@owlmeans/server-payment 0.1.18-rc.0 → 0.1.18-rc.10

package/README.md

@@ -34,7 +34,8 @@ observer(context).onTopUp(async completion => {
 })
 ```
 
-Mount `paymentGateEntrypoints` in the server entrypoint list. `gateway(context).createLink(...)`
+Mount the local `paymentGateEntrypoints` bindings in the server entrypoint list; the shared
+`paymentGate` protocol tree stays immutable. `gateway(context).createLink(...)`
 accepts the stable organization `entityId` only after the application has resolved it at its
 authenticated boundary; public protocol bodies use `entitySlug`.
 
@@ -46,7 +47,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills@^0.1.18-rc.16
+npx @owlmeans/agent-skills@^0.1.18-rc.27
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/server-payment",
-  "version": "0.1.18-rc.0",
-  "generatedAt": "2026-09-12T12:32:46.376Z",
+  "version": "0.1.18-rc.10",
+  "generatedAt": "2026-09-15T14:02:13.059Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/server-payment/SKILL.md

@@ -7,6 +7,8 @@ user-invocable: false
 
 # @owlmeans/server-payment
 
+**Install:** `bun add @owlmeans/server-payment@^0.1.18-rc.10`
+
 Public MIT package in the common monorepo. It embeds Stripe into an application backend; the
 consumer owns products, credit conversion and entitlement side effects. It persists customers,
 subscriptions/fulfilled sessions and sync fingerprints in Mongo.
@@ -22,7 +24,7 @@ declarePaymentPlan(cfg, { productSku: 'credits', sku: 'credits-unit',
   pricingMode: CheckoutPricingMode.Amount, amountPolicy })
 
 appendPaymentGatewayService(context)
-export const appEntrypoints = [...paymentGateEntrypoints]
+export const serverBindings = [...paymentGateEntrypoints]
 observer(context).onTopUp(async completion => { /* append an idempotent ledger event */ })
 ```
 
@@ -66,7 +68,8 @@ must be safe to repeat.
 ## Protocols and security
 
 `paymentGate` is an immutable protocol tree. `paymentGateEntrypoints` binds its base, webhook, and
-resync declarations directly with `bind(protocol, handler)`; the webhook is public because Stripe
+resync declarations directly with `bind(protocol, handler)`; do not publish a flattened
+`paymentGateProtocols` compatibility list. The webhook is public because Stripe
 signature verification requires the untouched raw body, while resync carries the ED25519 guard.
 Never put an application auth guard on the Stripe webhook.
 

package/build/consts.d.ts

@@ -22,5 +22,4 @@ export declare const paymentGate: {
     }, undefined>;
     readonly resync: import("@owlmeans/entrypoint").EntrypointProtocol<{}, ResyncResult>;
 };
-export declare const paymentGateProtocols: import("@owlmeans/entrypoint").EntrypointProtocolDeclaration[];
 //# sourceMappingURL=consts.d.ts.map

package/build/consts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"consts.d.ts","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,oBAAoB,WAAW,CAAA;AAC5C,eAAO,MAAM,oBAAoB,qBAAqB,CAAA;AACtD,eAAO,MAAM,gBAAgB,qBAAqB,CAAA;AAClD,eAAO,MAAM,eAAe,oBAAoB,CAAA;AAChD,eAAO,MAAM,gBAAgB,qBAAqB,CAAA;AAClD,eAAO,MAAM,oBAAoB,6BAA6B,CAAA;AAC9D,eAAO,MAAM,wBAAwB,yBAAyB,CAAA;AAC9D,eAAO,MAAM,uBAAuB,wBAAwB,CAAA;AAC5D,eAAO,MAAM,iBAAiB,WAAW,CAAA;AACzC,eAAO,MAAM,uBAAuB,iBAAiB,CAAA;AAErD,MAAM,WAAW,aAAa;IAAG,OAAO,EAAE,MAAM,CAAA;CAAE;AAClD,MAAM,WAAW,YAAY;IAAG,EAAE,EAAE,OAAO,CAAA;CAAE;AAe7C,qFAAqF;AACrF,eAAO,MAAM,WAAW;;;;;;CAWd,CAAA;AAEV,eAAO,MAAM,oBAAoB,gEAAyB,CAAA"}
+{"version":3,"file":"consts.d.ts","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,oBAAoB,WAAW,CAAA;AAC5C,eAAO,MAAM,oBAAoB,qBAAqB,CAAA;AACtD,eAAO,MAAM,gBAAgB,qBAAqB,CAAA;AAClD,eAAO,MAAM,eAAe,oBAAoB,CAAA;AAChD,eAAO,MAAM,gBAAgB,qBAAqB,CAAA;AAClD,eAAO,MAAM,oBAAoB,6BAA6B,CAAA;AAC9D,eAAO,MAAM,wBAAwB,yBAAyB,CAAA;AAC9D,eAAO,MAAM,uBAAuB,wBAAwB,CAAA;AAC5D,eAAO,MAAM,iBAAiB,WAAW,CAAA;AACzC,eAAO,MAAM,uBAAuB,iBAAiB,CAAA;AAErD,MAAM,WAAW,aAAa;IAAG,OAAO,EAAE,MAAM,CAAA;CAAE;AAClD,MAAM,WAAW,YAAY;IAAG,EAAE,EAAE,OAAO,CAAA;CAAE;AAe7C,qFAAqF;AACrF,eAAO,MAAM,WAAW;;;;;;CAWd,CAAA"}

package/build/consts.js

@@ -1,4 +1,4 @@
-import { contract, protocol, protocols, schema, typed } from '@owlmeans/entrypoint';
+import { contract, protocol, schema, typed } from '@owlmeans/entrypoint';
 import { backend, route, RouteMethod } from '@owlmeans/route';
 import { GUARD_ED25519 } from '@owlmeans/server-app';
 export const STRIPE_PAYGATE_ALIAS = 'stripe';
@@ -29,5 +29,4 @@ export const paymentGate = {
     webhook: protocol(route(aliases.webhook, '/webhook/:paygate', backend({ parent: base, method: RouteMethod.POST })), contract.request({ params: PaygateParamsSchema }, typed())),
     resync: protocol(route(aliases.resync, '/resync', backend({ parent: base, method: RouteMethod.POST })), contract(ResyncResultSchema), { guards: GUARD_ED25519 }),
 };
-export const paymentGateProtocols = protocols(paymentGate);
 //# sourceMappingURL=consts.js.map

package/build/consts.js.map

@@ -1 +1 @@
-{"version":3,"file":"consts.js","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AACnF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAGpD,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAQ,CAAA;AAC5C,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAA;AACtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAA;AAClD,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAA;AAChD,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAA;AAClD,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,CAAA;AAC9D,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAA;AAC9D,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAA;AAC5D,MAAM,CAAC,MAAM,iBAAiB,GAAG,QAAQ,CAAA;AACzC,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAA;AAIrD,MAAM,mBAAmB,GAAG,MAAM,CAAgB;IAChD,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC;IAClF,oBAAoB,EAAE,KAAK;CACK,CAAC,CAAA;AACnC,MAAM,kBAAkB,GAAG,MAAM,CAAe;IAC9C,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC;IACzE,oBAAoB,EAAE,KAAK;CACI,CAAC,CAAA;AAElC,MAAM,OAAO,GAAG;IACd,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,qBAAqB;CAC5E,CAAA;AACV,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;AAElF,qFAAqF;AACrF,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,IAAI;IACJ,OAAO,EAAE,QAAQ,CACf,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,EAChG,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,KAAK,EAAa,CAAC,CACtE;IACD,MAAM,EAAE,QAAQ,CACd,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,EACrF,QAAQ,CAAC,kBAAkB,CAAC,EAC5B,EAAE,MAAM,EAAE,aAAa,EAAE,CAC1B;CACO,CAAA;AAEV,MAAM,CAAC,MAAM,oBAAoB,GAAG,SAAS,CAAC,WAAW,CAAC,CAAA"}
+{"version":3,"file":"consts.js","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AACxE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AAGpD,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAQ,CAAA;AAC5C,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAA;AACtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAA;AAClD,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAA;AAChD,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAA;AAClD,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,CAAA;AAC9D,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAA;AAC9D,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAA;AAC5D,MAAM,CAAC,MAAM,iBAAiB,GAAG,QAAQ,CAAA;AACzC,MAAM,CAAC,MAAM,uBAAuB,GAAG,cAAc,CAAA;AAIrD,MAAM,mBAAmB,GAAG,MAAM,CAAgB;IAChD,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC;IAClF,oBAAoB,EAAE,KAAK;CACK,CAAC,CAAA;AACnC,MAAM,kBAAkB,GAAG,MAAM,CAAe;IAC9C,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC;IACzE,oBAAoB,EAAE,KAAK;CACI,CAAC,CAAA;AAElC,MAAM,OAAO,GAAG;IACd,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,sBAAsB,EAAE,MAAM,EAAE,qBAAqB;CAC5E,CAAA;AACV,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;AAElF,qFAAqF;AACrF,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,IAAI;IACJ,OAAO,EAAE,QAAQ,CACf,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,EAChG,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,KAAK,EAAa,CAAC,CACtE;IACD,MAAM,EAAE,QAAQ,CACd,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,EACrF,QAAQ,CAAC,kBAAkB,CAAC,EAC5B,EAAE,MAAM,EAAE,aAAa,EAAE,CAC1B;CACO,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owlmeans/server-payment",
-  "version": "0.1.18-rc.0",
+  "version": "0.1.18-rc.10",
   "license": "MIT",
   "description": "Protocol-bound payment resources, entitlement gates, and Stripe checkout for OwlMeans servers.",
   "type": "module",
@@ -26,18 +26,18 @@
     "ajv": "*"
   },
   "dependencies": {
-    "@owlmeans/auth": "^0.1.18-rc.13",
-    "@owlmeans/config": "^0.1.18-rc.16",
-    "@owlmeans/context": "^0.1.18-rc.12",
-    "@owlmeans/entrypoint": "^0.1.18-rc.15",
-    "@owlmeans/mongo-resource": "^0.1.18-rc.16",
-    "@owlmeans/payment": "^0.1.18-rc.17",
-    "@owlmeans/resource": "^0.1.18-rc.13",
-    "@owlmeans/route": "^0.1.18-rc.13",
-    "@owlmeans/server-api": "^0.1.18-rc.21",
-    "@owlmeans/server-app": "^0.1.18-rc.22",
-    "@owlmeans/server-context": "^0.1.18-rc.16",
-    "@owlmeans/server-entrypoint": "^0.1.18-rc.15",
+    "@owlmeans/auth": "^0.1.18-rc.26",
+    "@owlmeans/config": "^0.1.18-rc.28",
+    "@owlmeans/context": "^0.1.18-rc.24",
+    "@owlmeans/entrypoint": "^0.1.18-rc.27",
+    "@owlmeans/mongo-resource": "^0.1.18-rc.27",
+    "@owlmeans/payment": "^0.1.18-rc.28",
+    "@owlmeans/resource": "^0.1.18-rc.26",
+    "@owlmeans/route": "^0.1.18-rc.25",
+    "@owlmeans/server-api": "^0.1.18-rc.32",
+    "@owlmeans/server-app": "^0.1.18-rc.32",
+    "@owlmeans/server-context": "^0.1.18-rc.27",
+    "@owlmeans/server-entrypoint": "^0.1.18-rc.26",
     "async-mutex": "^0.5.0",
     "stripe": "^17.7.0"
   },

package/src/consts.ts

@@ -1,4 +1,4 @@
-import { contract, protocol, protocols, schema, typed } from '@owlmeans/entrypoint'
+import { contract, protocol, schema, typed } from '@owlmeans/entrypoint'
 import { backend, route, RouteMethod } from '@owlmeans/route'
 import { GUARD_ED25519 } from '@owlmeans/server-app'
 import type { JSONSchemaType } from 'ajv'
@@ -43,5 +43,3 @@ export const paymentGate = {
     { guards: GUARD_ED25519 },
   ),
 } as const
-
-export const paymentGateProtocols = protocols(paymentGate)

package/tests/protocol.spec.ts

@@ -1,6 +1,8 @@
 import { describe, expect, test } from 'bun:test'
+import { protocols } from '@owlmeans/entrypoint'
 import type { ParamsOf, ResponseOf } from '@owlmeans/entrypoint'
-import { paymentGate, paymentGateProtocols } from '../src/index.js'
+import * as payment from '../src/index.js'
+import { paymentGate } from '../src/index.js'
 
 describe('server payment protocols', () => {
   test('bind webhook params and resync response to their declarations', () => {
@@ -12,9 +14,10 @@ describe('server payment protocols', () => {
     expect(paymentGate.webhook.route.route.parent).toBe(paymentGate.base.alias)
   })
 
-  test('exports a flattened list of immutable protocol objects', () => {
-    expect(paymentGateProtocols).toContain(paymentGate.webhook)
-    expect(paymentGateProtocols.every(item => item.kind === 'entrypoint-protocol')).toBe(true)
+  test('exports an immutable protocol tree without a flattened compatibility list', () => {
+    expect(protocols(paymentGate)).toContain(paymentGate.webhook)
+    expect(protocols(paymentGate).every(item => item.kind === 'entrypoint-protocol')).toBe(true)
+    expect(payment).not.toHaveProperty('paymentGateProtocols')
     expect(Object.isFrozen(paymentGate.resync)).toBe(true)
   })
 })