@owlmeans/server-payment 0.1.18-rc.0

package/build/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../src/sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAEpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AAGhE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAuB,EAAE,IAAiB,EAAU,EAAE,CAClF,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAA;AAElF,MAAM,aAAa,GAAG,CAAC,OAAuB,EAAE,KAAoB,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;KAClG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC;IACrB,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,KAAK;IACzD,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,IAAI;IAC1E,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,EAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;IACpF,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxB,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ;QAC3F,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,IAAI;QACxE,YAAY,EAAE,IAAI,CAAC,YAAY,IAAI,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,IAAI;QACpF,MAAM,EAAE,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC;KACrC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;CAC/C,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AAEnB,MAAM,mBAAmB,GAAG,KAAK,EAAE,MAAc,EAAE,OAAuB,EAA2B,EAAE;IACrG,MAAM,MAAM,GAA+B;QACzC,IAAI,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,SAAS,EAAE,QAAQ,EAAE,OAAO,CAAC,OAAO;QAC7F,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;KAClG,CAAA;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,WAAW,CAAC,UAAU,IAAI,OAAO,CAAC,SAAS,IAAI,IAAI;QAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC,SAAS,CAAA;IAC/G,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC3C,OAAO,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC,CAAA;IACrE,CAAC;AACH,CAAC,CAAA;AAED,MAAM,YAAY,GAAG,KAAK,EAAE,MAAc,EAAE,OAAuB,EAA2B,EAAE,CAC9F,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;AAErF,MAAM,qBAAqB,GAAG,KAAK,EAAE,MAAc,EAAE,OAAuB,EAAE,IAAiB,EAAiB,EAAE;IAChH,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IAC3C,KAAK,MAAM,KAAK,IAAI,CAAC,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,MAAM,CAAC,EAAE,CAAC;QACrG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IACzD,CAAC;AACH,CAAC,CAAA;AAED,MAAM,iBAAiB,GAAG,KAAK,EAAE,MAAc,EAAE,OAAuB,EAAE,IAAiB,EAAiB,EAAE;IAC5G,IAAI,IAAI,CAAC,WAAW,KAAK,mBAAmB,CAAC,MAAM,EAAE,CAAC;QACpD,MAAM,qBAAqB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;QAClD,OAAM;IACR,CAAC;IACD,MAAM,SAAS,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;IAC9C,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,CAAA;IAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAA;IACvC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI;QACtC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAwC,CAAC,CAAC,CAAC,SAAS,CAAA;IAC3F,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,WAAW,KAAK,UAAU;WAClG,KAAK,CAAC,QAAQ,KAAK,QAAQ;WAC3B,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,CAAA;IAC7E,IAAI,KAAK,IAAI,IAAI;QAAE,OAAM;IACzB,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,EAAE,CAAC;QAC3E,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAA;IACzD,CAAC;IACD,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;QACzB,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,SAAS;QAC9E,mBAAmB,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG;QAC7C,GAAG,CAAC,SAAS,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,UAAU,EAAE,CAAC;QACvE,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;KAC/F,CAAC,CAAA;AACJ,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAAE,GAAe,EAAiB,EAAE;IACjE,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAsB,CAAA;IAC7D,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAA;IAC/F,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAM;IACjC,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAA;IACtC,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,CAAA;IAC/B,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAkB,CAAA;QACvE,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAA;QAC1C,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;QAC7C,IAAI,MAAM,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;YAAE,SAAQ;QACpD,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QAChE,KAAK,MAAM,IAAI,IAAI,KAAK;YAAE,MAAM,iBAAiB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAA;QACxE,IAAI,MAAM,IAAI,IAAI,EAAE,CAAC;YACnB,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAA;YACnF,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC1B,CAAC;aAAM,CAAC;YACN,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,EAAE,CAAC,CAAA;QACpG,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,6BAA6B,OAAO,CAAC,GAAG,gBAAgB,KAAK,CAAC,MAAM,WAAW,CAAC,CAAA;IAC/F,CAAC;AACH,CAAC,CAAA"}

package/build/types.d.ts

@@ -0,0 +1,189 @@
+import type { InitializedService, LazyService } from '@owlmeans/context';
+import type { ResourceRecord } from '@owlmeans/resource';
+import type { MongoResource } from '@owlmeans/mongo-resource';
+import type { PluginConfig } from '@owlmeans/config';
+import type { PermissionSet } from '@owlmeans/auth';
+import type { Config as ApiConfig, Context as ApiContext } from '@owlmeans/server-api';
+import type { AmountCheckoutPolicy, CheckoutPricingMode, LimitConfig, PlanDuration, Product, ProductPlan, ProductType, QuantityCheckoutPolicy, SubscriptionStatus } from '@owlmeans/payment';
+export interface Config extends ApiConfig {
+}
+export interface Context<C extends Config = Config> extends ApiContext<C> {
+}
+export interface PaymentProduct extends Product {
+    taxCode?: string;
+    unitLabel?: string;
+}
+export interface PaymentPlan extends ProductPlan {
+    recurring?: {
+        interval: 'month' | 'year';
+    };
+    minQuantity?: number;
+    maxQuantity?: number;
+    defaultQuantity?: number;
+    pricingMode?: CheckoutPricingMode;
+    amountPolicy?: AmountCheckoutPolicy;
+    quantityPolicy?: QuantityCheckoutPolicy;
+}
+export interface PaymentProductDef {
+    sku: string;
+    type: ProductType;
+    services: string[];
+    gateways?: string[];
+    taxCode?: string;
+    name: string;
+    description?: string;
+    unitLabel?: string;
+    defaultLng?: string;
+    capabilities?: PermissionSet[];
+}
+export interface PaymentPlanDef {
+    productSku: string;
+    sku: string;
+    duration: PlanDuration;
+    /** Reference unit price in major units; amount checkout uses it only for fulfillment conversion. */
+    price: number;
+    currency?: string;
+    recurring?: {
+        interval: 'month' | 'year';
+    };
+    order?: number;
+    title?: string;
+    capabilities?: PermissionSet[];
+    limits?: {
+        [key: string]: LimitConfig;
+    };
+    pricingMode?: CheckoutPricingMode;
+    amountPolicy?: AmountCheckoutPolicy;
+    quantityPolicy?: QuantityCheckoutPolicy;
+    /** Legacy quantity declarations retained for source compatibility. */
+    minQuantity?: number;
+    maxQuantity?: number;
+    defaultQuantity?: number;
+}
+export interface StripePluginConfig extends PluginConfig {
+    api: string;
+    webhook: string;
+}
+export interface CreateLinkParams {
+    productSku: string;
+    /** Stable database key resolved by the application before this in-process call. */
+    entityId: string;
+    profileId?: string;
+    service: string;
+    planSku?: string;
+    amountMinor?: number;
+    successUrl?: string;
+    cancelUrl?: string;
+}
+export interface PaymentPlugin {
+    createLink: (ctx: ApiContext, params: CreateLinkParams) => Promise<string>;
+    handleWebhook: (request: unknown, ctx: ApiContext) => Promise<void>;
+    initialize?: (ctx: ApiContext) => Promise<void>;
+    manageSubscription: (ctx: ApiContext, entityId: string, returnUrl: string) => Promise<string>;
+}
+export interface GatewayService extends InitializedService {
+    createLink: PaymentPlugin['createLink'];
+    manageSubscription: PaymentPlugin['manageSubscription'];
+}
+export interface PaymentResourceOptions {
+    dbAlias?: string;
+    serviceAlias?: string;
+}
+interface TopUpBase {
+    entityId: string;
+    productSku: string;
+    planSku?: string;
+    service: string;
+    paygate: string;
+    externalId: string;
+}
+export interface QuantityTopUpCompletion extends TopUpBase {
+    mode: 'quantity';
+    units: number;
+}
+export interface AmountTopUpCompletion extends TopUpBase {
+    mode: 'amount';
+    amountMinor: number;
+    chargeAmountMinor: number;
+    currency: string;
+}
+export type TopUpCompletion = QuantityTopUpCompletion | AmountTopUpCompletion;
+export interface SubscriptionCompletion {
+    entityId: string;
+    status: SubscriptionStatus;
+    productSku: string;
+    planSku: string;
+    service: string;
+    paygate: string;
+    externalId: string;
+    isNew: boolean;
+    capabilities?: PermissionSet[];
+    limits?: {
+        [key: string]: LimitConfig;
+    };
+}
+export interface TopUpCallback {
+    (completion: TopUpCompletion, ctx: ApiContext): Promise<void>;
+}
+export interface SubscriptionCallback {
+    (completion: SubscriptionCompletion, ctx: ApiContext): Promise<void>;
+}
+export interface CompletionObserver extends LazyService {
+    onTopUp: (cb: TopUpCallback) => void;
+    onSubscription: (cb: SubscriptionCallback) => void;
+    propagateTopUp: (completion: TopUpCompletion, ctx: ApiContext) => Promise<void>;
+    propagateSubscription: (completion: SubscriptionCompletion, ctx: ApiContext) => Promise<void>;
+}
+export interface PaygateCustomerRecord extends ResourceRecord {
+    paygate: string;
+    externalId: string;
+    entityId?: string;
+    profileId?: string;
+    email?: string;
+    name?: string;
+    taxId?: string;
+}
+export interface PaygateCustomerResource extends MongoResource<PaygateCustomerRecord> {
+    loadByPgId: (externalId: string, paygate: string) => Promise<PaygateCustomerRecord | null>;
+    byEntity: (entityId: string, paygate: string) => Promise<PaygateCustomerRecord | null>;
+}
+export interface PaymentSubscriptionRecord extends ResourceRecord {
+    sku: string;
+    productSku: string;
+    entityId: string;
+    service: string;
+    paygate: string;
+    externalId: string;
+    status: SubscriptionStatus;
+    kind: 'consumable' | 'subscription';
+    capabilities?: PermissionSet[];
+    limits?: {
+        [key: string]: LimitConfig;
+    };
+    pricingMode?: CheckoutPricingMode;
+    units?: number;
+    amountMinor?: number;
+    chargeAmountMinor?: number;
+    currency?: string;
+    createdAt: Date;
+    endsAt?: Date;
+    trialUntil?: Date;
+    canceledAt?: Date;
+    fulfilledAt?: Date;
+    initialPropagatedAt?: Date;
+}
+export interface PaymentSubscriptionResource extends MongoResource<PaymentSubscriptionRecord> {
+    byExternalId: (externalId: string, paygate: string) => Promise<PaymentSubscriptionRecord | null>;
+}
+export interface FingerprintRecord extends ResourceRecord {
+    sku: string;
+    hash: string;
+    productId?: string;
+    updatedAt: Date;
+}
+export interface FingerprintResource extends MongoResource<FingerprintRecord> {
+    bySku: (sku: string) => Promise<FingerprintRecord | null>;
+    clear: () => Promise<void>;
+}
+export {};
+//# sourceMappingURL=types.d.ts.map

package/build/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AACxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAA;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AACnD,OAAO,KAAK,EAAE,MAAM,IAAI,SAAS,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACtF,OAAO,KAAK,EACV,oBAAoB,EAAE,mBAAmB,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,WAAW,EAC1F,WAAW,EAAE,sBAAsB,EAAE,kBAAkB,EACxD,MAAM,mBAAmB,CAAA;AAE1B,MAAM,WAAW,MAAO,SAAQ,SAAS;CAAG;AAC5C,MAAM,WAAW,OAAO,CAAC,CAAC,SAAS,MAAM,GAAG,MAAM,CAAE,SAAQ,UAAU,CAAC,CAAC,CAAC;CAAG;AAE5E,MAAM,WAAW,cAAe,SAAQ,OAAO;IAC7C,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,WAAY,SAAQ,WAAW;IAC9C,SAAS,CAAC,EAAE;QAAE,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAA;KAAE,CAAA;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,WAAW,CAAC,EAAE,mBAAmB,CAAA;IACjC,YAAY,CAAC,EAAE,oBAAoB,CAAA;IACnC,cAAc,CAAC,EAAE,sBAAsB,CAAA;CACxC;AAED,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAA;IACX,IAAI,EAAE,WAAW,CAAA;IACjB,QAAQ,EAAE,MAAM,EAAE,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,YAAY,CAAC,EAAE,aAAa,EAAE,CAAA;CAC/B;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,MAAM,CAAA;IAClB,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,YAAY,CAAA;IACtB,oGAAoG;IACpG,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE;QAAE,QAAQ,EAAE,OAAO,GAAG,MAAM,CAAA;KAAE,CAAA;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,YAAY,CAAC,EAAE,aAAa,EAAE,CAAA;IAC9B,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAA;KAAE,CAAA;IACvC,WAAW,CAAC,EAAE,mBAAmB,CAAA;IACjC,YAAY,CAAC,EAAE,oBAAoB,CAAA;IACnC,cAAc,CAAC,EAAE,sBAAsB,CAAA;IACvC,sEAAsE;IACtE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,eAAe,CAAC,EAAE,MAAM,CAAA;CACzB;AAED,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IAAG,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAEzF,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAA;IAClB,mFAAmF;IACnF,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,UAAU,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAC1E,aAAa,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACnE,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/C,kBAAkB,EAAE,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;CAC9F;AACD,MAAM,WAAW,cAAe,SAAQ,kBAAkB;IACxD,UAAU,EAAE,aAAa,CAAC,YAAY,CAAC,CAAA;IACvC,kBAAkB,EAAE,aAAa,CAAC,oBAAoB,CAAC,CAAA;CACxD;AACD,MAAM,WAAW,sBAAsB;IAAG,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE;AAEnF,UAAU,SAAS;IACjB,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;CACnB;AACD,MAAM,WAAW,uBAAwB,SAAQ,SAAS;IACxD,IAAI,EAAE,UAAU,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;CACd;AACD,MAAM,WAAW,qBAAsB,SAAQ,SAAS;IACtD,IAAI,EAAE,QAAQ,CAAA;IACd,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB,QAAQ,EAAE,MAAM,CAAA;CACjB;AACD,MAAM,MAAM,eAAe,GAAG,uBAAuB,GAAG,qBAAqB,CAAA;AAE7E,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,kBAAkB,CAAA;IAC1B,UAAU,EAAE,MAAM,CAAA;IAClB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,EAAE,MAAM,CAAA;IAClB,KAAK,EAAE,OAAO,CAAA;IACd,YAAY,CAAC,EAAE,aAAa,EAAE,CAAA;IAC9B,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAA;KAAE,CAAA;CACxC;AACD,MAAM,WAAW,aAAa;IAAG,CAAC,UAAU,EAAE,eAAe,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE;AAChG,MAAM,WAAW,oBAAoB;IAAG,CAAC,UAAU,EAAE,sBAAsB,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CAAE;AAC9G,MAAM,WAAW,kBAAmB,SAAQ,WAAW;IACrD,OAAO,EAAE,CAAC,EAAE,EAAE,aAAa,KAAK,IAAI,CAAA;IACpC,cAAc,EAAE,CAAC,EAAE,EAAE,oBAAoB,KAAK,IAAI,CAAA;IAClD,cAAc,EAAE,CAAC,UAAU,EAAE,eAAe,EAAE,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/E,qBAAqB,EAAE,CAAC,UAAU,EAAE,sBAAsB,EAAE,GAAG,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAC9F;AAED,MAAM,WAAW,qBAAsB,SAAQ,cAAc;IAC3D,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAC9C;AACD,MAAM,WAAW,uBAAwB,SAAQ,aAAa,CAAC,qBAAqB,CAAC;IACnF,UAAU,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAA;IAC1F,QAAQ,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CAAA;CACvF;AACD,MAAM,WAAW,yBAA0B,SAAQ,cAAc;IAC/D,GAAG,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;IACnF,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,kBAAkB,CAAC;IAAC,IAAI,EAAE,YAAY,GAAG,cAAc,CAAA;IACnF,YAAY,CAAC,EAAE,aAAa,EAAE,CAAC;IAAC,MAAM,CAAC,EAAE;QAAE,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAAA;KAAE,CAAA;IACvE,WAAW,CAAC,EAAE,mBAAmB,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IACvE,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC7C,SAAS,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,IAAI,CAAC;IAAC,UAAU,CAAC,EAAE,IAAI,CAAC;IAAC,UAAU,CAAC,EAAE,IAAI,CAAA;IACpE,WAAW,CAAC,EAAE,IAAI,CAAC;IAAC,mBAAmB,CAAC,EAAE,IAAI,CAAA;CAC/C;AACD,MAAM,WAAW,2BAA4B,SAAQ,aAAa,CAAC,yBAAyB,CAAC;IAC3F,YAAY,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAAA;CACjG;AACD,MAAM,WAAW,iBAAkB,SAAQ,cAAc;IACvD,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,IAAI,CAAA;CAC/D;AACD,MAAM,WAAW,mBAAoB,SAAQ,aAAa,CAAC,iBAAiB,CAAC;IAC3E,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAA;IACzD,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;CAC3B"}

package/build/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/build/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/build/utils.d.ts

@@ -0,0 +1,14 @@
+import Stripe from 'stripe';
+import type { PaymentService } from '@owlmeans/payment';
+import type { Context as ApiContext } from '@owlmeans/server-api';
+import type { CompletionObserver, FingerprintResource, GatewayService, PaygateCustomerResource, PaymentSubscriptionRecord, PaymentSubscriptionResource, StripePluginConfig } from './types.js';
+export declare const payment: (ctx: ApiContext) => PaymentService;
+export declare const gateway: (ctx: ApiContext) => GatewayService;
+export declare const observer: (ctx: ApiContext) => CompletionObserver;
+export declare const paygateCustomers: (ctx: ApiContext) => PaygateCustomerResource;
+export declare const subscriptions: (ctx: ApiContext) => PaymentSubscriptionResource;
+export declare const fingerprints: (ctx: ApiContext) => FingerprintResource;
+export declare const stripeConfig: (ctx: ApiContext) => Promise<StripePluginConfig>;
+export declare const stripeClient: (ctx: ApiContext) => Promise<Stripe>;
+export declare const activeSubscription: (ctx: ApiContext, entityId: string, productSku: string) => Promise<PaymentSubscriptionRecord | null>;
+//# sourceMappingURL=utils.d.ts.map

package/build/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAA;AAG3B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,KAAK,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAKjE,OAAO,KAAK,EACV,kBAAkB,EAAE,mBAAmB,EAAE,cAAc,EAAE,uBAAuB,EAChF,yBAAyB,EAAE,2BAA2B,EAAE,kBAAkB,EAC3E,MAAM,YAAY,CAAA;AAEnB,eAAO,MAAM,OAAO,QAAS,UAAU,KAAG,cAA8D,CAAA;AACxG,eAAO,MAAM,OAAO,QAAS,UAAU,KAAG,cAA8D,CAAA;AACxG,eAAO,MAAM,QAAQ,QAAS,UAAU,KAAG,kBAAuE,CAAA;AAClH,eAAO,MAAM,gBAAgB,QAAS,UAAU,KAAG,uBACU,CAAA;AAC7D,eAAO,MAAM,aAAa,QAAS,UAAU,KAAG,2BACqB,CAAA;AACrE,eAAO,MAAM,YAAY,QAAS,UAAU,KAAG,mBACa,CAAA;AAC5D,eAAO,MAAM,YAAY,QAAe,UAAU,KAAG,OAAO,CAAC,kBAAkB,CAEA,CAAA;AAC/E,eAAO,MAAM,YAAY,QAAe,UAAU,KAAG,OAAO,CAAC,MAAM,CAA8C,CAAA;AACjH,eAAO,MAAM,kBAAkB,QACxB,UAAU,YAAY,MAAM,cAAc,MAAM,KACpD,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAGzC,CAAA"}

package/build/utils.js

@@ -0,0 +1,18 @@
+import Stripe from 'stripe';
+import { PLUGINS } from '@owlmeans/config';
+import { DEFAULT_ALIAS as PAYMENT_SERVICE, SubscriptionStatus } from '@owlmeans/payment';
+import { GATEWAY_SERVICE, PAYMENT_OBSERVER, RES_PAYGATE_CUSTOMER, RES_PAYMENT_FINGERPRINT, RES_PAYMENT_SUBSCRIPTION, STRIPE_PLUGIN_CONFIG, } from './consts.js';
+export const payment = (ctx) => ctx.service(PAYMENT_SERVICE);
+export const gateway = (ctx) => ctx.service(GATEWAY_SERVICE);
+export const observer = (ctx) => ctx.service(PAYMENT_OBSERVER);
+export const paygateCustomers = (ctx) => ctx.resource(RES_PAYGATE_CUSTOMER);
+export const subscriptions = (ctx) => ctx.resource(RES_PAYMENT_SUBSCRIPTION);
+export const fingerprints = (ctx) => ctx.resource(RES_PAYMENT_FINGERPRINT);
+export const stripeConfig = async (ctx) => await ctx
+    .getConfigResource(PLUGINS).get(STRIPE_PLUGIN_CONFIG);
+export const stripeClient = async (ctx) => new Stripe((await stripeConfig(ctx)).api);
+export const activeSubscription = async (ctx, entityId, productSku) => await subscriptions(ctx).load({
+    entityId, productSku, kind: 'subscription',
+    status: [SubscriptionStatus.Active, SubscriptionStatus.Trial],
+});
+//# sourceMappingURL=utils.js.map

package/build/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAA;AAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,aAAa,IAAI,eAAe,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAGxF,OAAO,EACL,eAAe,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,uBAAuB,EAChF,wBAAwB,EAAE,oBAAoB,GAC/C,MAAM,aAAa,CAAA;AAMpB,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAe,EAAkB,EAAE,CAAC,GAAG,CAAC,OAAO,CAAiB,eAAe,CAAC,CAAA;AACxG,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAe,EAAkB,EAAE,CAAC,GAAG,CAAC,OAAO,CAAiB,eAAe,CAAC,CAAA;AACxG,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAe,EAAsB,EAAE,CAAC,GAAG,CAAC,OAAO,CAAqB,gBAAgB,CAAC,CAAA;AAClH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAe,EAA2B,EAAE,CAC3E,GAAG,CAAC,QAAQ,CAA0B,oBAAoB,CAAC,CAAA;AAC7D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAe,EAA+B,EAAE,CAC5E,GAAG,CAAC,QAAQ,CAA8B,wBAAwB,CAAC,CAAA;AACrE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAe,EAAuB,EAAE,CACnE,GAAG,CAAC,QAAQ,CAAsB,uBAAuB,CAAC,CAAA;AAC5D,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,GAAe,EAA+B,EAAE,CACjF,MAAO,GAAoG;KACxG,iBAAiB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAuB,CAAA;AAC/E,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,GAAe,EAAmB,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;AACjH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,GAAe,EAAE,QAAgB,EAAE,UAAkB,EACV,EAAE,CAAC,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAC5E,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc;IAC1C,MAAM,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,CAAC,KAAK,CAAC;CAC9D,CAAC,CAAA"}

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@owlmeans/server-payment",
+  "version": "0.1.18-rc.0",
+  "license": "MIT",
+  "description": "Protocol-bound payment resources, entitlement gates, and Stripe checkout for OwlMeans servers.",
+  "type": "module",
+  "scripts": {
+    "build": "tsc -b",
+    "dev": "sleep 12 && nodemon -e ts,tsx,json --watch src --exec \"tsc -p ./tsconfig.json\"",
+    "watch": "tsc -b -w --preserveWatchOutput --pretty",
+    "test": "bun test ./tests"
+  },
+  "main": "build/index.js",
+  "module": "build/index.js",
+  "types": "build/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./build/index.js",
+      "require": "./build/index.js",
+      "default": "./build/index.js",
+      "module": "./build/index.js",
+      "types": "./build/index.d.ts"
+    }
+  },
+  "peerDependencies": {
+    "ajv": "*"
+  },
+  "dependencies": {
+    "@owlmeans/auth": "^0.1.18-rc.13",
+    "@owlmeans/config": "^0.1.18-rc.16",
+    "@owlmeans/context": "^0.1.18-rc.12",
+    "@owlmeans/entrypoint": "^0.1.18-rc.15",
+    "@owlmeans/mongo-resource": "^0.1.18-rc.16",
+    "@owlmeans/payment": "^0.1.18-rc.17",
+    "@owlmeans/resource": "^0.1.18-rc.13",
+    "@owlmeans/route": "^0.1.18-rc.13",
+    "@owlmeans/server-api": "^0.1.18-rc.21",
+    "@owlmeans/server-app": "^0.1.18-rc.22",
+    "@owlmeans/server-context": "^0.1.18-rc.16",
+    "@owlmeans/server-entrypoint": "^0.1.18-rc.15",
+    "async-mutex": "^0.5.0",
+    "stripe": "^17.7.0"
+  },
+  "devDependencies": {
+    "@owlmeans/dep-config": "workspace:*",
+    "@types/bun": "^1.4.0",
+    "@types/node": "^26.1.0",
+    "nodemon": "^3.1.14",
+    "typescript": "^7.0.2"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/src/actions/index.ts

@@ -0,0 +1,2 @@
+export * from './webhook.js'
+export * from './resync.js'

package/src/actions/resync.ts

@@ -0,0 +1,13 @@
+import { handlers } from '@owlmeans/server-api'
+import { paymentGate } from '../consts.js'
+import { fingerprints } from '../utils.js'
+import { initialize } from '../sync.js'
+import type { Context } from '../types.js'
+
+const bind = handlers<Context>()
+
+export const resync = bind.request(paymentGate.resync, async (_request, context) => {
+  await fingerprints(context).clear()
+  await initialize(context)
+  return { ok: true }
+})

package/src/actions/webhook.ts

@@ -0,0 +1,12 @@
+import { UnknownPaygate } from '@owlmeans/payment'
+import { handlers } from '@owlmeans/server-api'
+import { paymentGate, STRIPE_PAYGATE_ALIAS } from '../consts.js'
+import { stripePlugin } from '../plugins/stripe.js'
+import type { Context } from '../types.js'
+
+const bind = handlers<Context>()
+
+export const webhook = bind.params(paymentGate.webhook, async ({ paygate }, context, request) => {
+  if (paygate !== STRIPE_PAYGATE_ALIAS) throw new UnknownPaygate(paygate)
+  await stripePlugin.handleWebhook(request, context)
+})

package/src/config.ts

@@ -0,0 +1,53 @@
+import { toConfigRecord } from '@owlmeans/server-app'
+import { plugin } from '@owlmeans/config'
+import {
+  assertAmountCheckoutPolicy, assertQuantityCheckoutPolicy, CheckoutPricingMode,
+  PLAN_RECORD_PREFIX, PLAN_RECORD_TYPE, PlanStatus, PRODUCT_RECORD_PREFIX, PRODUCT_RECORD_TYPE,
+} from '@owlmeans/payment'
+import { STRIPE_PAYGATE_ALIAS, STRIPE_PLUGIN_CONFIG } from './consts.js'
+import type { Config, PaymentPlan, PaymentPlanDef, PaymentProduct, PaymentProductDef } from './types.js'
+
+export const declarePaymentProduct = (cfg: Config, def: PaymentProductDef): void => {
+  cfg.records = cfg.records ?? []
+  const product: PaymentProduct = {
+    type: def.type, sku: def.sku, title: def.name, description: def.description,
+    defaultLng: def.defaultLng ?? 'en', services: def.services,
+    gateways: def.gateways ?? [STRIPE_PAYGATE_ALIAS], capabilities: def.capabilities,
+    taxCode: def.taxCode, unitLabel: def.unitLabel,
+  }
+  cfg.records.push({ ...toConfigRecord(product), recordType: PRODUCT_RECORD_TYPE, id: `${PRODUCT_RECORD_PREFIX}:${def.sku}` })
+}
+
+export const declarePaymentPlan = (cfg: Config, def: PaymentPlanDef): void => {
+  cfg.records = cfg.records ?? []
+  const pricingMode = def.pricingMode
+  if (pricingMode === CheckoutPricingMode.Amount) {
+    if (def.amountPolicy == null) throw new TypeError(`Amount checkout plan '${def.sku}' requires amountPolicy`)
+    assertAmountCheckoutPolicy(def.amountPolicy)
+  }
+  const quantityPolicy = def.quantityPolicy ?? (
+    def.minQuantity != null || def.maxQuantity != null || def.defaultQuantity != null
+      ? {
+        minimum: def.minQuantity ?? 1,
+        maximum: def.maxQuantity ?? Math.max(100_000, def.minQuantity ?? 1),
+        default: def.defaultQuantity ?? def.minQuantity ?? 1,
+      }
+      : undefined
+  )
+  if (quantityPolicy != null) assertQuantityCheckoutPolicy(quantityPolicy)
+
+  const plan: PaymentPlan = {
+    productSku: def.productSku, sku: def.sku, status: PlanStatus.Active,
+    duration: def.duration, price: def.price, currency: def.currency ?? def.amountPolicy?.currency ?? 'usd',
+    order: def.order ?? 0, title: def.title ?? def.sku, capabilities: def.capabilities,
+    limits: def.limits, recurring: def.recurring, pricingMode, amountPolicy: def.amountPolicy,
+    quantityPolicy,
+    minQuantity: quantityPolicy?.minimum, maxQuantity: quantityPolicy?.maximum,
+    defaultQuantity: quantityPolicy?.default,
+  }
+  cfg.records.push({ ...toConfigRecord(plan), recordType: PLAN_RECORD_TYPE, id: `${PLAN_RECORD_PREFIX}:${def.sku}` })
+}
+
+export const stripeSecrets = (cfg: Config, paths: { api: string; webhook: string }): void => {
+  plugin(cfg, { api: paths.api, webhook: paths.webhook }, STRIPE_PLUGIN_CONFIG)
+}

package/src/consts.ts

@@ -0,0 +1,47 @@
+import { contract, protocol, protocols, schema, typed } from '@owlmeans/entrypoint'
+import { backend, route, RouteMethod } from '@owlmeans/route'
+import { GUARD_ED25519 } from '@owlmeans/server-app'
+import type { JSONSchemaType } from 'ajv'
+
+export const STRIPE_PAYGATE_ALIAS = 'stripe'
+export const STRIPE_PLUGIN_CONFIG = '_external:stripe'
+export const STRIPE_SIGNATURE = 'Stripe-Signature'
+export const GATEWAY_SERVICE = 'payment-gateway'
+export const PAYMENT_OBSERVER = 'payment-observer'
+export const RES_PAYGATE_CUSTOMER = 'payment-paygate-customer'
+export const RES_PAYMENT_SUBSCRIPTION = 'payment-subscription'
+export const RES_PAYMENT_FINGERPRINT = 'payment-fingerprint'
+export const COMPLETION_TOP_UP = 'top-up'
+export const COMPLETION_SUBSCRIPTION = 'subscription'
+
+export interface PaygateParams { paygate: string }
+export interface ResyncResult { ok: boolean }
+const PaygateParamsSchema = schema<PaygateParams>({
+  type: 'object', properties: { paygate: { type: 'string' } }, required: ['paygate'],
+  additionalProperties: false,
+} as JSONSchemaType<PaygateParams>)
+const ResyncResultSchema = schema<ResyncResult>({
+  type: 'object', properties: { ok: { type: 'boolean' } }, required: ['ok'],
+  additionalProperties: false,
+} as JSONSchemaType<ResyncResult>)
+
+const aliases = {
+  base: 'payment-gate', webhook: 'payment-gate:webhook', resync: 'payment-gate:resync',
+} as const
+const base = protocol(route(aliases.base, '/payment-gate', backend()), contract())
+
+/** Embedded gateway protocol tree; the alias strings are private adapter details. */
+export const paymentGate = {
+  base,
+  webhook: protocol(
+    route(aliases.webhook, '/webhook/:paygate', backend({ parent: base, method: RouteMethod.POST })),
+    contract.request({ params: PaygateParamsSchema }, typed<undefined>()),
+  ),
+  resync: protocol(
+    route(aliases.resync, '/resync', backend({ parent: base, method: RouteMethod.POST })),
+    contract(ResyncResultSchema),
+    { guards: GUARD_ED25519 },
+  ),
+} as const
+
+export const paymentGateProtocols = protocols(paymentGate)

package/src/entrypoints.ts

@@ -0,0 +1,10 @@
+import { bind } from '@owlmeans/server-entrypoint'
+import { paymentGate } from './consts.js'
+import { resync, webhook } from './actions/index.js'
+
+/** Runtime-local bindings for the shared immutable payment-gateway protocol tree. */
+export const paymentGateEntrypoints = [
+  bind(paymentGate.base),
+  bind(paymentGate.webhook, webhook),
+  bind(paymentGate.resync, resync),
+]

package/src/gate.ts

@@ -0,0 +1,51 @@
+import { createLazyService } from '@owlmeans/context'
+import type { AbstractRequest, GateService } from '@owlmeans/entrypoint'
+import { AuthForbidden, entitySlugOf } from '@owlmeans/auth'
+import type { Auth, PermissionSet } from '@owlmeans/auth'
+import { ENTITLEMENT_GATE, hasEntitlement, SubscriptionStatus } from '@owlmeans/payment'
+import type { Context as ApiContext } from '@owlmeans/server-api'
+import { subscriptions } from './utils.js'
+import type { Config, Context } from './types.js'
+
+export interface EntitlementGateOptions {
+  productSkus?: string[]
+  resolveEntity?: (req: AbstractRequest) => string | null
+}
+
+export const entitlementsOf = async (
+  ctx: ApiContext, entityId: string, productSkus?: string[],
+): Promise<PermissionSet[]> => {
+  const { items } = await subscriptions(ctx).list({
+    entityId, status: [SubscriptionStatus.Active, SubscriptionStatus.Trial], productSku: productSkus,
+  }, { size: 0 })
+  return items.flatMap(record => record.capabilities ?? [])
+}
+
+const defaultEntity = (req: AbstractRequest): string | null =>
+  req.entity?.id ?? entitySlugOf(req.auth as Auth | undefined) ?? null
+
+export const makeEntitlementGate = (
+  alias: string = ENTITLEMENT_GATE, opts?: EntitlementGateOptions,
+): GateService => {
+  const service = createLazyService<GateService>(alias, {
+    assert: async (req, _, params) => {
+      await service.ready()
+      const ctx = service.assertCtx<Config, Context>() as unknown as ApiContext
+      if (req.auth == null) throw new AuthForbidden('auth')
+      const entityId = (opts?.resolveEntity ?? defaultEntity)(req)
+      if (entityId == null || entityId === '') throw new AuthForbidden('entity')
+
+      let capabilities: PermissionSet[]
+      try {
+        capabilities = await entitlementsOf(ctx, entityId, opts?.productSkus)
+      } catch (error) {
+        console.error(`entitlement gate: cannot read subscriptions for "${entityId}"`, error)
+        throw new AuthForbidden('entitlement')
+      }
+      if (!params.some(param => hasEntitlement(capabilities, param))) {
+        throw new AuthForbidden('entitlement')
+      }
+    },
+  })
+  return service
+}

package/src/index.ts

@@ -0,0 +1,13 @@
+export type * from './types.js'
+export * from './consts.js'
+export * from './config.js'
+export * from './resource.js'
+export * from './observer.js'
+export * from './service.js'
+export * from './gate.js'
+export * from './entrypoints.js'
+export { initialize as syncPaymentProducts, planLookupKey } from './sync.js'
+export { amountCheckoutLineItem } from './plugins/stripe.js'
+export {
+  payment, gateway, observer, paygateCustomers, subscriptions, fingerprints, activeSubscription,
+} from './utils.js'

package/src/model.ts

@@ -0,0 +1,37 @@
+import type { JSONSchemaType } from 'ajv'
+import { PermissionSetSchema } from '@owlmeans/auth'
+import { LimitConfigSchema } from '@owlmeans/payment'
+import type { FingerprintRecord, PaygateCustomerRecord, PaymentSubscriptionRecord } from './types.js'
+
+export const PaygateCustomerSchema = {
+  type: 'object',
+  properties: {
+    id: { type: 'string', nullable: true }, paygate: { type: 'string' }, externalId: { type: 'string' },
+    entityId: { type: 'string', nullable: true }, profileId: { type: 'string', nullable: true },
+    email: { type: 'string', nullable: true }, name: { type: 'string', nullable: true },
+    taxId: { type: 'string', nullable: true },
+  },
+  required: ['paygate', 'externalId'], additionalProperties: true,
+} as unknown as JSONSchemaType<PaygateCustomerRecord>
+
+export const PaymentSubscriptionSchema = {
+  type: 'object',
+  properties: {
+    id: { type: 'string', nullable: true }, sku: { type: 'string' }, productSku: { type: 'string' },
+    entityId: { type: 'string' }, service: { type: 'string' }, paygate: { type: 'string' },
+    externalId: { type: 'string' }, status: { type: 'string' }, kind: { type: 'string' },
+    capabilities: { type: 'array', items: PermissionSetSchema as never, nullable: true },
+    limits: { type: 'object', nullable: true, additionalProperties: LimitConfigSchema as never, required: [] },
+  },
+  required: ['sku', 'productSku', 'entityId', 'service', 'paygate', 'externalId', 'status', 'kind'],
+  additionalProperties: true,
+} as unknown as JSONSchemaType<PaymentSubscriptionRecord>
+
+export const FingerprintSchema = {
+  type: 'object',
+  properties: {
+    id: { type: 'string', nullable: true }, sku: { type: 'string' }, hash: { type: 'string' },
+    productId: { type: 'string', nullable: true },
+  },
+  required: ['sku', 'hash'], additionalProperties: true,
+} as unknown as JSONSchemaType<FingerprintRecord>

package/src/observer.ts

@@ -0,0 +1,27 @@
+import { createLazyService } from '@owlmeans/context'
+import { PAYMENT_OBSERVER } from './consts.js'
+import type { CompletionObserver, Config, Context, SubscriptionCallback, TopUpCallback } from './types.js'
+
+export const makeCompletionObserverService = (
+  alias: string = PAYMENT_OBSERVER,
+): CompletionObserver => {
+  const topUpCallbacks: TopUpCallback[] = []
+  const subscriptionCallbacks: SubscriptionCallback[] = []
+  return createLazyService<CompletionObserver>(alias, {
+    onTopUp: cb => { topUpCallbacks.push(cb) },
+    onSubscription: cb => { subscriptionCallbacks.push(cb) },
+    propagateTopUp: async (completion, ctx) => {
+      for (const callback of topUpCallbacks) await callback(completion, ctx)
+    },
+    propagateSubscription: async (completion, ctx) => {
+      for (const callback of subscriptionCallbacks) await callback(completion, ctx)
+    },
+  }, service => async () => { service.initialized = true })
+}
+
+export const appendCompletionObserver = <C extends Config, T extends Context<C>>(
+  ctx: T, alias: string = PAYMENT_OBSERVER,
+): T => {
+  if (!ctx.hasService(alias)) ctx.registerService(makeCompletionObserverService(alias))
+  return ctx
+}