@onesub/server 0.12.1 → 0.13.1

package/dist/stores/redis.js

@@ -0,0 +1,297 @@
+/**
+ * Redis-backed subscription / purchase / cache stores.
+ *
+ * Uses the `ioredis` package — kept as an optional peer dependency so callers
+ * who only need InMemory or Postgres pay no install cost.
+ *
+ *   npm install ioredis
+ *
+ * Usage:
+ *   import Redis from 'ioredis';
+ *   import {
+ *     RedisSubscriptionStore,
+ *     RedisPurchaseStore,
+ *     RedisCacheAdapter,
+ *   } from '@onesub/server';
+ *
+ *   const redis = new Redis(process.env.REDIS_URL!);
+ *   const store = new RedisSubscriptionStore(redis);
+ *   const purchaseStore = new RedisPurchaseStore(redis);
+ *   const cache = new RedisCacheAdapter(redis);
+ *
+ *   app.use(createOneSubMiddleware({ ...config, store, purchaseStore, cache }));
+ *
+ * Key layout:
+ *   onesub:sub:tx:<originalTransactionId>      → JSON SubscriptionInfo
+ *   onesub:sub:user:<userId>                   → SortedSet of originalTransactionIds, scored by updatedAt (ms)
+ *   onesub:sub:all                             → Set of originalTransactionIds (for listAll/listFiltered)
+ *   onesub:purchase:tx:<transactionId>         → JSON PurchaseInfo
+ *   onesub:purchase:user:<userId>              → SortedSet of transactionIds, scored by purchasedAt (ms)
+ *   onesub:purchase:user_product:<u>:<p>       → Set of transactionIds (for non-consumable hasPurchased)
+ *   onesub:purchase:all                        → Set of transactionIds
+ *   onesub:cache:<key>                         → string with TTL (RedisCacheAdapter)
+ *   onesub:webhook:event:<provider>:<id>       → "1" with TTL (RedisWebhookEventStore)
+ */
+const SUB_TX_PREFIX = 'onesub:sub:tx:';
+const SUB_USER_PREFIX = 'onesub:sub:user:';
+const SUB_ALL = 'onesub:sub:all';
+// Global sorted set (score = save timestamp ms) — enables ordered listAll and
+// O(log n + limit) fast-path pagination when no secondary filters are applied.
+const SUB_ALL_SORTED = 'onesub:sub:all:sorted';
+const PUR_TX_PREFIX = 'onesub:purchase:tx:';
+const PUR_USER_PREFIX = 'onesub:purchase:user:';
+const PUR_USER_PRODUCT_PREFIX = 'onesub:purchase:user_product:';
+const PUR_ALL = 'onesub:purchase:all';
+export class RedisSubscriptionStore {
+    redis;
+    constructor(redis) {
+        this.redis = redis;
+    }
+    async save(sub) {
+        const score = Date.now();
+        const txKey = SUB_TX_PREFIX + sub.originalTransactionId;
+        const userKey = SUB_USER_PREFIX + sub.userId;
+        const pipeline = this.redis.multi();
+        pipeline.set(txKey, JSON.stringify(sub));
+        pipeline.zadd(userKey, score, sub.originalTransactionId);
+        pipeline.sadd(SUB_ALL, sub.originalTransactionId);
+        pipeline.zadd(SUB_ALL_SORTED, score, sub.originalTransactionId);
+        await pipeline.exec();
+    }
+    async getByUserId(userId) {
+        const userKey = SUB_USER_PREFIX + userId;
+        // ZREVRANGE 0 0 = most-recent (highest score)
+        const ids = await this.redis.zrevrange(userKey, 0, 0);
+        if (ids.length === 0)
+            return null;
+        const raw = await this.redis.get(SUB_TX_PREFIX + ids[0]);
+        return raw ? JSON.parse(raw) : null;
+    }
+    async getAllByUserId(userId) {
+        const userKey = SUB_USER_PREFIX + userId;
+        const ids = await this.redis.zrevrange(userKey, 0, -1);
+        if (ids.length === 0)
+            return [];
+        const raws = await this.redis.mget(...ids.map((id) => SUB_TX_PREFIX + id));
+        return raws.filter((r) => r != null).map((r) => JSON.parse(r));
+    }
+    async getByTransactionId(txId) {
+        const raw = await this.redis.get(SUB_TX_PREFIX + txId);
+        return raw ? JSON.parse(raw) : null;
+    }
+    async listAll() {
+        // ZREVRANGE on the sorted set gives newest-first order (vs random SMEMBERS).
+        const ids = await this.redis.zrevrange(SUB_ALL_SORTED, 0, -1);
+        if (ids.length === 0)
+            return [];
+        const raws = await this.redis.mget(...ids.map((id) => SUB_TX_PREFIX + id));
+        return raws.filter((r) => r != null).map((r) => JSON.parse(r));
+    }
+    async listFiltered(opts) {
+        const limit = opts.limit ?? 50;
+        const offset = opts.offset ?? 0;
+        const hasSecondaryFilters = !!(opts.status || opts.productId || opts.platform);
+        if (opts.userId) {
+            // Per-user path — already O(log n) via per-user sorted set.
+            const candidates = await this.getAllByUserId(opts.userId);
+            const filtered = candidates.filter((s) => {
+                if (opts.status && s.status !== opts.status)
+                    return false;
+                if (opts.productId && s.productId !== opts.productId)
+                    return false;
+                if (opts.platform && s.platform !== opts.platform)
+                    return false;
+                return true;
+            });
+            return { items: filtered.slice(offset, offset + limit), total: filtered.length, limit, offset };
+        }
+        if (!hasSecondaryFilters) {
+            // Fast path: pure pagination with no filter — O(log n + limit) via sorted set.
+            const [ids, total] = await Promise.all([
+                this.redis.zrevrange(SUB_ALL_SORTED, offset, offset + limit - 1),
+                this.redis.zcard(SUB_ALL_SORTED),
+            ]);
+            if (ids.length === 0)
+                return { items: [], total, limit, offset };
+            const raws = await this.redis.mget(...ids.map((id) => SUB_TX_PREFIX + id));
+            const items = raws.filter((r) => r != null).map((r) => JSON.parse(r));
+            return { items, total, limit, offset };
+        }
+        // Slow path: secondary filters require full scan. Results come in
+        // newest-first order. For >100k rows pair with Postgres or Redis Stack.
+        const allIds = await this.redis.zrevrange(SUB_ALL_SORTED, 0, -1);
+        if (allIds.length === 0)
+            return { items: [], total: 0, limit, offset };
+        const raws = await this.redis.mget(...allIds.map((id) => SUB_TX_PREFIX + id));
+        const all = raws.filter((r) => r != null).map((r) => JSON.parse(r));
+        const filtered = all.filter((s) => {
+            if (opts.status && s.status !== opts.status)
+                return false;
+            if (opts.productId && s.productId !== opts.productId)
+                return false;
+            if (opts.platform && s.platform !== opts.platform)
+                return false;
+            return true;
+        });
+        return { items: filtered.slice(offset, offset + limit), total: filtered.length, limit, offset };
+    }
+}
+export class RedisPurchaseStore {
+    redis;
+    constructor(redis) {
+        this.redis = redis;
+    }
+    async savePurchase(purchase) {
+        const txKey = PUR_TX_PREFIX + purchase.transactionId;
+        // Owner check — same TRANSACTION_BELONGS_TO_OTHER_USER semantics as
+        // Postgres / InMemory implementations. Without this guard a stolen
+        // receipt could be re-bound to a different account.
+        const existing = await this.redis.get(txKey);
+        if (existing) {
+            const owner = JSON.parse(existing).userId;
+            if (owner !== purchase.userId) {
+                const err = new Error('TRANSACTION_BELONGS_TO_OTHER_USER');
+                err.code = 'TRANSACTION_BELONGS_TO_OTHER_USER';
+                throw err;
+            }
+            return; // idempotent — same user
+        }
+        const score = Date.parse(purchase.purchasedAt) || Date.now();
+        const pipeline = this.redis.multi();
+        pipeline.set(txKey, JSON.stringify(purchase));
+        pipeline.zadd(PUR_USER_PREFIX + purchase.userId, score, purchase.transactionId);
+        pipeline.sadd(PUR_USER_PRODUCT_PREFIX + purchase.userId + ':' + purchase.productId, purchase.transactionId);
+        pipeline.sadd(PUR_ALL, purchase.transactionId);
+        await pipeline.exec();
+    }
+    async getPurchasesByUserId(userId) {
+        const ids = await this.redis.zrevrange(PUR_USER_PREFIX + userId, 0, -1);
+        if (ids.length === 0)
+            return [];
+        const raws = await this.redis.mget(...ids.map((id) => PUR_TX_PREFIX + id));
+        return raws.filter((r) => r != null).map((r) => JSON.parse(r));
+    }
+    async getPurchaseByTransactionId(txId) {
+        const raw = await this.redis.get(PUR_TX_PREFIX + txId);
+        return raw ? JSON.parse(raw) : null;
+    }
+    async hasPurchased(userId, productId) {
+        const count = await this.redis.scard(PUR_USER_PRODUCT_PREFIX + userId + ':' + productId);
+        return count > 0;
+    }
+    async reassignPurchase(transactionId, newUserId) {
+        const txKey = PUR_TX_PREFIX + transactionId;
+        const raw = await this.redis.get(txKey);
+        if (!raw)
+            return false;
+        const existing = JSON.parse(raw);
+        if (existing.userId === newUserId)
+            return true;
+        const updated = { ...existing, userId: newUserId };
+        const score = Date.parse(updated.purchasedAt) || Date.now();
+        const oldUserProductKey = PUR_USER_PRODUCT_PREFIX + existing.userId + ':' + existing.productId;
+        const newUserProductKey = PUR_USER_PRODUCT_PREFIX + newUserId + ':' + existing.productId;
+        const pipeline = this.redis.multi();
+        pipeline.set(txKey, JSON.stringify(updated));
+        pipeline.zrem(PUR_USER_PREFIX + existing.userId, transactionId);
+        pipeline.zadd(PUR_USER_PREFIX + newUserId, score, transactionId);
+        pipeline.srem(oldUserProductKey, transactionId);
+        pipeline.sadd(newUserProductKey, transactionId);
+        await pipeline.exec();
+        return true;
+    }
+    async deletePurchases(userId, productId) {
+        const userProductKey = PUR_USER_PRODUCT_PREFIX + userId + ':' + productId;
+        const ids = await this.redis.smembers(userProductKey);
+        if (ids.length === 0)
+            return 0;
+        const pipeline = this.redis.multi();
+        for (const id of ids) {
+            pipeline.del(PUR_TX_PREFIX + id);
+            pipeline.zrem(PUR_USER_PREFIX + userId, id);
+            pipeline.srem(PUR_ALL, id);
+        }
+        pipeline.del(userProductKey);
+        await pipeline.exec();
+        return ids.length;
+    }
+    async deletePurchaseByTransactionId(transactionId) {
+        const txKey = PUR_TX_PREFIX + transactionId;
+        const raw = await this.redis.get(txKey);
+        if (!raw)
+            return false;
+        const existing = JSON.parse(raw);
+        const pipeline = this.redis.multi();
+        pipeline.del(txKey);
+        pipeline.zrem(PUR_USER_PREFIX + existing.userId, transactionId);
+        pipeline.srem(PUR_USER_PRODUCT_PREFIX + existing.userId + ':' + existing.productId, transactionId);
+        pipeline.srem(PUR_ALL, transactionId);
+        await pipeline.exec();
+        return true;
+    }
+    async listAll() {
+        const ids = await this.redis.smembers(PUR_ALL);
+        if (ids.length === 0)
+            return [];
+        const raws = await this.redis.mget(...ids.map((id) => PUR_TX_PREFIX + id));
+        return raws.filter((r) => r != null).map((r) => JSON.parse(r));
+    }
+}
+/**
+ * Redis-backed cache adapter — share JWKS / OAuth tokens across cluster nodes.
+ *
+ * Implements `CacheAdapter` so it plugs into the same default-cache slot used
+ * by the Apple JWT minter and Google OAuth token minter.
+ */
+export class RedisCacheAdapter {
+    redis;
+    prefix;
+    constructor(redis, prefix = 'onesub:cache:') {
+        this.redis = redis;
+        this.prefix = prefix;
+    }
+    async get(key) {
+        const raw = await this.redis.get(this.prefix + key);
+        return raw ? JSON.parse(raw) : null;
+    }
+    async set(key, value, ttlSeconds) {
+        const fullKey = this.prefix + key;
+        const payload = JSON.stringify(value);
+        if (ttlSeconds && ttlSeconds > 0) {
+            await this.redis.set(fullKey, payload, 'EX', ttlSeconds);
+        }
+        else {
+            await this.redis.set(fullKey, payload);
+        }
+    }
+    async del(key) {
+        await this.redis.del(this.prefix + key);
+    }
+}
+const WEBHOOK_EVENT_PREFIX = 'onesub:webhook:event:';
+const DEFAULT_WEBHOOK_TTL_SECONDS = 7 * 24 * 60 * 60; // 7 days — covers Apple's 3-day retry window
+/**
+ * Redis-backed webhook idempotency store.
+ *
+ * Uses `SET key '1' EX ttl NX` — a single atomic command that sets the key
+ * only if it does not already exist. Returns 'OK' (new event) or null
+ * (already seen), with no race between a GET and a subsequent SET.
+ *
+ * Prefer this over `CacheWebhookEventStore(new RedisCacheAdapter(...))` for
+ * production deployments; the cache-based variant is non-atomic under
+ * concurrent retries.
+ */
+export class RedisWebhookEventStore {
+    redis;
+    ttlSeconds;
+    constructor(redis, ttlSeconds = DEFAULT_WEBHOOK_TTL_SECONDS) {
+        this.redis = redis;
+        this.ttlSeconds = ttlSeconds;
+    }
+    async markIfNew(provider, eventId) {
+        const key = WEBHOOK_EVENT_PREFIX + provider + ':' + eventId;
+        const result = await this.redis.set(key, '1', 'EX', this.ttlSeconds, 'NX');
+        return result === 'OK';
+    }
+}
+//# sourceMappingURL=redis.js.map

package/dist/stores/redis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redis.js","sourceRoot":"","sources":["../../src/stores/redis.ts"],"names":[],"mappings":"AAYA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAEH,MAAM,aAAa,GAAG,gBAAgB,CAAC;AACvC,MAAM,eAAe,GAAG,kBAAkB,CAAC;AAC3C,MAAM,OAAO,GAAG,gBAAgB,CAAC;AACjC,8EAA8E;AAC9E,+EAA+E;AAC/E,MAAM,cAAc,GAAG,uBAAuB,CAAC;AAE/C,MAAM,aAAa,GAAG,qBAAqB,CAAC;AAC5C,MAAM,eAAe,GAAG,uBAAuB,CAAC;AAChD,MAAM,uBAAuB,GAAG,+BAA+B,CAAC;AAChE,MAAM,OAAO,GAAG,qBAAqB,CAAC;AAEtC,MAAM,OAAO,sBAAsB;IACJ;IAA7B,YAA6B,KAAc;QAAd,UAAK,GAAL,KAAK,CAAS;IAAG,CAAC;IAE/C,KAAK,CAAC,IAAI,CAAC,GAAqB;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,MAAM,KAAK,GAAG,aAAa,GAAG,GAAG,CAAC,qBAAqB,CAAC;QACxD,MAAM,OAAO,GAAG,eAAe,GAAG,GAAG,CAAC,MAAM,CAAC;QAE7C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACpC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QACzC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,qBAAqB,CAAC,CAAC;QACzD,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAClD,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,KAAK,EAAE,GAAG,CAAC,qBAAqB,CAAC,CAAC;QAChE,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,MAAc;QAC9B,MAAM,OAAO,GAAG,eAAe,GAAG,MAAM,CAAC;QACzC,8CAA8C;QAC9C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QACtD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACzD,OAAO,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,MAAc;QACjC,MAAM,OAAO,GAAG,eAAe,GAAG,MAAM,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACvD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAqB,CAAC,CAAC;IAClG,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,IAAY;QACnC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;QACvD,OAAO,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAsB,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,OAAO;QACX,6EAA6E;QAC7E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9D,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAqB,CAAC,CAAC;IAClG,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,IAAyB;QAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC;QAChC,MAAM,mBAAmB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC;QAE/E,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,4DAA4D;YAC5D,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;gBACvC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;oBAAE,OAAO,KAAK,CAAC;gBAC1D,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;oBAAE,OAAO,KAAK,CAAC;gBACnE,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;oBAAE,OAAO,KAAK,CAAC;gBAChE,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;YACH,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAClG,CAAC;QAED,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACzB,+EAA+E;YAC/E,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;gBACrC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC;gBAChE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC;aACjC,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACjE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC,CAAC;YAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAqB,CAAC,CAAC;YACvG,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACzC,CAAC;QAED,kEAAkE;QAClE,wEAAwE;QACxE,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjE,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QACvE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC,CAAC;QAC9E,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAqB,CAAC,CAAC;QACrG,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;YAChC,IAAI,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;gBAAE,OAAO,KAAK,CAAC;YAC1D,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI,CAAC,SAAS;gBAAE,OAAO,KAAK,CAAC;YACnE,IAAI,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,IAAI,CAAC,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAChE,OAAO,IAAI,CAAC;QACd,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,GAAG,KAAK,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAClG,CAAC;CACF;AAED,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,KAAc;QAAd,UAAK,GAAL,KAAK,CAAS;IAAG,CAAC;IAE/C,KAAK,CAAC,YAAY,CAAC,QAAsB;QACvC,MAAM,KAAK,GAAG,aAAa,GAAG,QAAQ,CAAC,aAAa,CAAC;QAErD,oEAAoE;QACpE,mEAAmE;QACnE,oDAAoD;QACpD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,KAAK,GAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAkB,CAAC,MAAM,CAAC;YAC5D,IAAI,KAAK,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC9B,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,mCAAmC,CAA8B,CAAC;gBACxF,GAAG,CAAC,IAAI,GAAG,mCAAmC,CAAC;gBAC/C,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,OAAO,CAAC,yBAAyB;QACnC,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACpC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QAChF,QAAQ,CAAC,IAAI,CAAC,uBAAuB,GAAG,QAAQ,CAAC,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC5G,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,oBAAoB,CAAC,MAAc;QACvC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,eAAe,GAAG,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACxE,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAiB,CAAC,CAAC;IAC9F,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,IAAY;QAC3C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;QACvD,OAAO,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC,CAAC,CAAC,IAAI,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,MAAc,EAAE,SAAiB;QAClD,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,uBAAuB,GAAG,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC,CAAC;QACzF,OAAO,KAAK,GAAG,CAAC,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,aAAqB,EAAE,SAAiB;QAC7D,MAAM,KAAK,GAAG,aAAa,GAAG,aAAa,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC;QACjD,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAE/C,MAAM,OAAO,GAAiB,EAAE,GAAG,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;QACjE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;QAC5D,MAAM,iBAAiB,GAAG,uBAAuB,GAAG,QAAQ,CAAC,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC;QAC/F,MAAM,iBAAiB,GAAG,uBAAuB,GAAG,SAAS,GAAG,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC;QAEzF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACpC,QAAQ,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7C,QAAQ,CAAC,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAChE,QAAQ,CAAC,IAAI,CAAC,eAAe,GAAG,SAAS,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC;QACjE,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAChD,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,CAAC;QAChD,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,SAAiB;QACrD,MAAM,cAAc,GAAG,uBAAuB,GAAG,MAAM,GAAG,GAAG,GAAG,SAAS,CAAC;QAC1E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACtD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,CAAC,CAAC;QAE/B,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACpC,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;YACrB,QAAQ,CAAC,GAAG,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC;YACjC,QAAQ,CAAC,IAAI,CAAC,eAAe,GAAG,MAAM,EAAE,EAAE,CAAC,CAAC;YAC5C,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC7B,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC7B,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,6BAA6B,CAAC,aAAqB;QACvD,MAAM,KAAK,GAAG,aAAa,GAAG,aAAa,CAAC;QAC5C,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAiB,CAAC;QAEjD,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACpC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACpB,QAAQ,CAAC,IAAI,CAAC,eAAe,GAAG,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAChE,QAAQ,CAAC,IAAI,CAAC,uBAAuB,GAAG,QAAQ,CAAC,MAAM,GAAG,GAAG,GAAG,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QACnG,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;QACtC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAChC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAiB,CAAC,CAAC;IAC9F,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,iBAAiB;IAET;IACA;IAFnB,YACmB,KAAc,EACd,SAAS,eAAe;QADxB,UAAK,GAAL,KAAK,CAAS;QACd,WAAM,GAAN,MAAM,CAAkB;IACxC,CAAC;IAEJ,KAAK,CAAC,GAAG,CAAc,GAAW;QAChC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;QACpD,OAAO,GAAG,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,CAAC;IAED,KAAK,CAAC,GAAG,CAAc,GAAW,EAAE,KAAQ,EAAE,UAAmB;QAC/D,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC;QAClC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACtC,IAAI,UAAU,IAAI,UAAU,GAAG,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QAC3D,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;IAC1C,CAAC;CACF;AAED,MAAM,oBAAoB,GAAG,uBAAuB,CAAC;AACrD,MAAM,2BAA2B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,6CAA6C;AAEnG;;;;;;;;;;GAUG;AACH,MAAM,OAAO,sBAAsB;IAEd;IACA;IAFnB,YACmB,KAAc,EACd,aAAa,2BAA2B;QADxC,UAAK,GAAL,KAAK,CAAS;QACd,eAAU,GAAV,UAAU,CAA8B;IACxD,CAAC;IAEJ,KAAK,CAAC,SAAS,CAAC,QAA4B,EAAE,OAAe;QAC3D,MAAM,GAAG,GAAG,oBAAoB,GAAG,QAAQ,GAAG,GAAG,GAAG,OAAO,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAC3E,OAAO,MAAM,KAAK,IAAI,CAAC;IACzB,CAAC;CACF"}

package/dist/stores/schema.js

@@ -0,0 +1,67 @@
+/**
+ * Embedded Postgres DDL mirrored from `packages/server/sql/schema.sql`.
+ *
+ * The `.sql` file is the single human-facing source of truth (mounted into
+ * docker-entrypoint-initdb.d, runnable via `psql -f`, readable by DBAs).
+ * These constants exist so that `initSchema()` can run without a filesystem
+ * lookup after the package is bundled/installed.
+ *
+ * A test in `__tests__/schema.test.ts` asserts that the two stay in sync —
+ * if you edit one, update the other (or the test will fail).
+ */
+export const SUBSCRIPTIONS_SCHEMA_SQL = `
+CREATE TABLE IF NOT EXISTS onesub_subscriptions (
+  original_transaction_id TEXT        PRIMARY KEY,
+  user_id                 TEXT        NOT NULL,
+  product_id              TEXT        NOT NULL,
+  platform                TEXT        NOT NULL,
+  status                  TEXT        NOT NULL,
+  expires_at              TIMESTAMPTZ NOT NULL,
+  purchased_at            TIMESTAMPTZ NOT NULL,
+  will_renew              BOOLEAN     NOT NULL,
+  linked_purchase_token   TEXT,
+  auto_resume_time        TIMESTAMPTZ,
+  updated_at              TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+
+CREATE INDEX IF NOT EXISTS idx_onesub_subscriptions_user_id
+  ON onesub_subscriptions (user_id, updated_at DESC);
+
+-- Filter-helper indexes for /onesub/admin/subscriptions. Each filter column
+-- is paired with updated_at DESC so the planner can serve "latest matching"
+-- without sorting the full table once row count grows.
+CREATE INDEX IF NOT EXISTS idx_onesub_subscriptions_status_updated
+  ON onesub_subscriptions (status, updated_at DESC);
+CREATE INDEX IF NOT EXISTS idx_onesub_subscriptions_platform_updated
+  ON onesub_subscriptions (platform, updated_at DESC);
+CREATE INDEX IF NOT EXISTS idx_onesub_subscriptions_product
+  ON onesub_subscriptions (product_id, updated_at DESC);
+
+-- Backfill columns for installs that already created the table from an older
+-- schema. Safe to re-run.
+ALTER TABLE onesub_subscriptions ADD COLUMN IF NOT EXISTS linked_purchase_token TEXT;
+ALTER TABLE onesub_subscriptions ADD COLUMN IF NOT EXISTS auto_resume_time TIMESTAMPTZ;
+`.trim();
+export const PURCHASES_SCHEMA_SQL = `
+CREATE TABLE IF NOT EXISTS onesub_purchases (
+  transaction_id  TEXT        PRIMARY KEY,
+  user_id         TEXT        NOT NULL,
+  product_id      TEXT        NOT NULL,
+  platform        TEXT        NOT NULL,
+  type            TEXT        NOT NULL,
+  quantity        INTEGER     NOT NULL DEFAULT 1,
+  purchased_at    TIMESTAMPTZ NOT NULL,
+  created_at      TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+
+CREATE INDEX IF NOT EXISTS idx_onesub_purchases_user_id
+  ON onesub_purchases (user_id, purchased_at DESC);
+
+CREATE INDEX IF NOT EXISTS idx_onesub_purchases_user_product
+  ON onesub_purchases (user_id, product_id);
+
+CREATE UNIQUE INDEX IF NOT EXISTS idx_onesub_purchases_non_consumable
+  ON onesub_purchases (user_id, product_id)
+  WHERE type = 'non_consumable';
+`.trim();
+//# sourceMappingURL=schema.js.map

package/dist/stores/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/stores/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAgCvC,CAAC,IAAI,EAAE,CAAC;AAET,MAAM,CAAC,MAAM,oBAAoB,GAAG;;;;;;;;;;;;;;;;;;;;;CAqBnC,CAAC,IAAI,EAAE,CAAC"}

package/dist/tracing.js

@@ -0,0 +1,74 @@
+/**
+ * Optional OpenTelemetry tracing.
+ *
+ * `@opentelemetry/api` is an optional peer dependency — when it's installed
+ * onesub wraps its hot paths in spans. When it isn't, every span helper is
+ * a zero-cost no-op (no dynamic import, no Promise overhead).
+ *
+ * Why a custom helper instead of @opentelemetry/instrumentation-express:
+ * the express instrumentation traces every request, but onesub's interesting
+ * spans are specific operations (Apple JWT mint, Google OAuth refresh,
+ * receipt validation, webhook dispatch). Hand-spanned hot paths give
+ * actionable traces without doubling latency-tracker overhead.
+ */
+const NOOP_SPAN = {
+    setAttribute: () => { },
+    recordException: () => { },
+    setStatus: () => { },
+    end: () => { },
+};
+/**
+ * Lazy-loaded tracer. We don't reach for `@opentelemetry/api` until the
+ * first `withSpan` call so process startup pays nothing when otel is absent.
+ */
+let cachedTracer = null;
+let resolved = false;
+function getTracer() {
+    if (resolved)
+        return cachedTracer;
+    resolved = true;
+    try {
+        // Resolve synchronously via require — otel api is CJS-friendly.
+        // require is undefined in pure ESM at runtime; in that case skip otel.
+        const req = globalThis.require;
+        if (!req)
+            return null;
+        const otel = req('@opentelemetry/api');
+        cachedTracer = otel.trace.getTracer('@onesub/server', '1.0.0');
+        return cachedTracer;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Wrap an async operation in a span. When otel isn't installed the function
+ * runs unmodified — no span object is allocated.
+ *
+ * Use for operations whose latency or failure rate is operationally
+ * interesting: receipt validation, store writes, outbound API calls.
+ */
+export async function withSpan(name, attributes, fn) {
+    const tracer = getTracer();
+    if (!tracer)
+        return fn(NOOP_SPAN);
+    return tracer.startActiveSpan(name, async (span) => {
+        for (const [k, v] of Object.entries(attributes))
+            span.setAttribute(k, v);
+        try {
+            const result = await fn(span);
+            // status code 1 = OK, 2 = ERROR (avoid importing the enum from otel api)
+            span.setStatus({ code: 1 });
+            return result;
+        }
+        catch (err) {
+            span.recordException(err);
+            span.setStatus({ code: 2, message: err.message });
+            throw err;
+        }
+        finally {
+            span.end();
+        }
+    });
+}
+//# sourceMappingURL=tracing.js.map

package/dist/tracing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tracing.js","sourceRoot":"","sources":["../src/tracing.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAaH,MAAM,SAAS,GAAS;IACtB,YAAY,EAAE,GAAG,EAAE,GAAE,CAAC;IACtB,eAAe,EAAE,GAAG,EAAE,GAAE,CAAC;IACzB,SAAS,EAAE,GAAG,EAAE,GAAE,CAAC;IACnB,GAAG,EAAE,GAAG,EAAE,GAAE,CAAC;CACd,CAAC;AAEF;;;GAGG;AACH,IAAI,YAAY,GAAkB,IAAI,CAAC;AACvC,IAAI,QAAQ,GAAG,KAAK,CAAC;AAErB,SAAS,SAAS;IAChB,IAAI,QAAQ;QAAE,OAAO,YAAY,CAAC;IAClC,QAAQ,GAAG,IAAI,CAAC;IAChB,IAAI,CAAC;QACH,gEAAgE;QAChE,uEAAuE;QACvE,MAAM,GAAG,GACP,UACD,CAAC,OAAO,CAAC;QACV,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,IAAI,GAAG,GAAG,CAAC,oBAAoB,CAA+D,CAAC;QACrG,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAC/D,OAAO,YAAY,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAY,EACZ,UAAqD,EACrD,EAA8B;IAE9B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IAElC,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;QACjD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;YAAE,IAAI,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;YAC9B,yEAAyE;YACzE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;YAC1B,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC7D,MAAM,GAAG,CAAC;QACZ,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,GAAG,EAAE,CAAC;QACb,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/webhook-events.js

@@ -0,0 +1,58 @@
+/** Default 7-day retention — covers Apple's 3-day retry window plus headroom. */
+const DEFAULT_TTL_SECONDS = 7 * 24 * 60 * 60;
+/**
+ * In-memory implementation. Suitable for single-instance dev/test; for
+ * production multi-instance use the Redis or Postgres variants so retries to
+ * other nodes are still deduped.
+ */
+export class InMemoryWebhookEventStore {
+    ttlSeconds;
+    seen = new Map();
+    constructor(ttlSeconds = DEFAULT_TTL_SECONDS) {
+        this.ttlSeconds = ttlSeconds;
+    }
+    async markIfNew(provider, eventId) {
+        this.evictExpired();
+        const key = `${provider}:${eventId}`;
+        if (this.seen.has(key))
+            return false;
+        this.seen.set(key, Date.now() + this.ttlSeconds * 1000);
+        return true;
+    }
+    evictExpired() {
+        const now = Date.now();
+        for (const [key, expiresAt] of this.seen) {
+            if (expiresAt < now)
+                this.seen.delete(key);
+        }
+    }
+}
+/**
+ * Cache-backed implementation — works with any `CacheAdapter`.
+ *
+ * Uses a `get` → `set` sequence, which is **not** atomic under concurrent
+ * retries: two simultaneous calls for the same id can both read null and
+ * both return `true`. The downstream store PKs / BullMQ jobId dedup catch
+ * this worst case.
+ *
+ * For Redis deployments prefer `RedisWebhookEventStore` (from
+ * `@onesub/server`) which uses a single `SET NX` command and is fully
+ * atomic.
+ */
+export class CacheWebhookEventStore {
+    cache;
+    ttlSeconds;
+    constructor(cache, ttlSeconds = DEFAULT_TTL_SECONDS) {
+        this.cache = cache;
+        this.ttlSeconds = ttlSeconds;
+    }
+    async markIfNew(provider, eventId) {
+        const key = `webhook:event:${provider}:${eventId}`;
+        const existing = await this.cache.get(key);
+        if (existing)
+            return false;
+        await this.cache.set(key, '1', this.ttlSeconds);
+        return true;
+    }
+}
+//# sourceMappingURL=webhook-events.js.map

package/dist/webhook-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-events.js","sourceRoot":"","sources":["../src/webhook-events.ts"],"names":[],"mappings":"AA6BA,iFAAiF;AACjF,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AAE7C;;;;GAIG;AACH,MAAM,OAAO,yBAAyB;IAGP;IAFZ,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IAElD,YAA6B,aAAa,mBAAmB;QAAhC,eAAU,GAAV,UAAU,CAAsB;IAAG,CAAC;IAEjE,KAAK,CAAC,SAAS,CAAC,QAA4B,EAAE,OAAe;QAC3D,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,OAAO,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC;IACd,CAAC;IAEO,YAAY;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,KAAK,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACzC,IAAI,SAAS,GAAG,GAAG;gBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,sBAAsB;IAEd;IACA;IAFnB,YACmB,KAAmB,EACnB,aAAa,mBAAmB;QADhC,UAAK,GAAL,KAAK,CAAc;QACnB,eAAU,GAAV,UAAU,CAAsB;IAChD,CAAC;IAEJ,KAAK,CAAC,SAAS,CAAC,QAA4B,EAAE,OAAe;QAC3D,MAAM,GAAG,GAAG,iBAAiB,QAAQ,IAAI,OAAO,EAAE,CAAC;QACnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAS,GAAG,CAAC,CAAC;QACnD,IAAI,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC3B,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAChD,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/dist/webhook-queue.js

@@ -0,0 +1,108 @@
+/**
+ * Synchronous, in-process implementation. Default — no extra infra required.
+ * Handler runs inside the HTTP request, so route latency = handler latency.
+ *
+ * Failures are NOT retried — the original Apple/Google source retry policy
+ * is the durability layer (4xx = no retry, 5xx = source retries). This
+ * matches the pre-queue behavior.
+ */
+export class InProcessWebhookQueue {
+    handler = null;
+    setHandler(handler) {
+        this.handler = handler;
+    }
+    async enqueue(job) {
+        if (!this.handler) {
+            throw new Error('[onesub] webhook queue has no handler registered');
+        }
+        await this.handler(job);
+    }
+}
+export class BullMQWebhookQueue {
+    queueName;
+    maxAttempts;
+    backoffMs;
+    concurrency;
+    connection;
+    // Lazy-loaded so `bullmq` doesn't have to be installed unless this class
+    // is instantiated.
+    queuePromise = null;
+    workerPromise = null;
+    handler = null;
+    constructor(opts) {
+        this.connection = opts.connection;
+        this.queueName = opts.queueName ?? 'onesub-webhooks';
+        this.maxAttempts = opts.maxAttempts ?? 5;
+        this.backoffMs = opts.backoffMs ?? 1000;
+        this.concurrency = opts.concurrency ?? 4;
+    }
+    async getBullMQ() {
+        return import('bullmq').catch(() => {
+            throw new Error('[onesub] BullMQWebhookQueue requires the `bullmq` package. Run: npm install bullmq');
+        });
+    }
+    getQueue() {
+        if (!this.queuePromise) {
+            this.queuePromise = (async () => {
+                const { Queue } = await this.getBullMQ();
+                return new Queue(this.queueName, { connection: this.connection });
+            })();
+        }
+        return this.queuePromise;
+    }
+    setHandler(handler) {
+        this.handler = handler;
+        if (!this.workerPromise) {
+            this.workerPromise = (async () => {
+                const { Worker } = await this.getBullMQ();
+                return new Worker(this.queueName, async (job) => {
+                    if (!this.handler)
+                        throw new Error('[onesub] handler not set');
+                    await this.handler(job.data);
+                }, {
+                    connection: this.connection,
+                    concurrency: this.concurrency,
+                });
+            })();
+        }
+    }
+    async enqueue(job) {
+        const queue = await this.getQueue();
+        await queue.add('webhook', job, {
+            attempts: this.maxAttempts,
+            backoff: { type: 'exponential', delay: this.backoffMs },
+            removeOnFail: false,
+            removeOnComplete: { age: 24 * 60 * 60, count: 1000 },
+            jobId: `${job.provider}:${job.eventId}`,
+        });
+    }
+    async listDeadLetters() {
+        const queue = await this.getQueue();
+        const failed = await queue.getFailed();
+        return failed.map((j) => ({
+            id: String(j.id),
+            job: j.data,
+            attempts: j.attemptsMade,
+            lastError: j.failedReason ?? 'unknown',
+            failedAt: new Date(j.finishedOn ?? Date.now()).toISOString(),
+        }));
+    }
+    async replayDeadLetter(id) {
+        const queue = await this.getQueue();
+        const job = await queue.getJob(id);
+        if (!job)
+            throw new Error(`[onesub] dead-letter job ${id} not found`);
+        await job.retry();
+    }
+    async close() {
+        if (this.workerPromise) {
+            const worker = await this.workerPromise;
+            await worker.close();
+        }
+        if (this.queuePromise) {
+            const queue = await this.queuePromise;
+            await queue.close();
+        }
+    }
+}
+//# sourceMappingURL=webhook-queue.js.map

package/dist/webhook-queue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-queue.js","sourceRoot":"","sources":["../src/webhook-queue.ts"],"names":[],"mappings":"AAoDA;;;;;;;GAOG;AACH,MAAM,OAAO,qBAAqB;IACxB,OAAO,GAA0B,IAAI,CAAC;IAE9C,UAAU,CAAI,OAA0B;QACtC,IAAI,CAAC,OAAO,GAAG,OAAyB,CAAC;IAC3C,CAAC;IAED,KAAK,CAAC,OAAO,CAAI,GAAkB;QACjC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,CAAC;CACF;AAmED,MAAM,OAAO,kBAAkB;IACrB,SAAS,CAAS;IAClB,WAAW,CAAS;IACpB,SAAS,CAAS;IAClB,WAAW,CAAS;IACpB,UAAU,CAAU;IAE5B,yEAAyE;IACzE,mBAAmB;IACX,YAAY,GAAgC,IAAI,CAAC;IACjD,aAAa,GAAiC,IAAI,CAAC;IACnD,OAAO,GAA0B,IAAI,CAAC;IAE9C,YAAY,IAA+B;QACzC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QAClC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,iBAAiB,CAAC;QACrD,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;IAC3C,CAAC;IAEO,KAAK,CAAC,SAAS;QACrB,OAAO,MAAM,CAAC,QAAkB,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;YAC3C,MAAM,IAAI,KAAK,CAAC,oFAAoF,CAAC,CAAC;QACxG,CAAC,CAA0B,CAAC;IAC9B,CAAC;IAEO,QAAQ;QACd,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,IAAI,CAAC,YAAY,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC9B,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;gBACzC,OAAO,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC;YACpE,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,UAAU,CAAI,OAA0B;QACtC,IAAI,CAAC,OAAO,GAAG,OAAyB,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;YACxB,IAAI,CAAC,aAAa,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC/B,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC1C,OAAO,IAAI,MAAM,CACf,IAAI,CAAC,SAAS,EACd,KAAK,EAAE,GAAG,EAAE,EAAE;oBACZ,IAAI,CAAC,IAAI,CAAC,OAAO;wBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;oBAC/D,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAkB,CAAC,CAAC;gBAC7C,CAAC,EACD;oBACE,UAAU,EAAE,IAAI,CAAC,UAAU;oBAC3B,WAAW,EAAE,IAAI,CAAC,WAAW;iBAC9B,CACF,CAAC;YACJ,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO,CAAI,GAAkB;QACjC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,EAAE;YAC9B,QAAQ,EAAE,IAAI,CAAC,WAAW;YAC1B,OAAO,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,EAAE;YACvD,YAAY,EAAE,KAAK;YACnB,gBAAgB,EAAE,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE;YACpD,KAAK,EAAE,GAAG,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,OAAO,EAAE;SACxC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe;QACnB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACxB,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,GAAG,EAAE,CAAC,CAAC,IAAkB;YACzB,QAAQ,EAAE,CAAC,CAAC,YAAY;YACxB,SAAS,EAAE,CAAC,CAAC,YAAY,IAAI,SAAS;YACtC,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;SAC7D,CAAC,CAAC,CAAC;IACN,CAAC;IAED,KAAK,CAAC,gBAAgB,CAAC,EAAU;QAC/B,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,EAAE,YAAY,CAAC,CAAC;QACtE,MAAM,GAAG,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC;YACxC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QACD,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACtB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC;YACtC,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;CACF"}