@lunora/payment 1.0.0-alpha.22 → 1.0.0-alpha.23

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { a as ProviderId, C as Customer, b as PaymentSession, S as Subscription, U as UsageEvent, W as WebhookActionType, A as ApplyResult, P as PaymentAdapter, c as AttachInput, d as CheckoutResult, e as CancelSubscriptionOptions, f as CheckInput, g as CheckResult, h as CheckoutInput, F as FeatureBalance, T as TrackInput, i as TrackResult, j as CurrencyCode, M as Money, k as PaymentState, l as SubscriptionState, m as WebhookAction } from "./packem_shared/adapter.d-iFA55DzU.mjs";
-export { type n as AdapterRegistry, type o as CaptureInput, type p as CustomerRef, type q as PortalInput, type r as ProviderCapabilities, type R as RefundAmountKind, type s as RefundInput, type t as ReportUsageInput, type u as SubscriptionPatch, type v as WebhookHeaders, type w as WebhookInput, x as createAdapterRegistry } from "./packem_shared/adapter.d-iFA55DzU.mjs";
+import { a as ProviderId, C as Customer, b as PaymentSession, S as Subscription, U as UsageEvent, W as WebhookActionType, A as ApplyResult, P as PaymentAdapter, c as AttachInput, d as CheckoutResult, e as CancelSubscriptionOptions, f as CheckInput, g as CheckResult, h as CheckoutInput, F as FeatureBalance, T as TrackInput, i as TrackResult, j as CurrencyCode, M as Money, k as PaymentState, l as SubscriptionState, m as WebhookAction } from "./packem_shared/adapter.d-SULGy2QF.mjs";
+export { type n as AdapterRegistry, type o as CaptureInput, type p as CustomerRef, type q as PortalInput, type r as ProviderCapabilities, type R as RefundAmountKind, type s as RefundInput, type t as ReportUsageInput, type u as SubscriptionPatch, type v as WebhookHeaders, type w as WebhookInput, x as createAdapterRegistry } from "./packem_shared/adapter.d-SULGy2QF.mjs";
 import { LunoraError } from '@lunora/errors';
 import { TableDefinition } from '@lunora/server';
 interface PaymentStore {
@@ -233,13 +233,6 @@ declare class LunoraPaymentError extends LunoraError {
   readonly code: PaymentErrorCode;
   constructor(code: PaymentErrorCode, message: string);
 }
-/**
-* Outbound idempotency keys.
-*
-* Every mutating provider call carries a stable key derived from our own operation + inputs, so
-* a Worker retry can never double-charge. Distinct from inbound webhook dedupe (keyed on the
-* provider event id).
-*/
 /** Build a deterministic idempotency key from an operation name and stable parts. */
 declare const idempotencyKey: (operation: string, ...parts: ReadonlyArray<number | string>) => string;
 /** True when the currency has no minor unit (e.g. JPY). */

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { a as ProviderId, C as Customer, b as PaymentSession, S as Subscription, U as UsageEvent, W as WebhookActionType, A as ApplyResult, P as PaymentAdapter, c as AttachInput, d as CheckoutResult, e as CancelSubscriptionOptions, f as CheckInput, g as CheckResult, h as CheckoutInput, F as FeatureBalance, T as TrackInput, i as TrackResult, j as CurrencyCode, M as Money, k as PaymentState, l as SubscriptionState, m as WebhookAction } from "./packem_shared/adapter.d-iFA55DzU.js";
-export { type n as AdapterRegistry, type o as CaptureInput, type p as CustomerRef, type q as PortalInput, type r as ProviderCapabilities, type R as RefundAmountKind, type s as RefundInput, type t as ReportUsageInput, type u as SubscriptionPatch, type v as WebhookHeaders, type w as WebhookInput, x as createAdapterRegistry } from "./packem_shared/adapter.d-iFA55DzU.js";
+import { a as ProviderId, C as Customer, b as PaymentSession, S as Subscription, U as UsageEvent, W as WebhookActionType, A as ApplyResult, P as PaymentAdapter, c as AttachInput, d as CheckoutResult, e as CancelSubscriptionOptions, f as CheckInput, g as CheckResult, h as CheckoutInput, F as FeatureBalance, T as TrackInput, i as TrackResult, j as CurrencyCode, M as Money, k as PaymentState, l as SubscriptionState, m as WebhookAction } from "./packem_shared/adapter.d-SULGy2QF.js";
+export { type n as AdapterRegistry, type o as CaptureInput, type p as CustomerRef, type q as PortalInput, type r as ProviderCapabilities, type R as RefundAmountKind, type s as RefundInput, type t as ReportUsageInput, type u as SubscriptionPatch, type v as WebhookHeaders, type w as WebhookInput, x as createAdapterRegistry } from "./packem_shared/adapter.d-SULGy2QF.js";
 import { LunoraError } from '@lunora/errors';
 import { TableDefinition } from '@lunora/server';
 interface PaymentStore {
@@ -233,13 +233,6 @@ declare class LunoraPaymentError extends LunoraError {
   readonly code: PaymentErrorCode;
   constructor(code: PaymentErrorCode, message: string);
 }
-/**
-* Outbound idempotency keys.
-*
-* Every mutating provider call carries a stable key derived from our own operation + inputs, so
-* a Worker retry can never double-charge. Distinct from inbound webhook dedupe (keyed on the
-* provider event id).
-*/
 /** Build a deterministic idempotency key from an operation name and stable parts. */
 declare const idempotencyKey: (operation: string, ...parts: ReadonlyArray<number | string>) => string;
 /** True when the currency has no minor unit (e.g. JPY). */

package/dist/index.mjs

@@ -1,13 +1,13 @@
 export { createAdapterRegistry } from './packem_shared/createAdapterRegistry-Ds7bx_TK.mjs';
-export { lunoraDatabaseToPaymentDatabase, paymentsFromContext } from './packem_shared/lunoraDatabaseToPaymentDatabase-CL2vdAXq.mjs';
-export { createPayment } from './packem_shared/createPayment-DzX-ji34.mjs';
+export { lunoraDatabaseToPaymentDatabase, paymentsFromContext } from './packem_shared/lunoraDatabaseToPaymentDatabase-DTsgPvfO.mjs';
+export { createPayment } from './packem_shared/createPayment-CKQAznOL.mjs';
 export { createDatabasePaymentStore } from './packem_shared/createDatabasePaymentStore-C0NUCj1H.mjs';
 export { entitlementsForReference, featureNames, hasActivePrice, resolveEntitlements, usagePeriodStart } from './packem_shared/entitlementsForReference-CzZGXPoZ.mjs';
 export { LunoraPaymentError } from './packem_shared/LunoraPaymentError-BeQlhkZj.mjs';
-export { default as idempotencyKey } from './packem_shared/idempotencyKey-BFzDCA7g.mjs';
+export { idempotencyKey } from './packem_shared/idempotencyKey-BzaHGdHD.mjs';
 export { addMoney, allocateMoney, compareMoney, formatMoney, fromMoneyJSON, isZeroDecimalCurrency, isZeroMoney, money, subtractMoney, toMoneyJSON, zeroMoney } from './packem_shared/addMoney-jSh_7TfF.mjs';
-export { reconcile } from './packem_shared/reconcile-Dtn_ErbJ.mjs';
-export { default as paymentTables } from './packem_shared/paymentTables-DccHwWr_.mjs';
+export { reconcile } from './packem_shared/reconcile-qE3ERi3D.mjs';
+export { default as paymentTables } from './packem_shared/paymentTables-D4TbhaIk.mjs';
 export { PAYMENT_TERMINAL_STATES, SUBSCRIPTION_TERMINAL_STATES, canTransitionPayment, canTransitionSubscription, nextPaymentState, nextSubscriptionState } from './packem_shared/PAYMENT_TERMINAL_STATES-DrxV0clv.mjs';
 export { MemoryPaymentStore } from './packem_shared/MemoryPaymentStore-DvgdWa3C.mjs';
 export { default as applyWebhookAction } from './packem_shared/applyWebhookAction-CLAx4svt.mjs';

package/dist/packem_shared/{adapter.d-iFA55DzU.d.mts → adapter.d-SULGy2QF.d.mts}

@@ -73,7 +73,11 @@ interface CustomerRef {
 }
 interface CheckoutInput {
   readonly cancelUrl: string;
-  /** Existing provider customer id, if known. */
+  /**
+  * Ignored at runtime (kept for backward-compat). The provider customer is always derived from the store for the
+  * authorized `referenceId` (never caller-supplied) to prevent cross-tenant checkout attachment (IDOR).
+  * Retained on the type only for backward compatibility; setting it has no effect.
+  */
   readonly customerId?: string;
   /**
   * Customer email, used when the reference has no provider customer yet. Some Merchant-of-Record
@@ -123,7 +127,12 @@ interface TrackInput {
   readonly featureId: string;
   /** Caller-supplied dedupe key; a fresh one is generated when omitted (so each call records). */
   readonly idempotencyKey?: string;
-  /** `"add"` (default) increments usage by `quantity`; `"set"` reconciles the period total to `quantity`. */
+  /**
+  * `"add"` (default) increments usage by `quantity`; `"set"` reconciles the period total to `quantity`.
+  * `"set"` is a non-atomic read-modify-write (it reads the current total, then appends the delta), so
+  * concurrent `"set"` calls for the same reference can over- or under-count — call it only from a
+  * serialized context (a single Durable Object or per-reference lock). `"add"` is always safe.
+  */
   readonly mode?: "add" | "set";
   /** Usage amount to add, or the absolute period total when `mode` is `"set"` (defaults to `1`). */
   readonly quantity?: number;

package/dist/packem_shared/{adapter.d-iFA55DzU.d.ts → adapter.d-SULGy2QF.d.ts}

@@ -73,7 +73,11 @@ interface CustomerRef {
 }
 interface CheckoutInput {
   readonly cancelUrl: string;
-  /** Existing provider customer id, if known. */
+  /**
+  * Ignored at runtime (kept for backward-compat). The provider customer is always derived from the store for the
+  * authorized `referenceId` (never caller-supplied) to prevent cross-tenant checkout attachment (IDOR).
+  * Retained on the type only for backward compatibility; setting it has no effect.
+  */
   readonly customerId?: string;
   /**
   * Customer email, used when the reference has no provider customer yet. Some Merchant-of-Record
@@ -123,7 +127,12 @@ interface TrackInput {
   readonly featureId: string;
   /** Caller-supplied dedupe key; a fresh one is generated when omitted (so each call records). */
   readonly idempotencyKey?: string;
-  /** `"add"` (default) increments usage by `quantity`; `"set"` reconciles the period total to `quantity`. */
+  /**
+  * `"add"` (default) increments usage by `quantity`; `"set"` reconciles the period total to `quantity`.
+  * `"set"` is a non-atomic read-modify-write (it reads the current total, then appends the delta), so
+  * concurrent `"set"` calls for the same reference can over- or under-count — call it only from a
+  * serialized context (a single Durable Object or per-reference lock). `"add"` is always safe.
+  */
   readonly mode?: "add" | "set";
   /** Usage amount to add, or the absolute period total when `mode` is `"set"` (defaults to `1`). */
   readonly quantity?: number;

package/dist/packem_shared/{createPayment-DzX-ji34.mjs → createPayment-CKQAznOL.mjs}

@@ -1,7 +1,7 @@
 import { toErrorBody } from '@lunora/errors';
 import { usagePeriodStart, resolveEntitlements, featureNames, hasActivePrice } from './entitlementsForReference-CzZGXPoZ.mjs';
 import { LunoraPaymentError } from './LunoraPaymentError-BeQlhkZj.mjs';
-import idempotencyKey from './idempotencyKey-BFzDCA7g.mjs';
+import { idempotencyKey, derivedIdempotencyKey } from './idempotencyKey-BzaHGdHD.mjs';
 import { n as notifyObserver } from './observability-CvhJ205g.mjs';
 import applyWebhookAction from './applyWebhookAction-CLAx4svt.mjs';
 
@@ -27,18 +27,16 @@ const createPayment = (options) => {
   const startCheckout = async (input) => {
     await ensureAuthorized(input.referenceId);
     const metadata = stripReferenceId(input.metadata);
-    let { customerId } = input;
-    if (!customerId) {
-      const existing = await store.getCustomerByReference(adapter.identifier, input.referenceId);
-      if (existing) {
-        customerId = existing.id;
-      } else {
-        const customer = await adapter.getOrCreateCustomer({ email: input.email, referenceId: input.referenceId });
-        customerId = customer.id;
-        await store.upsertCustomer(customer);
-      }
+    let customerId;
+    const existing = await store.getCustomerByReference(adapter.identifier, input.referenceId);
+    if (existing) {
+      customerId = existing.id;
+    } else {
+      const customer = await adapter.getOrCreateCustomer({ email: input.email, referenceId: input.referenceId });
+      customerId = customer.id;
+      await store.upsertCustomer(customer);
     }
-    const key = input.idempotencyKey ?? idempotencyKey(
+    const key = input.idempotencyKey ?? await derivedIdempotencyKey(
       "checkout",
       adapter.identifier,
       input.referenceId,

package/dist/packem_shared/idempotencyKey-BzaHGdHD.mjs

@@ -0,0 +1,9 @@
+const encoder = new TextEncoder();
+const sha256Hex = async (value) => [...new Uint8Array(await crypto.subtle.digest("SHA-256", encoder.encode(value)))].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+const idempotencyKey = (operation, ...parts) => [operation, ...parts.map(String)].join(":");
+const derivedIdempotencyKey = async (operation, provider, ...parts) => {
+  const digest = await sha256Hex(JSON.stringify([provider, ...parts.map(String)]));
+  return `${operation}:${provider}:${digest}`;
+};
+
+export { derivedIdempotencyKey, idempotencyKey };

package/dist/packem_shared/{json-DhcPm8EO.mjs → json-D0Cb5aMv.mjs}

@@ -2,10 +2,28 @@ const asRecord = (value) => typeof value === "object" && value !== null ? value
 const readString = (object, key) => typeof object[key] === "string" ? object[key] : void 0;
 const readNumber = (object, key) => typeof object[key] === "number" ? object[key] : void 0;
 const readBoolean = (object, key) => typeof object[key] === "boolean" ? object[key] : void 0;
+const readAny = (object, ...keys) => {
+  for (const key of keys) {
+    const value = readString(object, key);
+    if (value !== void 0) {
+      return value;
+    }
+  }
+  return void 0;
+};
+const readAnyNumber = (object, ...keys) => {
+  for (const key of keys) {
+    const value = readNumber(object, key);
+    if (value !== void 0) {
+      return value;
+    }
+  }
+  return void 0;
+};
 const referenceFromMetadata = (object) => readString(asRecord(object.metadata), "referenceId");
 const parseTimestamp = (value) => {
   const parsed = typeof value === "string" ? Date.parse(value) : Number.NaN;
   return Number.isNaN(parsed) ? void 0 : parsed;
 };
 
-export { asRecord as a, readNumber as b, readBoolean as c, referenceFromMetadata as d, parseTimestamp as p, readString as r };
+export { asRecord as a, readNumber as b, readAny as c, readAnyNumber as d, readBoolean as e, referenceFromMetadata as f, parseTimestamp as p, readString as r };

package/dist/packem_shared/{lunoraDatabaseToPaymentDatabase-CL2vdAXq.mjs → lunoraDatabaseToPaymentDatabase-DTsgPvfO.mjs}

@@ -1,4 +1,4 @@
-import { createPayment } from './createPayment-DzX-ji34.mjs';
+import { createPayment } from './createPayment-CKQAznOL.mjs';
 import { createDatabasePaymentStore } from './createDatabasePaymentStore-C0NUCj1H.mjs';
 
 const lunoraDatabaseToPaymentDatabase = (database) => {

package/dist/packem_shared/paymentTables-D4TbhaIk.mjs

@@ -0,0 +1,59 @@
+import { defineTable } from '@lunora/server';
+import { v } from '@lunora/values';
+
+const customers = defineTable({
+  createdAt: v.number(),
+  email: v.optional(v.string()),
+  provider: v.string(),
+  providerCustomerId: v.string(),
+  referenceId: v.string()
+}).index("by_provider_customer", ["provider", "providerCustomerId"], { unique: true }).index("by_reference", ["referenceId"]);
+const subscriptions = defineTable({
+  cancelAtPeriodEnd: v.boolean(),
+  createdAt: v.number(),
+  currentPeriodEnd: v.optional(v.number()),
+  currentPeriodStart: v.optional(v.number()),
+  priceId: v.string(),
+  provider: v.string(),
+  providerSubscriptionId: v.string(),
+  quantity: v.number(),
+  referenceId: v.string(),
+  state: v.string(),
+  updatedAt: v.number()
+}).index("by_provider_subscription", ["provider", "providerSubscriptionId"], { unique: true }).index("by_reference", ["referenceId"]);
+const paymentSessions = defineTable({
+  amountMinor: v.bigint(),
+  capturedMinor: v.bigint(),
+  createdAt: v.number(),
+  currency: v.string(),
+  provider: v.string(),
+  providerSessionId: v.string(),
+  referenceId: v.string(),
+  refundedMinor: v.bigint(),
+  state: v.string(),
+  updatedAt: v.number()
+}).index("by_provider_session", ["provider", "providerSessionId"], { unique: true }).index("by_reference", ["referenceId"]);
+const events = defineTable({
+  processedAt: v.number(),
+  provider: v.string(),
+  providerEventId: v.string(),
+  type: v.string()
+}).index("by_provider_event", ["provider", "providerEventId"], { unique: true });
+const usageEvents = defineTable({
+  createdAt: v.number(),
+  featureId: v.string(),
+  idempotencyKey: v.string(),
+  provider: v.string(),
+  quantity: v.number(),
+  referenceId: v.string(),
+  reportedToProvider: v.boolean()
+}).index("by_idempotency", ["provider", "idempotencyKey"], { unique: true }).index("by_reference_feature", ["referenceId", "featureId"]);
+const paymentTables = {
+  customers,
+  events,
+  paymentSessions,
+  subscriptions,
+  usageEvents
+};
+
+export { paymentTables as default };

package/dist/packem_shared/{reconcile-Dtn_ErbJ.mjs → reconcile-qE3ERi3D.mjs}

@@ -4,6 +4,17 @@ import { n as notifyObserver } from './observability-CvhJ205g.mjs';
 const sameCurrencyAmount = (a, b) => a.currency === b.currency && compareMoney(a, b) === 0;
 const subscriptionDrifted = (existing, current) => existing?.state !== current.state || existing.cancelAtPeriodEnd !== current.cancelAtPeriodEnd || existing.currentPeriodEnd !== current.currentPeriodEnd || existing.priceId !== current.priceId || existing.quantity !== current.quantity;
 const paymentDrifted = (existing, current) => existing?.state !== current.state || !sameCurrencyAmount(existing.capturedAmount, current.capturedAmount) || !sameCurrencyAmount(existing.refundedAmount, current.refundedAmount);
+const REFUND_STATES = /* @__PURE__ */ new Set(["partially_refunded", "refunded"]);
+const mergePaymentTruth = (existing, current) => {
+  if (!existing) {
+    return current;
+  }
+  const sameRefundCurrency = existing.refundedAmount.currency === current.refundedAmount.currency;
+  const refundedAmount = sameRefundCurrency && compareMoney(existing.refundedAmount, current.refundedAmount) > 0 ? existing.refundedAmount : current.refundedAmount;
+  const state = current.state === "captured" && REFUND_STATES.has(existing.state) ? existing.state : current.state;
+  const referenceId = current.referenceId === "" ? existing.referenceId : current.referenceId;
+  return { ...current, referenceId, refundedAmount, state };
+};
 const reconcileSubscription = async (adapter, store, id, observer) => {
   const current = await adapter.getSubscriptionStatus(id);
   const existing = await store.getSubscription(adapter.identifier, id);
@@ -15,8 +26,9 @@ const reconcileSubscription = async (adapter, store, id, observer) => {
   return true;
 };
 const reconcilePayment = async (adapter, store, id, observer) => {
-  const current = await adapter.getPaymentStatus(id);
+  const providerTruth = await adapter.getPaymentStatus(id);
   const existing = await store.getPaymentSession(adapter.identifier, id);
+  const current = mergePaymentTruth(existing, providerTruth);
   if (!paymentDrifted(existing, current)) {
     return false;
   }

package/dist/providers/autumn-features.mjs

@@ -1,4 +1,4 @@
-import { a as asRecord, r as readString, b as readNumber } from '../packem_shared/json-DhcPm8EO.mjs';
+import { a as asRecord, r as readString, b as readNumber } from '../packem_shared/json-D0Cb5aMv.mjs';
 
 const toFeatureId = (featureId) => typeof featureId === "string" ? featureId : [...featureId];
 const entityFrom = (record) => {

package/dist/providers/autumn.d.mts

@@ -1,4 +1,4 @@
-import { P as PaymentAdapter } from "../packem_shared/adapter.d-iFA55DzU.mjs";
+import { P as PaymentAdapter } from "../packem_shared/adapter.d-SULGy2QF.mjs";
 /**
 * The `autumn-js` SDK surface the adapter uses, as a structural type — a real `Autumn` instance
 * satisfies it without a cast. Resources/methods are `unknown` (the adapter re-types the client as

package/dist/providers/autumn.d.ts

@@ -1,4 +1,4 @@
-import { P as PaymentAdapter } from "../packem_shared/adapter.d-iFA55DzU.js";
+import { P as PaymentAdapter } from "../packem_shared/adapter.d-SULGy2QF.js";
 /**
 * The `autumn-js` SDK surface the adapter uses, as a structural type — a real `Autumn` instance
 * satisfies it without a cast. Resources/methods are `unknown` (the adapter re-types the client as

package/dist/providers/autumn.mjs

@@ -1,7 +1,8 @@
 import { LunoraPaymentError } from '../packem_shared/LunoraPaymentError-BeQlhkZj.mjs';
-import { a as asRecord, c as readBoolean, r as readString, b as readNumber } from '../packem_shared/json-DhcPm8EO.mjs';
+import { a as asRecord, c as readAny, d as readAnyNumber, e as readBoolean, r as readString } from '../packem_shared/json-D0Cb5aMv.mjs';
 import { money } from '../packem_shared/addMoney-jSh_7TfF.mjs';
 import { verifyStandardWebhook } from '../packem_shared/constantTimeEqual-BQjoW85H.mjs';
+import { m as makeNotSupported } from '../packem_shared/not-supported-C0onRyia.mjs';
 import { s as stateToEventType } from '../packem_shared/subscription-event-CwEsWRCK.mjs';
 
 const SUBSCRIPTION_STATE_BY_AUTUMN_STATUS = {
@@ -21,9 +22,7 @@ const SUBSCRIPTION_STATE_BY_AUTUMN_ACTION = {
   scheduled: "paused"
 };
 const SUBSCRIPTION_ID_SEPARATOR = "::";
-const notSupported = (operation) => {
-  throw new LunoraPaymentError("PROVIDER_ERROR", `autumn manages billing through the underlying processor and does not support ${operation}`);
-};
+const notSupported = makeNotSupported("autumn");
 const autumnSubscriptionId = (customerId, productId) => `${customerId}${SUBSCRIPTION_ID_SEPARATOR}${productId}`;
 const parseAutumnSubscriptionId = (subscriptionId) => {
   const index = subscriptionId.lastIndexOf(SUBSCRIPTION_ID_SEPARATOR);
@@ -32,24 +31,6 @@ const parseAutumnSubscriptionId = (subscriptionId) => {
   }
   return { customerId: subscriptionId.slice(0, index), productId: subscriptionId.slice(index + SUBSCRIPTION_ID_SEPARATOR.length) };
 };
-const readAny = (object, ...keys) => {
-  for (const key of keys) {
-    const value = readString(object, key);
-    if (value !== void 0) {
-      return value;
-    }
-  }
-  return void 0;
-};
-const readAnyNumber = (object, ...keys) => {
-  for (const key of keys) {
-    const value = readNumber(object, key);
-    if (value !== void 0) {
-      return value;
-    }
-  }
-  return void 0;
-};
 const isCanceling = (product) => readAnyNumber(product, "canceled_at", "canceledAt") !== void 0 || readAny(product, "status") === "scheduled";
 const productToSubscription = (customerId, product) => {
   const now = Date.now();

package/dist/providers/creem.d.mts

@@ -1,4 +1,4 @@
-import { P as PaymentAdapter } from "../packem_shared/adapter.d-iFA55DzU.mjs";
+import { P as PaymentAdapter } from "../packem_shared/adapter.d-SULGy2QF.mjs";
 /**
 * The `creem` SDK surface the adapter uses, as a structural type — a real `Creem` instance satisfies
 * it without a cast. Resources are `unknown` (the adapter re-types the client as the real `Creem`

package/dist/providers/creem.d.ts

@@ -1,4 +1,4 @@
-import { P as PaymentAdapter } from "../packem_shared/adapter.d-iFA55DzU.js";
+import { P as PaymentAdapter } from "../packem_shared/adapter.d-SULGy2QF.js";
 /**
 * The `creem` SDK surface the adapter uses, as a structural type — a real `Creem` instance satisfies
 * it without a cast. Resources are `unknown` (the adapter re-types the client as the real `Creem`

package/dist/providers/creem.mjs

@@ -1,4 +1,4 @@
-import { a as asRecord, r as readString, d as referenceFromMetadata, b as readNumber, p as parseTimestamp, c as readBoolean } from '../packem_shared/json-DhcPm8EO.mjs';
+import { a as asRecord, c as readAny, r as readString, f as referenceFromMetadata, b as readNumber, p as parseTimestamp, e as readBoolean, d as readAnyNumber } from '../packem_shared/json-D0Cb5aMv.mjs';
 import { money, zeroMoney } from '../packem_shared/addMoney-jSh_7TfF.mjs';
 import { verifyCreemSignature } from '../packem_shared/constantTimeEqual-BQjoW85H.mjs';
 import { m as makeNotSupported } from '../packem_shared/not-supported-C0onRyia.mjs';
@@ -32,8 +32,8 @@ const SUBSCRIPTION_STATE_BY_CREEM_STATUS = {
 };
 const notSupported = makeNotSupported("creem (merchant-of-record)");
 const idOf = (value) => typeof value === "string" ? value : readString(asRecord(value), "id");
-const readCheckoutUrl = (checkout) => readString(checkout, "checkout_url") ?? readString(checkout, "checkoutUrl") ?? "";
-const isCanceling = (subscription) => readString(subscription, "canceled_at") !== void 0 || readString(subscription, "canceledAt") !== void 0 || readString(subscription, "status") === "scheduled_cancel";
+const readCheckoutUrl = (checkout) => readAny(checkout, "checkout_url", "checkoutUrl") ?? "";
+const isCanceling = (subscription) => readAny(subscription, "canceled_at", "canceledAt") !== void 0 || readString(subscription, "status") === "scheduled_cancel";
 const subscriptionFromCreem = (input) => {
   const subscription = asRecord(input);
   const now = Date.now();
@@ -41,8 +41,8 @@ const subscriptionFromCreem = (input) => {
   return {
     cancelAtPeriodEnd: isCanceling(subscription),
     createdAt: now,
-    currentPeriodEnd: parseTimestamp(readString(subscription, "current_period_end_date") ?? readString(subscription, "currentPeriodEndDate")),
-    currentPeriodStart: parseTimestamp(readString(subscription, "current_period_start_date") ?? readString(subscription, "currentPeriodStartDate")),
+    currentPeriodEnd: parseTimestamp(readAny(subscription, "current_period_end_date", "currentPeriodEndDate")),
+    currentPeriodStart: parseTimestamp(readAny(subscription, "current_period_start_date", "currentPeriodStartDate")),
     id: readString(subscription, "id") ?? "",
     priceId: idOf(subscription.product) ?? "",
     provider: "creem",
@@ -93,8 +93,8 @@ const mapEvent = (eventId, eventType, object) => {
       };
     }
     case "refund.created": {
-      const amount = readNumber(object, "refund_amount") ?? readNumber(object, "refundAmount") ?? readNumber(object, "amount") ?? readNumber(order, "amount");
-      const refundCurrency = readString(object, "refund_currency") ?? readString(object, "refundCurrency") ?? currency;
+      const amount = readAnyNumber(object, "refund_amount", "refundAmount", "amount") ?? readNumber(order, "amount");
+      const refundCurrency = readAny(object, "refund_currency", "refundCurrency") ?? currency;
       return {
         ...base,
         amount: amount === void 0 ? void 0 : money(BigInt(Math.round(amount)), refundCurrency),
@@ -117,8 +117,8 @@ const mapEvent = (eventId, eventType, object) => {
       return {
         ...base,
         cancelAtPeriodEnd: readBoolean(object, "cancel_at_period_end") ?? isCanceling(object),
-        currentPeriodEnd: parseTimestamp(readString(object, "current_period_end_date") ?? readString(object, "currentPeriodEndDate")),
-        currentPeriodStart: parseTimestamp(readString(object, "current_period_start_date") ?? readString(object, "currentPeriodStartDate")),
+        currentPeriodEnd: parseTimestamp(readAny(object, "current_period_end_date", "currentPeriodEndDate")),
+        currentPeriodStart: parseTimestamp(readAny(object, "current_period_start_date", "currentPeriodStartDate")),
         customerId: idOf(object.customer),
         priceId: idOf(object.product),
         referenceId: referenceFromMetadata(object) ?? idOf(object.customer),
@@ -159,7 +159,7 @@ const createCreemAdapter = (options) => {
     },
     createPortalSession: async (input) => {
       const link = await client.customers.generateBillingLinks({ customerId: input.customerId });
-      return { url: readString(link, "customer_portal_link") ?? readString(link, "customerPortalLink") ?? "" };
+      return { url: readAny(link, "customer_portal_link", "customerPortalLink") ?? "" };
     },
     getOrCreateCustomer: async (ref) => {
       const toCustomer = (record) => {
@@ -186,7 +186,7 @@ const createCreemAdapter = (options) => {
     parseWebhook: async ({ headers, payload }) => {
       await verifyCreemSignature({ payload, secret: webhookSecret, signature: headers.get("creem-signature") ?? "" });
       const event = asRecord(JSON.parse(payload));
-      return mapEvent(readString(event, "id") ?? "", readString(event, "eventType") ?? readString(event, "type") ?? "", asRecord(event.object));
+      return mapEvent(readString(event, "id") ?? "", readAny(event, "eventType", "type") ?? "", asRecord(event.object));
     },
     // Creem refunds are issued from the dashboard; there is no SDK endpoint to initiate one.
     refundPayment: () => notSupported("programmatic refunds"),

package/dist/providers/dodopayments.d.mts

@@ -1,4 +1,4 @@
-import { P as PaymentAdapter } from "../packem_shared/adapter.d-iFA55DzU.mjs";
+import { P as PaymentAdapter } from "../packem_shared/adapter.d-SULGy2QF.mjs";
 /**
 * The `dodopayments` SDK surface the adapter uses, as a structural type — a real `DodoPayments`
 * instance satisfies it without a cast. Resources are `unknown` (the adapter re-types the client as

package/dist/providers/dodopayments.d.ts

@@ -1,4 +1,4 @@
-import { P as PaymentAdapter } from "../packem_shared/adapter.d-iFA55DzU.js";
+import { P as PaymentAdapter } from "../packem_shared/adapter.d-SULGy2QF.js";
 /**
 * The `dodopayments` SDK surface the adapter uses, as a structural type — a real `DodoPayments`
 * instance satisfies it without a cast. Resources are `unknown` (the adapter re-types the client as

package/dist/providers/dodopayments.mjs

@@ -1,6 +1,6 @@
 import { LunoraPaymentError } from '../packem_shared/LunoraPaymentError-BeQlhkZj.mjs';
-import idempotencyKey from '../packem_shared/idempotencyKey-BFzDCA7g.mjs';
-import { a as asRecord, b as readNumber, r as readString, d as referenceFromMetadata, p as parseTimestamp, c as readBoolean } from '../packem_shared/json-DhcPm8EO.mjs';
+import { idempotencyKey } from '../packem_shared/idempotencyKey-BzaHGdHD.mjs';
+import { a as asRecord, b as readNumber, r as readString, f as referenceFromMetadata, p as parseTimestamp, e as readBoolean } from '../packem_shared/json-D0Cb5aMv.mjs';
 import { money, zeroMoney } from '../packem_shared/addMoney-jSh_7TfF.mjs';
 import { verifyStandardWebhook } from '../packem_shared/constantTimeEqual-BQjoW85H.mjs';
 import { m as makeNotSupported } from '../packem_shared/not-supported-C0onRyia.mjs';

package/dist/providers/polar.d.mts

@@ -1,4 +1,4 @@
-import { P as PaymentAdapter } from "../packem_shared/adapter.d-iFA55DzU.mjs";
+import { P as PaymentAdapter } from "../packem_shared/adapter.d-SULGy2QF.mjs";
 /**
 * The `@polar-sh/sdk` surface the adapter uses, as a structural type — a real `Polar` instance
 * satisfies it without a cast. Resources are `unknown` (the adapter re-types the client as the real

package/dist/providers/polar.d.ts

@@ -1,4 +1,4 @@
-import { P as PaymentAdapter } from "../packem_shared/adapter.d-iFA55DzU.js";
+import { P as PaymentAdapter } from "../packem_shared/adapter.d-SULGy2QF.js";
 /**
 * The `@polar-sh/sdk` surface the adapter uses, as a structural type — a real `Polar` instance
 * satisfies it without a cast. Resources are `unknown` (the adapter re-types the client as the real

package/dist/providers/polar.mjs

@@ -1,4 +1,4 @@
-import { a as asRecord, r as readString, d as referenceFromMetadata, c as readBoolean, p as parseTimestamp, b as readNumber } from '../packem_shared/json-DhcPm8EO.mjs';
+import { a as asRecord, r as readString, f as referenceFromMetadata, e as readBoolean, p as parseTimestamp, b as readNumber } from '../packem_shared/json-D0Cb5aMv.mjs';
 import { money, zeroMoney } from '../packem_shared/addMoney-jSh_7TfF.mjs';
 import { verifyStandardWebhook } from '../packem_shared/constantTimeEqual-BQjoW85H.mjs';
 import { m as makeNotSupported } from '../packem_shared/not-supported-C0onRyia.mjs';
@@ -61,7 +61,9 @@ const orderToSession = (input) => {
     createdAt: now,
     id: readString(order, "id") ?? "",
     provider: "polar",
-    referenceId: "",
+    // Polar copies checkout metadata onto the order, so recover the framework-pinned `referenceId`
+    // rather than blanking it — a reconcile sweep would otherwise orphan the row from `by_reference`.
+    referenceId: referenceFromMetadata(order) ?? "",
     refundedAmount: state === "refunded" ? amount : zeroMoney(currency),
     state,
     updatedAt: now
@@ -132,10 +134,18 @@ const createPolarAdapter = (options) => {
     capturePayment: (_input) => notSupported("manual capture"),
     createCheckout: async (input) => {
       const checkout = await client.checkouts.create({
-        customerEmail: void 0,
+        // Bind the checkout to the customer the facade already reused/minted for this reference,
+        // else Polar mints a SECOND orphan customer at completion (leaving the stored customer
+        // with no subscription — its portal empty, its metered usage misrouted). `externalCustomerId`
+        // carries our reference for the direct-adapter path; `customerEmail` pre-fills when neither is known.
+        customerEmail: input.customerId ? void 0 : input.email,
+        customerId: input.customerId,
+        externalCustomerId: input.referenceId,
         // Pin the framework-controlled `referenceId` LAST so caller metadata can never override it.
         metadata: { ...input.metadata, referenceId: input.referenceId },
         products: [input.priceId],
+        // Polar shows a back button to this URL; map the caller's cancel URL onto it.
+        returnUrl: input.cancelUrl,
         successUrl: input.successUrl
       });
       return { id: checkout.id, provider: "polar", url: checkout.url };

package/dist/providers/stripe.d.mts

@@ -1,4 +1,4 @@
-import { P as PaymentAdapter } from "../packem_shared/adapter.d-iFA55DzU.mjs";
+import { P as PaymentAdapter } from "../packem_shared/adapter.d-SULGy2QF.mjs";
 /**
 * The Stripe SDK surface the adapter uses, as a structural type — a real `Stripe` instance satisfies
 * it without a cast. Resources are `unknown` here (the adapter re-types the client as the real

package/dist/providers/stripe.d.ts

@@ -1,4 +1,4 @@
-import { P as PaymentAdapter } from "../packem_shared/adapter.d-iFA55DzU.js";
+import { P as PaymentAdapter } from "../packem_shared/adapter.d-SULGy2QF.js";
 /**
 * The Stripe SDK surface the adapter uses, as a structural type — a real `Stripe` instance satisfies
 * it without a cast. Resources are `unknown` here (the adapter re-types the client as the real

package/dist/providers/stripe.mjs

@@ -1,6 +1,6 @@
 import { LunoraPaymentError } from '../packem_shared/LunoraPaymentError-BeQlhkZj.mjs';
-import idempotencyKey from '../packem_shared/idempotencyKey-BFzDCA7g.mjs';
-import { r as readString, c as readBoolean, b as readNumber, a as asRecord } from '../packem_shared/json-DhcPm8EO.mjs';
+import { idempotencyKey } from '../packem_shared/idempotencyKey-BzaHGdHD.mjs';
+import { r as readString, e as readBoolean, b as readNumber, a as asRecord } from '../packem_shared/json-D0Cb5aMv.mjs';
 import { compareMoney, money, zeroMoney } from '../packem_shared/addMoney-jSh_7TfF.mjs';
 import { s as stateToEventType } from '../packem_shared/subscription-event-CwEsWRCK.mjs';
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/payment",
-  "version": "1.0.0-alpha.22",
+  "version": "1.0.0-alpha.23",
   "description": "Provider-agnostic payments for Lunora: Stripe-first adapter, webhook sync, and subscription/payment state machine",
   "keywords": [
     "billing",
@@ -71,9 +71,9 @@
     "access": "public"
   },
   "dependencies": {
-    "@lunora/errors": "1.0.0-alpha.3",
-    "@lunora/server": "1.0.0-alpha.22",
-    "@lunora/values": "1.0.0-alpha.6",
+    "@lunora/errors": "1.0.0-alpha.4",
+    "@lunora/server": "1.0.0-alpha.23",
+    "@lunora/values": "1.0.0-alpha.7",
     "dinero.js": "2.0.2"
   },
   "peerDependencies": {

package/dist/packem_shared/idempotencyKey-BFzDCA7g.mjs

@@ -1,3 +0,0 @@
-const idempotencyKey = (operation, ...parts) => [operation, ...parts.map(String)].join(":");
-
-export { idempotencyKey as default };

package/dist/packem_shared/paymentTables-DccHwWr_.mjs

@@ -1,127 +0,0 @@
-import { defineTable } from '@lunora/server';
-import { v } from '@lunora/values';
-
-const products = defineTable({
-  description: v.optional(v.string()),
-  name: v.string(),
-  provider: v.string(),
-  providerProductId: v.string()
-}).index("by_provider_product", ["provider", "providerProductId"], { unique: true });
-const prices = defineTable({
-  active: v.boolean(),
-  amountMinor: v.bigint(),
-  currency: v.string(),
-  interval: v.optional(v.string()),
-  provider: v.string(),
-  providerPriceId: v.string(),
-  providerProductId: v.string()
-}).index("by_provider_price", ["provider", "providerPriceId"], { unique: true });
-const customers = defineTable({
-  createdAt: v.number(),
-  email: v.optional(v.string()),
-  provider: v.string(),
-  providerCustomerId: v.string(),
-  referenceId: v.string()
-}).index("by_provider_customer", ["provider", "providerCustomerId"], { unique: true }).index("by_reference", ["referenceId"]);
-const subscriptions = defineTable({
-  cancelAtPeriodEnd: v.boolean(),
-  createdAt: v.number(),
-  currentPeriodEnd: v.optional(v.number()),
-  currentPeriodStart: v.optional(v.number()),
-  priceId: v.string(),
-  provider: v.string(),
-  providerSubscriptionId: v.string(),
-  quantity: v.number(),
-  referenceId: v.string(),
-  state: v.string(),
-  updatedAt: v.number()
-}).index("by_provider_subscription", ["provider", "providerSubscriptionId"], { unique: true }).index("by_reference", ["referenceId"]);
-const checkouts = defineTable({
-  createdAt: v.number(),
-  mode: v.string(),
-  priceId: v.string(),
-  provider: v.string(),
-  providerCheckoutId: v.string(),
-  referenceId: v.string(),
-  url: v.string()
-}).index("by_provider_checkout", ["provider", "providerCheckoutId"], { unique: true });
-const paymentSessions = defineTable({
-  amountMinor: v.bigint(),
-  capturedMinor: v.bigint(),
-  createdAt: v.number(),
-  currency: v.string(),
-  provider: v.string(),
-  providerSessionId: v.string(),
-  referenceId: v.string(),
-  refundedMinor: v.bigint(),
-  state: v.string(),
-  updatedAt: v.number()
-}).index("by_provider_session", ["provider", "providerSessionId"], { unique: true }).index("by_reference", ["referenceId"]);
-const payments = defineTable({
-  amountMinor: v.bigint(),
-  createdAt: v.number(),
-  currency: v.string(),
-  provider: v.string(),
-  providerPaymentId: v.string(),
-  referenceId: v.string(),
-  sessionId: v.string(),
-  status: v.string()
-}).index("by_provider_payment", ["provider", "providerPaymentId"], { unique: true });
-const captures = defineTable({
-  amountMinor: v.bigint(),
-  createdAt: v.number(),
-  currency: v.string(),
-  provider: v.string(),
-  providerCaptureId: v.string(),
-  sessionId: v.string()
-}).index("by_session", ["sessionId"]);
-const refunds = defineTable({
-  amountMinor: v.bigint(),
-  createdAt: v.number(),
-  currency: v.string(),
-  provider: v.string(),
-  providerRefundId: v.string(),
-  reason: v.optional(v.string()),
-  sessionId: v.string()
-}).index("by_session", ["sessionId"]);
-const invoices = defineTable({
-  amountMinor: v.bigint(),
-  createdAt: v.number(),
-  currency: v.string(),
-  provider: v.string(),
-  providerInvoiceId: v.string(),
-  referenceId: v.string(),
-  status: v.string(),
-  subscriptionId: v.optional(v.string())
-}).index("by_provider_invoice", ["provider", "providerInvoiceId"], { unique: true });
-const events = defineTable({
-  processedAt: v.number(),
-  provider: v.string(),
-  providerEventId: v.string(),
-  type: v.string()
-}).index("by_provider_event", ["provider", "providerEventId"], { unique: true });
-const usageEvents = defineTable({
-  createdAt: v.number(),
-  featureId: v.string(),
-  idempotencyKey: v.string(),
-  provider: v.string(),
-  quantity: v.number(),
-  referenceId: v.string(),
-  reportedToProvider: v.boolean()
-}).index("by_idempotency", ["provider", "idempotencyKey"], { unique: true }).index("by_reference_feature", ["referenceId", "featureId"]);
-const paymentTables = {
-  captures,
-  checkouts,
-  customers,
-  events,
-  invoices,
-  paymentSessions,
-  payments,
-  prices,
-  products,
-  refunds,
-  subscriptions,
-  usageEvents
-};
-
-export { paymentTables as default };