@owlmeans/server-payment 0.1.18-rc.26 → 0.1.18-rc.28

package/README.md

@@ -54,6 +54,9 @@ import {
 
 appendPaymentGatewayService(context)                    // the process that owns Stripe
 appendPaymentGatewayService(context, { manage: false }) // a process that only reads entitlements
+// several managed processes on one database — the same `owner` and `webhookService` in each:
+appendPaymentGatewayService(context, { owner: 'app-api', webhookService: 'app-hooks' })                   // receives the webhook
+appendPaymentGatewayService(context, { owner: 'app-api', webhookService: 'app-hooks', bootstrap: false }) // checkout and portal
 export const serverBindings = [...paymentGateEntrypoints]
 
 observer(context).onTopUp(async completion => { /* credit, idempotent by completion.externalId */ })
@@ -68,7 +71,20 @@ customer-portal configuration, one webhook endpoint at this deployment's public
 secret stored in `payment-webhook`) — and each step is fingerprinted, so an unchanged deployment
 makes no Stripe call.
 
-Several deployments of one service may share a Stripe account (typically every test-mode
+Three gateway options place that state when a deployment runs several processes:
+
+| Option | Default | Decides |
+|---|---|---|
+| `webhookService` | `cfg.service` | the `cfg.services` alias whose host and base form the webhook URL — also the portal's deployment key |
+| `owner` | `cfg.service` | the key of the `payment-webhook` rows, the signing-secret lookup, the `portal:<owner>` fingerprint and the Stripe labels |
+| `bootstrap` | `manage` | whether this process runs the bootstrap at boot; a forced one (`resync`, `bootstrapStripe(ctx, stripe, { force: true })`) runs in any managed process |
+
+Give every process of the database the same `owner` and `webhookService` (the process that receives
+the webhook), and keep `bootstrap` on that receiver only. Changing `webhookService` moves the
+endpoint on the next bootstrap: created at the new URL, the endpoint of the owner's former URL
+deleted, a new portal configuration for the new deployment key.
+
+Several deployments of one application may share a Stripe account (typically every test-mode
 deployment), each with its own database and URL — and a deployment's identity is its webhook URL,
 even an undeliverable local one.
 
@@ -78,8 +94,8 @@ even an undeliverable local one.
   retired deployment is removed by hand in the Stripe dashboard; one deleted from outside comes back
   on the next forced `resync`.
 - **Portal configuration.** Each deployment has its own, tagged
-  `{ owlmeans: 'payment', service, deployment: <webhook URL> }`. It updates the configuration its
-  `portal:<service>` fingerprint row names, unless that one is tagged for another deployment, and
+  `{ owlmeans: 'payment', service: <owner>, deployment: <webhook URL> }`. It updates the configuration its
+  `portal:<owner>` fingerprint row names, unless that one is tagged for another deployment, and
   without a row adopts only a configuration carrying exactly its own tag. Stripe cannot delete a
   portal configuration, so one a deployment can no longer identify stays in the account and a new
   one is created.
@@ -118,10 +134,31 @@ The limit gate never consumes; the handler does.
 ## Routes
 
 `paymentGateEntrypoints` binds the immutable `paymentGate` tree: the public Stripe webhook
-(`POST /payment-gate/webhook/:paygate`, verified by signature over the raw body), and two
+(`POST /payment-gate/webhook/:paygate`, verified by signature over the raw body; a missing or
+unverifiable signature is a `PaygateSignatureError`, answered 400), and two
 Ed25519-guarded repairs — `resync` (products, portal, webhook endpoint) and `resyncSubscriptions`
 (re-reads every live Stripe subscription, answering `{ scanned, updated }`).
 
+An application that declares the gate itself — its own aliases, pinned to the service that receives
+the webhook — binds its declarations to the same actions instead, and registers nothing of
+`paymentGate`:
+
+```typescript
+import { bind } from '@owlmeans/server-app'
+import { paymentGateHandlers } from '@owlmeans/server-payment'
+
+export const hookBindings = [
+  bind(own.base),
+  bind(own.webhook, paymentGateHandlers.webhook),
+  bind(own.resync, paymentGateHandlers.resync),
+  bind(own.resyncSubscriptions, paymentGateHandlers.resyncSubscriptions),
+]
+```
+
+Each handler runs in the context of the entrypoint it is bound to. The declarations keep
+`paymentGate`'s paths (the webhook URL registered with Stripe is formed from them), contracts and
+guards; bind each with `bind` — `bindAll` pairs a handler only with the declaration it was made for.
+
 <!-- owlmeans:agent-guidance:start -->
 ## Agent guidance
 
@@ -130,7 +167,7 @@ This package ships embedded agent skills under `agent-meta/`. After installing y
 your project's skill store (`.agents/skills/`):
 
 ```sh
-npx @owlmeans/agent-skills@^0.1.18-rc.44
+npx @owlmeans/agent-skills@^0.1.18-rc.46
 ```
 
 The embedded files are version-matched to this package release. Do not edit them

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/server-payment",
-  "version": "0.1.18-rc.26",
-  "generatedAt": "2026-09-30T09:41:02.832Z",
+  "version": "0.1.18-rc.28",
+  "generatedAt": "2026-10-03T11:19:50.792Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/server-payment/SKILL.md

@@ -7,7 +7,7 @@ user-invocable: false
 
 # @owlmeans/server-payment
 
-**Install:** `bun add @owlmeans/server-payment@^0.1.18-rc.26`
+**Install:** `bun add @owlmeans/server-payment@^0.1.18-rc.28`
 
 Public MIT package. It embeds Stripe into an application backend and owns everything between
 Stripe and an entity's entitlements: the subscription store, one-time fulfillments, the usage
@@ -46,14 +46,24 @@ declarePaymentPlan(cfg, { productSku: 'app-plans', sku: 'pro-monthly', rank: 10,
 
 appendPaymentGatewayService(context)                     // the process that talks to Stripe
 appendPaymentGatewayService(context, { manage: false })  // a worker that only reads entitlements and asserts consent
+// One deployment, several managed processes on one database: the same owner and webhookService everywhere
+appendPaymentGatewayService(context, { owner: 'app-api', webhookService: 'app-hooks' })                   // receives the webhook, bootstraps at boot
+appendPaymentGatewayService(context, { owner: 'app-api', webhookService: 'app-hooks', bootstrap: false }) // checkout and portal only
 appendConsumerRights(context, { manage, usage: myUsageMeter })   // before or after the gateway; idempotent
 consumerRights(context).useMailRenderer(myRenderer)      // lazy service: works while wiring
 gateway(context).use(myCheckoutPlugin)                   // a tier / cap / hold plugin — once the context is initialized
 export const serverBindings = [
-  ...paymentGateEntrypoints,
+  ...paymentGateEntrypoints,                            // the library's own, unpinned `paymentGate`
   ...consumerRightsEntrypoints(consumerProtocols, { guardMoney, throttle, subjectOf, planNameOf }),
   ...checkoutReadEntrypoints(checkoutProtocols),
 ]
+// …or the gate re-declared by the application (its aliases, pinned to its service, the library's paths):
+export const hookBindings = [
+  bind(own.base),
+  bind(own.webhook, paymentGateHandlers.webhook),
+  bind(own.resync, paymentGateHandlers.resync),
+  bind(own.resyncSubscriptions, paymentGateHandlers.resyncSubscriptions),
+]
 observer(context).onSubscription(async event => { /* keyed by event.eventKey */ })
 ```
 
@@ -75,6 +85,26 @@ observer(context).onSubscription(async event => { /* keyed by event.eventKey */
   `cancel` throw `PaygateError('unmanaged')`. `grantInternalPlan`, the entitlement service,
   `amountPolicy`, `planPrices` and the consumer-rights reads, `recordConsent`,
   `recordStartRequest` and `assertConsent` work, because they are Mongo only.
+- **Three keys of a deployment's Stripe state**, each a `PaymentGatewayOptions` field, each read
+  back on the gateway (`gateway(ctx).webhookService / owner / bootstrap`):
+  - `webhookService` (default `cfg.service`) — the `cfg.services` alias whose host and base form
+    `webhookUrlOf`, the portal's deployment key too. Name the process that RECEIVES the webhook
+    (the one serving `paymentGate`) in every process, so every bootstrap computes one URL.
+  - `owner` (default `cfg.service`) — the `payment-webhook` rows' `service`, the signing-secret
+    lookup, the endpoint's `owlmeans:<owner>` description and `service` metadata, the
+    `portal:<owner>` fingerprint and the portal's `service` metadata. One value in every process of
+    the database, so each finds and replaces the others' rows.
+  - `bootstrap` (default: `manage`) — run `bootstrapStripe` at boot. Exactly one kind of process
+    keeps it (the receiver). A managed process with `bootstrap: false` still serves checkout, the
+    portal, estimates, the resyncs and the webhook route, and a FORCED bootstrap (`resync`, an
+    application's maintenance `bootstrapStripe(ctx, stripe, { force: true })`) still runs there —
+    same URL, same rows, fingerprinted, so idempotent from any process.
+  - Refused at construction: `bootstrap: true` with `manage: false`, an empty `owner` or
+    `webhookService` (`PaygateError`). A managed, bootstrapping gateway fails its initialization when
+    `webhookService` is not declared in `cfg.services` (`WebhookSetupError('service:<alias>')`).
+- `stripe` (a `StripeFactory`, default `stripeClient`) is the gateway's own Stripe client —
+  `gateway(ctx).stripe(ctx)`, used by its methods, its boot bootstrap and the `paymentGate` handlers.
+  The consumer-rights service takes its own (`appendConsumerRights({ stripe })`).
 - Every process that registers the gateway runs the collection validators (`collMod`) of all
   twelve records at init: a process of an older version narrows the validators again, so roll
   the processes of one deployment out together.
@@ -114,10 +144,10 @@ None declares an ObjectId reference: `entityId` is an organization key and every
 | `payment-paygate-customer` | Stripe customer (`country`, `currency` from its webhooks; `deletedAt`) | `{paygate, externalId}` unique · `{paygate, entityId}` · `{paygate, profileId}` |
 | `payment-subscription` | subscription: `sub_…`, `free:<entityId>`, `internal:<planSku>:<entityId>` (+ `currency` and the checkout evidence) | `{paygate, externalId}` unique · `{entityId, status, rank:-1}` · `{entityId, planSku}` · `{paygate, customerId}` · `{paygate, itemId}` sparse · `{paygate, status, updatedAt}` |
 | `payment-fulfillment` | one-time checkout session (+ evidence: country, e-mail, totals, terms, `purchaseId`) | `{paygate, externalId}` unique · `{paygate, paymentIntentId}` sparse · `{paygate, chargeId}` sparse · `{entityId, createdAt:-1}` |
-| `payment-webhook` | managed webhook endpoint (`secret` is `secure: true`) | `{paygate, service, url}` unique |
+| `payment-webhook` | managed webhook endpoint of an owner (`service` = the gateway's `owner`; `secret` is `secure: true`) | `{paygate, service, url}` unique |
 | `payment-usage` | usage event — the ledger | `{entityId, limitKey, eventKey}` unique · `{entityId, limitKey, window}` · `{entityId, limitKey, ref}` sparse · `{entityId, createdAt:-1}` |
 | `payment-usage-counter` | (entity, limit, window) projection | `{entityId, limitKey, window}` unique |
-| `payment-fingerprint` | synchronized product (`<productSku>`, with `prices[]`) or portal (`portal:<service>`) | `{sku}` unique |
+| `payment-fingerprint` | synchronized product (`<productSku>`, with `prices[]`) or portal (`portal:<owner>`) | `{sku}` unique |
 | `payment-billing-profile` | organization: the billing country fixed at the first purchase | `{entityId}` unique · `{paygate, customerId}` sparse |
 | `payment-purchase` | purchase = contract + withdrawal window (a paid one-time checkout, a subscription's first invoice) | `{purchaseId}` unique · `{contractRef}` unique · `{entityId, deadline:-1}` · `{entityId, purchasedAt:-1}` · `{sessionId}` unique sparse · `{paygate, subscriptionId}` · `{invoiceId}` · `{invoiceNumber}` · `{paygate, paymentIntentId}` |
 | `payment-consumer-consent` | append-only: a performance consent or a subscription start request | `{entityId, decidedAt:-1}` · `{kind, entityId, planSku, decidedAt:-1}` |
@@ -379,6 +409,18 @@ made (found by `metadata.withdrawalId`). Five failures of a step leave it to an
 - `paymentGate` (bound by `paymentGateEntrypoints`): `webhook` is public because Stripe signs the
   untouched raw body — never put an application guard on it; `resync` and `resyncSubscriptions`
   carry `GUARD_ED25519`.
+- **An application that declares the gate itself** — its own aliases, every route pinned to the
+  service that receives the webhook — binds its declarations to `paymentGateHandlers` (`webhook`,
+  `resync`, `resyncSubscriptions`) with `bind(own.webhook, paymentGateHandlers.webhook)` from
+  `@owlmeans/server-entrypoint` / `@owlmeans/server-app`, and never registers `paymentGate` or
+  `paymentGateEntrypoints`. A handler reads its context from the entrypoint it is bound to, so the
+  application's declaration is the one mounted and run. Its declarations keep the library's paths
+  (`webhookUrlOf` forms the Stripe URL from `paymentGate`'s), contracts (`PaygateParams`,
+  `ResyncResult`, `ResyncSubscriptionsResult` — `bind` refuses another shape at compile time) and
+  guards. Two ways to get it wrong: `bindAll(declarations, [paymentGateHandlers.webhook])` pairs by
+  object identity and leaves the application's declaration without a handler, and
+  `handlers().params(own.webhook, paymentGateHandlers.webhook)` answers every request with
+  `HandlerMisconfiguredError` (a handler bound to another protocol).
 - `consumerRightsEntrypoints(protocols, { resolveEntity?, subjectOf?, guardMoney?, throttle?,
   metaOf?, publicMinMs?, planNameOf?, serviceAlias? })` binds `makeConsumerRightsProtocols`' tree.
   **Every hook gets the request's context as its LAST argument** — `resolveEntity(req, ctx)`,
@@ -398,20 +440,27 @@ made (found by `metadata.withdrawalId`). Five failures of a step leave it to an
 
 ## Stripe self-management
 
-Runs in `initialize()` of a managed gateway, after the context is ready; each step independent:
-products and prices (above), the portal configuration, the webhook endpoint.
+Runs in `initialize()` of a managed gateway with `bootstrap` (default), after the context is
+ready, and on a forced `bootstrapStripe` from any managed process; each step independent: products
+and prices (above), the portal configuration, the webhook endpoint. A deployment's identity is its
+webhook URL (`webhookUrlOf`: the `webhookService` alias's host and base); its rows carry the
+`owner`.
 
 - **The portal configuration**: customer update (email, address, tax id — **without address under
   `mechanisms.countryLock`**), invoice history, payment method update, cancellation at period end
   without proration, price switching between the active recurring prices. Its fingerprint covers
   the catalogue (incl. `currencyPrices`), the lock flag, the region currencies, the branding and
   the deployment key. Each deployment owns its own configuration, tagged `{ owlmeans: 'payment',
-  service, deployment: webhookUrlOf(ctx) }`; one tagged for another deployment is never touched.
+  service: <owner>, deployment: webhookUrlOf(ctx) }`; one tagged for another deployment (a former
+  webhook URL included) is never touched — a moved URL creates a new configuration.
 - `portalLink(ctx, entityId, { flow, planSku?, returnUrl })`: a customer is required
   (`PortalUnavailable`, 409); `Cancel`/`Update`/`Change` need an entitling Stripe subscription.
 - **The webhook endpoint** at `webhookUrlOf(ctx)`, subscribed to `WEBHOOK_EVENTS`, on the API version
   read back from the client; only an https public host. A deployment deletes only the endpoints its
-  own rows name. The secret (create-only) is stored field-encrypted where the database has a key.
+  own rows name. A new URL (a moved host, a new `webhookService`) creates the endpoint there, then
+  deletes the endpoints of the owner's rows at other URLs and those rows — no migration step. The
+  secret (create-only) is stored field-encrypted where the database has a key; the receiver reads
+  the newest row of its `owner`.
 - **Do not bump the Stripe SDK** (17.x, API `2025-02-24.acacia`): `current_period_*`,
   `invoice.subscription`, `invoice.payment_intent`, `charge.invoice` are top-level there and move
   later; credit notes link a refund by `refund`; `presentment_details` is untyped. Read them through
@@ -470,8 +519,12 @@ resources (unique and sparse-unique indexes, raw conditional updates) and a fake
 every SDK call and its request options (idempotency keys) and can fail a method's next calls
 (`state.failures`: a message, a real SDK error such as `new Stripe.errors.StripeInvalidRequestError(…)`,
 or a list of them, one per call), so "no Stripe call" is an assertion. `makeFakeContext` wires the
-consumer-rights call before the gateway by default (`gatewayFirst`, `rights`, `gatewayManage` and a
-pre-init `wire` hook test the other orders). The consumer-rights service there is
+consumer-rights call before the gateway by default (`gatewayFirst`, `rights` and a pre-init `wire`
+hook test the other orders); `gateway` passes the gateway's options (default `{ manage: false }`,
+the fake always its Stripe client, so a managed one boot-bootstraps against it), `service` /
+`host` / `base` / `services` shape `cfg.service` and `cfg.services`, and `seed` pre-fills stores
+(a database shared between two processes). `gate-handlers.spec.ts` binds `paymentGateHandlers`
+onto a re-declared, pinned gate and runs it in that process's context. The consumer-rights service there is
 managed through the fake (`appendConsumerRights({ manage: true, stripe })`) with a console mailer
 (`fake.mails`). The Mongo-gated specs prove admission under concurrency, the collection validators
 of every record, the unique indexes, the concurrent first lock and the single winner of

package/build/actions/resync.d.ts

@@ -1,3 +1,7 @@
-/** Forget every sync fingerprint and bring Stripe back to the declared catalogue, portal and webhook. */
+/**
+ * Forget every sync fingerprint and bring Stripe back to the declared catalogue, portal and webhook —
+ * in any managed process, `bootstrap: false` included: the webhook URL and the rows follow the
+ * gateway's `webhookService` and `owner`, so every process of the owner converges on one state.
+ */
 export declare const resync: import("@owlmeans/server-entrypoint").BoundEntrypointHandler<import("@owlmeans/entrypoint").EntrypointProtocol<{}, import("../consts.js").ResyncResult>>;
 //# sourceMappingURL=resync.d.ts.map

package/build/actions/resync.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"resync.d.ts","sourceRoot":"","sources":["../../src/actions/resync.ts"],"names":[],"mappings":"AASA,yGAAyG;AACzG,eAAO,MAAM,MAAM,0JAKjB,CAAA"}
+{"version":3,"file":"resync.d.ts","sourceRoot":"","sources":["../../src/actions/resync.ts"],"names":[],"mappings":"AASA;;;;GAIG;AACH,eAAO,MAAM,MAAM,0JAMjB,CAAA"}

package/build/actions/resync.js

@@ -2,14 +2,19 @@ import { PaygateError } from '@owlmeans/payment';
 import { handlers } from '@owlmeans/server-api';
 import { paymentGate } from '../consts.js';
 import { bootstrapStripe } from '../service.js';
-import { fingerprints, gateway, stripeClient } from '../utils.js';
+import { fingerprints, gateway } from '../utils.js';
 const bind = handlers();
-/** Forget every sync fingerprint and bring Stripe back to the declared catalogue, portal and webhook. */
+/**
+ * Forget every sync fingerprint and bring Stripe back to the declared catalogue, portal and webhook —
+ * in any managed process, `bootstrap: false` included: the webhook URL and the rows follow the
+ * gateway's `webhookService` and `owner`, so every process of the owner converges on one state.
+ */
 export const resync = bind.request(paymentGate.resync, async (_request, context) => {
-    if (!gateway(context).managed)
+    const service = gateway(context);
+    if (!service.managed)
         throw new PaygateError('unmanaged');
     await fingerprints(context).clear();
-    await bootstrapStripe(context, await stripeClient(context), { force: true });
+    await bootstrapStripe(context, await service.stripe(context), { force: true });
     return { ok: true };
 });
 //# sourceMappingURL=resync.js.map

package/build/actions/resync.js.map

@@ -1 +1 @@
-{"version":3,"file":"resync.js","sourceRoot":"","sources":["../../src/actions/resync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAGjE,MAAM,IAAI,GAAG,QAAQ,EAAW,CAAA;AAEhC,yGAAyG;AACzG,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;IACjF,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO;QAAE,MAAM,IAAI,YAAY,CAAC,WAAW,CAAC,CAAA;IAClE,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAA;IACnC,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC5E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;AACrB,CAAC,CAAC,CAAA"}
+{"version":3,"file":"resync.js","sourceRoot":"","sources":["../../src/actions/resync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAGnD,MAAM,IAAI,GAAG,QAAQ,EAAW,CAAA;AAEhC;;;;GAIG;AACH,MAAM,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE;IACjF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAChC,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,MAAM,IAAI,YAAY,CAAC,WAAW,CAAC,CAAA;IACzD,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAA;IACnC,MAAM,eAAe,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;IAC9E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAA;AACrB,CAAC,CAAC,CAAA"}

package/build/actions/webhook.d.ts

@@ -1,3 +1,4 @@
+/** A Stripe delivery — only a managed gateway receives one; its secret is the `owner`'s stored one. */
 export declare const webhook: import("@owlmeans/server-entrypoint").BoundEntrypointHandler<import("@owlmeans/entrypoint").EntrypointProtocol<{
     params: import("../consts.js").PaygateParams;
 }, undefined>>;

package/build/actions/webhook.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../src/actions/webhook.ts"],"names":[],"mappings":"AASA,eAAO,MAAM,OAAO;;cAIlB,CAAA"}
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../src/actions/webhook.ts"],"names":[],"mappings":"AASA,uGAAuG;AACvG,eAAO,MAAM,OAAO;;cAKlB,CAAA"}

package/build/actions/webhook.js

@@ -2,13 +2,15 @@ import { PaygateError, UnknownPaygate } from '@owlmeans/payment';
 import { handlers } from '@owlmeans/server-api';
 import { paymentGate, STRIPE_PAYGATE_ALIAS } from '../consts.js';
 import { handleStripeWebhook } from '../plugins/stripe.js';
-import { gateway, stripeClient } from '../utils.js';
+import { gateway } from '../utils.js';
 const bind = handlers();
+/** A Stripe delivery — only a managed gateway receives one; its secret is the `owner`'s stored one. */
 export const webhook = bind.params(paymentGate.webhook, async ({ paygate }, context, request) => {
     if (paygate !== STRIPE_PAYGATE_ALIAS)
         throw new UnknownPaygate(paygate);
-    if (!gateway(context).managed)
+    const service = gateway(context);
+    if (!service.managed)
         throw new PaygateError('unmanaged');
-    await handleStripeWebhook(context, await stripeClient(context), request);
+    await handleStripeWebhook(context, await service.stripe(context), request);
 });
 //# sourceMappingURL=webhook.js.map

package/build/actions/webhook.js.map

@@ -1 +1 @@
-{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../src/actions/webhook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAA;AAGnD,MAAM,IAAI,GAAG,QAAQ,EAAW,CAAA;AAEhC,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;IAC9F,IAAI,OAAO,KAAK,oBAAoB;QAAE,MAAM,IAAI,cAAc,CAAC,OAAO,CAAC,CAAA;IACvE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO;QAAE,MAAM,IAAI,YAAY,CAAC,WAAW,CAAC,CAAA;IAClE,MAAM,mBAAmB,CAAC,OAAO,EAAE,MAAM,YAAY,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;AAC1E,CAAC,CAAC,CAAA"}
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../src/actions/webhook.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAChE,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AAChE,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAA;AAC1D,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAA;AAGrC,MAAM,IAAI,GAAG,QAAQ,EAAW,CAAA;AAEhC,uGAAuG;AACvG,MAAM,CAAC,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE;IAC9F,IAAI,OAAO,KAAK,oBAAoB;QAAE,MAAM,IAAI,cAAc,CAAC,OAAO,CAAC,CAAA;IACvE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAA;IAChC,IAAI,CAAC,OAAO,CAAC,OAAO;QAAE,MAAM,IAAI,YAAY,CAAC,WAAW,CAAC,CAAA;IACzD,MAAM,mBAAmB,CAAC,OAAO,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAA;AAC5E,CAAC,CAAC,CAAA"}

package/build/consts.d.ts

@@ -51,12 +51,13 @@ export declare const PURCHASE_ID_PREFIX = "stripe";
  * reference read aloud or typed from paper is never ambiguous.
  */
 export declare const CONTRACT_REF_ALPHABET = "23456789ABCDEFGHJKMNPQRSTUVWXYZ";
-/** Fingerprint sku prefix of a portal configuration: `portal:<service>`. */
+/** Fingerprint sku prefix of a portal configuration: `portal:<owner>` (the gateway's `owner`). */
 export declare const FINGERPRINT_PORTAL = "portal";
 /**
- * The metadata every Stripe object this package creates carries (`{ owlmeans: 'payment', service }`).
- * It labels the object for an operator; several deployments of one service share it, so it never
- * decides on its own that an object belongs to this deployment.
+ * The metadata every Stripe object this package creates carries (`{ owlmeans: 'payment', service }`,
+ * `service` valued with the gateway's `owner`). It labels the object for an operator; several
+ * deployments of one owner share it, so it never decides on its own that an object belongs to this
+ * deployment.
  */
 export declare const STRIPE_OWNER_KEY = "owlmeans";
 export declare const STRIPE_OWNER_VALUE = "payment";

package/build/consts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"consts.d.ts","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAGhE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAA;AAEvC,eAAO,MAAM,oBAAoB,WAAW,CAAA;AAC5C,eAAO,MAAM,oBAAoB,qBAAqB,CAAA;AACtD,eAAO,MAAM,2BAA2B,4BAA4B,CAAA;AACpE,gLAAgL;AAChL,eAAO,MAAM,4BAA4B,6BAA6B,CAAA;AACtE,eAAO,MAAM,gBAAgB,qBAAqB,CAAA;AAElD;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,uBAAuB,CAAA;AAChE,eAAO,MAAM,eAAe,oBAAoB,CAAA;AAChD,eAAO,MAAM,gBAAgB,qBAAqB,CAAA;AAClD,eAAO,MAAM,mBAAmB,wBAAwB,CAAA;AAExD,eAAO,MAAM,oBAAoB,6BAA6B,CAAA;AAC9D,eAAO,MAAM,wBAAwB,yBAAyB,CAAA;AAC9D,eAAO,MAAM,uBAAuB,wBAAwB,CAAA;AAC5D,eAAO,MAAM,mBAAmB,oBAAoB,CAAA;AACpD,eAAO,MAAM,iBAAiB,kBAAkB,CAAA;AAChD,eAAO,MAAM,yBAAyB,0BAA0B,CAAA;AAChE,eAAO,MAAM,uBAAuB,wBAAwB,CAAA;AAE5D,6EAA6E;AAC7E,eAAO,MAAM,mBAAmB,4BAA4B,CAAA;AAC5D,qGAAqG;AACrG,eAAO,MAAM,oBAAoB,qBAAqB,CAAA;AACtD,0FAA0F;AAC1F,eAAO,MAAM,oBAAoB,6BAA6B,CAAA;AAC9D,6DAA6D;AAC7D,eAAO,MAAM,wBAAwB,iCAAiC,CAAA;AACtE,gFAAgF;AAChF,eAAO,MAAM,kBAAkB,2BAA2B,CAAA;AAE1D,eAAO,MAAM,uBAAuB,4BAA4B,CAAA;AAChE,4FAA4F;AAC5F,eAAO,MAAM,kCAAkC,oCAAoC,CAAA;AAEnF,0EAA0E;AAC1E,eAAO,MAAM,8BAA8B,QAAU,CAAA;AACrD,eAAO,MAAM,8BAA8B,QAAe,CAAA;AAE1D,uFAAuF;AACvF,eAAO,MAAM,sBAAsB,KAAK,CAAA;AAExC,2GAA2G;AAC3G,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAA+D,CAAA;AAE/G,wGAAwG;AACxG,eAAO,MAAM,kBAAkB,WAAW,CAAA;AAE1C;;;GAGG;AACH,eAAO,MAAM,qBAAqB,oCAAoC,CAAA;AAEtE,4EAA4E;AAC5E,eAAO,MAAM,kBAAkB,WAAW,CAAA;AAE1C;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,aAAa,CAAA;AAC1C,eAAO,MAAM,kBAAkB,YAAY,CAAA;AAE3C;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,eAAe,CAAA;AAEjD;;;;;GAKG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAY1C,CAAA;AAEF,MAAM,WAAW,aAAa;IAAG,OAAO,EAAE,MAAM,CAAA;CAAE;AAClD,MAAM,WAAW,YAAY;IAAG,EAAE,EAAE,OAAO,CAAA;CAAE;AAC7C,MAAM,WAAW,yBAAyB;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAyB/E,qFAAqF;AACrF,eAAO,MAAM,WAAW;;IAEtB,yFAAyF;;;;IAKzF,mFAAmF;;IAMnF,+EAA+E;;CAMvE,CAAA"}
+{"version":3,"file":"consts.d.ts","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAGhE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAA;AAEvC,eAAO,MAAM,oBAAoB,WAAW,CAAA;AAC5C,eAAO,MAAM,oBAAoB,qBAAqB,CAAA;AACtD,eAAO,MAAM,2BAA2B,4BAA4B,CAAA;AACpE,gLAAgL;AAChL,eAAO,MAAM,4BAA4B,6BAA6B,CAAA;AACtE,eAAO,MAAM,gBAAgB,qBAAqB,CAAA;AAElD;;;;;;GAMG;AACH,eAAO,MAAM,4BAA4B,uBAAuB,CAAA;AAChE,eAAO,MAAM,eAAe,oBAAoB,CAAA;AAChD,eAAO,MAAM,gBAAgB,qBAAqB,CAAA;AAClD,eAAO,MAAM,mBAAmB,wBAAwB,CAAA;AAExD,eAAO,MAAM,oBAAoB,6BAA6B,CAAA;AAC9D,eAAO,MAAM,wBAAwB,yBAAyB,CAAA;AAC9D,eAAO,MAAM,uBAAuB,wBAAwB,CAAA;AAC5D,eAAO,MAAM,mBAAmB,oBAAoB,CAAA;AACpD,eAAO,MAAM,iBAAiB,kBAAkB,CAAA;AAChD,eAAO,MAAM,yBAAyB,0BAA0B,CAAA;AAChE,eAAO,MAAM,uBAAuB,wBAAwB,CAAA;AAE5D,6EAA6E;AAC7E,eAAO,MAAM,mBAAmB,4BAA4B,CAAA;AAC5D,qGAAqG;AACrG,eAAO,MAAM,oBAAoB,qBAAqB,CAAA;AACtD,0FAA0F;AAC1F,eAAO,MAAM,oBAAoB,6BAA6B,CAAA;AAC9D,6DAA6D;AAC7D,eAAO,MAAM,wBAAwB,iCAAiC,CAAA;AACtE,gFAAgF;AAChF,eAAO,MAAM,kBAAkB,2BAA2B,CAAA;AAE1D,eAAO,MAAM,uBAAuB,4BAA4B,CAAA;AAChE,4FAA4F;AAC5F,eAAO,MAAM,kCAAkC,oCAAoC,CAAA;AAEnF,0EAA0E;AAC1E,eAAO,MAAM,8BAA8B,QAAU,CAAA;AACrD,eAAO,MAAM,8BAA8B,QAAe,CAAA;AAE1D,uFAAuF;AACvF,eAAO,MAAM,sBAAsB,KAAK,CAAA;AAExC,2GAA2G;AAC3G,eAAO,MAAM,kBAAkB,EAAE,SAAS,MAAM,EAA+D,CAAA;AAE/G,wGAAwG;AACxG,eAAO,MAAM,kBAAkB,WAAW,CAAA;AAE1C;;;GAGG;AACH,eAAO,MAAM,qBAAqB,oCAAoC,CAAA;AAEtE,kGAAkG;AAClG,eAAO,MAAM,kBAAkB,WAAW,CAAA;AAE1C;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,aAAa,CAAA;AAC1C,eAAO,MAAM,kBAAkB,YAAY,CAAA;AAE3C;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,eAAe,CAAA;AAEjD;;;;;GAKG;AACH,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAY1C,CAAA;AAEF,MAAM,WAAW,aAAa;IAAG,OAAO,EAAE,MAAM,CAAA;CAAE;AAClD,MAAM,WAAW,YAAY;IAAG,EAAE,EAAE,OAAO,CAAA;CAAE;AAC7C,MAAM,WAAW,yBAAyB;IAAG,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AAyB/E,qFAAqF;AACrF,eAAO,MAAM,WAAW;;IAEtB,yFAAyF;;;;IAKzF,mFAAmF;;IAMnF,+EAA+E;;CAMvE,CAAA"}

package/build/consts.js

@@ -54,12 +54,13 @@ export const PURCHASE_ID_PREFIX = 'stripe';
  * reference read aloud or typed from paper is never ambiguous.
  */
 export const CONTRACT_REF_ALPHABET = '23456789ABCDEFGHJKMNPQRSTUVWXYZ';
-/** Fingerprint sku prefix of a portal configuration: `portal:<service>`. */
+/** Fingerprint sku prefix of a portal configuration: `portal:<owner>` (the gateway's `owner`). */
 export const FINGERPRINT_PORTAL = 'portal';
 /**
- * The metadata every Stripe object this package creates carries (`{ owlmeans: 'payment', service }`).
- * It labels the object for an operator; several deployments of one service share it, so it never
- * decides on its own that an object belongs to this deployment.
+ * The metadata every Stripe object this package creates carries (`{ owlmeans: 'payment', service }`,
+ * `service` valued with the gateway's `owner`). It labels the object for an operator; several
+ * deployments of one owner share it, so it never decides on its own that an object belongs to this
+ * deployment.
  */
 export const STRIPE_OWNER_KEY = 'owlmeans';
 export const STRIPE_OWNER_VALUE = 'payment';

package/build/consts.js.map

@@ -1 +1 @@
-{"version":3,"file":"consts.js","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AACxE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAGhE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAA;AAEvC,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAQ,CAAA;AAC5C,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAA;AACtD,MAAM,CAAC,MAAM,2BAA2B,GAAG,yBAAyB,CAAA;AACpE,gLAAgL;AAChL,MAAM,CAAC,MAAM,4BAA4B,GAAG,0BAA0B,CAAA;AACtE,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAA;AAElD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,oBAAoB,CAAA;AAChE,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAA;AAChD,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAA;AAClD,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAA;AAExD,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,CAAA;AAC9D,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAA;AAC9D,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAA;AAC5D,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAA;AACpD,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,CAAA;AAChD,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAA;AAChE,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAA;AAE5D,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,yBAAyB,CAAA;AAC5D,qGAAqG;AACrG,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAA;AACtD,0FAA0F;AAC1F,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,CAAA;AAC9D,6DAA6D;AAC7D,MAAM,CAAC,MAAM,wBAAwB,GAAG,8BAA8B,CAAA;AACtE,gFAAgF;AAChF,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,CAAA;AAE1D,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAA;AAChE,4FAA4F;AAC5F,MAAM,CAAC,MAAM,kCAAkC,GAAG,iCAAiC,CAAA;AAEnF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,GAAG,EAAE,CAAA;AACrD,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;AAE1D,uFAAuF;AACvF,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAA;AAExC,2GAA2G;AAC3G,MAAM,CAAC,MAAM,kBAAkB,GAAsB,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAA;AAE/G,wGAAwG;AACxG,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAA;AAE1C;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,iCAAiC,CAAA;AAEtE,4EAA4E;AAC5E,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAA;AAE1C;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,UAAU,CAAA;AAC1C,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAAA;AAE3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAA;AAEjD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC7D,4BAA4B,EAAE,0CAA0C;IACxE,uCAAuC,EAAE,0BAA0B;IACnE,kBAAkB,EAAE,kBAAkB,EAAE,kBAAkB;IAC1D,+BAA+B,EAAE,+BAA+B,EAAE,+BAA+B;IACjG,8BAA8B,EAAE,+BAA+B,EAAE,sCAAsC;IACvG,8CAA8C,EAAE,8CAA8C;IAC9F,cAAc,EAAE,wBAAwB,EAAE,iCAAiC,EAAE,kBAAkB;IAC/F,8BAA8B,EAAE,gBAAgB;IAChD,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,eAAe;IACtE,wBAAwB,EAAE,uBAAuB,EAAE,gCAAgC;IACnF,iCAAiC;CAClC,CAAC,CAAA;AAMF,MAAM,mBAAmB,GAAG,MAAM,CAAgB;IAChD,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC;IAClF,oBAAoB,EAAE,KAAK;CACK,CAAC,CAAA;AACnC,MAAM,kBAAkB,GAAG,MAAM,CAAe;IAC9C,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC;IACzE,oBAAoB,EAAE,KAAK;CACI,CAAC,CAAA;AAClC,MAAM,+BAA+B,GAAG,MAAM,CAA4B;IACxE,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;IACxE,QAAQ,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;IAChC,oBAAoB,EAAE,KAAK;CACiB,CAAC,CAAA;AAE/C,MAAM,OAAO,GAAG;IACd,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,sBAAsB;IAC/B,MAAM,EAAE,qBAAqB;IAC7B,mBAAmB,EAAE,mCAAmC;CAChD,CAAA;AACV,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;AAElF,qFAAqF;AACrF,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,IAAI;IACJ,yFAAyF;IACzF,OAAO,EAAE,QAAQ,CACf,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,EAChG,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,KAAK,EAAa,CAAC,CACtE;IACD,mFAAmF;IACnF,MAAM,EAAE,QAAQ,CACd,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,EACrF,QAAQ,CAAC,kBAAkB,CAAC,EAC5B,EAAE,MAAM,EAAE,aAAa,EAAE,CAC1B;IACD,+EAA+E;IAC/E,mBAAmB,EAAE,QAAQ,CAC3B,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,uBAAuB,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,EAChH,QAAQ,CAAC,+BAA+B,CAAC,EACzC,EAAE,MAAM,EAAE,aAAa,EAAE,CAC1B;CACO,CAAA"}
+{"version":3,"file":"consts.js","sourceRoot":"","sources":["../src/consts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,sBAAsB,CAAA;AACxE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAGhE,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAA;AAEvC,MAAM,CAAC,MAAM,oBAAoB,GAAG,QAAQ,CAAA;AAC5C,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAA;AACtD,MAAM,CAAC,MAAM,2BAA2B,GAAG,yBAAyB,CAAA;AACpE,gLAAgL;AAChL,MAAM,CAAC,MAAM,4BAA4B,GAAG,0BAA0B,CAAA;AACtE,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAA;AAElD;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,oBAAoB,CAAA;AAChE,MAAM,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAA;AAChD,MAAM,CAAC,MAAM,gBAAgB,GAAG,kBAAkB,CAAA;AAClD,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAA;AAExD,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,CAAA;AAC9D,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAA;AAC9D,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAA;AAC5D,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAA;AACpD,MAAM,CAAC,MAAM,iBAAiB,GAAG,eAAe,CAAA;AAChD,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAA;AAChE,MAAM,CAAC,MAAM,uBAAuB,GAAG,qBAAqB,CAAA;AAE5D,6EAA6E;AAC7E,MAAM,CAAC,MAAM,mBAAmB,GAAG,yBAAyB,CAAA;AAC5D,qGAAqG;AACrG,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAA;AACtD,0FAA0F;AAC1F,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,CAAA;AAC9D,6DAA6D;AAC7D,MAAM,CAAC,MAAM,wBAAwB,GAAG,8BAA8B,CAAA;AACtE,gFAAgF;AAChF,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,CAAA;AAE1D,MAAM,CAAC,MAAM,uBAAuB,GAAG,yBAAyB,CAAA;AAChE,4FAA4F;AAC5F,MAAM,CAAC,MAAM,kCAAkC,GAAG,iCAAiC,CAAA;AAEnF,0EAA0E;AAC1E,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,GAAG,EAAE,CAAA;AACrD,MAAM,CAAC,MAAM,8BAA8B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,CAAA;AAE1D,uFAAuF;AACvF,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAA;AAExC,2GAA2G;AAC3G,MAAM,CAAC,MAAM,kBAAkB,GAAsB,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAA;AAE/G,wGAAwG;AACxG,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAA;AAE1C;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,iCAAiC,CAAA;AAEtE,kGAAkG;AAClG,MAAM,CAAC,MAAM,kBAAkB,GAAG,QAAQ,CAAA;AAE1C;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,UAAU,CAAA;AAC1C,MAAM,CAAC,MAAM,kBAAkB,GAAG,SAAS,CAAA;AAE3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,YAAY,CAAA;AAEjD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC7D,4BAA4B,EAAE,0CAA0C;IACxE,uCAAuC,EAAE,0BAA0B;IACnE,kBAAkB,EAAE,kBAAkB,EAAE,kBAAkB;IAC1D,+BAA+B,EAAE,+BAA+B,EAAE,+BAA+B;IACjG,8BAA8B,EAAE,+BAA+B,EAAE,sCAAsC;IACvG,8CAA8C,EAAE,8CAA8C;IAC9F,cAAc,EAAE,wBAAwB,EAAE,iCAAiC,EAAE,kBAAkB;IAC/F,8BAA8B,EAAE,gBAAgB;IAChD,iBAAiB,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,eAAe;IACtE,wBAAwB,EAAE,uBAAuB,EAAE,gCAAgC;IACnF,iCAAiC;CAClC,CAAC,CAAA;AAMF,MAAM,mBAAmB,GAAG,MAAM,CAAgB;IAChD,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,SAAS,CAAC;IAClF,oBAAoB,EAAE,KAAK;CACK,CAAC,CAAA;AACnC,MAAM,kBAAkB,GAAG,MAAM,CAAe;IAC9C,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC;IACzE,oBAAoB,EAAE,KAAK;CACI,CAAC,CAAA;AAClC,MAAM,+BAA+B,GAAG,MAAM,CAA4B;IACxE,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE;IACxE,QAAQ,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC;IAChC,oBAAoB,EAAE,KAAK;CACiB,CAAC,CAAA;AAE/C,MAAM,OAAO,GAAG;IACd,IAAI,EAAE,cAAc;IACpB,OAAO,EAAE,sBAAsB;IAC/B,MAAM,EAAE,qBAAqB;IAC7B,mBAAmB,EAAE,mCAAmC;CAChD,CAAA;AACV,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAA;AAElF,qFAAqF;AACrF,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,IAAI;IACJ,yFAAyF;IACzF,OAAO,EAAE,QAAQ,CACf,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,mBAAmB,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,EAChG,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,mBAAmB,EAAE,EAAE,KAAK,EAAa,CAAC,CACtE;IACD,mFAAmF;IACnF,MAAM,EAAE,QAAQ,CACd,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,EACrF,QAAQ,CAAC,kBAAkB,CAAC,EAC5B,EAAE,MAAM,EAAE,aAAa,EAAE,CAC1B;IACD,+EAA+E;IAC/E,mBAAmB,EAAE,QAAQ,CAC3B,KAAK,CAAC,OAAO,CAAC,mBAAmB,EAAE,uBAAuB,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,EAChH,QAAQ,CAAC,+BAA+B,CAAC,EACzC,EAAE,MAAM,EAAE,aAAa,EAAE,CAC1B;CACO,CAAA"}

package/build/entrypoints.d.ts

@@ -1,3 +1,20 @@
+/**
+ * The payment gate's action handlers, for an application that declares the gate itself — its own
+ * aliases, a route pinned to its own service: `bind(own.webhook, paymentGateHandlers.webhook)`.
+ *
+ * A handler reads its context from the entrypoint it is bound to, so the application's own
+ * declaration is the one registered, mounted and run. That declaration keeps `paymentGate`'s paths
+ * (`webhookUrlOf` registers the webhook at `paymentGate`'s path), contracts and guards. Bind each
+ * one with `bind` itself: `bindAll` pairs a handler with the declaration it was made for, by object
+ * identity, and leaves another declaration without one.
+ */
+export declare const paymentGateHandlers: Readonly<{
+    webhook: import("@owlmeans/server-entrypoint").BoundEntrypointHandler<import("@owlmeans/entrypoint").EntrypointProtocol<{
+        params: import("./consts.js").PaygateParams;
+    }, undefined>>;
+    resync: import("@owlmeans/server-entrypoint").BoundEntrypointHandler<import("@owlmeans/entrypoint").EntrypointProtocol<{}, import("./consts.js").ResyncResult>>;
+    resyncSubscriptions: import("@owlmeans/server-entrypoint").BoundEntrypointHandler<import("@owlmeans/entrypoint").EntrypointProtocol<{}, import("./consts.js").ResyncSubscriptionsResult>>;
+}>;
 /** Runtime-local bindings for the shared immutable payment-gateway protocol tree. */
 export declare const paymentGateEntrypoints: (import("@owlmeans/server-entrypoint").ServerProtocolEntrypoint<import("@owlmeans/entrypoint").EntrypointProtocol<{
     params: import("./consts.js").PaygateParams;

package/build/entrypoints.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAIA,qFAAqF;AACrF,eAAO,MAAM,sBAAsB;;ydAKlC,CAAA"}
+{"version":3,"file":"entrypoints.d.ts","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAIA;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB;;;;;;EAA0D,CAAA;AAE1F,qFAAqF;AACrF,eAAO,MAAM,sBAAsB;;ydAKlC,CAAA"}

package/build/entrypoints.js

@@ -1,11 +1,22 @@
 import { bind } from '@owlmeans/server-entrypoint';
 import { paymentGate } from './consts.js';
 import { resync, resyncSubscriptions, webhook } from './actions/index.js';
+/**
+ * The payment gate's action handlers, for an application that declares the gate itself — its own
+ * aliases, a route pinned to its own service: `bind(own.webhook, paymentGateHandlers.webhook)`.
+ *
+ * A handler reads its context from the entrypoint it is bound to, so the application's own
+ * declaration is the one registered, mounted and run. That declaration keeps `paymentGate`'s paths
+ * (`webhookUrlOf` registers the webhook at `paymentGate`'s path), contracts and guards. Bind each
+ * one with `bind` itself: `bindAll` pairs a handler with the declaration it was made for, by object
+ * identity, and leaves another declaration without one.
+ */
+export const paymentGateHandlers = Object.freeze({ webhook, resync, resyncSubscriptions });
 /** Runtime-local bindings for the shared immutable payment-gateway protocol tree. */
 export const paymentGateEntrypoints = [
     bind(paymentGate.base),
-    bind(paymentGate.webhook, webhook),
-    bind(paymentGate.resync, resync),
-    bind(paymentGate.resyncSubscriptions, resyncSubscriptions),
+    bind(paymentGate.webhook, paymentGateHandlers.webhook),
+    bind(paymentGate.resync, paymentGateHandlers.resync),
+    bind(paymentGate.resyncSubscriptions, paymentGateHandlers.resyncSubscriptions),
 ];
 //# sourceMappingURL=entrypoints.js.map

package/build/entrypoints.js.map

@@ -1 +1 @@
-{"version":3,"file":"entrypoints.js","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAEzE,qFAAqF;AACrF,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IACtB,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC;IAClC,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;IAChC,IAAI,CAAC,WAAW,CAAC,mBAAmB,EAAE,mBAAmB,CAAC;CAC3D,CAAA"}
+{"version":3,"file":"entrypoints.js","sourceRoot":"","sources":["../src/entrypoints.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,6BAA6B,CAAA;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAA;AAEzE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,mBAAmB,EAAE,CAAC,CAAA;AAE1F,qFAAqF;AACrF,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACpC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;IACtB,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC;IACtD,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,mBAAmB,CAAC,MAAM,CAAC;IACpD,IAAI,CAAC,WAAW,CAAC,mBAAmB,EAAE,mBAAmB,CAAC,mBAAmB,CAAC;CAC/E,CAAA"}

package/build/index.d.ts

@@ -21,7 +21,7 @@ export { makeEstimateCache, estimateStripePrice } from './plugins/estimate.js';
 export type { EstimateCache } from './plugins/estimate.js';
 export { applySubscription, createEventHandler, mapStatus } from './plugins/events.js';
 export type { ApplyOptions } from './plugins/events.js';
-export { ensureWebhookEndpoint, stripeWebhookSecret, stripeWebhookSecrets, webhookUrlOf, } from './plugins/webhook-manager.js';
-export { ensurePortalConfiguration } from './plugins/portal.js';
-export { activeSubscription, apiVersionOf, billingProfiles, consumerConsents, consumerDeclarations, consumerEvents, consumerRights, consumerRightsOf, entitlements, fingerprints, fulfillments, gateway, observer, paygateCustomers, payment, paymentWebhooks, purchases, stripeClient, stripeConfig, subscriptions, usageCounters, usageEvents, } from './utils.js';
+export { ensureWebhookEndpoint, gatewayOwnerOf, stripeWebhookSecret, stripeWebhookSecrets, webhookRouteOf, webhookServiceOf, webhookUrlOf, } from './plugins/webhook-manager.js';
+export { ensurePortalConfiguration, portalFingerprintSku } from './plugins/portal.js';
+export { activeSubscription, apiVersionOf, billingProfiles, consumerConsents, consumerDeclarations, consumerEvents, consumerRights, consumerRightsOf, entitlements, fingerprints, fulfillments, gateway, gatewayOf, observer, paygateCustomers, payment, paymentWebhooks, purchases, stripeClient, stripeConfig, subscriptions, usageCounters, usageEvents, } from './utils.js';
 //# sourceMappingURL=index.d.ts.map

package/build/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,YAAY,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,YAAY,CAAA;AAC1B,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAC7F,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,YAAY,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACvJ,OAAO,EACL,0BAA0B,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,oBAAoB,GACxF,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AACpE,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AACpG,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AACtF,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAClG,cAAc,qBAAqB,CAAA;AACnC,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC9E,YAAY,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AACtF,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EACL,qBAAqB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,YAAY,GAC/E,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,EACL,kBAAkB,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,cAAc,EACzG,cAAc,EAAE,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAC/G,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,GAC3G,MAAM,YAAY,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mBAAmB,YAAY,CAAA;AAC/B,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,YAAY,CAAA;AAC1B,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAC7F,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,YAAY,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACvJ,OAAO,EACL,0BAA0B,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,oBAAoB,GACxF,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AACpE,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AACpG,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AACtF,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAClG,cAAc,qBAAqB,CAAA;AACnC,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAC9E,YAAY,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAC1D,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AACtF,YAAY,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAA;AACvD,OAAO,EACL,qBAAqB,EAAE,cAAc,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,cAAc,EAAE,gBAAgB,EAClH,YAAY,GACb,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AACrF,OAAO,EACL,kBAAkB,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,cAAc,EACzG,cAAc,EAAE,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAC1H,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,GAC3G,MAAM,YAAY,CAAA"}

package/build/index.js

@@ -17,7 +17,7 @@ export { assertAmountAllowed, narrowAmountFor, sessionTtlOf } from './plugins/ch
 export * from './consumer/index.js';
 export { makeEstimateCache, estimateStripePrice } from './plugins/estimate.js';
 export { applySubscription, createEventHandler, mapStatus } from './plugins/events.js';
-export { ensureWebhookEndpoint, stripeWebhookSecret, stripeWebhookSecrets, webhookUrlOf, } from './plugins/webhook-manager.js';
-export { ensurePortalConfiguration } from './plugins/portal.js';
-export { activeSubscription, apiVersionOf, billingProfiles, consumerConsents, consumerDeclarations, consumerEvents, consumerRights, consumerRightsOf, entitlements, fingerprints, fulfillments, gateway, observer, paygateCustomers, payment, paymentWebhooks, purchases, stripeClient, stripeConfig, subscriptions, usageCounters, usageEvents, } from './utils.js';
+export { ensureWebhookEndpoint, gatewayOwnerOf, stripeWebhookSecret, stripeWebhookSecrets, webhookRouteOf, webhookServiceOf, webhookUrlOf, } from './plugins/webhook-manager.js';
+export { ensurePortalConfiguration, portalFingerprintSku } from './plugins/portal.js';
+export { activeSubscription, apiVersionOf, billingProfiles, consumerConsents, consumerDeclarations, consumerEvents, consumerRights, consumerRightsOf, entitlements, fingerprints, fulfillments, gateway, gatewayOf, observer, paygateCustomers, payment, paymentWebhooks, purchases, stripeClient, stripeConfig, subscriptions, usageCounters, usageEvents, } from './utils.js';
 //# sourceMappingURL=index.js.map

package/build/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,YAAY,CAAA;AAC1B,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAC7F,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,YAAY,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACvJ,OAAO,EACL,0BAA0B,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,oBAAoB,GACxF,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AACpG,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AACtF,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAClG,cAAc,qBAAqB,CAAA;AACnC,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAE9E,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAEtF,OAAO,EACL,qBAAqB,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,YAAY,GAC/E,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAA;AAC/D,OAAO,EACL,kBAAkB,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,cAAc,EACzG,cAAc,EAAE,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAC/G,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,GAC3G,MAAM,YAAY,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,cAAc,aAAa,CAAA;AAC3B,cAAc,aAAa,CAAA;AAC3B,cAAc,eAAe,CAAA;AAC7B,cAAc,eAAe,CAAA;AAC7B,cAAc,cAAc,CAAA;AAC5B,cAAc,WAAW,CAAA;AACzB,cAAc,YAAY,CAAA;AAC1B,cAAc,kBAAkB,CAAA;AAChC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,kBAAkB,CAAA;AAChC,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,oBAAoB,EAAE,MAAM,WAAW,CAAA;AAC7F,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,aAAa,EAAE,YAAY,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAA;AACvJ,OAAO,EACL,0BAA0B,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,oBAAoB,GACxF,MAAM,mBAAmB,CAAA;AAE1B,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AACpG,OAAO,EAAE,sBAAsB,EAAE,wBAAwB,EAAE,MAAM,qBAAqB,CAAA;AACtF,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AAClG,cAAc,qBAAqB,CAAA;AACnC,OAAO,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAA;AAE9E,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAEtF,OAAO,EACL,qBAAqB,EAAE,cAAc,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,cAAc,EAAE,gBAAgB,EAClH,YAAY,GACb,MAAM,8BAA8B,CAAA;AACrC,OAAO,EAAE,yBAAyB,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAA;AACrF,OAAO,EACL,kBAAkB,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,cAAc,EACzG,cAAc,EAAE,gBAAgB,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,gBAAgB,EAC1H,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,WAAW,GAC3G,MAAM,YAAY,CAAA"}

package/build/plugins/portal.d.ts

@@ -1,7 +1,8 @@
 import type Stripe from 'stripe';
 import type { Context as ApiContext } from '@owlmeans/server-api';
 import type { PortalLinkOptions } from '../types.js';
-export declare const portalFingerprintSku: (service: string) => string;
+/** The fingerprint sku of an owner's portal configuration: `portal:<owner>`. */
+export declare const portalFingerprintSku: (owner: string) => string;
 export interface EnsurePortalOptions {
     force?: boolean;
 }
@@ -10,16 +11,18 @@ export interface EnsurePortalOptions {
  * method self-service, cancellation at period end, and switching between the active recurring
  * prices of every product sold through Stripe (both subscription features off when there are none).
  *
- * A deployment's identity is its webhook URL (`webhookUrlOf`) — also when that URL is undeliverable,
- * as on a local run. Several deployments of one service may share a Stripe account, so each owns a
- * configuration of its own, tagged `{ owlmeans: 'payment', service, deployment: <webhook URL> }`.
+ * A deployment's identity is its webhook URL (`webhookUrlOf`, on the gateway's `webhookService`) —
+ * also when that URL is undeliverable, as on a local run; its fingerprint row and label carry the
+ * gateway's `owner` (`gatewayOwnerOf`). Several deployments of one application may share a Stripe
+ * account, so each owns a configuration of its own, tagged
+ * `{ owlmeans: 'payment', service: <owner>, deployment: <webhook URL> }`.
  *
  * - An unchanged declaration (catalogue, branding, deployment key) makes no paygate call.
- * - The configuration the `portal:<service>` fingerprint row names is updated in place — unless its
- *   metadata tags it for another deployment, which is never overwritten; this deployment then
- *   proceeds as though it held no row.
- * - Without a usable row, an active configuration tagged with exactly this service and deployment
- *   key is adopted. Nothing else is: not an untagged one, not one carrying only the service label,
+ * - The configuration the `portal:<owner>` fingerprint row names is updated in place — unless its
+ *   metadata tags it for another deployment (a moved webhook URL included), which is never
+ *   overwritten; this deployment then proceeds as though it held no row.
+ * - Without a usable row, an active configuration tagged with exactly this owner and deployment
+ *   key is adopted. Nothing else is: not an untagged one, not one carrying only the owner label,
  *   not one tagged for another deployment.
  * - Otherwise a new configuration is created. Stripe cannot delete a portal configuration, so one
  *   this deployment can no longer identify stays in the account, and a lost row creates a new one

package/build/plugins/portal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"portal.d.ts","sourceRoot":"","sources":["../../src/plugins/portal.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAA;AAIhC,OAAO,KAAK,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAUjE,OAAO,KAAK,EAA6C,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAI/F,eAAO,MAAM,oBAAoB,YAAa,MAAM,KAAG,MAA4C,CAAA;AAiCnG,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAoCD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,yBAAyB,QAC/B,UAAU,UAAU,MAAM,SAAQ,mBAAmB,KACzD,OAAO,CAAC,MAAM,GAAG,IAAI,CAkGvB,CAAA;AAUD;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,QACtB,UAAU,UAAU,MAAM,YAAY,MAAM,QAAQ,iBAAiB,KACzE,OAAO,CAAC,MAAM,CA2EhB,CAAA"}
+{"version":3,"file":"portal.d.ts","sourceRoot":"","sources":["../../src/plugins/portal.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAA;AAIhC,OAAO,KAAK,EAAE,OAAO,IAAI,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAUjE,OAAO,KAAK,EAA6C,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAI/F,gFAAgF;AAChF,eAAO,MAAM,oBAAoB,UAAW,MAAM,KAAG,MAA0C,CAAA;AAiC/F,MAAM,WAAW,mBAAmB;IAClC,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AAoCD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,yBAAyB,QAC/B,UAAU,UAAU,MAAM,SAAQ,mBAAmB,KACzD,OAAO,CAAC,MAAM,GAAG,IAAI,CAkGvB,CAAA;AAUD;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,QACtB,UAAU,UAAU,MAAM,YAAY,MAAM,QAAQ,iBAAiB,KACzE,OAAO,CAAC,MAAM,CA2EhB,CAAA"}