@homie-rocks/studio 0.54.0 → 0.55.0

package/worker/shop.mjs

@@ -1,3 +1,4 @@
+const officeShopPage = async (...args) => (await import('./shop-page.mjs')).officeShopPage(...args);
 import {claimHoldStatement,ownedHold} from './booking-holds.mjs';
 import { stripeEventOwner } from './stripe-ownership.mjs';
 import { localSession } from './local-test.mjs';
@@ -47,7 +48,7 @@ import {
   setBand, shopDataOf, spentThisMonth,
 } from './shop-store.mjs';
 import { apiBase, STRIPE_API, redactStripe, WEBHOOK_SECRET_SHAPE, KEY_SHAPE, stripeCall, StripeError, createCheckoutSession, createRefund, expireCheckoutSession, dashboardLink, isApprovalRequired, isMissingProduct, productIdOf, verifyWebhook } from './stripe.mjs';
-import { SHOP_JS, officeShopPage, parentPage, refundsPage, shopPage, thanksPage } from './shop-page.mjs';
+
 import { notFoundPage } from './site.mjs';
 
 export { forgetPlayerShop, officeShopPage, shopDataOf };
@@ -217,7 +218,7 @@ export async function shopRoutes(request, env, ctx, url, { catalogueOf }) {
   const requestAt = Date.now();
   const path = url.pathname;
   const read = request.method === 'GET' || request.method === 'HEAD';
-  if (path === '/_homie/shop.js') return new Response(SHOP_JS, { headers: { 'content-type': 'text/javascript; charset=utf-8', 'cache-control': 'public, max-age=300', 'x-content-type-options': 'nosniff' } });
+  if (path === '/_homie/shop.js') return new Response((await import('./shop-page.mjs')).SHOP_JS, { headers: { 'content-type': 'text/javascript; charset=utf-8', 'cache-control': 'public, max-age=300', 'x-content-type-options': 'nosniff' } });
   const shopPath = path === '/shop' || path === '/shop/' || path.startsWith('/shop/') || path === '/api/shop' || path.startsWith('/api/shop/') || path === '/api/player/owns';
   if (selling.enabled && (path.startsWith('/api/purchases/') || path.startsWith('/purchases/'))) return selling.purchaseRoutes(request, env, url, await catalogueOf());
   if (!shopPath) return null;
@@ -230,7 +231,7 @@ export async function shopRoutes(request, env, ctx, url, { catalogueOf }) {
     if (path === '/api/player/owns') return json({ ok: true, owns: [], open: false });
     if (path.startsWith('/api/')) return json({ ok: true, open: false, items: [], missing: [shop ? 'kids-studio' : 'shop.json'] });
     // No shop.json: /shop/ is the studio's own to use (a page in site/pages, say). The policy can close a kids studio's shop.
-    if(!shop && path==='/shop/' && read && !cat.site?.pages?.includes('/shop/')) return shopPage(cat,checkShop({}).shop,{origin:url.origin,open:false});
+    if(!shop && path==='/shop/' && read && !cat.site?.pages?.includes('/shop/')) return (await import('./shop-page.mjs')).shopPage(cat,checkShop({}).shop,{origin:url.origin,open:false});
     return shop ? notFoundPage('This studio sells nothing.', cat) : null;
   }
   const ready = await readiness(env, shop);
@@ -271,9 +272,9 @@ export async function shopRoutes(request, env, ctx, url, { catalogueOf }) {
     if (path === '/api/shop/parent' && request.method === 'POST') return await parentLinkRoute(request, env, url, cat, shop, ready);
     if (path === '/api/shop/used' && request.method === 'POST') return await usedRoute(request, env, shop);
     if (path === '/api/shop/refund' && request.method === 'POST') return await selfRefundRoute(request, env, shop, ready);
-    if (path === '/shop/' && read) return shopPage(cat, shop, { origin: url.origin, game: GAME_ID.test(url.searchParams.get('game') ?? '') ? url.searchParams.get('game') : null, item: url.searchParams.get('item'), open: ready.ready, mode: ready.mode });
-    if (path === '/shop/thanks' && read) return thanksPage(cat, shop, { session: /^cs_[A-Za-z0-9_]{1,200}$/.test(url.searchParams.get('session_id') ?? '') ? url.searchParams.get('session_id') : null, game: GAME_ID.test(url.searchParams.get('game') ?? '') ? url.searchParams.get('game') : null });
-    if ((path === '/shop/refunds/' || path === '/shop/refunds') && read) return refundsPage(cat, shop);
+    if (path === '/shop/' && read) return (await import('./shop-page.mjs')).shopPage(cat, shop, { origin: url.origin, game: GAME_ID.test(url.searchParams.get('game') ?? '') ? url.searchParams.get('game') : null, item: url.searchParams.get('item'), open: ready.ready, mode: ready.mode });
+    if (path === '/shop/thanks' && read) return (await import('./shop-page.mjs')).thanksPage(cat, shop, { session: /^cs_[A-Za-z0-9_]{1,200}$/.test(url.searchParams.get('session_id') ?? '') ? url.searchParams.get('session_id') : null, game: GAME_ID.test(url.searchParams.get('game') ?? '') ? url.searchParams.get('game') : null });
+    if ((path === '/shop/refunds/' || path === '/shop/refunds') && read) return (await import('./shop-page.mjs')).refundsPage(cat, shop);
     const parent = /^\/shop\/parent\/([A-Za-z0-9_-]{43})$/.exec(path);
     if (parent) return await parentRoute(request, env, url, cat, shop, ready, parent[1], ctx);
   } catch (error) {
@@ -738,35 +739,35 @@ async function parentRoute(request, env, url, cat, shop, ready, token, ctx) {
   const cart = row ? row.cart ? JSON.parse(row.cart) : [{ item: row.item, quantity: 1 }] : [];
   const lines = cart.map((entry) => ({ item: shop.items.find((i) => i.id === entry.item), quantity: entry.quantity }));
   const item = lines[0]?.item;
-  if (lines.some((line) => !line.item)) return parentPage(cat, shop, { gone: true });
-  if (!row || !item || Number(row.expires_at) < Date.now()) return parentPage(cat, shop, { gone: true });
+  if (lines.some((line) => !line.item)) return (await import('./shop-page.mjs')).parentPage(cat, shop, { gone: true });
+  if (!row || !item || Number(row.expires_at) < Date.now()) return (await import('./shop-page.mjs')).parentPage(cat, shop, { gone: true });
   const kid = await players.get(env, row.player);
-  if (!kid) return parentPage(cat, shop, { gone: true });
+  if (!kid) return (await import('./shop-page.mjs')).parentPage(cat, shop, { gone: true });
   const done = row.order_id ? await orderById(env, row.order_id) : null;
-  if (done?.status === 'paid') return parentPage(cat, shop, { item, lines, name: kid.name, paid: true });
-  if (request.method === 'GET' || request.method === 'HEAD') return parentPage(cat, shop, { item, lines, name: kid.name, token, open: ready.ready });
+  if (done?.status === 'paid') return (await import('./shop-page.mjs')).parentPage(cat, shop, { item, lines, name: kid.name, paid: true });
+  if (request.method === 'GET' || request.method === 'HEAD') return (await import('./shop-page.mjs')).parentPage(cat, shop, { item, lines, name: kid.name, token, open: ready.ready });
   if (request.method !== 'POST' || !sameOrigin(request, url)) return new Response('Not allowed', { status: 403 });
   let form = null;
   try { form = await request.formData(); } catch { form = null; }
-  if (String(form?.get('grownup') ?? '') !== 'yes') return parentPage(cat, shop, { item, lines, name: kid.name, token, open: ready.ready, said: 'Tick the box to say you are their parent or guardian and an adult.' });
-  if (!ready.ready) return parentPage(cat, shop, { item, lines, name: kid.name, token, open: false });
-  if (purchaseLimited(request, shop, row.player, 'parentpay')) return parentPage(cat, shop, { item, lines, name: kid.name, token, open: true, said: 'One moment: too many tries.' });
+  if (String(form?.get('grownup') ?? '') !== 'yes') return (await import('./shop-page.mjs')).parentPage(cat, shop, { item, lines, name: kid.name, token, open: ready.ready, said: 'Tick the box to say you are their parent or guardian and an adult.' });
+  if (!ready.ready) return (await import('./shop-page.mjs')).parentPage(cat, shop, { item, lines, name: kid.name, token, open: false });
+  if (purchaseLimited(request, shop, row.player, 'parentpay')) return (await import('./shop-page.mjs')).parentPage(cat, shop, { item, lines, name: kid.name, token, open: true, said: 'One moment: too many tries.' });
   const band = await bandOfPlayer(env, row.player);
   const owns = await ownsOf(env, row.player);
   let amount = 0;
   for (const [index, line] of lines.entries()) {
     const it = line.item;
     const owned = it.gives.length > 0 && it.gives.every((key) => owns.some((o) => o.key === key && o.item === it.id));
-    if (wayFor(it, { player: kid, band, owned, spent: 0, cap: null, policy: shop.policy }) !== 'ask-a-parent') return parentPage(cat, shop, { gone: true });
+    if (wayFor(it, { player: kid, band, owned, spent: 0, cap: null, policy: shop.policy }) !== 'ask-a-parent') return (await import('./shop-page.mjs')).parentPage(cat, shop, { gone: true });
     line.amount = it.price === 'choose' ? parseAmount(form?.get(lines.length === 1 ? 'amount' : `amount_${index}`), currencyScale(shop.currency)) : it.price;
     const invalid = amountError(line.amount, shop.currency);
-    if (invalid || it.price === 'choose' && (line.amount < it.min || it.max !== null && line.amount > it.max)) return parentPage(cat, shop, { item, lines, name: kid.name, token, said: invalid ?? 'This amount is outside the studio range.' });
+    if (invalid || it.price === 'choose' && (line.amount < it.min || it.max !== null && line.amount > it.max)) return (await import('./shop-page.mjs')).parentPage(cat, shop, { item, lines, name: kid.name, token, said: invalid ?? 'This amount is outside the studio range.' });
     const total = BigInt(amount) + BigInt(line.amount) * BigInt(line.quantity);
-    if (total > BigInt(Number.MAX_SAFE_INTEGER)) return parentPage(cat, shop, { item, lines, name: kid.name, token, said: 'The total exceeds safe integer arithmetic.' });
+    if (total > BigInt(Number.MAX_SAFE_INTEGER)) return (await import('./shop-page.mjs')).parentPage(cat, shop, { item, lines, name: kid.name, token, said: 'The total exceeds safe integer arithmetic.' });
     amount = Number(total);
   }
   const r = await startCheckout(env, url, cat, shop, item, { player: { id: row.player }, game: row.game, amount, parent: true, lines });
-  if (r.error) return parentPage(cat, shop, { item, lines, name: kid.name, token, open: true, said: (await r.error.json()).message });
+  if (r.error) return (await import('./shop-page.mjs')).parentPage(cat, shop, { item, lines, name: kid.name, token, open: true, said: (await r.error.json()).message });
   await env.DB.prepare('UPDATE shop_parent_links SET order_id = ?2 WHERE hash = ?1').bind(await sha256Hex(token), r.order.id).run();
   if (!r.reconciled && ctx?.waitUntil) ctx.waitUntil(reconcileOrders(env, shop, row.player).catch((error) => logOrderError(env, r.order.id, error)));
   return Response.redirect(r.url, 303);
@@ -836,7 +837,13 @@ async function hook(request, env, cat, shop, ready) {
   if (payload === null) return fail(413, 'too-large', 'The studio webhook byte limit was reached.');
   const v = await verifyWebhook(payload, request.headers.get('stripe-signature'), env.STRIPE_WEBHOOK_SECRET);
   if (!v.ok) return fail(v.why === 'no-secret' ? 503 : 400, v.why, 'not a webhook from this studio\'s Stripe');
-  const ev = v.event;
+  if(env.BACKGROUND)return (await import('./stripe-intake.mjs')).acceptStripeEvent(env,v.event,new URL(request.url).origin);
+  return reconcileShopEvent(request,env,shop,v.event);
+}
+
+/** Internal verified-event seam shared by direct legacy intake and the queue consumer. */
+export async function reconcileShopEvent(request,env,shop,ev) {
+  shop??=checkShop({}).shop;
   const obj = ev.data?.object ?? {};
   const needed = ['checkout.session.completed', 'checkout.session.async_payment_succeeded', 'checkout.session.async_payment_failed', 'checkout.session.expired', 'charge.refunded', 'refund.created', 'refund.updated', 'refund.failed', 'charge.dispute.created', 'charge.dispute.closed'];
   if (selling.enabled) {
@@ -955,7 +962,6 @@ async function hook(request, env, cat, shop, ready) {
     if (did === 'needs-keyed-recovery') return fail(503, did, 'This earlier multi-item checkout needs its original connection to recover tax per line. Reconnect it, then resend this event.');
     if (did === 'missing-item' || did === 'unknown-order') return fail(503, did, did === 'missing-item' ? 'Restore this order item in shop.json to grant it; the office can refund its payment.' : 'Payment order is not recorded yet; retry this event.');
     await env.DB.prepare('INSERT INTO shop_events (id, type, at) VALUES (?1, ?2, ?3) ON CONFLICT(id) DO NOTHING').bind(ev.id, ev.type, Date.now()).run();
-    if (Math.random() < 0.02) await env.DB.prepare('DELETE FROM shop_events WHERE at < ?1').bind(Date.now() - 60 * DAY).run();
     return json({ ok: true, did });
   } catch (error) {
     if(/(?:booking|resource) capacity unavailable/.test(error.message)&&obj.payment_link&&await reviewLinkPayment(env,obj,ev.livemode?'live':'test','The paid group exceeds remaining capacity. Staff will arrange a replacement or refund.'))return json({ok:true,did:'review'});
@@ -1443,6 +1449,7 @@ export async function shopOffice(env, cat, origin, itemCursor = 0, orderCursor =
     },
     keyless: !hasStripeKey(env),
     hook: `${origin}/api/shop/hook`,
+    ...(env.BACKGROUND ? {delivery:await (await import('./stripe-intake.mjs')).stripeIntakeStatus(env)} : {}),
     totals: null, orders: [],
   };
   if (!(await migrated(env, { complete: false }))) return out;

package/worker/stats.mjs

@@ -1,3 +1,4 @@
+import {writePageMetric,analyticsStatus} from './analytics.mjs';
 /**
  * STUDIO METRICS: count, don't track (@homie-rocks/studio 0.6.0).
  *
@@ -5,7 +6,7 @@
  * party, no cookie is set on a visitor, and no visitor is identified: a count is a number on a day, never a row
  * about a person. Referrers are kept as a host name only (never a path, a query or an address).
  *
- * WHAT IS COUNTED, one D1 row write each (an UPSERT on a daily counter; never per frame):
+ * WHAT IS COUNTED (page metrics go to Analytics Engine; daily rollups preserve D1 history):
  *   visit   a page opened (home, a game's page, /music/, a song's page, /videos/, a video's page)
  *   play    a game's play page opened: somebody pressed Play (or followed a Play link or QR code)
  *   screen  a big screen opened (/<game>/tv)
@@ -36,9 +37,8 @@
  * (HttpOnly, SameSite=Lax; from 0.13.0 at / so the owner is recognised in their own games, never readable by a
  * page or a game). There is no other way in.
  *
- * FREE PLAN: D1 allows 100,000 row writes and 5 million row reads a day. A visit, a play, a room and a
- * song or video start are one write each; a finished round is three (its row in `rounds`, the round and the
- * humans counters). Past the day's writes, counting stops until 00:00 UTC and the site keeps working.
+ * Page totals refresh hourly and can be sampled at high traffic. Older wrappers without the analytics
+ * binding retain D1 counting. Game, payment and budget facts remain in durable storage.
  */
 
 export const STATS_MIGRATION_FILE = '0002_studio_stats.sql';
@@ -97,9 +97,10 @@ export function counter(env, { metric, subject = '', source = '', n = 1, day = t
 
 /** Run a counter write after the response (ctx.waitUntil), or before it when the caller gave no ctx. Never throws. */
 export async function count(env, ctx, row) {
+  if (writePageMetric(env, row)) return;
   const stmt = counter(env, row);
   if (!stmt) return;
-  const p = stmt.run().catch(() => {}); // before migration 0002, or past the free plan's daily writes: not counted
+  const p = stmt.run().catch(error => console.warn("Studio counter dropped:",error.message)); // before migration 0002, or past the free plan's daily writes: not counted
   if (ctx?.waitUntil) ctx.waitUntil(p); else await p;
 }
 
@@ -339,7 +340,7 @@ export async function readStats(env, cat, { range, only = null, studios = new Se
     // The studio's own pages: its home, and the /music/ and /videos/ lists (a catalogue's road).
     pages: Object.fromEntries(['home', 'games', 'rooms', 'posts', 'music', 'videos'].map((p) => [p, sum((r) => r.metric === 'visit' && r.subject === p)])),
     games: perGame, songs: media(songs, 'song', 'music'), videos: media(videos, 'video', 'videos'), referrers, days,
-    note: 'Counts, never people: a visit is a page a browser opened, a play is a Play press, a round is a finished round. Prefetches, crawlers and house QA are not counted. Times are UTC days.',
+    note: 'Counts, never people: a visit is a page a browser opened, a play is a Play press, a round is a finished round. Prefetches, crawlers and house QA are not counted. Times are UTC days.' + (env.STUDIO_ANALYTICS && env.STUDIO_ANALYTICS_DATASET ? ' Page visits, plays, screens and watches show the last hourly rollup; recent activity appears after ingestion and the next rollup. These counters may be sampled at high traffic.' + await analyticsStatus(env).then(s=>s.delayed ? ' Counts are delayed: '+(s.error??'awaiting a successful rollup')+'.' : '') : ''),
   };
 }
 

package/worker/stream-objects.mjs

@@ -0,0 +1,18 @@
+/** Streams use independent namespaces so subscribers never warm matchmaking state. */
+export class AppRecordHub {
+  constructor(ctx, env) { this.ctx=ctx; this.env=env; }
+  async fetch(request) {
+    const {AppRecordStreams}=await import('./app-streams.mjs');
+    this.streams??=new AppRecordStreams(this.env,this.ctx);
+    const input=await request.json();
+    return input.op==='open'?this.streams.open(input):this.streams.wake(input.meta);
+  }
+}
+export class EventHub {
+  constructor(ctx, env) { this.ctx=ctx; this.env=env; }
+  async fetch(request) {
+    const {EventStreams}=await import('./event-resources.mjs');
+    this.streams??=new EventStreams(this.env,this.ctx);
+    return this.streams.fetch(request);
+  }
+}

package/worker/stripe-intake.mjs

@@ -0,0 +1,79 @@
+import {RECONCILE_GUARD,guardedDatabase} from './reconcile-guard.mjs';
+/** Called only after raw-body signature verification. D1 owns the work; queues
+ * are wakeups and may be unavailable or exhaust their daily allowance. */
+export async function acceptStripeEvent(env,event,origin) {
+  await env.DB.prepare('INSERT INTO stripe_intake(id,payload,origin,received) VALUES(?1,?2,?3,?4) ON CONFLICT(id) DO NOTHING')
+    .bind(event.id,JSON.stringify(event),origin,Date.now()).run();
+  try { await env.BACKGROUND.send({v:1,type:'stripe.event',id:event.id}); }
+  catch(error) { console.warn('Stripe delivery deferred to the scheduled D1 sweep:',error.message); }
+  return Response.json({ok:true,queued:true});
+}
+async function reconcile(env,row,event,cat) {
+  const {reconcileShopEvent,shopOf}=await import('./shop.mjs');
+  return reconcileShopEvent(new Request(new URL('/api/shop/hook',row.origin)),env,shopOf(cat),event);
+}
+export async function reconcileStripeEvent(env,id,cat,{leaseMs=300000,reconcile:deliver=reconcile}={}) {
+  const now=Date.now();let lease=now+leaseMs;
+  const row=await env.DB.prepare('UPDATE stripe_intake SET lease=?2 WHERE id=?1 AND done IS NULL AND lease<?3 RETURNING *').bind(id,lease,now).first();
+  if(!row) {
+    const pending=await env.DB.prepare('SELECT done,lease FROM stripe_intake WHERE id=?1').bind(id).first();
+    if(pending?.done)return;
+    const error=new Error('Stripe event is missing or already being reconciled');
+    if(pending?.lease>=now)error.retryAfterSeconds=Math.max(1,Math.min(301,Math.ceil((pending.lease-now)/1000)+1));
+    throw error;
+  }
+  let renewal=Promise.resolve(),lost=null;
+  const timer=setInterval(()=>{
+    renewal=renewal.then(async()=>{
+      if(lost)return;
+      const next=Date.now()+leaseMs;
+      const renewed=await env.DB.prepare('UPDATE stripe_intake SET lease=?3 WHERE id=?1 AND lease=?2 AND done IS NULL RETURNING id').bind(id,lease,next).first();
+      if(!renewed)throw new Error('Stripe reconciliation lease was lost');
+      lease=next;
+    }).catch(error=>{lost=error;});
+  },Math.max(1,Math.floor(leaseMs/3)));
+  const check=async()=>{
+    await renewal;
+    if(lost)throw lost;
+    if(Date.now()>=lease)throw new Error('Stripe reconciliation lease expired');
+  };
+  const guarded={...env,DB:guardedDatabase(env.DB,check),[RECONCILE_GUARD]:check};
+  try {
+    await check();
+    const event=JSON.parse(row.payload);
+    if(event.id!==id)throw new Error('Stored Stripe event id differs');
+    const response=await deliver(guarded,row,event,cat);
+    if(!response.ok)throw new Error('Stripe reconciliation needs retry ('+response.status+')');
+    clearInterval(timer);await renewal;
+    if(lost)throw lost;
+    const done=await env.DB.prepare('UPDATE stripe_intake SET done=?2,lease=0 WHERE id=?1 AND lease=?3 AND lease>?2 RETURNING id').bind(id,Date.now(),lease).first();
+    if(!done)throw new Error('Stripe reconciliation lease lost before completion');
+  } catch(error) {
+    clearInterval(timer);await renewal;
+    await env.DB.prepare('UPDATE stripe_intake SET lease=?3 WHERE id=?1 AND lease=?2').bind(id,lease,Date.now()+60000).run();
+    throw error;
+  } finally {clearInterval(timer);}
+}
+export async function stripeIntakeStatus(env) {
+  if(!env.DB)return {pending:0,stuck:0};
+  const row=await env.DB.prepare('SELECT COUNT(*) AS pending,COALESCE(SUM(received<?1),0) AS stuck,MIN(received) AS oldest FROM stripe_intake WHERE done IS NULL').bind(Date.now()-3600000).first();
+  return {...row,message:row?.stuck?'Stripe deliveries are delayed. Check Worker logs and Stripe key permissions; scheduled recovery retries unfinished events.':null};
+}
+export async function sweepStripeEvents(env,cat) {
+  if(!env.DB)return;
+  const rows=(await env.DB.prepare('SELECT id FROM stripe_intake WHERE done IS NULL AND lease<?1 ORDER BY lease,received,id LIMIT 100').bind(Date.now()).all()).results??[];
+  for(const row of rows) {
+    try {await reconcileStripeEvent(env,row.id,cat);}
+    catch(error) {console.error('Stripe intake recovery failed',row.id,error.message);}
+  }
+  const status=await stripeIntakeStatus(env);
+  if(status.stuck)console.error('Stripe intake needs attention',status);
+  return status;
+}
+export async function pruneStripeEvents(env) {
+  const cutoff=Date.now()-60*86400000;
+  await env.DB.batch([
+    ...(env.BACKGROUND?[env.DB.prepare('DELETE FROM stripe_intake WHERE id IN (SELECT id FROM stripe_intake WHERE done<?1 ORDER BY done LIMIT 1000)').bind(cutoff)]:[]),
+    env.DB.prepare('DELETE FROM shop_events WHERE id IN (SELECT id FROM shop_events WHERE at<?1 ORDER BY at LIMIT 1000)').bind(cutoff),
+  ]);
+}

package/worker/stripe.mjs

@@ -1,3 +1,4 @@
+import {RECONCILE_GUARD} from './reconcile-guard.mjs';
 /**
  * THE STUDIO'S OWN STRIPE, from its Worker (@homie-rocks/studio 0.24.0). No SDK: a few form-encoded calls with the
  * studio's key (a Worker secret), and Stripe's documented webhook signature check with WebCrypto.
@@ -95,6 +96,7 @@ export async function productIdOf(slug, item) {
 
 /** One call with the studio's key. `idempotencyKey` makes a retried POST do the work once (Stripe keeps it 24 h). */
 export async function stripeCall(env, method, path, params = null, { idempotencyKey = null, fetcher = fetch, version = STRIPE_VERSION, timeout = 15_000 } = {}) {
+  await env?.[RECONCILE_GUARD]?.();
   const key = String(env?.STRIPE_KEY ?? '');
   if (!KEY_SHAPE.test(key)) throw new StripeError(0, { error: { message: 'no Stripe key on this Worker', code: 'no-key' } });
   const body = params && method !== 'GET' ? formEncode(params).toString() : null;
@@ -119,6 +121,7 @@ export async function stripeCall(env, method, path, params = null, { idempotency
     error.idempotentReplayed = res.headers.get('idempotent-replayed') === 'true';
     throw error;
   }
+  await env?.[RECONCILE_GUARD]?.();
   return json;
 }