@owlmeans/server-payment 0.1.18-rc.2 → 0.1.18-rc.21

package/build/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAA;AAG3B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,KAAK,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAKjE,OAAO,KAAK,EACV,kBAAkB,EAAE,mBAAmB,EAAE,cAAc,EAAE,uBAAuB,EAChF,yBAAyB,EAAE,2BAA2B,EAAE,kBAAkB,EAC3E,MAAM,YAAY,CAAA;AAEnB,eAAO,MAAM,OAAO,QAAS,UAAU,KAAG,cAA8D,CAAA;AACxG,eAAO,MAAM,OAAO,QAAS,UAAU,KAAG,cAA8D,CAAA;AACxG,eAAO,MAAM,QAAQ,QAAS,UAAU,KAAG,kBAAuE,CAAA;AAClH,eAAO,MAAM,gBAAgB,QAAS,UAAU,KAAG,uBACU,CAAA;AAC7D,eAAO,MAAM,aAAa,QAAS,UAAU,KAAG,2BACqB,CAAA;AACrE,eAAO,MAAM,YAAY,QAAS,UAAU,KAAG,mBACa,CAAA;AAC5D,eAAO,MAAM,YAAY,QAAe,UAAU,KAAG,OAAO,CAAC,kBAAkB,CAEA,CAAA;AAC/E,eAAO,MAAM,YAAY,QAAe,UAAU,KAAG,OAAO,CAAC,MAAM,CAA8C,CAAA;AACjH,eAAO,MAAM,kBAAkB,QACxB,UAAU,YAAY,MAAM,cAAc,MAAM,KACpD,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAGzC,CAAA"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAA;AAI3B,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,KAAK,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAQjE,OAAO,KAAK,EACV,sBAAsB,EAAE,kBAAkB,EAAE,uBAAuB,EAAE,2BAA2B,EAChG,qBAAqB,EAAE,wBAAwB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,mBAAmB,EAC/G,cAAc,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,yBAAyB,EAC9F,2BAA2B,EAAE,2BAA2B,EAAE,oBAAoB,EAAE,sBAAsB,EACtG,oBAAoB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,yBAAyB,EACtF,MAAM,YAAY,CAAA;AAEnB,eAAO,MAAM,OAAO,QAAS,UAAU,KAAG,cAA8D,CAAA;AACxG,eAAO,MAAM,OAAO,QAAS,UAAU,KAAG,cAA8D,CAAA;AACxG,eAAO,MAAM,QAAQ,QAAS,UAAU,KAAG,kBAAuE,CAAA;AAClH,eAAO,MAAM,YAAY,QAAS,UAAU,KAAG,kBACO,CAAA;AAEtD,eAAO,MAAM,gBAAgB,QAAS,UAAU,KAAG,uBACU,CAAA;AAC7D,eAAO,MAAM,aAAa,QAAS,UAAU,KAAG,2BACqB,CAAA;AACrE,eAAO,MAAM,YAAY,QAAS,UAAU,KAAG,0BACoB,CAAA;AACnE,eAAO,MAAM,eAAe,QAAS,UAAU,KAAG,sBACS,CAAA;AAC3D,eAAO,MAAM,WAAW,QAAS,UAAU,KAAG,oBACS,CAAA;AACvD,eAAO,MAAM,aAAa,QAAS,UAAU,KAAG,2BACsB,CAAA;AACtE,eAAO,MAAM,YAAY,QAAS,UAAU,KAAG,mBACa,CAAA;AAC5D,eAAO,MAAM,eAAe,QAAS,UAAU,KAAG,sBACS,CAAA;AAC3D,eAAO,MAAM,SAAS,QAAS,UAAU,KAAG,gBAAwE,CAAA;AACpH,eAAO,MAAM,gBAAgB,QAAS,UAAU,KAAG,uBACU,CAAA;AAC7D,eAAO,MAAM,oBAAoB,QAAS,UAAU,KAAG,2BACc,CAAA;AACrE,eAAO,MAAM,cAAc,QAAS,UAAU,KAAG,qBACQ,CAAA;AAEzD,qEAAqE;AACrE,eAAO,MAAM,cAAc,QAAS,UAAU,UAAS,MAAM,KAA6B,qBAC/C,CAAA;AAE3C,gFAAgF;AAChF,eAAO,MAAM,gBAAgB,QAAS,UAAU,UAAS,MAAM,KAA6B,qBAAqB,GAAG,IAE9D,CAAA;AAOtD,eAAO,MAAM,YAAY,QAAe,UAAU,KAAG,OAAO,CAAC,kBAAkB,CACkC,CAAA;AAEjH,qEAAqE;AACrE,eAAO,MAAM,oBAAoB,QAAe,UAAU,KAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CACkC,CAAA;AAElI,yFAAyF;AACzF,eAAO,MAAM,kBAAkB,QAAe,UAAU,KAAG,OAAO,CAAC,wBAAwB,GAAG,IAAI,CAC2C,CAAA;AAE7I,yFAAyF;AACzF,eAAO,MAAM,mBAAmB,QAAe,UAAU,KAAG,OAAO,CAAC,yBAAyB,GAAG,IAAI,CACoC,CAAA;AAExI;;;GAGG;AACH,eAAO,MAAM,YAAY,QAAe,UAAU,KAAG,OAAO,CAAC,MAAM,CAA8C,CAAA;AAEjH;;;GAGG;AACH,eAAO,MAAM,YAAY,WAAY,MAAM,KAAG,MAO7C,CAAA;AAED,eAAO,MAAM,cAAc,UAAW,OAAO,KAAG,OACoB,CAAA;AAEpE,kFAAkF;AAClF,eAAO,MAAM,eAAe,UAAW,OAAO,KAAG,OAGhD,CAAA;AAED,8DAA8D;AAC9D,eAAO,MAAM,IAAI,UAAW,MAAM,GAAG;IAAE,EAAE,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,KAAG,MAAM,GAAG,SACT,CAAA;AAE1E,8BAA8B;AAC9B,eAAO,MAAM,MAAM,YAAa,MAAM,GAAG,IAAI,GAAG,SAAS,KAAG,IAAI,GAAG,SACX,CAAA;AAExD,qGAAqG;AACrG,eAAO,MAAM,OAAO,GAAI,CAAC,SAAS,MAAM,SAAS,CAAC,KAAG,CACgC,CAAA;AAErF,yEAAyE;AACzE,eAAO,MAAM,kBAAkB,QACxB,UAAU,YAAY,MAAM,cAAc,MAAM,KACpD,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAE4C,CAAA;AAEvF,8FAA8F;AAC9F,eAAO,MAAM,cAAc,aACf;IAAE,UAAU,EAAE,OAAO,CAAA;CAAE,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC/F,OAAO,CAAC,OAAO,CAOjB,CAAA;AAED,8FAA8F;AAC9F,eAAO,MAAM,iBAAiB,aAAoB;IAAE,UAAU,EAAE,OAAO,CAAA;CAAE,UAAU,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAG,OAAO,CAAC,OAAO,CAK3H,CAAA;AAED,6DAA6D;AAC7D,eAAO,MAAM,SAAS,UAAW,OAAO,KAAG,MAC8B,CAAA"}

package/build/utils.js

@@ -1,18 +1,80 @@
 import Stripe from 'stripe';
 import { PLUGINS } from '@owlmeans/config';
-import { DEFAULT_ALIAS as PAYMENT_SERVICE, SubscriptionStatus } from '@owlmeans/payment';
-import { GATEWAY_SERVICE, PAYMENT_OBSERVER, RES_PAYGATE_CUSTOMER, RES_PAYMENT_FINGERPRINT, RES_PAYMENT_SUBSCRIPTION, STRIPE_PLUGIN_CONFIG, } from './consts.js';
+import { MONGO_DUPLICATE_KEY } from '@owlmeans/mongo-resource';
+import { DEFAULT_ALIAS as PAYMENT_SERVICE, ENTITLING_STATUSES, WebhookSetupError } from '@owlmeans/payment';
+import { CONSUMER_RIGHTS_MAIL_PLUGIN_CONFIG, CONSUMER_RIGHTS_SERVICE, ENTITLEMENT_SERVICE, GATEWAY_SERVICE, PAYMENT_OBSERVER, RES_BILLING_PROFILE, RES_CONSUMER_CONSENT, RES_CONSUMER_DECLARATION, RES_CONSUMER_EVENT, RES_PAYGATE_CUSTOMER, RES_PAYMENT_FINGERPRINT, RES_PAYMENT_FULFILLMENT, RES_PAYMENT_PURCHASE, RES_PAYMENT_SUBSCRIPTION, RES_PAYMENT_USAGE, RES_PAYMENT_USAGE_COUNTER, RES_PAYMENT_WEBHOOK, STRIPE_PLUGIN_CONFIG, STRIPE_PORTAL_PLUGIN_CONFIG, STRIPE_PRICING_PLUGIN_CONFIG, } from './consts.js';
 export const payment = (ctx) => ctx.service(PAYMENT_SERVICE);
 export const gateway = (ctx) => ctx.service(GATEWAY_SERVICE);
 export const observer = (ctx) => ctx.service(PAYMENT_OBSERVER);
+export const entitlements = (ctx) => ctx.service(ENTITLEMENT_SERVICE);
 export const paygateCustomers = (ctx) => ctx.resource(RES_PAYGATE_CUSTOMER);
 export const subscriptions = (ctx) => ctx.resource(RES_PAYMENT_SUBSCRIPTION);
+export const fulfillments = (ctx) => ctx.resource(RES_PAYMENT_FULFILLMENT);
+export const paymentWebhooks = (ctx) => ctx.resource(RES_PAYMENT_WEBHOOK);
+export const usageEvents = (ctx) => ctx.resource(RES_PAYMENT_USAGE);
+export const usageCounters = (ctx) => ctx.resource(RES_PAYMENT_USAGE_COUNTER);
 export const fingerprints = (ctx) => ctx.resource(RES_PAYMENT_FINGERPRINT);
-export const stripeConfig = async (ctx) => await ctx
-    .getConfigResource(PLUGINS).get(STRIPE_PLUGIN_CONFIG);
+export const billingProfiles = (ctx) => ctx.resource(RES_BILLING_PROFILE);
+export const purchases = (ctx) => ctx.resource(RES_PAYMENT_PURCHASE);
+export const consumerConsents = (ctx) => ctx.resource(RES_CONSUMER_CONSENT);
+export const consumerDeclarations = (ctx) => ctx.resource(RES_CONSUMER_DECLARATION);
+export const consumerEvents = (ctx) => ctx.resource(RES_CONSUMER_EVENT);
+/** The consumer-rights service. @throws when it is not registered */
+export const consumerRights = (ctx, alias = CONSUMER_RIGHTS_SERVICE) => ctx.service(alias);
+/** The consumer-rights service, or `null` in a process that registered none. */
+export const consumerRightsOf = (ctx, alias = CONSUMER_RIGHTS_SERVICE) => ctx.hasService?.(alias) === true
+    ? ctx.service(alias) : null;
+export const stripeConfig = async (ctx) => await ctx.getConfigResource(PLUGINS).get(STRIPE_PLUGIN_CONFIG);
+/** The portal branding declared with `portalBranding`, or `null`. */
+export const portalBrandingConfig = async (ctx) => await ctx.getConfigResource(PLUGINS).load(STRIPE_PORTAL_PLUGIN_CONFIG);
+/** The consumer-rights mail options declared with `declareConsumerRights`, or `null`. */
+export const consumerMailConfig = async (ctx) => await ctx.getConfigResource(PLUGINS).load(CONSUMER_RIGHTS_MAIL_PLUGIN_CONFIG);
+/** The Stripe-only pricing settings declared with `declarePaymentPricing`, or `null`. */
+export const stripePricingConfig = async (ctx) => await ctx.getConfigResource(PLUGINS).load(STRIPE_PRICING_PLUGIN_CONFIG);
+/**
+ * A Stripe client pinned to the API version the installed SDK is typed for (its default), so every
+ * object shape this package reads is the one the types describe.
+ */
 export const stripeClient = async (ctx) => new Stripe((await stripeConfig(ctx)).api);
+/**
+ * The API version a client was built with — read back from the client, never written as a literal,
+ * so a webhook endpoint always receives the payload shapes the client itself parses.
+ */
+export const apiVersionOf = (stripe) => {
+    const version = stripe.getApiField?.('version');
+    if (typeof version !== 'string' || version === '') {
+        throw new WebhookSetupError('api-version');
+    }
+    return version;
+};
+export const isDuplicateKey = (error) => error?.code === MONGO_DUPLICATE_KEY;
+/** A paygate answer meaning the object does not exist (deleted, or never did). */
+export const isMissingObject = (error) => {
+    const typed = error;
+    return typed?.code === 'resource_missing' || typed?.raw?.code === 'resource_missing' || typed?.statusCode === 404;
+};
+/** A paygate object reference, expanded or not, as its id. */
+export const idOf = (value) => value == null ? undefined : typeof value === 'string' ? value : value.id;
+/** Epoch seconds → `Date`. */
+export const dateOf = (seconds) => seconds == null ? undefined : new Date(seconds * 1000);
+/** Drop `null` and `undefined` properties — a stored record reads an absent field back as `null`. */
+export const compact = (value) => Object.fromEntries(Object.entries(value).filter(([, entry]) => entry != null));
+/** The entity's highest-ranked entitling subscription of one product. */
 export const activeSubscription = async (ctx, entityId, productSku) => await subscriptions(ctx).load({
-    entityId, productSku, kind: 'subscription',
-    status: [SubscriptionStatus.Active, SubscriptionStatus.Trial],
-});
+    entityId, productSku, status: [...ENTITLING_STATUSES],
+}, { sort: [{ field: 'rank', order: 'desc' }, { field: 'createdAt', order: 'desc' }] });
+/** A conditional single-document `$set` — `true` when the filter matched (the guard held). */
+export const conditionalSet = async (resource, filter, set) => {
+    const collection = resource.collection;
+    const result = await collection.updateOne(filter, { $set: set });
+    return (result.matchedCount ?? result.modifiedCount ?? 0) > 0;
+};
+/** A conditional single-document delete — `true` when the filter matched (the guard held). */
+export const conditionalDelete = async (resource, filter) => {
+    const collection = resource.collection;
+    const result = await collection.deleteOne(filter);
+    return (result.deletedCount ?? 0) > 0;
+};
+/** An error's message for an audit record, never a stack. */
+export const errorText = (error) => (error instanceof Error ? error.message : String(error)).slice(0, 1000);
 //# sourceMappingURL=utils.js.map

package/build/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAA;AAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,aAAa,IAAI,eAAe,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAGxF,OAAO,EACL,eAAe,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,uBAAuB,EAChF,wBAAwB,EAAE,oBAAoB,GAC/C,MAAM,aAAa,CAAA;AAMpB,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAe,EAAkB,EAAE,CAAC,GAAG,CAAC,OAAO,CAAiB,eAAe,CAAC,CAAA;AACxG,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAe,EAAkB,EAAE,CAAC,GAAG,CAAC,OAAO,CAAiB,eAAe,CAAC,CAAA;AACxG,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAe,EAAsB,EAAE,CAAC,GAAG,CAAC,OAAO,CAAqB,gBAAgB,CAAC,CAAA;AAClH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAe,EAA2B,EAAE,CAC3E,GAAG,CAAC,QAAQ,CAA0B,oBAAoB,CAAC,CAAA;AAC7D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAe,EAA+B,EAAE,CAC5E,GAAG,CAAC,QAAQ,CAA8B,wBAAwB,CAAC,CAAA;AACrE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAe,EAAuB,EAAE,CACnE,GAAG,CAAC,QAAQ,CAAsB,uBAAuB,CAAC,CAAA;AAC5D,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,GAAe,EAA+B,EAAE,CACjF,MAAO,GAAoG;KACxG,iBAAiB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAuB,CAAA;AAC/E,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,GAAe,EAAmB,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;AACjH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,GAAe,EAAE,QAAgB,EAAE,UAAkB,EACV,EAAE,CAAC,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAC5E,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,cAAc;IAC1C,MAAM,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,CAAC,KAAK,CAAC;CAC9D,CAAC,CAAA"}
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAA;AAC3B,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAA;AAC1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAA;AAC9D,OAAO,EAAE,aAAa,IAAI,eAAe,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAA;AAG3G,OAAO,EACL,kCAAkC,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,eAAe,EACjG,gBAAgB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,wBAAwB,EAAE,kBAAkB,EACzG,oBAAoB,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,oBAAoB,EAC5F,wBAAwB,EAAE,iBAAiB,EAAE,yBAAyB,EAAE,mBAAmB,EAAE,oBAAoB,EACjH,2BAA2B,EAAE,4BAA4B,GAC1D,MAAM,aAAa,CAAA;AASpB,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAe,EAAkB,EAAE,CAAC,GAAG,CAAC,OAAO,CAAiB,eAAe,CAAC,CAAA;AACxG,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,GAAe,EAAkB,EAAE,CAAC,GAAG,CAAC,OAAO,CAAiB,eAAe,CAAC,CAAA;AACxG,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,GAAe,EAAsB,EAAE,CAAC,GAAG,CAAC,OAAO,CAAqB,gBAAgB,CAAC,CAAA;AAClH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAe,EAAsB,EAAE,CAClE,GAAG,CAAC,OAAO,CAAqB,mBAAmB,CAAC,CAAA;AAEtD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAe,EAA2B,EAAE,CAC3E,GAAG,CAAC,QAAQ,CAA0B,oBAAoB,CAAC,CAAA;AAC7D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAe,EAA+B,EAAE,CAC5E,GAAG,CAAC,QAAQ,CAA8B,wBAAwB,CAAC,CAAA;AACrE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAe,EAA8B,EAAE,CAC1E,GAAG,CAAC,QAAQ,CAA6B,uBAAuB,CAAC,CAAA;AACnE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,GAAe,EAA0B,EAAE,CACzE,GAAG,CAAC,QAAQ,CAAyB,mBAAmB,CAAC,CAAA;AAC3D,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,GAAe,EAAwB,EAAE,CACnE,GAAG,CAAC,QAAQ,CAAuB,iBAAiB,CAAC,CAAA;AACvD,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAe,EAA+B,EAAE,CAC5E,GAAG,CAAC,QAAQ,CAA8B,yBAAyB,CAAC,CAAA;AACtE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAe,EAAuB,EAAE,CACnE,GAAG,CAAC,QAAQ,CAAsB,uBAAuB,CAAC,CAAA;AAC5D,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,GAAe,EAA0B,EAAE,CACzE,GAAG,CAAC,QAAQ,CAAyB,mBAAmB,CAAC,CAAA;AAC3D,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,GAAe,EAAoB,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAmB,oBAAoB,CAAC,CAAA;AACpH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAe,EAA2B,EAAE,CAC3E,GAAG,CAAC,QAAQ,CAA0B,oBAAoB,CAAC,CAAA;AAC7D,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,GAAe,EAA+B,EAAE,CACnF,GAAG,CAAC,QAAQ,CAA8B,wBAAwB,CAAC,CAAA;AACrE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAe,EAAyB,EAAE,CACvE,GAAG,CAAC,QAAQ,CAAwB,kBAAkB,CAAC,CAAA;AAEzD,qEAAqE;AACrE,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAe,EAAE,KAAK,GAAW,uBAAuB,EAAyB,EAAE,CAChH,GAAG,CAAC,OAAO,CAAwB,KAAK,CAAC,CAAA;AAE3C,gFAAgF;AAChF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAe,EAAE,KAAK,GAAW,uBAAuB,EAAgC,EAAE,CACxH,GAA8D,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI;IAC1F,CAAC,CAAC,GAAG,CAAC,OAAO,CAAwB,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAOtD,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,GAAe,EAA+B,EAAE,CACjF,MAAO,GAA6B,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAuB,CAAA;AAEjH,qEAAqE;AACrE,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,EAAE,GAAe,EAAwC,EAAE,CAClG,MAAO,GAA6B,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAgC,CAAA;AAElI,yFAAyF;AACzF,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EAAE,GAAe,EAA4C,EAAE,CACpG,MAAO,GAA6B,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,kCAAkC,CAAoC,CAAA;AAE7I,yFAAyF;AACzF,MAAM,CAAC,MAAM,mBAAmB,GAAG,KAAK,EAAE,GAAe,EAA6C,EAAE,CACtG,MAAO,GAA6B,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAqC,CAAA;AAExI;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,EAAE,GAAe,EAAmB,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;AAEjH;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAc,EAAU,EAAE;IACrD,MAAM,OAAO,GAAI,MAAgE,CAAC,WAAW,EAAE,CAAC,SAAS,CAAC,CAAA;IAC1G,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,IAAI,iBAAiB,CAAC,aAAa,CAAC,CAAA;IAC5C,CAAC;IAED,OAAO,OAAO,CAAA;AAChB,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,KAAc,EAAW,EAAE,CACvD,KAAmC,EAAE,IAAI,KAAK,mBAAmB,CAAA;AAEpE,kFAAkF;AAClF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAc,EAAW,EAAE;IACzD,MAAM,KAAK,GAAG,KAAkF,CAAA;IAChG,OAAO,KAAK,EAAE,IAAI,KAAK,kBAAkB,IAAI,KAAK,EAAE,GAAG,EAAE,IAAI,KAAK,kBAAkB,IAAI,KAAK,EAAE,UAAU,KAAK,GAAG,CAAA;AACnH,CAAC,CAAA;AAED,8DAA8D;AAC9D,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,KAAkD,EAAsB,EAAE,CAC7F,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAA;AAE1E,8BAA8B;AAC9B,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAkC,EAAoB,EAAE,CAC7E,OAAO,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAA;AAExD,qGAAqG;AACrG,MAAM,CAAC,MAAM,OAAO,GAAG,CAAmB,KAAQ,EAAK,EAAE,CACvD,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,IAAI,CAAC,CAAM,CAAA;AAErF,yEAAyE;AACzE,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,GAAe,EAAE,QAAgB,EAAE,UAAkB,EACV,EAAE,CAAC,MAAM,aAAa,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;IAC5E,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,GAAG,kBAAkB,CAAC;CACtD,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAA;AAEvF,8FAA8F;AAC9F,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EACjC,QAAiC,EAAE,MAA+B,EAAE,GAA4B,EAC9E,EAAE;IACpB,MAAM,UAAU,GAAG,QAAQ,CAAC,UAE3B,CAAA;IACD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAA;IAEhE,OAAO,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;AAC/D,CAAC,CAAA;AAED,8FAA8F;AAC9F,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,EAAE,QAAiC,EAAE,MAA+B,EAAoB,EAAE;IAC9H,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAmF,CAAA;IAC/G,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAA;IAEjD,OAAO,CAAC,MAAM,CAAC,YAAY,IAAI,CAAC,CAAC,GAAG,CAAC,CAAA;AACvC,CAAC,CAAA;AAED,6DAA6D;AAC7D,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAc,EAAU,EAAE,CAClD,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owlmeans/server-payment",
-  "version": "0.1.18-rc.2",
+  "version": "0.1.18-rc.21",
   "license": "MIT",
   "description": "Protocol-bound payment resources, entitlement gates, and Stripe checkout for OwlMeans servers.",
   "type": "module",
@@ -26,23 +26,27 @@
     "ajv": "*"
   },
   "dependencies": {
-    "@owlmeans/auth": "^0.1.18-rc.14",
-    "@owlmeans/config": "^0.1.18-rc.17",
-    "@owlmeans/context": "^0.1.18-rc.13",
-    "@owlmeans/entrypoint": "^0.1.18-rc.16",
-    "@owlmeans/mongo-resource": "^0.1.18-rc.17",
-    "@owlmeans/payment": "^0.1.18-rc.18",
-    "@owlmeans/resource": "^0.1.18-rc.14",
-    "@owlmeans/route": "^0.1.18-rc.14",
-    "@owlmeans/server-api": "^0.1.18-rc.22",
-    "@owlmeans/server-app": "^0.1.18-rc.24",
-    "@owlmeans/server-context": "^0.1.18-rc.17",
-    "@owlmeans/server-entrypoint": "^0.1.18-rc.16",
+    "@owlmeans/auth": "^0.1.18-rc.35",
+    "@owlmeans/config": "^0.1.18-rc.37",
+    "@owlmeans/context": "^0.1.18-rc.32",
+    "@owlmeans/entrypoint": "^0.1.18-rc.36",
+    "@owlmeans/iam": "^0.1.18-rc.40",
+    "@owlmeans/mailer": "^0.1.18-rc.32",
+    "@owlmeans/mongo-resource": "^0.1.18-rc.36",
+    "@owlmeans/payment": "^0.1.18-rc.38",
+    "@owlmeans/resource": "^0.1.18-rc.35",
+    "@owlmeans/route": "^0.1.18-rc.33",
+    "@owlmeans/server-api": "^0.1.18-rc.41",
+    "@owlmeans/server-app": "^0.1.18-rc.42",
+    "@owlmeans/server-context": "^0.1.18-rc.36",
+    "@owlmeans/server-entrypoint": "^0.1.18-rc.35",
     "async-mutex": "^0.5.0",
     "stripe": "^17.7.0"
   },
   "devDependencies": {
     "@owlmeans/dep-config": "workspace:*",
+    "@owlmeans/mongo": "^0.1.18-rc.35",
+    "@owlmeans/test-integration": "^0.1.18-rc.29",
     "@types/bun": "^1.4.0",
     "@types/node": "^26.1.0",
     "nodemon": "^3.1.14",

package/src/actions/index.ts

@@ -1,2 +1,3 @@
 export * from './webhook.js'
 export * from './resync.js'
+export * from './resync-subscriptions.js'

package/src/actions/resync-subscriptions.ts

@@ -0,0 +1,10 @@
+import { handlers } from '@owlmeans/server-api'
+import { paymentGate } from '../consts.js'
+import { gateway } from '../utils.js'
+import type { Context } from '../types.js'
+
+const bind = handlers<Context>()
+
+/** Re-read every live paygate subscription — the manually or periodically triggered repair. */
+export const resyncSubscriptions = bind.request(paymentGate.resyncSubscriptions, async (_request, context) =>
+  await gateway(context).resyncAll(context))

package/src/actions/resync.ts

@@ -1,13 +1,16 @@
+import { PaygateError } from '@owlmeans/payment'
 import { handlers } from '@owlmeans/server-api'
 import { paymentGate } from '../consts.js'
-import { fingerprints } from '../utils.js'
-import { initialize } from '../sync.js'
+import { bootstrapStripe } from '../service.js'
+import { fingerprints, gateway, stripeClient } from '../utils.js'
 import type { Context } from '../types.js'
 
 const bind = handlers<Context>()
 
+/** Forget every sync fingerprint and bring Stripe back to the declared catalogue, portal and webhook. */
 export const resync = bind.request(paymentGate.resync, async (_request, context) => {
+  if (!gateway(context).managed) throw new PaygateError('unmanaged')
   await fingerprints(context).clear()
-  await initialize(context)
+  await bootstrapStripe(context, await stripeClient(context), { force: true })
   return { ok: true }
 })

package/src/actions/webhook.ts

@@ -1,12 +1,14 @@
-import { UnknownPaygate } from '@owlmeans/payment'
+import { PaygateError, UnknownPaygate } from '@owlmeans/payment'
 import { handlers } from '@owlmeans/server-api'
 import { paymentGate, STRIPE_PAYGATE_ALIAS } from '../consts.js'
-import { stripePlugin } from '../plugins/stripe.js'
+import { handleStripeWebhook } from '../plugins/stripe.js'
+import { gateway, stripeClient } from '../utils.js'
 import type { Context } from '../types.js'
 
 const bind = handlers<Context>()
 
 export const webhook = bind.params(paymentGate.webhook, async ({ paygate }, context, request) => {
   if (paygate !== STRIPE_PAYGATE_ALIAS) throw new UnknownPaygate(paygate)
-  await stripePlugin.handleWebhook(request, context)
+  if (!gateway(context).managed) throw new PaygateError('unmanaged')
+  await handleStripeWebhook(context, await stripeClient(context), request)
 })

package/src/config.ts

@@ -1,11 +1,21 @@
 import { toConfigRecord } from '@owlmeans/server-app'
-import { plugin } from '@owlmeans/config'
+import { plugin, PLUGIN_RECORD } from '@owlmeans/config'
 import {
-  assertAmountCheckoutPolicy, assertQuantityCheckoutPolicy, CheckoutPricingMode,
-  PLAN_RECORD_PREFIX, PLAN_RECORD_TYPE, PlanStatus, PRODUCT_RECORD_PREFIX, PRODUCT_RECORD_TYPE,
+  assertAmountCheckoutPolicy, assertPricingPolicy, assertQuantityCheckoutPolicy, CAPABILITY_LIMIT_SCOPE,
+  CheckoutPricingMode, CONSUMER_RIGHTS_RECORD_ID, CONSUMER_RIGHTS_RECORD_TYPE, ConsumerRightsError, LimitKind,
+  LimitMisdeclared, LimitWindow, makeConsumerRightsPolicy, PLAN_RECORD_PREFIX, PLAN_RECORD_TYPE, PaymentError,
+  PlanDuration, PlanRankConflict, PlanStatus, PRICING_POLICY_RECORD_ID, PRICING_POLICY_RECORD_TYPE,
+  PRODUCT_RECORD_PREFIX, PRODUCT_RECORD_TYPE, ProductError,
 } from '@owlmeans/payment'
-import { STRIPE_PAYGATE_ALIAS, STRIPE_PLUGIN_CONFIG } from './consts.js'
-import type { Config, PaymentPlan, PaymentPlanDef, PaymentProduct, PaymentProductDef } from './types.js'
+import type { ConsumerRightsPolicy, LimitDeclaration, PlanWithdrawalComponent } from '@owlmeans/payment'
+import {
+  CONSUMER_RIGHTS_MAIL_PLUGIN_CONFIG, STRIPE_PAYGATE_ALIAS, STRIPE_PLUGIN_CONFIG, STRIPE_PORTAL_PLUGIN_CONFIG,
+  STRIPE_PRICING_PLUGIN_CONFIG,
+} from './consts.js'
+import type {
+  Config, ConsumerRightsDef, PaymentPlan, PaymentPlanDef, PaymentProduct, PaymentProductDef, PortalBrandingDef,
+  PricingDef, StripeSecretsDef,
+} from './types.js'
 
 export const declarePaymentProduct = (cfg: Config, def: PaymentProductDef): void => {
   cfg.records = cfg.records ?? []
@@ -18,8 +28,56 @@ export const declarePaymentProduct = (cfg: Config, def: PaymentProductDef): void
   cfg.records.push({ ...toConfigRecord(product), recordType: PRODUCT_RECORD_TYPE, id: `${PRODUCT_RECORD_PREFIX}:${def.sku}` })
 }
 
+const isSafeCount = (value: unknown): value is number =>
+  typeof value === 'number' && Number.isSafeInteger(value) && value >= 0
+
+const LIMIT_KINDS = Object.values(LimitKind) as string[]
+const LIMIT_WINDOWS = Object.values(LimitWindow) as string[]
+
+const assertLimitDeclaration = (key: string, limit: LimitDeclaration): void => {
+  if (!LIMIT_KINDS.includes(limit.kind)) {
+    throw new LimitMisdeclared(`${key}:kind`)
+  }
+  if (limit.kind === LimitKind.Window) {
+    if (limit.window == null) {
+      throw new LimitMisdeclared(`${key}:window-missing`)
+    }
+    if (!LIMIT_WINDOWS.includes(limit.window)) {
+      throw new LimitMisdeclared(`${key}:window`)
+    }
+  } else if (limit.window != null) {
+    throw new LimitMisdeclared(`${key}:window-forbidden`)
+  }
+  if (!isSafeCount(limit.limit)) {
+    throw new LimitMisdeclared(`${key}:limit`)
+  }
+  if (limit.promo != null && !(limit.promo.until instanceof Date && !Number.isNaN(limit.promo.until.getTime()))) {
+    throw new LimitMisdeclared(`${key}:promo-until`)
+  }
+}
+
+/**
+ * Declare a plan into the configuration catalogue.
+ *
+ * Validated before anything is pushed: `rank` a safe integer `>= 0`; a `free` plan costs nothing
+ * and is sold through no gateway; no capability set under the reserved `limit` scope; every limit
+ * well-formed (a `window` limit names its window, the others do not, the ceiling is a safe
+ * integer, a promo ends at a real `Date`). Amount and quantity policies are asserted as before.
+ */
 export const declarePaymentPlan = (cfg: Config, def: PaymentPlanDef): void => {
-  cfg.records = cfg.records ?? []
+  if (def.rank != null && !isSafeCount(def.rank)) {
+    throw new PlanRankConflict(`rank:${def.sku}`)
+  }
+  if (def.free === true && (def.price !== 0 || (def.gateways ?? []).length > 0)) {
+    throw new PlanRankConflict(`free:${def.sku}`)
+  }
+  if ((def.capabilities ?? []).some(set => set.scope === CAPABILITY_LIMIT_SCOPE)) {
+    throw new LimitMisdeclared(`${def.sku}:reserved-scope`)
+  }
+  for (const [key, limit] of Object.entries(def.limits ?? {})) {
+    assertLimitDeclaration(key, limit)
+  }
+
   const pricingMode = def.pricingMode
   if (pricingMode === CheckoutPricingMode.Amount) {
     if (def.amountPolicy == null) throw new TypeError(`Amount checkout plan '${def.sku}' requires amountPolicy`)
@@ -35,19 +93,217 @@ export const declarePaymentPlan = (cfg: Config, def: PaymentPlanDef): void => {
       : undefined
   )
   if (quantityPolicy != null) assertQuantityCheckoutPolicy(quantityPolicy)
+  const currencyPrices = currencyPricesOf(def)
+  assertWithdrawalComponents(def)
 
+  cfg.records = cfg.records ?? []
   const plan: PaymentPlan = {
     productSku: def.productSku, sku: def.sku, status: PlanStatus.Active,
+    ...(def.rank != null ? { rank: def.rank } : {}),
+    ...(def.free === true ? { free: true, gateways: [] } : def.gateways != null ? { gateways: def.gateways } : {}),
     duration: def.duration, price: def.price, currency: def.currency ?? def.amountPolicy?.currency ?? 'usd',
     order: def.order ?? 0, title: def.title ?? def.sku, capabilities: def.capabilities,
     limits: def.limits, recurring: def.recurring, pricingMode, amountPolicy: def.amountPolicy,
     quantityPolicy,
     minQuantity: quantityPolicy?.minimum, maxQuantity: quantityPolicy?.maximum,
     defaultQuantity: quantityPolicy?.default,
+    ...(currencyPrices != null ? { currencyPrices } : {}),
+    ...(def.withdrawal != null ? { withdrawal: { components: def.withdrawal.components.map(item => ({ ...item })) } } : {}),
   }
   cfg.records.push({ ...toConfigRecord(plan), recordType: PLAN_RECORD_TYPE, id: `${PLAN_RECORD_PREFIX}:${def.sku}` })
 }
 
-export const stripeSecrets = (cfg: Config, paths: { api: string; webhook: string }): void => {
-  plugin(cfg, { api: paths.api, webhook: paths.webhook }, STRIPE_PLUGIN_CONFIG)
+const CURRENCY = /^[a-z]{3}$/
+
+/** `currencyPrices` normalized to lowercase codes; each a positive amount of whole minor units. */
+const currencyPricesOf = (def: PaymentPlanDef): Record<string, number> | undefined => {
+  if (def.currencyPrices == null) {
+    return undefined
+  }
+  if (def.pricingMode === CheckoutPricingMode.Amount || def.free === true) {
+    throw new ProductError(`currency-prices:${def.sku}:mode`)
+  }
+  const prices: Record<string, number> = {}
+  for (const [raw, amount] of Object.entries(def.currencyPrices)) {
+    const currency = raw.toLowerCase()
+    const minor = Math.round(amount * 100)
+    if (!CURRENCY.test(currency) || !Number.isFinite(amount) || amount <= 0 || !Number.isSafeInteger(minor)
+      || Math.abs(minor - amount * 100) > 1e-6 || prices[currency] != null) {
+      throw new ProductError(`currency-prices:${def.sku}:${raw}`)
+    }
+    prices[currency] = amount
+  }
+
+  return prices
+}
+
+/** The components' shares must add up to the plan's price in minor units. */
+const assertWithdrawalComponents = (def: PaymentPlanDef): void => {
+  const components: PlanWithdrawalComponent[] | undefined = def.withdrawal?.components
+  if (components == null) {
+    return
+  }
+  const keys = new Set<string>()
+  let sum = 0
+  for (const component of components) {
+    if (typeof component.key !== 'string' || component.key === '' || keys.has(component.key)
+      || (component.basis !== 'time' && component.basis !== 'units')
+      || !Number.isSafeInteger(component.shareMinor) || component.shareMinor < 0) {
+      throw new ProductError(`withdrawal:${def.sku}:component`)
+    }
+    keys.add(component.key)
+    sum += component.shareMinor
+  }
+  if (components.length === 0 || sum !== Math.round(def.price * 100)) {
+    throw new ProductError(`withdrawal:${def.sku}:shares`)
+  }
+}
+
+/** Every plan declared into a configuration. */
+export const declaredPlansOf = (cfg: Config): PaymentPlan[] =>
+  (cfg.records ?? []).filter(record => record.recordType === PLAN_RECORD_TYPE) as unknown as PaymentPlan[]
+
+/**
+ * Cross-plan rules a single declaration cannot see:
+ *
+ * - at most one free plan per rank;
+ * - no two paid plans of one product at the same rank (one-time `consumable` plans are never an
+ *   entity's plan and are not ranked against each other).
+ *
+ * A limit key MAY change kind between plans (lifetime on one, a monthly window on another): counters
+ * are keyed by `(entity, key, window)` and the window is derived from the kind, so each kind keeps its
+ * own counter and a lifetime count still sticks to the entity across plan changes.
+ *
+ * @throws PlanRankConflict
+ */
+export const assertPlanDeclarations = (cfg: Config): void => {
+  const plans = declaredPlansOf(cfg)
+  const freeRanks = new Set<number>()
+  const paidRanks = new Set<string>()
+  for (const plan of plans) {
+    const rank = plan.rank ?? 0
+    if (plan.free === true) {
+      if (freeRanks.has(rank)) {
+        throw new PlanRankConflict(`free:${rank}`)
+      }
+      freeRanks.add(rank)
+    } else if (plan.duration !== PlanDuration.Consumable) {
+      const key = `${plan.productSku}:${rank}`
+      if (paidRanks.has(key)) {
+        throw new PlanRankConflict(key)
+      }
+      paidRanks.add(key)
+    }
+  }
+}
+
+/**
+ * Where the Stripe secrets live. A value that looks like a path is read into the configuration at
+ * boot. The webhook secret is an optional override of the one the managed endpoint stores.
+ */
+export const stripeSecrets = (cfg: Config, paths: StripeSecretsDef): void => {
+  plugin(cfg, {
+    api: paths.api, ...(paths.webhook != null && paths.webhook !== '' ? { webhook: paths.webhook } : {}),
+  }, STRIPE_PLUGIN_CONFIG)
+}
+
+/** Branding and the default return URL of the managed customer portal configuration. */
+export const portalBranding = (cfg: Config, def: PortalBrandingDef): void => {
+  plugin(cfg, {
+    returnUrl: def.returnUrl,
+    ...(def.headline != null ? { headline: def.headline } : {}),
+    ...(def.privacyPolicyUrl != null ? { privacyPolicyUrl: def.privacyPolicyUrl } : {}),
+    ...(def.termsOfServiceUrl != null ? { termsOfServiceUrl: def.termsOfServiceUrl } : {}),
+  }, STRIPE_PORTAL_PLUGIN_CONFIG)
+}
+
+/**
+ * Declare the pricing policy: whether checkout collects tax and a VAT/GST id, what `tax_behavior`
+ * synced prices are given, Adaptive Pricing, and whether the estimate endpoints are served. A
+ * config never carries more than one — a second call replaces the first, so re-declaring (a test, a
+ * config module re-run) is safe rather than silently ignored (a config resource resolves an id to
+ * its FIRST match).
+ *
+ * `def.stripe` (the FX Quotes preview version, the unspecified-price migration switch) is
+ * Stripe-only and goes to a backend plugin, never the advertised `PricingPolicy` record.
+ *
+ * @throws PaymentError (`assertPricingPolicy`) when an estimate is declared without the tax or
+ * currency capability it requires.
+ */
+export const declarePaymentPricing = (cfg: Config, def: PricingDef): void => {
+  const { stripe, ...policy } = def
+  assertPricingPolicy(policy)
+  cfg.records = (cfg.records ?? []).filter(record => record.id !== PRICING_POLICY_RECORD_ID)
+  cfg.records.push({
+    ...toConfigRecord(policy), recordType: PRICING_POLICY_RECORD_TYPE, id: PRICING_POLICY_RECORD_ID,
+  })
+  if (stripe != null) {
+    const settlementCurrency = stripe.settlementCurrency?.toLowerCase()
+    if (settlementCurrency != null && !/^[a-z]{3}$/.test(settlementCurrency)) {
+      throw new PaymentError('pricing-policy:settlement-currency')
+    }
+    const subscriptionPaymentMethodTypes = stripe.subscriptionPaymentMethodTypes?.map(type => type.toLowerCase())
+    if (subscriptionPaymentMethodTypes != null && (subscriptionPaymentMethodTypes.length === 0
+      || subscriptionPaymentMethodTypes.some(type => !/^[a-z][a-z0-9_]*$/.test(type))
+      || new Set(subscriptionPaymentMethodTypes).size !== subscriptionPaymentMethodTypes.length)) {
+      throw new PaymentError('pricing-policy:subscription-payment-methods')
+    }
+    plugin(cfg, {
+      ...stripe,
+      ...(settlementCurrency != null ? { settlementCurrency } : {}),
+      ...(subscriptionPaymentMethodTypes != null ? { subscriptionPaymentMethodTypes } : {}),
+    }, STRIPE_PRICING_PLUGIN_CONFIG)
+  }
+}
+
+/**
+ * Declare the consumer-rights policy (EU withdrawal, spend consent, start requests, cancellation,
+ * country lock) — a singleton config record like the pricing policy: `DEFAULT_CONSUMER_RIGHTS`
+ * filled in, asserted, and replacing any earlier declaration. It is ADVERTISED to the browser; the
+ * `mail` options (mailer alias, sender, archive copies) go to a backend-only plugin config.
+ *
+ * `trader` (who the consumer contracts with: `name` for the statements, `legalName`/`address`/`email`
+ * for the mails and the withdrawal information) is backend-only as well.
+ *
+ * @throws ConsumerRightsError (`policy:<field>`) — see `assertConsumerRightsPolicy`; `policy:trader`
+ * when a mechanism is on and no trader `name` and `legalName` are declared.
+ */
+export const declareConsumerRights = (cfg: Config, def: ConsumerRightsDef): ConsumerRightsPolicy => {
+  const { mail, trader, ...declaration } = def
+  const policy = makeConsumerRightsPolicy(declaration)
+  const anyMechanism = Object.values(policy.mechanisms).some(on => on === true)
+  if (anyMechanism && (trader?.name == null || trader.name.trim() === '' || trader.legalName == null
+    || trader.legalName.trim() === '')) {
+    throw new ConsumerRightsError('policy:trader')
+  }
+  if (mail?.bcc?.some(address => !/^[^\s@]+@[^\s@]+$/.test(address)) === true) {
+    throw new ConsumerRightsError('policy:mail-bcc')
+  }
+  cfg.records = (cfg.records ?? []).filter(record => record.id !== CONSUMER_RIGHTS_RECORD_ID)
+  cfg.records.push({
+    ...toConfigRecord(policy), recordType: CONSUMER_RIGHTS_RECORD_TYPE, id: CONSUMER_RIGHTS_RECORD_ID,
+  })
+  const plugins = (cfg as unknown as Record<string, Array<{ id?: string }> | undefined>)[PLUGIN_RECORD]
+  if (plugins != null) {
+    (cfg as unknown as Record<string, unknown>)[PLUGIN_RECORD] = plugins
+      .filter(record => record.id !== CONSUMER_RIGHTS_MAIL_PLUGIN_CONFIG)
+  }
+  if (mail != null || trader != null) {
+    plugin(cfg, {
+      ...(trader != null ? {
+        trader: {
+          name: trader.name.trim(), legalName: trader.legalName.trim(),
+          ...(trader.address != null && trader.address.trim() !== '' ? { address: trader.address.trim() } : {}),
+          ...(trader.email != null && trader.email.trim() !== '' ? { email: trader.email.trim() } : {}),
+          ...(trader.website != null && trader.website.trim() !== '' ? { website: trader.website.trim() } : {}),
+        },
+      } : {}),
+      ...(mail?.alias != null ? { alias: mail.alias } : {}),
+      ...(mail?.from != null ? { from: mail.from } : {}),
+      ...(mail?.replyTo != null ? { replyTo: mail.replyTo } : {}),
+      ...(mail?.bcc != null && mail.bcc.length > 0 ? { bcc: [...mail.bcc] } : {}),
+    }, CONSUMER_RIGHTS_MAIL_PLUGIN_CONFIG)
+  }
+
+  return policy
 }