@onesub/server 0.11.4 → 0.12.1

package/dist/openapi.d.ts

@@ -0,0 +1,41 @@
+/**
+ * OpenAPI 3.1 spec for the onesub HTTP surface.
+ *
+ * Hand-maintained — kept in sync with the routes by a parity test (see
+ * __tests__/openapi.test.ts) that asserts every mounted path is described
+ * here. Generated clients live downstream:
+ *
+ *   - swagger-typescript-api → typed fetch client
+ *   - openapi-generator-cli  → Kotlin/Swift/etc. clients
+ *
+ * Why hand-maintained instead of zod-to-openapi: the routes use zod for
+ * input validation but the request/response shapes the public docs need are
+ * a thin slice of those internal types. Hand-writing keeps the doc readable
+ * without coupling client output to internal validation strictness changes.
+ */
+export interface OpenAPIDoc {
+    openapi: '3.1.0';
+    info: {
+        title: string;
+        version: string;
+        description: string;
+    };
+    servers: Array<{
+        url: string;
+        description?: string;
+    }>;
+    paths: Record<string, unknown>;
+    components: {
+        schemas: Record<string, unknown>;
+        securitySchemes: Record<string, unknown>;
+    };
+}
+export declare const ONESUB_OPENAPI: OpenAPIDoc;
+/**
+ * Mount a route that serves the OpenAPI document. Useful for hosts that want
+ * to expose `/openapi.json` to API explorers / SDK generators.
+ *
+ *   app.use('/openapi.json', openapiHandler());
+ */
+export declare function openapiHandler(): (_req: import("express").Request, res: import("express").Response) => void;
+//# sourceMappingURL=openapi.d.ts.map

package/dist/openapi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openapi.d.ts","sourceRoot":"","sources":["../src/openapi.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAIH,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE;QACJ,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,WAAW,EAAE,MAAM,CAAC;KACrB,CAAC;IACF,OAAO,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACtD,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,UAAU,EAAE;QACV,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC1C,CAAC;CACH;AAED,eAAO,MAAM,cAAc,EAAE,UAyK5B,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,cAAc,KACpB,MAAM,OAAO,SAAS,EAAE,OAAO,EAAE,KAAK,OAAO,SAAS,EAAE,QAAQ,UAGzE"}

package/dist/providers/apple.d.ts

@@ -59,7 +59,7 @@ export declare function decodeAppleNotification(payload: AppleNotificationPayloa
     /** May be null for non-subscription notifications (consumable refund). */
     expiresAt: string | null;
 } | null>;
-/** Test-only: clear the module-level Apple JWT cache. Not exported. */
+/** Test-only: clear the Apple JWT cache. Not exported. */
 declare function clearAppleJwtCacheForTests(): void;
 export declare const __testing: {
     clearAppleJwtCacheForTests: typeof clearAppleJwtCacheForTests;

package/dist/providers/apple.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"apple.d.ts","sourceRoot":"","sources":["../../src/providers/apple.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EACnB,MAAM,gBAAgB,CAAC;AAUxB,KAAK,WAAW,GAAG,WAAW,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;AA2F5D;;;;;;;;;GASG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,gBAAgB,UAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAuBpF;AAsBD;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAoDlC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,2EAA2E;IAC3E,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;GASG;AACH,wBAAsB,8BAA8B,CAClD,iBAAiB,EAAE,MAAM,EACzB,MAAM,EAAE,WAAW,EACnB,iBAAiB,CAAC,EAAE,MAAM,GACzB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAgFpC;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,wBAAwB,EACjC,mBAAmB,UAAQ,GAC1B,OAAO,CAAC;IACT,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gGAAgG;IAChG,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,oGAAoG;IACpG,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,2EAA2E;IAC3E,WAAW,EAAE,YAAY,GAAG,SAAS,CAAC;IACtC,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACnC,SAAS,EAAE,OAAO,CAAC;IACnB,0EAA0E;IAC1E,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,GAAG,IAAI,CAAC,CA2CR;AAgED,uEAAuE;AACvE,iBAAS,0BAA0B,IAAI,IAAI,CAG1C;AAED,eAAO,MAAM,SAAS;;CAAiC,CAAC;AAExD;;;;;;;;;;;GAWG;AACH,wBAAsB,4BAA4B,CAChD,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,uBAAuB,EAC7B,MAAM,EAAE,WAAW,EACnB,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9B,OAAO,CAAC,IAAI,CAAC,CAgCf;AAgDD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,4BAA4B,CAChD,qBAAqB,EAAE,MAAM,EAC7B,MAAM,EAAE,WAAW,EACnB,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9B,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CA8ElC"}
+{"version":3,"file":"apple.d.ts","sourceRoot":"","sources":["../../src/providers/apple.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,gBAAgB,EAChB,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EACnB,MAAM,gBAAgB,CAAC;AAWxB,KAAK,WAAW,GAAG,WAAW,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC;AA2F5D;;;;;;;;;GASG;AACH,wBAAsB,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,gBAAgB,UAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,CAuBpF;AAsBD;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAoDlC;AAED;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,2EAA2E;IAC3E,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;GASG;AACH,wBAAsB,8BAA8B,CAClD,iBAAiB,EAAE,MAAM,EACzB,MAAM,EAAE,WAAW,EACnB,iBAAiB,CAAC,EAAE,MAAM,GACzB,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAgFpC;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,wBAAwB,EACjC,mBAAmB,UAAQ,GAC1B,OAAO,CAAC;IACT,qBAAqB,EAAE,MAAM,CAAC;IAC9B,gGAAgG;IAChG,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,oGAAoG;IACpG,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,2EAA2E;IAC3E,WAAW,EAAE,YAAY,GAAG,SAAS,CAAC;IACtC,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACnC,SAAS,EAAE,OAAO,CAAC;IACnB,0EAA0E;IAC1E,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,GAAG,IAAI,CAAC,CA2CR;AAmED,0DAA0D;AAC1D,iBAAS,0BAA0B,IAAI,IAAI,CAO1C;AAED,eAAO,MAAM,SAAS;;CAAiC,CAAC;AAExD;;;;;;;;;;;GAWG;AACH,wBAAsB,4BAA4B,CAChD,aAAa,EAAE,MAAM,EACrB,IAAI,EAAE,uBAAuB,EAC7B,MAAM,EAAE,WAAW,EACnB,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9B,OAAO,CAAC,IAAI,CAAC,CAgCf;AAgDD;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,4BAA4B,CAChD,qBAAqB,EAAE,MAAM,EAC7B,MAAM,EAAE,WAAW,EACnB,OAAO,CAAC,EAAE;IAAE,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GAC9B,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CA8ElC"}

package/dist/providers/google.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../../src/providers/google.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAStG,KAAK,YAAY,GAAG,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;AAmD9D;;;GAGG;AACH,QAAA,MAAM,wBAAwB;;;;;;;;;;;;;;CAcpB,CAAC;AAEX,KAAK,sBAAsB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,OAAO,wBAAwB,CAAC,CAAC;AA+LvG;;;;;;;GAOG;AACH,wBAAsB,6BAA6B,CACjD,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC5C,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,IAAI,CAAC,CA+Bf;AAED;;;;;;;GAOG;AACH,wBAAsB,2BAA2B,CAC/C,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,IAAI,CAAC,CA6Bf;AA+BD;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAiElC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,2EAA2E;IAC3E,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;GASG;AACH,wBAAsB,4BAA4B,CAChD,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,EACpB,IAAI,GAAE,YAAY,GAAG,gBAAmC,GACvD,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAiDrC;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,yBAAyB,GAAG;IAC5E,gBAAgB,EAAE,sBAAsB,CAAC;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,IAAI,CAuBP;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC,mEAAmE;IACnE,aAAa,EAAE,MAAM,CAAC;IACtB,gFAAgF;IAChF,OAAO,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;IACnB,uEAAuE;IACvE,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,yBAAyB,GACjC,wBAAwB,GAAG,IAAI,CAqBjC;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,gBAAgB,EAAE,sBAAsB,GAAG,OAAO,CAO5F;AAED,wBAAgB,4BAA4B,CAAC,gBAAgB,EAAE,sBAAsB,GAAG,OAAO,CAK9F;AAED,wBAAgB,2BAA2B,CAAC,gBAAgB,EAAE,sBAAsB,GAAG,OAAO,CAE7F;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAAC,gBAAgB,EAAE,sBAAsB,GAAG,OAAO,CAEjG;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,gBAAgB,EAAE,sBAAsB,GAAG,OAAO,CAE5F;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,gBAAgB,EAAE,sBAAsB,GAAG,OAAO,CAE5F;AAED;;;GAGG;AACH,wBAAgB,wCAAwC,CAAC,gBAAgB,EAAE,sBAAsB,GAAG,OAAO,CAE1G"}
+{"version":3,"file":"google.d.ts","sourceRoot":"","sources":["../../src/providers/google.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAUtG,KAAK,YAAY,GAAG,WAAW,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;AAmD9D;;;GAGG;AACH,QAAA,MAAM,wBAAwB;;;;;;;;;;;;;;CAcpB,CAAC;AAEX,KAAK,sBAAsB,GAAG,CAAC,OAAO,wBAAwB,CAAC,CAAC,MAAM,OAAO,wBAAwB,CAAC,CAAC;AA8NvG;;;;;;;GAOG;AACH,wBAAsB,6BAA6B,CACjD,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,IAAI,CAAC,CAgCf;AAED;;;;;GAKG;AACH,wBAAsB,wBAAwB,CAC5C,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,IAAI,CAAC,CAgCf;AAED;;;;;;;GAOG;AACH,wBAAsB,2BAA2B,CAC/C,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,IAAI,CAAC,CA8Bf;AA+BD;;;;;;;;;;;GAWG;AACH,wBAAsB,qBAAqB,CACzC,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAqElC;AAED;;GAEG;AACH,MAAM,WAAW,mBAAmB;IAClC,2EAA2E;IAC3E,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;GASG;AACH,wBAAsB,4BAA4B,CAChD,aAAa,EAAE,MAAM,EACrB,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,EACpB,IAAI,GAAE,YAAY,GAAG,gBAAmC,GACvD,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAqDrC;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,yBAAyB,GAAG;IAC5E,gBAAgB,EAAE,sBAAsB,CAAC;IACzC,aAAa,EAAE,MAAM,CAAC;IACtB,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;CACrB,GAAG,IAAI,CAuBP;AAED;;;;;GAKG;AACH,MAAM,WAAW,wBAAwB;IACvC,mEAAmE;IACnE,aAAa,EAAE,MAAM,CAAC;IACtB,gFAAgF;IAChF,OAAO,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC;IACnB,uEAAuE;IACvE,UAAU,EAAE,CAAC,GAAG,CAAC,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED;;;GAGG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,yBAAyB,GACjC,wBAAwB,GAAG,IAAI,CAqBjC;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,gBAAgB,EAAE,sBAAsB,GAAG,OAAO,CAO5F;AAED,wBAAgB,4BAA4B,CAAC,gBAAgB,EAAE,sBAAsB,GAAG,OAAO,CAK9F;AAED,wBAAgB,2BAA2B,CAAC,gBAAgB,EAAE,sBAAsB,GAAG,OAAO,CAE7F;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,CAAC,gBAAgB,EAAE,sBAAsB,GAAG,OAAO,CAEjG;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,gBAAgB,EAAE,sBAAsB,GAAG,OAAO,CAE5F;AAED;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,gBAAgB,EAAE,sBAAsB,GAAG,OAAO,CAE5F;AAED;;;GAGG;AACH,wBAAgB,wCAAwC,CAAC,gBAAgB,EAAE,sBAAsB,GAAG,OAAO,CAE1G"}

package/dist/routes/admin.d.ts

@@ -1,6 +1,7 @@
 import { Router } from 'express';
 import type { OneSubServerConfig } from '@onesub/shared';
 import type { PurchaseStore, SubscriptionStore } from '../store.js';
+import type { WebhookQueue } from '../webhook-queue.js';
 /**
  * Admin routes for testing / operational tasks. Require `X-Admin-Secret`
  * header matching config.adminSecret. If config.adminSecret is not set, the
@@ -27,5 +28,5 @@ import type { PurchaseStore, SubscriptionStore } from '../store.js';
  *     → bundle of every record onesub knows for one user (subs + purchases +
  *       entitlements when configured). Backs the dashboard customer detail page.
  */
-export declare function createAdminRouter(config: OneSubServerConfig, purchaseStore: PurchaseStore, store: SubscriptionStore): Router | null;
+export declare function createAdminRouter(config: OneSubServerConfig, purchaseStore: PurchaseStore, store: SubscriptionStore, webhookQueue?: WebhookQueue): Router | null;
 //# sourceMappingURL=admin.d.ts.map

package/dist/routes/admin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../src/routes/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC,OAAO,KAAK,EAGV,kBAAkB,EAKnB,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAMpE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,kBAAkB,EAC1B,aAAa,EAAE,aAAa,EAC5B,KAAK,EAAE,iBAAiB,GACvB,MAAM,GAAG,IAAI,CA8Nf"}
+{"version":3,"file":"admin.d.ts","sourceRoot":"","sources":["../../src/routes/admin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC,OAAO,KAAK,EAGV,kBAAkB,EAKnB,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAGpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAIxD;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,kBAAkB,EAC1B,aAAa,EAAE,aAAa,EAC5B,KAAK,EAAE,iBAAiB,EACxB,YAAY,CAAC,EAAE,YAAY,GAC1B,MAAM,GAAG,IAAI,CAiQf"}

package/dist/routes/webhook-apple.d.ts

@@ -0,0 +1,6 @@
+import type { Request, Response } from 'express';
+import type { OneSubServerConfig } from '@onesub/shared';
+import type { SubscriptionStore, PurchaseStore } from '../store.js';
+import type { WebhookEventStore } from '../webhook-events.js';
+export declare function handleAppleWebhook(req: Request, res: Response, config: OneSubServerConfig, store: SubscriptionStore, purchaseStore: PurchaseStore, webhookEventStore?: WebhookEventStore): Promise<void>;
+//# sourceMappingURL=webhook-apple.d.ts.map

package/dist/routes/webhook-apple.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-apple.d.ts","sourceRoot":"","sources":["../../src/routes/webhook-apple.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,KAAK,EAEV,kBAAkB,EAEnB,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AASpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAsB9D,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,MAAM,EAAE,kBAAkB,EAC1B,KAAK,EAAE,iBAAiB,EACxB,aAAa,EAAE,aAAa,EAC5B,iBAAiB,CAAC,EAAE,iBAAiB,GACpC,OAAO,CAAC,IAAI,CAAC,CAsIf"}

package/dist/routes/webhook-google.d.ts

@@ -0,0 +1,7 @@
+import type { Request, Response } from 'express';
+import type { OneSubServerConfig } from '@onesub/shared';
+import type { SubscriptionStore, PurchaseStore } from '../store.js';
+import type { WebhookEventStore } from '../webhook-events.js';
+export declare function verifyGooglePushToken(req: Request, expectedAudience: string): Promise<boolean>;
+export declare function handleGoogleWebhook(req: Request, res: Response, config: OneSubServerConfig, store: SubscriptionStore, purchaseStore: PurchaseStore, webhookEventStore?: WebhookEventStore): Promise<void>;
+//# sourceMappingURL=webhook-google.d.ts.map

package/dist/routes/webhook-google.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-google.d.ts","sourceRoot":"","sources":["../../src/routes/webhook-google.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACjD,OAAO,KAAK,EAA6B,kBAAkB,EAAoB,MAAM,gBAAgB,CAAC;AAEtG,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAepE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAW9D,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,OAAO,EAAE,gBAAgB,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAWpG;AAED,wBAAsB,mBAAmB,CACvC,GAAG,EAAE,OAAO,EACZ,GAAG,EAAE,QAAQ,EACb,MAAM,EAAE,kBAAkB,EAC1B,KAAK,EAAE,iBAAiB,EACxB,aAAa,EAAE,aAAa,EAC5B,iBAAiB,CAAC,EAAE,iBAAiB,GACpC,OAAO,CAAC,IAAI,CAAC,CAmJf"}

package/dist/routes/webhook.d.ts

@@ -1,26 +1,14 @@
 import { Router } from 'express';
 import type { OneSubServerConfig } from '@onesub/shared';
 import type { SubscriptionStore, PurchaseStore } from '../store.js';
+import type { WebhookEventStore } from '../webhook-events.js';
 /**
  * Retry / durability semantics.
  *
- * Both Apple (App Store Server Notifications V2) and Google (Pub/Sub RTDN)
- * retry on any non-2xx response:
- *   - Apple: up to 5 retries over ~3 days, exponential backoff.
- *   - Google: per-Pub/Sub-subscription retry policy (default: retries until
- *     the message is ack'd or the retention window expires, up to 7 days).
- *
- * This router uses that built-in retry instead of a local dead-letter queue:
- *
- *   4xx — the payload is unusable (missing signedPayload, bad signature,
- *         package mismatch). Return 4xx so the sender does NOT retry, since
- *         the same request would fail again.
- *   5xx — a transient failure on our side (DB down, network to Play API).
- *         Return 5xx so Apple / Google retry the notification for us.
- *   2xx — processed, or intentionally ignored (e.g. test notification).
- *
- * If you need an explicit DLQ, wrap `store.save()` with your own error
- * handler before passing the store to `createOneSubMiddleware()`.
+ * Both Apple and Google retry on any non-2xx response.
+ *   4xx — payload is unusable; do NOT retry.
+ *   5xx — transient failure; source will retry.
+ *   2xx — processed or intentionally ignored.
  */
-export declare function createWebhookRouter(config: OneSubServerConfig, store: SubscriptionStore, purchaseStore: PurchaseStore): Router;
+export declare function createWebhookRouter(config: OneSubServerConfig, store: SubscriptionStore, purchaseStore: PurchaseStore, webhookEventStore?: WebhookEventStore): Router;
 //# sourceMappingURL=webhook.d.ts.map

package/dist/routes/webhook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../src/routes/webhook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAGjC,OAAO,KAAK,EAGV,kBAAkB,EAEnB,MAAM,gBAAgB,CAAC;AAExB,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAqHpE;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,kBAAkB,EAC1B,KAAK,EAAE,iBAAiB,EACxB,aAAa,EAAE,aAAa,GAC3B,MAAM,CA6XR"}
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../src/routes/webhook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AAEjC,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEzD,OAAO,KAAK,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACpE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAI9D;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,kBAAkB,EAC1B,KAAK,EAAE,iBAAiB,EACxB,aAAa,EAAE,aAAa,EAC5B,iBAAiB,CAAC,EAAE,iBAAiB,GACpC,MAAM,CAYR"}

package/dist/stores/redis.d.ts

@@ -0,0 +1,60 @@
+import type { SubscriptionInfo, PurchaseInfo } from '@onesub/shared';
+import type { SubscriptionStore, PurchaseStore, ListFilteredOptions, ListFilteredResult } from '../store.js';
+import type { CacheAdapter } from '../cache.js';
+import type { WebhookEventStore } from '../webhook-events.js';
+type IORedis = import('ioredis').Redis;
+export declare class RedisSubscriptionStore implements SubscriptionStore {
+    private readonly redis;
+    constructor(redis: IORedis);
+    save(sub: SubscriptionInfo): Promise<void>;
+    getByUserId(userId: string): Promise<SubscriptionInfo | null>;
+    getAllByUserId(userId: string): Promise<SubscriptionInfo[]>;
+    getByTransactionId(txId: string): Promise<SubscriptionInfo | null>;
+    listAll(): Promise<SubscriptionInfo[]>;
+    listFiltered(opts: ListFilteredOptions): Promise<ListFilteredResult>;
+}
+export declare class RedisPurchaseStore implements PurchaseStore {
+    private readonly redis;
+    constructor(redis: IORedis);
+    savePurchase(purchase: PurchaseInfo): Promise<void>;
+    getPurchasesByUserId(userId: string): Promise<PurchaseInfo[]>;
+    getPurchaseByTransactionId(txId: string): Promise<PurchaseInfo | null>;
+    hasPurchased(userId: string, productId: string): Promise<boolean>;
+    reassignPurchase(transactionId: string, newUserId: string): Promise<boolean>;
+    deletePurchases(userId: string, productId: string): Promise<number>;
+    deletePurchaseByTransactionId(transactionId: string): Promise<boolean>;
+    listAll(): Promise<PurchaseInfo[]>;
+}
+/**
+ * Redis-backed cache adapter — share JWKS / OAuth tokens across cluster nodes.
+ *
+ * Implements `CacheAdapter` so it plugs into the same default-cache slot used
+ * by the Apple JWT minter and Google OAuth token minter.
+ */
+export declare class RedisCacheAdapter implements CacheAdapter {
+    private readonly redis;
+    private readonly prefix;
+    constructor(redis: IORedis, prefix?: string);
+    get<T = unknown>(key: string): Promise<T | null>;
+    set<T = unknown>(key: string, value: T, ttlSeconds?: number): Promise<void>;
+    del(key: string): Promise<void>;
+}
+/**
+ * Redis-backed webhook idempotency store.
+ *
+ * Uses `SET key '1' EX ttl NX` — a single atomic command that sets the key
+ * only if it does not already exist. Returns 'OK' (new event) or null
+ * (already seen), with no race between a GET and a subsequent SET.
+ *
+ * Prefer this over `CacheWebhookEventStore(new RedisCacheAdapter(...))` for
+ * production deployments; the cache-based variant is non-atomic under
+ * concurrent retries.
+ */
+export declare class RedisWebhookEventStore implements WebhookEventStore {
+    private readonly redis;
+    private readonly ttlSeconds;
+    constructor(redis: IORedis, ttlSeconds?: number);
+    markIfNew(provider: 'apple' | 'google', eventId: string): Promise<boolean>;
+}
+export {};
+//# sourceMappingURL=redis.d.ts.map

package/dist/stores/redis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.d.ts","sourceRoot":"","sources":["../../src/stores/redis.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACrE,OAAO,KAAK,EACV,iBAAiB,EACjB,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAE9D,KAAK,OAAO,GAAG,OAAO,SAAS,EAAE,KAAK,CAAC;AAiDvC,qBAAa,sBAAuB,YAAW,iBAAiB;IAClD,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,OAAO;IAErC,IAAI,CAAC,GAAG,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;IAa1C,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAS7D,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAQ3D,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC;IAKlE,OAAO,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAQtC,YAAY,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC;CA2C3E;AAED,qBAAa,kBAAmB,YAAW,aAAa;IAC1C,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAAL,KAAK,EAAE,OAAO;IAErC,YAAY,CAAC,QAAQ,EAAE,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC;IA0BnD,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAO7D,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,YAAY,GAAG,IAAI,CAAC;IAKtE,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKjE,gBAAgB,CAAC,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAsB5E,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAgBnE,6BAA6B,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAetE,OAAO,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;CAMzC;AAED;;;;;GAKG;AACH,qBAAa,iBAAkB,YAAW,YAAY;IAElD,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBADN,KAAK,EAAE,OAAO,EACd,MAAM,SAAkB;IAGrC,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAKhD,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU3E,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAGtC;AAKD;;;;;;;;;;GAUG;AACH,qBAAa,sBAAuB,YAAW,iBAAiB;IAE5D,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,UAAU;gBADV,KAAK,EAAE,OAAO,EACd,UAAU,SAA8B;IAGrD,SAAS,CAAC,QAAQ,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAKjF"}

package/dist/stores/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/stores/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,wBAAwB,QAsB7B,CAAC;AAET,eAAO,MAAM,oBAAoB,QAqBzB,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/stores/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,eAAO,MAAM,wBAAwB,QAgC7B,CAAC;AAET,eAAO,MAAM,oBAAoB,QAqBzB,CAAC"}

package/dist/tracing.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Optional OpenTelemetry tracing.
+ *
+ * `@opentelemetry/api` is an optional peer dependency — when it's installed
+ * onesub wraps its hot paths in spans. When it isn't, every span helper is
+ * a zero-cost no-op (no dynamic import, no Promise overhead).
+ *
+ * Why a custom helper instead of @opentelemetry/instrumentation-express:
+ * the express instrumentation traces every request, but onesub's interesting
+ * spans are specific operations (Apple JWT mint, Google OAuth refresh,
+ * receipt validation, webhook dispatch). Hand-spanned hot paths give
+ * actionable traces without doubling latency-tracker overhead.
+ */
+type Span = {
+    setAttribute: (key: string, value: string | number | boolean) => void;
+    recordException: (err: unknown) => void;
+    setStatus: (status: {
+        code: number;
+        message?: string;
+    }) => void;
+    end: () => void;
+};
+/**
+ * Wrap an async operation in a span. When otel isn't installed the function
+ * runs unmodified — no span object is allocated.
+ *
+ * Use for operations whose latency or failure rate is operationally
+ * interesting: receipt validation, store writes, outbound API calls.
+ */
+export declare function withSpan<T>(name: string, attributes: Record<string, string | number | boolean>, fn: (span: Span) => Promise<T>): Promise<T>;
+export {};
+//# sourceMappingURL=tracing.d.ts.map

package/dist/tracing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracing.d.ts","sourceRoot":"","sources":["../src/tracing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAMH,KAAK,IAAI,GAAG;IACV,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,KAAK,IAAI,CAAC;IACtE,eAAe,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,IAAI,CAAC;IACxC,SAAS,EAAE,CAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAChE,GAAG,EAAE,MAAM,IAAI,CAAC;CACjB,CAAC;AAkCF;;;;;;GAMG;AACH,wBAAsB,QAAQ,CAAC,CAAC,EAC9B,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,EACrD,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,GAC7B,OAAO,CAAC,CAAC,CAAC,CAmBZ"}

package/dist/webhook-events.d.ts

@@ -0,0 +1,58 @@
+import type { CacheAdapter } from './cache.js';
+/**
+ * Pluggable webhook-event idempotency store.
+ *
+ * Apple sends `notificationUUID` and Google Pub/Sub sends `messageId` — both
+ * are guaranteed unique per notification. Apple/Google will retry on any
+ * non-2xx response (Apple: ~3 days, Google: configurable Pub/Sub policy), so
+ * the same notification can hit our handler multiple times if the previous
+ * response timed out, the DB was briefly down, etc. We must not double-apply
+ * state changes (extra subscription days, refunded purchase being deleted
+ * twice, consumption response being PUT twice).
+ *
+ * `markIfNew` returns `true` when the caller should process the event,
+ * `false` when it has been seen before. Implementations decide retention —
+ * once-seen IDs are kept long enough that retries from the source can't beat
+ * the TTL (we recommend ≥ 7 days).
+ */
+export interface WebhookEventStore {
+    /**
+     * Atomically register the given event id. Returns `true` if it's new (first
+     * time we've seen it), `false` if it was already seen.
+     *
+     * `provider` lets us key by source so Apple's notificationUUID and Google's
+     * messageId never collide.
+     */
+    markIfNew(provider: 'apple' | 'google', eventId: string): Promise<boolean>;
+}
+/**
+ * In-memory implementation. Suitable for single-instance dev/test; for
+ * production multi-instance use the Redis or Postgres variants so retries to
+ * other nodes are still deduped.
+ */
+export declare class InMemoryWebhookEventStore implements WebhookEventStore {
+    private readonly ttlSeconds;
+    private readonly seen;
+    constructor(ttlSeconds?: number);
+    markIfNew(provider: 'apple' | 'google', eventId: string): Promise<boolean>;
+    private evictExpired;
+}
+/**
+ * Cache-backed implementation — works with any `CacheAdapter`.
+ *
+ * Uses a `get` → `set` sequence, which is **not** atomic under concurrent
+ * retries: two simultaneous calls for the same id can both read null and
+ * both return `true`. The downstream store PKs / BullMQ jobId dedup catch
+ * this worst case.
+ *
+ * For Redis deployments prefer `RedisWebhookEventStore` (from
+ * `@onesub/server`) which uses a single `SET NX` command and is fully
+ * atomic.
+ */
+export declare class CacheWebhookEventStore implements WebhookEventStore {
+    private readonly cache;
+    private readonly ttlSeconds;
+    constructor(cache: CacheAdapter, ttlSeconds?: number);
+    markIfNew(provider: 'apple' | 'google', eventId: string): Promise<boolean>;
+}
+//# sourceMappingURL=webhook-events.d.ts.map

package/dist/webhook-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-events.d.ts","sourceRoot":"","sources":["../src/webhook-events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C;;;;;;;;;;;;;;;GAeG;AACH,MAAM,WAAW,iBAAiB;IAChC;;;;;;OAMG;IACH,SAAS,CAAC,QAAQ,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC5E;AAKD;;;;GAIG;AACH,qBAAa,yBAA0B,YAAW,iBAAiB;IAGrD,OAAO,CAAC,QAAQ,CAAC,UAAU;IAFvC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;gBAErB,UAAU,SAAsB;IAEvD,SAAS,CAAC,QAAQ,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAQhF,OAAO,CAAC,YAAY;CAMrB;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,sBAAuB,YAAW,iBAAiB;IAE5D,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,UAAU;gBADV,KAAK,EAAE,YAAY,EACnB,UAAU,SAAsB;IAG7C,SAAS,CAAC,QAAQ,EAAE,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAOjF"}

package/dist/webhook-queue.d.ts

@@ -0,0 +1,92 @@
+/**
+ * Webhook processing queue.
+ *
+ * The default in-process queue runs the handler synchronously inside the HTTP
+ * request — the same behavior you got before this interface existed. For
+ * production deployments that want decoupled retries, swap in a queue-backed
+ * implementation (BullMQ, SQS, etc.) so a slow DB or Apple/Google API call
+ * doesn't block the webhook from acknowledging.
+ *
+ * Failure semantics:
+ *   - Handler throws  → queue records the failure and (for retrying queues)
+ *                       re-runs with backoff. After max attempts the job
+ *                       lands in the dead-letter store.
+ *   - Handler returns → ack to source.
+ *
+ * The HTTP route should always 200 once the job is *enqueued*. Synchronous
+ * processing happens to acknowledge later only because the in-process queue
+ * runs inline; for any async queue the route should ack after `enqueue()`.
+ */
+export interface WebhookJob<T = unknown> {
+    provider: 'apple' | 'google';
+    /** Source-supplied event id (notificationUUID / messageId) for tracing. */
+    eventId: string;
+    payload: T;
+}
+export type WebhookHandler<T = unknown> = (job: WebhookJob<T>) => Promise<void>;
+export interface WebhookQueue {
+    /**
+     * Enqueue a job. Returns once the job is durably accepted (synchronous for
+     * in-process; persisted-to-Redis for BullMQ).
+     */
+    enqueue<T>(job: WebhookJob<T>): Promise<void>;
+    /** Register the worker handler. Called once during middleware setup. */
+    setHandler<T>(handler: WebhookHandler<T>): void;
+    /** Optional: list jobs in the dead-letter queue (for the admin replay UI). */
+    listDeadLetters?(): Promise<DeadLetterRecord[]>;
+    /** Optional: replay a specific dead-letter job back through the handler. */
+    replayDeadLetter?(id: string): Promise<void>;
+    /** Optional: graceful shutdown. */
+    close?(): Promise<void>;
+}
+export interface DeadLetterRecord {
+    id: string;
+    job: WebhookJob;
+    attempts: number;
+    lastError: string;
+    failedAt: string;
+}
+/**
+ * Synchronous, in-process implementation. Default — no extra infra required.
+ * Handler runs inside the HTTP request, so route latency = handler latency.
+ *
+ * Failures are NOT retried — the original Apple/Google source retry policy
+ * is the durability layer (4xx = no retry, 5xx = source retries). This
+ * matches the pre-queue behavior.
+ */
+export declare class InProcessWebhookQueue implements WebhookQueue {
+    private handler;
+    setHandler<T>(handler: WebhookHandler<T>): void;
+    enqueue<T>(job: WebhookJob<T>): Promise<void>;
+}
+export interface BullMQWebhookQueueOptions {
+    /** ioredis connection (or compatible options). Required. */
+    connection: unknown;
+    /** Queue name. Defaults to 'onesub-webhooks'. */
+    queueName?: string;
+    /** Max retry attempts before sending the job to the dead-letter list. */
+    maxAttempts?: number;
+    /** Backoff (ms) between attempts. Exponential: backoffMs * 2^(attempt-1). */
+    backoffMs?: number;
+    /** Worker concurrency. Defaults to 4. */
+    concurrency?: number;
+}
+export declare class BullMQWebhookQueue implements WebhookQueue {
+    private queueName;
+    private maxAttempts;
+    private backoffMs;
+    private concurrency;
+    private connection;
+    private queuePromise;
+    private workerPromise;
+    private handler;
+    constructor(opts: BullMQWebhookQueueOptions);
+    private getBullMQ;
+    private getQueue;
+    setHandler<T>(handler: WebhookHandler<T>): void;
+    enqueue<T>(job: WebhookJob<T>): Promise<void>;
+    listDeadLetters(): Promise<DeadLetterRecord[]>;
+    replayDeadLetter(id: string): Promise<void>;
+    close(): Promise<void>;
+}
+//# sourceMappingURL=webhook-queue.d.ts.map

package/dist/webhook-queue.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-queue.d.ts","sourceRoot":"","sources":["../src/webhook-queue.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,WAAW,UAAU,CAAC,CAAC,GAAG,OAAO;IACrC,QAAQ,EAAE,OAAO,GAAG,QAAQ,CAAC;IAC7B,2EAA2E;IAC3E,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,CAAC,CAAC;CACZ;AAED,MAAM,MAAM,cAAc,CAAC,CAAC,GAAG,OAAO,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;AAEhF,MAAM,WAAW,YAAY;IAC3B;;;OAGG;IACH,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9C,wEAAwE;IACxE,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;IAChD,8EAA8E;IAC9E,eAAe,CAAC,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAChD,4EAA4E;IAC5E,gBAAgB,CAAC,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7C,mCAAmC;IACnC,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,GAAG,EAAE,UAAU,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,qBAAa,qBAAsB,YAAW,YAAY;IACxD,OAAO,CAAC,OAAO,CAA+B;IAE9C,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,IAAI;IAIzC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;CAMpD;AAsDD,MAAM,WAAW,yBAAyB;IACxC,4DAA4D;IAC5D,UAAU,EAAE,OAAO,CAAC;IACpB,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,qBAAa,kBAAmB,YAAW,YAAY;IACrD,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,SAAS,CAAS;IAC1B,OAAO,CAAC,WAAW,CAAS;IAC5B,OAAO,CAAC,UAAU,CAAU;IAI5B,OAAO,CAAC,YAAY,CAAqC;IACzD,OAAO,CAAC,aAAa,CAAsC;IAC3D,OAAO,CAAC,OAAO,CAA+B;gBAElC,IAAI,EAAE,yBAAyB;YAQ7B,SAAS;IAMvB,OAAO,CAAC,QAAQ;IAUhB,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,GAAG,IAAI;IAoBzC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAW7C,eAAe,IAAI,OAAO,CAAC,gBAAgB,EAAE,CAAC;IAY9C,gBAAgB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAO3C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAU7B"}

package/package.json

@@ -1,17 +1,29 @@
 {
   "name": "@onesub/server",
-  "version": "0.11.4",
+  "version": "0.12.1",
   "description": "Server-side receipt validation middleware for react-native-iap. Apple StoreKit 2 + Google Play Billing. One line.",
-  "main": "dist/index.js",
+  "main": "dist/index.cjs",
+  "module": "dist/index.js",
   "types": "dist/index.d.ts",
   "type": "module",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js",
+      "require": "./dist/index.cjs"
+    }
+  },
+  "sideEffects": false,
   "files": [
     "dist",
     "sql"
   ],
   "scripts": {
-    "build": "tsc",
+    "build": "npm run build:types && npm run build:bundle",
+    "build:types": "tsc --emitDeclarationOnly",
+    "build:bundle": "tsup",
     "dev": "tsc --watch",
+    "size": "size-limit",
     "start": "node dist/index.js"
   },
   "keywords": [
@@ -41,24 +53,41 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@onesub/shared": "0.7.4",
+    "@onesub/shared": "0.7.6",
     "jose": "^6.2.2",
     "zod": "^4.3.6"
   },
   "peerDependencies": {
+    "@opentelemetry/api": ">=1.7.0",
+    "bullmq": ">=5.0.0",
     "express": "^4.17.0 || ^5.0.0",
+    "ioredis": ">=5.0.0",
     "pg": ">=8.0.0"
   },
   "peerDependenciesMeta": {
+    "@opentelemetry/api": {
+      "optional": true
+    },
+    "bullmq": {
+      "optional": true
+    },
+    "ioredis": {
+      "optional": true
+    },
     "pg": {
       "optional": true
     }
   },
   "devDependencies": {
+    "@size-limit/file": "^11.1.6",
     "@types/express": "^5.0.6",
+    "@types/ioredis-mock": "^8.2.5",
     "@types/node": "^20.17.0",
     "@types/pg": "^8.20.0",
     "express": "^5.2.1",
+    "ioredis-mock": "^8.9.0",
+    "size-limit": "^11.1.6",
+    "tsup": "^8.3.5",
     "typescript": "^5.7.0"
   },
   "engines": {

package/sql/schema.sql

@@ -32,6 +32,16 @@ CREATE TABLE IF NOT EXISTS onesub_subscriptions (
 CREATE INDEX IF NOT EXISTS idx_onesub_subscriptions_user_id
   ON onesub_subscriptions (user_id, updated_at DESC);
 
+-- Filter-helper indexes for /onesub/admin/subscriptions. Each filter column
+-- is paired with updated_at DESC so the planner can serve "latest matching"
+-- without sorting the full table once row count grows.
+CREATE INDEX IF NOT EXISTS idx_onesub_subscriptions_status_updated
+  ON onesub_subscriptions (status, updated_at DESC);
+CREATE INDEX IF NOT EXISTS idx_onesub_subscriptions_platform_updated
+  ON onesub_subscriptions (platform, updated_at DESC);
+CREATE INDEX IF NOT EXISTS idx_onesub_subscriptions_product
+  ON onesub_subscriptions (product_id, updated_at DESC);
+
 -- Backfill columns for installs that already created the table from an older
 -- schema. Safe to re-run.
 ALTER TABLE onesub_subscriptions ADD COLUMN IF NOT EXISTS linked_purchase_token TEXT;