@lunora/payment 1.0.0-alpha.25 → 1.0.0-alpha.27

package/dist/providers/creem.mjs

@@ -4,6 +4,7 @@ import { verifyCreemSignature } from '../packem_shared/constantTimeEqual-BQjoW85
 import { m as makeNotSupported } from '../packem_shared/not-supported-C0onRyia.mjs';
 import { s as stateToEventType } from '../packem_shared/subscription-event-CwEsWRCK.mjs';
 
+const ALREADY_EXISTS_PATTERN = /already exists/iu;
 const PAYMENT_STATE_BY_CREEM_STATUS = {
   canceled: "canceled",
   completed: "captured",
@@ -34,6 +35,16 @@ const notSupported = makeNotSupported("creem (merchant-of-record)");
 const idOf = (value) => typeof value === "string" ? value : readString(asRecord(value), "id");
 const readCheckoutUrl = (checkout) => readAny(checkout, "checkout_url", "checkoutUrl") ?? "";
 const isCanceling = (subscription) => readAny(subscription, "canceled_at", "canceledAt") !== void 0 || readString(subscription, "status") === "scheduled_cancel";
+const isDuplicateCustomerError = (error) => {
+  if (!(error instanceof Error)) {
+    return false;
+  }
+  const { statusCode } = error;
+  if (typeof statusCode === "number" && statusCode !== 400 && statusCode !== 409) {
+    return false;
+  }
+  return ALREADY_EXISTS_PATTERN.test(error.message);
+};
 const subscriptionFromCreem = (input) => {
   const subscription = asRecord(input);
   const now = Date.now();
@@ -172,10 +183,30 @@ const createCreemAdapter = (options) => {
         };
       };
       try {
-        return toCustomer(asRecord(await client.customers.create({ email: ref.email ?? "", name: ref.metadata?.name ?? ref.referenceId })));
+        return toCustomer(
+          asRecord(
+            await client.customers.create({
+              email: ref.email ?? "",
+              // Pin the framework-controlled `referenceId` LAST so caller metadata can never
+              // override it (same pattern as `createCheckout`) — this is the only thing Creem
+              // lets us key a customer on (no `externalId`-style create, unlike Polar/Dodo), so
+              // the recovery path below can verify it before ever adopting a retrieved customer.
+              metadata: { ...ref.metadata, referenceId: ref.referenceId },
+              name: ref.metadata?.name ?? ref.referenceId
+            })
+          )
+        );
       } catch (error) {
-        if (ref.email !== void 0) {
-          return toCustomer(asRecord(await client.customers.retrieve(void 0, ref.email)));
+        if (ref.email !== void 0 && isDuplicateCustomerError(error)) {
+          const existing = asRecord(await client.customers.retrieve(void 0, ref.email));
+          const existingReferenceId = referenceFromMetadata(existing);
+          if (existingReferenceId !== ref.referenceId) {
+            throw new Error(
+              `Creem customer for email "${ref.email}" already belongs to a different reference; refusing to bind it to "${ref.referenceId}".`,
+              { cause: error }
+            );
+          }
+          return toCustomer(existing);
         }
         throw error;
       }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/payment",
-  "version": "1.0.0-alpha.25",
+  "version": "1.0.0-alpha.27",
   "description": "Provider-agnostic payments for Lunora: Stripe-first adapter, webhook sync, and subscription/payment state machine",
   "keywords": [
     "billing",
@@ -72,7 +72,7 @@
   },
   "dependencies": {
     "@lunora/errors": "1.0.0-alpha.5",
-    "@lunora/server": "1.0.0-alpha.25",
+    "@lunora/server": "1.0.0-alpha.27",
     "@lunora/values": "1.0.0-alpha.8",
     "dinero.js": "2.0.2"
   },