@odla-ai/chapter 0.31.2 → 0.31.3

package/dist/index.cjs

@@ -106,7 +106,7 @@ __export(index_exports, {
   slotWindow: () => slotWindow,
   stageIndex: () => stageIndex,
   stripeCall: () => stripeCall,
-  stripeForm: () => stripeForm,
+  stripeForm: () => import_stripe.stripeForm,
   subAnnualCents: () => subAnnualCents,
   submitApplication: () => submitApplication,
   subscriptionIdempotencyKey: () => subscriptionIdempotencyKey,
@@ -116,7 +116,7 @@ __export(index_exports, {
   updateClerkUserMetadata: () => updateClerkUserMetadata,
   updateClerkUserMetadataByEmail: () => updateClerkUserMetadataByEmail,
   validateScheduling: () => validateScheduling,
-  verifyStripeSignature: () => verifyStripeSignature,
+  verifyStripeSignature: () => import_stripe.verifyStripeSignature,
   webhookMutationId: () => webhookMutationId
 });
 module.exports = __toCommonJS(index_exports);
@@ -1680,53 +1680,10 @@ function emailGroupFrom(row) {
 }
 
 // src/payments.ts
-function parseSigHeader(header) {
-  const parts = {};
-  for (const p of header.split(",")) {
-    const [k, v] = p.split("=", 2);
-    if (k && v !== void 0) parts[k] = v;
-  }
-  return { t: parts.t, v1: parts.v1 };
-}
-function toHex(buf) {
-  return [...new Uint8Array(buf)].map((b) => b.toString(16).padStart(2, "0")).join("");
-}
-function timingSafeEqual(a, b) {
-  if (a.length !== b.length) return false;
-  let diff = 0;
-  for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
-  return diff === 0;
-}
-async function verifyStripeSignature(payload, header, secret, opts = {}) {
-  const { t, v1 } = parseSigHeader(header);
-  if (!t || !v1) return false;
-  const ts = Number(t);
-  if (!Number.isFinite(ts)) return false;
-  const nowSec = (opts.now ?? Date.now()) / 1e3;
-  const tolerance = opts.toleranceSec ?? 300;
-  if (Math.abs(nowSec - ts) > tolerance) return false;
-  const enc = new TextEncoder();
-  const key = await crypto.subtle.importKey("raw", enc.encode(secret), { name: "HMAC", hash: "SHA-256" }, false, ["sign"]);
-  const mac = await crypto.subtle.sign("HMAC", key, enc.encode(`${t}.${payload}`));
-  return timingSafeEqual(toHex(mac), v1);
-}
+var import_stripe = require("@odla-ai/stripe");
 function paymentsReady(group, hasSecretKey) {
   return Boolean(group.stripePublishableKey && group.stripePriceId && hasSecretKey);
 }
-function stripeForm(params) {
-  const out = new URLSearchParams();
-  for (const [k, v] of Object.entries(params)) {
-    if (v === void 0 || v === null) continue;
-    if (typeof v === "object") {
-      for (const [k2, v2] of Object.entries(v)) {
-        if (v2 !== void 0 && v2 !== null) out.append(`${k}[${k2}]`, String(v2));
-      }
-    } else {
-      out.append(k, String(v));
-    }
-  }
-  return out.toString();
-}
 function subscriptionIdempotencyKey(applicationId) {
   return `sub:${applicationId}`;
 }
@@ -2110,18 +2067,15 @@ function subAnnualCents(sub) {
 }
 
 // src/payments-stripe.ts
+var import_stripe2 = require("@odla-ai/stripe");
 async function stripeCall(sk, method, path, params, idempotencyKey) {
-  const qs = method === "GET" && params ? `?${stripeForm(params)}` : "";
-  const headers = { authorization: `Bearer ${sk}` };
-  if (idempotencyKey) headers["idempotency-key"] = idempotencyKey;
-  const init = { method, headers };
-  if (method === "POST" && params) {
-    headers["content-type"] = "application/x-www-form-urlencoded";
-    init.body = stripeForm(params);
-  }
-  const res = await fetch(`https://api.stripe.com${path}${qs}`, init);
-  const body = await res.json().catch(() => ({}));
-  return { ok: res.ok, status: res.status, body };
+  return (0, import_stripe2.stripeRequest)(
+    { secretKey: sk },
+    method,
+    path,
+    params,
+    idempotencyKey ? { idempotencyKey } : {}
+  );
 }
 
 // src/clerk.ts