@mmailaender/convex-creem 0.1.0

package/dist/svelte/widgets/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/svelte/widgets/index.ts"],"names":[],"mappings":"AAAA,OAAO,yBAAyB,MAAM,uBAAuB,CAAC;AAC9D,OAAO,yBAAyB,MAAM,2BAA2B,CAAC;AAClE,OAAO,oBAAoB,MAAM,kBAAkB,CAAC;AACpD,OAAO,oBAAoB,MAAM,sBAAsB,CAAC;AAExD,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAElE,eAAO,MAAM,YAAY,EAAE,OAAO,yBAAyB,GAAG;IAC5D,IAAI,EAAE,OAAO,yBAAyB,CAAC;IACvC,IAAI,EAAE,OAAO,yBAAyB,CAAC;IACvC,mDAAmD;IACnD,KAAK,EAAE,OAAO,yBAAyB,CAAC;CAKxC,CAAC;AAEH,eAAO,MAAM,OAAO,EAAE,OAAO,oBAAoB,GAAG;IAClD,IAAI,EAAE,OAAO,oBAAoB,CAAC;IAClC,IAAI,EAAE,OAAO,oBAAoB,CAAC;IAClC,8CAA8C;IAC9C,KAAK,EAAE,OAAO,oBAAoB,CAAC;CAKnC,CAAC;AAEH,YAAY,EACV,mBAAmB,EACnB,qBAAqB,EACrB,WAAW,EACX,oBAAoB,EACpB,UAAU,GACX,MAAM,YAAY,CAAC"}

package/dist/svelte/widgets/index.js

@@ -0,0 +1,16 @@
+import SubscriptionItemComponent from "./Subscription.svelte";
+import SubscriptionRootComponent from "./SubscriptionRoot.svelte";
+import ProductItemComponent from "./Product.svelte";
+import ProductRootComponent from "./ProductRoot.svelte";
+export { default as BillingPortal } from "./BillingPortal.svelte";
+export const Subscription = Object.assign(SubscriptionItemComponent, {
+    Root: SubscriptionRootComponent,
+    Item: SubscriptionItemComponent,
+    Group: SubscriptionRootComponent,
+});
+export const Product = Object.assign(ProductItemComponent, {
+    Root: ProductRootComponent,
+    Item: ProductItemComponent,
+    Group: ProductRootComponent,
+});
+//# sourceMappingURL=index.js.map

package/dist/svelte/widgets/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/svelte/widgets/index.ts"],"names":[],"mappings":"AAAA,OAAO,yBAAyB,MAAM,uBAAuB,CAAC;AAC9D,OAAO,yBAAyB,MAAM,2BAA2B,CAAC;AAClE,OAAO,oBAAoB,MAAM,kBAAkB,CAAC;AACpD,OAAO,oBAAoB,MAAM,sBAAsB,CAAC;AAExD,OAAO,EAAE,OAAO,IAAI,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAElE,MAAM,CAAC,MAAM,YAAY,GAKrB,MAAM,CAAC,MAAM,CAAC,yBAAyB,EAAE;IAC3C,IAAI,EAAE,yBAAyB;IAC/B,IAAI,EAAE,yBAAyB;IAC/B,KAAK,EAAE,yBAAyB;CACjC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,OAAO,GAKhB,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE;IACtC,IAAI,EAAE,oBAAoB;IAC1B,IAAI,EAAE,oBAAoB;IAC1B,KAAK,EAAE,oBAAoB;CAC5B,CAAC,CAAC"}

package/dist/svelte/widgets/productGroupContext.d.ts

@@ -0,0 +1,6 @@
+import type { ProductItemRegistration } from "./types.js";
+export type ProductGroupContextValue = {
+    registerItem: (item: ProductItemRegistration) => () => void;
+};
+export declare const PRODUCT_GROUP_CONTEXT_KEY: unique symbol;
+//# sourceMappingURL=productGroupContext.d.ts.map

package/dist/svelte/widgets/productGroupContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"productGroupContext.d.ts","sourceRoot":"","sources":["../../../src/svelte/widgets/productGroupContext.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAE1D,MAAM,MAAM,wBAAwB,GAAG;IACrC,YAAY,EAAE,CAAC,IAAI,EAAE,uBAAuB,KAAK,MAAM,IAAI,CAAC;CAC7D,CAAC;AAEF,eAAO,MAAM,yBAAyB,eAAwC,CAAC"}

package/dist/svelte/widgets/productGroupContext.js

@@ -0,0 +1,2 @@
+export const PRODUCT_GROUP_CONTEXT_KEY = Symbol("creem.product.group.context");
+//# sourceMappingURL=productGroupContext.js.map

package/dist/svelte/widgets/productGroupContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"productGroupContext.js","sourceRoot":"","sources":["../../../src/svelte/widgets/productGroupContext.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC,6BAA6B,CAAC,CAAC"}

package/dist/svelte/widgets/subscriptionContext.d.ts

@@ -0,0 +1,6 @@
+import type { SubscriptionPlanRegistration } from "./types.js";
+export type SubscriptionContextValue = {
+    registerPlan: (plan: SubscriptionPlanRegistration) => () => void;
+};
+export declare const SUBSCRIPTION_CONTEXT_KEY: unique symbol;
+//# sourceMappingURL=subscriptionContext.d.ts.map

package/dist/svelte/widgets/subscriptionContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscriptionContext.d.ts","sourceRoot":"","sources":["../../../src/svelte/widgets/subscriptionContext.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,YAAY,CAAC;AAE/D,MAAM,MAAM,wBAAwB,GAAG;IACrC,YAAY,EAAE,CAAC,IAAI,EAAE,4BAA4B,KAAK,MAAM,IAAI,CAAC;CAClE,CAAC;AAEF,eAAO,MAAM,wBAAwB,eAAuC,CAAC"}

package/dist/svelte/widgets/subscriptionContext.js

@@ -0,0 +1,2 @@
+export const SUBSCRIPTION_CONTEXT_KEY = Symbol("creem.subscription.context");
+//# sourceMappingURL=subscriptionContext.js.map

package/dist/svelte/widgets/subscriptionContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscriptionContext.js","sourceRoot":"","sources":["../../../src/svelte/widgets/subscriptionContext.ts"],"names":[],"mappings":"AAMA,MAAM,CAAC,MAAM,wBAAwB,GAAG,MAAM,CAAC,4BAA4B,CAAC,CAAC"}

package/dist/svelte/widgets/types.d.ts

@@ -0,0 +1,171 @@
+import type { FunctionReference } from "convex/server";
+import type { BillingSnapshot, RecurringCycle } from "../../core/types.js";
+export type { CheckoutIntent } from "../../core/types.js";
+/**
+ * UI-side permission flags for billing widgets.
+ * Controls which buttons are enabled/visible. This is **cosmetic gating only** —
+ * enforce real permissions server-side in your Convex functions.
+ *
+ * When a permission is `false`, the corresponding button renders as disabled.
+ * When omitted or `undefined`, all actions default to enabled.
+ */
+export type BillingPermissions = {
+    /** Allow creating new checkouts (subscribe / buy buttons). */
+    canCheckout?: boolean;
+    /** Allow switching plans or billing intervals. */
+    canChangeSubscription?: boolean;
+    /** Allow cancelling the active subscription. */
+    canCancelSubscription?: boolean;
+    /** Allow resuming a paused or scheduled-cancel subscription. */
+    canResumeSubscription?: boolean;
+    /** Allow changing the seat count on seat-based plans. */
+    canUpdateSeats?: boolean;
+    /** Allow opening the Creem customer billing portal. */
+    canAccessPortal?: boolean;
+};
+/**
+ * Backend function references for connected billing widgets.
+ * Created once in your layout/page and passed to `<Subscription.Root>`, `<Product.Root>`, and `<BillingPortal>`.
+ *
+ * All references point to Convex functions generated by `creem.api({ resolve })`
+ * or your own custom wrappers.
+ *
+ * @example
+ * ```ts
+ * const billingApi: ConnectedBillingApi = {
+ *   uiModel: api.billing.uiModel,
+ *   checkouts: { create: api.billing.checkoutsCreate },
+ *   subscriptions: {
+ *     update: api.billing.subscriptionsUpdate,
+ *     cancel: api.billing.subscriptionsCancel,
+ *     resume: api.billing.subscriptionsResume,
+ *   },
+ *   customers: { portalUrl: api.billing.customersPortalUrl },
+ * };
+ * ```
+ */
+export type ConnectedBillingApi = {
+    /** Query that returns the `ConnectedBillingModel` — called by all widgets to load billing state. */
+    uiModel: FunctionReference<"query">;
+    /** Checkout actions. */
+    checkouts: {
+        /** Create a checkout session and return `{ url }`. */
+        create: FunctionReference<"action">;
+    };
+    /** Subscription mutation references. All optional — omit to hide the corresponding UI controls. */
+    subscriptions?: {
+        /** Plan switch or seat update mutation. */
+        update?: FunctionReference<"mutation">;
+        /** Cancel subscription mutation. */
+        cancel?: FunctionReference<"mutation">;
+        /** Resume paused/scheduled-cancel subscription mutation. */
+        resume?: FunctionReference<"mutation">;
+    };
+    /** Customer actions. */
+    customers?: {
+        /** Action that returns `{ url }` for the Creem billing portal. */
+        portalUrl?: FunctionReference<"action">;
+    };
+};
+/** Product data as returned by the billing model query. Mirrors the Convex DB product schema. */
+export type ConnectedProduct = {
+    id: string;
+    name?: string;
+    description?: string;
+    price?: number;
+    currency?: string;
+    billingType?: string;
+    billingPeriod?: string;
+    status?: string;
+    taxMode?: string;
+    taxCategory?: string;
+    imageUrl?: string;
+    features?: Array<{
+        id: string;
+        description: string;
+    }>;
+};
+/**
+ * Complete billing state returned by the `uiModel` query.
+ * Consumed internally by all connected widgets — you typically don't need to access this directly.
+ */
+export type ConnectedBillingModel = {
+    /** Authenticated user info, or `null` when unauthenticated (public pricing page). */
+    user: {
+        _id: string;
+        email: string;
+        isFree?: boolean;
+        isTrialing?: boolean;
+        trialEnd?: string | null;
+    } | null;
+    /** Resolved billing state (plan, status, available actions). `null` when unauthenticated. */
+    billingSnapshot: BillingSnapshot | null;
+    /** All synced products from the Creem dashboard. */
+    allProducts: ConnectedProduct[];
+    /** Product IDs the entity has purchased (one-time orders). */
+    ownedProductIds: string[];
+    /** Product ID of the current subscription, or `null`. */
+    subscriptionProductId: string | null;
+    /** All active subscriptions with full details. */
+    activeSubscriptions?: Array<{
+        id: string;
+        productId: string;
+        status: string;
+        cancelAtPeriodEnd: boolean;
+        currentPeriodEnd: string | null;
+        currentPeriodStart: string;
+        seats: number | null;
+        recurringInterval: string | null;
+        trialEnd?: string | null;
+    }>;
+    /** Whether this entity has a Creem customer record (needed for billing portal). */
+    hasCreemCustomer?: boolean;
+    /** Reserved for future billing policy data. */
+    policy?: unknown;
+};
+/**
+ * Plan type for `<Subscription.Item>`.
+ * - `"free"` — free tier, no checkout
+ * - `"single"` — standard paid plan (flat pricing)
+ * - `"seat-based"` — per-seat pricing with optional seat picker
+ * - `"enterprise"` — "Contact sales" CTA, no checkout
+ */
+export type SubscriptionPlanType = "free" | "single" | "seat-based" | "enterprise";
+export type SubscriptionPlanRegistration = {
+    planId: string;
+    type: SubscriptionPlanType;
+    title?: string;
+    description?: string;
+    contactUrl?: string;
+    recommended?: boolean;
+    productIds?: Partial<Record<RecurringCycle, string>>;
+};
+/**
+ * Product type for `<Product.Item>`.
+ * - `"one-time"` — purchased once, shows "Owned" badge after purchase
+ * - `"recurring"` — can be purchased multiple times (consumable), no "Owned" badge
+ */
+export type ProductType = "one-time" | "recurring";
+/**
+ * Upgrade path rule for `<Product.Root transition={[...]}>`.
+ * - `"direct"` — checkout uses the target product directly
+ * - `"via_product"` — checkout uses a dedicated upgrade product (delta pricing)
+ */
+export type Transition = {
+    from: string;
+    to: string;
+    kind: "direct";
+} | {
+    from: string;
+    to: string;
+    kind: "via_product";
+    /** Creem product ID for the upgrade (e.g. a delta-priced "Basic → Premium" product). */
+    viaProductId: string;
+};
+export type ProductItemRegistration = {
+    productId: string;
+    type: ProductType;
+    title?: string;
+    description?: string;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/svelte/widgets/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/svelte/widgets/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACvD,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE3E,YAAY,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE1D;;;;;;;GAOG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,8DAA8D;IAC9D,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,kDAAkD;IAClD,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,gDAAgD;IAChD,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,gEAAgE;IAChE,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,yDAAyD;IACzD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,uDAAuD;IACvD,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B,CAAC;AAEF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,oGAAoG;IACpG,OAAO,EAAE,iBAAiB,CAAC,OAAO,CAAC,CAAC;IACpC,wBAAwB;IACxB,SAAS,EAAE;QACT,sDAAsD;QACtD,MAAM,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;KACrC,CAAC;IACF,mGAAmG;IACnG,aAAa,CAAC,EAAE;QACd,2CAA2C;QAC3C,MAAM,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACvC,oCAAoC;QACpC,MAAM,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;QACvC,4DAA4D;QAC5D,MAAM,CAAC,EAAE,iBAAiB,CAAC,UAAU,CAAC,CAAC;KACxC,CAAC;IACF,wBAAwB;IACxB,SAAS,CAAC,EAAE;QACV,kEAAkE;QAClE,SAAS,CAAC,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;KACzC,CAAC;CACH,CAAC;AAEF,iGAAiG;AACjG,MAAM,MAAM,gBAAgB,GAAG;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACvD,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,qBAAqB,GAAG;IAClC,qFAAqF;IACrF,IAAI,EAAE;QACJ,GAAG,EAAE,MAAM,CAAC;QACZ,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,OAAO,CAAC;QACjB,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,GAAG,IAAI,CAAC;IACT,6FAA6F;IAC7F,eAAe,EAAE,eAAe,GAAG,IAAI,CAAC;IACxC,oDAAoD;IACpD,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,8DAA8D;IAC9D,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,yDAAyD;IACzD,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,kDAAkD;IAClD,mBAAmB,CAAC,EAAE,KAAK,CAAC;QAC1B,EAAE,EAAE,MAAM,CAAC;QACX,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,iBAAiB,EAAE,OAAO,CAAC;QAC3B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;QAChC,kBAAkB,EAAE,MAAM,CAAC;QAC3B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;QACrB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;QACjC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,CAAC,CAAC;IACH,mFAAmF;IACnF,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,+CAA+C;IAC/C,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAC5B,MAAM,GACN,QAAQ,GACR,YAAY,GACZ,YAAY,CAAC;AAEjB,MAAM,MAAM,4BAA4B,GAAG;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,oBAAoB,CAAC;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC;CACtD,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,WAAW,GAAG,UAAU,GAAG,WAAW,CAAC;AAEnD;;;;GAIG;AACH,MAAM,MAAM,UAAU,GAClB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAC5C;IACE,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,aAAa,CAAC;IACpB,wFAAwF;IACxF,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEN,MAAM,MAAM,uBAAuB,GAAG;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC"}

package/dist/svelte/widgets/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/svelte/widgets/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/svelte/widgets/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,182 @@
+{
+  "name": "@mmailaender/convex-creem",
+  "description": "A Creem component for Convex.",
+  "repository": "github:mmailaender/convex-creem",
+  "homepage": "https://github.com/mmailaender/convex-creem#readme",
+  "bugs": {
+    "url": "https://github.com/mmailaender/convex-creem/issues"
+  },
+  "version": "0.1.0",
+  "license": "Apache-2.0",
+  "keywords": [
+    "convex",
+    "component",
+    "creem",
+    "stripe",
+    "subscription",
+    "billing",
+    "payments",
+    "checkout"
+  ],
+  "type": "module",
+  "sideEffects": [
+    "./src/client/polyfill.ts",
+    "./dist/client/polyfill.js"
+  ],
+  "files": [
+    "dist",
+    "src"
+  ],
+  "exports": {
+    "./package.json": "./package.json",
+    ".": {
+      "types": "./dist/client/index.d.ts",
+      "default": "./dist/client/index.js"
+    },
+    "./react": {
+      "types": "./dist/react/index.d.ts",
+      "default": "./dist/react/index.js"
+    },
+    "./svelte": {
+      "types": "./dist/svelte/index.d.ts",
+      "svelte": "./dist/svelte/index.js",
+      "default": "./dist/svelte/index.js"
+    },
+    "./styles": "./src/library.css",
+    "./test": "./src/test.ts",
+    "./_generated/component.js": {
+      "types": "./dist/component/_generated/component.d.ts"
+    },
+    "./convex.config": {
+      "types": "./dist/component/convex.config.d.ts",
+      "default": "./dist/component/convex.config.js"
+    },
+    "./convex.config.js": {
+      "types": "./dist/component/convex.config.d.ts",
+      "default": "./dist/component/convex.config.js"
+    }
+  },
+  "peerDependencies": {
+    "@ark-ui/react": "^5.31.0",
+    "@ark-ui/svelte": "^5.16.0",
+    "convex": "^1.29.0",
+    "convex-svelte": "^0.0.12",
+    "creem": "^1.3.6",
+    "react": "^18 || ^19",
+    "react-dom": "^18 || ^19",
+    "svelte": "^5"
+  },
+  "peerDependenciesMeta": {
+    "@ark-ui/react": {
+      "optional": true
+    },
+    "@ark-ui/svelte": {
+      "optional": true
+    },
+    "convex-svelte": {
+      "optional": true
+    },
+    "react": {
+      "optional": true
+    },
+    "react-dom": {
+      "optional": true
+    },
+    "svelte": {
+      "optional": true
+    }
+  },
+  "devDependencies": {
+    "@ark-ui/react": "^5.31.0",
+    "@ark-ui/svelte": "^5.16.0",
+    "@arethetypeswrong/cli": "0.18.2",
+    "@convex-dev/eslint-plugin": "1.1.1",
+    "@edge-runtime/vm": "5.0.0",
+    "@eslint/eslintrc": "3.3.4",
+    "@eslint/js": "9.39.2",
+    "@lucide/svelte": "^0.575.0",
+    "@radix-ui/react-dialog": "1.1.15",
+    "@radix-ui/react-icons": "1.3.2",
+    "@radix-ui/react-separator": "1.1.8",
+    "@radix-ui/react-slot": "1.2.4",
+    "@sveltejs/vite-plugin-svelte": "^6.2.4",
+    "@tailwindcss/postcss": "4.2.1",
+    "@tailwindcss/vite": "4.2.1",
+    "@tanstack/react-table": "8.21.3",
+    "@types/node": "20.19.35",
+    "@types/react": "19.2.14",
+    "@types/react-dom": "19.2.3",
+    "@vitejs/plugin-react": "5.1.4",
+    "@vitest/coverage-v8": "4.0.18",
+    "autoprefixer": "10.4.27",
+    "chokidar-cli": "3.0.0",
+    "class-variance-authority": "0.7.1",
+    "clsx": "2.1.1",
+    "concurrently": "^9.2.1",
+    "convex": "1.32.0",
+    "convex-helpers": "0.1.114",
+    "convex-svelte": "^0.0.12",
+    "convex-test": "0.0.41",
+    "cpy-cli": "7.0.0",
+    "creem": "^1.3.6",
+    "eslint": "9.39.3",
+    "eslint-plugin-react": "7.37.5",
+    "eslint-plugin-react-hooks": "7.0.1",
+    "eslint-plugin-react-refresh": "0.5.2",
+    "eslint-plugin-svelte": "^3.15.0",
+    "globals": "17.3.0",
+    "jsdom": "^28.1.0",
+    "lucide-react": "0.575.0",
+    "next-themes": "0.4.6",
+    "path-exists-cli": "2.0.0",
+    "pkg-pr-new": "0.0.65",
+    "postcss": "8.5.6",
+    "prettier": "3.8.1",
+    "react": "19.2.4",
+    "react-dom": "19.2.4",
+    "remeda": "2.33.6",
+    "svelte-eslint-parser": "^1.5.1",
+    "tailwind-merge": "3.5.0",
+    "tailwindcss": "4.2.1",
+    "tw-animate-css": "1.4.0",
+    "typescript": "5.9.3",
+    "typescript-eslint": "8.56.1",
+    "use-debounce": "10.1.0",
+    "vite": "7.3.1",
+    "vitest": "4.0.18",
+    "wrangler": "4.69.0"
+  },
+  "types": "./dist/client/index.d.ts",
+  "module": "./dist/client/index.js",
+  "dependencies": {
+    "@fontsource/inter": "^5.2.8",
+    "buffer": "^6.0.3",
+    "convex-helpers": "^0.1.63",
+    "marked": "^17.0.3",
+    "remeda": "^2.20.2",
+    "standardwebhooks": "^1.0.0"
+  },
+  "scripts": {
+    "dev:react": "concurrently --kill-others --prefix-colors 'blue,yellow,magenta' --names 'frontend,backend,build' 'pnpm dev:frontend:react' 'pnpm dev:backend' 'pnpm dev:build'",
+    "dev:svelte": "concurrently --kill-others --prefix-colors 'blue,yellow,magenta' --names 'frontend,backend,build' 'pnpm dev:frontend:svelte' 'pnpm dev:backend' 'pnpm dev:build'",
+    "dev:backend": "convex dev --typecheck-components",
+    "dev:frontend:react": "cd example-react && vite --clearScreen false",
+    "dev:frontend:svelte": "vite --clearScreen false --config example-svelte/vite.config.ts",
+    "dev:build": "chokidar 'tsconfig*.json' 'src/**/*.ts' 'src/**/*.tsx' 'src/**/*.svelte' -i '**/*.test.ts' -i '**/*.test.tsx' -c 'npx convex codegen --component-dir ./src/component && pnpm build' --initial",
+    "predev": "convex dev --skip-push",
+    "clean": "rm -rf dist *.tsbuildinfo",
+    "build": "tsc --project ./tsconfig.build.json && cpy '**/*.svelte' '../../dist/svelte/' --cwd=src/svelte",
+    "typecheck": "tsc --noEmit && tsc -p example-react && tsc -p example-svelte",
+    "format": "prettier --write .",
+    "lint": "eslint .",
+    "all": "concurrently --kill-others --prefix-colors 'blue,yellow,magenta,cyan' --names 'frontend,backend,build,test' 'pnpm dev:frontend' 'pnpm dev:backend' 'pnpm dev:build' 'pnpm test:watch'",
+    "test": "vitest run --typecheck",
+    "test:watch": "vitest --typecheck --clearScreen false",
+    "test:debug": "vitest --inspect-brk --no-file-parallelism",
+    "test:coverage": "vitest run --coverage --coverage.reporter=text",
+    "preversion": "pnpm clean && pnpm ci && pnpm run build && concurrently --kill-others --names 'test,lint,typecheck' --prefix-colors 'blue,yellow,magenta' 'pnpm test' 'pnpm lint' 'pnpm typecheck'",
+    "alpha": "pnpm version prerelease --preid alpha && pnpm publish --tag alpha && git push --follow-tags",
+    "release": "pnpm version patch && pnpm publish && git push --follow-tags",
+    "version": "vim -c 'normal o' -c 'normal o## '$npm_package_version CHANGELOG.md && prettier -w CHANGELOG.md && git add CHANGELOG.md"
+  }
+}

package/src/client/helpers.test.ts

@@ -0,0 +1,139 @@
+import { describe, it, expect } from "vitest";
+import {
+  getEntityId,
+  lowerCaseHeaders,
+  toHex,
+  constantTimeEqual,
+  normalizeSignature,
+} from "./helpers.js";
+
+describe("getEntityId", () => {
+  it("returns a string value directly", () => {
+    expect(getEntityId("user_123")).toBe("user_123");
+  });
+
+  it("returns null for null/undefined", () => {
+    expect(getEntityId(null)).toBeNull();
+    expect(getEntityId(undefined)).toBeNull();
+  });
+
+  it("extracts id from an object with a string id", () => {
+    expect(getEntityId({ id: "cust_abc" })).toBe("cust_abc");
+  });
+
+  it("returns null for an object with a non-string id", () => {
+    expect(getEntityId({ id: 42 })).toBeNull();
+  });
+
+  it("returns null for an object without id", () => {
+    expect(getEntityId({ name: "test" })).toBeNull();
+  });
+
+  it("returns null for non-object non-string values", () => {
+    expect(getEntityId(42)).toBeNull();
+    expect(getEntityId(true)).toBeNull();
+  });
+
+  it("returns empty string if value is empty string", () => {
+    expect(getEntityId("")).toBe("");
+  });
+});
+
+describe("lowerCaseHeaders", () => {
+  it("lowercases all header keys", () => {
+    const result = lowerCaseHeaders({
+      "Content-Type": "application/json",
+      "X-Custom-Header": "value",
+    });
+    expect(result).toEqual({
+      "content-type": "application/json",
+      "x-custom-header": "value",
+    });
+  });
+
+  it("preserves header values", () => {
+    const result = lowerCaseHeaders({ "Webhook-Signature": "ABC123" });
+    expect(result["webhook-signature"]).toBe("ABC123");
+  });
+
+  it("handles empty object", () => {
+    expect(lowerCaseHeaders({})).toEqual({});
+  });
+
+  it("handles already-lowercase keys", () => {
+    const result = lowerCaseHeaders({ "webhook-id": "123" });
+    expect(result["webhook-id"]).toBe("123");
+  });
+});
+
+describe("toHex", () => {
+  it("converts bytes to hex string", () => {
+    expect(toHex(new Uint8Array([0, 1, 15, 16, 255]))).toBe("00010f10ff");
+  });
+
+  it("returns empty string for empty array", () => {
+    expect(toHex(new Uint8Array([]))).toBe("");
+  });
+
+  it("pads single-digit hex values", () => {
+    expect(toHex(new Uint8Array([0]))).toBe("00");
+    expect(toHex(new Uint8Array([5]))).toBe("05");
+  });
+});
+
+describe("constantTimeEqual", () => {
+  it("returns true for identical strings", () => {
+    expect(constantTimeEqual("abc", "abc")).toBe(true);
+  });
+
+  it("returns false for different strings of same length", () => {
+    expect(constantTimeEqual("abc", "abd")).toBe(false);
+  });
+
+  it("returns false for different lengths", () => {
+    expect(constantTimeEqual("ab", "abc")).toBe(false);
+  });
+
+  it("returns true for empty strings", () => {
+    expect(constantTimeEqual("", "")).toBe(true);
+  });
+
+  it("returns false when one is empty", () => {
+    expect(constantTimeEqual("", "a")).toBe(false);
+  });
+
+  it("handles long hex strings (typical HMAC comparison)", () => {
+    const sig =
+      "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4e5f6a1b2";
+    expect(constantTimeEqual(sig, sig)).toBe(true);
+    const tampered = sig.slice(0, -1) + "0";
+    expect(constantTimeEqual(sig, tampered)).toBe(false);
+  });
+});
+
+describe("normalizeSignature", () => {
+  it("strips sha256= prefix and lowercases", () => {
+    expect(normalizeSignature("sha256=ABCDEF")).toBe("abcdef");
+  });
+
+  it("lowercases when no prefix", () => {
+    expect(normalizeSignature("ABCDEF")).toBe("abcdef");
+  });
+
+  it("trims whitespace", () => {
+    expect(normalizeSignature("  sha256=ABC  ")).toBe("abc");
+  });
+
+  it("handles empty string", () => {
+    expect(normalizeSignature("")).toBe("");
+  });
+
+  it("handles sha256= prefix with mixed case hex", () => {
+    expect(normalizeSignature("sha256=aAbBcC")).toBe("aabbcc");
+  });
+
+  it("does not strip sha256 without = sign", () => {
+    // "sha256abc" should NOT strip anything — the prefix is "sha256="
+    expect(normalizeSignature("sha256abc")).toBe("sha256abc");
+  });
+});

package/src/client/helpers.ts

@@ -0,0 +1,51 @@
+/**
+ * Pure utility functions extracted from the Creem client.
+ * No external dependencies — fully unit-testable.
+ */
+
+/** Extract an entity ID from a string or `{ id: string }` object. Returns `null` if the value is not a valid entity reference. */
+export const getEntityId = (value: unknown): string | null => {
+  if (typeof value === "string") {
+    return value;
+  }
+  if (value && typeof value === "object" && "id" in value) {
+    const id = (value as { id?: unknown }).id;
+    if (typeof id === "string") {
+      return id;
+    }
+  }
+  return null;
+};
+
+/** Lowercase all header keys in a record (for case-insensitive header lookup). */
+export const lowerCaseHeaders = (headers: Record<string, string>) =>
+  Object.fromEntries(
+    Object.entries(headers).map(([key, value]) => [key.toLowerCase(), value]),
+  );
+
+/** Convert a `Uint8Array` to a lowercase hex string. */
+export const toHex = (bytes: Uint8Array) =>
+  Array.from(bytes)
+    .map((value) => value.toString(16).padStart(2, "0"))
+    .join("");
+
+/** Constant-time string comparison to prevent timing attacks on signature verification. */
+export const constantTimeEqual = (a: string, b: string) => {
+  if (a.length !== b.length) {
+    return false;
+  }
+  let result = 0;
+  for (let i = 0; i < a.length; i += 1) {
+    result |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  }
+  return result === 0;
+};
+
+/** Strip the `sha256=` prefix from a webhook signature and lowercase it for comparison. */
+export const normalizeSignature = (signature: string) => {
+  const trimmed = signature.trim();
+  if (trimmed.startsWith("sha256=")) {
+    return trimmed.slice("sha256=".length).toLowerCase();
+  }
+  return trimmed.toLowerCase();
+};