@odla-ai/chapter 0.55.0 → 0.56.0

package/dist/worker/index.d.cts

@@ -946,6 +946,8 @@ interface MembershipOfferPreview {
     renewalCents: number;
     discountDuration?: "first_term" | "while_active";
     initialTermEndsAt?: number;
+    /** Current additional-member price, including zero for an included member. */
+    seatPriceCents?: number;
 }
 
 /** Server-owned source identity; the browser never supplies an offer or its price. */

package/dist/worker/index.d.ts

@@ -946,6 +946,8 @@ interface MembershipOfferPreview {
     renewalCents: number;
     discountDuration?: "first_term" | "while_active";
     initialTermEndsAt?: number;
+    /** Current additional-member price, including zero for an included member. */
+    seatPriceCents?: number;
 }
 
 /** Server-owned source identity; the browser never supplies an offer or its price. */

package/dist/worker/index.js

@@ -1713,7 +1713,7 @@ function findTier(tiers, tierId) {
   if (!tierId) return tiers.length === 1 ? tiers[0] : null;
   return tiers.find((tier) => tier.id === tierId) ?? null;
 }
-function joinConfigTiers(tiers, defaults = {}, founding = /* @__PURE__ */ new Map()) {
+function joinConfigTiers(tiers, defaults = {}, founding = /* @__PURE__ */ new Map(), seats = /* @__PURE__ */ new Map()) {
   return tiers.map((tier) => ({
     id: tier.id,
     name: tier.name,
@@ -1722,7 +1722,8 @@ function joinConfigTiers(tiers, defaults = {}, founding = /* @__PURE__ */ new Ma
     interval: tier.interval ?? defaults.interval ?? "year",
     blurb: tier.blurb ?? "",
     free: tierIsFree(tier),
-    ...founding.has(tier.id) ? { founding: founding.get(tier.id) } : {}
+    ...founding.has(tier.id) ? { founding: founding.get(tier.id) } : {},
+    ...seats.has(tier.id) ? { seatOffer: seats.get(tier.id) } : {}
   }));
 }
 
@@ -1780,7 +1781,7 @@ async function frozenCheckoutVariables(db, app) {
   const intent = (await db.query({ subscriptionCheckoutIntents: { $: { where: { id: String(app.id) }, limit: 1 } } })).subscriptionCheckoutIntents?.[0];
   const offer = intent?.membershipOffer, contract = offer?.contract;
   const offering = contract?.offering, quote = intent?.paymentQuote;
-  const amount = contract?.dueTodayCents ?? intent?.priceCents;
+  const amount = quote?.lineItems?.dueTodayCents ?? contract?.dueTodayCents ?? intent?.priceCents;
   const currency = offering?.currency ?? intent?.currency;
   let formatted = "";
   if (Number.isSafeInteger(amount) && Number(amount) > 0 && typeof currency === "string" && /^[a-z]{3}$/.test(currency)) {
@@ -2215,6 +2216,7 @@ async function previewMembershipCommercialOffer(db, input) {
     ...contract.founding && contract.discountPolicy ? { cohortLabel: contract.discountPolicy.cohortLabel } : {},
     dueTodayCents: contract.dueTodayCents,
     renewalCents: contract.renewalCents,
+    ...offering.seatPriceCents !== void 0 ? { seatPriceCents: offering.seatPriceCents } : {},
     ...discount ? { discountDuration: discount.duration === "once" ? "first_term" : "while_active" } : {},
     ...contract.initialTermEndsAt !== void 0 ? { initialTermEndsAt: contract.initialTermEndsAt } : {}
   };
@@ -3186,6 +3188,48 @@ async function revokeRefundedApplicationRole(db, env, ctx, applicationId) {
   }
 }
 
+// src/payment-receipt.ts
+async function retainPaymentReceipt(db, intent, rawBody) {
+  const quote = intent.paymentQuote;
+  if (!quote || intent.paymentReceipt) return;
+  const event2 = JSON.parse(rawBody), invoice = event2.data?.object;
+  const paidAt = invoice?.status_transitions?.paid_at ?? event2.created;
+  if (!/^in_[A-Za-z0-9_]+$/.test(invoice?.id ?? "") || !Number.isSafeInteger(paidAt) || paidAt <= 0) return;
+  const receipt = {
+    invoiceId: invoice.id,
+    paidAt: paidAt * 1e3,
+    currency: quote.currency,
+    tierName: quote.tierName,
+    merchant: quote.merchantDisclosureText,
+    membershipCents: quote.lineItems.dueTodayCents - (quote.lineItems.namedSeatCents ?? 0),
+    totalCents: quote.lineItems.dueTodayCents,
+    ...quote.namedSeat ? { namedSeat: { recipientName: quote.namedSeat.recipientName, amountCents: quote.lineItems.namedSeatCents } } : {}
+  };
+  await db.transact([{ t: "update", ns: "subscriptionCheckoutIntents", id: String(intent.id), attrs: { paymentReceipt: receipt } }], {
+    mutationId: `payment-receipt:${invoice.id}`,
+    guards: [{
+      ns: "subscriptionCheckoutIntents",
+      id: String(intent.id),
+      exists: true,
+      equals: { providerSubscriptionId: intent.providerSubscriptionId, providerCustomerId: intent.providerCustomerId },
+      absent: ["paymentReceipt"]
+    }]
+  });
+}
+function paymentReceiptText(receipt, chapterName) {
+  const money = (cents) => new Intl.NumberFormat("en-US", { style: "currency", currency: receipt.currency }).format(cents / 100);
+  return [
+    chapterName,
+    "Payment receipt",
+    `Invoice: ${receipt.invoiceId}`,
+    `Paid: ${new Intl.DateTimeFormat("en-US", { dateStyle: "long", timeZone: "UTC" }).format(receipt.paidAt)}`,
+    receipt.merchant,
+    `${receipt.tierName}: ${money(receipt.membershipCents)}`,
+    ...receipt.namedSeat ? [`Additional member \u2014 ${receipt.namedSeat.recipientName}: ${receipt.namedSeat.amountCents === 0 ? "Included \u2014 " : ""}${money(receipt.namedSeat.amountCents)}`] : [],
+    `Total paid: ${money(receipt.totalCents)}`
+  ].filter(Boolean).join("\n");
+}
+
 // src/payment-notifications.ts
 var groupFor = async (db, app) => {
   const result = await db.query({ groups: { $: { where: { id: String(app.groupId ?? "") }, limit: 1 } } });
@@ -3748,6 +3792,7 @@ async function reconcileChapterStripeEvent(input, env, ctx) {
       } catch {
         return json({ error: "network membership payment reconciliation pending" }, 503);
       }
+      if (intent) await retainPaymentReceipt(db, intent, rawBody);
     }
   }
   const invoiceEvent = event2.kind === "first_payment" || event2.kind === "renewal" || event2.kind === "renewal_failed";
@@ -5534,7 +5579,7 @@ async function authorizeCrmDiscussionReference(req, env, fetcher = fetch) {
 }
 
 // src/join-founding-preview.ts
-async function foundingPreviews(tiers, env, ctx) {
+async function foundingPreviews(tiers, env, ctx, seats = /* @__PURE__ */ new Map()) {
   const result = /* @__PURE__ */ new Map();
   const preview = ctx.membershipAuthority?.previewOffer;
   if (!preview) return result;
@@ -5542,6 +5587,10 @@ async function foundingPreviews(tiers, env, ctx) {
   await Promise.all(tiers.filter((tier) => !tierIsFree(tier) && tier.stripePriceId).map(async (tier) => {
     try {
       const offer = await preview({ ...scope2, skuId: tier.id }, env);
+      if (offer.skuId !== tier.id || offer.basePriceCents !== tier.priceCents) return;
+      if (ctx.membershipAuthority?.namedSeats && Number.isSafeInteger(offer.seatPriceCents) && Number(offer.seatPriceCents) >= 0) {
+        seats.set(tier.id, { amountCents: Number(offer.seatPriceCents) });
+      }
       if (!offer.founding || !offer.cohortLabel || offer.basePriceCents !== tier.priceCents || offer.dueTodayCents >= offer.basePriceCents) return;
       result.set(tier.id, {
         cohortLabel: offer.cohortLabel,
@@ -7118,11 +7167,12 @@ var handleMember = async (req, url, env, ctx) => {
       group,
       Boolean(stripeKey)
     );
-    const founding = await foundingPreviews(offered, env, ctx);
+    const seats = /* @__PURE__ */ new Map();
+    const founding = await foundingPreviews(offered, env, ctx, seats);
     const activeControl = chapter.signupControl ? await loadActiveSignupControl(db, chapter.id, env.ODLA_ENV) : null;
     const application = controlledApplication(chapter.application, activeControl?.document);
     return json({
-      ...joinConfig(group, paymentsReady, joinConfigTiers(offered, { currency: typeof group.currency === "string" ? group.currency : void 0, interval: group.interval === "month" ? "month" : "year" }, founding), application.conditions),
+      ...joinConfig(group, paymentsReady, joinConfigTiers(offered, { currency: typeof group.currency === "string" ? group.currency : void 0, interval: group.interval === "month" ? "month" : "year" }, founding, seats), application.conditions),
       fieldContract: chapterFlowFieldContract(chapter, "join", application),
       copy: { ...chapter.copy.join, ...activeControl?.document.application?.copy ?? {} },
       ...activeControl ? { signupControl: {
@@ -9905,6 +9955,58 @@ async function startSubscription(req, env, ctx) {
   return json({ clientSecret: result.clientSecret, publishableKey: group.stripePublishableKey ?? null, lineItems: quote.lineItems });
 }
 
+// src/worker-payment-receipt.ts
+var json2 = (value, status2 = 200) => Response.json(value, { status: status2, headers: { "cache-control": "no-store", "referrer-policy": "no-referrer" } });
+var escape = (text8) => text8.replace(/[&<>"']/g, (char) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[char]);
+async function paymentReceiptRoute(req, url, env, ctx) {
+  const id7 = url.searchParams.get("application");
+  if (!id7 || id7.length > 160) return json2({ error: "application required" }, 400);
+  if (req.method === "POST" && req.headers.has("origin") && req.headers.get("origin") !== url.origin) return json2({ error: "forbidden" }, 403);
+  const db = ctx.makeDb(env);
+  const rows5 = await db.query({ applications: { $: { where: { id: id7 }, limit: 1 } }, subscriptionCheckoutIntents: { $: { where: { id: id7 }, limit: 1 } } });
+  const app = rows5.applications?.[0], intent = rows5.subscriptionCheckoutIntents?.[0];
+  if (!app || app.groupId !== ctx.chapter.id || !intent || intent.applicationId !== id7 || intent.appId !== env.ODLA_APP_ID || intent.chapterId !== ctx.chapter.id || intent.environment !== env.ODLA_ENV || intent.runtime !== stripeRuntimeIdentity(env.ODLA_RUNTIME) || app.stripeRuntime !== intent.runtime || app.stripeSubscriptionId !== intent.providerSubscriptionId) return json2({ error: "receipt not found" }, 404);
+  const receipt = intent.paymentReceipt;
+  if (!receipt) return json2({ pending: true }, 202);
+  const text8 = paymentReceiptText(receipt, ctx.chapter.name);
+  if (req.method === "POST") {
+    if (!env.SEND_EMAIL || !env.EMAIL_FROM) return json2({ error: "Email is unavailable. You can print or save your receipt." }, 503);
+    const group = (await db.query({ groups: { $: { where: { id: ctx.chapter.id }, limit: 1 } } })).groups?.[0];
+    if (!group) return json2({ error: "Receipt email is unavailable." }, 503);
+    const config = emailGroupFrom(group);
+    const debugEmail = (env.ODLA_DEBUG_EMAIL ?? config.debugEmail)?.trim();
+    if (env.ODLA_ENV !== "prod" && (!debugEmail || !/^[^\s@,;<>]+@[^\s@,;<>]+\.[^\s@,;<>]+$/.test(debugEmail))) {
+      return json2({ error: "A test inbox is required to email receipts in this environment." }, 503);
+    }
+    const result = await sendTemplated(lifecycleNotifyDeps(db, env), {
+      group: { ...config, emailTemplates: {
+        ...config.emailTemplates,
+        paymentReceipt: { enabled: true, subject: "Your {{chapterName}} payment receipt", text: "{{receiptText}}" }
+      } },
+      template: "paymentReceipt",
+      to: String(intent.purchaserEmailNormalized),
+      applicationId: id7,
+      vars: { chapterName: ctx.chapter.name, receiptText: text8 },
+      dedupeKey: `requested-payment-receipt:${receipt.invoiceId}`,
+      event: { label: "Payment receipt", trigger: "Purchaser requests their receipt", audience: "Purchaser", variables: ["chapterName", "receiptText"] }
+    });
+    return result.sent ? json2({ sent: true, preview: env.ODLA_ENV !== "prod" }) : json2({ error: "We could not confirm email delivery. You can print or save your receipt." }, 503);
+  }
+  if (url.searchParams.get("format") !== "html") return json2({ receipt, chapterName: ctx.chapter.name });
+  const nonce = crypto.randomUUID();
+  return new Response(`<!doctype html><html lang="en"><meta charset="utf-8"><meta name="viewport" content="width=device-width"><title>Payment receipt</title>
+    <style>body{font:16px/1.6 system-ui;max-width:680px;margin:48px auto;padding:24px;color:#17252d}pre{font:inherit;white-space:pre-wrap}button{font:inherit;padding:10px 16px}@media print{button{display:none}body{margin:0}}</style>
+    <h1>Payment receipt</h1><pre>${escape(text8)}</pre><button id="print">Print / save PDF</button>
+    <script nonce="${nonce}">document.getElementById('print').addEventListener('click',()=>window.print())</script></html>`, {
+    headers: {
+      "content-type": "text/html; charset=utf-8",
+      "cache-control": "no-store",
+      "referrer-policy": "no-referrer",
+      "content-security-policy": `default-src 'none'; style-src 'unsafe-inline'; script-src 'nonce-${nonce}'; frame-ancestors 'none'; base-uri 'none'`
+    }
+  });
+}
+
 // src/worker-routes-payments.ts
 async function ingestWebhook(req, env, ctx) {
   const db = ctx.makeDb(env);
@@ -9917,6 +10019,7 @@ async function ingestWebhook(req, env, ctx) {
 }
 var handlePayments = async (req, url, env, ctx) => {
   if (ctx.chapter.mode !== "chapter") return null;
+  if (["GET", "POST"].includes(req.method) && url.pathname === "/api/payments/receipt") return paymentReceiptRoute(req, url, env, ctx);
   if (req.method === "GET" && url.pathname === "/api/payments/quote") return paymentQuoteRoute(url, env, ctx);
   if (req.method === "POST" && url.pathname === "/api/payments/quote") return paymentQuoteRoute(url, env, ctx, true, req);
   if (req.method === "POST" && url.pathname === "/api/payments/subscription") return startSubscription(req, env, ctx);
@@ -16825,7 +16928,7 @@ async function requestMembershipCommercialOffer(options) {
 async function requestMembershipOfferPreview(options) {
   const result = await requestAuthority(options, "offer-preview", { skuId: options.skuId });
   const preview = result.preview;
-  if (!preview || preview.skuId !== options.skuId || typeof preview.founding !== "boolean" || !Number.isSafeInteger(preview.basePriceCents) || !Number.isSafeInteger(preview.dueTodayCents) || preview.dueTodayCents < 0 || preview.dueTodayCents > preview.basePriceCents || !Number.isSafeInteger(preview.renewalCents) || !/^[a-z]{3}$/.test(preview.currency) || !["month", "year"].includes(preview.interval) || preview.cohortLabel !== void 0 && typeof preview.cohortLabel !== "string" || preview.discountDuration !== void 0 && !["first_term", "while_active"].includes(preview.discountDuration)) throw new Error("invalid offer preview");
+  if (!preview || preview.skuId !== options.skuId || typeof preview.founding !== "boolean" || !Number.isSafeInteger(preview.basePriceCents) || !Number.isSafeInteger(preview.dueTodayCents) || preview.dueTodayCents < 0 || preview.dueTodayCents > preview.basePriceCents || !Number.isSafeInteger(preview.renewalCents) || !/^[a-z]{3}$/.test(preview.currency) || !["month", "year"].includes(preview.interval) || preview.cohortLabel !== void 0 && typeof preview.cohortLabel !== "string" || preview.seatPriceCents !== void 0 && (!Number.isSafeInteger(preview.seatPriceCents) || preview.seatPriceCents < 0) || preview.discountDuration !== void 0 && !["first_term", "while_active"].includes(preview.discountDuration)) throw new Error("invalid offer preview");
   return preview;
 }
 async function requestMembershipCheckoutBinding(options) {