@paykit-sdk/polar 1.1.92 → 1.1.96

package/README.md

@@ -27,7 +27,10 @@ import { endpoints } from '@/lib/paykit';
 import { EndpointPath } from '@paykit-sdk/core';
 import { NextRequest, NextResponse } from 'next/server';
 
-export async function POST(request: NextRequest, { params }: { params: { endpoint: string[] } }) {
+export async function POST(
+  request: NextRequest,
+  { params }: { params: { endpoint: string[] } },
+) {
   try {
     // Construct the endpoint path with full type safety
     const endpoint = ('/' + params.endpoint.join('/')) as EndpointPath;
@@ -102,42 +105,46 @@ const app = express();
 
 // IMPORTANT: Webhook route must come BEFORE express.json() middleware
 // This ensures we get the raw body for signature verification
-app.post('/api/webhooks/polar', express.raw({ type: 'application/json' }), async (req, res) => {
-  try {
-    const webhookSecret = process.env.POLAR_WEBHOOK_SECRET;
-
-    if (!webhookSecret) {
-      return res.status(500).json({ error: 'Webhook secret not configured' });
-    }
-
-    const webhook = paykit.webhooks
-      .setup({ webhookSecret })
-      .on('customer.created', async event => {
-        console.log('Customer created:', event.data);
-      })
-      .on('subscription.created', async event => {
-        console.log('Subscription created:', event.data);
-      })
-      .on('payment.created', async event => {
-        console.log('Payment created:', event.data);
-      })
-      .on('refund.created', async event => {
-        console.log('Refund created:', event.data);
+app.post(
+  '/api/webhooks/polar',
+  express.raw({ type: 'application/json' }),
+  async (req, res) => {
+    try {
+      const webhookSecret = process.env.POLAR_WEBHOOK_SECRET;
+
+      if (!webhookSecret) {
+        return res.status(500).json({ error: 'Webhook secret not configured' });
+      }
+
+      const webhook = paykit.webhooks
+        .setup({ webhookSecret })
+        .on('customer.created', async event => {
+          console.log('Customer created:', event.data);
+        })
+        .on('subscription.created', async event => {
+          console.log('Subscription created:', event.data);
+        })
+        .on('payment.created', async event => {
+          console.log('Payment created:', event.data);
+        })
+        .on('refund.created', async event => {
+          console.log('Refund created:', event.data);
+        });
+
+      const body = req.body; // Raw buffer from express.raw()
+      const headers = req.headers;
+      await webhook.handle({ body, headers });
+
+      // Return immediately, processing happens in background
+      res.json({ success: true });
+    } catch (error) {
+      console.error('Webhook error:', error);
+      res.status(500).json({
+        message: error instanceof Error ? error.message : 'Webhook processing failed',
       });
-
-    const body = req.body; // Raw buffer from express.raw()
-    const headers = req.headers;
-    await webhook.handle({ body, headers });
-
-    // Return immediately, processing happens in background
-    res.json({ success: true });
-  } catch (error) {
-    console.error('Webhook error:', error);
-    res.status(500).json({
-      message: error instanceof Error ? error.message : 'Webhook processing failed',
-    });
-  }
-});
+    }
+  },
+);
 
 // Regular API routes use JSON middleware
 app.use(express.json());
@@ -192,4 +199,4 @@ POLAR_WEBHOOK_SECRET=polar_wh_...
 
 ## License
 
-GPL-3.0
+ISC

package/dist/index.js

@@ -4128,7 +4128,7 @@ var paykitPayment$InboundSchema = (checkout) => {
     customer: checkout.customerId ? checkout.customerId : { email: checkout.customerEmail ?? "" },
     status: statusMap[checkout.status],
     metadata: checkout.metadata ?? {},
-    product_id: checkout.products.length > 0 ? checkout.products[0].id : null
+    item_id: checkout.products.length > 0 ? checkout.products[0].id : null
   };
 };
 var mapRefundReason = (debug, reason) => {
@@ -4140,7 +4140,9 @@ var mapRefundReason = (debug, reason) => {
   };
   const mapped = reasonMap[reason.toLowerCase()] ?? "other";
   if (debug && mapped === "other" && !reason.toLowerCase().includes("other")) {
-    console.warn(`[Polar Provider] Unmapped refund reason: "${reason}" -> defaulting to "other"`);
+    console.warn(
+      `[Polar Provider] Unmapped refund reason: "${reason}" -> defaulting to "other"`
+    );
   }
   return mapped;
 };
@@ -4182,8 +4184,9 @@ var PolarProvider = class extends core.AbstractPayKitProvider {
         throw core.ValidationError.fromZodError(error, this.providerName, "createCheckout");
       }
       const { metadata, item_id, provider_metadata } = data;
+      const checkoutMetadata = core.stringifyMetadataValues(metadata ?? {});
       const checkoutCreateOptions = {
-        metadata: Object.fromEntries(Object.entries(metadata ?? {}).map(([key, value]) => [key, JSON.stringify(value)])),
+        metadata: checkoutMetadata,
         products: [item_id],
         ...provider_metadata
       };
@@ -4197,7 +4200,7 @@ var PolarProvider = class extends core.AbstractPayKitProvider {
           state: data.billing.address.state
         };
         checkoutCreateOptions.metadata = {
-          ...metadata,
+          ...checkoutMetadata,
           _shipping_phone: data.billing.address.phone ?? "",
           _shipping_carrier: data.billing.carrier ?? ""
         };
@@ -4215,7 +4218,7 @@ var PolarProvider = class extends core.AbstractPayKitProvider {
         id,
         checkoutUpdate: {
           ...restData,
-          ...metadata && { metadata: Object.fromEntries(Object.entries(metadata).map(([key, value]) => [key, JSON.stringify(value)])) },
+          ...metadata && { metadata: core.stringifyMetadataValues(metadata ?? {}) },
           ...item_id && { products: [item_id] },
           ...provider_metadata
         }
@@ -4248,7 +4251,10 @@ var PolarProvider = class extends core.AbstractPayKitProvider {
       const response = await this.polar.customers.create({
         email,
         name,
-        metadata: { ...metadata, [core.PAYKIT_METADATA_KEY]: JSON.stringify({ phone: data?.phone ?? "" }) }
+        metadata: {
+          ...metadata,
+          [core.PAYKIT_METADATA_KEY]: JSON.stringify({ phone: data?.phone ?? "" })
+        }
       });
       return paykitCustomer$InboundSchema(response);
     };
@@ -4260,7 +4266,12 @@ var PolarProvider = class extends core.AbstractPayKitProvider {
       const { email, name, metadata, provider_metadata } = data;
       const response = await this.polar.customers.update({
         id,
-        customerUpdate: { ...email && { email }, ...name && { name }, ...metadata && { metadata }, ...provider_metadata }
+        customerUpdate: {
+          ...email && { email },
+          ...name && { name },
+          ...metadata && { metadata },
+          ...provider_metadata
+        }
       });
       return paykitCustomer$InboundSchema(response);
     };
@@ -4287,7 +4298,11 @@ var PolarProvider = class extends core.AbstractPayKitProvider {
     this.cancelSubscription = async (id) => {
       const { error } = core.retrieveSubscriptionSchema.safeParse({ id });
       if (error) {
-        throw core.ValidationError.fromZodError(error, this.providerName, "retrieveSubscription");
+        throw core.ValidationError.fromZodError(
+          error,
+          this.providerName,
+          "retrieveSubscription"
+        );
       }
       const subscription = await this.polar.subscriptions.revoke({ id });
       return paykitSubscription$InboundSchema(subscription);
@@ -4295,7 +4310,11 @@ var PolarProvider = class extends core.AbstractPayKitProvider {
     this.retrieveSubscription = async (id) => {
       const { error } = core.retrieveSubscriptionSchema.safeParse({ id });
       if (error) {
-        throw core.ValidationError.fromZodError(error, this.providerName, "retrieveSubscription");
+        throw core.ValidationError.fromZodError(
+          error,
+          this.providerName,
+          "retrieveSubscription"
+        );
       }
       const response = await this.polar.subscriptions.get({ id });
       return paykitSubscription$InboundSchema(response);
@@ -4305,7 +4324,10 @@ var PolarProvider = class extends core.AbstractPayKitProvider {
       if (error) {
         throw core.ValidationError.fromZodError(error, this.providerName, "updateSubscription");
       }
-      const response = await this.polar.subscriptions.update({ id, subscriptionUpdate: { ...data.metadata ?? {} } });
+      const response = await this.polar.subscriptions.update({
+        id,
+        subscriptionUpdate: { ...data.metadata ?? {} }
+      });
       return paykitSubscription$InboundSchema(response);
     };
     this.deleteSubscription = async (id) => {
@@ -4318,17 +4340,20 @@ var PolarProvider = class extends core.AbstractPayKitProvider {
     this.createPayment = async (params) => {
       const { error, data } = core.createPaymentSchema.safeParse(params);
       if (error) {
-        throw core.ValidationError.fromZodError(error, "polar", "createPayment");
+        throw core.ValidationError.fromZodError(error, this.providerName, "createPayment");
       }
-      const metadataCore = Object.fromEntries(Object.entries(data.metadata ?? {}).map(([key, value]) => [key, JSON.stringify(value)]));
+      const paymentMetadata = core.stringifyMetadataValues(data.metadata ?? {});
       const checkoutCreateOptions = {
+        ...data.provider_metadata && { ...data.provider_metadata },
         amount: data.amount,
-        ...typeof data.customer === "string" && { customerId: data.customer },
-        ...typeof data.customer === "object" && { customerEmail: data.customer.email },
-        metadata: metadataCore,
-        products: data.product_id ? [data.product_id] : [],
-        ...data.provider_metadata && { ...data.provider_metadata }
+        metadata: paymentMetadata,
+        products: data.item_id ? [data.item_id] : []
       };
+      if (typeof data.customer === "string") {
+        checkoutCreateOptions.customerId = data.customer;
+      } else if (typeof data.customer === "object") {
+        checkoutCreateOptions.customerEmail = data.customer.email;
+      }
       if (data.billing) {
         checkoutCreateOptions.customerBillingAddress = {
           line1: data.billing.address.line1,
@@ -4339,9 +4364,11 @@ var PolarProvider = class extends core.AbstractPayKitProvider {
           state: data.billing.address.state
         };
         checkoutCreateOptions.metadata = {
-          ...metadataCore,
-          _shipping_phone: data.billing.address.phone ?? "",
-          _shipping_carrier: data.billing.carrier ?? ""
+          ...paymentMetadata,
+          [core.PAYKIT_METADATA_KEY]: JSON.stringify({
+            _shipping_phone: data.billing.address.phone ?? "",
+            _shipping_carrier: data.billing.carrier ?? ""
+          })
         };
       }
       const checkoutResponse = await this.polar.checkouts.create(checkoutCreateOptions);
@@ -4350,16 +4377,16 @@ var PolarProvider = class extends core.AbstractPayKitProvider {
     this.updatePayment = async (id, params) => {
       const { error, data } = core.updatePaymentSchema.safeParse(params);
       if (error) {
-        throw core.ValidationError.fromZodError(error, "polar", "updatePayment");
+        throw core.ValidationError.fromZodError(error, this.providerName, "updatePayment");
       }
       const { provider_metadata, ...rest } = data;
-      const metadata = Object.fromEntries(Object.entries(rest.metadata ?? {}).map(([key, value]) => [key, JSON.stringify(value)]));
+      const paymentMetadata = core.stringifyMetadataValues(rest.metadata ?? {});
       const checkoutResponse = await this.polar.checkouts.update({
         id,
         checkoutUpdate: {
           ...rest,
-          ...rest.metadata && { metadata },
-          ...rest.product_id && { products: [rest.product_id] },
+          ...rest.metadata && { metadata: paymentMetadata },
+          ...rest.item_id && { products: [rest.item_id] },
           ...provider_metadata
         }
       });
@@ -4411,17 +4438,10 @@ var PolarProvider = class extends core.AbstractPayKitProvider {
      */
     this.handleWebhook = async (params) => {
       const { body, headers, webhookSecret } = params;
-      const requiredHeaders = ["webhook-id", "webhook-timestamp", "webhook-signature"];
-      const webhookHeaders = core.headersExtractor(headers, requiredHeaders).reduce(
-        (acc, kv) => {
-          acc[kv.key] = Array.isArray(kv.value) ? kv.value.join(",") : kv.value;
-          return acc;
-        },
-        {}
-      );
-      const { data, type } = webhooks.validateEvent(body, webhookHeaders, webhookSecret);
-      const id = webhookHeaders["webhook-id"];
-      const timestamp = webhookHeaders["webhook-timestamp"];
+      const webhookId = headers.get("webhook-id");
+      const webhookTimestamp = headers.get("webhook-timestamp");
+      const plainHeaders = Object.fromEntries(headers.entries());
+      const { data, type } = webhooks.validateEvent(body, plainHeaders, webhookSecret);
       const webhookHandlers = {
         /**
          * Invoice
@@ -4440,12 +4460,22 @@ var PolarProvider = class extends core.AbstractPayKitProvider {
               currency: data2.currency,
               customer: data2.customerId ? data2.customerId : { email: data2.customer.email ?? "" },
               status: data2.status === "paid" ? "succeeded" : "pending",
-              metadata: Object.fromEntries(Object.entries(metadata ?? {}).map(([key, value]) => [key, JSON.stringify(value)])),
-              product_id: data2.product.id
+              metadata: core.stringifyMetadataValues(metadata ?? {}),
+              item_id: data2.product.id
             };
             return [
-              core.paykitEvent$InboundSchema({ type: "payment.updated", created: parseInt(timestamp), id, data: payment }),
-              core.paykitEvent$InboundSchema({ type: "invoice.generated", created: parseInt(timestamp), id, data: invoice })
+              core.paykitEvent$InboundSchema({
+                type: "payment.updated",
+                created: parseInt(webhookTimestamp),
+                id: webhookId,
+                data: payment
+              }),
+              core.paykitEvent$InboundSchema({
+                type: "invoice.generated",
+                created: parseInt(webhookTimestamp),
+                id: webhookId,
+                data: invoice
+              })
             ];
           }
           return null;
@@ -4464,12 +4494,22 @@ var PolarProvider = class extends core.AbstractPayKitProvider {
               currency: data2.currency,
               customer: data2.customerId ? data2.customerId : { email: data2.customer.email ?? "" },
               status: data2.status === "paid" ? "succeeded" : "pending",
-              metadata: Object.fromEntries(Object.entries(metadata ?? {}).map(([key, value]) => [key, JSON.stringify(value)])),
-              product_id: data2.product.id
+              metadata: core.stringifyMetadataValues(metadata ?? {}),
+              item_id: data2.product.id
             };
             return [
-              core.paykitEvent$InboundSchema({ type: "payment.created", created: parseInt(timestamp), id, data: payment }),
-              core.paykitEvent$InboundSchema({ type: "invoice.generated", created: parseInt(timestamp), id, data: invoice })
+              core.paykitEvent$InboundSchema({
+                type: "payment.created",
+                created: parseInt(webhookTimestamp),
+                id: webhookId,
+                data: payment
+              }),
+              core.paykitEvent$InboundSchema({
+                type: "invoice.generated",
+                created: parseInt(webhookTimestamp),
+                id: webhookId,
+                data: invoice
+              })
             ];
           }
           return null;
@@ -4479,40 +4519,91 @@ var PolarProvider = class extends core.AbstractPayKitProvider {
          */
         "customer.created": (data2) => {
           const customer = paykitCustomer$InboundSchema(data2);
-          return [core.paykitEvent$InboundSchema({ type: "customer.created", created: parseInt(timestamp), id, data: customer })];
+          return [
+            core.paykitEvent$InboundSchema({
+              type: "customer.created",
+              created: parseInt(webhookTimestamp),
+              id: webhookId,
+              data: customer
+            })
+          ];
         },
         "customer.updated": (data2) => {
           const customer = paykitCustomer$InboundSchema(data2);
-          return [core.paykitEvent$InboundSchema({ type: "customer.updated", created: parseInt(timestamp), id, data: customer })];
+          return [
+            core.paykitEvent$InboundSchema({
+              type: "customer.updated",
+              created: parseInt(webhookTimestamp),
+              id: webhookId,
+              data: customer
+            })
+          ];
         },
         "customer.deleted": (data2) => {
           const customer = paykitCustomer$InboundSchema(data2);
-          return [core.paykitEvent$InboundSchema({ type: "customer.deleted", created: parseInt(timestamp), id, data: customer })];
+          return [
+            core.paykitEvent$InboundSchema({
+              type: "customer.deleted",
+              created: parseInt(webhookTimestamp),
+              id: webhookId,
+              data: customer
+            })
+          ];
         },
         /**
          * Subscription
          */
         "subscription.updated": (data2) => {
           const subscription = paykitSubscription$InboundSchema(data2);
-          return [core.paykitEvent$InboundSchema({ type: "subscription.updated", created: parseInt(timestamp), id, data: subscription })];
+          return [
+            core.paykitEvent$InboundSchema({
+              type: "subscription.updated",
+              created: parseInt(webhookTimestamp),
+              id: webhookId,
+              data: subscription
+            })
+          ];
         },
         "subscription.created": (data2) => {
           const subscription = paykitSubscription$InboundSchema(data2);
-          return [core.paykitEvent$InboundSchema({ type: "subscription.created", created: parseInt(timestamp), id, data: subscription })];
+          return [
+            core.paykitEvent$InboundSchema({
+              type: "subscription.created",
+              created: parseInt(webhookTimestamp),
+              id: webhookId,
+              data: subscription
+            })
+          ];
         },
         "subscription.revoked": (data2) => {
           const subscription = paykitSubscription$InboundSchema(data2);
-          return [core.paykitEvent$InboundSchema({ type: "subscription.canceled", created: parseInt(timestamp), id, data: subscription })];
+          return [
+            core.paykitEvent$InboundSchema({
+              type: "subscription.canceled",
+              created: parseInt(webhookTimestamp),
+              id: webhookId,
+              data: subscription
+            })
+          ];
         },
         "refund.created": (data2) => {
           const refund = paykitRefund$InboundSchema(data2);
-          return [core.paykitEvent$InboundSchema({ type: "refund.created", created: parseInt(timestamp), id, data: refund })];
+          return [
+            core.paykitEvent$InboundSchema({
+              type: "refund.created",
+              created: parseInt(webhookTimestamp),
+              id: webhookId,
+              data: refund
+            })
+          ];
         }
       };
       const handler = webhookHandlers[type];
-      if (!handler) throw new Error(`Unhandled event type: ${type} for provider: ${this.providerName}`);
+      if (!handler)
+        throw new Error(`Unhandled event type: ${type} for provider: ${this.providerName}`);
       const results = handler(data);
-      if (!results) throw new Error(`Unhandled event type: ${type} for provider: ${this.providerName}`);
+      if (!results)
+        throw new Error(`Unhandled event type: ${type} for provider: ${this.providerName}`);
       return results;
     };
     const { accessToken, isSandbox, debug = true, ...rest } = config;
@@ -4532,7 +4623,11 @@ var polar = () => {
     process.env,
     "Missing required environment variables: {keys}"
   );
-  return createPolar({ debug: true, accessToken: envVars.POLAR_ACCESS_TOKEN, isSandbox: envVars.POLAR_SANDBOX == "true" });
+  return createPolar({
+    debug: true,
+    accessToken: envVars.POLAR_ACCESS_TOKEN,
+    isSandbox: envVars.POLAR_SANDBOX == "true"
+  });
 };
 
 exports.createPolar = createPolar;