@shdan/submesh 0.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (230) hide show
  1. package/LICENSE +21 -0
  2. package/README.md +62 -0
  3. package/dist/contracts.d.ts +191 -0
  4. package/dist/contracts.d.ts.map +1 -0
  5. package/dist/contracts.js +2 -0
  6. package/dist/contracts.js.map +1 -0
  7. package/dist/drizzle/catalog-mapping-repository.d.ts +280 -0
  8. package/dist/drizzle/catalog-mapping-repository.d.ts.map +1 -0
  9. package/dist/drizzle/catalog-mapping-repository.js +62 -0
  10. package/dist/drizzle/catalog-mapping-repository.js.map +1 -0
  11. package/dist/drizzle/ensure-schema.d.ts +3 -0
  12. package/dist/drizzle/ensure-schema.d.ts.map +1 -0
  13. package/dist/drizzle/ensure-schema.js +100 -0
  14. package/dist/drizzle/ensure-schema.js.map +1 -0
  15. package/dist/drizzle/inbound-event-repository.d.ts +960 -0
  16. package/dist/drizzle/inbound-event-repository.d.ts.map +1 -0
  17. package/dist/drizzle/inbound-event-repository.js +148 -0
  18. package/dist/drizzle/inbound-event-repository.js.map +1 -0
  19. package/dist/drizzle/index.d.ts +40 -0
  20. package/dist/drizzle/index.d.ts.map +1 -0
  21. package/dist/drizzle/index.js +57 -0
  22. package/dist/drizzle/index.js.map +1 -0
  23. package/dist/drizzle/migrate.d.ts +11 -0
  24. package/dist/drizzle/migrate.d.ts.map +1 -0
  25. package/dist/drizzle/migrate.js +22 -0
  26. package/dist/drizzle/migrate.js.map +1 -0
  27. package/dist/drizzle/plan-repository.d.ts +497 -0
  28. package/dist/drizzle/plan-repository.d.ts.map +1 -0
  29. package/dist/drizzle/plan-repository.js +70 -0
  30. package/dist/drizzle/plan-repository.js.map +1 -0
  31. package/dist/drizzle/plugin-installation-repository.d.ts +26 -0
  32. package/dist/drizzle/plugin-installation-repository.d.ts.map +1 -0
  33. package/dist/drizzle/plugin-installation-repository.js +71 -0
  34. package/dist/drizzle/plugin-installation-repository.js.map +1 -0
  35. package/dist/drizzle/repository-set.d.ts +4 -0
  36. package/dist/drizzle/repository-set.d.ts.map +1 -0
  37. package/dist/drizzle/repository-set.js +19 -0
  38. package/dist/drizzle/repository-set.js.map +1 -0
  39. package/dist/drizzle/schema.d.ts +2370 -0
  40. package/dist/drizzle/schema.d.ts.map +1 -0
  41. package/dist/drizzle/schema.js +103 -0
  42. package/dist/drizzle/schema.js.map +1 -0
  43. package/dist/drizzle/subject-repository.d.ts +295 -0
  44. package/dist/drizzle/subject-repository.d.ts.map +1 -0
  45. package/dist/drizzle/subject-repository.js +76 -0
  46. package/dist/drizzle/subject-repository.js.map +1 -0
  47. package/dist/drizzle/subscription-repository.d.ts +60 -0
  48. package/dist/drizzle/subscription-repository.d.ts.map +1 -0
  49. package/dist/drizzle/subscription-repository.js +128 -0
  50. package/dist/drizzle/subscription-repository.js.map +1 -0
  51. package/dist/drizzle/summary-repository.d.ts +9 -0
  52. package/dist/drizzle/summary-repository.d.ts.map +1 -0
  53. package/dist/drizzle/summary-repository.js +25 -0
  54. package/dist/drizzle/summary-repository.js.map +1 -0
  55. package/dist/drizzle/types.d.ts +4 -0
  56. package/dist/drizzle/types.d.ts.map +1 -0
  57. package/dist/drizzle/types.js +2 -0
  58. package/dist/drizzle/types.js.map +1 -0
  59. package/dist/errors.d.ts +10 -0
  60. package/dist/errors.d.ts.map +1 -0
  61. package/dist/errors.js +13 -0
  62. package/dist/errors.js.map +1 -0
  63. package/dist/hooks.d.ts +24 -0
  64. package/dist/hooks.d.ts.map +1 -0
  65. package/dist/hooks.js +2 -0
  66. package/dist/hooks.js.map +1 -0
  67. package/dist/index.d.ts +11 -0
  68. package/dist/index.d.ts.map +1 -0
  69. package/dist/index.js +9 -0
  70. package/dist/index.js.map +1 -0
  71. package/dist/logger.d.ts +16 -0
  72. package/dist/logger.d.ts.map +1 -0
  73. package/dist/logger.js +8 -0
  74. package/dist/logger.js.map +1 -0
  75. package/dist/plugins/builtin-plugins.d.ts +3 -0
  76. package/dist/plugins/builtin-plugins.d.ts.map +1 -0
  77. package/dist/plugins/builtin-plugins.js +7 -0
  78. package/dist/plugins/builtin-plugins.js.map +1 -0
  79. package/dist/plugins/hash-payload.d.ts +2 -0
  80. package/dist/plugins/hash-payload.d.ts.map +1 -0
  81. package/dist/plugins/hash-payload.js +5 -0
  82. package/dist/plugins/hash-payload.js.map +1 -0
  83. package/dist/plugins/manual.d.ts +12 -0
  84. package/dist/plugins/manual.d.ts.map +1 -0
  85. package/dist/plugins/manual.js +87 -0
  86. package/dist/plugins/manual.js.map +1 -0
  87. package/dist/plugins/plan-provisioning.d.ts +18 -0
  88. package/dist/plugins/plan-provisioning.d.ts.map +1 -0
  89. package/dist/plugins/plan-provisioning.js +159 -0
  90. package/dist/plugins/plan-provisioning.js.map +1 -0
  91. package/dist/plugins/plugin-registry.d.ts +9 -0
  92. package/dist/plugins/plugin-registry.d.ts.map +1 -0
  93. package/dist/plugins/plugin-registry.js +18 -0
  94. package/dist/plugins/plugin-registry.js.map +1 -0
  95. package/dist/providers/apple/plugin/app-store-plan-sync.d.ts +4 -0
  96. package/dist/providers/apple/plugin/app-store-plan-sync.d.ts.map +1 -0
  97. package/dist/providers/apple/plugin/app-store-plan-sync.js +85 -0
  98. package/dist/providers/apple/plugin/app-store-plan-sync.js.map +1 -0
  99. package/dist/providers/apple/plugin/app-store.d.ts +20 -0
  100. package/dist/providers/apple/plugin/app-store.d.ts.map +1 -0
  101. package/dist/providers/apple/plugin/app-store.js +397 -0
  102. package/dist/providers/apple/plugin/app-store.js.map +1 -0
  103. package/dist/providers/apple/security/app-store-verification.d.ts +4 -0
  104. package/dist/providers/apple/security/app-store-verification.d.ts.map +1 -0
  105. package/dist/providers/apple/security/app-store-verification.js +100 -0
  106. package/dist/providers/apple/security/app-store-verification.js.map +1 -0
  107. package/dist/providers/apple/services/app-store-subscription-verification-service.d.ts +3 -0
  108. package/dist/providers/apple/services/app-store-subscription-verification-service.d.ts.map +1 -0
  109. package/dist/providers/apple/services/app-store-subscription-verification-service.js +155 -0
  110. package/dist/providers/apple/services/app-store-subscription-verification-service.js.map +1 -0
  111. package/dist/providers/google/plugin/play-plan-sync.d.ts +4 -0
  112. package/dist/providers/google/plugin/play-plan-sync.d.ts.map +1 -0
  113. package/dist/providers/google/plugin/play-plan-sync.js +270 -0
  114. package/dist/providers/google/plugin/play-plan-sync.js.map +1 -0
  115. package/dist/providers/google/plugin/play.d.ts +20 -0
  116. package/dist/providers/google/plugin/play.d.ts.map +1 -0
  117. package/dist/providers/google/plugin/play.js +460 -0
  118. package/dist/providers/google/plugin/play.js.map +1 -0
  119. package/dist/providers/google/security/oauth.d.ts +10 -0
  120. package/dist/providers/google/security/oauth.d.ts.map +1 -0
  121. package/dist/providers/google/security/oauth.js +116 -0
  122. package/dist/providers/google/security/oauth.js.map +1 -0
  123. package/dist/providers/google/security/pubsub-verification.d.ts +3 -0
  124. package/dist/providers/google/security/pubsub-verification.d.ts.map +1 -0
  125. package/dist/providers/google/security/pubsub-verification.js +229 -0
  126. package/dist/providers/google/security/pubsub-verification.js.map +1 -0
  127. package/dist/providers/google/services/play-subscription-verification-service.d.ts +3 -0
  128. package/dist/providers/google/services/play-subscription-verification-service.d.ts.map +1 -0
  129. package/dist/providers/google/services/play-subscription-verification-service.js +96 -0
  130. package/dist/providers/google/services/play-subscription-verification-service.js.map +1 -0
  131. package/dist/repositories/catalog-mapping-repository.d.ts +9 -0
  132. package/dist/repositories/catalog-mapping-repository.d.ts.map +1 -0
  133. package/dist/repositories/catalog-mapping-repository.js +2 -0
  134. package/dist/repositories/catalog-mapping-repository.js.map +1 -0
  135. package/dist/repositories/inbound-event-repository.d.ts +23 -0
  136. package/dist/repositories/inbound-event-repository.d.ts.map +1 -0
  137. package/dist/repositories/inbound-event-repository.js +2 -0
  138. package/dist/repositories/inbound-event-repository.js.map +1 -0
  139. package/dist/repositories/index.d.ts +30 -0
  140. package/dist/repositories/index.d.ts.map +1 -0
  141. package/dist/repositories/index.js +2 -0
  142. package/dist/repositories/index.js.map +1 -0
  143. package/dist/repositories/plan-repository.d.ts +10 -0
  144. package/dist/repositories/plan-repository.d.ts.map +1 -0
  145. package/dist/repositories/plan-repository.js +2 -0
  146. package/dist/repositories/plan-repository.js.map +1 -0
  147. package/dist/repositories/plugin-installation-repository.d.ts +13 -0
  148. package/dist/repositories/plugin-installation-repository.d.ts.map +1 -0
  149. package/dist/repositories/plugin-installation-repository.js +2 -0
  150. package/dist/repositories/plugin-installation-repository.js.map +1 -0
  151. package/dist/repositories/subject-repository.d.ts +10 -0
  152. package/dist/repositories/subject-repository.d.ts.map +1 -0
  153. package/dist/repositories/subject-repository.js +2 -0
  154. package/dist/repositories/subject-repository.js.map +1 -0
  155. package/dist/repositories/subscription-repository.d.ts +24 -0
  156. package/dist/repositories/subscription-repository.d.ts.map +1 -0
  157. package/dist/repositories/subscription-repository.js +2 -0
  158. package/dist/repositories/subscription-repository.js.map +1 -0
  159. package/dist/security/jwt.d.ts +22 -0
  160. package/dist/security/jwt.d.ts.map +1 -0
  161. package/dist/security/jwt.js +132 -0
  162. package/dist/security/jwt.js.map +1 -0
  163. package/dist/security/plugin-webhook-verification.d.ts +3 -0
  164. package/dist/security/plugin-webhook-verification.d.ts.map +1 -0
  165. package/dist/security/plugin-webhook-verification.js +44 -0
  166. package/dist/security/plugin-webhook-verification.js.map +1 -0
  167. package/dist/security/relay-signature.d.ts +12 -0
  168. package/dist/security/relay-signature.d.ts.map +1 -0
  169. package/dist/security/relay-signature.js +39 -0
  170. package/dist/security/relay-signature.js.map +1 -0
  171. package/dist/services/canonical-subscription-service.d.ts +4 -0
  172. package/dist/services/canonical-subscription-service.d.ts.map +1 -0
  173. package/dist/services/canonical-subscription-service.js +20 -0
  174. package/dist/services/canonical-subscription-service.js.map +1 -0
  175. package/dist/services/managed-subscription-service.d.ts +5 -0
  176. package/dist/services/managed-subscription-service.d.ts.map +1 -0
  177. package/dist/services/managed-subscription-service.js +24 -0
  178. package/dist/services/managed-subscription-service.js.map +1 -0
  179. package/dist/services/plan-provisioning-service.d.ts +5 -0
  180. package/dist/services/plan-provisioning-service.d.ts.map +1 -0
  181. package/dist/services/plan-provisioning-service.js +100 -0
  182. package/dist/services/plan-provisioning-service.js.map +1 -0
  183. package/dist/services/plan-resolution.d.ts +4 -0
  184. package/dist/services/plan-resolution.d.ts.map +1 -0
  185. package/dist/services/plan-resolution.js +33 -0
  186. package/dist/services/plan-resolution.js.map +1 -0
  187. package/dist/services/plugin-installation-service.d.ts +6 -0
  188. package/dist/services/plugin-installation-service.d.ts.map +1 -0
  189. package/dist/services/plugin-installation-service.js +19 -0
  190. package/dist/services/plugin-installation-service.js.map +1 -0
  191. package/dist/services/provider-subscription-sync-service.d.ts +4 -0
  192. package/dist/services/provider-subscription-sync-service.d.ts.map +1 -0
  193. package/dist/services/provider-subscription-sync-service.js +13 -0
  194. package/dist/services/provider-subscription-sync-service.js.map +1 -0
  195. package/dist/services/subject-resolution.d.ts +4 -0
  196. package/dist/services/subject-resolution.d.ts.map +1 -0
  197. package/dist/services/subject-resolution.js +48 -0
  198. package/dist/services/subject-resolution.js.map +1 -0
  199. package/dist/services/webhook-ingestion-service.d.ts +14 -0
  200. package/dist/services/webhook-ingestion-service.d.ts.map +1 -0
  201. package/dist/services/webhook-ingestion-service.js +149 -0
  202. package/dist/services/webhook-ingestion-service.js.map +1 -0
  203. package/dist/submesh.d.ts +265 -0
  204. package/dist/submesh.d.ts.map +1 -0
  205. package/dist/submesh.js +602 -0
  206. package/dist/submesh.js.map +1 -0
  207. package/dist/utils/canonical.d.ts +7 -0
  208. package/dist/utils/canonical.d.ts.map +1 -0
  209. package/dist/utils/canonical.js +8 -0
  210. package/dist/utils/canonical.js.map +1 -0
  211. package/dist/utils/parse.d.ts +42 -0
  212. package/dist/utils/parse.d.ts.map +1 -0
  213. package/dist/utils/parse.js +74 -0
  214. package/dist/utils/parse.js.map +1 -0
  215. package/dist/utils/records.d.ts +2 -0
  216. package/dist/utils/records.d.ts.map +1 -0
  217. package/dist/utils/records.js +7 -0
  218. package/dist/utils/records.js.map +1 -0
  219. package/dist/utils/time.d.ts +2 -0
  220. package/dist/utils/time.d.ts.map +1 -0
  221. package/dist/utils/time.js +4 -0
  222. package/dist/utils/time.js.map +1 -0
  223. package/dist/utils/validation.d.ts +10 -0
  224. package/dist/utils/validation.d.ts.map +1 -0
  225. package/dist/utils/validation.js +19 -0
  226. package/dist/utils/validation.js.map +1 -0
  227. package/drizzle/0000_cute_the_order.sql +94 -0
  228. package/drizzle/meta/0000_snapshot.json +559 -0
  229. package/drizzle/meta/_journal.json +13 -0
  230. package/package.json +54 -0
@@ -0,0 +1,397 @@
1
+ import { randomUUID } from "node:crypto";
2
+ import { deprovisionAppleAppStorePlan, provisionAppleAppStorePlan, } from "./app-store-plan-sync.js";
3
+ import { verifyAppleAppStoreWebhook } from "../security/app-store-verification.js";
4
+ import { decodeSignedPayload } from "../../../security/jwt.js";
5
+ import { verifyTrustedRelayWebhook } from "../../../security/plugin-webhook-verification.js";
6
+ import { hashPayload } from "../../../plugins/hash-payload.js";
7
+ const appleNotificationTypeMap = {
8
+ SUBSCRIBED: {
9
+ eventType: "apple-app-store.subscribed",
10
+ lifecycle: "purchase",
11
+ status: "active",
12
+ },
13
+ DID_RENEW: {
14
+ eventType: "apple-app-store.did_renew",
15
+ lifecycle: "renewal",
16
+ status: "active",
17
+ },
18
+ DID_CHANGE_RENEWAL_STATUS: {
19
+ eventType: "apple-app-store.did_change_renewal_status",
20
+ lifecycle: "renewal_status_changed",
21
+ status: "active",
22
+ },
23
+ DID_CHANGE_RENEWAL_PREF: {
24
+ eventType: "apple-app-store.did_change_renewal_pref",
25
+ lifecycle: "renewal_preference_changed",
26
+ status: "active",
27
+ },
28
+ OFFER_REDEEMED: {
29
+ eventType: "apple-app-store.offer_redeemed",
30
+ lifecycle: "offer_redeemed",
31
+ status: "active",
32
+ },
33
+ DID_FAIL_TO_RENEW: {
34
+ eventType: "apple-app-store.did_fail_to_renew",
35
+ lifecycle: "billing_issue",
36
+ status: "billing_issue",
37
+ },
38
+ GRACE_PERIOD_EXPIRED: {
39
+ eventType: "apple-app-store.grace_period_expired",
40
+ lifecycle: "grace_period_expired",
41
+ status: "billing_issue",
42
+ },
43
+ EXPIRED: {
44
+ eventType: "apple-app-store.expired",
45
+ lifecycle: "expiration",
46
+ status: "expired",
47
+ },
48
+ REFUND: {
49
+ eventType: "apple-app-store.refund",
50
+ lifecycle: "refund",
51
+ status: "refunded",
52
+ },
53
+ REFUND_DECLINED: {
54
+ eventType: "apple-app-store.refund_declined",
55
+ lifecycle: "refund_declined",
56
+ status: "active",
57
+ },
58
+ REVOKE: {
59
+ eventType: "apple-app-store.revoke",
60
+ lifecycle: "revoke",
61
+ status: "revoked",
62
+ },
63
+ PRICE_INCREASE: {
64
+ eventType: "apple-app-store.price_increase",
65
+ lifecycle: "price_increase",
66
+ status: "active",
67
+ },
68
+ RENEWAL_EXTENDED: {
69
+ eventType: "apple-app-store.renewal_extended",
70
+ lifecycle: "renewal_extended",
71
+ status: "active",
72
+ },
73
+ CONSUMPTION_REQUEST: {
74
+ eventType: "apple-app-store.consumption_request",
75
+ lifecycle: "consumption_request",
76
+ status: "active",
77
+ },
78
+ EXTERNAL_PURCHASE_TOKEN: {
79
+ eventType: "apple-app-store.external_purchase_token",
80
+ lifecycle: "external_purchase_token",
81
+ status: "active",
82
+ },
83
+ };
84
+ function asObject(value, message) {
85
+ if (!value || typeof value !== "object" || Array.isArray(value)) {
86
+ throw new Error(message);
87
+ }
88
+ return value;
89
+ }
90
+ function getString(value) {
91
+ return typeof value === "string" && value.length > 0 ? value : undefined;
92
+ }
93
+ function getNumericString(value) {
94
+ if (typeof value === "number" && Number.isFinite(value)) {
95
+ return value.toString();
96
+ }
97
+ return getString(value);
98
+ }
99
+ function isSignedToken(value) {
100
+ return value.split(".").length === 3;
101
+ }
102
+ function decodeSignedObject(value) {
103
+ if (typeof value !== "string" || !isSignedToken(value)) {
104
+ return undefined;
105
+ }
106
+ return decodeSignedPayload(value);
107
+ }
108
+ function parsePayload(body) {
109
+ if (typeof body === "string") {
110
+ const trimmed = body.trim();
111
+ if (trimmed.startsWith("{")) {
112
+ return asObject(JSON.parse(trimmed), "Apple App Store plugin expects the JSON body to decode to an object.");
113
+ }
114
+ if (isSignedToken(trimmed)) {
115
+ return decodeSignedPayload(trimmed);
116
+ }
117
+ throw new Error("Apple App Store plugin expects a JSON object or signedPayload string.");
118
+ }
119
+ const payload = asObject(body, "Apple App Store plugin expects a JSON object payload.");
120
+ const signedPayload = getString(payload.signedPayload);
121
+ return signedPayload ? decodeSignedPayload(signedPayload) : payload;
122
+ }
123
+ function toMillisIsoString(value) {
124
+ const raw = getNumericString(value);
125
+ if (!raw) {
126
+ return null;
127
+ }
128
+ const numeric = Number(raw);
129
+ if (!Number.isFinite(numeric)) {
130
+ return null;
131
+ }
132
+ if (raw.length >= 13) {
133
+ return new Date(numeric).toISOString();
134
+ }
135
+ return new Date(numeric * 1000).toISOString();
136
+ }
137
+ function toAppleDateString(value) {
138
+ return toMillisIsoString(value) ?? getString(value) ?? null;
139
+ }
140
+ function isFutureTimestamp(value) {
141
+ if (!value) {
142
+ return false;
143
+ }
144
+ const time = Date.parse(value);
145
+ return Number.isFinite(time) && time > Date.now();
146
+ }
147
+ function normalizeAppleLifecycle(notificationType, subtype, currentPeriodEnd, isTrial) {
148
+ const base = appleNotificationTypeMap[notificationType] ?? {
149
+ eventType: `apple-app-store.${notificationType.toLowerCase()}`,
150
+ lifecycle: "update",
151
+ status: "active",
152
+ };
153
+ if (notificationType === "TEST") {
154
+ return {
155
+ eventType: "apple-app-store.test",
156
+ lifecycle: "test",
157
+ status: "active",
158
+ };
159
+ }
160
+ if (notificationType === "SUBSCRIBED") {
161
+ switch (subtype) {
162
+ case "RESUBSCRIBE":
163
+ return {
164
+ ...base,
165
+ eventType: "apple-app-store.subscribed.resubscribe",
166
+ lifecycle: "resubscription",
167
+ };
168
+ case "UPGRADE":
169
+ case "DOWNGRADE":
170
+ return {
171
+ ...base,
172
+ eventType: `apple-app-store.subscribed.${subtype.toLowerCase()}`,
173
+ lifecycle: "plan_change",
174
+ };
175
+ default:
176
+ return {
177
+ ...base,
178
+ eventType: subtype === "INITIAL_BUY"
179
+ ? "apple-app-store.subscribed.initial_buy"
180
+ : base.eventType,
181
+ lifecycle: "purchase",
182
+ status: isTrial ? "trialing" : "active",
183
+ };
184
+ }
185
+ }
186
+ if (notificationType === "OFFER_REDEEMED") {
187
+ return {
188
+ ...base,
189
+ eventType: subtype === "RESUBSCRIBE"
190
+ ? "apple-app-store.offer_redeemed.resubscribe"
191
+ : "apple-app-store.offer_redeemed",
192
+ lifecycle: subtype === "RESUBSCRIBE" ? "resubscription" : "offer_redeemed",
193
+ status: isTrial ? "trialing" : "active",
194
+ };
195
+ }
196
+ if (notificationType === "DID_RENEW") {
197
+ return {
198
+ ...base,
199
+ eventType: subtype === "BILLING_RECOVERY"
200
+ ? "apple-app-store.did_renew.billing_recovery"
201
+ : base.eventType,
202
+ lifecycle: subtype === "BILLING_RECOVERY" ? "billing_recovery" : "renewal",
203
+ };
204
+ }
205
+ if (notificationType === "DID_FAIL_TO_RENEW") {
206
+ if (subtype === "GRACE_PERIOD") {
207
+ return {
208
+ ...base,
209
+ eventType: "apple-app-store.did_fail_to_renew.grace_period",
210
+ lifecycle: "grace_period",
211
+ status: "grace_period",
212
+ };
213
+ }
214
+ return base;
215
+ }
216
+ if (notificationType === "DID_CHANGE_RENEWAL_STATUS") {
217
+ const cancelAtPeriodEnd = subtype === "AUTO_RENEW_DISABLED" && isFutureTimestamp(currentPeriodEnd);
218
+ return {
219
+ ...base,
220
+ eventType: subtype
221
+ ? `apple-app-store.did_change_renewal_status.${subtype.toLowerCase()}`
222
+ : base.eventType,
223
+ lifecycle: subtype === "AUTO_RENEW_DISABLED"
224
+ ? "auto_renew_disabled"
225
+ : subtype === "AUTO_RENEW_ENABLED"
226
+ ? "auto_renew_enabled"
227
+ : base.lifecycle,
228
+ cancelAtPeriodEnd,
229
+ };
230
+ }
231
+ if (notificationType === "EXPIRED" && subtype) {
232
+ return {
233
+ ...base,
234
+ eventType: `apple-app-store.expired.${subtype.toLowerCase()}`,
235
+ lifecycle: `expiration_${subtype.toLowerCase()}`,
236
+ };
237
+ }
238
+ return base;
239
+ }
240
+ function buildMetadata(payload, data, transactionInfo, renewalInfo, lifecycle, subtype) {
241
+ return {
242
+ ...payload,
243
+ lifecycle: lifecycle.lifecycle,
244
+ notificationType: getString(payload.notificationType),
245
+ subtype,
246
+ environment: getString(data.environment) ?? getString(payload.environment),
247
+ bundleId: getString(data.bundleId),
248
+ bundleVersion: getString(data.bundleVersion),
249
+ appAppleId: payload.appAppleId ?? data.appAppleId,
250
+ transactionInfo,
251
+ renewalInfo,
252
+ };
253
+ }
254
+ function requireAppleExternalProductId(input) {
255
+ const value = input.productId ??
256
+ input.transactionProductId ??
257
+ input.renewalProductId ??
258
+ input.dataProductId;
259
+ if (!value) {
260
+ throw new Error("Apple App Store payload is missing productId. Provide productId in normalized payloads or transaction/renewal notification fields.");
261
+ }
262
+ return value;
263
+ }
264
+ function toNormalizedEvent(payload) {
265
+ const sourceRef = String(payload.originalTransactionId ??
266
+ payload.transactionId ??
267
+ payload.webOrderLineItemId ??
268
+ randomUUID());
269
+ const record = {
270
+ pluginKey: "apple-app-store",
271
+ sourceType: "apple-app-store",
272
+ sourceRef,
273
+ status: getString(payload.status) ??
274
+ "active",
275
+ subjectId: getString(payload.subjectId) ?? getString(payload.userId),
276
+ externalSubjectId: getString(payload.appAccountToken),
277
+ planCode: getString(payload.planCode),
278
+ externalProductId: requireAppleExternalProductId({
279
+ productId: getString(payload.productId),
280
+ }),
281
+ currentPeriodStart: toAppleDateString(payload.purchaseDate),
282
+ currentPeriodEnd: toAppleDateString(payload.expiresDate),
283
+ cancelAt: getString(payload.cancelAt) ?? null,
284
+ metadata: payload,
285
+ };
286
+ return {
287
+ eventKey: getString(payload.eventKey) ??
288
+ String(payload.notificationUUID ??
289
+ payload.originalTransactionId ??
290
+ payload.transactionId ??
291
+ hashPayload(payload)),
292
+ eventType: getString(payload.eventType) ?? "apple-app-store.subscription.updated",
293
+ sourceRef,
294
+ records: [record],
295
+ };
296
+ }
297
+ function toNotificationEvent(payload) {
298
+ const data = asObject(payload.data ?? {}, "Apple notification data must be an object.");
299
+ const transactionInfo = decodeSignedObject(data.signedTransactionInfo) ??
300
+ (data.transactionInfo && typeof data.transactionInfo === "object"
301
+ ? data.transactionInfo
302
+ : undefined);
303
+ const renewalInfo = decodeSignedObject(data.signedRenewalInfo) ??
304
+ (data.renewalInfo && typeof data.renewalInfo === "object"
305
+ ? data.renewalInfo
306
+ : undefined);
307
+ const subtype = getString(payload.subtype);
308
+ const currentPeriodEnd = toAppleDateString(transactionInfo?.expiresDate) ??
309
+ toAppleDateString(data.expiresDate) ??
310
+ toAppleDateString(renewalInfo?.gracePeriodExpiresDate);
311
+ const isTrial = transactionInfo?.offerType === 1 ||
312
+ transactionInfo?.offerType === "1" ||
313
+ getString(transactionInfo?.offerIdentifier) !== undefined;
314
+ const lifecycle = normalizeAppleLifecycle(getString(payload.notificationType) ?? "SUBSCRIBED", subtype, currentPeriodEnd, isTrial);
315
+ if (lifecycle.lifecycle === "test") {
316
+ return {
317
+ eventKey: getString(payload.notificationUUID) ?? hashPayload(payload),
318
+ eventType: lifecycle.eventType,
319
+ sourceRef: null,
320
+ records: [],
321
+ };
322
+ }
323
+ const sourceRef = String(transactionInfo?.originalTransactionId ??
324
+ data.originalTransactionId ??
325
+ transactionInfo?.transactionId ??
326
+ data.transactionId ??
327
+ transactionInfo?.webOrderLineItemId ??
328
+ payload.notificationUUID ??
329
+ randomUUID());
330
+ const currentPeriodStart = toAppleDateString(transactionInfo?.purchaseDate) ??
331
+ toAppleDateString(data.purchaseDate);
332
+ const cancelAt = lifecycle.cancelAtPeriodEnd && isFutureTimestamp(currentPeriodEnd)
333
+ ? currentPeriodEnd
334
+ : null;
335
+ const externalProductId = requireAppleExternalProductId({
336
+ transactionProductId: getString(transactionInfo?.productId),
337
+ renewalProductId: getString(renewalInfo?.autoRenewProductId),
338
+ dataProductId: getString(data.productId),
339
+ });
340
+ return {
341
+ eventKey: getString(payload.eventKey) ??
342
+ getString(payload.notificationUUID) ??
343
+ String(transactionInfo?.originalTransactionId ??
344
+ transactionInfo?.transactionId ??
345
+ hashPayload(payload)),
346
+ eventType: lifecycle.eventType,
347
+ sourceRef,
348
+ records: [
349
+ {
350
+ pluginKey: "apple-app-store",
351
+ sourceType: "apple-app-store",
352
+ sourceRef,
353
+ status: lifecycle.status,
354
+ subjectId: getString(payload.subjectId) ??
355
+ getString(payload.userId) ??
356
+ getString(data.subjectId) ??
357
+ getString(data.userId),
358
+ externalSubjectId: getString(transactionInfo?.appAccountToken) ??
359
+ getString(data.appAccountToken) ??
360
+ getString(renewalInfo?.appAccountToken),
361
+ planCode: getString(payload.planCode) ?? getString(data.planCode),
362
+ externalProductId,
363
+ currentPeriodStart,
364
+ currentPeriodEnd,
365
+ cancelAt,
366
+ metadata: buildMetadata(payload, data, transactionInfo, renewalInfo, lifecycle, subtype),
367
+ },
368
+ ],
369
+ };
370
+ }
371
+ export const appleAppStorePlugin = {
372
+ key: "apple-app-store",
373
+ displayName: "Apple App Store",
374
+ description: "Normalizes App Store Server Notifications, signed payload verification, renewals, refunds, revocations, and resubscription events into canonical subscription records.",
375
+ capabilities: ["server-notifications-v2", "subscription-sync", "app-store"],
376
+ async provisionPlan(input, context) {
377
+ return provisionAppleAppStorePlan(input, context.config);
378
+ },
379
+ async deprovisionPlan(input, context) {
380
+ return deprovisionAppleAppStorePlan(input, context.config, context.result);
381
+ },
382
+ async verifyWebhook(envelope, context) {
383
+ const appleVerification = await verifyAppleAppStoreWebhook(envelope, context.config);
384
+ if (appleVerification) {
385
+ return appleVerification;
386
+ }
387
+ return verifyTrustedRelayWebhook(envelope, context.config);
388
+ },
389
+ async parseWebhook(envelope) {
390
+ const payload = parsePayload(envelope.body);
391
+ if (typeof payload.status === "string") {
392
+ return toNormalizedEvent(payload);
393
+ }
394
+ return toNotificationEvent(payload);
395
+ },
396
+ };
397
+ //# sourceMappingURL=app-store.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"app-store.js","sourceRoot":"","sources":["../../../../src/providers/apple/plugin/app-store.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AASzC,OAAO,EACL,4BAA4B,EAC5B,0BAA0B,GAC3B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,yBAAyB,EAAE,MAAM,kDAAkD,CAAC;AAC7F,OAAO,EAAE,WAAW,EAAE,MAAM,kCAAkC,CAAC;AAS/D,MAAM,wBAAwB,GAA0C;IACtE,UAAU,EAAE;QACV,SAAS,EAAE,4BAA4B;QACvC,SAAS,EAAE,UAAU;QACrB,MAAM,EAAE,QAAQ;KACjB;IACD,SAAS,EAAE;QACT,SAAS,EAAE,2BAA2B;QACtC,SAAS,EAAE,SAAS;QACpB,MAAM,EAAE,QAAQ;KACjB;IACD,yBAAyB,EAAE;QACzB,SAAS,EAAE,2CAA2C;QACtD,SAAS,EAAE,wBAAwB;QACnC,MAAM,EAAE,QAAQ;KACjB;IACD,uBAAuB,EAAE;QACvB,SAAS,EAAE,yCAAyC;QACpD,SAAS,EAAE,4BAA4B;QACvC,MAAM,EAAE,QAAQ;KACjB;IACD,cAAc,EAAE;QACd,SAAS,EAAE,gCAAgC;QAC3C,SAAS,EAAE,gBAAgB;QAC3B,MAAM,EAAE,QAAQ;KACjB;IACD,iBAAiB,EAAE;QACjB,SAAS,EAAE,mCAAmC;QAC9C,SAAS,EAAE,eAAe;QAC1B,MAAM,EAAE,eAAe;KACxB;IACD,oBAAoB,EAAE;QACpB,SAAS,EAAE,sCAAsC;QACjD,SAAS,EAAE,sBAAsB;QACjC,MAAM,EAAE,eAAe;KACxB;IACD,OAAO,EAAE;QACP,SAAS,EAAE,yBAAyB;QACpC,SAAS,EAAE,YAAY;QACvB,MAAM,EAAE,SAAS;KAClB;IACD,MAAM,EAAE;QACN,SAAS,EAAE,wBAAwB;QACnC,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,UAAU;KACnB;IACD,eAAe,EAAE;QACf,SAAS,EAAE,iCAAiC;QAC5C,SAAS,EAAE,iBAAiB;QAC5B,MAAM,EAAE,QAAQ;KACjB;IACD,MAAM,EAAE;QACN,SAAS,EAAE,wBAAwB;QACnC,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,SAAS;KAClB;IACD,cAAc,EAAE;QACd,SAAS,EAAE,gCAAgC;QAC3C,SAAS,EAAE,gBAAgB;QAC3B,MAAM,EAAE,QAAQ;KACjB;IACD,gBAAgB,EAAE;QAChB,SAAS,EAAE,kCAAkC;QAC7C,SAAS,EAAE,kBAAkB;QAC7B,MAAM,EAAE,QAAQ;KACjB;IACD,mBAAmB,EAAE;QACnB,SAAS,EAAE,qCAAqC;QAChD,SAAS,EAAE,qBAAqB;QAChC,MAAM,EAAE,QAAQ;KACjB;IACD,uBAAuB,EAAE;QACvB,SAAS,EAAE,yCAAyC;QACpD,SAAS,EAAE,yBAAyB;QACpC,MAAM,EAAE,QAAQ;KACjB;CACF,CAAC;AAEF,SAAS,QAAQ,CAAC,KAAc,EAAE,OAAe;IAC/C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IAC1B,CAAC;IAED,OAAO,SAAS,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,OAAO,mBAAmB,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,YAAY,CAAC,IAAa;IACjC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC5B,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,QAAQ,CACb,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EACnB,sEAAsE,CACvE,CAAC;QACJ,CAAC;QAED,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;QACtC,CAAC;QAED,MAAM,IAAI,KAAK,CACb,uEAAuE,CACxE,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,uDAAuD,CAAC,CAAC;IACxF,MAAM,aAAa,GAAG,SAAS,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IACvD,OAAO,aAAa,CAAC,CAAC,CAAC,mBAAmB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AACtE,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,MAAM,GAAG,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAG,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QACrB,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC;IACzC,CAAC;IAED,OAAO,IAAI,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;AAChD,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,OAAO,iBAAiB,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAgC;IACzD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,OAAO,KAAK,CAAC;IACf,CAAC;IAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,uBAAuB,CAC9B,gBAAwB,EACxB,OAA2B,EAC3B,gBAA+B,EAC/B,OAAgB;IAEhB,MAAM,IAAI,GAAG,wBAAwB,CAAC,gBAAgB,CAAC,IAAI;QACzD,SAAS,EAAE,mBAAmB,gBAAgB,CAAC,WAAW,EAAE,EAAE;QAC9D,SAAS,EAAE,QAAQ;QACnB,MAAM,EAAE,QAAiB;KAC1B,CAAC;IAEF,IAAI,gBAAgB,KAAK,MAAM,EAAE,CAAC;QAChC,OAAO;YACL,SAAS,EAAE,sBAAsB;YACjC,SAAS,EAAE,MAAM;YACjB,MAAM,EAAE,QAAQ;SACjB,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,KAAK,YAAY,EAAE,CAAC;QACtC,QAAQ,OAAO,EAAE,CAAC;YAChB,KAAK,aAAa;gBAChB,OAAO;oBACL,GAAG,IAAI;oBACP,SAAS,EAAE,wCAAwC;oBACnD,SAAS,EAAE,gBAAgB;iBAC5B,CAAC;YACJ,KAAK,SAAS,CAAC;YACf,KAAK,WAAW;gBACd,OAAO;oBACL,GAAG,IAAI;oBACP,SAAS,EAAE,8BAA8B,OAAO,CAAC,WAAW,EAAE,EAAE;oBAChE,SAAS,EAAE,aAAa;iBACzB,CAAC;YACJ;gBACE,OAAO;oBACL,GAAG,IAAI;oBACP,SAAS,EACP,OAAO,KAAK,aAAa;wBACvB,CAAC,CAAC,wCAAwC;wBAC1C,CAAC,CAAC,IAAI,CAAC,SAAS;oBACpB,SAAS,EAAE,UAAU;oBACrB,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;iBACxC,CAAC;QACN,CAAC;IACH,CAAC;IAED,IAAI,gBAAgB,KAAK,gBAAgB,EAAE,CAAC;QAC1C,OAAO;YACL,GAAG,IAAI;YACP,SAAS,EACP,OAAO,KAAK,aAAa;gBACvB,CAAC,CAAC,4CAA4C;gBAC9C,CAAC,CAAC,gCAAgC;YACtC,SAAS,EAAE,OAAO,KAAK,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,gBAAgB;YAC1E,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;SACxC,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,KAAK,WAAW,EAAE,CAAC;QACrC,OAAO;YACL,GAAG,IAAI;YACP,SAAS,EACP,OAAO,KAAK,kBAAkB;gBAC5B,CAAC,CAAC,4CAA4C;gBAC9C,CAAC,CAAC,IAAI,CAAC,SAAS;YACpB,SAAS,EAAE,OAAO,KAAK,kBAAkB,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS;SAC3E,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,KAAK,mBAAmB,EAAE,CAAC;QAC7C,IAAI,OAAO,KAAK,cAAc,EAAE,CAAC;YAC/B,OAAO;gBACL,GAAG,IAAI;gBACP,SAAS,EAAE,gDAAgD;gBAC3D,SAAS,EAAE,cAAc;gBACzB,MAAM,EAAE,cAAc;aACvB,CAAC;QACJ,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,gBAAgB,KAAK,2BAA2B,EAAE,CAAC;QACrD,MAAM,iBAAiB,GACrB,OAAO,KAAK,qBAAqB,IAAI,iBAAiB,CAAC,gBAAgB,CAAC,CAAC;QAC3E,OAAO;YACL,GAAG,IAAI;YACP,SAAS,EAAE,OAAO;gBAChB,CAAC,CAAC,6CAA6C,OAAO,CAAC,WAAW,EAAE,EAAE;gBACtE,CAAC,CAAC,IAAI,CAAC,SAAS;YAClB,SAAS,EACP,OAAO,KAAK,qBAAqB;gBAC/B,CAAC,CAAC,qBAAqB;gBACvB,CAAC,CAAC,OAAO,KAAK,oBAAoB;oBAChC,CAAC,CAAC,oBAAoB;oBACtB,CAAC,CAAC,IAAI,CAAC,SAAS;YACtB,iBAAiB;SAClB,CAAC;IACJ,CAAC;IAED,IAAI,gBAAgB,KAAK,SAAS,IAAI,OAAO,EAAE,CAAC;QAC9C,OAAO;YACL,GAAG,IAAI;YACP,SAAS,EAAE,2BAA2B,OAAO,CAAC,WAAW,EAAE,EAAE;YAC7D,SAAS,EAAE,cAAc,OAAO,CAAC,WAAW,EAAE,EAAE;SACjD,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CACpB,OAAgC,EAChC,IAA6B,EAC7B,eAAoD,EACpD,WAAgD,EAChD,SAAgC,EAChC,OAA2B;IAE3B,OAAO;QACL,GAAG,OAAO;QACV,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,gBAAgB,EAAE,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC;QACrD,OAAO;QACP,WAAW,EAAE,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,WAAW,CAAC;QAC1E,QAAQ,EAAE,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;QAClC,aAAa,EAAE,SAAS,CAAC,IAAI,CAAC,aAAa,CAAC;QAC5C,UAAU,EAAE,OAAO,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU;QACjD,eAAe;QACf,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,6BAA6B,CAAC,KAKtC;IACC,MAAM,KAAK,GACT,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,oBAAoB;QAC1B,KAAK,CAAC,gBAAgB;QACtB,KAAK,CAAC,aAAa,CAAC;IACtB,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,oIAAoI,CACrI,CAAC;IACJ,CAAC;IAED,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAgC;IACzD,MAAM,SAAS,GAAG,MAAM,CACtB,OAAO,CAAC,qBAAqB;QAC3B,OAAO,CAAC,aAAa;QACrB,OAAO,CAAC,kBAAkB;QAC1B,UAAU,EAAE,CACf,CAAC;IAEF,MAAM,MAAM,GAA+B;QACzC,SAAS,EAAE,iBAAiB;QAC5B,UAAU,EAAE,iBAAiB;QAC7B,SAAS;QACT,MAAM,EACH,SAAS,CAAC,OAAO,CAAC,MAAM,CAAsD;YAC/E,QAAQ;QACV,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC;QACpE,iBAAiB,EAAE,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC;QACrD,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;QACrC,iBAAiB,EAAE,6BAA6B,CAAC;YAC/C,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;SACxC,CAAC;QACF,kBAAkB,EAAE,iBAAiB,CAAC,OAAO,CAAC,YAAY,CAAC;QAC3D,gBAAgB,EAAE,iBAAiB,CAAC,OAAO,CAAC,WAAW,CAAC;QACxD,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,IAAI;QAC7C,QAAQ,EAAE,OAAO;KAClB,CAAC;IAEF,OAAO;QACL,QAAQ,EACN,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC3B,MAAM,CACJ,OAAO,CAAC,gBAAgB;gBACtB,OAAO,CAAC,qBAAqB;gBAC7B,OAAO,CAAC,aAAa;gBACrB,WAAW,CAAC,OAAO,CAAC,CACvB;QACH,SAAS,EAAE,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,sCAAsC;QACjF,SAAS;QACT,OAAO,EAAE,CAAC,MAAM,CAAC;KAClB,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAgC;IAC3D,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,4CAA4C,CAAC,CAAC;IACxF,MAAM,eAAe,GACnB,kBAAkB,CAAC,IAAI,CAAC,qBAAqB,CAAC;QAC9C,CAAC,IAAI,CAAC,eAAe,IAAI,OAAO,IAAI,CAAC,eAAe,KAAK,QAAQ;YAC/D,CAAC,CAAE,IAAI,CAAC,eAA2C;YACnD,CAAC,CAAC,SAAS,CAAC,CAAC;IACjB,MAAM,WAAW,GACf,kBAAkB,CAAC,IAAI,CAAC,iBAAiB,CAAC;QAC1C,CAAC,IAAI,CAAC,WAAW,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;YACvD,CAAC,CAAE,IAAI,CAAC,WAAuC;YAC/C,CAAC,CAAC,SAAS,CAAC,CAAC;IACjB,MAAM,OAAO,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,gBAAgB,GACpB,iBAAiB,CAAC,eAAe,EAAE,WAAW,CAAC;QAC/C,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC;QACnC,iBAAiB,CAAC,WAAW,EAAE,sBAAsB,CAAC,CAAC;IACzD,MAAM,OAAO,GACX,eAAe,EAAE,SAAS,KAAK,CAAC;QAChC,eAAe,EAAE,SAAS,KAAK,GAAG;QAClC,SAAS,CAAC,eAAe,EAAE,eAAe,CAAC,KAAK,SAAS,CAAC;IAC5D,MAAM,SAAS,GAAG,uBAAuB,CACvC,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,YAAY,EACnD,OAAO,EACP,gBAAgB,EAChB,OAAO,CACR,CAAC;IAEF,IAAI,SAAS,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QACnC,OAAO;YACL,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC;YACrE,SAAS,EAAE,SAAS,CAAC,SAAS;YAC9B,SAAS,EAAE,IAAI;YACf,OAAO,EAAE,EAAE;SACZ,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CACtB,eAAe,EAAE,qBAAqB;QACpC,IAAI,CAAC,qBAAqB;QAC1B,eAAe,EAAE,aAAa;QAC9B,IAAI,CAAC,aAAa;QAClB,eAAe,EAAE,kBAAkB;QACnC,OAAO,CAAC,gBAAgB;QACxB,UAAU,EAAE,CACf,CAAC;IACF,MAAM,kBAAkB,GACtB,iBAAiB,CAAC,eAAe,EAAE,YAAY,CAAC;QAChD,iBAAiB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACvC,MAAM,QAAQ,GACZ,SAAS,CAAC,iBAAiB,IAAI,iBAAiB,CAAC,gBAAgB,CAAC;QAChE,CAAC,CAAC,gBAAgB;QAClB,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,iBAAiB,GAAG,6BAA6B,CAAC;QACtD,oBAAoB,EAAE,SAAS,CAAC,eAAe,EAAE,SAAS,CAAC;QAC3D,gBAAgB,EAAE,SAAS,CAAC,WAAW,EAAE,kBAAkB,CAAC;QAC5D,aAAa,EAAE,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;KACzC,CAAC,CAAC;IAEH,OAAO;QACL,QAAQ,EACN,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;YAC3B,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC;YACnC,MAAM,CACJ,eAAe,EAAE,qBAAqB;gBACpC,eAAe,EAAE,aAAa;gBAC9B,WAAW,CAAC,OAAO,CAAC,CACvB;QACH,SAAS,EAAE,SAAS,CAAC,SAAS;QAC9B,SAAS;QACT,OAAO,EAAE;YACP;gBACE,SAAS,EAAE,iBAAiB;gBAC5B,UAAU,EAAE,iBAAiB;gBAC7B,SAAS;gBACT,MAAM,EAAE,SAAS,CAAC,MAAM;gBACxB,SAAS,EACP,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC;oBAC5B,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC;oBACzB,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC;oBACzB,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;gBACxB,iBAAiB,EACf,SAAS,CAAC,eAAe,EAAE,eAAe,CAAC;oBAC3C,SAAS,CAAC,IAAI,CAAC,eAAe,CAAC;oBAC/B,SAAS,CAAC,WAAW,EAAE,eAAe,CAAC;gBACzC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;gBACjE,iBAAiB;gBACjB,kBAAkB;gBAClB,gBAAgB;gBAChB,QAAQ;gBACR,QAAQ,EAAE,aAAa,CACrB,OAAO,EACP,IAAI,EACJ,eAAe,EACf,WAAW,EACX,SAAS,EACT,OAAO,CACR;aACF;SACF;KACF,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,GAAG,EAAE,iBAAiB;IACtB,WAAW,EAAE,iBAAiB;IAC9B,WAAW,EACT,wKAAwK;IAC1K,YAAY,EAAE,CAAC,yBAAyB,EAAE,mBAAmB,EAAE,WAAW,CAAC;IAC3E,KAAK,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO;QAChC,OAAO,0BAA0B,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC;IACD,KAAK,CAAC,eAAe,CAAC,KAAK,EAAE,OAAO;QAClC,OAAO,4BAA4B,CAAC,KAAK,EAAE,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7E,CAAC;IACD,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,OAAO;QACnC,MAAM,iBAAiB,GAAG,MAAM,0BAA0B,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACrF,IAAI,iBAAiB,EAAE,CAAC;YACtB,OAAO,iBAAiB,CAAC;QAC3B,CAAC;QAED,OAAO,yBAAyB,CAAC,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC7D,CAAC;IACD,KAAK,CAAC,YAAY,CAAC,QAAQ;QACzB,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YACvC,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;QAED,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;CACsD,CAAC"}
@@ -0,0 +1,4 @@
1
+ import type { PluginWebhookEnvelope, PluginWebhookVerification } from "@shdan/submesh-core";
2
+ export declare function verifyAppleSignedToken(token: string, config: Record<string, unknown>): Record<string, unknown>;
3
+ export declare function verifyAppleAppStoreWebhook(envelope: PluginWebhookEnvelope, config: Record<string, unknown>): Promise<PluginWebhookVerification | undefined>;
4
+ //# sourceMappingURL=app-store-verification.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"app-store-verification.d.ts","sourceRoot":"","sources":["../../../../src/providers/apple/security/app-store-verification.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,qBAAqB,EACrB,yBAAyB,EAC1B,MAAM,qBAAqB,CAAC;AAgE7B,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CASzB;AAmBD,wBAAsB,0BAA0B,CAC9C,QAAQ,EAAE,qBAAqB,EAC/B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAyChD"}
@@ -0,0 +1,100 @@
1
+ import { parseSignedToken, resolveX5cLeafPublicKeys, verifySignedTokenSignature, } from "../../../security/jwt.js";
2
+ function getString(value) {
3
+ return typeof value === "string" && value.length > 0 ? value : undefined;
4
+ }
5
+ function getStringArray(value) {
6
+ if (!Array.isArray(value)) {
7
+ return [];
8
+ }
9
+ return value.filter((entry) => typeof entry === "string" && entry.length > 0);
10
+ }
11
+ function getObject(value) {
12
+ return value && typeof value === "object" && !Array.isArray(value)
13
+ ? value
14
+ : undefined;
15
+ }
16
+ function extractSignedPayload(body) {
17
+ if (typeof body === "string") {
18
+ return body.includes(".") ? body : undefined;
19
+ }
20
+ if (!body || typeof body !== "object" || Array.isArray(body)) {
21
+ return undefined;
22
+ }
23
+ const signedPayload = body.signedPayload;
24
+ return typeof signedPayload === "string" ? signedPayload : undefined;
25
+ }
26
+ function hasAppleVerificationConfig(config) {
27
+ return (getStringArray(config.appleTrustedRootCertificates).length > 0 ||
28
+ getStringArray(config.appleSignedPayloadPublicKeys).length > 0);
29
+ }
30
+ function resolveAppleVerificationKeys(header, config) {
31
+ const trustedRoots = getStringArray(config.appleTrustedRootCertificates);
32
+ if (trustedRoots.length > 0) {
33
+ return resolveX5cLeafPublicKeys({
34
+ x5c: header.x5c,
35
+ trustedRootCertificates: trustedRoots,
36
+ });
37
+ }
38
+ return getStringArray(config.appleSignedPayloadPublicKeys);
39
+ }
40
+ export function verifyAppleSignedToken(token, config) {
41
+ const parsedToken = parseSignedToken(token);
42
+ const parsed = verifySignedTokenSignature({
43
+ token,
44
+ algorithm: "ES256",
45
+ publicKeys: resolveAppleVerificationKeys(parsedToken.header, config),
46
+ });
47
+ return parsed.payload;
48
+ }
49
+ function verifyNestedSignedPayloads(payload, config) {
50
+ const data = getObject(payload.data);
51
+ if (!data) {
52
+ return;
53
+ }
54
+ for (const key of ["signedTransactionInfo", "signedRenewalInfo"]) {
55
+ const token = getString(data[key]);
56
+ if (token) {
57
+ verifyAppleSignedToken(token, config);
58
+ }
59
+ }
60
+ }
61
+ export async function verifyAppleAppStoreWebhook(envelope, config) {
62
+ if (!hasAppleVerificationConfig(config)) {
63
+ return undefined;
64
+ }
65
+ const signedPayload = extractSignedPayload(envelope.body);
66
+ if (!signedPayload) {
67
+ return {
68
+ verified: false,
69
+ strategy: "custom",
70
+ metadata: {
71
+ provider: "apple-app-store",
72
+ reason: "missing_signed_payload",
73
+ },
74
+ };
75
+ }
76
+ try {
77
+ const payload = verifyAppleSignedToken(signedPayload, config);
78
+ verifyNestedSignedPayloads(payload, config);
79
+ return {
80
+ verified: true,
81
+ strategy: "custom",
82
+ metadata: {
83
+ provider: "apple-app-store",
84
+ notificationType: getString(payload.notificationType),
85
+ subtype: getString(payload.subtype),
86
+ },
87
+ };
88
+ }
89
+ catch (error) {
90
+ return {
91
+ verified: false,
92
+ strategy: "custom",
93
+ metadata: {
94
+ provider: "apple-app-store",
95
+ error: error instanceof Error ? error.message : "Unknown Apple verification error.",
96
+ },
97
+ };
98
+ }
99
+ }
100
+ //# sourceMappingURL=app-store-verification.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"app-store-verification.js","sourceRoot":"","sources":["../../../../src/providers/apple/security/app-store-verification.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,gBAAgB,EAChB,wBAAwB,EACxB,0BAA0B,GAC3B,MAAM,0BAA0B,CAAC;AAGlC,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,KAAK,CAAC,MAAM,CACjB,CAAC,KAAK,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAC1E,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAChE,CAAC,CAAE,KAAiC;QACpC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAa;IACzC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/C,CAAC;IAED,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7D,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,aAAa,GAAI,IAAgC,CAAC,aAAa,CAAC;IACtE,OAAO,OAAO,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED,SAAS,0BAA0B,CAAC,MAA+B;IACjE,OAAO,CACL,cAAc,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC,MAAM,GAAG,CAAC;QAC9D,cAAc,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC,MAAM,GAAG,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CACnC,MAA+B,EAC/B,MAA+B;IAE/B,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;IACzE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,wBAAwB,CAAC;YAC9B,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,uBAAuB,EAAE,YAAY;SACtC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,cAAc,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAC7D,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,KAAa,EACb,MAA+B;IAE/B,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,0BAA0B,CAAC;QACxC,KAAK;QACL,SAAS,EAAE,OAAO;QAClB,UAAU,EAAE,4BAA4B,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;KACrE,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC,OAAO,CAAC;AACxB,CAAC;AAED,SAAS,0BAA0B,CACjC,OAAgC,EAChC,MAA+B;IAE/B,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,CAAC,uBAAuB,EAAE,mBAAmB,CAAC,EAAE,CAAC;QACjE,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QACnC,IAAI,KAAK,EAAE,CAAC;YACV,sBAAsB,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,QAA+B,EAC/B,MAA+B;IAE/B,IAAI,CAAC,0BAA0B,CAAC,MAAM,CAAC,EAAE,CAAC;QACxC,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,aAAa,GAAG,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE;gBACR,QAAQ,EAAE,iBAAiB;gBAC3B,MAAM,EAAE,wBAAwB;aACjC;SACF,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,sBAAsB,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAC9D,0BAA0B,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAE5C,OAAO;YACL,QAAQ,EAAE,IAAI;YACd,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE;gBACR,QAAQ,EAAE,iBAAiB;gBAC3B,gBAAgB,EAAE,SAAS,CAAC,OAAO,CAAC,gBAAgB,CAAC;gBACrD,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC;aACpC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,QAAQ,EAAE,KAAK;YACf,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE;gBACR,QAAQ,EAAE,iBAAiB;gBAC3B,KAAK,EACH,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,mCAAmC;aAC/E;SACF,CAAC;IACJ,CAAC;AACH,CAAC"}
@@ -0,0 +1,3 @@
1
+ import type { VerifiedProviderSubscription, VerifyAppleAppStoreSubscriptionInput } from "../../../contracts.js";
2
+ export declare function verifyAppleAppStoreSubscription(input: VerifyAppleAppStoreSubscriptionInput, config?: Record<string, unknown>): Promise<VerifiedProviderSubscription>;
3
+ //# sourceMappingURL=app-store-subscription-verification-service.d.ts.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"app-store-subscription-verification-service.d.ts","sourceRoot":"","sources":["../../../../src/providers/apple/services/app-store-subscription-verification-service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EACV,4BAA4B,EAC5B,oCAAoC,EACrC,MAAM,uBAAuB,CAAC;AAoK/B,wBAAsB,+BAA+B,CACnD,KAAK,EAAE,oCAAoC,EAC3C,MAAM,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,GACnC,OAAO,CAAC,4BAA4B,CAAC,CAiDvC"}