@neta-art/cohub 4.7.1 → 4.8.0

package/dist/chunks/http.d.ts

@@ -275,6 +275,7 @@ declare class WorkRuntimeApi {
   }): Promise<boolean>;
   purchase(input: {
     productKey: string;
+    purchaseAttemptId?: string;
   }): Promise<{
     providerKey: string | null;
     checkoutUrl: string | null;
@@ -1312,6 +1313,7 @@ declare class SpaceCommerceApi {
     name: string;
     description?: string;
     amountUsd: number;
+    cohubBalanceUsd?: number;
     status?: "draft" | "active";
     visibility?: "public" | "private";
   }): Promise<{

package/dist/chunks/websocket.d.ts

@@ -2258,6 +2258,11 @@ type SpaceCommerceProduct = {
     validity: string | null;
     creditBenefits: SpaceCommerceProductCreditBenefit[];
   };
+  cohubBalance: {
+    amountUsd: number;
+    amountMinor: number;
+    policyVersion: string;
+  } | null;
   isDefaultPlan: boolean;
 };
 type SpaceCommerceProductBenefitBinding = {

package/dist/index.d.ts

@@ -112,6 +112,7 @@ declare class CohubClient {
       }) => Promise<WorkCommerceCreditConsumeResponse>;
       purchase: (input: {
         productKey: string;
+        purchaseAttemptId?: string;
       }) => Promise<{
         providerKey: string | null;
         checkoutUrl: string | null;
@@ -157,6 +158,7 @@ type WorkAuthorizeRequest = {
 type WorkPurchaseRequest = {
   requestId: string;
   productKey: string;
+  purchaseAttemptId: string;
 };
 /**
  * Reactive dialog state managed by the core. The host (Svelte or React)

package/dist/index.js

@@ -94,7 +94,7 @@ const getParentOrigin = () => {
 		return null;
 	}
 };
-const generateRequestId = () => globalThis.crypto?.randomUUID?.() ?? `${Date.now()}-${Math.random()}`;
+const generateRequestId = () => globalThis.crypto?.randomUUID?.() ?? `${Date.now()}-${Math.random().toString(36).slice(2)}`;
 /**
 * Bridge-mode transport: posts messages to `window.parent` (the Cohub host
 * embedding the work in an iframe) and listens for the matching reply.
@@ -400,9 +400,11 @@ var WorkRuntimeApi = class {
 		return Boolean(this.token);
 	}
 	async purchase(input) {
+		const purchaseAttemptId = input.purchaseAttemptId?.trim() || generateRequestId();
 		return (await this.transport.request({
 			type: "cohub.work.purchase",
-			productKey: input.productKey
+			productKey: input.productKey,
+			purchaseAttemptId
 		}, { timeoutMs: 12e4 }))?.checkout ?? null;
 	}
 	async checkoutState() {
@@ -830,7 +832,7 @@ function createWorkBridgeCore(config) {
 			sessionStorage.removeItem(pendingPurchaseStorageKey);
 		} catch {}
 	}
-	async function createPurchase(productKey) {
+	async function createPurchase(productKey, purchaseAttemptId) {
 		const userToken = await getAccessToken();
 		if (!userToken) {
 			await config.requestSignIn(typeof location !== "undefined" ? location.pathname + location.search + location.hash : "/");
@@ -842,7 +844,10 @@ function createWorkBridgeCore(config) {
 				Authorization: `Bearer ${userToken}`,
 				"Content-Type": "application/json"
 			},
-			body: JSON.stringify({ productKey })
+			body: JSON.stringify({
+				productKey,
+				purchaseAttemptId
+			})
 		});
 		if (!response.ok) throw new Error((await response.json().catch(() => null))?.message ?? "Purchase failed.");
 		return (await response.json()).checkout ?? null;
@@ -897,9 +902,18 @@ function createWorkBridgeCore(config) {
 					});
 					return;
 				}
+				const purchaseAttemptId = (typeof data.purchaseAttemptId === "string" ? data.purchaseAttemptId.trim() : "") || data.requestId.replace(/[^a-zA-Z0-9_-]/g, "_").slice(0, 128);
+				if (!/^[a-zA-Z0-9_-]{1,128}$/.test(purchaseAttemptId)) {
+					reply(data.requestId, {
+						type: "cohub.work.error",
+						message: "Purchase attempt id is invalid."
+					});
+					return;
+				}
 				state.pendingPurchase = {
 					requestId: data.requestId,
-					productKey
+					productKey,
+					purchaseAttemptId
 				};
 				state.purchaseError = null;
 				state.purchaseOpen = true;
@@ -982,7 +996,7 @@ function createWorkBridgeCore(config) {
 		state.purchaseError = null;
 		notify();
 		try {
-			const checkout = await createPurchase(state.pendingPurchase.productKey);
+			const checkout = await createPurchase(state.pendingPurchase.productKey, state.pendingPurchase.purchaseAttemptId);
 			reply(state.pendingPurchase.requestId, {
 				type: "cohub.work.purchase.result",
 				checkout

package/docs/work-runtime-guide.md

@@ -656,6 +656,10 @@ if (checkoutState.orderId) {
 }
 ```
 
+`purchase()` creates a purchase attempt ID automatically. If application code
+retries the call after a timeout, pass the same `purchaseAttemptId` to ensure
+the retry resolves to the original Billing order.
+
 ---
 
 ## 6. Complete working example

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@neta-art/cohub",
-  "version": "4.7.1",
+  "version": "4.8.0",
   "description": "Cohub SDK for spaces, sessions, boards, and realtime agent collaboration.",
   "license": "Apache-2.0",
   "private": false,