@lunora/payment 1.0.0-alpha.16 → 1.0.0-alpha.18

package/LICENSE.md

@@ -103,3 +103,9 @@ Unless required by applicable law or agreed to in writing, software distributed
 under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
 CONDITIONS OF ANY KIND, either express or implied. See the License for the
 specific language governing permissions and limitations under the License.
+
+<!-- DEPENDENCIES -->
+<!-- /DEPENDENCIES -->
+
+<!-- TYPE_DEPENDENCIES -->
+<!-- /TYPE_DEPENDENCIES -->

package/README.md

@@ -46,14 +46,15 @@ Part of the [Lunora](https://github.com/anolilab/lunora) framework — a type-sa
 pnpm add @lunora/payment stripe
 ```
 
-`stripe` is an optional peer dependency — install only the provider SDK you use; the adapter takes the client by injection.
+`stripe` is an optional peer dependency — install only the provider SDK you use; the adapter takes the client by injection. The same holds for the other providers: `createPolarAdapter` (Polar), `createAutumnAdapter` ([Autumn](https://useautumn.com)), `createDodoPaymentsAdapter` ([Dodo Payments](https://dodopayments.com)), and `createCreemAdapter` ([Creem](https://creem.io)) take a structural client too, so no provider SDK is a hard dependency of this package. Additional providers plug in via `PaymentAdapter`.
 
 ## Usage
 
 Build a facade from an adapter and a store, then start a hosted checkout:
 
 ```ts
-import { createPayment, createStripeAdapter, MemoryPaymentStore } from "@lunora/payment";
+import { createPayment, MemoryPaymentStore } from "@lunora/payment";
+import { createStripeAdapter } from "@lunora/payment/stripe";
 import Stripe from "stripe";
 
 const payment = createPayment({

package/dist/index.d.mts

@@ -1,296 +1,7 @@
+import { a as ProviderId, C as Customer, b as PaymentSession, S as Subscription, U as UsageEvent, W as WebhookActionType, A as ApplyResult, P as PaymentAdapter, c as AttachInput, d as CheckoutResult, e as CancelSubscriptionOptions, f as CheckInput, g as CheckResult, h as CheckoutInput, F as FeatureBalance, T as TrackInput, i as TrackResult, j as CurrencyCode, M as Money, k as PaymentState, l as SubscriptionState, m as WebhookAction } from "./packem_shared/adapter.d-iFA55DzU.mjs";
+export { type n as AdapterRegistry, type o as CaptureInput, type p as CustomerRef, type q as PortalInput, type r as ProviderCapabilities, type R as RefundAmountKind, type s as RefundInput, type t as ReportUsageInput, type u as SubscriptionPatch, type v as WebhookHeaders, type w as WebhookInput, x as createAdapterRegistry } from "./packem_shared/adapter.d-iFA55DzU.mjs";
 import { LunoraError } from '@lunora/errors';
 import { TableDefinition } from '@lunora/server';
-/**
-* Core domain types for `@lunora/payment`.
-*
-* The provider is a stateless translator; the store owns all state. These types are the
-* provider-agnostic vocabulary every adapter normalizes onto.
-*/
-/** ISO-4217 currency code (uppercase, 3 letters). Not enumerated — provider coverage varies. */
-type CurrencyCode = string;
-/**
-* Money as integer minor units + currency. Always carry the two together.
-*
-* `minorUnits` is a `bigint`, which is **not** JSON-serializable — cross the RPC/wire boundary
-* with the `toMoneyJSON` / `fromMoneyJSON` helpers (see `./money`).
-*/
-interface Money {
-  readonly currency: CurrencyCode;
-  readonly minorUnits: bigint;
-}
-/** Stable provider identifier (Medusa-style). Scoped to what Convex ships: Stripe + Polar. */
-type ProviderId = "polar" | "stripe";
-/** What a provider can do — encoded in types so tax/UX assumptions aren't tribal knowledge. */
-interface ProviderCapabilities {
-  /** True for Polar / Lemon Squeezy / Paddle; false for Stripe (PSP). Drives tax/invoice ownership. */
-  readonly merchantOfRecord: boolean;
-  /** Native hosted customer/billing portal. */
-  readonly portal: boolean;
-  /** Usage-based / metered billing. */
-  readonly usageMetering: boolean;
-}
-/** Lifecycle state of a one-time payment session. */
-type PaymentState = "authorized" | "canceled" | "captured" | "failed" | "initiated" | "partially_refunded" | "refunded";
-/** Lifecycle state of a subscription. */
-type SubscriptionState = "active" | "canceled" | "past_due" | "paused" | "trialing";
-interface Customer {
-  readonly createdAt: number;
-  readonly email?: string;
-  /** Provider-side customer id. */
-  readonly id: string;
-  readonly provider: ProviderId;
-  /** App-side owner the customer belongs to (user / org / workspace). Opaque to this package. */
-  readonly referenceId: string;
-}
-interface PaymentSession {
-  readonly amount: Money;
-  readonly capturedAmount: Money;
-  readonly createdAt: number;
-  /** Provider-side payment / intent / session id. */
-  readonly id: string;
-  readonly provider: ProviderId;
-  readonly referenceId: string;
-  readonly refundedAmount: Money;
-  readonly state: PaymentState;
-  readonly updatedAt: number;
-}
-interface Subscription {
-  readonly cancelAtPeriodEnd: boolean;
-  readonly createdAt: number;
-  readonly currentPeriodEnd?: number;
-  /** Start of the current billing period — the window `check` sums metered usage over. */
-  readonly currentPeriodStart?: number;
-  readonly id: string;
-  readonly priceId: string;
-  readonly provider: ProviderId;
-  readonly quantity: number;
-  readonly referenceId: string;
-  readonly state: SubscriptionState;
-  readonly updatedAt: number;
-}
-interface CustomerRef {
-  readonly email?: string;
-  readonly metadata?: Record<string, string>;
-  readonly referenceId: string;
-}
-interface CheckoutInput {
-  readonly cancelUrl: string;
-  /** Existing provider customer id, if known. */
-  readonly customerId?: string;
-  /** Outbound idempotency key for the provider call; auto-derived when omitted. */
-  readonly idempotencyKey?: string;
-  readonly metadata?: Record<string, string>;
-  readonly mode: "payment" | "subscription";
-  readonly priceId: string;
-  readonly quantity?: number;
-  readonly referenceId: string;
-  readonly successUrl: string;
-}
-interface CheckoutResult {
-  readonly id: string;
-  readonly provider: ProviderId;
-  readonly url: string;
-}
-/**
-* `attach` input — subscribe a reference to a plan. A thin, plan-oriented skin over
-* {@link CheckoutInput}: `mode` defaults to `"subscription"` (the common case), so callers pass
-* just `{ referenceId, priceId, successUrl, cancelUrl }`.
-*/
-interface AttachInput extends Omit<CheckoutInput, "mode"> {
-  readonly mode?: CheckoutInput["mode"];
-}
-interface PortalInput {
-  readonly customerId: string;
-  readonly returnUrl: string;
-}
-/** A single durable usage record — one metered event for a `(referenceId, featureId)` pair. */
-interface UsageEvent {
-  readonly createdAt: number;
-  readonly featureId: string;
-  /** Caller-stable dedupe key — recording the same key twice is a no-op (exactly-once `track`). */
-  readonly idempotencyKey: string;
-  readonly provider: ProviderId;
-  readonly quantity: number;
-  readonly referenceId: string;
-  /** Whether the event was successfully forwarded to the provider's metering API. */
-  readonly reportedToProvider: boolean;
-}
-/** `track` input — record metered usage for a reference's feature. */
-interface TrackInput {
-  readonly featureId: string;
-  /** Caller-supplied dedupe key; a fresh one is generated when omitted (so each call records). */
-  readonly idempotencyKey?: string;
-  /** `"add"` (default) increments usage by `quantity`; `"set"` reconciles the period total to `quantity`. */
-  readonly mode?: "add" | "set";
-  /** Usage amount to add, or the absolute period total when `mode` is `"set"` (defaults to `1`). */
-  readonly quantity?: number;
-  readonly referenceId: string;
-}
-/** Result of a `track` call. */
-interface TrackResult {
-  /** True when this call inserted a new usage event; false when deduplicated by idempotency key. */
-  readonly recorded: boolean;
-  /** True when the event was forwarded to the provider's metering API. */
-  readonly reportedToProvider: boolean;
-}
-/**
-* `check` input — is a reference allowed something right now? Pass `featureId` to check a feature
-* grant/allowance, or `priceId` to check active access to a product (one of the two is required).
-*/
-interface CheckInput {
-  /** Feature to check a grant/allowance for. Provide this **or** `priceId`. */
-  readonly featureId?: string;
-  /** Provider price/product id to check active access for. Provide this **or** `featureId`. */
-  readonly priceId?: string;
-  /** Units the caller intends to consume; the check passes only when this many remain (default `1`). */
-  readonly quantity?: number;
-  readonly referenceId: string;
-}
-/** Result of a `check` call. */
-interface CheckResult {
-  /** Whether the reference may consume `quantity` units of the feature right now. */
-  readonly allowed: boolean;
-  /** Remaining units this period (`limit - used`), for metered features only. */
-  readonly balance?: number;
-  /** The plan-granted cap, for metered features only. */
-  readonly limit?: number;
-  /** True for a boolean feature granted without a numeric cap. */
-  readonly unlimited: boolean;
-  /** Usage consumed this period, for metered features only. */
-  readonly used?: number;
-}
-/** One feature's resolved allowance for a reference — a {@link CheckResult} tagged with its feature. */
-interface FeatureBalance extends CheckResult {
-  readonly featureId: string;
-}
-/** Input the adapter forwards to the provider's metering API (Stripe Meter Events / Polar ingestion). */
-interface ReportUsageInput {
-  /** Provider customer id, when known (Stripe meter events key on it). */
-  readonly customerId?: string;
-  readonly featureId: string;
-  readonly idempotencyKey: string;
-  readonly quantity: number;
-  readonly referenceId: string;
-  /** Event time in epoch ms; defaults to now at the provider. */
-  readonly timestamp?: number;
-}
-interface CaptureInput {
-  /** Partial capture amount; full capture when omitted. */
-  readonly amount?: Money;
-  readonly idempotencyKey?: string;
-  readonly sessionId: string;
-}
-interface RefundInput {
-  /** Partial refund amount; full refund when omitted. */
-  readonly amount?: Money;
-  readonly idempotencyKey?: string;
-  readonly reason?: string;
-  readonly sessionId: string;
-}
-interface CancelSubscriptionOptions {
-  /** Cancel at period end instead of immediately. */
-  readonly atPeriodEnd?: boolean;
-  readonly idempotencyKey?: string;
-}
-interface SubscriptionPatch {
-  readonly priceId?: string;
-  readonly quantity?: number;
-}
-/** Normalized webhook outcome — the *core state transition* a provider event implies. */
-type WebhookActionType = "payment.authorized" | "payment.captured" | "payment.failed" | "payment.refunded" | "subscription.active" | "subscription.canceled" | "subscription.past_due" | "subscription.paused" | "subscription.updated" | "unhandled";
-/**
-* How a refund action's {@link WebhookAction.amount} should be interpreted by the sync layer.
-*
-* `"delta"` is an incremental amount added to the running refunded total (Polar `refund.created`,
-* and the historical default), so multiple events accumulate. `"absolute"` is the provider's
-* cumulative refunded-to-date total (Stripe `charge.refunded` carries `amount_refunded`, which
-* already sums all prior partial refunds); the sync layer sets the refunded total to this value
-* rather than adding, so repeated partial-refund events do not over-count.
-*
-* Omitted means `"delta"`, preserving the original behavior for callers that predate this field.
-*/
-type RefundAmountKind = "absolute" | "delta";
-interface WebhookAction {
-  readonly amount?: Money;
-  /**
-  * Interpretation of {@link WebhookAction.amount} for refund actions (`payment.refunded`).
-  * Defaults to `"delta"` when omitted. Ignored for non-refund actions.
-  */
-  readonly amountKind?: RefundAmountKind;
-  readonly cancelAtPeriodEnd?: boolean;
-  readonly currentPeriodEnd?: number;
-  readonly currentPeriodStart?: number;
-  readonly customerId?: string;
-  /** Provider event id — the inbound idempotency key. */
-  readonly eventId: string;
-  readonly priceId?: string;
-  readonly provider: ProviderId;
-  readonly quantity?: number;
-  /** Raw provider event, retained for the events log / debugging. */
-  readonly raw?: unknown;
-  readonly referenceId?: string;
-  readonly sessionId?: string;
-  readonly subscriptionId?: string;
-  readonly type: WebhookActionType;
-}
-/** Result of applying a webhook action to the store. */
-interface ApplyResult {
-  readonly applied: boolean;
-  readonly reason?: "duplicate" | "illegal_transition" | "invalid_refund_amount" | "ok" | "unhandled";
-}
-/** A read-only header bag; the platform `Headers` object satisfies it. */
-interface WebhookHeaders {
-  get: (name: string) => null | string;
-}
-interface WebhookInput {
-  /** Request headers (signature schemes read provider-specific headers from here). */
-  readonly headers: WebhookHeaders;
-  /** Raw request body, exactly as received (required for signature verification). */
-  readonly payload: string;
-}
-/**
-* A stateless translator between the provider API and Lunora's normalized vocabulary.
-*
-* Adapters never own state — they make provider calls and normalize provider events into a
-* `WebhookAction`. All durable state lives in the payment store.
-*/
-interface PaymentAdapter {
-  cancelPayment: (sessionId: string, options?: {
-    idempotencyKey?: string;
-  }) => Promise<PaymentSession>;
-  cancelSubscription: (subscriptionId: string, options?: CancelSubscriptionOptions) => Promise<Subscription>;
-  readonly capabilities: ProviderCapabilities;
-  capturePayment: (input: CaptureInput) => Promise<PaymentSession>;
-  createCheckout: (input: CheckoutInput) => Promise<CheckoutResult>;
-  createPortalSession: (input: PortalInput) => Promise<{
-    url: string;
-  }>;
-  getOrCreateCustomer: (ref: CustomerRef) => Promise<Customer>;
-  /** Fetch the provider's current truth for a payment session — the basis for reconciliation. */
-  getPaymentStatus: (sessionId: string) => Promise<PaymentSession>;
-  /** Fetch the provider's current truth for a subscription — the basis for reconciliation. */
-  getSubscriptionStatus: (subscriptionId: string) => Promise<Subscription>;
-  /** Stable provider identifier (Medusa-style). */
-  readonly identifier: ProviderId;
-  /** Verify the signature over the raw body, then normalize the event. Throws on invalid signature. */
-  parseWebhook: (input: WebhookInput) => Promise<WebhookAction>;
-  refundPayment: (input: RefundInput) => Promise<PaymentSession>;
-  /**
-  * Forward metered usage to the provider's billing API. Optional — present only on providers
-  * whose `capabilities.usageMetering` is `true` and that expose an ingestion endpoint. When
-  * absent, `track` still records usage durably and `check` enforces limits locally.
-  */
-  reportUsage?: (input: ReportUsageInput) => Promise<void>;
-  resumeSubscription: (subscriptionId: string) => Promise<Subscription>;
-  updateSubscription: (subscriptionId: string, patch: SubscriptionPatch) => Promise<Subscription>;
-}
-/** Registry of adapters keyed by provider id — supports dual-register during provider migration. */
-interface AdapterRegistry {
-  all: () => PaymentAdapter[];
-  get: (provider: ProviderId) => PaymentAdapter;
-  has: (provider: ProviderId) => boolean;
-}
-declare const createAdapterRegistry: (adapters: ReadonlyArray<PaymentAdapter>) => AdapterRegistry;
 interface PaymentStore {
   getCustomerByReference: (provider: ProviderId, referenceId: string) => Promise<Customer | undefined>;
   getPaymentSession: (provider: ProviderId, id: string) => Promise<PaymentSession | undefined>;
@@ -555,147 +266,6 @@ interface MoneyJSON {
 }
 declare const toMoneyJSON: (m: Money) => MoneyJSON;
 declare const fromMoneyJSON: (json: MoneyJSON) => Money;
-interface PolarSubscriptionLike {
-  readonly cancelAtPeriodEnd?: boolean;
-  readonly currentPeriodEnd?: null | string;
-  readonly currentPeriodStart?: null | string;
-  readonly customerId?: null | string;
-  readonly id: string;
-  readonly metadata?: Record<string, string>;
-  readonly productId?: string;
-  readonly status: string;
-}
-interface PolarOrderLike {
-  readonly amount?: number;
-  readonly currency?: string;
-  readonly id: string;
-  readonly status: string;
-  readonly totalAmount?: number;
-}
-interface PolarClientLike {
-  readonly checkouts: {
-    create: (parameters: Record<string, unknown>) => Promise<{
-      id: string;
-      url: string;
-    }>;
-  };
-  readonly customers: {
-    create: (parameters: Record<string, unknown>) => Promise<{
-      email: null | string;
-      id: string;
-    }>;
-  };
-  readonly customerSessions: {
-    create: (parameters: Record<string, unknown>) => Promise<{
-      customerPortalUrl: string;
-    }>;
-  };
-  readonly events: {
-    ingest: (parameters: Record<string, unknown>) => Promise<{
-      inserted?: number;
-    }>;
-  };
-  readonly orders: {
-    get: (parameters: Record<string, unknown>) => Promise<PolarOrderLike>;
-  };
-  readonly refunds: {
-    create: (parameters: Record<string, unknown>) => Promise<{
-      id: string;
-    }>;
-  };
-  readonly subscriptions: {
-    get: (parameters: Record<string, unknown>) => Promise<PolarSubscriptionLike>;
-    revoke: (parameters: Record<string, unknown>) => Promise<PolarSubscriptionLike>;
-    update: (parameters: Record<string, unknown>) => Promise<PolarSubscriptionLike>;
-  };
-}
-interface PolarAdapterOptions {
-  readonly client: PolarClientLike;
-  readonly webhookSecret: string;
-  readonly webhookToleranceSeconds?: number;
-}
-declare const createPolarAdapter: (options: PolarAdapterOptions) => PaymentAdapter;
-interface StripeRequestOptions {
-  readonly idempotencyKey?: string;
-}
-interface StripePaymentIntentLike {
-  readonly amount: number;
-  readonly amount_received?: number;
-  readonly currency: string;
-  readonly customer?: null | string;
-  readonly id: string;
-  readonly metadata?: Record<string, string>;
-  readonly status: string;
-}
-interface StripeSubscriptionLike {
-  readonly cancel_at_period_end?: boolean;
-  readonly current_period_end?: number;
-  readonly current_period_start?: number;
-  readonly customer?: null | string;
-  readonly id: string;
-  readonly items?: {
-    data: ReadonlyArray<{
-      price?: {
-        id?: string;
-      };
-      quantity?: number;
-    }>;
-  };
-  readonly metadata?: Record<string, string>;
-  readonly status: string;
-}
-/** The subset of the Stripe SDK surface this adapter calls. A real `Stripe` instance satisfies it. */
-interface StripeClientLike {
-  readonly billing: {
-    meterEvents: {
-      create: (parameters: Record<string, unknown>, options?: StripeRequestOptions) => Promise<{
-        identifier?: string;
-      }>;
-    };
-  };
-  readonly billingPortal: {
-    sessions: {
-      create: (parameters: Record<string, unknown>) => Promise<{
-        url: string;
-      }>;
-    };
-  };
-  readonly checkout: {
-    sessions: {
-      create: (parameters: Record<string, unknown>, options?: StripeRequestOptions) => Promise<{
-        id: string;
-        url: null | string;
-      }>;
-    };
-  };
-  readonly customers: {
-    create: (parameters: Record<string, unknown>, options?: StripeRequestOptions) => Promise<{
-      email: null | string;
-      id: string;
-    }>;
-  };
-  readonly paymentIntents: {
-    cancel: (id: string, parameters?: Record<string, unknown>, options?: StripeRequestOptions) => Promise<StripePaymentIntentLike>;
-    capture: (id: string, parameters?: Record<string, unknown>, options?: StripeRequestOptions) => Promise<StripePaymentIntentLike>;
-    retrieve: (id: string) => Promise<StripePaymentIntentLike>;
-  };
-  readonly refunds: {
-    create: (parameters: Record<string, unknown>, options?: StripeRequestOptions) => Promise<{
-      id: string;
-    }>;
-  };
-  readonly subscriptions: {
-    cancel: (id: string, parameters?: Record<string, unknown>, options?: StripeRequestOptions) => Promise<StripeSubscriptionLike>;
-    retrieve: (id: string) => Promise<StripeSubscriptionLike>;
-    update: (id: string, parameters: Record<string, unknown>, options?: StripeRequestOptions) => Promise<StripeSubscriptionLike>;
-  };
-}
-interface StripeAdapterOptions {
-  readonly client: StripeClientLike;
-  readonly webhookSecret: string;
-  readonly webhookToleranceSeconds?: number;
-}
-declare const createStripeAdapter: (options: StripeAdapterOptions) => PaymentAdapter;
 interface ReconcileInput {
   readonly adapter: PaymentAdapter;
   /** Optional telemetry sink — fired per drifted row and once on completion. */
@@ -730,29 +300,6 @@ declare const applyWebhookAction: (store: PaymentStore, action: WebhookAction, o
 /** Constant-time string comparison to avoid leaking byte positions via timing. */
 declare const constantTimeEqual: (a: string, b: string) => boolean;
 declare const hmacSha256Hex: (secret: string, payload: string) => Promise<string>;
-interface StripeSignatureParts {
-  readonly signatures: string[];
-  readonly timestamp: number;
-}
-/** Parse a Stripe-style `t=...,v1=...,v1=...` signature header. */
-declare const parseStripeSignatureHeader: (header: string) => StripeSignatureParts;
-interface VerifyStripeSignatureInput {
-  /** Injectable clock (ms since epoch) for tests. */
-  readonly now?: number;
-  /** Raw request body, exactly as received. */
-  readonly payload: string;
-  readonly secret: string;
-  /** The `Stripe-Signature` header value. */
-  readonly signatureHeader: string;
-  /** Whole-second tolerance for the signed timestamp (default 300). */
-  readonly toleranceSeconds?: number;
-}
-/**
-* Verify a Stripe-scheme webhook signature: `HMAC_SHA256(secret, "{t}.{payload}")` compared
-* against the header's `v1` values, with a timestamp tolerance to reject replays. Throws a
-* {@link LunoraPaymentError} on any failure.
-*/
-declare const verifyStripeSignature: (input: VerifyStripeSignatureInput) => Promise<void>;
 interface VerifyStandardWebhookInput {
   /** Injectable clock (ms since epoch) for tests. */
   readonly now?: number;
@@ -775,4 +322,18 @@ interface VerifyStandardWebhookInput {
 * entries, with a replay-window check. Throws a {@link LunoraPaymentError} on any failure.
 */
 declare const verifyStandardWebhook: (input: VerifyStandardWebhookInput) => Promise<void>;
-export { type AdapterRegistry, type ApplyResult, type AttachInput, type AuthorizeReference, type CancelSubscriptionOptions, type CaptureInput, type CheckInput, type CheckResult, type CheckoutInput, type CheckoutResult, type CreatePaymentOptions, type CurrencyCode, type Customer, type CustomerRef, type Entitlements, type EntitlementsConfig, type FeatureBalance, type LunoraDatabaseLike, type LunoraPayment, LunoraPaymentError, MemoryPaymentStore, type Money, type MoneyJSON, PAYMENT_TERMINAL_STATES, type PaymentAction, type PaymentAdapter, type PaymentContextLike, type PaymentDatabase, type PaymentErrorCode, type PaymentEvent, type PaymentObserver, type PaymentRow, type PaymentSession, type PaymentState, type PaymentStore, type PaymentsFromContextOptions, type PlanDefinition, type PolarAdapterOptions, type PolarClientLike, type PortalInput, type ProviderCapabilities, type ProviderId, type ReconcileInput, type ReconcileResult, type RefundAmountKind, type RefundInput, type ReportUsageInput, SUBSCRIPTION_TERMINAL_STATES, type StripeAdapterOptions, type StripeClientLike, type Subscription, type SubscriptionAction, type SubscriptionPatch, type SubscriptionState, type TrackInput, type TrackResult, type UsageEvent, type WebhookAction, type WebhookActionType, type WebhookHeaders, type WebhookInput, addMoney, allocateMoney, applyWebhookAction, canTransitionPayment, canTransitionSubscription, compareMoney, constantTimeEqual, createAdapterRegistry, createDatabasePaymentStore, createPayment, createPolarAdapter, createStripeAdapter, entitlementsForReference, featureNames, formatMoney, fromMoneyJSON, hasActivePrice, hmacSha256Hex, idempotencyKey, isZeroDecimalCurrency, isZeroMoney, lunoraDatabaseToPaymentDatabase, money, nextPaymentState, nextSubscriptionState, parseStripeSignatureHeader, paymentTables, paymentsFromContext, reconcile, resolveEntitlements, subtractMoney, toMoneyJSON, usagePeriodStart, verifyStandardWebhook, verifyStripeSignature, zeroMoney };
+interface VerifyCreemSignatureInput {
+  /** Raw request body, exactly as received. */
+  readonly payload: string;
+  /** Creem webhook signing secret. */
+  readonly secret: string;
+  /** The `creem-signature` header value. */
+  readonly signature: string;
+}
+/**
+* Verify a Creem webhook signature: `hex(HMAC_SHA256(secret, rawBody))` compared against the
+* `creem-signature` header. Creem's scheme signs the raw body with no timestamp, so there is no
+* replay-window check. Throws a {@link LunoraPaymentError} on any failure.
+*/
+declare const verifyCreemSignature: (input: VerifyCreemSignatureInput) => Promise<void>;
+export { type ApplyResult, type AttachInput, type AuthorizeReference, type CancelSubscriptionOptions, type CheckInput, type CheckResult, type CheckoutInput, type CheckoutResult, type CreatePaymentOptions, type CurrencyCode, type Customer, type Entitlements, type EntitlementsConfig, type FeatureBalance, type LunoraDatabaseLike, type LunoraPayment, LunoraPaymentError, MemoryPaymentStore, type Money, type MoneyJSON, PAYMENT_TERMINAL_STATES, type PaymentAction, type PaymentAdapter, type PaymentContextLike, type PaymentDatabase, type PaymentErrorCode, type PaymentEvent, type PaymentObserver, type PaymentRow, type PaymentSession, type PaymentState, type PaymentStore, type PaymentsFromContextOptions, type PlanDefinition, type ProviderId, type ReconcileInput, type ReconcileResult, SUBSCRIPTION_TERMINAL_STATES, type Subscription, type SubscriptionAction, type SubscriptionState, type TrackInput, type TrackResult, type UsageEvent, type WebhookAction, type WebhookActionType, addMoney, allocateMoney, applyWebhookAction, canTransitionPayment, canTransitionSubscription, compareMoney, constantTimeEqual, createDatabasePaymentStore, createPayment, entitlementsForReference, featureNames, formatMoney, fromMoneyJSON, hasActivePrice, hmacSha256Hex, idempotencyKey, isZeroDecimalCurrency, isZeroMoney, lunoraDatabaseToPaymentDatabase, money, nextPaymentState, nextSubscriptionState, paymentTables, paymentsFromContext, reconcile, resolveEntitlements, subtractMoney, toMoneyJSON, usagePeriodStart, verifyCreemSignature, verifyStandardWebhook, zeroMoney };