@onesub/server 0.11.3 → 0.12.0

package/dist/stores/redis.js

@@ -0,0 +1,255 @@
+/**
+ * Redis-backed subscription / purchase / cache stores.
+ *
+ * Uses the `ioredis` package — kept as an optional peer dependency so callers
+ * who only need InMemory or Postgres pay no install cost.
+ *
+ *   npm install ioredis
+ *
+ * Usage:
+ *   import Redis from 'ioredis';
+ *   import {
+ *     RedisSubscriptionStore,
+ *     RedisPurchaseStore,
+ *     RedisCacheAdapter,
+ *   } from '@onesub/server';
+ *
+ *   const redis = new Redis(process.env.REDIS_URL!);
+ *   const store = new RedisSubscriptionStore(redis);
+ *   const purchaseStore = new RedisPurchaseStore(redis);
+ *   const cache = new RedisCacheAdapter(redis);
+ *
+ *   app.use(createOneSubMiddleware({ ...config, store, purchaseStore, cache }));
+ *
+ * Key layout:
+ *   onesub:sub:tx:<originalTransactionId>      → JSON SubscriptionInfo
+ *   onesub:sub:user:<userId>                   → SortedSet of originalTransactionIds, scored by updatedAt (ms)
+ *   onesub:sub:all                             → Set of originalTransactionIds (for listAll/listFiltered)
+ *   onesub:purchase:tx:<transactionId>         → JSON PurchaseInfo
+ *   onesub:purchase:user:<userId>              → SortedSet of transactionIds, scored by purchasedAt (ms)
+ *   onesub:purchase:user_product:<u>:<p>       → Set of transactionIds (for non-consumable hasPurchased)
+ *   onesub:purchase:all                        → Set of transactionIds
+ *   onesub:cache:<key>                         → string with TTL (RedisCacheAdapter)
+ *   onesub:webhook:event:<provider>:<id>       → "1" with TTL (RedisWebhookEventStore)
+ */
+const SUB_TX_PREFIX = 'onesub:sub:tx:';
+const SUB_USER_PREFIX = 'onesub:sub:user:';
+const SUB_ALL = 'onesub:sub:all';
+const PUR_TX_PREFIX = 'onesub:purchase:tx:';
+const PUR_USER_PREFIX = 'onesub:purchase:user:';
+const PUR_USER_PRODUCT_PREFIX = 'onesub:purchase:user_product:';
+const PUR_ALL = 'onesub:purchase:all';
+export class RedisSubscriptionStore {
+    redis;
+    constructor(redis) {
+        this.redis = redis;
+    }
+    async save(sub) {
+        const score = Date.now();
+        const txKey = SUB_TX_PREFIX + sub.originalTransactionId;
+        const userKey = SUB_USER_PREFIX + sub.userId;
+        // Multi-key write — use a pipeline so the three commands are at least
+        // sent in one round-trip. Atomicity is best-effort; the only consistency
+        // hazard is a crash between commands, which leaves the user index without
+        // the new tx (recoverable: subsequent writes for the same tx fix it).
+        const pipeline = this.redis.multi();
+        pipeline.set(txKey, JSON.stringify(sub));
+        pipeline.zadd(userKey, score, sub.originalTransactionId);
+        pipeline.sadd(SUB_ALL, sub.originalTransactionId);
+        await pipeline.exec();
+    }
+    async getByUserId(userId) {
+        const userKey = SUB_USER_PREFIX + userId;
+        // ZREVRANGE 0 0 = most-recent (highest score)
+        const ids = await this.redis.zrevrange(userKey, 0, 0);
+        if (ids.length === 0)
+            return null;
+        const raw = await this.redis.get(SUB_TX_PREFIX + ids[0]);
+        return raw ? JSON.parse(raw) : null;
+    }
+    async getAllByUserId(userId) {
+        const userKey = SUB_USER_PREFIX + userId;
+        const ids = await this.redis.zrevrange(userKey, 0, -1);
+        if (ids.length === 0)
+            return [];
+        const raws = await this.redis.mget(...ids.map((id) => SUB_TX_PREFIX + id));
+        return raws.filter((r) => r != null).map((r) => JSON.parse(r));
+    }
+    async getByTransactionId(txId) {
+        const raw = await this.redis.get(SUB_TX_PREFIX + txId);
+        return raw ? JSON.parse(raw) : null;
+    }
+    async listAll() {
+        const ids = await this.redis.smembers(SUB_ALL);
+        if (ids.length === 0)
+            return [];
+        const raws = await this.redis.mget(...ids.map((id) => SUB_TX_PREFIX + id));
+        return raws.filter((r) => r != null).map((r) => JSON.parse(r));
+    }
+    async listFiltered(opts) {
+        // Redis has no secondary indexes — for listFiltered we materialise the
+        // candidate set then apply filters in-process. Fine for small/medium data;
+        // for >100k rows pair this with Postgres or use Redis Stack with RediSearch.
+        const limit = opts.limit ?? 50;
+        const offset = opts.offset ?? 0;
+        let candidates;
+        if (opts.userId) {
+            candidates = await this.getAllByUserId(opts.userId);
+        }
+        else {
+            candidates = await this.listAll();
+            // Sort newest-first by purchasedAt as a stable proxy when no per-user
+            // sorted set is available. SubscriptionInfo doesn't carry updatedAt, so
+            // we fall back to expiresAt for a "freshest first" ordering.
+            candidates.sort((a, b) => Date.parse(b.expiresAt) - Date.parse(a.expiresAt));
+        }
+        const filtered = candidates.filter((s) => {
+            if (opts.status && s.status !== opts.status)
+                return false;
+            if (opts.productId && s.productId !== opts.productId)
+                return false;
+            if (opts.platform && s.platform !== opts.platform)
+                return false;
+            return true;
+        });
+        return {
+            items: filtered.slice(offset, offset + limit),
+            total: filtered.length,
+            limit,
+            offset,
+        };
+    }
+}
+export class RedisPurchaseStore {
+    redis;
+    constructor(redis) {
+        this.redis = redis;
+    }
+    async savePurchase(purchase) {
+        const txKey = PUR_TX_PREFIX + purchase.transactionId;
+        // Owner check — same TRANSACTION_BELONGS_TO_OTHER_USER semantics as
+        // Postgres / InMemory implementations. Without this guard a stolen
+        // receipt could be re-bound to a different account.
+        const existing = await this.redis.get(txKey);
+        if (existing) {
+            const owner = JSON.parse(existing).userId;
+            if (owner !== purchase.userId) {
+                const err = new Error('TRANSACTION_BELONGS_TO_OTHER_USER');
+                err.code = 'TRANSACTION_BELONGS_TO_OTHER_USER';
+                throw err;
+            }
+            return; // idempotent — same user
+        }
+        const score = Date.parse(purchase.purchasedAt) || Date.now();
+        const pipeline = this.redis.multi();
+        pipeline.set(txKey, JSON.stringify(purchase));
+        pipeline.zadd(PUR_USER_PREFIX + purchase.userId, score, purchase.transactionId);
+        pipeline.sadd(PUR_USER_PRODUCT_PREFIX + purchase.userId + ':' + purchase.productId, purchase.transactionId);
+        pipeline.sadd(PUR_ALL, purchase.transactionId);
+        await pipeline.exec();
+    }
+    async getPurchasesByUserId(userId) {
+        const ids = await this.redis.zrevrange(PUR_USER_PREFIX + userId, 0, -1);
+        if (ids.length === 0)
+            return [];
+        const raws = await this.redis.mget(...ids.map((id) => PUR_TX_PREFIX + id));
+        return raws.filter((r) => r != null).map((r) => JSON.parse(r));
+    }
+    async getPurchaseByTransactionId(txId) {
+        const raw = await this.redis.get(PUR_TX_PREFIX + txId);
+        return raw ? JSON.parse(raw) : null;
+    }
+    async hasPurchased(userId, productId) {
+        const count = await this.redis.scard(PUR_USER_PRODUCT_PREFIX + userId + ':' + productId);
+        return count > 0;
+    }
+    async reassignPurchase(transactionId, newUserId) {
+        const txKey = PUR_TX_PREFIX + transactionId;
+        const raw = await this.redis.get(txKey);
+        if (!raw)
+            return false;
+        const existing = JSON.parse(raw);
+        if (existing.userId === newUserId)
+            return true;
+        const updated = { ...existing, userId: newUserId };
+        const score = Date.parse(updated.purchasedAt) || Date.now();
+        const oldUserProductKey = PUR_USER_PRODUCT_PREFIX + existing.userId + ':' + existing.productId;
+        const newUserProductKey = PUR_USER_PRODUCT_PREFIX + newUserId + ':' + existing.productId;
+        const pipeline = this.redis.multi();
+        pipeline.set(txKey, JSON.stringify(updated));
+        pipeline.zrem(PUR_USER_PREFIX + existing.userId, transactionId);
+        pipeline.zadd(PUR_USER_PREFIX + newUserId, score, transactionId);
+        pipeline.srem(oldUserProductKey, transactionId);
+        pipeline.sadd(newUserProductKey, transactionId);
+        await pipeline.exec();
+        return true;
+    }
+    async deletePurchases(userId, productId) {
+        const userProductKey = PUR_USER_PRODUCT_PREFIX + userId + ':' + productId;
+        const ids = await this.redis.smembers(userProductKey);
+        if (ids.length === 0)
+            return 0;
+        const pipeline = this.redis.multi();
+        for (const id of ids) {
+            pipeline.del(PUR_TX_PREFIX + id);
+            pipeline.zrem(PUR_USER_PREFIX + userId, id);
+            pipeline.srem(PUR_ALL, id);
+        }
+        pipeline.del(userProductKey);
+        await pipeline.exec();
+        return ids.length;
+    }
+    async deletePurchaseByTransactionId(transactionId) {
+        const txKey = PUR_TX_PREFIX + transactionId;
+        const raw = await this.redis.get(txKey);
+        if (!raw)
+            return false;
+        const existing = JSON.parse(raw);
+        const pipeline = this.redis.multi();
+        pipeline.del(txKey);
+        pipeline.zrem(PUR_USER_PREFIX + existing.userId, transactionId);
+        pipeline.srem(PUR_USER_PRODUCT_PREFIX + existing.userId + ':' + existing.productId, transactionId);
+        pipeline.srem(PUR_ALL, transactionId);
+        await pipeline.exec();
+        return true;
+    }
+    async listAll() {
+        const ids = await this.redis.smembers(PUR_ALL);
+        if (ids.length === 0)
+            return [];
+        const raws = await this.redis.mget(...ids.map((id) => PUR_TX_PREFIX + id));
+        return raws.filter((r) => r != null).map((r) => JSON.parse(r));
+    }
+}
+/**
+ * Redis-backed cache adapter — share JWKS / OAuth tokens across cluster nodes.
+ *
+ * Implements `CacheAdapter` so it plugs into the same default-cache slot used
+ * by the Apple JWT minter and Google OAuth token minter.
+ */
+export class RedisCacheAdapter {
+    redis;
+    prefix;
+    constructor(redis, prefix = 'onesub:cache:') {
+        this.redis = redis;
+        this.prefix = prefix;
+    }
+    async get(key) {
+        const raw = await this.redis.get(this.prefix + key);
+        return raw ? JSON.parse(raw) : null;
+    }
+    async set(key, value, ttlSeconds) {
+        const fullKey = this.prefix + key;
+        const payload = JSON.stringify(value);
+        if (ttlSeconds && ttlSeconds > 0) {
+            await this.redis.set(fullKey, payload, 'EX', ttlSeconds);
+        }
+        else {
+            await this.redis.set(fullKey, payload);
+        }
+    }
+    async del(key) {
+        await this.redis.del(this.prefix + key);
+    }
+}
+//# sourceMappingURL=redis.js.map

package/dist/stores/redis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.js","sourceRoot":"","sources":["../../src/stores/redis.ts"],"names":[],"mappings":"AAWA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,MAAM,aAAa,GAAG,gBAAgB,CAAC;AACvC,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAC3C,MAAM,OAAO,GAAG,gBAAgB,CAAC;AAEjC,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAC5C,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAChD,MAAM,uBAAuB,GAAG,+BAA+B,CAAC;AAChE,MAAM,OAAO,GAAG,qBAAqB,CAAC;AAEtC,MAAM,OAAO,sBAAsB;IACJ;IAA7B,YAA6B,KAAc;QAAd,UAAK,GAAL,KAAK,CAAS;IAAG,CAAC;IAE/C,KAAK,CAAC,IAAI,CAAC,GAAqB;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,aAAa,GAAG,GAAG,CAAC,qBAAqB,CAAC;QACxD,MAAM,OAAO,GAAG,eAAe,GAAG,GAAG,CAAC,MAAM,CAAC;QAE7C,sEAAsE;QACtE,yEAAyE;QACzE,0EAA0E;QAC1E,sEAAsE;QACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACpC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACzD,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAClD,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,MAAM,OAAO,GAAG,eAAe,GAAG,MAAM,CAAC;QACzC,8CAA8C;QAC9C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,OAAO,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,MAAM,OAAO,GAAG,eAAe,GAAG,MAAM,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAqB,CAAC,CAAC;IAClG,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,IAAY;QACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;QACvD,OAAO,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAqB,CAAC,CAAC;IAClG,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAyB;QAC1C,uEAAuE;QACvE,2EAA2E;QAC3E,6EAA6E;QAC7E,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QAEhC,IAAI,UAA8B,CAAC;QACnC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,sEAAsE;YACtE,wEAAwE;YACxE,6DAA6D;YAC7D,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YACvC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC1D,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAC;YACnE,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QAEH,OAAO;YACL,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC;YAC7C,KAAK,EAAE,QAAQ,CAAC,MAAM;YACtB,KAAK;YACL,MAAM;SACP,CAAC;IACJ,CAAC;CACF;AAED,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,KAAc;QAAd,UAAK,GAAL,KAAK,CAAS;IAAG,CAAC;IAE/C,KAAK,CAAC,YAAY,CAAC,QAAsB;QACvC,MAAM,KAAK,GAAG,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC;QAErD,oEAAoE;QACpE,mEAAmE;QACnE,oDAAoD;QACpD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,KAAK,GAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAkB,CAAC,MAAM,CAAC;YAC5D,IAAI,KAAK,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,mCAAmC,CAA8B,CAAC;gBACxF,GAAG,CAAC,IAAI,GAAG,mCAAmC,CAAC;gBAC/C,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,OAAO,CAAC,yBAAyB;QACnC,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACpC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QAChF,QAAQ,CAAC,IAAI,CAAC,uBAAuB,GAAG,QAAQ,CAAC,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC5G,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,MAAc;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,eAAe,GAAG,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAiB,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,IAAY;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;QACvD,OAAO,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,SAAiB;QAClD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,GAAG,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,CAAC;QACzF,OAAO,KAAK,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,aAAqB,EAAE,SAAiB;QAC7D,MAAM,KAAK,GAAG,aAAa,GAAG,aAAa,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC;QACjD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAE/C,MAAM,OAAO,GAAiB,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5D,MAAM,iBAAiB,GAAG,uBAAuB,GAAG,QAAQ,CAAC,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC;QAC/F,MAAM,iBAAiB,GAAG,uBAAuB,GAAG,SAAS,GAAG,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC;QAEzF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACpC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7C,QAAQ,CAAC,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAChE,QAAQ,CAAC,IAAI,CAAC,eAAe,GAAG,SAAS,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QACjE,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAChD,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAChD,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,SAAiB;QACrD,MAAM,cAAc,GAAG,uBAAuB,GAAG,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC;QAC1E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACtD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAE/B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACpC,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,QAAQ,CAAC,GAAG,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC,eAAe,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;YAC5C,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC7B,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC7B,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,6BAA6B,CAAC,aAAqB;QACvD,MAAM,KAAK,GAAG,aAAa,GAAG,aAAa,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC;QAEjD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACpC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAChE,QAAQ,CAAC,IAAI,CAAC,uBAAuB,GAAG,QAAQ,CAAC,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACnG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACtC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAiB,CAAC,CAAC;IAC9F,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,iBAAiB;IAET;IACA;IAFnB,YACmB,KAAc,EACd,SAAS,eAAe;QADxB,UAAK,GAAL,KAAK,CAAS;QACd,WAAM,GAAN,MAAM,CAAkB;IACxC,CAAC;IAEJ,KAAK,CAAC,GAAG,CAAc,GAAW;QAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;QACpD,OAAO,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,GAAG,CAAc,GAAW,EAAE,KAAQ,EAAE,UAAmB;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,UAAU,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;IAC1C,CAAC;CACF"}

package/dist/stores/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/stores/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,wBAAwB,QAsB7B,CAAC;AAET,eAAO,MAAM,oBAAoB,QAqBzB,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/stores/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,wBAAwB,QAgC7B,CAAC;AAET,eAAO,MAAM,oBAAoB,QAqBzB,CAAC"}

package/dist/stores/schema.js

@@ -27,6 +27,16 @@ CREATE TABLE IF NOT EXISTS onesub_subscriptions (
 CREATE INDEX IF NOT EXISTS idx_onesub_subscriptions_user_id
   ON onesub_subscriptions (user_id, updated_at DESC);
 
+-- Filter-helper indexes for /onesub/admin/subscriptions. Each filter column
+-- is paired with updated_at DESC so the planner can serve "latest matching"
+-- without sorting the full table once row count grows.
+CREATE INDEX IF NOT EXISTS idx_onesub_subscriptions_status_updated
+  ON onesub_subscriptions (status, updated_at DESC);
+CREATE INDEX IF NOT EXISTS idx_onesub_subscriptions_platform_updated
+  ON onesub_subscriptions (platform, updated_at DESC);
+CREATE INDEX IF NOT EXISTS idx_onesub_subscriptions_product
+  ON onesub_subscriptions (product_id, updated_at DESC);
+
 -- Backfill columns for installs that already created the table from an older
 -- schema. Safe to re-run.
 ALTER TABLE onesub_subscriptions ADD COLUMN IF NOT EXISTS linked_purchase_token TEXT;

package/dist/stores/schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/stores/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;CAsBvC,CAAC,IAAI,EAAE,CAAC;AAET,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;CAqBnC,CAAC,IAAI,EAAE,CAAC"}
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/stores/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCvC,CAAC,IAAI,EAAE,CAAC;AAET,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;CAqBnC,CAAC,IAAI,EAAE,CAAC"}

package/dist/tracing.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Optional OpenTelemetry tracing.
+ *
+ * `@opentelemetry/api` is an optional peer dependency — when it's installed
+ * onesub wraps its hot paths in spans. When it isn't, every span helper is
+ * a zero-cost no-op (no dynamic import, no Promise overhead).
+ *
+ * Why a custom helper instead of @opentelemetry/instrumentation-express:
+ * the express instrumentation traces every request, but onesub's interesting
+ * spans are specific operations (Apple JWT mint, Google OAuth refresh,
+ * receipt validation, webhook dispatch). Hand-spanned hot paths give
+ * actionable traces without doubling latency-tracker overhead.
+ */
+type Span = {
+    setAttribute: (key: string, value: string | number | boolean) => void;
+    recordException: (err: unknown) => void;
+    setStatus: (status: {
+        code: number;
+        message?: string;
+    }) => void;
+    end: () => void;
+};
+/**
+ * Wrap an async operation in a span. When otel isn't installed the function
+ * runs unmodified — no span object is allocated.
+ *
+ * Use for operations whose latency or failure rate is operationally
+ * interesting: receipt validation, store writes, outbound API calls.
+ */
+export declare function withSpan<T>(name: string, attributes: Record<string, string | number | boolean>, fn: (span: Span) => Promise<T>): Promise<T>;
+export {};
+//# sourceMappingURL=tracing.d.ts.map

package/dist/tracing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracing.d.ts","sourceRoot":"","sources":["../src/tracing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,KAAK,IAAI,GAAG;IACV,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,KAAK,IAAI,CAAC;IACtE,eAAe,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;IACxC,SAAS,EAAE,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAChE,GAAG,EAAE,MAAM,IAAI,CAAC;CACjB,CAAC;AAkCF;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAAC,CAAC,EAC9B,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,EACrD,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAC7B,OAAO,CAAC,CAAC,CAAC,CAmBZ"}

package/dist/tracing.js

@@ -0,0 +1,74 @@
+/**
+ * Optional OpenTelemetry tracing.
+ *
+ * `@opentelemetry/api` is an optional peer dependency — when it's installed
+ * onesub wraps its hot paths in spans. When it isn't, every span helper is
+ * a zero-cost no-op (no dynamic import, no Promise overhead).
+ *
+ * Why a custom helper instead of @opentelemetry/instrumentation-express:
+ * the express instrumentation traces every request, but onesub's interesting
+ * spans are specific operations (Apple JWT mint, Google OAuth refresh,
+ * receipt validation, webhook dispatch). Hand-spanned hot paths give
+ * actionable traces without doubling latency-tracker overhead.
+ */
+const NOOP_SPAN = {
+    setAttribute: () => { },
+    recordException: () => { },
+    setStatus: () => { },
+    end: () => { },
+};
+/**
+ * Lazy-loaded tracer. We don't reach for `@opentelemetry/api` until the
+ * first `withSpan` call so process startup pays nothing when otel is absent.
+ */
+let cachedTracer = null;
+let resolved = false;
+function getTracer() {
+    if (resolved)
+        return cachedTracer;
+    resolved = true;
+    try {
+        // Resolve synchronously via require — otel api is CJS-friendly.
+        // require is undefined in pure ESM at runtime; in that case skip otel.
+        const req = globalThis.require;
+        if (!req)
+            return null;
+        const otel = req('@opentelemetry/api');
+        cachedTracer = otel.trace.getTracer('@onesub/server', '1.0.0');
+        return cachedTracer;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Wrap an async operation in a span. When otel isn't installed the function
+ * runs unmodified — no span object is allocated.
+ *
+ * Use for operations whose latency or failure rate is operationally
+ * interesting: receipt validation, store writes, outbound API calls.
+ */
+export async function withSpan(name, attributes, fn) {
+    const tracer = getTracer();
+    if (!tracer)
+        return fn(NOOP_SPAN);
+    return tracer.startActiveSpan(name, async (span) => {
+        for (const [k, v] of Object.entries(attributes))
+            span.setAttribute(k, v);
+        try {
+            const result = await fn(span);
+            // status code 1 = OK, 2 = ERROR (avoid importing the enum from otel api)
+            span.setStatus({ code: 1 });
+            return result;
+        }
+        catch (err) {
+            span.recordException(err);
+            span.setStatus({ code: 2, message: err.message });
+            throw err;
+        }
+        finally {
+            span.end();
+        }
+    });
+}
+//# sourceMappingURL=tracing.js.map

package/dist/tracing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracing.js","sourceRoot":"","sources":["../src/tracing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAaH,MAAM,SAAS,GAAS;IACtB,YAAY,EAAE,GAAG,EAAE,GAAE,CAAC;IACtB,eAAe,EAAE,GAAG,EAAE,GAAE,CAAC;IACzB,SAAS,EAAE,GAAG,EAAE,GAAE,CAAC;IACnB,GAAG,EAAE,GAAG,EAAE,GAAE,CAAC;CACd,CAAC;AAEF;;;GAGG;AACH,IAAI,YAAY,GAAkB,IAAI,CAAC;AACvC,IAAI,QAAQ,GAAG,KAAK,CAAC;AAErB,SAAS,SAAS;IAChB,IAAI,QAAQ;QAAE,OAAO,YAAY,CAAC;IAClC,QAAQ,GAAG,IAAI,CAAC;IAChB,IAAI,CAAC;QACH,gEAAgE;QAChE,uEAAuE;QACvE,MAAM,GAAG,GACP,UACD,CAAC,OAAO,CAAC;QACV,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,IAAI,GAAG,GAAG,CAAC,oBAAoB,CAA+D,CAAC;QACrG,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAC/D,OAAO,YAAY,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAY,EACZ,UAAqD,EACrD,EAA8B;IAE9B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IAElC,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACjD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;YAAE,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;YAC9B,yEAAyE;YACzE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7D,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/webhook-events.d.ts

@@ -0,0 +1,58 @@
+import type { CacheAdapter } from './cache.js';
+/**
+ * Pluggable webhook-event idempotency store.
+ *
+ * Apple sends `notificationUUID` and Google Pub/Sub sends `messageId` — both
+ * are guaranteed unique per notification. Apple/Google will retry on any
+ * non-2xx response (Apple: ~3 days, Google: configurable Pub/Sub policy), so
+ * the same notification can hit our handler multiple times if the previous
+ * response timed out, the DB was briefly down, etc. We must not double-apply
+ * state changes (extra subscription days, refunded purchase being deleted
+ * twice, consumption response being PUT twice).
+ *
+ * `markIfNew` returns `true` when the caller should process the event,
+ * `false` when it has been seen before. Implementations decide retention —
+ * once-seen IDs are kept long enough that retries from the source can't beat
+ * the TTL (we recommend ≥ 7 days).
+ */
+export interface WebhookEventStore {
+    /**
+     * Atomically register the given event id. Returns `true` if it's new (first
+     * time we've seen it), `false` if it was already seen.
+     *
+     * `provider` lets us key by source so Apple's notificationUUID and Google's
+     * messageId never collide.
+     */
+    markIfNew(provider: 'apple' | 'google', eventId: string): Promise<boolean>;
+}
+/**
+ * In-memory implementation. Suitable for single-instance dev/test; for
+ * production multi-instance use the Redis or Postgres variants so retries to
+ * other nodes are still deduped.
+ */
+export declare class InMemoryWebhookEventStore implements WebhookEventStore {
+    private readonly ttlSeconds;
+    private readonly seen;
+    constructor(ttlSeconds?: number);
+    markIfNew(provider: 'apple' | 'google', eventId: string): Promise<boolean>;
+    private evictExpired;
+}
+/**
+ * Cache-backed implementation — works with any `CacheAdapter`.
+ *
+ * Uses a `get` → `set` sequence, which is **not** atomic under concurrent
+ * retries: two simultaneous calls for the same id can both read null and
+ * both return `true`. The downstream store PKs / BullMQ jobId dedup catch
+ * this worst case.
+ *
+ * For Redis deployments prefer `RedisWebhookEventStore` (from
+ * `@onesub/server`) which uses a single `SET NX` command and is fully
+ * atomic.
+ */
+export declare class CacheWebhookEventStore implements WebhookEventStore {
+    private readonly cache;
+    private readonly ttlSeconds;
+    constructor(cache: CacheAdapter, ttlSeconds?: number);
+    markIfNew(provider: 'apple' | 'google', eventId: string): Promise<boolean>;
+}
+//# sourceMappingURL=webhook-events.d.ts.map

package/dist/webhook-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-events.d.ts","sourceRoot":"","sources":["../src/webhook-events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;;;OAMG;IACH,SAAS,CAAC,QAAQ,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5E;AAKD;;;;GAIG;AACH,qBAAa,yBAA0B,YAAW,iBAAiB;IAGrD,OAAO,CAAC,QAAQ,CAAC,UAAU;IAFvC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;gBAErB,UAAU,SAAsB;IAEvD,SAAS,CAAC,QAAQ,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQhF,OAAO,CAAC,YAAY;CAMrB;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,sBAAuB,YAAW,iBAAiB;IAE5D,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,UAAU;gBADV,KAAK,EAAE,YAAY,EACnB,UAAU,SAAsB;IAG7C,SAAS,CAAC,QAAQ,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAOjF"}

package/dist/webhook-events.js

@@ -0,0 +1,57 @@
+/** Default 7-day retention — covers Apple's 3-day retry window plus headroom. */
+const DEFAULT_TTL_SECONDS = 7 * 24 * 60 * 60;
+/**
+ * In-memory implementation. Suitable for single-instance dev/test; for
+ * production multi-instance use the Redis or Postgres variants so retries to
+ * other nodes are still deduped.
+ */
+export class InMemoryWebhookEventStore {
+    ttlSeconds;
+    seen = new Map();
+    constructor(ttlSeconds = DEFAULT_TTL_SECONDS) {
+        this.ttlSeconds = ttlSeconds;
+    }
+    async markIfNew(provider, eventId) {
+        this.evictExpired();
+        const key = `${provider}:${eventId}`;
+        if (this.seen.has(key))
+            return false;
+        this.seen.set(key, Date.now() + this.ttlSeconds * 1000);
+        return true;
+    }
+    evictExpired() {
+        const now = Date.now();
+        for (const [key, expiresAt] of this.seen) {
+            if (expiresAt < now)
+                this.seen.delete(key);
+        }
+    }
+}
+/**
+ * Cache-backed implementation — works with any `CacheAdapter` (including
+ * `RedisCacheAdapter`), so multi-instance deployments dedupe across nodes.
+ *
+ * Uses the cache's atomic `set` semantics: we call `get` then `set` with TTL.
+ * This is correct under low contention; for very high concurrency the
+ * implementation may want a backend with native SETNX. RedisCacheAdapter's
+ * `set` is idempotent, so concurrent first-writes converge — the behavior is
+ * "at-most-twice" rather than "exactly once" in the worst race, which the
+ * downstream store-level idempotency (`originalTransactionId` PK) catches.
+ */
+export class CacheWebhookEventStore {
+    cache;
+    ttlSeconds;
+    constructor(cache, ttlSeconds = DEFAULT_TTL_SECONDS) {
+        this.cache = cache;
+        this.ttlSeconds = ttlSeconds;
+    }
+    async markIfNew(provider, eventId) {
+        const key = `webhook:event:${provider}:${eventId}`;
+        const existing = await this.cache.get(key);
+        if (existing)
+            return false;
+        await this.cache.set(key, '1', this.ttlSeconds);
+        return true;
+    }
+}
+//# sourceMappingURL=webhook-events.js.map

package/dist/webhook-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-events.js","sourceRoot":"","sources":["../src/webhook-events.ts"],"names":[],"mappings":"AA6BA,iFAAiF;AACjF,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAE7C;;;;GAIG;AACH,MAAM,OAAO,yBAAyB;IAGP;IAFZ,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IAElD,YAA6B,aAAa,mBAAmB;QAAhC,eAAU,GAAV,UAAU,CAAsB;IAAG,CAAC;IAEjE,KAAK,CAAC,SAAS,CAAC,QAA4B,EAAE,OAAe;QAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,OAAO,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,YAAY;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,SAAS,GAAG,GAAG;gBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;CACF;AAED;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sBAAsB;IAEd;IACA;IAFnB,YACmB,KAAmB,EACnB,aAAa,mBAAmB;QADhC,UAAK,GAAL,KAAK,CAAc;QACnB,eAAU,GAAV,UAAU,CAAsB;IAChD,CAAC;IAEJ,KAAK,CAAC,SAAS,CAAC,QAA4B,EAAE,OAAe;QAC3D,MAAM,GAAG,GAAG,iBAAiB,QAAQ,IAAI,OAAO,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAS,GAAG,CAAC,CAAC;QACnD,IAAI,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC3B,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/webhook-queue.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Webhook processing queue.
+ *
+ * The default in-process queue runs the handler synchronously inside the HTTP
+ * request — the same behavior you got before this interface existed. For
+ * production deployments that want decoupled retries, swap in a queue-backed
+ * implementation (BullMQ, SQS, etc.) so a slow DB or Apple/Google API call
+ * doesn't block the webhook from acknowledging.
+ *
+ * Failure semantics:
+ *   - Handler throws  → queue records the failure and (for retrying queues)
+ *                       re-runs with backoff. After max attempts the job
+ *                       lands in the dead-letter store.
+ *   - Handler returns → ack to source.
+ *
+ * The HTTP route should always 200 once the job is *enqueued*. Synchronous
+ * processing happens to acknowledge later only because the in-process queue
+ * runs inline; for any async queue the route should ack after `enqueue()`.
+ */
+export interface WebhookJob<T = unknown> {
+    provider: 'apple' | 'google';
+    /** Source-supplied event id (notificationUUID / messageId) for tracing. */
+    eventId: string;
+    payload: T;
+}
+export type WebhookHandler<T = unknown> = (job: WebhookJob<T>) => Promise<void>;
+export interface WebhookQueue {
+    /**
+     * Enqueue a job. Returns once the job is durably accepted (synchronous for
+     * in-process; persisted-to-Redis for BullMQ).
+     */
+    enqueue<T>(job: WebhookJob<T>): Promise<void>;
+    /** Register the worker handler. Called once during middleware setup. */
+    setHandler<T>(handler: WebhookHandler<T>): void;
+    /** Optional: list jobs in the dead-letter queue (for the admin replay UI). */
+    listDeadLetters?(): Promise<DeadLetterRecord[]>;
+    /** Optional: replay a specific dead-letter job back through the handler. */
+    replayDeadLetter?(id: string): Promise<void>;
+    /** Optional: graceful shutdown. */
+    close?(): Promise<void>;
+}
+export interface DeadLetterRecord {
+    id: string;
+    job: WebhookJob;
+    attempts: number;
+    lastError: string;
+    failedAt: string;
+}
+/**
+ * Synchronous, in-process implementation. Default — no extra infra required.
+ * Handler runs inside the HTTP request, so route latency = handler latency.
+ *
+ * Failures are NOT retried — the original Apple/Google source retry policy
+ * is the durability layer (4xx = no retry, 5xx = source retries). This
+ * matches the pre-queue behavior.
+ */
+export declare class InProcessWebhookQueue implements WebhookQueue {
+    private handler;
+    setHandler<T>(handler: WebhookHandler<T>): void;
+    enqueue<T>(job: WebhookJob<T>): Promise<void>;
+}
+export interface BullMQWebhookQueueOptions {
+    /** ioredis connection (or compatible options). Required. */
+    connection: unknown;
+    /** Queue name. Defaults to 'onesub-webhooks'. */
+    queueName?: string;
+    /** Max retry attempts before sending the job to the dead-letter list. */
+    maxAttempts?: number;
+    /** Backoff (ms) between attempts. Exponential: backoffMs * 2^(attempt-1). */
+    backoffMs?: number;
+    /** Worker concurrency. Defaults to 4. */
+    concurrency?: number;
+}
+export declare class BullMQWebhookQueue implements WebhookQueue {
+    private queueName;
+    private maxAttempts;
+    private backoffMs;
+    private concurrency;
+    private connection;
+    private queuePromise;
+    private workerPromise;
+    private handler;
+    constructor(opts: BullMQWebhookQueueOptions);
+    private getBullMQ;
+    private getQueue;
+    setHandler<T>(handler: WebhookHandler<T>): void;
+    enqueue<T>(job: WebhookJob<T>): Promise<void>;
+    listDeadLetters(): Promise<DeadLetterRecord[]>;
+    replayDeadLetter(id: string): Promise<void>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=webhook-queue.d.ts.map

package/dist/webhook-queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-queue.d.ts","sourceRoot":"","sources":["../src/webhook-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,UAAU,CAAC,CAAC,GAAG,OAAO;IACrC,QAAQ,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC7B,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,CAAC,CAAC;CACZ;AAED,MAAM,MAAM,cAAc,CAAC,CAAC,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAEhF,MAAM,WAAW,YAAY;IAC3B;;;OAGG;IACH,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,wEAAwE;IACxE,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAChD,8EAA8E;IAC9E,eAAe,CAAC,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAChD,4EAA4E;IAC5E,gBAAgB,CAAC,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,mCAAmC;IACnC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,UAAU,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,qBAAa,qBAAsB,YAAW,YAAY;IACxD,OAAO,CAAC,OAAO,CAA+B;IAE9C,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,IAAI;IAIzC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;CAMpD;AAsDD,MAAM,WAAW,yBAAyB;IACxC,4DAA4D;IAC5D,UAAU,EAAE,OAAO,CAAC;IACpB,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,kBAAmB,YAAW,YAAY;IACrD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,UAAU,CAAU;IAI5B,OAAO,CAAC,YAAY,CAAqC;IACzD,OAAO,CAAC,aAAa,CAAsC;IAC3D,OAAO,CAAC,OAAO,CAA+B;gBAElC,IAAI,EAAE,yBAAyB;YAQ7B,SAAS;IAMvB,OAAO,CAAC,QAAQ;IAUhB,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,IAAI;IAoBzC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAW7C,eAAe,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAY9C,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO3C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAU7B"}