@owlmeans/server-payment 0.1.18-rc.0

package/README.md

@@ -0,0 +1,55 @@
+# @owlmeans/server-payment
+
+Public server-side payment primitives for OwlMeans applications. The package registers payment
+resources, the entitlement gate, protocol-bound webhook/resync entrypoints, and a Stripe gateway
+supporting amount-priced consumables, quantity-priced consumables, and subscriptions.
+
+Applications declare products and plans during configuration, mount `paymentGateEntrypoints`, and
+register completion callbacks on the payment observer. Amount policies are validated at declaration
+time. Stripe Checkout is always authoritative: completion is idempotent by session id and an
+amount checkout is fulfilled only after its paid currency and subtotal match its signed-in metadata.
+
+```typescript
+import { CheckoutPricingMode, PlanDuration, ProductType } from '@owlmeans/payment'
+import {
+  appendPaymentGatewayService, declarePaymentPlan, declarePaymentProduct, observer,
+} from '@owlmeans/server-payment'
+
+declarePaymentProduct(cfg, {
+  sku: 'app-credits', type: ProductType.Consumable, services: ['app'], gateways: ['stripe'],
+  name: 'Credits',
+})
+declarePaymentPlan(cfg, {
+  productSku: 'app-credits', sku: 'app-credit-unit', duration: PlanDuration.Consumable,
+  price: 0.02, pricingMode: CheckoutPricingMode.Amount,
+  amountPolicy: {
+    currency: 'usd', minimumMinor: 500, maximumMinor: 50_000, defaultMinor: 1_000,
+    presetsMinor: [1_000, 2_000, 5_000, 10_000], fixedMinor: 0, rateBps: 200,
+  },
+})
+
+appendPaymentGatewayService(context)
+observer(context).onTopUp(async completion => {
+  if (completion.mode === 'amount') await credit(completion.entityId, completion.amountMinor)
+})
+```
+
+Mount `paymentGateEntrypoints` in the server entrypoint list. `gateway(context).createLink(...)`
+accepts the stable organization `entityId` only after the application has resolved it at its
+authenticated boundary; public protocol bodies use `entitySlug`.
+
+<!-- owlmeans:agent-guidance:start -->
+## Agent guidance
+
+This package ships embedded agent skills under `agent-meta/`. After installing your
+`@owlmeans/*` packages, run the OwlMeans agent-skills installer to place them into
+your project's skill store (`.agents/skills/`):
+
+```sh
+npx @owlmeans/agent-skills@^0.1.18-rc.16
+```
+
+The embedded files are version-matched to this package release. Do not edit them
+directly — they are regenerated on each publish. To contribute guidance edits,
+open a PR against the source monorepo.
+<!-- owlmeans:agent-guidance:end -->

package/agent-meta/manifest.json

@@ -0,0 +1,16 @@
+{
+  "schemaVersion": 2,
+  "package": "@owlmeans/server-payment",
+  "version": "0.1.18-rc.0",
+  "generatedAt": "2026-09-12T12:32:46.376Z",
+  "canonicalRepo": "https://github.com/owlmeans/common",
+  "entries": [
+    {
+      "kind": "skill",
+      "name": "server-payment",
+      "category": "package-specific",
+      "file": "skills/server-payment/SKILL.md",
+      "canonicalPath": ".agents/skills/server-payment/SKILL.md"
+    }
+  ]
+}

package/agent-meta/skills/server-payment/SKILL.md

@@ -0,0 +1,80 @@
+---
+name: server-payment
+description: Public in-process Stripe gateway for OwlMeans backends — amount and quantity checkout, subscriptions, protocol-bound webhook routes, product sync, fulfillment observers and entitlement gates. Use when wiring @owlmeans/server-payment or changing Stripe payment behavior.
+user-invocable: false
+---
+<!-- AUTO-GENERATED — do not edit. Regenerate via sync-agent-meta. -->
+
+# @owlmeans/server-payment
+
+Public MIT package in the common monorepo. It embeds Stripe into an application backend; the
+consumer owns products, credit conversion and entitlement side effects. It persists customers,
+subscriptions/fulfilled sessions and sync fingerprints in Mongo.
+
+## Wiring
+
+```typescript
+stripeSecrets(cfg, { api: '/secrets/stripe-key', webhook: '/secrets/stripe-webhook' })
+declarePaymentProduct(cfg, { sku: 'credits', type: ProductType.Consumable,
+  services: ['app'], name: 'Credits', taxCode: 'txcd_10103000' })
+declarePaymentPlan(cfg, { productSku: 'credits', sku: 'credits-unit',
+  duration: PlanDuration.Consumable, price: 0.02,
+  pricingMode: CheckoutPricingMode.Amount, amountPolicy })
+
+appendPaymentGatewayService(context)
+export const appEntrypoints = [...paymentGateEntrypoints]
+observer(context).onTopUp(async completion => { /* append an idempotent ledger event */ })
+```
+
+`declarePaymentPlan` validates amount and quantity policies immediately. An amount plan requires
+`amountPolicy`; a quantity/legacy plan may declare `quantityPolicy` or the legacy min/default/max
+fields. `gateway(ctx).createLink(...)` takes the stable internal `entityId`; an authenticated public
+handler must resolve that id from its request entity before calling the in-process service.
+
+## Checkout modes
+
+- `Amount`: validate `amountMinor`, compute `chargeAmountMinor`, create one inline
+  `price_data` item for the synchronized Stripe Product, quantity 1, tax-exclusive, with no
+  adjustable quantity and no promotion codes. No reusable Stripe Price is created; a superseded
+  quantity Price under the plan lookup key is deactivated.
+- `Quantity`: load the reusable Stripe Price and create an adjustable item from the quantity
+  policy. This remains supported so existing consumers and already-open Checkout sessions work.
+- Subscription: reusable recurring Stripe Price, quantity 1, with billing portal management.
+
+Every session enables automatic tax, billing address and tax-id collection. Amount metadata carries
+pricing mode, net amount, adjusted pre-tax subtotal, currency, product, plan, service and owner.
+
+## Fulfillment
+
+Handle both `checkout.session.completed` and `checkout.session.async_payment_succeeded`, but grant
+nothing until `payment_status === 'paid'`. Amount fulfillment compares Stripe currency and actual
+`amount_subtotal` with the server-created metadata. Completion is discriminated:
+
+- `{ mode: 'amount', amountMinor, chargeAmountMinor, currency, ... }`
+- `{ mode: 'quantity', units, ... }`
+
+The session id is `externalId`. A pending fulfillment record is created before calling observers
+and gets `fulfilledAt` only after they succeed; observer failures escape so Stripe retries. Consumer
+callbacks must still use `externalId` as their own append-only event key, covering a crash after the
+side effect and before `fulfilledAt`. A session without pricing-mode metadata is a legacy quantity
+session and remains fulfillable.
+
+Subscription observers receive `{ isNew, status, capabilities, limits, ... }`. One-time bundles go
+behind `isNew` and use an idempotent external event key. Status updates and entitlement provisioning
+must be safe to repeat.
+
+## Protocols and security
+
+`paymentGate` is an immutable protocol tree. `paymentGateEntrypoints` binds its base, webhook, and
+resync declarations directly with `bind(protocol, handler)`; the webhook is public because Stripe
+signature verification requires the untouched raw body, while resync carries the ED25519 guard.
+Never put an application auth guard on the Stripe webhook.
+
+`appendPaymentGatewayService` also registers `ENTITLEMENT_GATE`. Paid capabilities belong on shared
+route declarations through `entitled(...)`, not in handlers. The gate fails closed when the
+subscription store cannot be read.
+
+## External docs
+
+- https://docs.stripe.com/api/checkout/sessions/create — Checkout accepts inline `price_data` with integer minor-unit `unit_amount`; automatic tax is enabled on the Session and amount items are tax-exclusive.
+- https://docs.stripe.com/checkout/fulfillment — Fulfillment must be idempotent, check payment state and support delayed-payment success events rather than trusting completion alone.

package/build/actions/index.d.ts

@@ -0,0 +1,3 @@
+export * from './webhook.js';
+export * from './resync.js';
+//# sourceMappingURL=index.d.ts.map

package/build/actions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/actions/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA"}

package/build/actions/index.js

@@ -0,0 +1,3 @@
+export * from './webhook.js';
+export * from './resync.js';
+//# sourceMappingURL=index.js.map

package/build/actions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/actions/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA"}

package/build/actions/resync.d.ts

@@ -0,0 +1,2 @@
+export declare const resync: import("@owlmeans/server-entrypoint").BoundEntrypointHandler<import("@owlmeans/entrypoint").EntrypointProtocol<{}, import("../consts.js").ResyncResult>>;
+//# sourceMappingURL=resync.d.ts.map

package/build/actions/resync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resync.d.ts","sourceRoot":"","sources":["../../src/actions/resync.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,MAAM,0JAIjB,CAAA"}

package/build/actions/resync.js

@@ -0,0 +1,11 @@
+import { handlers } from '@owlmeans/server-api';
+import { paymentGate } from '../consts.js';
+import { fingerprints } from '../utils.js';
+import { initialize } from '../sync.js';
+const bind = handlers();
+export const resync = bind.request(paymentGate.resync, async (_request, context) => {
+    await fingerprints(context).clear();
+    await initialize(context);
+    return { ok: true };
+});
+//# sourceMappingURL=resync.js.map

package/build/actions/resync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resync.js","sourceRoot":"","sources":["../../src/actions/resync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AAGvC,MAAM,IAAI,GAAG,QAAQ,EAAW,CAAA;AAEhC,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;IACjF,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAA;IACnC,MAAM,UAAU,CAAC,OAAO,CAAC,CAAA;IACzB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;AACrB,CAAC,CAAC,CAAA"}

package/build/actions/webhook.d.ts

@@ -0,0 +1,4 @@
+export declare const webhook: import("@owlmeans/server-entrypoint").BoundEntrypointHandler<import("@owlmeans/entrypoint").EntrypointProtocol<{
+    params: import("../consts.js").PaygateParams;
+}, undefined>>;
+//# sourceMappingURL=webhook.d.ts.map

package/build/actions/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../src/actions/webhook.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,OAAO;;cAGlB,CAAA"}

package/build/actions/webhook.js

@@ -0,0 +1,11 @@
+import { UnknownPaygate } from '@owlmeans/payment';
+import { handlers } from '@owlmeans/server-api';
+import { paymentGate, STRIPE_PAYGATE_ALIAS } from '../consts.js';
+import { stripePlugin } from '../plugins/stripe.js';
+const bind = handlers();
+export const webhook = bind.params(paymentGate.webhook, async ({ paygate }, context, request) => {
+    if (paygate !== STRIPE_PAYGATE_ALIAS)
+        throw new UnknownPaygate(paygate);
+    await stripePlugin.handleWebhook(request, context);
+});
+//# sourceMappingURL=webhook.js.map

package/build/actions/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../src/actions/webhook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAGnD,MAAM,IAAI,GAAG,QAAQ,EAAW,CAAA;AAEhC,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;IAC9F,IAAI,OAAO,KAAK,oBAAoB;QAAE,MAAM,IAAI,cAAc,CAAC,OAAO,CAAC,CAAA;IACvE,MAAM,YAAY,CAAC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;AACpD,CAAC,CAAC,CAAA"}

package/build/config.d.ts

@@ -0,0 +1,8 @@
+import type { Config, PaymentPlanDef, PaymentProductDef } from './types.js';
+export declare const declarePaymentProduct: (cfg: Config, def: PaymentProductDef) => void;
+export declare const declarePaymentPlan: (cfg: Config, def: PaymentPlanDef) => void;
+export declare const stripeSecrets: (cfg: Config, paths: {
+    api: string;
+    webhook: string;
+}) => void;
+//# sourceMappingURL=config.d.ts.map

package/build/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,MAAM,EAAe,cAAc,EAAkB,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAExG,eAAO,MAAM,qBAAqB,QAAS,MAAM,OAAO,iBAAiB,KAAG,IAS3E,CAAA;AAED,eAAO,MAAM,kBAAkB,QAAS,MAAM,OAAO,cAAc,KAAG,IA4BrE,CAAA;AAED,eAAO,MAAM,aAAa,QAAS,MAAM,SAAS;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,KAAG,IAEpF,CAAA"}

package/build/config.js

@@ -0,0 +1,46 @@
+import { toConfigRecord } from '@owlmeans/server-app';
+import { plugin } from '@owlmeans/config';
+import { assertAmountCheckoutPolicy, assertQuantityCheckoutPolicy, CheckoutPricingMode, PLAN_RECORD_PREFIX, PLAN_RECORD_TYPE, PlanStatus, PRODUCT_RECORD_PREFIX, PRODUCT_RECORD_TYPE, } from '@owlmeans/payment';
+import { STRIPE_PAYGATE_ALIAS, STRIPE_PLUGIN_CONFIG } from './consts.js';
+export const declarePaymentProduct = (cfg, def) => {
+    cfg.records = cfg.records ?? [];
+    const product = {
+        type: def.type, sku: def.sku, title: def.name, description: def.description,
+        defaultLng: def.defaultLng ?? 'en', services: def.services,
+        gateways: def.gateways ?? [STRIPE_PAYGATE_ALIAS], capabilities: def.capabilities,
+        taxCode: def.taxCode, unitLabel: def.unitLabel,
+    };
+    cfg.records.push({ ...toConfigRecord(product), recordType: PRODUCT_RECORD_TYPE, id: `${PRODUCT_RECORD_PREFIX}:${def.sku}` });
+};
+export const declarePaymentPlan = (cfg, def) => {
+    cfg.records = cfg.records ?? [];
+    const pricingMode = def.pricingMode;
+    if (pricingMode === CheckoutPricingMode.Amount) {
+        if (def.amountPolicy == null)
+            throw new TypeError(`Amount checkout plan '${def.sku}' requires amountPolicy`);
+        assertAmountCheckoutPolicy(def.amountPolicy);
+    }
+    const quantityPolicy = def.quantityPolicy ?? (def.minQuantity != null || def.maxQuantity != null || def.defaultQuantity != null
+        ? {
+            minimum: def.minQuantity ?? 1,
+            maximum: def.maxQuantity ?? Math.max(100_000, def.minQuantity ?? 1),
+            default: def.defaultQuantity ?? def.minQuantity ?? 1,
+        }
+        : undefined);
+    if (quantityPolicy != null)
+        assertQuantityCheckoutPolicy(quantityPolicy);
+    const plan = {
+        productSku: def.productSku, sku: def.sku, status: PlanStatus.Active,
+        duration: def.duration, price: def.price, currency: def.currency ?? def.amountPolicy?.currency ?? 'usd',
+        order: def.order ?? 0, title: def.title ?? def.sku, capabilities: def.capabilities,
+        limits: def.limits, recurring: def.recurring, pricingMode, amountPolicy: def.amountPolicy,
+        quantityPolicy,
+        minQuantity: quantityPolicy?.minimum, maxQuantity: quantityPolicy?.maximum,
+        defaultQuantity: quantityPolicy?.default,
+    };
+    cfg.records.push({ ...toConfigRecord(plan), recordType: PLAN_RECORD_TYPE, id: `${PLAN_RECORD_PREFIX}:${def.sku}` });
+};
+export const stripeSecrets = (cfg, paths) => {
+    plugin(cfg, { api: paths.api, webhook: paths.webhook }, STRIPE_PLUGIN_CONFIG);
+};
+//# sourceMappingURL=config.js.map

package/build/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAA;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AACzC,OAAO,EACL,0BAA0B,EAAE,4BAA4B,EAAE,mBAAmB,EAC7E,kBAAkB,EAAE,gBAAgB,EAAE,UAAU,EAAE,qBAAqB,EAAE,mBAAmB,GAC7F,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAGxE,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,GAAW,EAAE,GAAsB,EAAQ,EAAE;IACjF,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAA;IAC/B,MAAM,OAAO,GAAmB;QAC9B,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW;QAC3E,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ;QAC1D,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,CAAC,oBAAoB,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY;QAChF,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS;KAC/C,CAAA;IACD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,cAAc,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,mBAAmB,EAAE,EAAE,EAAE,GAAG,qBAAqB,IAAI,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AAC9H,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAW,EAAE,GAAmB,EAAQ,EAAE;IAC3E,GAAG,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,IAAI,EAAE,CAAA;IAC/B,MAAM,WAAW,GAAG,GAAG,CAAC,WAAW,CAAA;IACnC,IAAI,WAAW,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;QAC/C,IAAI,GAAG,CAAC,YAAY,IAAI,IAAI;YAAE,MAAM,IAAI,SAAS,CAAC,yBAAyB,GAAG,CAAC,GAAG,yBAAyB,CAAC,CAAA;QAC5G,0BAA0B,CAAC,GAAG,CAAC,YAAY,CAAC,CAAA;IAC9C,CAAC;IACD,MAAM,cAAc,GAAG,GAAG,CAAC,cAAc,IAAI,CAC3C,GAAG,CAAC,WAAW,IAAI,IAAI,IAAI,GAAG,CAAC,WAAW,IAAI,IAAI,IAAI,GAAG,CAAC,eAAe,IAAI,IAAI;QAC/E,CAAC,CAAC;YACA,OAAO,EAAE,GAAG,CAAC,WAAW,IAAI,CAAC;YAC7B,OAAO,EAAE,GAAG,CAAC,WAAW,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,WAAW,IAAI,CAAC,CAAC;YACnE,OAAO,EAAE,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,WAAW,IAAI,CAAC;SACrD;QACD,CAAC,CAAC,SAAS,CACd,CAAA;IACD,IAAI,cAAc,IAAI,IAAI;QAAE,4BAA4B,CAAC,cAAc,CAAC,CAAA;IAExE,MAAM,IAAI,GAAgB;QACxB,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM;QACnE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,YAAY,EAAE,QAAQ,IAAI,KAAK;QACvG,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,GAAG,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY;QAClF,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY;QACzF,cAAc;QACd,WAAW,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,OAAO;QAC1E,eAAe,EAAE,cAAc,EAAE,OAAO;KACzC,CAAA;IACD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,EAAE,EAAE,GAAG,kBAAkB,IAAI,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAA;AACrH,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAW,EAAE,KAAuC,EAAQ,EAAE;IAC1F,MAAM,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,oBAAoB,CAAC,CAAA;AAC/E,CAAC,CAAA"}

package/build/consts.d.ts

@@ -0,0 +1,26 @@
+export declare const STRIPE_PAYGATE_ALIAS = "stripe";
+export declare const STRIPE_PLUGIN_CONFIG = "_external:stripe";
+export declare const STRIPE_SIGNATURE = "Stripe-Signature";
+export declare const GATEWAY_SERVICE = "payment-gateway";
+export declare const PAYMENT_OBSERVER = "payment-observer";
+export declare const RES_PAYGATE_CUSTOMER = "payment-paygate-customer";
+export declare const RES_PAYMENT_SUBSCRIPTION = "payment-subscription";
+export declare const RES_PAYMENT_FINGERPRINT = "payment-fingerprint";
+export declare const COMPLETION_TOP_UP = "top-up";
+export declare const COMPLETION_SUBSCRIPTION = "subscription";
+export interface PaygateParams {
+    paygate: string;
+}
+export interface ResyncResult {
+    ok: boolean;
+}
+/** Embedded gateway protocol tree; the alias strings are private adapter details. */
+export declare const paymentGate: {
+    readonly base: import("@owlmeans/entrypoint").EntrypointProtocol<{}, undefined>;
+    readonly webhook: import("@owlmeans/entrypoint").EntrypointProtocol<{
+        params: PaygateParams;
+    }, undefined>;
+    readonly resync: import("@owlmeans/entrypoint").EntrypointProtocol<{}, ResyncResult>;
+};
+export declare const paymentGateProtocols: import("@owlmeans/entrypoint").EntrypointProtocolDeclaration[];
+//# sourceMappingURL=consts.d.ts.map

package/build/consts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.d.ts","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,oBAAoB,WAAW,CAAA;AAC5C,eAAO,MAAM,oBAAoB,qBAAqB,CAAA;AACtD,eAAO,MAAM,gBAAgB,qBAAqB,CAAA;AAClD,eAAO,MAAM,eAAe,oBAAoB,CAAA;AAChD,eAAO,MAAM,gBAAgB,qBAAqB,CAAA;AAClD,eAAO,MAAM,oBAAoB,6BAA6B,CAAA;AAC9D,eAAO,MAAM,wBAAwB,yBAAyB,CAAA;AAC9D,eAAO,MAAM,uBAAuB,wBAAwB,CAAA;AAC5D,eAAO,MAAM,iBAAiB,WAAW,CAAA;AACzC,eAAO,MAAM,uBAAuB,iBAAiB,CAAA;AAErD,MAAM,WAAW,aAAa;IAAG,OAAO,EAAE,MAAM,CAAA;CAAE;AAClD,MAAM,WAAW,YAAY;IAAG,EAAE,EAAE,OAAO,CAAA;CAAE;AAe7C,qFAAqF;AACrF,eAAO,MAAM,WAAW;;;;;;CAWd,CAAA;AAEV,eAAO,MAAM,oBAAoB,gEAAyB,CAAA"}

package/build/consts.js

@@ -0,0 +1,33 @@
+import { contract, protocol, protocols, schema, typed } from '@owlmeans/entrypoint';
+import { backend, route, RouteMethod } from '@owlmeans/route';
+import { GUARD_ED25519 } from '@owlmeans/server-app';
+export const STRIPE_PAYGATE_ALIAS = 'stripe';
+export const STRIPE_PLUGIN_CONFIG = '_external:stripe';
+export const STRIPE_SIGNATURE = 'Stripe-Signature';
+export const GATEWAY_SERVICE = 'payment-gateway';
+export const PAYMENT_OBSERVER = 'payment-observer';
+export const RES_PAYGATE_CUSTOMER = 'payment-paygate-customer';
+export const RES_PAYMENT_SUBSCRIPTION = 'payment-subscription';
+export const RES_PAYMENT_FINGERPRINT = 'payment-fingerprint';
+export const COMPLETION_TOP_UP = 'top-up';
+export const COMPLETION_SUBSCRIPTION = 'subscription';
+const PaygateParamsSchema = schema({
+    type: 'object', properties: { paygate: { type: 'string' } }, required: ['paygate'],
+    additionalProperties: false,
+});
+const ResyncResultSchema = schema({
+    type: 'object', properties: { ok: { type: 'boolean' } }, required: ['ok'],
+    additionalProperties: false,
+});
+const aliases = {
+    base: 'payment-gate', webhook: 'payment-gate:webhook', resync: 'payment-gate:resync',
+};
+const base = protocol(route(aliases.base, '/payment-gate', backend()), contract());
+/** Embedded gateway protocol tree; the alias strings are private adapter details. */
+export const paymentGate = {
+    base,
+    webhook: protocol(route(aliases.webhook, '/webhook/:paygate', backend({ parent: base, method: RouteMethod.POST })), contract.request({ params: PaygateParamsSchema }, typed())),
+    resync: protocol(route(aliases.resync, '/resync', backend({ parent: base, method: RouteMethod.POST })), contract(ResyncResultSchema), { guards: GUARD_ED25519 }),
+};
+export const paymentGateProtocols = protocols(paymentGate);
+//# sourceMappingURL=consts.js.map

package/build/consts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.js","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AACnF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAGpD,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAQ,CAAA;AAC5C,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAA;AACtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAA;AAClD,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAA;AAChD,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAA;AAClD,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,CAAA;AAC9D,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAA;AAC9D,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAA;AAC5D,MAAM,CAAC,MAAM,iBAAiB,GAAG,QAAQ,CAAA;AACzC,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAA;AAIrD,MAAM,mBAAmB,GAAG,MAAM,CAAgB;IAChD,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC;IAClF,oBAAoB,EAAE,KAAK;CACK,CAAC,CAAA;AACnC,MAAM,kBAAkB,GAAG,MAAM,CAAe;IAC9C,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC;IACzE,oBAAoB,EAAE,KAAK;CACI,CAAC,CAAA;AAElC,MAAM,OAAO,GAAG;IACd,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,qBAAqB;CAC5E,CAAA;AACV,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;AAElF,qFAAqF;AACrF,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,IAAI;IACJ,OAAO,EAAE,QAAQ,CACf,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,EAChG,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,KAAK,EAAa,CAAC,CACtE;IACD,MAAM,EAAE,QAAQ,CACd,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,EACrF,QAAQ,CAAC,kBAAkB,CAAC,EAC5B,EAAE,MAAM,EAAE,aAAa,EAAE,CAC1B;CACO,CAAA;AAEV,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAAC,WAAW,CAAC,CAAA"}

package/build/entrypoints.d.ts

@@ -0,0 +1,5 @@
+/** Runtime-local bindings for the shared immutable payment-gateway protocol tree. */
+export declare const paymentGateEntrypoints: (import("@owlmeans/server-entrypoint").ServerProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
+    params: import("./consts.js").PaygateParams;
+}, undefined>> | import("@owlmeans/server-entrypoint").ServerProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{}, undefined>> | import("@owlmeans/server-entrypoint").ServerProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{}, import("./consts.js").ResyncResult>>)[];
+//# sourceMappingURL=entrypoints.d.ts.map

package/build/entrypoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAIA,qFAAqF;AACrF,eAAO,MAAM,sBAAsB;;gTAIlC,CAAA"}

package/build/entrypoints.js

@@ -0,0 +1,10 @@
+import { bind } from '@owlmeans/server-entrypoint';
+import { paymentGate } from './consts.js';
+import { resync, webhook } from './actions/index.js';
+/** Runtime-local bindings for the shared immutable payment-gateway protocol tree. */
+export const paymentGateEntrypoints = [
+    bind(paymentGate.base),
+    bind(paymentGate.webhook, webhook),
+    bind(paymentGate.resync, resync),
+];
+//# sourceMappingURL=entrypoints.js.map

package/build/entrypoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entrypoints.js","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAEpD,qFAAqF;AACrF,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IACtB,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC;IAClC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;CACjC,CAAA"}

package/build/gate.d.ts

@@ -0,0 +1,10 @@
+import type { AbstractRequest, GateService } from '@owlmeans/entrypoint';
+import type { PermissionSet } from '@owlmeans/auth';
+import type { Context as ApiContext } from '@owlmeans/server-api';
+export interface EntitlementGateOptions {
+    productSkus?: string[];
+    resolveEntity?: (req: AbstractRequest) => string | null;
+}
+export declare const entitlementsOf: (ctx: ApiContext, entityId: string, productSkus?: string[]) => Promise<PermissionSet[]>;
+export declare const makeEntitlementGate: (alias?: string, opts?: EntitlementGateOptions) => GateService;
+//# sourceMappingURL=gate.d.ts.map

package/build/gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.d.ts","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAExE,OAAO,KAAK,EAAQ,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAEzD,OAAO,KAAK,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAIjE,MAAM,WAAW,sBAAsB;IACrC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,aAAa,CAAC,EAAE,CAAC,GAAG,EAAE,eAAe,KAAK,MAAM,GAAG,IAAI,CAAA;CACxD;AAED,eAAO,MAAM,cAAc,QACpB,UAAU,YAAY,MAAM,gBAAgB,MAAM,EAAE,KACxD,OAAO,CAAC,aAAa,EAAE,CAKzB,CAAA;AAKD,eAAO,MAAM,mBAAmB,WACvB,MAAM,SAA4B,sBAAsB,KAC9D,WAsBF,CAAA"}

package/build/gate.js

@@ -0,0 +1,37 @@
+import { createLazyService } from '@owlmeans/context';
+import { AuthForbidden, entitySlugOf } from '@owlmeans/auth';
+import { ENTITLEMENT_GATE, hasEntitlement, SubscriptionStatus } from '@owlmeans/payment';
+import { subscriptions } from './utils.js';
+export const entitlementsOf = async (ctx, entityId, productSkus) => {
+    const { items } = await subscriptions(ctx).list({
+        entityId, status: [SubscriptionStatus.Active, SubscriptionStatus.Trial], productSku: productSkus,
+    }, { size: 0 });
+    return items.flatMap(record => record.capabilities ?? []);
+};
+const defaultEntity = (req) => req.entity?.id ?? entitySlugOf(req.auth) ?? null;
+export const makeEntitlementGate = (alias = ENTITLEMENT_GATE, opts) => {
+    const service = createLazyService(alias, {
+        assert: async (req, _, params) => {
+            await service.ready();
+            const ctx = service.assertCtx();
+            if (req.auth == null)
+                throw new AuthForbidden('auth');
+            const entityId = (opts?.resolveEntity ?? defaultEntity)(req);
+            if (entityId == null || entityId === '')
+                throw new AuthForbidden('entity');
+            let capabilities;
+            try {
+                capabilities = await entitlementsOf(ctx, entityId, opts?.productSkus);
+            }
+            catch (error) {
+                console.error(`entitlement gate: cannot read subscriptions for "${entityId}"`, error);
+                throw new AuthForbidden('entitlement');
+            }
+            if (!params.some(param => hasEntitlement(capabilities, param))) {
+                throw new AuthForbidden('entitlement');
+            }
+        },
+    });
+    return service;
+};
+//# sourceMappingURL=gate.js.map

package/build/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../src/gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAErD,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAE5D,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAExF,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAQ1C,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EACjC,GAAe,EAAE,QAAgB,EAAE,WAAsB,EAC/B,EAAE;IAC5B,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QAC9C,QAAQ,EAAE,MAAM,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,WAAW;KACjG,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAA;IACf,OAAO,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAA;AAC3D,CAAC,CAAA;AAED,MAAM,aAAa,GAAG,CAAC,GAAoB,EAAiB,EAAE,CAC5D,GAAG,CAAC,MAAM,EAAE,EAAE,IAAI,YAAY,CAAC,GAAG,CAAC,IAAwB,CAAC,IAAI,IAAI,CAAA;AAEtE,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,KAAK,GAAW,gBAAgB,EAAE,IAA6B,EAClD,EAAE;IACf,MAAM,OAAO,GAAG,iBAAiB,CAAc,KAAK,EAAE;QACpD,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE;YAC/B,MAAM,OAAO,CAAC,KAAK,EAAE,CAAA;YACrB,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAA4C,CAAA;YACzE,IAAI,GAAG,CAAC,IAAI,IAAI,IAAI;gBAAE,MAAM,IAAI,aAAa,CAAC,MAAM,CAAC,CAAA;YACrD,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,aAAa,IAAI,aAAa,CAAC,CAAC,GAAG,CAAC,CAAA;YAC5D,IAAI,QAAQ,IAAI,IAAI,IAAI,QAAQ,KAAK,EAAE;gBAAE,MAAM,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAA;YAE1E,IAAI,YAA6B,CAAA;YACjC,IAAI,CAAC;gBACH,YAAY,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,CAAC,CAAA;YACvE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,OAAO,CAAC,KAAK,CAAC,oDAAoD,QAAQ,GAAG,EAAE,KAAK,CAAC,CAAA;gBACrF,MAAM,IAAI,aAAa,CAAC,aAAa,CAAC,CAAA;YACxC,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,cAAc,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;gBAC/D,MAAM,IAAI,aAAa,CAAC,aAAa,CAAC,CAAA;YACxC,CAAC;QACH,CAAC;KACF,CAAC,CAAA;IACF,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA"}

package/build/index.d.ts

@@ -0,0 +1,12 @@
+export type * from './types.js';
+export * from './consts.js';
+export * from './config.js';
+export * from './resource.js';
+export * from './observer.js';
+export * from './service.js';
+export * from './gate.js';
+export * from './entrypoints.js';
+export { initialize as syncPaymentProducts, planLookupKey } from './sync.js';
+export { amountCheckoutLineItem } from './plugins/stripe.js';
+export { payment, gateway, observer, paygateCustomers, subscriptions, fingerprints, activeSubscription, } from './utils.js';
+//# sourceMappingURL=index.d.ts.map

package/build/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,YAAY,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,kBAAkB,CAAA;AAChC,OAAO,EAAE,UAAU,IAAI,mBAAmB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAC5D,OAAO,EACL,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,YAAY,EAAE,kBAAkB,GAC9F,MAAM,YAAY,CAAA"}

package/build/index.js

@@ -0,0 +1,11 @@
+export * from './consts.js';
+export * from './config.js';
+export * from './resource.js';
+export * from './observer.js';
+export * from './service.js';
+export * from './gate.js';
+export * from './entrypoints.js';
+export { initialize as syncPaymentProducts, planLookupKey } from './sync.js';
+export { amountCheckoutLineItem } from './plugins/stripe.js';
+export { payment, gateway, observer, paygateCustomers, subscriptions, fingerprints, activeSubscription, } from './utils.js';
+//# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,kBAAkB,CAAA;AAChC,OAAO,EAAE,UAAU,IAAI,mBAAmB,EAAE,aAAa,EAAE,MAAM,WAAW,CAAA;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAC5D,OAAO,EACL,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,YAAY,EAAE,kBAAkB,GAC9F,MAAM,YAAY,CAAA"}

package/build/model.d.ts

@@ -0,0 +1,6 @@
+import type { JSONSchemaType } from 'ajv';
+import type { FingerprintRecord, PaygateCustomerRecord, PaymentSubscriptionRecord } from './types.js';
+export declare const PaygateCustomerSchema: JSONSchemaType<PaygateCustomerRecord>;
+export declare const PaymentSubscriptionSchema: JSONSchemaType<PaymentSubscriptionRecord>;
+export declare const FingerprintSchema: JSONSchemaType<FingerprintRecord>;
+//# sourceMappingURL=model.d.ts.map

package/build/model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,KAAK,CAAA;AAGzC,OAAO,KAAK,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,YAAY,CAAA;AAErG,eAAO,MAAM,qBAAqB,EASlB,cAAc,CAAC,qBAAqB,CAAC,CAAA;AAErD,eAAO,MAAM,yBAAyB,EAWtB,cAAc,CAAC,yBAAyB,CAAC,CAAA;AAEzD,eAAO,MAAM,iBAAiB,EAOd,cAAc,CAAC,iBAAiB,CAAC,CAAA"}

package/build/model.js

@@ -0,0 +1,33 @@
+import { PermissionSetSchema } from '@owlmeans/auth';
+import { LimitConfigSchema } from '@owlmeans/payment';
+export const PaygateCustomerSchema = {
+    type: 'object',
+    properties: {
+        id: { type: 'string', nullable: true }, paygate: { type: 'string' }, externalId: { type: 'string' },
+        entityId: { type: 'string', nullable: true }, profileId: { type: 'string', nullable: true },
+        email: { type: 'string', nullable: true }, name: { type: 'string', nullable: true },
+        taxId: { type: 'string', nullable: true },
+    },
+    required: ['paygate', 'externalId'], additionalProperties: true,
+};
+export const PaymentSubscriptionSchema = {
+    type: 'object',
+    properties: {
+        id: { type: 'string', nullable: true }, sku: { type: 'string' }, productSku: { type: 'string' },
+        entityId: { type: 'string' }, service: { type: 'string' }, paygate: { type: 'string' },
+        externalId: { type: 'string' }, status: { type: 'string' }, kind: { type: 'string' },
+        capabilities: { type: 'array', items: PermissionSetSchema, nullable: true },
+        limits: { type: 'object', nullable: true, additionalProperties: LimitConfigSchema, required: [] },
+    },
+    required: ['sku', 'productSku', 'entityId', 'service', 'paygate', 'externalId', 'status', 'kind'],
+    additionalProperties: true,
+};
+export const FingerprintSchema = {
+    type: 'object',
+    properties: {
+        id: { type: 'string', nullable: true }, sku: { type: 'string' }, hash: { type: 'string' },
+        productId: { type: 'string', nullable: true },
+    },
+    required: ['sku', 'hash'], additionalProperties: true,
+};
+//# sourceMappingURL=model.js.map

package/build/model.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model.js","sourceRoot":"","sources":["../src/model.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAA;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAGrD,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACnG,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC3F,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;QACnF,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;KAC1C;IACD,QAAQ,EAAE,CAAC,SAAS,EAAE,YAAY,CAAC,EAAE,oBAAoB,EAAE,IAAI;CACZ,CAAA;AAErD,MAAM,CAAC,MAAM,yBAAyB,GAAG;IACvC,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QAC/F,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACtF,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACpF,YAAY,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,mBAA4B,EAAE,QAAQ,EAAE,IAAI,EAAE;QACpF,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,oBAAoB,EAAE,iBAA0B,EAAE,QAAQ,EAAE,EAAE,EAAE;KAC3G;IACD,QAAQ,EAAE,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,CAAC;IACjG,oBAAoB,EAAE,IAAI;CAC6B,CAAA;AAEzD,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE;QACV,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzF,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE;KAC9C;IACD,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,oBAAoB,EAAE,IAAI;CACN,CAAA"}

package/build/observer.d.ts

@@ -0,0 +1,4 @@
+import type { CompletionObserver, Config, Context } from './types.js';
+export declare const makeCompletionObserverService: (alias?: string) => CompletionObserver;
+export declare const appendCompletionObserver: <C extends Config, T extends Context<C>>(ctx: T, alias?: string) => T;
+//# sourceMappingURL=observer.d.ts.map

package/build/observer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"observer.d.ts","sourceRoot":"","sources":["../src/observer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,OAAO,EAAuC,MAAM,YAAY,CAAA;AAE1G,eAAO,MAAM,6BAA6B,WACjC,MAAM,KACZ,kBAaF,CAAA;AAED,eAAO,MAAM,wBAAwB,GAAI,CAAC,SAAS,MAAM,EAAE,CAAC,SAAS,OAAO,CAAC,CAAC,CAAC,OACxE,CAAC,UAAS,MAAM,KACpB,CAGF,CAAA"}

package/build/observer.js

@@ -0,0 +1,24 @@
+import { createLazyService } from '@owlmeans/context';
+import { PAYMENT_OBSERVER } from './consts.js';
+export const makeCompletionObserverService = (alias = PAYMENT_OBSERVER) => {
+    const topUpCallbacks = [];
+    const subscriptionCallbacks = [];
+    return createLazyService(alias, {
+        onTopUp: cb => { topUpCallbacks.push(cb); },
+        onSubscription: cb => { subscriptionCallbacks.push(cb); },
+        propagateTopUp: async (completion, ctx) => {
+            for (const callback of topUpCallbacks)
+                await callback(completion, ctx);
+        },
+        propagateSubscription: async (completion, ctx) => {
+            for (const callback of subscriptionCallbacks)
+                await callback(completion, ctx);
+        },
+    }, service => async () => { service.initialized = true; });
+};
+export const appendCompletionObserver = (ctx, alias = PAYMENT_OBSERVER) => {
+    if (!ctx.hasService(alias))
+        ctx.registerService(makeCompletionObserverService(alias));
+    return ctx;
+};
+//# sourceMappingURL=observer.js.map

package/build/observer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"observer.js","sourceRoot":"","sources":["../src/observer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAG9C,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAC3C,KAAK,GAAW,gBAAgB,EACZ,EAAE;IACtB,MAAM,cAAc,GAAoB,EAAE,CAAA;IAC1C,MAAM,qBAAqB,GAA2B,EAAE,CAAA;IACxD,OAAO,iBAAiB,CAAqB,KAAK,EAAE;QAClD,OAAO,EAAE,EAAE,CAAC,EAAE,GAAG,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA,CAAC,CAAC;QAC1C,cAAc,EAAE,EAAE,CAAC,EAAE,GAAG,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA,CAAC,CAAC;QACxD,cAAc,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE;YACxC,KAAK,MAAM,QAAQ,IAAI,cAAc;gBAAE,MAAM,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;QACxE,CAAC;QACD,qBAAqB,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,EAAE;YAC/C,KAAK,MAAM,QAAQ,IAAI,qBAAqB;gBAAE,MAAM,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAA;QAC/E,CAAC;KACF,EAAE,OAAO,CAAC,EAAE,CAAC,KAAK,IAAI,EAAE,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAA,CAAC,CAAC,CAAC,CAAA;AAC3D,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,wBAAwB,GAAG,CACtC,GAAM,EAAE,KAAK,GAAW,gBAAgB,EACrC,EAAE;IACL,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,GAAG,CAAC,eAAe,CAAC,6BAA6B,CAAC,KAAK,CAAC,CAAC,CAAA;IACrF,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA"}

package/build/plugins/events.d.ts

@@ -0,0 +1,16 @@
+import type Stripe from 'stripe';
+import { SubscriptionStatus } from '@owlmeans/payment';
+import type { Context as ApiContext } from '@owlmeans/server-api';
+export declare const createEventHandler: (context: ApiContext, stripe: Stripe) => {
+    process: (event: Stripe.Event) => Promise<void>;
+    'customer.created': (event: Stripe.CustomerCreatedEvent) => Promise<void>;
+    'customer.updated': (event: Stripe.CustomerUpdatedEvent) => Promise<void>;
+    'checkout.session.completed': (event: Stripe.CheckoutSessionCompletedEvent) => Promise<void>;
+    'checkout.session.async_payment_succeeded': (event: Stripe.CheckoutSessionAsyncPaymentSucceededEvent) => Promise<void>;
+    'customer.subscription.created': (event: Stripe.CustomerSubscriptionCreatedEvent) => Promise<void>;
+    'customer.subscription.updated': (event: Stripe.CustomerSubscriptionUpdatedEvent) => Promise<void>;
+    'customer.subscription.deleted': (event: Stripe.CustomerSubscriptionDeletedEvent) => Promise<void>;
+    _upsertCustomer: (customer: Stripe.Customer) => Promise<void>;
+    _syncSubscription: (pgSubscription: Stripe.Subscription, forced?: SubscriptionStatus) => Promise<void>;
+};
+//# sourceMappingURL=events.d.ts.map

package/build/plugins/events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/plugins/events.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAA;AAEhC,OAAO,EAC4C,kBAAkB,EACpE,MAAM,mBAAmB,CAAA;AAC1B,OAAO,KAAK,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAuCjE,eAAO,MAAM,kBAAkB,YAAa,UAAU,UAAU,MAAM;qBAmE3C,MAAM,CAAC,KAAK;gCAGD,MAAM,CAAC,oBAAoB;gCAC3B,MAAM,CAAC,oBAAoB;0CACjB,MAAM,CAAC,6BAA6B;wDACtB,MAAM,CAAC,yCAAyC;6CAE3D,MAAM,CAAC,gCAAgC;6CACvC,MAAM,CAAC,gCAAgC;6CACvC,MAAM,CAAC,gCAAgC;gCAGpD,MAAM,CAAC,QAAQ;wCAgBP,MAAM,CAAC,YAAY,WAAW,kBAAkB;CAwC7F,CAAA"}