@rewind-ai/cli 0.6.2

package/dist/src/commercial/env.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Load local REWIND env (never commit secrets).
+ * Safe to call multiple times; loads once per process.
+ *
+ * Search order (first existing wins; does not override existing process.env):
+ * 1. process.cwd()/.env
+ * 2. ~/.rewind/.env   (preferred for global npm installs)
+ * 3. package-adjacent .env (dev checkout only)
+ */
+export declare function loadRewindEnv(): void;

package/dist/src/commercial/env.js

@@ -0,0 +1,40 @@
+/**
+ * Load local REWIND env (never commit secrets).
+ * Safe to call multiple times; loads once per process.
+ *
+ * Search order (first existing wins; does not override existing process.env):
+ * 1. process.cwd()/.env
+ * 2. ~/.rewind/.env   (preferred for global npm installs)
+ * 3. package-adjacent .env (dev checkout only)
+ */
+import { config } from "dotenv";
+import path from "node:path";
+import { existsSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import os from "node:os";
+let loaded = false;
+export function loadRewindEnv() {
+    if (loaded)
+        return;
+    loaded = true;
+    // Unit tests set process.env explicitly — never pull a developer .env into CI/tests.
+    if (process.env.VITEST === "true" || process.env.REWIND_SKIP_DOTENV === "1") {
+        return;
+    }
+    const here = path.dirname(fileURLToPath(import.meta.url));
+    const candidates = [
+        path.resolve(process.cwd(), ".env"),
+        path.join(os.homedir(), ".rewind", ".env"),
+        path.resolve(here, "../../.env"), // src/commercial → repo root
+        path.resolve(here, "../../../.env"), // dist/src/commercial → repo root
+    ];
+    for (const file of candidates) {
+        if (existsSync(file)) {
+            config({ path: file, override: false });
+            return;
+        }
+    }
+    // process.env may already be set by the shell / CI
+    config({ override: false });
+}
+//# sourceMappingURL=env.js.map

package/dist/src/commercial/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../../../src/commercial/env.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAChC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB,IAAI,MAAM,GAAG,KAAK,CAAC;AAEnB,MAAM,UAAU,aAAa;IAC3B,IAAI,MAAM;QAAE,OAAO;IACnB,MAAM,GAAG,IAAI,CAAC;IAEd,qFAAqF;IACrF,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,KAAK,GAAG,EAAE,CAAC;QAC5E,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC;QAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,YAAY,CAAC,EAAE,6BAA6B;QAC/D,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,eAAe,CAAC,EAAE,kCAAkC;KACxE,CAAC;IAEF,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;QAC9B,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;YACxC,OAAO;QACT,CAAC;IACH,CAAC;IAED,mDAAmD;IACnD,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AAC9B,CAAC"}

package/dist/src/commercial/product.d.ts

@@ -0,0 +1,26 @@
+/**
+ * REWIND Personal — commercial product constants.
+ * Pricing is documented here for humans; never used as authority in Core.
+ * Stripe Price IDs come from environment variables.
+ */
+export declare const PRODUCT_NAME = "REWIND Personal";
+export declare const PRODUCT_POSITIONING = "Undo for AI agents.";
+export declare const LIST_PRICE_GBP_MONTHLY = "2.99";
+export declare const LIST_CURRENCY = "GBP";
+/** Feature matrix — configurable launch limits. */
+export interface PlanFeatures {
+    plan: "free" | "personal" | "development";
+    /** New mediated mutations allowed. */
+    allowNewMediation: boolean;
+    /**
+     * INVARIANT: always true for locally recorded transactions.
+     * Never gate undo of already-captured work on payment.
+     */
+    allowUndoExisting: true;
+    /** Soft limit for free tier (-1 = unlimited). */
+    maxMediatedActionsPerDay: number;
+    label: string;
+}
+export declare const PLAN_MATRIX: Record<PlanFeatures["plan"], PlanFeatures>;
+/** Recommended launch: free demonstrates magic; Personal is unlimited ongoing use. */
+export declare const LAUNCH_NOTES: string[];

package/dist/src/commercial/product.js

@@ -0,0 +1,39 @@
+/**
+ * REWIND Personal — commercial product constants.
+ * Pricing is documented here for humans; never used as authority in Core.
+ * Stripe Price IDs come from environment variables.
+ */
+export const PRODUCT_NAME = "REWIND Personal";
+export const PRODUCT_POSITIONING = "Undo for AI agents.";
+export const LIST_PRICE_GBP_MONTHLY = "2.99";
+export const LIST_CURRENCY = "GBP";
+export const PLAN_MATRIX = {
+    development: {
+        plan: "development",
+        allowNewMediation: true,
+        allowUndoExisting: true,
+        maxMediatedActionsPerDay: -1,
+        label: "Development build",
+    },
+    free: {
+        plan: "free",
+        allowNewMediation: true,
+        allowUndoExisting: true,
+        maxMediatedActionsPerDay: 100,
+        label: "Free / trial",
+    },
+    personal: {
+        plan: "personal",
+        allowNewMediation: true,
+        allowUndoExisting: true,
+        maxMediatedActionsPerDay: -1,
+        label: "REWIND Personal",
+    },
+};
+/** Recommended launch: free demonstrates magic; Personal is unlimited ongoing use. */
+export const LAUNCH_NOTES = [
+    "Free/trial: full mediate → see transaction → undo demonstration (daily soft cap).",
+    "Personal (£2.99/mo): unlimited mediated actions for serious ongoing use.",
+    "CRITICAL: expired/cancelled subscription NEVER blocks undo of already-recorded transactions.",
+];
+//# sourceMappingURL=product.js.map

package/dist/src/commercial/product.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"product.js","sourceRoot":"","sources":["../../../src/commercial/product.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAC9C,MAAM,CAAC,MAAM,mBAAmB,GAAG,qBAAqB,CAAC;AACzD,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC;AAC7C,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,CAAC;AAiBnC,MAAM,CAAC,MAAM,WAAW,GAA+C;IACrE,WAAW,EAAE;QACX,IAAI,EAAE,aAAa;QACnB,iBAAiB,EAAE,IAAI;QACvB,iBAAiB,EAAE,IAAI;QACvB,wBAAwB,EAAE,CAAC,CAAC;QAC5B,KAAK,EAAE,mBAAmB;KAC3B;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,MAAM;QACZ,iBAAiB,EAAE,IAAI;QACvB,iBAAiB,EAAE,IAAI;QACvB,wBAAwB,EAAE,GAAG;QAC7B,KAAK,EAAE,cAAc;KACtB;IACD,QAAQ,EAAE;QACR,IAAI,EAAE,UAAU;QAChB,iBAAiB,EAAE,IAAI;QACvB,iBAAiB,EAAE,IAAI;QACvB,wBAAwB,EAAE,CAAC,CAAC;QAC5B,KAAK,EAAE,iBAAiB;KACzB;CACF,CAAC;AAEF,sFAAsF;AACtF,MAAM,CAAC,MAAM,YAAY,GAAG;IAC1B,mFAAmF;IACnF,0EAA0E;IAC1E,8FAA8F;CAC/F,CAAC"}

package/dist/src/commercial/store.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Local commercial data store (file-based — NOT Postgres).
+ * Holds only identity/billing/entitlement metadata.
+ * NEVER stores project files, before/after contents, or source code.
+ */
+export interface CommercialUser {
+    id: string;
+    email: string;
+    createdAt: string;
+    stripeCustomerId: string | null;
+}
+export interface Installation {
+    id: string;
+    userId: string;
+    hostname: string;
+    platform: string;
+    createdAt: string;
+    lastSeenAt: string;
+}
+export type SubscriptionStatus = "none" | "trialing" | "active" | "past_due" | "canceled" | "unpaid";
+export interface SubscriptionRecord {
+    id: string;
+    userId: string;
+    status: SubscriptionStatus;
+    plan: "free" | "personal";
+    stripeSubscriptionId: string | null;
+    stripePriceId: string | null;
+    currentPeriodEnd: string | null;
+    cancelAtPeriodEnd: boolean;
+    updatedAt: string;
+}
+export interface CommercialStore {
+    users: CommercialUser[];
+    installations: Installation[];
+    subscriptions: SubscriptionRecord[];
+    /** Processed Stripe event ids for idempotency */
+    processedStripeEvents: string[];
+}
+export declare function commercialDataDir(override?: string | undefined): string;
+export declare function loadStore(dir?: string): Promise<CommercialStore>;
+export declare function saveStore(store: CommercialStore, dir?: string): Promise<void>;
+export declare function appendEntitlementEvent(event: Record<string, unknown>, dir?: string): Promise<void>;
+export declare function newId(prefix: string): string;
+export declare function upsertUserByEmail(email: string, dir?: string): Promise<CommercialUser>;
+export declare function registerInstallation(userId: string, dir?: string): Promise<Installation>;
+export declare function getSubscriptionForUser(userId: string, dir?: string): Promise<SubscriptionRecord | null>;

package/dist/src/commercial/store.js

@@ -0,0 +1,104 @@
+/**
+ * Local commercial data store (file-based — NOT Postgres).
+ * Holds only identity/billing/entitlement metadata.
+ * NEVER stores project files, before/after contents, or source code.
+ */
+import path from "node:path";
+import os from "node:os";
+import { mkdir, readFile, writeFile, rename, appendFile } from "node:fs/promises";
+import { randomBytes } from "node:crypto";
+import { getUserRewindDir } from "../paths.js";
+function defaultStore() {
+    return {
+        users: [],
+        installations: [],
+        subscriptions: [],
+        processedStripeEvents: [],
+    };
+}
+export function commercialDataDir(override = process.env.REWIND_COMMERCIAL_DIR) {
+    if (override)
+        return path.resolve(override);
+    return path.join(getUserRewindDir(), "commercial");
+}
+function storePath(dir) {
+    return path.join(dir, "store.json");
+}
+async function writeJsonAtomic(file, data) {
+    await mkdir(path.dirname(file), { recursive: true });
+    const tmp = `${file}.tmp-${process.pid}`;
+    await writeFile(tmp, JSON.stringify(data, null, 2) + "\n", { mode: 0o600 });
+    await rename(tmp, file);
+}
+export async function loadStore(dir = commercialDataDir()) {
+    try {
+        const raw = await readFile(storePath(dir), "utf8");
+        return { ...defaultStore(), ...JSON.parse(raw) };
+    }
+    catch {
+        return defaultStore();
+    }
+}
+export async function saveStore(store, dir = commercialDataDir()) {
+    await writeJsonAtomic(storePath(dir), store);
+}
+export async function appendEntitlementEvent(event, dir = commercialDataDir()) {
+    await mkdir(dir, { recursive: true });
+    await appendFile(path.join(dir, "entitlement_events.jsonl"), JSON.stringify({ ...event, at: new Date().toISOString() }) + "\n", "utf8");
+}
+export function newId(prefix) {
+    return `${prefix}_${randomBytes(8).toString("hex")}`;
+}
+export async function upsertUserByEmail(email, dir = commercialDataDir()) {
+    const store = await loadStore(dir);
+    let user = store.users.find((u) => u.email.toLowerCase() === email.toLowerCase());
+    if (!user) {
+        user = {
+            id: newId("user"),
+            email,
+            createdAt: new Date().toISOString(),
+            stripeCustomerId: null,
+        };
+        store.users.push(user);
+        if (!store.subscriptions.some((s) => s.userId === user.id)) {
+            store.subscriptions.push({
+                id: newId("sub"),
+                userId: user.id,
+                status: "none",
+                plan: "free",
+                stripeSubscriptionId: null,
+                stripePriceId: null,
+                currentPeriodEnd: null,
+                cancelAtPeriodEnd: false,
+                updatedAt: new Date().toISOString(),
+            });
+        }
+        await saveStore(store, dir);
+    }
+    return user;
+}
+export async function registerInstallation(userId, dir = commercialDataDir()) {
+    const store = await loadStore(dir);
+    const existing = store.installations.find((i) => i.userId === userId);
+    if (existing) {
+        existing.lastSeenAt = new Date().toISOString();
+        await saveStore(store, dir);
+        return existing;
+    }
+    const inst = {
+        id: newId("inst"),
+        userId,
+        hostname: os.hostname(),
+        platform: `${os.platform()}-${os.arch()}`,
+        createdAt: new Date().toISOString(),
+        lastSeenAt: new Date().toISOString(),
+    };
+    store.installations.push(inst);
+    await saveStore(store, dir);
+    return inst;
+}
+export async function getSubscriptionForUser(userId, dir = commercialDataDir()) {
+    const store = await loadStore(dir);
+    return store.subscriptions.find((s) => s.userId === userId) ?? null;
+}
+//# sourceMappingURL=store.js.map

package/dist/src/commercial/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/commercial/store.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AA8C/C,SAAS,YAAY;IACnB,OAAO;QACL,KAAK,EAAE,EAAE;QACT,aAAa,EAAE,EAAE;QACjB,aAAa,EAAE,EAAE;QACjB,qBAAqB,EAAE,EAAE;KAC1B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB;IAE5C,IAAI,QAAQ;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,YAAY,CAAC,CAAC;AACrD,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC;AACtC,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,IAAa;IACxD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrD,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC;IACzC,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,GAAG,GAAG,iBAAiB,EAAE;IAEzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACnD,OAAO,EAAE,GAAG,YAAY,EAAE,EAAE,GAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqB,EAAE,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,EAAE,CAAC;IACxB,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,KAAsB,EACtB,GAAG,GAAG,iBAAiB,EAAE;IAEzB,MAAM,eAAe,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,KAA8B,EAC9B,GAAG,GAAG,iBAAiB,EAAE;IAEzB,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,UAAU,CACd,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,0BAA0B,CAAC,EAC1C,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,GAAG,IAAI,EACjE,MAAM,CACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,MAAc;IAClC,OAAO,GAAG,MAAM,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,KAAa,EACb,GAAG,GAAG,iBAAiB,EAAE;IAEzB,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAClF,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,GAAG;YACL,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC;YACjB,KAAK;YACL,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YACnC,gBAAgB,EAAE,IAAI;SACvB,CAAC;QACF,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,IAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YAC5D,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC;gBACvB,EAAE,EAAE,KAAK,CAAC,KAAK,CAAC;gBAChB,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,MAAM;gBACZ,oBAAoB,EAAE,IAAI;gBAC1B,aAAa,EAAE,IAAI;gBACnB,gBAAgB,EAAE,IAAI;gBACtB,iBAAiB,EAAE,KAAK;gBACxB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,CAAC,CAAC;QACL,CAAC;QACD,MAAM,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAc,EACd,GAAG,GAAG,iBAAiB,EAAE;IAEzB,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IACtE,IAAI,QAAQ,EAAE,CAAC;QACb,QAAQ,CAAC,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC/C,MAAM,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,MAAM,IAAI,GAAiB;QACzB,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC;QACjB,MAAM;QACN,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE;QACvB,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE;QACzC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACrC,CAAC;IACF,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,SAAS,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC5B,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,MAAc,EACd,GAAG,GAAG,iBAAiB,EAAE;IAEzB,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IACnC,OAAO,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC;AACtE,CAAC"}

package/dist/src/commercial/stripe/checkout.d.ts

@@ -0,0 +1,104 @@
+/**
+ * Stripe TEST MODE integration.
+ * Secrets via env only — never commit.
+ *
+ * REWIND_STRIPE_SECRET_KEY=sk_test_…
+ * REWIND_STRIPE_WEBHOOK_SECRET=whsec_…
+ * REWIND_STRIPE_PRICE_ID=price_…  (REWIND Personal £2.99 GBP/mo)
+ * REWIND_STRIPE_PUBLISHABLE_KEY=pk_test_…
+ */
+import { type SubscriptionStatus } from "../store.js";
+export interface StripeConfig {
+    secretKey: string | null;
+    webhookSecret: string | null;
+    priceId: string | null;
+    publishableKey: string | null;
+    testMode: boolean;
+}
+/** Minimal Stripe surface used by REWIND (mockable in unit tests). */
+export interface StripeClientLike {
+    customers: {
+        create: (params: {
+            email?: string;
+            metadata?: Record<string, string>;
+        }) => Promise<{
+            id: string;
+        }>;
+    };
+    checkout: {
+        sessions: {
+            create: (params: Record<string, unknown>) => Promise<{
+                id: string;
+                url: string | null;
+            }>;
+        };
+    };
+}
+/** Test-only: inject a mock Stripe client (no network). */
+export declare function setStripeClientForTests(client: StripeClientLike | null): void;
+export declare function loadStripeConfig(): StripeConfig;
+/** True when TEST secret + price are set — real Checkout, not simulated. */
+export declare function isRealStripeTestConfigured(): boolean;
+export declare function assertTestModeOrThrow(): void;
+/** Verify Stripe-Signature header (idempotent-friendly). */
+export declare function verifyStripeWebhookSignature(payload: string, header: string, secret: string, toleranceSec?: number): {
+    ok: boolean;
+    reason?: string;
+};
+export interface CheckoutSessionResult {
+    mode: "test-simulated" | "stripe";
+    url: string | null;
+    sessionId: string;
+    message: string;
+}
+/**
+ * Create checkout. Without Stripe TEST credentials, simulates locally
+ * (activates Personal on confirm) so the product flow is provable offline.
+ * With sk_test_ + price_…, creates a real Stripe Checkout Session.
+ */
+export declare function createCheckoutSession(input: {
+    userId: string;
+    email: string;
+    successUrl: string;
+    cancelUrl: string;
+}): Promise<CheckoutSessionResult>;
+export declare function confirmSimulatedCheckout(userId: string, sessionId: string): Promise<void>;
+export interface ApplyWebhookResult {
+    applied: boolean;
+    duplicate: boolean;
+    userId: string | null;
+    plan: "free" | "personal" | null;
+    status: SubscriptionStatus | null;
+}
+/**
+ * Legacy/test helper: apply a simplified webhook payload.
+ * Prefer applyStripeEvent for real Stripe Event objects.
+ */
+export declare function applyStripeWebhookEvent(eventId: string, type: string, data: {
+    customerId?: string;
+    subscriptionId?: string;
+    status?: string;
+    userId?: string;
+    cancelAtPeriodEnd?: boolean;
+    currentPeriodEnd?: number;
+    priceId?: string;
+}): Promise<ApplyWebhookResult>;
+/** Apply a real Stripe Event object (after signature verification). */
+export declare function applyStripeEvent(event: {
+    id: string;
+    type: string;
+    data: {
+        object: Record<string, unknown>;
+    };
+}): Promise<ApplyWebhookResult>;
+/**
+ * HTTP webhook entry: verify raw body signature, then apply event.
+ * Never log secrets.
+ */
+export declare function handleStripeWebhookHttp(rawBody: string, signatureHeader: string | undefined): Promise<{
+    httpStatus: number;
+    body: Record<string, unknown>;
+}>;
+export declare function billingPortalMessage(): string;
+/** Default local API port (loopback). */
+export declare const LOCAL_API_DEFAULT_PORT = 7429;