@lunora/payment 1.0.0-alpha.7 → 1.0.0-alpha.71

package/dist/providers/stripe.mjs

@@ -0,0 +1 @@
+import{LunoraPaymentError as A}from"../packem_shared/LunoraPaymentError-C8uAUIzQ.mjs";import{idempotencyKey as P}from"../packem_shared/idempotencyKey-CfJKqcE3.mjs";import{r as a,e as b,b as o,a as u}from"../packem_shared/json-D85Nbd92.mjs";import{compareMoney as S,money as m,zeroMoney as f}from"../packem_shared/addMoney-BKfsSf0H.mjs";import{i as q}from"../packem_shared/subscription-event-BosLshSM.mjs";const E={canceled:"canceled",processing:"authorized",requires_action:"authorized",requires_capture:"authorized",requires_confirmation:"initiated",requires_payment_method:"initiated",succeeded:"captured"},v={active:"active",canceled:"canceled",incomplete:"past_due",incomplete_expired:"canceled",past_due:"past_due",paused:"paused",trialing:"trialing",unpaid:"past_due"},s=i=>a(u(i.metadata),"referenceId")??a(i,"client_reference_id"),_=i=>{const n=u(i.items),t=Array.isArray(n.data)?n.data:[];return u(t[0])},h=i=>a(u(_(i).price),"id"),w=i=>o(_(i),"quantity"),g=i=>{const n=o(_(i),"current_period_end")??o(i,"current_period_end");return n===void 0?void 0:n*1e3},K=i=>{const n=o(_(i),"current_period_start")??o(i,"current_period_start");return n===void 0?void 0:n*1e3},y=i=>{const n=u(i),t=a(n,"currency")??"usd",e=o(n,"amount")??0,r=m(BigInt(Math.round(e)),t),c=E[a(n,"status")??""]??"initiated",d=Date.now();return{amount:r,capturedAmount:c==="captured"?m(BigInt(Math.round(o(n,"amount_received")??e)),t):f(t),createdAt:d,id:a(n,"id")??"",provider:"stripe",referenceId:s(n)??"",refundedAmount:f(t),state:c,updatedAt:d}},l=i=>{const n=u(i),t=Date.now();return{cancelAtPeriodEnd:b(n,"cancel_at_period_end")??!1,createdAt:t,currentPeriodEnd:g(n),currentPeriodStart:K(n),id:a(n,"id")??"",priceId:h(n)??"",provider:"stripe",quantity:w(n)??1,referenceId:s(n)??"",state:v[a(n,"status")??""]??"active",updatedAt:t}},M=(i,n,t)=>{const e={eventId:i,provider:"stripe",raw:{object:t,type:n}},r=a(t,"currency")??"usd";switch(n){case"charge.refunded":return{...e,amount:m(BigInt(Math.round(o(t,"amount_refunded")??0)),r),amountKind:"absolute",referenceId:s(t),sessionId:a(t,"payment_intent")??a(t,"id"),type:"payment.refunded"};case"checkout.session.completed":{if(a(t,"mode")==="subscription"){const d=a(t,"payment_status"),p=d==="paid"||d==="no_payment_required";return{...e,customerId:a(t,"customer"),referenceId:s(t),subscriptionId:a(t,"subscription"),type:p?"subscription.active":"subscription.updated"}}const c=o(t,"amount_total");return{...e,amount:c===void 0?void 0:m(BigInt(Math.round(c)),r),customerId:a(t,"customer"),referenceId:s(t),sessionId:a(t,"payment_intent")??a(t,"id"),type:"payment.captured"}}case"customer.subscription.created":case"customer.subscription.updated":return{...e,cancelAtPeriodEnd:b(t,"cancel_at_period_end"),currentPeriodEnd:g(t),currentPeriodStart:K(t),customerId:a(t,"customer"),priceId:h(t),quantity:w(t),referenceId:s(t),subscriptionId:a(t,"id"),type:q(v[a(t,"status")??""])};case"customer.subscription.deleted":return{...e,referenceId:s(t),subscriptionId:a(t,"id"),type:"subscription.canceled"};case"payment_intent.amount_capturable_updated":return{...e,amount:m(BigInt(Math.round(o(t,"amount")??0)),r),referenceId:s(t),sessionId:a(t,"id"),type:"payment.authorized"};case"payment_intent.payment_failed":return{...e,referenceId:s(t),sessionId:a(t,"id"),type:"payment.failed"};case"payment_intent.succeeded":return{...e,amount:m(BigInt(Math.round(o(t,"amount_received")??o(t,"amount")??0)),r),customerId:a(t,"customer"),referenceId:s(t),sessionId:a(t,"id"),type:"payment.captured"};default:return{...e,type:"unhandled"}}},D=i=>{const{webhookSecret:n}=i,t=i.client;return{cancelPayment:async(e,r)=>{const c=await t.paymentIntents.cancel(e,void 0,{idempotencyKey:r?.idempotencyKey});return y(c)},cancelSubscription:async(e,r)=>{const c=r?.atPeriodEnd?await t.subscriptions.update(e,{cancel_at_period_end:!0},{idempotencyKey:r.idempotencyKey}):await t.subscriptions.cancel(e,void 0,{idempotencyKey:r?.idempotencyKey});return l(c)},capabilities:{merchantOfRecord:!1,portal:!0,usageMetering:!0},capturePayment:async e=>{const r=await t.paymentIntents.capture(e.sessionId,e.amount?{amount_to_capture:Number(e.amount.minorUnits)}:void 0,{idempotencyKey:e.idempotencyKey});return y(r)},createCheckout:async e=>{const r=await t.checkout.sessions.create({cancel_url:e.cancelUrl,client_reference_id:e.referenceId,customer:e.customerId,line_items:[{price:e.priceId,quantity:e.quantity??1}],metadata:{...e.metadata,referenceId:e.referenceId},mode:e.mode,subscription_data:e.mode==="subscription"?{metadata:{referenceId:e.referenceId}}:void 0,success_url:e.successUrl},{idempotencyKey:e.idempotencyKey});return{id:r.id,provider:"stripe",url:r.url??""}},createPortalSession:async e=>({url:(await t.billingPortal.sessions.create({customer:e.customerId,return_url:e.returnUrl})).url}),getOrCreateCustomer:async e=>{const r=await t.customers.create({email:e.email,metadata:{...e.metadata,referenceId:e.referenceId}},{idempotencyKey:P("customer","stripe",e.referenceId)});return{createdAt:Date.now(),email:r.email??void 0,id:r.id,provider:"stripe",referenceId:e.referenceId}},getPaymentStatus:async e=>y(await t.paymentIntents.retrieve(e)),getSubscriptionStatus:async e=>l(await t.subscriptions.retrieve(e)),identifier:"stripe",parseWebhook:async({headers:e,payload:r})=>{const c=e.get("stripe-signature")??"";let d;try{d=await t.webhooks.constructEventAsync(r,c,n,i.webhookToleranceSeconds)}catch(I){throw new A("WEBHOOK_SIGNATURE_INVALID",I instanceof Error?I.message:"invalid webhook signature")}const p=u(u(d.data).object);return M(d.id,d.type,p)},refundPayment:async e=>{await t.refunds.create({amount:e.amount?Number(e.amount.minorUnits):void 0,payment_intent:e.sessionId,reason:e.reason},{idempotencyKey:e.idempotencyKey});const r=await t.paymentIntents.retrieve(e.sessionId),c=y(r),d=e.amount??c.capturedAmount,p=e.amount!==void 0&&S(e.amount,c.capturedAmount)<0;return{...c,refundedAmount:d,state:p?"partially_refunded":"refunded"}},reportUsage:async e=>{await t.billing.meterEvents.create({event_name:e.featureId,identifier:e.idempotencyKey,payload:{stripe_customer_id:e.customerId??"",value:String(e.quantity)},timestamp:e.timestamp===void 0?void 0:Math.floor(e.timestamp/1e3)},{idempotencyKey:e.idempotencyKey})},resumeSubscription:async e=>{const r=await t.subscriptions.update(e,{cancel_at_period_end:!1});return l(r)},updateSubscription:async(e,r)=>{const c={};if(r.priceId!==void 0||r.quantity!==void 0){const p=await t.subscriptions.retrieve(e);c.items=[{id:p.items.data[0]?.id,price:r.priceId,quantity:r.quantity}]}const d=await t.subscriptions.update(e,c);return l(d)}}};export{D as createStripeAdapter};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@lunora/payment",
-  "version": "1.0.0-alpha.7",
+  "version": "1.0.0-alpha.71",
   "description": "Provider-agnostic payments for Lunora: Stripe-first adapter, webhook sync, and subscription/payment state machine",
   "keywords": [
     "billing",
@@ -41,20 +41,61 @@
       "types": "./dist/index.d.ts",
       "import": "./dist/index.mjs"
     },
+    "./stripe": {
+      "types": "./dist/providers/stripe.d.ts",
+      "import": "./dist/providers/stripe.mjs"
+    },
+    "./polar": {
+      "types": "./dist/providers/polar.d.ts",
+      "import": "./dist/providers/polar.mjs"
+    },
+    "./autumn": {
+      "types": "./dist/providers/autumn.d.ts",
+      "import": "./dist/providers/autumn.mjs"
+    },
+    "./autumn-features": {
+      "types": "./dist/providers/autumn-features.d.ts",
+      "import": "./dist/providers/autumn-features.mjs"
+    },
+    "./dodopayments": {
+      "types": "./dist/providers/dodopayments.d.ts",
+      "import": "./dist/providers/dodopayments.mjs"
+    },
+    "./creem": {
+      "types": "./dist/providers/creem.d.ts",
+      "import": "./dist/providers/creem.mjs"
+    },
     "./package.json": "./package.json"
   },
   "publishConfig": {
     "access": "public"
   },
   "dependencies": {
-    "@lunora/server": "1.0.0-alpha.7",
-    "@lunora/values": "1.0.0-alpha.3",
+    "@lunora/errors": "1.0.0-alpha.20",
+    "@lunora/server": "1.0.0-alpha.70",
+    "@lunora/values": "1.0.0-alpha.25",
     "dinero.js": "2.0.2"
   },
   "peerDependencies": {
-    "stripe": "^19.0.0"
+    "@polar-sh/sdk": "^0.48.0",
+    "autumn-js": "^1.2.0",
+    "creem": "^1.5.0",
+    "dodopayments": "^2.41.0",
+    "stripe": "^22.0.0"
   },
   "peerDependenciesMeta": {
+    "@polar-sh/sdk": {
+      "optional": true
+    },
+    "autumn-js": {
+      "optional": true
+    },
+    "creem": {
+      "optional": true
+    },
+    "dodopayments": {
+      "optional": true
+    },
     "stripe": {
       "optional": true
     }

package/dist/packem_shared/LunoraPaymentError-B3hEzXSs.mjs

@@ -1,22 +0,0 @@
-const STATUS_BY_CODE = {
-  CONFIG_INVALID: 500,
-  CURRENCY_MISMATCH: 400,
-  FORBIDDEN: 403,
-  INVALID_TRANSITION: 409,
-  NOT_FOUND: 404,
-  PROVIDER_ERROR: 502,
-  WEBHOOK_SIGNATURE_INVALID: 400,
-  WEBHOOK_TIMESTAMP_INVALID: 400
-};
-class LunoraPaymentError extends Error {
-  code;
-  status;
-  constructor(code, message) {
-    super(message);
-    this.name = "LunoraPaymentError";
-    this.code = code;
-    this.status = STATUS_BY_CODE[code];
-  }
-}
-
-export { LunoraPaymentError };

package/dist/packem_shared/MemoryPaymentStore-DvgdWa3C.mjs

@@ -1,72 +0,0 @@
-const customerKey = (provider, referenceId) => `${provider}:${referenceId}`;
-const recordKey = (provider, id) => `${provider}:${id}`;
-class MemoryPaymentStore {
-  customers = /* @__PURE__ */ new Map();
-  processedEvents = /* @__PURE__ */ new Set();
-  sessions = /* @__PURE__ */ new Map();
-  subscriptions = /* @__PURE__ */ new Map();
-  usageEvents = /* @__PURE__ */ new Map();
-  getCustomerByReference(provider, referenceId) {
-    return Promise.resolve(this.customers.get(customerKey(provider, referenceId)));
-  }
-  getPaymentSession(provider, id) {
-    return Promise.resolve(this.sessions.get(recordKey(provider, id)));
-  }
-  getSubscription(provider, id) {
-    return Promise.resolve(this.subscriptions.get(recordKey(provider, id)));
-  }
-  listSubscriptionsByReference(referenceId) {
-    return Promise.resolve([...this.subscriptions.values()].filter((subscription) => subscription.referenceId === referenceId));
-  }
-  markEventProcessed(provider, eventId) {
-    const key = recordKey(provider, eventId);
-    if (this.processedEvents.has(key)) {
-      return Promise.resolve(false);
-    }
-    this.processedEvents.add(key);
-    return Promise.resolve(true);
-  }
-  releaseEvent(provider, eventId) {
-    this.processedEvents.delete(recordKey(provider, eventId));
-    return Promise.resolve();
-  }
-  markUsageReported(provider, idempotencyKey) {
-    const key = recordKey(provider, idempotencyKey);
-    const existing = this.usageEvents.get(key);
-    if (existing) {
-      this.usageEvents.set(key, { ...existing, reportedToProvider: true });
-    }
-    return Promise.resolve();
-  }
-  recordUsage(event) {
-    const key = recordKey(event.provider, event.idempotencyKey);
-    if (this.usageEvents.has(key)) {
-      return Promise.resolve(false);
-    }
-    this.usageEvents.set(key, event);
-    return Promise.resolve(true);
-  }
-  sumUsage(referenceId, featureId, since) {
-    let total = 0;
-    for (const event of this.usageEvents.values()) {
-      if (event.referenceId === referenceId && event.featureId === featureId && event.createdAt >= since) {
-        total += event.quantity;
-      }
-    }
-    return Promise.resolve(total);
-  }
-  upsertCustomer(customer) {
-    this.customers.set(customerKey(customer.provider, customer.referenceId), customer);
-    return Promise.resolve();
-  }
-  upsertPaymentSession(session) {
-    this.sessions.set(recordKey(session.provider, session.id), session);
-    return Promise.resolve();
-  }
-  upsertSubscription(subscription) {
-    this.subscriptions.set(recordKey(subscription.provider, subscription.id), subscription);
-    return Promise.resolve();
-  }
-}
-
-export { MemoryPaymentStore };

package/dist/packem_shared/PAYMENT_TERMINAL_STATES-DrxV0clv.mjs

@@ -1,26 +0,0 @@
-const PAYMENT_TRANSITIONS = {
-  authorized: { cancel: "canceled", capture: "captured", fail: "failed" },
-  canceled: {},
-  captured: { partial_refund: "partially_refunded", refund: "refunded" },
-  failed: {},
-  // A webhook can land before our local record exists, so "initiated" accepts the same
-  // outcomes a fresh intent could reach directly.
-  initiated: { authorize: "authorized", cancel: "canceled", capture: "captured", fail: "failed" },
-  partially_refunded: { partial_refund: "partially_refunded", refund: "refunded" },
-  refunded: {}
-};
-const SUBSCRIPTION_TRANSITIONS = {
-  active: { cancel: "canceled", mark_past_due: "past_due", pause: "paused", renew: "active" },
-  canceled: {},
-  past_due: { activate: "active", cancel: "canceled", pause: "paused", renew: "active" },
-  paused: { cancel: "canceled", resume: "active" },
-  trialing: { activate: "active", cancel: "canceled", mark_past_due: "past_due" }
-};
-const PAYMENT_TERMINAL_STATES = /* @__PURE__ */ new Set(["canceled", "failed", "refunded"]);
-const SUBSCRIPTION_TERMINAL_STATES = /* @__PURE__ */ new Set(["canceled"]);
-const nextPaymentState = (from, action) => PAYMENT_TRANSITIONS[from][action];
-const canTransitionPayment = (from, action) => nextPaymentState(from, action) !== void 0;
-const nextSubscriptionState = (from, action) => SUBSCRIPTION_TRANSITIONS[from][action];
-const canTransitionSubscription = (from, action) => nextSubscriptionState(from, action) !== void 0;
-
-export { PAYMENT_TERMINAL_STATES, SUBSCRIPTION_TERMINAL_STATES, canTransitionPayment, canTransitionSubscription, nextPaymentState, nextSubscriptionState };

package/dist/packem_shared/addMoney-bCcs1nyw.mjs

@@ -1,60 +0,0 @@
-import { toSnapshot } from 'dinero.js';
-import { add, allocate, compare, subtract, dinero } from 'dinero.js/bigint';
-import { LunoraPaymentError } from './LunoraPaymentError-B3hEzXSs.mjs';
-
-const ZERO_DECIMAL = /* @__PURE__ */ new Set(["BIF", "CLP", "DJF", "GNF", "JPY", "KMF", "KRW", "MGA", "PYG", "RWF", "UGX", "VND", "VUV", "XAF", "XOF", "XPF"]);
-const THREE_DECIMAL = /* @__PURE__ */ new Set(["BHD", "IQD", "JOD", "KWD", "LYD", "OMR", "TND"]);
-const exponentFor = (code) => {
-  if (ZERO_DECIMAL.has(code)) {
-    return 0n;
-  }
-  return THREE_DECIMAL.has(code) ? 3n : 2n;
-};
-const currencyFor = (code) => {
-  return { base: 10n, code: code.toUpperCase(), exponent: exponentFor(code.toUpperCase()) };
-};
-const toDinero = (value) => dinero({ amount: value.minorUnits, currency: currencyFor(value.currency) });
-const fromDinero = (value) => {
-  const snapshot = toSnapshot(value);
-  return { currency: snapshot.currency.code, minorUnits: snapshot.amount };
-};
-const assertSameCurrency = (a, b) => {
-  if (a.currency !== b.currency) {
-    throw new LunoraPaymentError("CURRENCY_MISMATCH", `cannot combine ${a.currency} with ${b.currency}`);
-  }
-};
-const isZeroDecimalCurrency = (currency) => exponentFor(currency.toUpperCase()) === 0n;
-const money = (minorUnits, currency) => {
-  const units = typeof minorUnits === "bigint" ? minorUnits : BigInt(Math.trunc(minorUnits));
-  return { currency: currency.toUpperCase(), minorUnits: units };
-};
-const zeroMoney = (currency) => money(0n, currency);
-const formatMoney = (value, locale = "en-US") => {
-  const exponent = Number(exponentFor(value.currency.toUpperCase()));
-  const amount = Number(value.minorUnits) / 10 ** exponent;
-  try {
-    return new Intl.NumberFormat(locale, { currency: value.currency, style: "currency" }).format(amount);
-  } catch {
-    return `${amount.toFixed(exponent)} ${value.currency}`;
-  }
-};
-const addMoney = (a, b) => {
-  assertSameCurrency(a, b);
-  return fromDinero(add(toDinero(a), toDinero(b)));
-};
-const subtractMoney = (a, b) => {
-  assertSameCurrency(a, b);
-  return fromDinero(subtract(toDinero(a), toDinero(b)));
-};
-const compareMoney = (a, b) => {
-  assertSameCurrency(a, b);
-  return compare(toDinero(a), toDinero(b));
-};
-const allocateMoney = (amount, ratios) => allocate(toDinero(amount), [...ratios]).map((part) => fromDinero(part));
-const isZeroMoney = (a) => a.minorUnits === 0n;
-const toMoneyJSON = (m) => {
-  return { currency: m.currency, minorUnits: m.minorUnits.toString() };
-};
-const fromMoneyJSON = (json) => money(BigInt(json.minorUnits), json.currency);
-
-export { addMoney, allocateMoney, compareMoney, formatMoney, fromMoneyJSON, isZeroDecimalCurrency, isZeroMoney, money, subtractMoney, toMoneyJSON, zeroMoney };

package/dist/packem_shared/applyWebhookAction-DpAqf3Lw.mjs

@@ -1,177 +0,0 @@
-import { compareMoney, zeroMoney, addMoney } from './addMoney-bCcs1nyw.mjs';
-import { n as notifyObserver } from './observability-CvhJ205g.mjs';
-import { nextPaymentState, nextSubscriptionState } from './PAYMENT_TERMINAL_STATES-DrxV0clv.mjs';
-
-const PAYMENT_ACTION_BY_TYPE = {
-  "payment.authorized": "authorize",
-  "payment.captured": "capture",
-  "payment.failed": "fail",
-  "payment.refunded": "refund"
-};
-const SUBSCRIPTION_STATE_BY_TYPE = {
-  "subscription.active": "active",
-  "subscription.canceled": "canceled",
-  "subscription.past_due": "past_due",
-  "subscription.paused": "paused"
-};
-const SUBSCRIPTION_ACTION_BY_TYPE = {
-  "subscription.active": "activate",
-  "subscription.canceled": "cancel",
-  "subscription.past_due": "mark_past_due",
-  "subscription.paused": "pause"
-};
-const maxMoney = (a, b) => compareMoney(a, b) > 0 ? a : b;
-const refundedTotalFor = (base, action) => {
-  if (!action.amount) {
-    return void 0;
-  }
-  if (base.refundedAmount.currency !== action.amount.currency || base.capturedAmount.currency !== action.amount.currency) {
-    return void 0;
-  }
-  const prospective = action.amountKind === "absolute" ? maxMoney(action.amount, base.refundedAmount) : addMoney(base.refundedAmount, action.amount);
-  if (compareMoney(prospective, base.capturedAmount) > 0) {
-    return void 0;
-  }
-  return prospective;
-};
-const applyPayment = async (store, action, paymentAction) => {
-  if (!action.sessionId) {
-    return { applied: false, reason: "unhandled" };
-  }
-  const existing = await store.getPaymentSession(action.provider, action.sessionId);
-  const fromState = existing?.state ?? "initiated";
-  const now = Date.now();
-  const currency = action.amount?.currency ?? existing?.amount.currency ?? "USD";
-  let resolvedAction = paymentAction;
-  if (paymentAction === "refund" && existing) {
-    const prospective = refundedTotalFor(existing, action);
-    if (prospective && compareMoney(prospective, existing.capturedAmount) < 0) {
-      resolvedAction = "partial_refund";
-    }
-  }
-  const toState = nextPaymentState(fromState, resolvedAction);
-  if (!toState) {
-    return { applied: false, reason: "illegal_transition" };
-  }
-  const base = existing ?? {
-    amount: action.amount ?? zeroMoney(currency),
-    capturedAmount: zeroMoney(currency),
-    createdAt: now,
-    id: action.sessionId,
-    provider: action.provider,
-    referenceId: action.referenceId ?? "",
-    refundedAmount: zeroMoney(currency),
-    state: fromState,
-    updatedAt: now
-  };
-  let { capturedAmount, refundedAmount } = base;
-  if (resolvedAction === "capture" && action.amount) {
-    capturedAmount = action.amount;
-  }
-  if ((resolvedAction === "partial_refund" || resolvedAction === "refund") && action.amount) {
-    const prospective = refundedTotalFor(base, action);
-    if (!prospective) {
-      return { applied: false, reason: "invalid_refund_amount" };
-    }
-    refundedAmount = prospective;
-  }
-  await store.upsertPaymentSession({
-    ...base,
-    capturedAmount,
-    referenceId: action.referenceId ?? base.referenceId,
-    refundedAmount,
-    state: toState,
-    updatedAt: now
-  });
-  return { applied: true, reason: "ok" };
-};
-const applySubscription = async (store, action) => {
-  if (!action.subscriptionId) {
-    return { applied: false, reason: "unhandled" };
-  }
-  const existing = await store.getSubscription(action.provider, action.subscriptionId);
-  const now = Date.now();
-  if (action.type === "subscription.updated") {
-    if (!existing) {
-      return { applied: false, reason: "unhandled" };
-    }
-    await store.upsertSubscription({
-      ...existing,
-      cancelAtPeriodEnd: action.cancelAtPeriodEnd ?? existing.cancelAtPeriodEnd,
-      currentPeriodEnd: action.currentPeriodEnd ?? existing.currentPeriodEnd,
-      currentPeriodStart: action.currentPeriodStart ?? existing.currentPeriodStart,
-      priceId: action.priceId ?? existing.priceId,
-      quantity: action.quantity ?? existing.quantity,
-      updatedAt: now
-    });
-    return { applied: true, reason: "ok" };
-  }
-  const targetState = SUBSCRIPTION_STATE_BY_TYPE[action.type];
-  if (!targetState) {
-    return { applied: false, reason: "unhandled" };
-  }
-  if (!existing) {
-    await store.upsertSubscription({
-      cancelAtPeriodEnd: action.cancelAtPeriodEnd ?? false,
-      createdAt: now,
-      currentPeriodEnd: action.currentPeriodEnd,
-      currentPeriodStart: action.currentPeriodStart ?? now,
-      id: action.subscriptionId,
-      priceId: action.priceId ?? "",
-      provider: action.provider,
-      quantity: action.quantity ?? 1,
-      referenceId: action.referenceId ?? "",
-      state: targetState,
-      updatedAt: now
-    });
-    return { applied: true, reason: "ok" };
-  }
-  const subscriptionAction = existing.state === "active" && targetState === "active" ? "renew" : SUBSCRIPTION_ACTION_BY_TYPE[action.type];
-  const nextState = subscriptionAction ? nextSubscriptionState(existing.state, subscriptionAction) : void 0;
-  if (!nextState) {
-    return { applied: false, reason: "illegal_transition" };
-  }
-  await store.upsertSubscription({
-    ...existing,
-    cancelAtPeriodEnd: action.cancelAtPeriodEnd ?? existing.cancelAtPeriodEnd,
-    currentPeriodEnd: action.currentPeriodEnd ?? existing.currentPeriodEnd,
-    currentPeriodStart: action.currentPeriodStart ?? existing.currentPeriodStart,
-    priceId: action.priceId ?? existing.priceId,
-    quantity: action.quantity ?? existing.quantity,
-    state: nextState,
-    updatedAt: now
-  });
-  return { applied: true, reason: "ok" };
-};
-const applyWebhookAction = async (store, action, observer) => {
-  if (action.type === "unhandled") {
-    return { applied: false, reason: "unhandled" };
-  }
-  const fresh = await store.markEventProcessed(action.provider, action.eventId);
-  if (!fresh) {
-    notifyObserver(observer, { eventId: action.eventId, provider: action.provider, type: "webhook.duplicate" });
-    return { applied: false, reason: "duplicate" };
-  }
-  const paymentAction = PAYMENT_ACTION_BY_TYPE[action.type];
-  let result;
-  try {
-    result = paymentAction ? await applyPayment(store, action, paymentAction) : await applySubscription(store, action);
-  } catch (error) {
-    await store.releaseEvent(action.provider, action.eventId);
-    throw error;
-  }
-  notifyObserver(observer, { action: action.type, eventId: action.eventId, provider: action.provider, reason: result.reason, type: "webhook.applied" });
-  if (action.type === "payment.failed") {
-    notifyObserver(observer, { provider: action.provider, referenceId: action.referenceId, sessionId: action.sessionId, type: "payment.failed" });
-  } else if (action.type === "subscription.past_due") {
-    notifyObserver(observer, {
-      provider: action.provider,
-      referenceId: action.referenceId,
-      subscriptionId: action.subscriptionId,
-      type: "subscription.past_due"
-    });
-  }
-  return result;
-};
-
-export { applyWebhookAction as default };

package/dist/packem_shared/constantTimeEqual-CfY0jYcL.mjs

@@ -1,95 +0,0 @@
-import { LunoraPaymentError } from './LunoraPaymentError-B3hEzXSs.mjs';
-
-const encoder = new TextEncoder();
-const toHex = (buffer) => [...new Uint8Array(buffer)].map((byte) => byte.toString(16).padStart(2, "0")).join("");
-const SYMMETRIC_PREFIX = "whsec_";
-const base64ToBytes = (value) => new Uint8Array(Array.from(atob(value), (character) => character.codePointAt(0) ?? 0));
-const bytesToBase64 = (buffer) => btoa(String.fromCodePoint(...new Uint8Array(buffer)));
-const hmacSha256Base64 = async (keyBytes, payload) => {
-  const key = await crypto.subtle.importKey("raw", keyBytes, { hash: "SHA-256", name: "HMAC" }, false, ["sign"]);
-  const signature = await crypto.subtle.sign("HMAC", key, encoder.encode(payload));
-  return bytesToBase64(signature);
-};
-const constantTimeEqual = (a, b) => {
-  if (a.length !== b.length) {
-    return false;
-  }
-  let mismatch = 0;
-  for (let index = 0; index < a.length; index += 1) {
-    mismatch |= (a.codePointAt(index) ?? 0) ^ (b.codePointAt(index) ?? 0);
-  }
-  return mismatch === 0;
-};
-const hmacSha256Hex = async (secret, payload) => {
-  const key = await crypto.subtle.importKey("raw", encoder.encode(secret), { hash: "SHA-256", name: "HMAC" }, false, ["sign"]);
-  const signature = await crypto.subtle.sign("HMAC", key, encoder.encode(payload));
-  return toHex(signature);
-};
-const parseStripeSignatureHeader = (header) => {
-  let timestamp = Number.NaN;
-  const signatures = [];
-  for (const part of header.split(",")) {
-    const index = part.indexOf("=");
-    if (index === -1) {
-      continue;
-    }
-    const scheme = part.slice(0, index).trim();
-    const value = part.slice(index + 1).trim();
-    if (scheme === "t") {
-      timestamp = Number(value);
-    } else if (scheme === "v1") {
-      signatures.push(value);
-    }
-  }
-  return { signatures, timestamp };
-};
-const verifyStripeSignature = async (input) => {
-  if (!input.secret) {
-    throw new LunoraPaymentError("CONFIG_INVALID", "webhook secret not configured");
-  }
-  const toleranceSeconds = input.toleranceSeconds ?? 300;
-  const nowMs = input.now ?? Date.now();
-  const { signatures, timestamp } = parseStripeSignatureHeader(input.signatureHeader);
-  if (!Number.isFinite(timestamp) || signatures.length === 0) {
-    throw new LunoraPaymentError("WEBHOOK_SIGNATURE_INVALID", "malformed signature header");
-  }
-  if (Math.abs(Math.floor(nowMs / 1e3) - timestamp) > toleranceSeconds) {
-    throw new LunoraPaymentError("WEBHOOK_TIMESTAMP_INVALID", "signature timestamp outside tolerance");
-  }
-  const expected = await hmacSha256Hex(input.secret, `${String(timestamp)}.${input.payload}`);
-  if (!signatures.some((candidate) => constantTimeEqual(candidate, expected))) {
-    throw new LunoraPaymentError("WEBHOOK_SIGNATURE_INVALID", "no matching signature");
-  }
-};
-const verifyStandardWebhook = async (input) => {
-  if (!input.secret) {
-    throw new LunoraPaymentError("CONFIG_INVALID", "webhook secret not configured");
-  }
-  const toleranceSeconds = input.toleranceSeconds ?? 300;
-  const nowMs = input.now ?? Date.now();
-  const timestamp = Number(input.webhookTimestamp);
-  if (!input.webhookId || !input.webhookSignature || !Number.isFinite(timestamp)) {
-    throw new LunoraPaymentError("WEBHOOK_SIGNATURE_INVALID", "missing standard-webhooks headers");
-  }
-  if (Math.abs(Math.floor(nowMs / 1e3) - timestamp) > toleranceSeconds) {
-    throw new LunoraPaymentError("WEBHOOK_TIMESTAMP_INVALID", "signature timestamp outside tolerance");
-  }
-  const rawSecret = input.secret.startsWith(SYMMETRIC_PREFIX) ? input.secret.slice(SYMMETRIC_PREFIX.length) : input.secret;
-  if (!rawSecret) {
-    throw new LunoraPaymentError("CONFIG_INVALID", "webhook secret not configured");
-  }
-  const keyBytes = base64ToBytes(rawSecret);
-  if (keyBytes.length === 0) {
-    throw new LunoraPaymentError("CONFIG_INVALID", "webhook secret not configured");
-  }
-  const expected = await hmacSha256Base64(keyBytes, `${input.webhookId}.${input.webhookTimestamp}.${input.payload}`);
-  const provided = input.webhookSignature.split(" ").map((entry) => {
-    const comma = entry.indexOf(",");
-    return comma === -1 ? "" : entry.slice(comma + 1);
-  }).filter(Boolean);
-  if (!provided.some((candidate) => constantTimeEqual(candidate, expected))) {
-    throw new LunoraPaymentError("WEBHOOK_SIGNATURE_INVALID", "no matching signature");
-  }
-};
-
-export { constantTimeEqual, hmacSha256Hex, parseStripeSignatureHeader, verifyStandardWebhook, verifyStripeSignature };

package/dist/packem_shared/createAdapterRegistry-BuDHFCBc.mjs

@@ -1,24 +0,0 @@
-import { LunoraPaymentError } from './LunoraPaymentError-B3hEzXSs.mjs';
-
-const createAdapterRegistry = (adapters) => {
-  const byId = /* @__PURE__ */ new Map();
-  for (const adapter of adapters) {
-    if (byId.has(adapter.identifier)) {
-      throw new LunoraPaymentError("CONFIG_INVALID", `duplicate adapter for provider "${adapter.identifier}"`);
-    }
-    byId.set(adapter.identifier, adapter);
-  }
-  return {
-    all: () => [...byId.values()],
-    get: (provider) => {
-      const adapter = byId.get(provider);
-      if (!adapter) {
-        throw new LunoraPaymentError("CONFIG_INVALID", `no adapter registered for provider "${provider}"`);
-      }
-      return adapter;
-    },
-    has: (provider) => byId.has(provider)
-  };
-};
-
-export { createAdapterRegistry };