return { url: next.url };
 }
 export async function refundPayment(paymentId, options = {}) {
   const [row] = await db.select().from(schema.payments).where(eq(schema.payments.id, paymentId)).limit(1);
-  if (!row) throw createError({ statusCode: 404, statusMessage: "Payment not found." });
+  if (!row) throw notFound("Payment not found.");
   if (!row.paymentIntentId || row.status !== "paid" && row.status !== "partially_refunded") {
-    throw createError({ statusCode: 409, statusMessage: "Only paid payments can be refunded." });
+    throw conflict("Only paid payments can be refunded.");
   }
   if (options.amount !== void 0 && (options.amount <= 0 || options.amount > row.amount - row.refundedAmount)) {
-    throw createError({ statusCode: 400, statusMessage: "Invalid refund amount." });
+    throw badRequest("Invalid refund amount.");
   }
   await useStripe().refunds.create({
     payment_intent: row.paymentIntentId,
@@ -194,7 +192,7 @@ export async function recordInvoicePayment(input) {
   const [row] = existing ? await db.update(schema.payments).set(values).where(eq(schema.payments.id, existing.id)).returning() : await db.insert(schema.payments).values({ id: newPaymentId(), ...values, ...input.createdAt ? { createdAt: input.createdAt } : {} }).onConflictDoNothing({ target: schema.payments.invoiceId }).returning();
   if (!row) {
     const [current] = await db.select().from(schema.payments).where(eq(schema.payments.invoiceId, input.invoiceId)).limit(1);
-    if (!current) throw createError({ statusCode: 500, statusMessage: "Could not record the invoice payment." });
+    if (!current) throw apiError(500, "internal_error", "Could not record the invoice payment.");
     return toPaymentDto(current);
   }
   const dto = toPaymentDto(row);

package/dist/runtime/utils/api.d.ts

@@ -0,0 +1,14 @@
+export declare const paymentsApi: {
+    readonly me: {
+        /** `GET` the caller's payments, newest first. */
+        readonly list: "/api/payments/me";
+        /** `POST` to get a checkout URL for one of the caller's unpaid payments. */
+        readonly resume: (id: string) => string;
+    };
+    readonly admin: {
+        /** `GET` the dashboard's recent payments and revenue (staff). */
+        readonly recent: "/api/admin/payments/recent";
+        /** `GET` one user's payments (staff, `?limit`); mounted on the users admin. */
+        readonly userPayments: (userId: number | string) => string;
+    };
+};

package/dist/runtime/utils/api.js

@@ -0,0 +1,17 @@
+const enc = encodeURIComponent;
+const BASE = "/api/payments";
+const ADMIN_BASE = "/api/admin/payments";
+export const paymentsApi = {
+  me: {
+    /** `GET` the caller's payments, newest first. */
+    list: `${BASE}/me`,
+    /** `POST` to get a checkout URL for one of the caller's unpaid payments. */
+    resume: (id) => `${BASE}/me/${enc(id)}/resume`
+  },
+  admin: {
+    /** `GET` the dashboard's recent payments and revenue (staff). */
+    recent: `${ADMIN_BASE}/recent`,
+    /** `GET` one user's payments (staff, `?limit`); mounted on the users admin. */
+    userPayments: (userId) => `/api/admin/users/${enc(String(userId))}/payments`
+  }
+};

package/dist/runtime/utils/index.d.ts

@@ -1,4 +1,5 @@
 import type { PaymentItem } from '../../types.js';
-export type { CheckoutBeforeContext, CreatePaymentInput, CreatePaymentResult, ModuleOptions, PaymentDto, PaymentHookContext, PaymentItem, PaymentReference, PaymentStatus, } from '../../types.js';
+export * from './api.js';
+export type { AuthorizeContext, CheckoutBeforeContext, CreatePaymentInput, CreatePaymentResult, ModuleOptions, PaymentDto, PaymentHookContext, PaymentItem, PaymentReference, PaymentStatus, RecentPaymentDto, RecentPaymentsDto, ResumeResponse, } from '../../types.js';
 /** Total of a list of items in minor units. */
 export declare function sumItems(items: PaymentItem[]): number;

package/dist/runtime/utils/index.js

@@ -1,3 +1,4 @@
+export * from "./api.js";
 export function sumItems(items) {
   return items.reduce((total, item) => total + item.amount * (item.quantity ?? 1), 0);
 }

package/dist/types.d.mts

@@ -1,3 +1,3 @@
 export { default } from './module.mjs'
 
-export { type CheckoutBeforeContext, type CreatePaymentInput, type CreatePaymentResult, type InvoicePaymentInput, type ModuleOptions, type PaymentDto, type PaymentHookContext, type PaymentItem, type PaymentReference, type PaymentStatus, type PaymentsRuntimeConfig, type ResumeResponse } from './module.mjs'
+export { type AuthorizeContext, type CheckoutBeforeContext, type CreatePaymentInput, type CreatePaymentResult, type InvoicePaymentInput, type ModuleOptions, type PaymentDto, type PaymentHookContext, type PaymentItem, type PaymentReference, type PaymentStatus, type PaymentsRuntimeConfig, type ResumeResponse } from './module.mjs'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frigear-nu/payments",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "description": "One-time payments (Stripe Checkout, refunds and payment lifecycle hooks) for the frigear ecosystem, built on @frigear-nu/stripe.",
   "homepage": "https://docs.frigear.dev/modules/payments",
   "repository": {
@@ -21,6 +21,11 @@
       "types": "./dist/runtime/utils/index.d.ts",
       "import": "./dist/runtime/utils/index.js",
       "default": "./dist/runtime/utils/index.js"
+    },
+    "./api": {
+      "types": "./dist/runtime/utils/api.d.ts",
+      "import": "./dist/runtime/utils/api.js",
+      "default": "./dist/runtime/utils/api.js"
     }
   },
   "files": [
@@ -30,12 +35,12 @@
     "playground"
   ],
   "dependencies": {
-    "@frigear-nu/auth": "0.1.2",
-    "@frigear-nu/mcp": "0.1.1",
-    "@frigear-nu/module-kit": "1.1.1",
-    "@frigear-nu/stripe": "0.1.1",
-    "@frigear-nu/ui": "0.1.1",
-    "@frigear-nu/users": "1.1.2",
+    "@frigear-nu/auth": "0.1.4",
+    "@frigear-nu/mcp": "0.1.3",
+    "@frigear-nu/module-kit": "1.1.3",
+    "@frigear-nu/stripe": "0.1.3",
+    "@frigear-nu/ui": "0.1.3",
+    "@frigear-nu/users": "1.1.4",
     "@libsql/client": "^0.18.0",
     "@nuxt/kit": "^4.6.1",
     "drizzle-kit": "^0.31.11",
@@ -46,8 +51,8 @@
     "zod": "^4.6.5"
   },
   "peerDependencies": {
-    "@frigear-nu/widget": "0.1.1",
-    "@nuxt/ui": "^4.11.2",
+    "@frigear-nu/widget": "0.1.3",
+    "@nuxt/ui": "^4.12.0",
     "@nuxthub/core": "^0.10.8"
   },
   "peerDependenciesMeta": {
@@ -59,13 +64,13 @@
     }
   },
   "devDependencies": {
-    "@frigear-nu/widget": "0.1.1",
+    "@frigear-nu/widget": "0.1.3",
     "@nuxt/devtools": "^3.4.2",
     "@nuxt/eslint-config": "^1.17.0",
     "@nuxt/module-builder": "^1.0.3",
     "@nuxt/schema": "^4.6.1",
     "@nuxt/test-utils": "^4.3.2",
-    "@nuxt/ui": "^4.11.2",
+    "@nuxt/ui": "^4.12.0",
     "@nuxthub/core": "^0.10.8",
     "@types/node": "^26.6.5",
     "changelogen": "^0.6.2",

package/dist/runtime/server/routes/payments/resume.post.js

@@ -1,7 +0,0 @@
-import { z } from "zod";
-const bodySchema = z.object({ paymentId: z.string().min(1) });
-export default defineEventHandler(async (event) => {
-  const user = await requireUser(event, { scopes: ["payments:write"] });
-  const { paymentId } = await readValidatedBody(event, bodySchema.parse);
-  return resumePayment(paymentId, user.id, event);
-});