@shdan/submesh 0.1.0 → 1.0.0

package/dist/services/provider-subscription-sync-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-subscription-sync-service.d.ts","sourceRoot":"","sources":["../../src/services/provider-subscription-sync-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGpF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAGpE,wBAAsB,gCAAgC,CACpD,YAAY,EAAE,mBAAmB,EACjC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,YAAY,CAAC,CAgBvB"}
+{"version":3,"file":"provider-subscription-sync-service.d.ts","sourceRoot":"","sources":["../../src/services/provider-subscription-sync-service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAGpF,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,aAAa,EAAc,MAAM,cAAc,CAAC;AAGzD,wBAAsB,gCAAgC,CACpD,YAAY,EAAE,mBAAmB,EACjC,KAAK,EAAE,0BAA0B,EACjC,MAAM,GAAE,aAA0B,GACjC,OAAO,CAAC,YAAY,CAAC,CAsBvB"}

package/dist/services/provider-subscription-sync-service.js

@@ -1,9 +1,15 @@
 import { ConflictError } from "../errors.js";
+import { noopLogger } from "../logger.js";
 import { ingestCanonicalSubscription } from "./canonical-subscription-service.js";
-export async function syncVerifiedProviderSubscription(repositories, input) {
+export async function syncVerifiedProviderSubscription(repositories, input, logger = noopLogger) {
     if (!input.subjectId) {
         throw new Error("Verified provider subscription sync requires subjectId.");
     }
+    logger.info("Syncing verified provider subscription", {
+        subjectId: input.subjectId,
+        pluginKey: input.pluginKey,
+        sourceRef: input.sourceRef,
+    });
     const existing = await repositories.subscriptions.getBySource(input.pluginKey, input.sourceRef);
     if (existing && existing.subjectId !== input.subjectId) {
         throw new ConflictError(`Provider subscription ${input.pluginKey}:${input.sourceRef} is already linked to subject ${existing.subjectId}.`);

package/dist/services/provider-subscription-sync-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-subscription-sync-service.js","sourceRoot":"","sources":["../../src/services/provider-subscription-sync-service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAElF,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,YAAiC,EACjC,KAAiC;IAEjC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,WAAW,CAC3D,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,SAAS,CAChB,CAAC;IACF,IAAI,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QACvD,MAAM,IAAI,aAAa,CACrB,yBAAyB,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,iCAAiC,QAAQ,CAAC,SAAS,GAAG,CAClH,CAAC;IACJ,CAAC;IAED,OAAO,YAAY,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,2BAA2B,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;AAClF,CAAC"}
+{"version":3,"file":"provider-subscription-sync-service.js","sourceRoot":"","sources":["../../src/services/provider-subscription-sync-service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,OAAO,EAAiB,UAAU,EAAE,MAAM,cAAc,CAAC;AACzD,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAElF,MAAM,CAAC,KAAK,UAAU,gCAAgC,CACpD,YAAiC,EACjC,KAAiC,EACjC,SAAwB,UAAU;IAElC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;QACrB,MAAM,IAAI,KAAK,CAAC,yDAAyD,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;QACpD,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;KAC3B,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,aAAa,CAAC,WAAW,CAC3D,KAAK,CAAC,SAAS,EACf,KAAK,CAAC,SAAS,CAChB,CAAC;IACF,IAAI,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,EAAE,CAAC;QACvD,MAAM,IAAI,aAAa,CACrB,yBAAyB,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,iCAAiC,QAAQ,CAAC,SAAS,GAAG,CAClH,CAAC;IACJ,CAAC;IAED,OAAO,YAAY,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,2BAA2B,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;AAClF,CAAC"}

package/dist/services/retry-event-replay.d.ts

@@ -0,0 +1,4 @@
+import type { ParsedWebhookEvent } from "@shdan/submesh-core";
+export declare function extractRetryBody(payload: Record<string, unknown>, eventId: string): unknown;
+export declare function extractRetryParsedEvents(payload: Record<string, unknown>): ParsedWebhookEvent[];
+//# sourceMappingURL=retry-event-replay.d.ts.map

package/dist/services/retry-event-replay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry-event-replay.d.ts","sourceRoot":"","sources":["../../src/services/retry-event-replay.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAqD9D,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAO3F;AAED,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC/B,kBAAkB,EAAE,CAWtB"}

package/dist/services/retry-event-replay.js

@@ -0,0 +1,53 @@
+import { ValidationError } from "../errors.js";
+function asRecord(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        return undefined;
+    }
+    return value;
+}
+function isParsedWebhookEvent(value) {
+    const record = asRecord(value);
+    if (!record) {
+        return false;
+    }
+    return (typeof record.eventKey === "string" &&
+        typeof record.eventType === "string" &&
+        (record.sourceRef === undefined ||
+            record.sourceRef === null ||
+            typeof record.sourceRef === "string") &&
+        Array.isArray(record.records));
+}
+function unwrapStoredPayloadValue(value, eventId) {
+    const record = asRecord(value);
+    if (!record) {
+        return value;
+    }
+    if (record._truncated) {
+        throw new ValidationError(`Event ${eventId} payload was truncated and cannot be replayed automatically. Request a fresh webhook delivery.`);
+    }
+    if (record._unserializable) {
+        throw new ValidationError(`Event ${eventId} payload was not serializable and cannot be replayed automatically.`);
+    }
+    if (Object.prototype.hasOwnProperty.call(record, "value")) {
+        return record.value;
+    }
+    return record;
+}
+export function extractRetryBody(payload, eventId) {
+    const request = asRecord(payload.request);
+    if (request) {
+        return unwrapStoredPayloadValue(request, eventId);
+    }
+    return unwrapStoredPayloadValue(payload, eventId);
+}
+export function extractRetryParsedEvents(payload) {
+    if (!Object.prototype.hasOwnProperty.call(payload, "parsedEvent")) {
+        return [];
+    }
+    const parsed = asRecord(payload.parsedEvent);
+    if (!parsed || parsed._truncated || parsed._unserializable) {
+        return [];
+    }
+    return isParsedWebhookEvent(parsed) ? [parsed] : [];
+}
+//# sourceMappingURL=retry-event-replay.js.map

package/dist/services/retry-event-replay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry-event-replay.js","sourceRoot":"","sources":["../../src/services/retry-event-replay.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,SAAS,QAAQ,CAAC,KAAc;IAC9B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,CACL,OAAO,MAAM,CAAC,QAAQ,KAAK,QAAQ;QACnC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ;QACpC,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS;YAC7B,MAAM,CAAC,SAAS,KAAK,IAAI;YACzB,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC;QACvC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAC9B,CAAC;AACJ,CAAC;AAED,SAAS,wBAAwB,CAAC,KAAc,EAAE,OAAe;IAC/D,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC/B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,MAAM,CAAC,UAAU,EAAE,CAAC;QACtB,MAAM,IAAI,eAAe,CACvB,SAAS,OAAO,gGAAgG,CACjH,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAC3B,MAAM,IAAI,eAAe,CACvB,SAAS,OAAO,qEAAqE,CACtF,CAAC;IACJ,CAAC;IAED,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QAC1D,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAAgC,EAAE,OAAe;IAChF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,OAAO,EAAE,CAAC;QACZ,OAAO,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACpD,CAAC;IAED,OAAO,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;AACpD,CAAC;AAED,MAAM,UAAU,wBAAwB,CACtC,OAAgC;IAEhC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,EAAE,CAAC;QAClE,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,eAAe,EAAE,CAAC;QAC3D,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtD,CAAC"}

package/dist/services/webhook-ingestion-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"webhook-ingestion-service.d.ts","sourceRoot":"","sources":["../../src/services/webhook-ingestion-service.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEjF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EAAiB,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEnF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,UAAU,uBAAuB;IAC/B,YAAY,EAAE,mBAAmB,CAAC;IAClC,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,aAAa,CAAC;IACtB,KAAK,EAAE,YAAY,CAAC;CACrB;AAyFD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,uBAAuB,EAChC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,EACtD,aAAa,GAAE,oBAAyB,GACvC,OAAO,CAAC,mBAAmB,CAAC,CAuG9B"}
+{"version":3,"file":"webhook-ingestion-service.d.ts","sourceRoot":"","sources":["../../src/services/webhook-ingestion-service.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEjF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AACpE,OAAO,KAAK,EAAiB,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAEnF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,UAAU,uBAAuB;IAC/B,YAAY,EAAE,mBAAmB,CAAC;IAClC,cAAc,EAAE,cAAc,CAAC;IAC/B,MAAM,EAAE,aAAa,CAAC;IACtB,KAAK,EAAE,YAAY,CAAC;CACrB;AAmGD,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,uBAAuB,EAChC,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,EACtD,aAAa,GAAE,oBAAyB,GACvC,OAAO,CAAC,mBAAmB,CAAC,CAkH9B"}

package/dist/services/webhook-ingestion-service.js

@@ -39,6 +39,12 @@ function toStoredErrorMessage(error) {
     const message = error instanceof Error ? error.message : "Unknown webhook ingestion error.";
     return truncate(message, MAX_STORED_ERROR_MESSAGE_LENGTH);
 }
+function toPersistedEventEnvelope(requestBody, event) {
+    return {
+        request: toPersistedPayload(requestBody),
+        parsedEvent: toPersistedPayload(event),
+    };
+}
 async function processParsedEvent(options, event, records) {
     const transitions = [];
     const subscriptions = await options.repositories.transaction(async (tx) => {
@@ -83,26 +89,36 @@ export async function ingestWebhookEvent(options, pluginKey, body, headers, inge
         receivedAt,
         rawBody: ingestOptions.rawBody,
     };
-    if (plugin.verifyWebhook) {
+    if (ingestOptions.skipVerification) {
+        options.logger.warn("Webhook verification skipped for ingestion request", {
+            pluginKey,
+        });
+    }
+    else if (plugin.verifyWebhook) {
         const verification = await plugin.verifyWebhook(envelope, { config });
         if (!verification.verified) {
             throw new ValidationError(`Webhook verification failed for ${pluginKey}.`);
         }
     }
-    const parsed = await plugin.parseWebhook({
-        ...envelope,
-    });
-    const events = Array.isArray(parsed) ? parsed : [parsed];
+    const events = ingestOptions.parsedEventsOverride
+        ? ingestOptions.parsedEventsOverride
+        : (() => {
+            const parsed = plugin.parseWebhook({
+                ...envelope,
+            });
+            return Promise.resolve(parsed).then((value) => Array.isArray(value) ? value : [value]);
+        })();
+    const parsedEvents = await events;
     const subscriptions = [];
     let processedEvents = 0;
     let duplicateEvents = 0;
-    for (const event of events) {
+    for (const event of parsedEvents) {
         const received = await options.repositories.inboundEvents.markReceived({
             pluginKey,
             eventKey: event.eventKey,
             eventType: event.eventType,
             sourceRef: event.sourceRef,
-            payload: toPersistedPayload(body),
+            payload: toPersistedEventEnvelope(body, event),
         });
         if (!received.claimed) {
             duplicateEvents += 1;

package/dist/services/webhook-ingestion-service.js.map

@@ -1 +1 @@
-{"version":3,"file":"webhook-ingestion-service.js","sourceRoot":"","sources":["../../src/services/webhook-ingestion-service.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAG/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAWlF,MAAM,wBAAwB,GAAG,GAAG,GAAG,IAAI,CAAC;AAC5C,MAAM,qBAAqB,GAAG,IAAI,CAAC;AACnC,MAAM,+BAA+B,GAAG,IAAI,CAAC;AAE7C,SAAS,QAAQ,CAAC,KAAa,EAAE,SAAiB;IAChD,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,gBAAgB,CAAC;AACtD,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAa;IACvC,MAAM,OAAO,GACX,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACtD,CAAC,CAAE,IAAgC;QACnC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAEtB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,IAAI,IAAI,wBAAwB,EAAE,CAAC;YACrC,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,kBAAkB,EAAE,IAAI;YACxB,OAAO,EAAE,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;SACrD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,eAAe,EAAE,IAAI;YACrB,SAAS,EAAE,OAAO,IAAI;SACvB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kCAAkC,CAAC;IAC9E,OAAO,QAAQ,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAC;AAC5D,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,OAAgC,EAChC,KAAmB,EACnB,OAAqC;IAErC,MAAM,WAAW,GAAqD,EAAE,CAAC;IAEzE,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACxE,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,WAAW,CACjD,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB,CAAC;YACF,MAAM,cAAc,GAAG,QAAQ,EAAE,MAAM,IAAI,IAAI,CAAC;YAEhD,MAAM,GAAG,GAAG,MAAM,2BAA2B,CAAC,EAAmB,EAAE,MAAM,CAAC,CAAC;YAC3E,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAElB,IAAI,cAAc,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;gBAClC,WAAW,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAEvF,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,CAAC;YACxC,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CACjF,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAgC,EAChC,SAAiB,EACjB,IAAa,EACb,OAAsD,EACtD,gBAAsC,EAAE;IAExC,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,eAAe,CAAC,UAAU,SAAS,qBAAqB,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;IAC5E,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IAChF,IAAI,SAAS,KAAK,QAAQ,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;QACrD,MAAM,IAAI,eAAe,CAAC,UAAU,SAAS,mCAAmC,CAAC,CAAC;IACpF,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,IAAI,eAAe,CAAC,UAAU,SAAS,sCAAsC,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAG,YAAY,EAAE,MAAM,IAAI,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG;QACf,IAAI;QACJ,OAAO;QACP,UAAU;QACV,OAAO,EAAE,aAAa,CAAC,OAAO;KACC,CAAC;IAElC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,eAAe,CAAC,mCAAmC,SAAS,GAAG,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC;QACvC,GAAG,QAAQ;KACZ,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAEzD,MAAM,aAAa,GAAmB,EAAE,CAAC;IACzC,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,eAAe,GAAG,CAAC,CAAC;IAExB,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,YAAY,CAAC;YACrE,SAAS;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,kBAAkB,CAAC,IAAI,CAAC;SAClC,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,eAAe,IAAI,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC;QAEpC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YACtE,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/E,aAAa,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;YAC/B,eAAe,IAAI,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAC5C,MAAM,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAE9E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBACzD,OAAO,EAAE,YAAY,CAAC,EAAE;gBACxB,KAAK;aACN,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;gBAClC,MAAM,OAAO,CAAC,OAAO,CACnB,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,CAC9D,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CACpE,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG;QACb,eAAe;QACf,eAAe;QACf,aAAa;KACd,CAAC;IAEF,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;QACjD,SAAS;QACT,eAAe;QACf,eAAe;KAChB,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;QACrC,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAC9E,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAC9E,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"webhook-ingestion-service.js","sourceRoot":"","sources":["../../src/services/webhook-ingestion-service.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAG/C,OAAO,EAAE,2BAA2B,EAAE,MAAM,qCAAqC,CAAC;AAWlF,MAAM,wBAAwB,GAAG,GAAG,GAAG,IAAI,CAAC;AAC5C,MAAM,qBAAqB,GAAG,IAAI,CAAC;AACnC,MAAM,+BAA+B,GAAG,IAAI,CAAC;AAE7C,SAAS,QAAQ,CAAC,KAAa,EAAE,SAAiB;IAChD,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC;QAC9B,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,gBAAgB,CAAC;AACtD,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAa;IACvC,MAAM,OAAO,GACX,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QACtD,CAAC,CAAE,IAAgC;QACnC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAEtB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACnD,IAAI,IAAI,IAAI,wBAAwB,EAAE,CAAC;YACrC,OAAO,OAAO,CAAC;QACjB,CAAC;QAED,OAAO;YACL,UAAU,EAAE,IAAI;YAChB,kBAAkB,EAAE,IAAI;YACxB,OAAO,EAAE,QAAQ,CAAC,UAAU,EAAE,qBAAqB,CAAC;SACrD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,eAAe,EAAE,IAAI;YACrB,SAAS,EAAE,OAAO,IAAI;SACvB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,MAAM,OAAO,GACX,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,kCAAkC,CAAC;IAC9E,OAAO,QAAQ,CAAC,OAAO,EAAE,+BAA+B,CAAC,CAAC;AAC5D,CAAC;AAED,SAAS,wBAAwB,CAC/B,WAAoB,EACpB,KAAyB;IAEzB,OAAO;QACL,OAAO,EAAE,kBAAkB,CAAC,WAAW,CAAC;QACxC,WAAW,EAAE,kBAAkB,CAAC,KAAK,CAAC;KACvC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,OAAgC,EAChC,KAAmB,EACnB,OAAqC;IAErC,MAAM,WAAW,GAAqD,EAAE,CAAC;IAEzE,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACxE,MAAM,OAAO,GAAmB,EAAE,CAAC;QACnC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,aAAa,CAAC,WAAW,CACjD,MAAM,CAAC,SAAS,EAChB,MAAM,CAAC,SAAS,CACjB,CAAC;YACF,MAAM,cAAc,GAAG,QAAQ,EAAE,MAAM,IAAI,IAAI,CAAC;YAEhD,MAAM,GAAG,GAAG,MAAM,2BAA2B,CAAC,EAAmB,EAAE,MAAM,CAAC,CAAC;YAC3E,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAElB,IAAI,cAAc,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;gBAClC,WAAW,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,cAAc,EAAE,CAAC,CAAC;YACtD,CAAC;QACH,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAEvF,KAAK,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,KAAK,CAAC,qBAAqB,EAAE,CAAC;YACxC,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CACjF,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CACjF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,OAAgC,EAChC,SAAiB,EACjB,IAAa,EACb,OAAsD,EACtD,gBAAsC,EAAE;IAExC,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACrD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,eAAe,CAAC,UAAU,SAAS,qBAAqB,CAAC,CAAC;IACtE,CAAC;IAED,MAAM,aAAa,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;IAC5E,MAAM,YAAY,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;IAChF,IAAI,SAAS,KAAK,QAAQ,IAAI,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;QACrD,MAAM,IAAI,eAAe,CAAC,UAAU,SAAS,mCAAmC,CAAC,CAAC;IACpF,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC;QACzB,MAAM,IAAI,eAAe,CAAC,UAAU,SAAS,sCAAsC,CAAC,CAAC;IACvF,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,MAAM,GAAG,YAAY,EAAE,MAAM,IAAI,EAAE,CAAC;IAC1C,MAAM,QAAQ,GAAG;QACf,IAAI;QACJ,OAAO;QACP,UAAU;QACV,OAAO,EAAE,aAAa,CAAC,OAAO;KACC,CAAC;IAElC,IAAI,aAAa,CAAC,gBAAgB,EAAE,CAAC;QACnC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,oDAAoD,EAAE;YACxE,SAAS;SACV,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QAChC,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;YAC3B,MAAM,IAAI,eAAe,CAAC,mCAAmC,SAAS,GAAG,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,aAAa,CAAC,oBAAoB;QAC/C,CAAC,CAAC,aAAa,CAAC,oBAAoB;QACpC,CAAC,CAAC,CAAC,GAAG,EAAE;YACJ,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC;gBACjC,GAAG,QAAQ;aACZ,CAAC,CAAC;YACH,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAC5C,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CACvC,CAAC;QACJ,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC;IAElC,MAAM,aAAa,GAAmB,EAAE,CAAC;IACzC,IAAI,eAAe,GAAG,CAAC,CAAC;IACxB,IAAI,eAAe,GAAG,CAAC,CAAC;IAExB,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,YAAY,CAAC;YACrE,SAAS;YACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,OAAO,EAAE,wBAAwB,CAAC,IAAI,EAAE,KAAK,CAAC;SAC/C,CAAC,CAAC;QAEH,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;YACtB,eAAe,IAAI,CAAC,CAAC;YACrB,SAAS;QACX,CAAC;QAED,MAAM,YAAY,GAAG,QAAQ,CAAC,KAAK,CAAC;QAEpC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/B,MAAM,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;YACtE,SAAS;QACX,CAAC;QAED,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,OAAO,EAAE,YAAY,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/E,aAAa,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,CAAC;YAC/B,eAAe,IAAI,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;YAC5C,MAAM,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAE9E,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBACzD,OAAO,EAAE,YAAY,CAAC,EAAE;gBACxB,KAAK;aACN,CAAC,CAAC;YACH,IAAI,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;gBAClC,MAAM,OAAO,CAAC,OAAO,CACnB,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,SAAS,EAAE,YAAY,EAAE,KAAK,CAAC,CAC9D,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CACZ,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CACpE,CAAC;YACJ,CAAC;YACD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG;QACb,eAAe;QACf,eAAe;QACf,aAAa;KACd,CAAC;IAEF,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;QACjD,SAAS;QACT,eAAe;QACf,eAAe;KAChB,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,KAAK,CAAC,kBAAkB,EAAE,CAAC;QACrC,MAAM,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAC9E,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAC9E,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/submesh.d.ts

@@ -1,5 +1,5 @@
 import { EntitlementEvaluationOptions, SubscriptionPlugin, type AccessDecision, type CanonicalSubscriptionInput, type CatalogMapping, type DashboardSummary, type InboundEvent, type Plan, type PluginInstallation, type Subject, type Subscription, type SubscriptionWithPlan } from "@shdan/submesh-core";
-import type { CreateManagedSubscriptionInput, CreatePlanInput, IngestWebhookOptions, IngestWebhookResult, InstallPluginInput, LinkProviderIdentityInput, PluginListItem, SyncAppleAppStoreSubscriptionInput, SyncGooglePlaySubscriptionInput, SubmeshOptions, SyncedProviderSubscription, UpsertCatalogMappingInput, UpsertSubjectInput, VerifyAppleAppStoreSubscriptionInput, VerifyGooglePlaySubscriptionInput, UpdatePlanInput, UpdateSubscriptionInput, CancelSubscriptionOptions, VerifiedProviderSubscription } from "./contracts.js";
+import type { CreateManagedSubscriptionInput, CreatePlanInput, IngestWebhookOptions, IngestWebhookResult, InstallPluginInput, LinkProviderIdentityInput, PluginListItem, SyncAppleAppStoreSubscriptionInput, SyncGooglePlaySubscriptionInput, SyncStripeSubscriptionInput, SubmeshOptions, SyncedProviderSubscription, UpsertCatalogMappingInput, UpsertSubjectInput, VerifyAppleAppStoreSubscriptionInput, VerifyGooglePlaySubscriptionInput, VerifyStripeSubscriptionInput, UpdatePlanInput, UpdateSubscriptionInput, CancelSubscriptionOptions, VerifiedProviderSubscription } from "./contracts.js";
 /**
  * Main Submesh SDK client.
  *
@@ -241,6 +241,20 @@ export declare class Submesh {
      * @returns Verified data plus the synchronized subscription record.
      */
     syncGooglePlaySubscription(input: SyncGooglePlaySubscriptionInput): Promise<SyncedProviderSubscription>;
+    /**
+     * Verifies a Stripe subscription and returns canonical data.
+     *
+     * @param input Stripe verification payload.
+     * @returns Verified provider response with canonical subscription data.
+     */
+    verifyStripeSubscription(input: VerifyStripeSubscriptionInput): Promise<VerifiedProviderSubscription>;
+    /**
+     * Verifies and syncs a Stripe subscription.
+     *
+     * @param input Stripe verification payload plus target subject.
+     * @returns Verified data plus the synchronized subscription record.
+     */
+    syncStripeSubscription(input: SyncStripeSubscriptionInput): Promise<SyncedProviderSubscription>;
     /**
      * Verifies an Apple App Store transaction and returns canonical data.
      *

package/dist/submesh.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"submesh.d.ts","sourceRoot":"","sources":["../src/submesh.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAE5B,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,0BAA0B,EAC/B,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,IAAI,EACT,KAAK,kBAAkB,EACvB,KAAK,OAAO,EACZ,KAAK,YAAY,EACjB,KAAK,oBAAoB,EAC1B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EACV,8BAA8B,EAC9B,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,yBAAyB,EACzB,cAAc,EACd,kCAAkC,EAClC,+BAA+B,EAC/B,cAAc,EACd,0BAA0B,EAC1B,yBAAyB,EACzB,kBAAkB,EAClB,oCAAoC,EACpC,iCAAiC,EACjC,eAAe,EACf,uBAAuB,EACvB,yBAAyB,EACzB,4BAA4B,EAC7B,MAAM,gBAAgB,CAAC;AAmBxB;;;;;GAKG;AACH,qBAAa,OAAO;IAClB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IACnD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwB;IACvD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgB;IACtC,OAAO,CAAC,UAAU,CAAU;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;YAEvB,WAAW;YAWX,eAAe;IAM7B;;;;;;;OAOG;gBACS,OAAO,GAAE,cAAmB;IAmDxC;;;;OAIG;IACH,cAAc,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI;IAIhD;;;;;OAKG;IACG,aAAa,CAAC,CAAC,SAAS,MAAM,EAClC,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAC3B,OAAO,CAAC,kBAAkB,CAAC;IAK9B;;;;OAIG;IACG,WAAW,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAK9C;;;;OAIG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAcrD;;;;OAIG;IACG,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAKxC;;;;;OAKG;IACG,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC;IAMhE;;;;;OAKG;IACG,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;IAM1D;;;;;OAKG;IACG,oBAAoB,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC;IAS3E;;;;OAIG;IACG,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAKlC;;;;;OAKG;IACG,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAYvD;;;;;;OAMG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAUrE;;;;OAIG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS7C;;;;OAIG;IACG,mBAAmB,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAKtD;;;;;OAKG;IACG,oBAAoB,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,cAAc,CAAC;IAarF;;;;;OAKG;IACG,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC,IAAI,CAAC;IAehB;;;;OAIG;IACG,iBAAiB,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAK1D;;;;OAIG;IACG,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;IAM5E;;;;OAIG;IACG,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAMpF;;;;;OAKG;IACG,kBAAkB,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,YAAY,CAAC;IActF;;;;;OAKG;IACG,kBAAkB,CACtB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,YAAY,CAAC;IAgCxB;;;;;OAKG;IACG,kBAAkB,CACtB,EAAE,EAAE,MAAM,EACV,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,YAAY,CAAC;IAOxB;;;;;;OAMG;IACG,SAAS,CACb,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,4BAAiC,GACzC,OAAO,CAAC,cAAc,CAAC;IAmB1B;;;;;OAKG;IACG,gBAAgB,CACpB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,4BAAiC,GACzC,OAAO,CAAC,MAAM,EAAE,CAAC;IAQpB;;;;OAIG;IACG,UAAU,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAK7C;;;;;OAKG;IACG,UAAU,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAKrD;;;;OAIG;IACG,gBAAgB,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAK3D;;;;OAIG;IACG,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAoC/D;;;;;OAKG;IACG,oBAAoB,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,YAAY,CAAC;IAKpF;;;;;;;;OAQG;IACG,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,OAAO,EACb,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAM,EAC3D,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,mBAAmB,CAAC;IAiB/B;;;;;;OAMG;IACH,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC;IAoC5E;;;;;OAKG;IACG,4BAA4B,CAChC,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,4BAA4B,CAAC;IAKxC;;;;;OAKG;IACG,0BAA0B,CAC9B,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,0BAA0B,CAAC;IAetC;;;;;OAKG;IACG,+BAA+B,CACnC,KAAK,EAAE,oCAAoC,GAC1C,OAAO,CAAC,4BAA4B,CAAC;IAQxC;;;;;OAKG;IACG,6BAA6B,CACjC,KAAK,EAAE,kCAAkC,GACxC,OAAO,CAAC,0BAA0B,CAAC;IAetC;;;;OAIG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAe7B"}
+{"version":3,"file":"submesh.d.ts","sourceRoot":"","sources":["../src/submesh.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAE5B,kBAAkB,EAClB,KAAK,cAAc,EACnB,KAAK,0BAA0B,EAC/B,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,YAAY,EACjB,KAAK,IAAI,EACT,KAAK,kBAAkB,EACvB,KAAK,OAAO,EACZ,KAAK,YAAY,EACjB,KAAK,oBAAoB,EAC1B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,KAAK,EACV,8BAA8B,EAC9B,eAAe,EACf,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,yBAAyB,EACzB,cAAc,EACd,kCAAkC,EAClC,+BAA+B,EAC/B,2BAA2B,EAC3B,cAAc,EACd,0BAA0B,EAC1B,yBAAyB,EACzB,kBAAkB,EAClB,oCAAoC,EACpC,iCAAiC,EACjC,6BAA6B,EAC7B,eAAe,EACf,uBAAuB,EACvB,yBAAyB,EACzB,4BAA4B,EAC7B,MAAM,gBAAgB,CAAC;AAiCxB;;;;;GAKG;AACH,qBAAa,OAAO;IAClB,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAsB;IACnD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAwB;IACvD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAgB;IACtC,OAAO,CAAC,UAAU,CAAU;IAC5B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAgB;IACvC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAe;YAEvB,WAAW;YAWX,eAAe;IAM7B;;;;;;;OAOG;gBACS,OAAO,GAAE,cAAmB;IAyDxC;;;;OAIG;IACH,cAAc,CAAC,MAAM,EAAE,kBAAkB,GAAG,IAAI;IAIhD;;;;;OAKG;IACG,aAAa,CAAC,CAAC,SAAS,MAAM,EAClC,KAAK,EAAE,kBAAkB,CAAC,CAAC,CAAC,GAC3B,OAAO,CAAC,kBAAkB,CAAC;IAO9B;;;;OAIG;IACG,WAAW,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAK9C;;;;OAIG;IACG,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAerD;;;;OAIG;IACG,YAAY,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IAKxC;;;;;OAKG;IACG,aAAa,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC;IAShE;;;;;OAKG;IACG,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC;IAS1D;;;;;OAKG;IACG,oBAAoB,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC;IAiB3E;;;;OAIG;IACG,SAAS,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;IAKlC;;;;;OAKG;IACG,UAAU,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAavD;;;;;;OAMG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC;IAYrE;;;;OAIG;IACG,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAW7C;;;;OAIG;IACG,mBAAmB,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAKtD;;;;;OAKG;IACG,oBAAoB,CAAC,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,cAAc,CAAC;IAqBrF;;;;;OAKG;IACG,oBAAoB,CACxB,SAAS,EAAE,MAAM,EACjB,iBAAiB,EAAE,MAAM,GACxB,OAAO,CAAC,IAAI,CAAC;IAkBhB;;;;OAIG;IACG,iBAAiB,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAK1D;;;;OAIG;IACG,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;IAS5E;;;;OAIG;IACG,0BAA0B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAOpF;;;;;OAKG;IACG,kBAAkB,CAAC,KAAK,EAAE,8BAA8B,GAAG,OAAO,CAAC,YAAY,CAAC;IAgBtF;;;;;OAKG;IACG,kBAAkB,CACtB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,YAAY,CAAC;IAiCxB;;;;;OAKG;IACG,kBAAkB,CACtB,EAAE,EAAE,MAAM,EACV,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,YAAY,CAAC;IAgBxB;;;;;;OAMG;IACG,SAAS,CACb,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,4BAAiC,GACzC,OAAO,CAAC,cAAc,CAAC;IAqB1B;;;;;OAKG;IACG,gBAAgB,CACpB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,4BAAiC,GACzC,OAAO,CAAC,MAAM,EAAE,CAAC;IASpB;;;;OAIG;IACG,UAAU,IAAI,OAAO,CAAC,gBAAgB,CAAC;IAK7C;;;;;OAKG;IACG,UAAU,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAKrD;;;;OAIG;IACG,gBAAgB,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;IAK3D;;;;OAIG;IACG,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAgC/D;;;;;OAKG;IACG,oBAAoB,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,YAAY,CAAC;IAWpF;;;;;;;;OAQG;IACG,aAAa,CACjB,SAAS,EAAE,MAAM,EACjB,IAAI,EAAE,OAAO,EACb,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAM,EAC3D,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,mBAAmB,CAAC;IAkB/B;;;;;;OAMG;IACH,oBAAoB,CAAC,SAAS,EAAE,MAAM,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC;IAqC5E;;;;;OAKG;IACG,4BAA4B,CAChC,KAAK,EAAE,iCAAiC,GACvC,OAAO,CAAC,4BAA4B,CAAC;IAKxC;;;;;OAKG;IACG,0BAA0B,CAC9B,KAAK,EAAE,+BAA+B,GACrC,OAAO,CAAC,0BAA0B,CAAC;IAmBtC;;;;;OAKG;IACG,wBAAwB,CAC5B,KAAK,EAAE,6BAA6B,GACnC,OAAO,CAAC,4BAA4B,CAAC;IAKxC;;;;;OAKG;IACG,sBAAsB,CAC1B,KAAK,EAAE,2BAA2B,GACjC,OAAO,CAAC,0BAA0B,CAAC;IAmBtC;;;;;OAKG;IACG,+BAA+B,CACnC,KAAK,EAAE,oCAAoC,GAC1C,OAAO,CAAC,4BAA4B,CAAC;IAQxC;;;;;OAKG;IACG,6BAA6B,CACjC,KAAK,EAAE,kCAAkC,GACxC,OAAO,CAAC,0BAA0B,CAAC;IAmBtC;;;;OAIG;IACG,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAe7B"}

package/dist/submesh.js

@@ -2,7 +2,7 @@ import { evaluateEntitlementAccess, } from "@shdan/submesh-core";
 import { collectGrantedEntitlements } from "@shdan/submesh-core";
 import { ConflictError, NotFoundError, ValidationError } from "./errors.js";
 import { DrizzleSubmeshRepositories } from "./drizzle/index.js";
-import { noopLogger } from "./logger.js";
+import { noopLogger, ConsoleLogger } from "./logger.js";
 import { getBuiltinPlugins } from "./plugins/builtin-plugins.js";
 import { PluginRegistry } from "./plugins/plugin-registry.js";
 import { ingestCanonicalSubscription } from "./services/canonical-subscription-service.js";
@@ -11,9 +11,11 @@ import { createManagedSubscription } from "./services/managed-subscription-servi
 import { verifyGooglePlaySubscription } from "./providers/google/services/play-subscription-verification-service.js";
 import { createPlanWithProvisioning } from "./services/plan-provisioning-service.js";
 import { installPlugin } from "./services/plugin-installation-service.js";
+import { extractRetryBody, extractRetryParsedEvents, } from "./services/retry-event-replay.js";
 import { syncVerifiedProviderSubscription } from "./services/provider-subscription-sync-service.js";
 import { ingestWebhookEvent } from "./services/webhook-ingestion-service.js";
-import { requireString } from "./utils/validation.js";
+import { verifyStripeSubscription } from "./providers/stripe/services/stripe-subscription-verification-service.js";
+import { assertMaxLength, MAX_ENTITLEMENT_LENGTH, MAX_EVENT_ID_LENGTH, MAX_EXTERNAL_ID_LENGTH, MAX_PLAN_CODE_LENGTH, MAX_PROVIDER_KEY_LENGTH, MAX_SUBJECT_ID_LENGTH, requireString, } from "./utils/validation.js";
 /**
  * Main Submesh SDK client.
  *
@@ -64,7 +66,15 @@ export class Submesh {
         else {
             throw new ValidationError("Provide repositories, drizzle options, or a Postgres connectionString / DATABASE_URL.");
         }
-        this.logger = options.logger ?? noopLogger;
+        if (options.logger) {
+            this.logger = options.logger;
+        }
+        else if (process.env.NODE_ENV === "development") {
+            this.logger = new ConsoleLogger();
+        }
+        else {
+            this.logger = noopLogger;
+        }
         this.hooks = options.hooks ?? {};
         if (options.autoRegisterBuiltinPlugins !== false) {
             for (const plugin of getBuiltinPlugins()) {
@@ -106,7 +116,9 @@ export class Submesh {
      */
     async installPlugin(input) {
         await this.ensureReady();
-        return installPlugin(this.repositories, this.pluginRegistry, input);
+        const result = await installPlugin(this.repositories, this.pluginRegistry, input);
+        this.logger.info("Plugin installed", { pluginKey: input.pluginKey });
+        return result;
     }
     /**
      * Returns registered plugins with their current installation state.
@@ -133,6 +145,7 @@ export class Submesh {
             displayName: plugin.displayName,
             enabled: false,
         });
+        this.logger.info("Plugin disabled", { pluginKey });
     }
     /**
      * Returns all subjects.
@@ -152,7 +165,10 @@ export class Submesh {
     async upsertSubject(input) {
         await this.ensureReady();
         requireString(input.id, "Subject id");
-        return this.repositories.subjects.upsert(input);
+        assertMaxLength(input.id, MAX_SUBJECT_ID_LENGTH, "Subject id");
+        const result = await this.repositories.subjects.upsert(input);
+        this.logger.debug("Subject upserted", { id: input.id });
+        return result;
     }
     /**
      * Returns a subject by their ID.
@@ -163,7 +179,10 @@ export class Submesh {
     async getSubject(id) {
         await this.ensureReady();
         requireString(id, "Subject id");
-        return this.repositories.subjects.getById(id);
+        assertMaxLength(id, MAX_SUBJECT_ID_LENGTH, "Subject id");
+        const result = await this.repositories.subjects.getById(id);
+        this.logger.debug("Subject fetched", { id, found: !!result });
+        return result;
     }
     /**
      * Links an external provider identity to a subject.
@@ -176,8 +195,16 @@ export class Submesh {
         requireString(input.subjectId, "Subject id");
         requireString(input.provider, "Provider");
         requireString(input.externalId, "External id");
+        assertMaxLength(input.subjectId, MAX_SUBJECT_ID_LENGTH, "Subject id");
+        assertMaxLength(input.provider, MAX_PROVIDER_KEY_LENGTH, "Provider");
+        assertMaxLength(input.externalId, MAX_EXTERNAL_ID_LENGTH, "External id");
         await this.repositories.subjects.upsert({ id: input.subjectId });
         await this.repositories.subjects.upsertIdentity(input);
+        this.logger.info("Provider identity linked", {
+            subjectId: input.subjectId,
+            provider: input.provider,
+            externalId: input.externalId,
+        });
     }
     /**
      * Returns all plans.
@@ -198,11 +225,12 @@ export class Submesh {
         await this.ensureReady();
         requireString(input.code, "Plan code");
         requireString(input.name, "Plan name");
+        assertMaxLength(input.code, MAX_PLAN_CODE_LENGTH, "Plan code");
         const existing = await this.repositories.plans.getByCode(input.code);
         if (existing) {
             throw new ConflictError(`Plan ${input.code} already exists.`);
         }
-        return createPlanWithProvisioning(this.repositories, this.pluginRegistry, input);
+        return createPlanWithProvisioning(this.repositories, this.pluginRegistry, input, this.logger);
     }
     /**
      * Updates a plan's details.
@@ -214,10 +242,12 @@ export class Submesh {
     async updatePlan(code, input) {
         await this.ensureReady();
         requireString(code, "Plan code");
+        assertMaxLength(code, MAX_PLAN_CODE_LENGTH, "Plan code");
         const updated = await this.repositories.plans.update(code, input);
         if (!updated) {
             throw new NotFoundError(`Plan ${code} was not found.`);
         }
+        this.logger.info("Plan updated", { planCode: code });
         return updated;
     }
     /**
@@ -228,10 +258,12 @@ export class Submesh {
     async deletePlan(code) {
         await this.ensureReady();
         requireString(code, "Plan code");
+        assertMaxLength(code, MAX_PLAN_CODE_LENGTH, "Plan code");
         const deleted = await this.repositories.plans.delete(code);
         if (!deleted) {
             throw new NotFoundError(`Plan ${code} was not found.`);
         }
+        this.logger.info("Plan deleted", { planCode: code });
     }
     /**
      * Returns catalog mappings from provider products to internal plan codes.
@@ -253,11 +285,20 @@ export class Submesh {
         requireString(input.pluginKey, "Plugin key");
         requireString(input.externalProductId, "External product id");
         requireString(input.planCode, "Plan code");
+        assertMaxLength(input.pluginKey, MAX_PROVIDER_KEY_LENGTH, "Plugin key");
+        assertMaxLength(input.externalProductId, MAX_EXTERNAL_ID_LENGTH, "External product id");
+        assertMaxLength(input.planCode, MAX_PLAN_CODE_LENGTH, "Plan code");
         const plan = await this.repositories.plans.getByCode(input.planCode);
         if (!plan) {
             throw new NotFoundError(`Plan ${input.planCode} was not found.`);
         }
-        return this.repositories.catalogMappings.upsert(input);
+        const result = await this.repositories.catalogMappings.upsert(input);
+        this.logger.info("Catalog mapping upserted", {
+            pluginKey: input.pluginKey,
+            externalProductId: input.externalProductId,
+            planCode: input.planCode,
+        });
+        return result;
     }
     /**
      * Removes a catalog mapping.
@@ -269,10 +310,13 @@ export class Submesh {
         await this.ensureReady();
         requireString(pluginKey, "Plugin key");
         requireString(externalProductId, "External product id");
+        assertMaxLength(pluginKey, MAX_PROVIDER_KEY_LENGTH, "Plugin key");
+        assertMaxLength(externalProductId, MAX_EXTERNAL_ID_LENGTH, "External product id");
         const deleted = await this.repositories.catalogMappings.delete(pluginKey, externalProductId);
         if (!deleted) {
             throw new NotFoundError(`Mapping for ${pluginKey} / ${externalProductId} not found.`);
         }
+        this.logger.info("Catalog mapping deleted", { pluginKey, externalProductId });
     }
     /**
      * Returns subscriptions with resolved plan details.
@@ -291,7 +335,10 @@ export class Submesh {
     async getSubscription(id) {
         await this.ensureReady();
         requireString(id, "Subscription id");
-        return this.repositories.subscriptions.getById(id);
+        assertMaxLength(id, MAX_EXTERNAL_ID_LENGTH, "Subscription id");
+        const result = await this.repositories.subscriptions.getById(id);
+        this.logger.debug("Subscription fetched", { id, found: !!result });
+        return result;
     }
     /**
      * Returns subscriptions for a specific subject.
@@ -301,6 +348,7 @@ export class Submesh {
     async listSubscriptionsBySubject(subjectId) {
         await this.ensureReady();
         requireString(subjectId, "Subject id");
+        assertMaxLength(subjectId, MAX_SUBJECT_ID_LENGTH, "Subject id");
         return this.repositories.subscriptions.listBySubjectId(subjectId);
     }
     /**
@@ -313,7 +361,9 @@ export class Submesh {
         await this.ensureReady();
         requireString(input.subjectId, "Subject id");
         requireString(input.planCode, "Plan code");
-        const sub = await createManagedSubscription(this.repositories, input);
+        assertMaxLength(input.subjectId, MAX_SUBJECT_ID_LENGTH, "Subject id");
+        assertMaxLength(input.planCode, MAX_PLAN_CODE_LENGTH, "Plan code");
+        const sub = await createManagedSubscription(this.repositories, input, this.logger);
         this.logger.info("Subscription created", { id: sub.id, subjectId: sub.subjectId });
         if (this.hooks.onSubscriptionChanged) {
             await Promise.resolve(this.hooks.onSubscriptionChanged(sub, null)).catch((e) => this.logger.error("Error in onSubscriptionChanged hook", { error: e }));
@@ -329,6 +379,7 @@ export class Submesh {
     async updateSubscription(id, input) {
         await this.ensureReady();
         requireString(id, "Subscription id");
+        assertMaxLength(id, MAX_EXTERNAL_ID_LENGTH, "Subscription id");
         // We fetch it first to get existing status for hooks
         const existing = await this.repositories.subscriptions.getById(id);
         if (!existing) {
@@ -357,8 +408,12 @@ export class Submesh {
      * @param options Cancellation options.
      */
     async cancelSubscription(id, options = {}) {
+        if (!options.immediate && options.cancelAt === undefined) {
+            throw new ValidationError("cancelSubscription requires cancelAt when immediate is false.");
+        }
+        const effectiveCancelAt = options.immediate ? options.cancelAt ?? new Date().toISOString() : options.cancelAt;
         return this.updateSubscription(id, {
-            cancelAt: options.cancelAt ?? new Date().toISOString(),
+            cancelAt: effectiveCancelAt,
             status: options.immediate ? "canceled" : undefined,
         });
     }
@@ -373,6 +428,8 @@ export class Submesh {
         await this.ensureReady();
         requireString(subjectId, "Subject id");
         requireString(entitlement, "Entitlement");
+        assertMaxLength(subjectId, MAX_SUBJECT_ID_LENGTH, "Subject id");
+        assertMaxLength(entitlement, MAX_ENTITLEMENT_LENGTH, "Entitlement");
         const subject = await this.repositories.subjects.getById(subjectId);
         if (!subject) {
             return {
@@ -391,6 +448,7 @@ export class Submesh {
     async listEntitlements(subjectId, options = {}) {
         await this.ensureReady();
         requireString(subjectId, "Subject id");
+        assertMaxLength(subjectId, MAX_SUBJECT_ID_LENGTH, "Subject id");
         const subscriptions = await this.repositories.subscriptions.listBySubjectId(subjectId);
         return collectGrantedEntitlements(subscriptions, options);
     }
@@ -430,6 +488,7 @@ export class Submesh {
     async retryEvent(eventId) {
         await this.ensureReady();
         requireString(eventId, "Event id");
+        assertMaxLength(eventId, MAX_EVENT_ID_LENGTH, "Event id");
         const event = await this.repositories.inboundEvents.getById(eventId);
         if (!event) {
             throw new NotFoundError(`Event ${eventId} not found.`);
@@ -438,18 +497,12 @@ export class Submesh {
             throw new ValidationError(`Event ${eventId} is not in a failed state (${event.status}).`);
         }
         this.logger.info("Retrying failed event", { eventId, pluginKey: event.pluginKey });
-        // Mark it as received again to permit re-processing in a fresh state
-        await this.repositories.inboundEvents.markReceived({
-            pluginKey: event.pluginKey,
-            eventKey: event.eventKey + "_retry_" + Date.now().toString(),
-            eventType: event.eventType,
-            sourceRef: event.sourceRef,
-            payload: event.payload,
+        const retryBody = extractRetryBody(event.payload, eventId);
+        const parsedEventsOverride = extractRetryParsedEvents(event.payload);
+        return this.ingestWebhook(event.pluginKey, retryBody, {}, {
+            skipVerification: true,
+            parsedEventsOverride: parsedEventsOverride.length > 0 ? parsedEventsOverride : undefined,
         });
-        // Re-ingest the payload through the standard processing pipeline via manual execution bypassing webhook source checks.
-        // For safety, this delegates to ingestWebhookEvent but since the event is already received, we reconstruct the payload.
-        // However, ingestWebhookEvent requires the raw payload. We assume event.payload is close enough to raw payload.
-        return this.ingestWebhook(event.pluginKey, event.payload.value ?? event.payload, {}, { rawBody: undefined });
     }
     /**
      * Ingests a canonical subscription event.
@@ -459,7 +512,13 @@ export class Submesh {
      */
     async ingestCanonicalEvent(input) {
         await this.ensureReady();
-        return this.repositories.transaction((tx) => ingestCanonicalSubscription(tx, input));
+        const result = await this.repositories.transaction((tx) => ingestCanonicalSubscription(tx, input));
+        this.logger.info("Canonical event ingested", {
+            subjectId: input.subjectId,
+            pluginKey: input.pluginKey,
+            sourceRef: input.sourceRef,
+        });
+        return result;
     }
     /**
      * Ingests a plugin webhook payload and applies subscription updates.
@@ -473,6 +532,7 @@ export class Submesh {
     async ingestWebhook(pluginKey, body, headers = {}, options = {}) {
         await this.ensureReady();
         requireString(pluginKey, "Plugin key");
+        assertMaxLength(pluginKey, MAX_PROVIDER_KEY_LENGTH, "Plugin key");
         return ingestWebhookEvent({
             repositories: this.repositories,
             pluginRegistry: this.pluginRegistry,
@@ -491,13 +551,14 @@ export class Submesh {
         return async (req) => {
             try {
                 const bodyBuffer = await req.arrayBuffer();
-                const rawBody = Buffer.from(bodyBuffer);
+                const rawBody = new Uint8Array(bodyBuffer);
+                const decodedBody = new TextDecoder().decode(rawBody);
                 const headers = {};
                 req.headers.forEach((value, key) => {
                     headers[key] = value;
                 });
                 const contentType = req.headers.get("content-type") || "";
-                let body = rawBody.toString("utf8");
+                let body = decodedBody;
                 if (contentType.includes("application/json")) {
                     try {
                         body = JSON.parse(body);
@@ -548,7 +609,36 @@ export class Submesh {
         return {
             ...verified,
             canonical,
-            subscription: await syncVerifiedProviderSubscription(this.repositories, canonical),
+            subscription: await syncVerifiedProviderSubscription(this.repositories, canonical, this.logger),
+        };
+    }
+    /**
+     * Verifies a Stripe subscription and returns canonical data.
+     *
+     * @param input Stripe verification payload.
+     * @returns Verified provider response with canonical subscription data.
+     */
+    async verifyStripeSubscription(input) {
+        await this.ensureReady();
+        return verifyStripeSubscription(input, await this.getPluginConfig("stripe"));
+    }
+    /**
+     * Verifies and syncs a Stripe subscription.
+     *
+     * @param input Stripe verification payload plus target subject.
+     * @returns Verified data plus the synchronized subscription record.
+     */
+    async syncStripeSubscription(input) {
+        await this.ensureReady();
+        const verified = await this.verifyStripeSubscription(input);
+        const canonical = {
+            ...verified.canonical,
+            subjectId: input.subjectId,
+        };
+        return {
+            ...verified,
+            canonical,
+            subscription: await syncVerifiedProviderSubscription(this.repositories, canonical, this.logger),
         };
     }
     /**
@@ -577,7 +667,7 @@ export class Submesh {
         return {
             ...verified,
             canonical,
-            subscription: await syncVerifiedProviderSubscription(this.repositories, canonical),
+            subscription: await syncVerifiedProviderSubscription(this.repositories, canonical, this.logger),
         };
     }
     /**