@nextblock-cms/ecom 0.22.2 → 0.22.3

package/lib/freemius-coupons.es.js

@@ -1,44 +1,45 @@
-import { hydrateFreemiusEnvFromDb as e } from "./payment-config.es.js";
-import { readFreemiusEnvValue as t, resolveFreemiusCheckoutCredentials as n } from "./providers/freemius.es.js";
-import { minorUnitAmountToMajor as r } from "@nextblock-cms/utils";
+import { computeFreemiusSaleDiscountPercent as e } from "./freemius-pricing.es.js";
+import { hydrateFreemiusEnvFromDb as t } from "./payment-config.es.js";
+import { readFreemiusEnvValue as n, resolveFreemiusCheckoutCredentials as r } from "./providers/freemius.es.js";
+import { minorUnitAmountToMajor as i } from "@nextblock-cms/utils";
 //#region src/lib/freemius-coupons.ts
-function i(e) {
+function a(e) {
 	if (!e) return null;
 	let t = new Date(e);
 	return Number.isNaN(t.getTime()) ? e : t.toISOString().replace("T", " ").replace(/\.\d{3}Z$/, "");
 }
-function a(e) {
+function o(e) {
 	return e === "percent" ? "percentage" : "dollar";
 }
-function o(e) {
-	return n(e).apiKey || t("FREEMIUS_API_KEY");
+function s(e) {
+	return r(e).apiKey || n("FREEMIUS_API_KEY");
 }
-async function s(t) {
-	await e();
-	let n = o(t.productId);
-	if (!n) throw Error(`Missing Freemius API bearer token for product ${t.productId}. Set FREEMIUS_API_KEY or FREEMIUS_CHECKOUT_PRODUCTS_JSON[${t.productId}].apiKey.`);
-	let r = t.couponId ? `/${t.couponId}` : "", i = await fetch(`https://api.freemius.com/v1/products/${t.productId}/coupons${r}.json`, {
-		method: t.method,
+async function c(e) {
+	await t();
+	let n = s(e.productId);
+	if (!n) throw Error(`Missing Freemius API bearer token for product ${e.productId}. Set FREEMIUS_API_KEY or FREEMIUS_CHECKOUT_PRODUCTS_JSON[${e.productId}].apiKey.`);
+	let r = e.couponId ? `/${e.couponId}` : "", i = await fetch(`https://api.freemius.com/v1/products/${e.productId}/coupons${r}.json`, {
+		method: e.method,
 		headers: {
 			Authorization: `Bearer ${n}`,
 			"Content-Type": "application/json",
 			Accept: "application/json"
 		},
-		body: t.method === "DELETE" ? void 0 : JSON.stringify(t.body || {})
-	}), a = await i.text(), s = a ? JSON.parse(a) : null;
-	if (!i.ok) throw Error(s?.message || s?.error?.message || `Freemius coupon request failed with ${i.status}`);
-	return s;
+		body: e.method === "DELETE" ? void 0 : JSON.stringify(e.body || {})
+	}), a = await i.text(), o = a ? JSON.parse(a) : null;
+	if (!i.ok) throw Error(o?.message || o?.error?.message || `Freemius coupon request failed with ${i.status}`);
+	return o;
 }
-function c(e, t) {
+function l(e, t) {
 	return {
 		code: e.code,
-		discount: e.discount_type === "fixed" ? r(e.discount_amount, "USD") : e.discount_amount,
-		discount_type: a(e.discount_type),
+		discount: e.discount_type === "fixed" ? i(e.discount_amount, "USD") : e.discount_amount,
+		discount_type: o(e.discount_type),
 		plans: t.planIds.length > 0 ? t.planIds.join(",") : null,
 		licenses: null,
 		billing_cycles: null,
-		start_date: i(e.starts_at),
-		end_date: i(e.ends_at),
+		start_date: a(e.starts_at),
+		end_date: a(e.ends_at),
 		redemptions_limit: e.redemption_limit ?? null,
 		has_renewals_discount: !1,
 		has_addons_discount: !1,
@@ -47,7 +48,7 @@ function c(e, t) {
 		user_type: "all"
 	};
 }
-async function l(e, t) {
+async function u(e, t) {
 	if (t.provider_scope === "stripe") return [];
 	let { data: n, error: r } = await e.from("coupon_products").select("product_id").eq("coupon_id", t.id);
 	if (r) throw Error(r.message);
@@ -71,7 +72,7 @@ async function l(e, t) {
 		planIds: [...new Set(e.planIds)]
 	}));
 }
-async function u(e, t) {
+async function d(e, t) {
 	let { data: n } = await e.from("coupon_freemius_mappings").select("sync_status, sync_error").eq("coupon_id", t), r = n || [];
 	if (r.length === 0) {
 		await e.from("coupons").update({
@@ -86,21 +87,21 @@ async function u(e, t) {
 		freemius_sync_error: i?.sync_error ?? null
 	}).eq("id", t);
 }
-async function d(e) {
+async function f(e) {
 	let { data: t, error: n } = await e.client.from("coupons").select("id, code, name, internal_note, provider_scope, discount_type, discount_amount, is_active, starts_at, ends_at, redemption_limit").eq("id", e.couponId).single();
 	if (n || !t) return {
 		success: !1,
 		error: n?.message || "Coupon not found"
 	};
-	let r = t, i = await l(e.client, r);
+	let r = t, i = await u(e.client, r);
 	await e.client.from("coupons").update({
 		freemius_sync_status: i.length > 0 ? "pending" : "not_required",
 		freemius_sync_error: null
 	}).eq("id", r.id);
 	for (let t of i) {
-		let { data: n } = await e.client.from("coupon_freemius_mappings").select("id, freemius_coupon_id").eq("coupon_id", r.id).eq("freemius_product_id", t.freemiusProductId).maybeSingle(), i = c(r, t);
+		let { data: n } = await e.client.from("coupon_freemius_mappings").select("id, freemius_coupon_id").eq("coupon_id", r.id).eq("freemius_product_id", t.freemiusProductId).maybeSingle(), i = l(r, t);
 		try {
-			let a = await s({
+			let a = await c({
 				productId: t.freemiusProductId,
 				method: n?.freemius_coupon_id ? "PUT" : "POST",
 				couponId: n?.freemius_coupon_id ?? null,
@@ -132,111 +133,106 @@ async function d(e) {
 			}, { onConflict: "coupon_id,freemius_product_id" });
 		}
 	}
-	return await u(e.client, r.id), {
+	return await d(e.client, r.id), {
 		success: !0,
 		targetCount: i.length
 	};
 }
-function f(e) {
+function p(e) {
 	let t = (e.sku || "").toUpperCase().replace(/[^A-Z0-9]/g, "");
 	return t ? `SALE${t}`.slice(0, 32) : `SALE${e.productId.replace(/[^A-Za-z0-9]/g, "").toUpperCase()}`.slice(0, 32);
 }
-function p(e, t) {
-	if (typeof e != "number" || e <= 0 || typeof t != "number" || t < 0 || t >= e) return null;
-	let n = Math.round((1 - t / e) * 100);
-	return n <= 0 || n > 100 ? null : n;
-}
-async function m(e) {
-	let { data: t, error: n } = await e.client.from("products").select("id, sku, price, sale_price, sale_start_at, sale_end_at, payment_provider, freemius_product_id, freemius_plan_id").eq("id", e.productId).maybeSingle();
-	if (n || !t) return {
+async function m(t) {
+	let { data: n, error: r } = await t.client.from("products").select("id, sku, price, sale_price, sale_start_at, sale_end_at, payment_provider, freemius_product_id, freemius_plan_id").eq("id", t.productId).maybeSingle();
+	if (r || !n) return {
 		success: !1,
-		error: n?.message || "Product not found"
+		error: r?.message || "Product not found"
 	};
-	let r = t, i = String(r.freemius_product_id || "").trim();
-	if (r.payment_provider !== "freemius" || !i) return {
+	let i = n, a = String(i.freemius_product_id || "").trim();
+	if (i.payment_provider !== "freemius" || !a) return {
 		success: !0,
 		skipped: !0,
 		reason: "not_a_freemius_product"
 	};
-	let a = p(r.price, r.sale_price), o = a !== null, { data: l } = await e.client.from("product_freemius_sale_coupons").select("id, freemius_coupon_id, freemius_coupon_code, discount_percent, is_active").eq("product_id", r.id).maybeSingle();
-	if (!o && !l?.freemius_coupon_id) return l?.id && await e.client.from("product_freemius_sale_coupons").update({
+	let o = e(i.price, i.sale_price), s = o !== null, { data: u } = await t.client.from("product_freemius_sale_coupons").select("id, freemius_coupon_id, freemius_coupon_code, discount_percent, is_active").eq("product_id", i.id).maybeSingle();
+	if (!s && !u?.freemius_coupon_id) return u?.id && await t.client.from("product_freemius_sale_coupons").update({
 		is_active: !1,
 		updated_at: (/* @__PURE__ */ new Date()).toISOString()
-	}).eq("id", l.id), {
+	}).eq("id", u.id), {
 		success: !0,
 		active: !1
 	};
-	let u = l?.freemius_coupon_code || f({
-		sku: r.sku,
-		productId: r.id
-	}), d = r.freemius_plan_id ? [String(r.freemius_plan_id)] : [], m = a ?? l?.discount_percent ?? 1, h = c({
-		id: r.id,
-		code: u,
-		name: `Scheduled sale ${r.sku || r.id}`,
+	let d = u?.freemius_coupon_code || p({
+		sku: i.sku,
+		productId: i.id
+	}), f = i.freemius_plan_id ? [String(i.freemius_plan_id)] : [], m = o ?? u?.discount_percent ?? 1, h = l({
+		id: i.id,
+		code: d,
+		name: `Scheduled sale ${i.sku || i.id}`,
 		provider_scope: "freemius",
 		discount_type: "percent",
 		discount_amount: m,
-		is_active: o,
-		starts_at: r.sale_start_at,
-		ends_at: r.sale_end_at,
+		is_active: s,
+		starts_at: i.sale_start_at,
+		ends_at: i.sale_end_at,
 		redemption_limit: null
 	}, {
-		freemiusProductId: i,
-		productId: r.id,
-		planIds: d
+		freemiusProductId: a,
+		productId: i.id,
+		planIds: f
 	});
 	try {
-		let t = await s({
-			productId: i,
-			method: l?.freemius_coupon_id ? "PUT" : "POST",
-			couponId: l?.freemius_coupon_id ?? null,
+		let e = await c({
+			productId: a,
+			method: u?.freemius_coupon_id ? "PUT" : "POST",
+			couponId: u?.freemius_coupon_id ?? null,
 			body: h
-		}), n = t?.coupon ?? t;
-		return await e.client.from("product_freemius_sale_coupons").upsert({
-			id: l?.id,
-			product_id: r.id,
-			freemius_product_id: i,
-			freemius_plan_id: r.freemius_plan_id ? String(r.freemius_plan_id) : null,
-			freemius_coupon_id: n?.id ? String(n.id) : l?.freemius_coupon_id ?? null,
-			freemius_coupon_code: u,
-			discount_percent: a,
-			starts_at: r.sale_start_at,
-			ends_at: r.sale_end_at,
-			is_active: o,
+		}), n = e?.coupon ?? e;
+		return await t.client.from("product_freemius_sale_coupons").upsert({
+			id: u?.id,
+			product_id: i.id,
+			freemius_product_id: a,
+			freemius_plan_id: i.freemius_plan_id ? String(i.freemius_plan_id) : null,
+			freemius_coupon_id: n?.id ? String(n.id) : u?.freemius_coupon_id ?? null,
+			freemius_coupon_code: d,
+			discount_percent: o,
+			starts_at: i.sale_start_at,
+			ends_at: i.sale_end_at,
+			is_active: s,
 			sync_status: "synced",
 			sync_error: null,
-			remote_payload: t,
+			remote_payload: e,
 			last_synced_at: (/* @__PURE__ */ new Date()).toISOString()
 		}, { onConflict: "product_id" }), {
 			success: !0,
-			active: o,
-			code: u
+			active: s,
+			code: d
 		};
-	} catch (t) {
-		return await e.client.from("product_freemius_sale_coupons").upsert({
-			id: l?.id,
-			product_id: r.id,
-			freemius_product_id: i,
-			freemius_plan_id: r.freemius_plan_id ? String(r.freemius_plan_id) : null,
-			freemius_coupon_id: l?.freemius_coupon_id ?? null,
-			freemius_coupon_code: u,
-			discount_percent: a,
-			starts_at: r.sale_start_at,
-			ends_at: r.sale_end_at,
-			is_active: o,
+	} catch (e) {
+		return await t.client.from("product_freemius_sale_coupons").upsert({
+			id: u?.id,
+			product_id: i.id,
+			freemius_product_id: a,
+			freemius_plan_id: i.freemius_plan_id ? String(i.freemius_plan_id) : null,
+			freemius_coupon_id: u?.freemius_coupon_id ?? null,
+			freemius_coupon_code: d,
+			discount_percent: o,
+			starts_at: i.sale_start_at,
+			ends_at: i.sale_end_at,
+			is_active: s,
 			sync_status: "failed",
-			sync_error: t.message || "Freemius sale coupon sync failed",
+			sync_error: e.message || "Freemius sale coupon sync failed",
 			last_synced_at: (/* @__PURE__ */ new Date()).toISOString()
 		}, { onConflict: "product_id" }), {
 			success: !1,
-			error: t.message || "Freemius sale coupon sync failed"
+			error: e.message || "Freemius sale coupon sync failed"
 		};
 	}
 }
 async function h(e) {
 	let { data: t } = await e.client.from("coupon_freemius_mappings").select("id, freemius_product_id, freemius_coupon_id").eq("coupon_id", e.couponId).not("freemius_coupon_id", "is", null);
 	for (let n of t || []) try {
-		await s({
+		await c({
 			productId: n.freemius_product_id,
 			couponId: n.freemius_coupon_id,
 			method: "DELETE"
@@ -254,4 +250,4 @@ async function h(e) {
 	}
 }
 //#endregion
-export { h as deleteCouponFromFreemius, d as syncCouponToFreemius, m as syncProductSaleCouponToFreemius };
+export { h as deleteCouponFromFreemius, f as syncCouponToFreemius, m as syncProductSaleCouponToFreemius };

package/lib/freemius-license-claim.cjs

@@ -1 +1 @@
-const e=require("./payment-config.cjs"),t=require("./providers/freemius.cjs");let n=require("@freemius/sdk");var r=20,i=`This license cannot be claimed automatically. Use the key from your purchase email.`;function a(e){if(!e||typeof e!=`string`)return null;let t=e.trim(),n=/(?:z|[+-]\d{2}:?\d{2})$/i.test(t)?t:`${t.replace(` `,`T`)}Z`,r=Date.parse(n);return Number.isFinite(r)?r:null}function o(e,t){return e==null||t==null?!1:String(e).trim()===String(t).trim()}function s(e){return(e??``).trim().toLowerCase()}function c(e){let{license:t,request:n,user:r}=e,i=e.maxAgeMinutes??20,c=(e.now??new Date).getTime();if(!t||!o(t.id,n.licenseId))return{ok:!1,reason:`license_not_found`};let l=a(t.created);return l===null||c-l>i*6e4||l-c>3e5?{ok:!1,reason:`too_old`}:o(t.plugin_id,n.productId)?t.is_cancelled?{ok:!1,reason:`cancelled`}:!n.userId?.trim()||!o(t.user_id,n.userId)?{ok:!1,reason:`user_mismatch`}:!r||!s(n.email)||s(r.email)!==s(n.email)?{ok:!1,reason:`email_mismatch`}:typeof t.activated==`number`&&t.activated>0?{ok:!1,reason:`already_activated`}:t.secret_key?{ok:!0}:{ok:!1,reason:`no_key`}:{ok:!1,reason:`product_mismatch`}}async function l(r,a){await e.hydrateFreemiusEnvFromDb();let o=t.resolveFreemiusCheckoutCredentials(r.productId);if(!o.apiKey||!o.secretKey||!o.publicKey)return{error:`The license service is not configured for this product.`,ok:!1,reason:`not_configured`,status:503};let s=new n.Freemius({apiKey:o.apiKey,productId:Number(r.productId),publicKey:o.publicKey,secretKey:o.secretKey}),l=null,u=null;try{l=await s.api.license.retrieve(r.licenseId),l?.user_id!==null&&l?.user_id!==void 0&&(u=await s.api.user.retrieve(String(l.user_id)))}catch(e){return console.error(`[Freemius License Claim] Freemius lookup failed:`,e),{error:`Freemius could not be reached to verify the license.`,ok:!1,reason:`upstream_error`,status:502}}let d=c({license:l,maxAgeMinutes:a?.maxAgeMinutes,now:a?.now,request:r,user:u});return d.ok?{expiration:l?.expiration??null,licenseKey:String(l?.secret_key),ok:!0,planId:l?.plan_id!==null&&l?.plan_id!==void 0?String(l.plan_id):null}:{error:i,ok:!1,reason:d.reason,status:403}}exports.FREEMIUS_LICENSE_CLAIM_MAX_AGE_MINUTES=r,exports.FREEMIUS_LICENSE_CLAIM_REFUSED_MESSAGE=i,exports.claimFreemiusLicenseKey=l,exports.evaluateFreemiusLicenseClaim=c,exports.parseFreemiusTimestamp=a;
+const e=require("./payment-config.cjs"),t=require("./providers/freemius.cjs");let n=require("@freemius/sdk");var r=20,i=`This license cannot be claimed automatically. Use the key from your purchase email.`;function a(e){if(!e||typeof e!=`string`)return null;let t=e.trim(),n=/(?:z|[+-]\d{2}:?\d{2})$/i.test(t)?t:`${t.replace(` `,`T`)}Z`,r=Date.parse(n);return Number.isFinite(r)?r:null}function o(e,t){return e==null||t==null?!1:String(e).trim()===String(t).trim()}function s(e){return(e??``).trim().toLowerCase()}function c(e){let{license:t,request:n,user:r}=e,i=e.maxAgeMinutes??20,c=(e.now??new Date).getTime();if(!t||!o(t.id,n.licenseId))return{ok:!1,reason:`license_not_found`};let l=a(t.created);return l===null||c-l>i*6e4||l-c>3e5?{ok:!1,reason:`too_old`}:o(t.plugin_id,n.productId)?t.is_cancelled?{ok:!1,reason:`cancelled`}:!n.userId?.trim()||!o(t.user_id,n.userId)?{ok:!1,reason:`user_mismatch`}:!r||!s(n.email)||s(r.email)!==s(n.email)?{ok:!1,reason:`email_mismatch`}:typeof t.activated==`number`&&t.activated>0?{ok:!1,reason:`already_activated`}:t.secret_key?{ok:!0}:{ok:!1,reason:`no_key`}:{ok:!1,reason:`product_mismatch`}}async function l(r,i){await e.hydrateFreemiusEnvFromDb();let a=t.resolveFreemiusCheckoutCredentials(r);if(!a.apiKey||!a.secretKey||!a.publicKey)return{ok:!1,reason:`not_configured`};let o=new n.Freemius({apiKey:a.apiKey,productId:Number(r),publicKey:a.publicKey,secretKey:a.secretKey});try{let e=await o.api.license.retrieve(i),t=null;return e?.user_id!==null&&e?.user_id!==void 0&&(t=await o.api.user.retrieve(String(e.user_id))),{license:e,ok:!0,user:t}}catch(e){return console.error(`[Freemius License] Freemius lookup failed:`,e),{ok:!1,reason:`upstream_error`}}}async function u(e,t){let n=await l(e.productId,e.licenseId);if(!n.ok)return n.reason===`not_configured`?{error:`The license service is not configured for this product.`,ok:!1,reason:`not_configured`,status:503}:{error:`Freemius could not be reached to verify the license.`,ok:!1,reason:`upstream_error`,status:502};let{license:r,user:a}=n,o=c({license:r,maxAgeMinutes:t?.maxAgeMinutes,now:t?.now,request:e,user:a});return o.ok?{expiration:r?.expiration??null,licenseKey:String(r?.secret_key),ok:!0,planId:r?.plan_id!==null&&r?.plan_id!==void 0?String(r.plan_id):null}:{error:i,ok:!1,reason:o.reason,status:403}}exports.FREEMIUS_LICENSE_CLAIM_MAX_AGE_MINUTES=r,exports.FREEMIUS_LICENSE_CLAIM_REFUSED_MESSAGE=i,exports.claimFreemiusLicenseKey=u,exports.evaluateFreemiusLicenseClaim=c,exports.parseFreemiusTimestamp=a,exports.retrieveFreemiusLicenseRecords=l;

package/lib/freemius-license-claim.d.ts

@@ -83,6 +83,19 @@ export type FreemiusLicenseClaimResult = {
     reason: FreemiusLicenseClaimRejection | 'not_configured' | 'upstream_error';
     status: number;
 };
+export type FreemiusLicenseRecords = {
+    license: FreemiusLicenseRecordLike | null;
+    ok: true;
+    user: FreemiusUserRecordLike | null;
+} | {
+    ok: false;
+    reason: 'not_configured' | 'upstream_error';
+};
+/**
+ * The license and its owner as Freemius reports them, read with the vendor credentials for
+ * `productId`. Credentials come from the CMS settings (hydrated here) or the environment.
+ */
+export declare function retrieveFreemiusLicenseRecords(productId: string, licenseId: string): Promise<FreemiusLicenseRecords>;
 /**
  * Look the license up with the vendor credentials for `productId` and return its key
  * when `evaluateFreemiusLicenseClaim` accepts the claim.

package/lib/freemius-license-claim.es.js

@@ -44,49 +44,64 @@ function c(e) {
 		reason: "product_mismatch"
 	};
 }
-async function l(r, a) {
+async function l(r, i) {
 	await e();
-	let o = t(r.productId);
-	if (!o.apiKey || !o.secretKey || !o.publicKey) return {
-		error: "The license service is not configured for this product.",
+	let a = t(r);
+	if (!a.apiKey || !a.secretKey || !a.publicKey) return {
 		ok: !1,
-		reason: "not_configured",
-		status: 503
+		reason: "not_configured"
 	};
-	let s = new n({
-		apiKey: o.apiKey,
-		productId: Number(r.productId),
-		publicKey: o.publicKey,
-		secretKey: o.secretKey
-	}), l = null, u = null;
+	let o = new n({
+		apiKey: a.apiKey,
+		productId: Number(r),
+		publicKey: a.publicKey,
+		secretKey: a.secretKey
+	});
 	try {
-		l = await s.api.license.retrieve(r.licenseId), l?.user_id !== null && l?.user_id !== void 0 && (u = await s.api.user.retrieve(String(l.user_id)));
+		let e = await o.api.license.retrieve(i), t = null;
+		return e?.user_id !== null && e?.user_id !== void 0 && (t = await o.api.user.retrieve(String(e.user_id))), {
+			license: e,
+			ok: !0,
+			user: t
+		};
 	} catch (e) {
-		return console.error("[Freemius License Claim] Freemius lookup failed:", e), {
-			error: "Freemius could not be reached to verify the license.",
+		return console.error("[Freemius License] Freemius lookup failed:", e), {
 			ok: !1,
-			reason: "upstream_error",
-			status: 502
+			reason: "upstream_error"
 		};
 	}
-	let d = c({
-		license: l,
-		maxAgeMinutes: a?.maxAgeMinutes,
-		now: a?.now,
-		request: r,
-		user: u
+}
+async function u(e, t) {
+	let n = await l(e.productId, e.licenseId);
+	if (!n.ok) return n.reason === "not_configured" ? {
+		error: "The license service is not configured for this product.",
+		ok: !1,
+		reason: "not_configured",
+		status: 503
+	} : {
+		error: "Freemius could not be reached to verify the license.",
+		ok: !1,
+		reason: "upstream_error",
+		status: 502
+	};
+	let { license: r, user: a } = n, o = c({
+		license: r,
+		maxAgeMinutes: t?.maxAgeMinutes,
+		now: t?.now,
+		request: e,
+		user: a
 	});
-	return d.ok ? {
-		expiration: l?.expiration ?? null,
-		licenseKey: String(l?.secret_key),
+	return o.ok ? {
+		expiration: r?.expiration ?? null,
+		licenseKey: String(r?.secret_key),
 		ok: !0,
-		planId: l?.plan_id !== null && l?.plan_id !== void 0 ? String(l.plan_id) : null
+		planId: r?.plan_id !== null && r?.plan_id !== void 0 ? String(r.plan_id) : null
 	} : {
 		error: i,
 		ok: !1,
-		reason: d.reason,
+		reason: o.reason,
 		status: 403
 	};
 }
 //#endregion
-export { r as FREEMIUS_LICENSE_CLAIM_MAX_AGE_MINUTES, i as FREEMIUS_LICENSE_CLAIM_REFUSED_MESSAGE, l as claimFreemiusLicenseKey, c as evaluateFreemiusLicenseClaim, a as parseFreemiusTimestamp };
+export { r as FREEMIUS_LICENSE_CLAIM_MAX_AGE_MINUTES, i as FREEMIUS_LICENSE_CLAIM_REFUSED_MESSAGE, u as claimFreemiusLicenseKey, c as evaluateFreemiusLicenseClaim, a as parseFreemiusTimestamp, l as retrieveFreemiusLicenseRecords };

package/lib/freemius-license.cjs

@@ -1 +1 @@
-const e=require("./payment-config.cjs"),t=require("./providers/freemius.cjs");let n=require("@freemius/sdk");async function r(e,r){if(!e)return null;let i=t.resolveFreemiusCheckoutCredentials(e);return!i.apiKey||!i.secretKey||!i.publicKey?null:new n.Freemius({productId:Number(e),apiKey:i.apiKey,secretKey:i.secretKey,publicKey:i.publicKey}).api.license.retrieve(r)}async function i(t){let{data:n,error:i}=await t.client.from(`orders`).select(`id, provider, freemius_product_id, freemius_license_id, freemius_trial_ends_at`).eq(`id`,t.orderId).maybeSingle();if(i||!n||n.provider!==`freemius`||!n.freemius_license_id)return null;let a=null;try{await e.hydrateFreemiusEnvFromDb(),a=await r(n.freemius_product_id,String(n.freemius_license_id))}catch(e){console.error(`[Freemius License] Failed to retrieve license key:`,e)}return{licenseId:String(n.freemius_license_id),licenseKey:a?.secret_key??null,planId:a?.plan_id==null?null:String(a.plan_id),expiration:a?.expiration??null,trialEndsAt:n.freemius_trial_ends_at??null,isCancelled:!!a?.is_cancelled}}exports.getFreemiusOrderLicense=i;
+const e=require("./payment-config.cjs"),t=require("./providers/freemius.cjs"),n=require("./freemius-license-claim.cjs");let r=require("@freemius/sdk");async function i(e,n){if(!e)return null;let i=t.resolveFreemiusCheckoutCredentials(e);return!i.apiKey||!i.secretKey||!i.publicKey?null:new r.Freemius({productId:Number(e),apiKey:i.apiKey,secretKey:i.secretKey,publicKey:i.publicKey}).api.license.retrieve(n)}async function a(t){let{data:r,error:a}=await t.client.from(`orders`).select(`id, provider, created_at, freemius_product_id, freemius_license_id, freemius_trial_ends_at`).eq(`id`,t.orderId).maybeSingle();if(a||!r||r.provider!==`freemius`||!r.freemius_license_id)return null;let o=null;try{await e.hydrateFreemiusEnvFromDb(),o=await i(r.freemius_product_id,String(r.freemius_license_id))}catch(e){console.error(`[Freemius License] Failed to retrieve license key:`,e)}let s=r.created_at?Date.parse(r.created_at):NaN,c=n.parseFreemiusTimestamp(o?.created),l=!!o&&String(o?.plugin_id??``)===String(r.freemius_product_id??``)&&Number.isFinite(s)&&c!==null&&c>=s-3e5;return o&&!l&&console.warn(`[Freemius License] Not revealing license ${r.freemius_license_id} on order ${r.id}: product or creation time does not match the order`),{licenseId:String(r.freemius_license_id),licenseKey:l?o?.secret_key??null:null,planId:o?.plan_id==null?null:String(o.plan_id),expiration:o?.expiration??null,trialEndsAt:r.freemius_trial_ends_at??null,isCancelled:!!o?.is_cancelled}}exports.getFreemiusOrderLicense=a;

package/lib/freemius-license.es.js

@@ -1,34 +1,36 @@
 import { hydrateFreemiusEnvFromDb as e } from "./payment-config.es.js";
 import { resolveFreemiusCheckoutCredentials as t } from "./providers/freemius.es.js";
-import { Freemius as n } from "@freemius/sdk";
+import { parseFreemiusTimestamp as n } from "./freemius-license-claim.es.js";
+import { Freemius as r } from "@freemius/sdk";
 //#region src/lib/freemius-license.ts
-async function r(e, r) {
+async function i(e, n) {
 	if (!e) return null;
 	let i = t(e);
-	return !i.apiKey || !i.secretKey || !i.publicKey ? null : new n({
+	return !i.apiKey || !i.secretKey || !i.publicKey ? null : new r({
 		productId: Number(e),
 		apiKey: i.apiKey,
 		secretKey: i.secretKey,
 		publicKey: i.publicKey
-	}).api.license.retrieve(r);
+	}).api.license.retrieve(n);
 }
-async function i(t) {
-	let { data: n, error: i } = await t.client.from("orders").select("id, provider, freemius_product_id, freemius_license_id, freemius_trial_ends_at").eq("id", t.orderId).maybeSingle();
-	if (i || !n || n.provider !== "freemius" || !n.freemius_license_id) return null;
-	let a = null;
+async function a(t) {
+	let { data: r, error: a } = await t.client.from("orders").select("id, provider, created_at, freemius_product_id, freemius_license_id, freemius_trial_ends_at").eq("id", t.orderId).maybeSingle();
+	if (a || !r || r.provider !== "freemius" || !r.freemius_license_id) return null;
+	let o = null;
 	try {
-		await e(), a = await r(n.freemius_product_id, String(n.freemius_license_id));
+		await e(), o = await i(r.freemius_product_id, String(r.freemius_license_id));
 	} catch (e) {
 		console.error("[Freemius License] Failed to retrieve license key:", e);
 	}
-	return {
-		licenseId: String(n.freemius_license_id),
-		licenseKey: a?.secret_key ?? null,
-		planId: a?.plan_id == null ? null : String(a.plan_id),
-		expiration: a?.expiration ?? null,
-		trialEndsAt: n.freemius_trial_ends_at ?? null,
-		isCancelled: !!a?.is_cancelled
+	let s = r.created_at ? Date.parse(r.created_at) : NaN, c = n(o?.created), l = !!o && String(o?.plugin_id ?? "") === String(r.freemius_product_id ?? "") && Number.isFinite(s) && c !== null && c >= s - 3e5;
+	return o && !l && console.warn(`[Freemius License] Not revealing license ${r.freemius_license_id} on order ${r.id}: product or creation time does not match the order`), {
+		licenseId: String(r.freemius_license_id),
+		licenseKey: l ? o?.secret_key ?? null : null,
+		planId: o?.plan_id == null ? null : String(o.plan_id),
+		expiration: o?.expiration ?? null,
+		trialEndsAt: r.freemius_trial_ends_at ?? null,
+		isCancelled: !!o?.is_cancelled
 	};
 }
 //#endregion
-export { i as getFreemiusOrderLicense };
+export { a as getFreemiusOrderLicense };

package/lib/freemius-order-sync.cjs

@@ -1 +1 @@
-const e=require("../_virtual/_rolldown/runtime.cjs"),t=require("./providers/freemius.cjs"),n=require("./order-inventory.cjs"),r=require("./invoice-server.cjs");let i=require("@supabase/supabase-js"),a=require("crypto");a=e.__toESM(a,1);let o=require("@freemius/sdk");function s(e){return e==null||e===``?null:String(e)}function c(e){let t=s(e);if(!t)return null;let n=t.includes(`T`)?t:t.replace(` `,`T`)+`Z`,r=new Date(n);return Number.isNaN(r.getTime())?t:r.toISOString()}function l(e){if(e==null||e===``)return null;let t=Number(e);return Number.isFinite(t)?t:null}function u(...e){return e.some(e=>{let t=l(e);return t!==null&&t>0})}function d(e){return e===`pending`||e===`trial`}function f(e){return[`license.cancelled`,`license.deleted`,`license.expired`,`subscription.cancelled`,`subscription.renewal.failed.last`,`trial.cancelled`,`trial.expired`].includes(e||``)}function p(e,t){return e===`license.extended`&&(t?.is_renewal===!0||t?.is_renewal===1||t?.is_renewal===`1`||t?.is_renewal===`true`)}function m(e){let t=e.objects?.payment??e.data?.payment??e.data;return e.type===`payment.created`&&u(t?.gross,t?.total_gross,t?.amount,t?.initial_amount)}function h(e){let t=e?.purchase??null,n=e?.trial??null;return{freemius_product_id:s(t?.plugin_id)??s(t?.product_id)??s(t?.productId)??s(n?.plugin_id)??s(n?.product_id)??s(n?.productId),freemius_plan_id:s(t?.plan_id)??s(t?.planId),freemius_license_id:s(t?.license_id)??s(t?.licenseId)??s(n?.license_id)??s(n?.licenseId),freemius_subscription_id:s(t?.subscription_id)??s(t?.subscriptionId)??s(n?.subscription_id)??s(n?.subscriptionId),freemius_trial_id:s(n?.id),freemius_user_id:s(t?.user_id)??s(t?.userId)??s(n?.user_id)??s(n?.userId)??s(e?.user?.id),freemius_trial_ends_at:c(n?.trial_ends_at)??c(n?.trialEndsAt)??c(t?.trial_ends)??c(t?.trialEnds)}}function g(e,t=`pending`){let n=e?.purchase??null,r=e?.trial??null;return t===`paid`?`paid`:r&&(r.canceled_at||r.canceledAt)&&d(t)?`cancelled`:r?`trial`:n?(n.canceled_at||n.canceledAt)&&d(t)?`cancelled`:u(n.initial_amount,n.initialAmount,n.gross,n.total_gross,n.totalGross)?`paid`:n.trial_ends||n.trialEnds||n.subscription_id||n.subscriptionId?`trial`:t:t}function _(e){let{event:t,currentStatus:n,purchaseData:r}=e;return n===`paid`&&f(t.type)?`paid`:f(t.type)?d(n)?`cancelled`:n:m(t)||p(t.type,t.data)||r&&u(r.initialAmount,r.initial_amount,r.gross,r.totalGross,r.total_gross)?`paid`:r?.canceled===!0&&d(n)?`cancelled`:n===`pending`&&(r?.trialEndsAt||r?.trial_ends_at||r?.trialEnds||r?.trial_ends)||(r?.subscriptionId||r?.subscription_id||t.type===`subscription.created`||t.type===`license.created`)&&n===`pending`?`trial`:n}function v(e,...t){let n=t.filter(e=>!!e);return e===`paid`||n.includes(`paid`)?`paid`:n.includes(`cancelled`)?`cancelled`:n.includes(`trial`)?`trial`:n.includes(`shipped`)?`shipped`:n.includes(`refunded`)?`refunded`:e}function y(e,t){let n={freemius_last_event_type:t,freemius_last_synced_at:new Date().toISOString()};for(let[t,r]of Object.entries(e))r!=null&&r!==``&&(n[t]=r);return n}function b(){let e=process.env.NEXT_PUBLIC_SUPABASE_URL||process.env.SUPABASE_URL,t=process.env.SUPABASE_SERVICE_ROLE_KEY||process.env.SUPABASE_SECRET_KEY;if(!e||!t)throw Error(`Missing Supabase Service Role environment variables`);return(0,i.createClient)(e,t,{auth:{autoRefreshToken:!1,persistSession:!1}})}async function x(e,t){let{data:n,error:r}=await e.from(`orders`).select(`id, status, provider, freemius_product_id, freemius_plan_id, freemius_license_id, freemius_subscription_id, freemius_trial_id, freemius_user_id, freemius_trial_ends_at`).eq(`id`,t).single();if(r||!n)throw Error(r?.message||`Order not found`);return n}async function S(e,t){let{data:n,error:r}=await e.from(`orders`).select(`id, status, provider, freemius_product_id, freemius_plan_id, freemius_license_id, freemius_subscription_id, freemius_trial_id, freemius_user_id, freemius_trial_ends_at`).eq(`freemius_license_id`,t).order(`created_at`,{ascending:!1}).limit(1).maybeSingle();if(r)throw Error(r.message);return n??null}async function C(e){let t=y(e.metadata,e.eventType),i=e.order.status,a=i===`paid`&&e.nextStatus!==`paid`?`paid`:e.nextStatus;a!==i&&(t.status=a);let{error:o}=await e.client.from(`orders`).update(t).eq(`id`,e.order.id);if(o)throw Error(o.message);return a===`paid`&&i!==`paid`&&(await r.assignInvoiceMetadata({orderId:e.order.id,client:e.client}),await n.applyOrderInventoryDeduction(e.client,e.order.id)),a}async function w(e){let t=e.client??b(),n=await x(t,e.orderId);if(n.provider!==`freemius`)return{success:!1,error:`Only Freemius orders can be synced from Freemius checkout`};let r=h(e.checkoutResponse),i=null;if(r.freemius_license_id)try{i=await D(r.freemius_product_id??n.freemius_product_id,r.freemius_license_id)}catch(e){console.error(`[Freemius Checkout Sync] Failed to retrieve purchase data:`,e)}let a={type:`checkout.purchaseCompleted`,data:{license_id:r.freemius_license_id},objects:{}},o={...r,...E(a,i)},s=g(e.checkoutResponse,n.status),c=i?_({event:a,currentStatus:n.status,purchaseData:i}):null,l=s===`paid`?n.status:s,u=await C({client:t,order:n,nextStatus:v(n.status,l,c),metadata:o,eventType:`checkout.purchaseCompleted`});return{success:!0,orderId:n.id,status:u,metadata:o}}function T(e){return s(e.data?.license_id)??s(e.objects?.license?.id)??s(e.objects?.subscription?.license_id)??s(e.objects?.payment?.license_id)??s(e.data?.payment?.license_id)}function E(e,t){let n=e.objects?.license,r=e.objects?.subscription,i=e.objects?.trial,a=e.objects?.payment??e.data?.payment;return{freemius_product_id:s(t?.productId)??s(t?.product_id)??s(n?.plugin_id)??s(r?.plugin_id)??s(a?.plugin_id),freemius_plan_id:s(t?.planId)??s(t?.plan_id)??s(n?.plan_id),freemius_license_id:s(t?.licenseId)??s(t?.license_id)??T(e),freemius_subscription_id:s(t?.subscriptionId)??s(t?.subscription_id)??s(r?.id)??s(e.data?.subscription_id),freemius_trial_id:s(i?.id)??s(e.data?.trial_id),freemius_user_id:s(t?.userId)??s(t?.user_id)??s(e.objects?.user?.id),freemius_trial_ends_at:c(i?.trial_ends_at)??c(i?.trial_ends)??c(n?.trial_ends)??c(t?.trialEndsAt)??c(t?.trial_ends_at)}}async function D(e,n){if(!e)return null;let r=t.resolveFreemiusCheckoutCredentials(e);return!r.apiKey||!r.secretKey||!r.publicKey?null:new o.Freemius({productId:Number(e),apiKey:r.apiKey,secretKey:r.secretKey,publicKey:r.publicKey}).purchase.retrievePurchaseData(n)}async function O(e){let t=e.client??b(),n=T(e.event);if(!n)return{success:!0,ignored:!0,reason:`missing_license_id`,type:e.event.type};let r=await S(t,n);if(!r)return{success:!0,ignored:!0,reason:`unknown_license_id`,licenseId:n,type:e.event.type};let i=null;try{i=await D(r.freemius_product_id??e.event.objects?.license?.plugin_id,n)}catch(e){console.error(`[Freemius Sync] Failed to retrieve purchase data:`,e)}let a=E(e.event,i),o=await C({client:t,order:r,nextStatus:_({event:e.event,currentStatus:r.status,purchaseData:i}),metadata:a,eventType:e.event.type??null});return{success:!0,orderId:r.id,status:o,type:e.event.type}}function k(){let e=[t.readFreemiusEnvValue(`FREEMIUS_SECRET_KEY`),t.readFreemiusEnvValue(`FREEMIUS_ECOMMERCE_SANDBOX_SECRET_KEY`),...Object.values(t.parseFreemiusCheckoutCredentialsMap()??{}).map(e=>e.secretKey??null)];return Array.from(new Set(e.filter(e=>!!e)))}function A(e,t){return t?k().some(n=>{let r=a.default.createHmac(`sha256`,n).update(e).digest(`hex`);try{return a.default.timingSafeEqual(Buffer.from(r,`hex`),Buffer.from(t,`hex`))}catch{return!1}}):!1}exports.extractFreemiusCheckoutMetadata=h,exports.getFreemiusWebhookSecretCandidates=k,exports.resolveFreemiusStatusFromCheckoutResponse=g,exports.resolveFreemiusStatusFromWebhookEvent=_,exports.syncFreemiusCheckoutOrder=w,exports.syncFreemiusOrderFromWebhookEvent=O,exports.verifyFreemiusWebhookSignature=A;
+const e=require("../_virtual/_rolldown/runtime.cjs"),t=require("./providers/freemius.cjs"),n=require("./order-inventory.cjs"),r=require("./invoice-server.cjs"),i=require("./freemius-license-claim.cjs");require("server-only");let a=require("@supabase/supabase-js"),o=require("crypto");o=e.__toESM(o,1);let s=require("@freemius/sdk");function c(e){return e==null||e===``?null:String(e)}function l(e){let t=c(e);if(!t)return null;let n=t.includes(`T`)?t:t.replace(` `,`T`)+`Z`,r=new Date(n);return Number.isNaN(r.getTime())?t:r.toISOString()}function u(e){if(e==null||e===``)return null;let t=Number(e);return Number.isFinite(t)?t:null}function d(...e){return e.some(e=>{let t=u(e);return t!==null&&t>0})}function f(e){return e===`pending`||e===`trial`}function p(e){return[`license.cancelled`,`license.deleted`,`license.expired`,`subscription.cancelled`,`subscription.renewal.failed.last`,`trial.cancelled`,`trial.expired`].includes(e||``)}function m(e,t){return e===`license.extended`&&(t?.is_renewal===!0||t?.is_renewal===1||t?.is_renewal===`1`||t?.is_renewal===`true`)}function h(e){let t=e.objects?.payment??e.data?.payment??e.data;return e.type===`payment.created`&&d(t?.gross,t?.total_gross,t?.amount,t?.initial_amount)}function g(e){let t=e?.purchase??null,n=e?.trial??null;return{freemius_product_id:c(t?.plugin_id)??c(t?.product_id)??c(t?.productId)??c(n?.plugin_id)??c(n?.product_id)??c(n?.productId),freemius_plan_id:c(t?.plan_id)??c(t?.planId),freemius_license_id:c(t?.license_id)??c(t?.licenseId)??c(n?.license_id)??c(n?.licenseId),freemius_subscription_id:c(t?.subscription_id)??c(t?.subscriptionId)??c(n?.subscription_id)??c(n?.subscriptionId),freemius_trial_id:c(n?.id),freemius_user_id:c(t?.user_id)??c(t?.userId)??c(n?.user_id)??c(n?.userId)??c(e?.user?.id),freemius_trial_ends_at:l(n?.trial_ends_at)??l(n?.trialEndsAt)??l(t?.trial_ends)??l(t?.trialEnds)}}function _(e,t=`pending`){let n=e?.purchase??null,r=e?.trial??null;return t===`paid`?`paid`:r&&(r.canceled_at||r.canceledAt)&&f(t)?`cancelled`:r?`trial`:n?(n.canceled_at||n.canceledAt)&&f(t)?`cancelled`:d(n.initial_amount,n.initialAmount,n.gross,n.total_gross,n.totalGross)?`paid`:n.trial_ends||n.trialEnds||n.subscription_id||n.subscriptionId?`trial`:t:t}function v(e){let{event:t,currentStatus:n,purchaseData:r}=e;return n===`paid`&&p(t.type)?`paid`:p(t.type)?f(n)?`cancelled`:n:h(t)||m(t.type,t.data)||r&&d(r.initialAmount,r.initial_amount,r.gross,r.totalGross,r.total_gross)?`paid`:r?.canceled===!0&&f(n)?`cancelled`:n===`pending`&&(r?.trialEndsAt||r?.trial_ends_at||r?.trialEnds||r?.trial_ends)||(r?.subscriptionId||r?.subscription_id||t.type===`subscription.created`||t.type===`license.created`)&&n===`pending`?`trial`:n}function y(e,...t){let n=t.filter(e=>!!e);return e===`paid`||n.includes(`paid`)?`paid`:n.includes(`cancelled`)?`cancelled`:n.includes(`trial`)?`trial`:n.includes(`shipped`)?`shipped`:n.includes(`refunded`)?`refunded`:e}function b(e,t){let n={freemius_last_event_type:t,freemius_last_synced_at:new Date().toISOString()};for(let[t,r]of Object.entries(e))r!=null&&r!==``&&(n[t]=r);return n}function x(){let e=process.env.NEXT_PUBLIC_SUPABASE_URL||process.env.SUPABASE_URL,t=process.env.SUPABASE_SERVICE_ROLE_KEY||process.env.SUPABASE_SECRET_KEY;if(!e||!t)throw Error(`Missing Supabase Service Role environment variables`);return(0,a.createClient)(e,t,{auth:{autoRefreshToken:!1,persistSession:!1}})}async function S(e,t){let{data:n,error:r}=await e.from(`orders`).select(`id, status, provider, created_at, freemius_product_id, freemius_plan_id, freemius_license_id, freemius_subscription_id, freemius_trial_id, freemius_user_id, freemius_trial_ends_at`).eq(`id`,t).single();if(r||!n)throw Error(r?.message||`Order not found`);return n}async function C(e,t){let{data:n,error:r}=await e.from(`orders`).select(`id, status, provider, created_at, freemius_product_id, freemius_plan_id, freemius_license_id, freemius_subscription_id, freemius_trial_id, freemius_user_id, freemius_trial_ends_at`).eq(`freemius_license_id`,t).order(`created_at`,{ascending:!1}).limit(1).maybeSingle();if(r)throw Error(r.message);return n??null}async function w(e){let t=b(e.metadata,e.eventType),i=e.order.status,a=i===`paid`&&e.nextStatus!==`paid`?`paid`:e.nextStatus;a!==i&&(t.status=a);let{error:o}=await e.client.from(`orders`).update(t).eq(`id`,e.order.id);if(o)throw Error(o.message);return a===`paid`&&i!==`paid`&&(await r.assignInvoiceMetadata({orderId:e.order.id,client:e.client}),await n.applyOrderInventoryDeduction(e.client,e.order.id)),a}var T=3e5,E=`This checkout could not be verified with Freemius. Your license key is in your purchase email.`;function D(e){let t=c(e.licenseId),n=c(e.order.freemius_product_id);if(!t)return{ok:!1,reason:`no_license_in_callback`};if(!n)return{ok:!1,reason:`missing_order_product`};let r=c(e.order.freemius_license_id);if(r&&r!==t)return{ok:!1,reason:`order_has_other_license`};if(e.linkedToOtherOrder)return{ok:!1,reason:`license_linked_to_other_order`};let a=i.evaluateFreemiusLicenseClaim({license:e.license,now:e.now,request:{email:e.callbackEmail??``,kind:`purchase`,licenseId:t,productId:n,userId:c(e.callbackUserId)??``},user:e.user});if(!a.ok)return a;let o=e.order.created_at?Date.parse(e.order.created_at):NaN,s=i.parseFreemiusTimestamp(e.license?.created);return!Number.isFinite(o)||s===null||s<o-T?{ok:!1,reason:`license_predates_order`}:{ok:!0}}async function O(e,t,n){let{data:r,error:i}=await e.from(`orders`).select(`id`).eq(`freemius_license_id`,t).neq(`id`,n).limit(1);if(i)throw Error(i.message);return Array.isArray(r)&&r.length>0}async function k(e){let t=e.client??x(),n=await S(t,e.orderId);if(n.provider!==`freemius`)return{success:!1,error:`Only Freemius orders can be synced from Freemius checkout`};let r=g(e.checkoutResponse),a=r.freemius_license_id??null,o=c(n.freemius_product_id),s=!!a&&c(n.freemius_license_id)===a,l=null;if(!s){let s;if(!a||!o)s=D({callbackEmail:null,callbackUserId:null,license:null,licenseId:a,linkedToOtherOrder:!1,order:n,user:null});else{let c=await(e.retrieveLicense??i.retrieveFreemiusLicenseRecords)(o,a);if(!c.ok)return console.error(`[Freemius Checkout Sync] Could not verify license ${a} for order ${n.id}: ${c.reason}`),{success:!1,error:E};s=D({callbackEmail:e.checkoutResponse?.user?.email??null,callbackUserId:r.freemius_user_id??null,license:c.license,licenseId:a,linkedToOtherOrder:await O(t,a,n.id),now:e.now,order:n,user:c.user}),l=c.license}if(!s.ok)return console.warn(`[Freemius Checkout Sync] Refused license ${a??`(none)`} for order ${n.id}: ${s.reason}`),{success:!1,error:E}}let u={...r,freemius_product_id:o,freemius_plan_id:c(l?.plan_id)??c(n.freemius_plan_id)??null,freemius_license_id:a,freemius_user_id:c(l?.user_id)??c(n.freemius_user_id)??null},d=null;if(a)try{d=await M(o,a)}catch(e){console.error(`[Freemius Checkout Sync] Failed to retrieve purchase data:`,e)}let f={type:`checkout.purchaseCompleted`,data:{license_id:r.freemius_license_id},objects:{}},p={...u,...j(f,d),freemius_product_id:o},m=_(e.checkoutResponse,n.status),h=d?v({event:f,currentStatus:n.status,purchaseData:d}):null,b=m===`paid`?n.status:m,C=await w({client:t,order:n,nextStatus:y(n.status,b,h),metadata:p,eventType:`checkout.purchaseCompleted`});return{success:!0,orderId:n.id,status:C,metadata:p}}function A(e){return c(e.data?.license_id)??c(e.objects?.license?.id)??c(e.objects?.subscription?.license_id)??c(e.objects?.payment?.license_id)??c(e.data?.payment?.license_id)}function j(e,t){let n=e.objects?.license,r=e.objects?.subscription,i=e.objects?.trial,a=e.objects?.payment??e.data?.payment;return{freemius_product_id:c(t?.productId)??c(t?.product_id)??c(n?.plugin_id)??c(r?.plugin_id)??c(a?.plugin_id),freemius_plan_id:c(t?.planId)??c(t?.plan_id)??c(n?.plan_id),freemius_license_id:c(t?.licenseId)??c(t?.license_id)??A(e),freemius_subscription_id:c(t?.subscriptionId)??c(t?.subscription_id)??c(r?.id)??c(e.data?.subscription_id),freemius_trial_id:c(i?.id)??c(e.data?.trial_id),freemius_user_id:c(t?.userId)??c(t?.user_id)??c(e.objects?.user?.id),freemius_trial_ends_at:l(i?.trial_ends_at)??l(i?.trial_ends)??l(n?.trial_ends)??l(t?.trialEndsAt)??l(t?.trial_ends_at)}}async function M(e,n){if(!e)return null;let r=t.resolveFreemiusCheckoutCredentials(e);return!r.apiKey||!r.secretKey||!r.publicKey?null:new s.Freemius({productId:Number(e),apiKey:r.apiKey,secretKey:r.secretKey,publicKey:r.publicKey}).purchase.retrievePurchaseData(n)}async function N(e){let t=e.client??x(),n=A(e.event);if(!n)return{success:!0,ignored:!0,reason:`missing_license_id`,type:e.event.type};let r=await C(t,n);if(!r)return{success:!0,ignored:!0,reason:`unknown_license_id`,licenseId:n,type:e.event.type};let i=null;try{i=await M(r.freemius_product_id??e.event.objects?.license?.plugin_id,n)}catch(e){console.error(`[Freemius Sync] Failed to retrieve purchase data:`,e)}let a=j(e.event,i),o=await w({client:t,order:r,nextStatus:v({event:e.event,currentStatus:r.status,purchaseData:i}),metadata:a,eventType:e.event.type??null});return{success:!0,orderId:r.id,status:o,type:e.event.type}}function P(){let e=[t.readFreemiusEnvValue(`FREEMIUS_SECRET_KEY`),t.readFreemiusEnvValue(`FREEMIUS_ECOMMERCE_SANDBOX_SECRET_KEY`),...Object.values(t.parseFreemiusCheckoutCredentialsMap()??{}).map(e=>e.secretKey??null)];return Array.from(new Set(e.filter(e=>!!e)))}function F(e,t){return t?P().some(n=>{let r=o.default.createHmac(`sha256`,n).update(e).digest(`hex`);try{return o.default.timingSafeEqual(Buffer.from(r,`hex`),Buffer.from(t,`hex`))}catch{return!1}}):!1}exports.FREEMIUS_CHECKOUT_SYNC_REFUSED_MESSAGE=E,exports.evaluateFreemiusCheckoutLicense=D,exports.extractFreemiusCheckoutMetadata=g,exports.getFreemiusWebhookSecretCandidates=P,exports.resolveFreemiusStatusFromCheckoutResponse=_,exports.resolveFreemiusStatusFromWebhookEvent=v,exports.syncFreemiusCheckoutOrder=k,exports.syncFreemiusOrderFromWebhookEvent=N,exports.verifyFreemiusWebhookSignature=F;

package/lib/freemius-order-sync.d.ts

@@ -1,4 +1,5 @@
 import { SupabaseClient } from '@supabase/supabase-js';
+import { FreemiusLicenseClaimRejection, FreemiusLicenseRecordLike, FreemiusLicenseRecords, FreemiusUserRecordLike } from './freemius-license-claim';
 export type FreemiusTrackedOrderStatus = 'pending' | 'trial' | 'paid' | 'shipped' | 'cancelled' | 'refunded';
 type SupabaseLikeClient = SupabaseClient<any>;
 type FreemiusCheckoutPurchase = {
@@ -53,6 +54,19 @@ export type FreemiusCheckoutResponse = {
         email?: string | null;
     } | null;
 };
+type FreemiusOrderRow = {
+    id: string;
+    status: FreemiusTrackedOrderStatus | string;
+    provider: string | null;
+    created_at?: string | null;
+    freemius_product_id?: string | null;
+    freemius_plan_id?: string | null;
+    freemius_license_id?: string | null;
+    freemius_subscription_id?: string | null;
+    freemius_trial_id?: string | null;
+    freemius_user_id?: string | null;
+    freemius_trial_ends_at?: string | null;
+};
 type FreemiusOrderMetadata = {
     freemius_product_id?: string | null;
     freemius_plan_id?: string | null;
@@ -75,10 +89,40 @@ export declare function resolveFreemiusStatusFromWebhookEvent(input: {
     currentStatus: string;
     purchaseData?: Record<string, any> | null;
 }): FreemiusTrackedOrderStatus;
+/** What a refused checkout sync tells the browser, whatever the reason (logged server-side). */
+export declare const FREEMIUS_CHECKOUT_SYNC_REFUSED_MESSAGE = "This checkout could not be verified with Freemius. Your license key is in your purchase email.";
+export type FreemiusCheckoutLicenseRejection = FreemiusLicenseClaimRejection | 'license_linked_to_other_order' | 'license_predates_order' | 'missing_order_product' | 'no_license_in_callback' | 'order_has_other_license';
+/**
+ * Pure decision for the browser checkout sync: may this order be linked to the license the
+ * checkout callback named? The callback is attacker-controlled (anyone holding an order can
+ * POST it with any license id), and the success page and the order history reveal the linked
+ * license's key, so a link is accepted only when Freemius itself says the license is the
+ * buyer's fresh, never-activated license for THIS order's product (the vendor claim rules),
+ * it was created after the order, and no other order holds it. Product and plan ids always
+ * come from the order or from Freemius, never from the callback.
+ */
+export declare function evaluateFreemiusCheckoutLicense(input: {
+    callbackEmail: string | null | undefined;
+    callbackUserId: string | null | undefined;
+    license: FreemiusLicenseRecordLike | null | undefined;
+    licenseId: string | null | undefined;
+    linkedToOtherOrder: boolean;
+    now?: Date;
+    order: Pick<FreemiusOrderRow, 'created_at' | 'freemius_license_id' | 'freemius_product_id'>;
+    user: FreemiusUserRecordLike | null | undefined;
+}): {
+    ok: true;
+} | {
+    ok: false;
+    reason: FreemiusCheckoutLicenseRejection;
+};
 export declare function syncFreemiusCheckoutOrder(input: {
     orderId: string;
     checkoutResponse?: FreemiusCheckoutResponse | null;
     client?: SupabaseLikeClient;
+    /** Freemius lookup; injectable for tests. */
+    retrieveLicense?: (productId: string, licenseId: string) => Promise<FreemiusLicenseRecords>;
+    now?: Date;
 }): Promise<{
     success: boolean;
     error: string;