@frigear-nu/stripe 0.1.2 → 0.1.3

package/dist/module.json

@@ -1,7 +1,7 @@
 {
   "name": "@frigear-nu/stripe",
   "configKey": "stripe",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "builder": {
     "@nuxt/module-builder": "1.0.3",
     "unbuild": "unknown"

package/dist/module.mjs

@@ -1,5 +1,5 @@
-import { defineNuxtModule, createResolver, addServerHandler, addServerImportsDir, addServerImports, addTypeTemplate } from '@nuxt/kit';
-import { registerModule, inlineModuleRuntime, defineVirtualRegistry, extendDatabaseTable } from '@frigear-nu/module-kit/utils';
+import { defineNuxtModule, createResolver, addServerImportsDir, addServerImports, addTypeTemplate } from '@nuxt/kit';
+import { registerModule, addModuleRoutes, inlineModuleRuntime, defineVirtualRegistry, extendDatabaseTable } from '@frigear-nu/module-kit/utils';
 
 const STRIPE_API_VERSION = "2026-09-30.endive";
 const DEFAULT_WEBHOOK_PATH = "/api/stripe/webhook";
@@ -25,7 +25,8 @@ const module$1 = defineNuxtModule({
   async setup(options, nuxt) {
     registerModule("@frigear-nu/stripe", nuxt);
     const resolver = createResolver(import.meta.url);
-    const webhookPath = options.settings?.webhookPath || DEFAULT_WEBHOOK_PATH;
+    const configuredPath = options.settings?.webhookPath || DEFAULT_WEBHOOK_PATH;
+    const webhookPath = configuredPath.startsWith("/") ? configuredPath : `/${configuredPath}`;
     if (!nuxt.options.hub?.kv) {
       throw new Error("[@frigear-nu/stripe] NuxtHub KV is required for webhook idempotency. Set `hub: { kv: true }` in your Nuxt config.");
     }
@@ -40,11 +41,7 @@ const module$1 = defineNuxtModule({
       publishableKey: "",
       ...runtimeConfig.public.stripe
     };
-    addServerHandler({
-      route: webhookPath,
-      method: "post",
-      handler: resolver.resolve("./runtime/server/routes/webhook.post")
-    });
+    addModuleRoutes(resolver, [{ method: "post", path: webhookPath, file: "webhook.post" }], { base: "/api/stripe" });
     addServerImportsDir(resolver.resolve("./runtime/server/utils"));
     inlineModuleRuntime(nuxt, resolver);
     addServerImports([

package/dist/runtime/server/routes/webhook.post.js

@@ -2,6 +2,7 @@ import Stripe from "stripe";
 import { kv } from "@nuxthub/kv";
 import { handlers as registeredHandlers } from "#stripe/handlers";
 import { getRuntimeStripeEventHandlers } from "../../utils/registry.js";
+import { apiError, badRequest, notConfigured } from "@frigear-nu/module-kit/server";
 const PROCESSED_TTL_SECONDS = 60 * 60 * 24 * 7;
 const DEFAULT_ORDER = 100;
 const matches = (events, type) => events === "*" || events.includes(type);
@@ -26,15 +27,15 @@ function getEventCustomerId(stripeEvent) {
 export default defineEventHandler(async (event) => {
   const { webhookSecret } = useRuntimeConfig(event).stripe;
   if (!webhookSecret) {
-    throw createError({ statusCode: 500, statusMessage: "Stripe webhook is not configured (missing NUXT_STRIPE_WEBHOOK_SECRET)." });
+    throw notConfigured("Stripe webhook is not configured (missing NUXT_STRIPE_WEBHOOK_SECRET).");
   }
   const signature = getHeader(event, "stripe-signature");
   if (!signature) {
-    throw createError({ statusCode: 400, statusMessage: "Missing stripe-signature header." });
+    throw badRequest("Missing stripe-signature header.");
   }
   const rawBody = await readRawBody(event, "utf8");
   if (!rawBody) {
-    throw createError({ statusCode: 400, statusMessage: "Missing request body." });
+    throw badRequest("Missing request body.");
   }
   let stripeEvent;
   try {
@@ -47,7 +48,7 @@ export default defineEventHandler(async (event) => {
     );
   } catch (error) {
     console.warn("[@frigear-nu/stripe] Rejected webhook with an invalid signature:", error instanceof Error ? error.message : error);
-    throw createError({ statusCode: 400, statusMessage: "Invalid Stripe signature." });
+    throw badRequest("Invalid Stripe signature.");
   }
   const processedKey = `stripe:event:${stripeEvent.id}`;
   if (await kv.has(processedKey)) {
@@ -75,7 +76,7 @@ export default defineEventHandler(async (event) => {
     console.error(`[@frigear-nu/stripe] "stripe:event" hook failed for ${stripeEvent.id}:`, error);
   }
   if (failures > 0) {
-    throw createError({ statusCode: 500, statusMessage: `${failures} Stripe event handler(s) failed.` });
+    throw apiError(500, "handler_failed", `${failures} Stripe event handler(s) failed.`);
   }
   await kv.set(processedKey, Date.now(), { ttl: PROCESSED_TTL_SECONDS });
   return { received: true };

package/dist/runtime/server/utils/stripe.js

@@ -1,11 +1,12 @@
 import Stripe from "stripe";
 import { db, schema } from "@nuxthub/db";
 import { and, eq, isNull } from "drizzle-orm";
+import { notConfigured, notFound } from "@frigear-nu/module-kit/server";
 let cached;
 export function useStripe() {
   const { secretKey, apiVersion } = useRuntimeConfig().stripe;
   if (!secretKey) {
-    throw createError({ statusCode: 500, statusMessage: "Stripe is not configured (missing `runtimeConfig.stripe.secretKey` / NUXT_STRIPE_SECRET_KEY)." });
+    throw notConfigured("Stripe is not configured (missing `runtimeConfig.stripe.secretKey` / NUXT_STRIPE_SECRET_KEY).");
   }
   if (!cached || cached.key !== secretKey || cached.apiVersion !== apiVersion) {
     cached = {
@@ -23,7 +24,7 @@ const escapeSearchValue = (value) => value.replace(/\\/g, "\\\\").replace(/'/g,
 export async function ensureStripeCustomer(userId) {
   const [user] = await db.select().from(schema.users).where(eq(schema.users.id, userId)).limit(1);
   if (!user) {
-    throw createError({ statusCode: 404, statusMessage: "User not found." });
+    throw notFound("User not found.");
   }
   if (user.stripeCustomerId) return user.stripeCustomerId;
   const stripe = useStripe();

package/dist/runtime/utils/index.d.ts

@@ -1,5 +1,4 @@
 export { registerStripeEventHandler, defineStripeEventHandler } from './handlers.js';
 export type { RegisterStripeEventHandlerOptions } from './handlers.js';
 export { onStripeEvent } from './registry.js';
-export { resolveSameOriginUrl } from './url.js';
 export type { ModuleOptions, StripeEventType, StripeEventOf, StripeEventHandler, StripeEventHandlerContext, RegisteredStripeEventHandler, StripeRuntimeConfig, StripePublicRuntimeConfig, } from '../../types.js';

package/dist/runtime/utils/index.js

@@ -1,3 +1,2 @@
 export { registerStripeEventHandler, defineStripeEventHandler } from "./handlers.js";
 export { onStripeEvent } from "./registry.js";
-export { resolveSameOriginUrl } from "./url.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@frigear-nu/stripe",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Core Stripe plumbing for the frigear ecosystem: SDK access, customer linking, and a verified, idempotent webhook that other modules can subscribe to.",
   "homepage": "https://docs.frigear.dev/modules/stripe",
   "repository": {
@@ -30,8 +30,8 @@
     "playground"
   ],
   "dependencies": {
-    "@frigear-nu/module-kit": "1.1.2",
-    "@frigear-nu/users": "1.1.3",
+    "@frigear-nu/module-kit": "1.1.3",
+    "@frigear-nu/users": "1.1.4",
     "@libsql/client": "^0.18.0",
     "@nuxt/kit": "^4.6.1",
     "h3": "^1.15.11",

package/dist/runtime/utils/url.d.ts

@@ -1,6 +0,0 @@
-/**
- * Validates a redirect URL supplied by a client (a Stripe return URL): it must be a relative path (`/x`) or an absolute
- * URL on `origin`. Returns an absolute URL on that origin, or `null` when it is unsafe. Shared by every module that
- * sends people through Stripe so the open-redirect guard exists once.
- */
-export declare function resolveSameOriginUrl(input: string, origin: string): string | null;

package/dist/runtime/utils/url.js

@@ -1,11 +0,0 @@
-export function resolveSameOriginUrl(input, origin) {
-  if (input.startsWith("/")) {
-    if (input.startsWith("//") || input.startsWith("/\\")) return null;
-    return `${origin}${input}`;
-  }
-  try {
-    return new URL(input).origin === new URL(origin).origin ? input : null;
-  } catch {
-    return null;
-  }
-}