@siglume/direct-request-payment 0.4.25 → 0.4.27

package/docs/quickstart-10-minutes.md

@@ -29,8 +29,8 @@ pip install siglume-direct-request-payment
 
 For FastAPI projects, the Python package supplies `init`, `preflight`, and
 `verify` commands. The local sandbox server is currently provided by the npm
-CLI, so install Node.js/npm as well when you want local sandbox checkout
-verification.
+CLI, so install Node.js 20.19+ or 22.12+ with npm as well when you want local
+sandbox checkout verification.
 
 ## 1. Optional live preflight
 
@@ -177,6 +177,61 @@ const order_store = createPrismaSiglumeOrderStore(prisma, {
 });
 ```
 
+For NoSQL products, install the driver you already use and choose the matching
+adapter:
+
+```bash
+# DynamoDB
+npm install @aws-sdk/client-dynamodb @aws-sdk/lib-dynamodb
+
+# MongoDB
+npm install mongodb
+
+# Firestore
+npm install @google-cloud/firestore
+```
+
+```ts
+// DynamoDB
+import { DynamoDBClient } from "@aws-sdk/client-dynamodb";
+import { DynamoDBDocumentClient } from "@aws-sdk/lib-dynamodb";
+import {
+  createDynamoDbSiglumeOrderStore,
+  createDynamoDbSiglumeTables,
+} from "./siglume/siglume-order-store.dynamodb.js";
+
+const dynamo = new DynamoDBClient({ region: "ap-northeast-1" });
+const dynamoDoc = DynamoDBDocumentClient.from(dynamo, {
+  marshallOptions: { removeUndefinedValues: true, convertEmptyValues: true },
+});
+await createDynamoDbSiglumeTables({ client: dynamo, include_orders_table: false });
+const order_store = createDynamoDbSiglumeOrderStore({ client: dynamoDoc });
+```
+
+```ts
+// MongoDB
+import { MongoClient } from "mongodb";
+import {
+  createMongoSiglumeIndexes,
+  createMongoSiglumeOrderStore,
+} from "./siglume/siglume-order-store.mongodb.js";
+
+const mongo = new MongoClient(process.env.MONGODB_URI!);
+await mongo.connect();
+const db = mongo.db("shop");
+await createMongoSiglumeIndexes({ db });
+const order_store = createMongoSiglumeOrderStore({ db });
+```
+
+```ts
+// Firestore
+import { Firestore } from "@google-cloud/firestore";
+import { createFirestoreSiglumeOrderStore } from "./siglume/siglume-order-store.firestore.js";
+
+const db = new Firestore({ projectId: process.env.GOOGLE_CLOUD_PROJECT });
+const order_store = createFirestoreSiglumeOrderStore({ db });
+```
+
 FastAPI:
 
 ```py
@@ -222,10 +277,11 @@ order_store = AsyncSQLAlchemySiglumeOrderStore(SessionLocal)
 `create_sqlalchemy_siglume_schema(engine)` creates only SDRP-owned tables by
 default. Use `include_orders_table=True` only for the sample `orders` table.
 
-The adapters persist one active checkout attempt per order, reuse an unexpired
-checkout URL on network retries, create a new attempt after expiry/failure,
-record webhook event ids only after the order update/review write succeeds, and
-keep duplicate deliveries from double-fulfilling an order.
+The SQL, DynamoDB, MongoDB, Firestore, and SQLAlchemy adapters persist one
+active checkout attempt per order, reuse an unexpired checkout URL on network
+retries, create a new attempt after expiry/failure, record webhook event ids
+only after the order update/review write succeeds, and keep duplicate
+deliveries from double-fulfilling an order.
 
 ## 6. Start your app and run sandbox verify
 
@@ -278,7 +334,8 @@ Your product is integrated when:
 - `npx siglume-check verify --sandbox` passes against your local product,
 - `npx siglume-check verify` passes against live Siglume credentials,
 - your product has mounted checkout and webhook routes,
-- your order database uses the SQL/ORM adapter or an equivalent transactional store,
+- your order database uses the SQL/ORM, DynamoDB, MongoDB, Firestore, or
+  SQLAlchemy adapter, or an equivalent transactional store,
 - the signed webhook verifies against the raw body,
 - `standard_settled` marks the order paid once,
 - a failed webhook handler is retried and duplicate webhook deliveries do not double-fulfill the order.

package/examples/hosted-checkout-python/pyproject.toml

@@ -5,5 +5,5 @@ requires-python = ">=3.11"
 dependencies = [
   "Flask>=3.0,<4",
   "python-dotenv>=1.0,<2",
-  "siglume-direct-request-payment>=0.4.25,<0.5",
+  "siglume-direct-request-payment>=0.4.27,<0.5",
 ]

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@siglume/direct-request-payment",
-  "version": "0.4.25",
+  "version": "0.4.27",
   "description": "SDK for the Siglume Direct Request Payment SDRP payment protocol",
   "keywords": [
     "siglume",
@@ -27,7 +27,7 @@
   },
   "type": "module",
   "engines": {
-    "node": ">=18"
+    "node": "^20.19.0 || >=22.12.0"
   },
   "sideEffects": false,
   "main": "./dist/index.cjs",
@@ -78,9 +78,13 @@
     "test": "npm run build && vitest run",
     "prisma:generate:test": "prisma generate --schema test/prisma/schema.prisma",
     "test:orm-matrix": "vitest run test/express-orm-matrix.integration.test.ts",
+    "test:nosql-matrix": "vitest run test/express-nosql-matrix.integration.test.ts",
     "pack:check": "npm pack --json"
   },
   "devDependencies": {
+    "@aws-sdk/client-dynamodb": "^3.1073.0",
+    "@aws-sdk/lib-dynamodb": "^3.1073.0",
+    "@google-cloud/firestore": "^8.6.0",
     "@prisma/client": "^6.19.3",
     "@types/express": "^5.0.6",
     "@types/node": "^20.16.5",
@@ -89,6 +93,7 @@
     "drizzle-orm": "^0.45.2",
     "esbuild": "^0.28.1",
     "express": "^5.2.1",
+    "mongodb": "6.21.0",
     "mysql2": "^3.22.5",
     "pg": "^8.22.0",
     "prisma": "^6.19.3",
@@ -96,7 +101,7 @@
     "sequelize": "^6.37.8",
     "sql.js": "^1.14.1",
     "tsup": "^8.3.0",
-    "typeorm": "^1.0.0",
+    "typeorm": "0.3.29",
     "typescript": "^5.6.3",
     "vitest": "^4.1.9"
   },

package/templates/express/README.md

@@ -40,11 +40,24 @@ app.use(express.json());
 app.use("/payments", createSiglumeSdrpCheckoutRouter(siglumeOptions));
 ```
 
-Use `siglume-order-store.sql.ts` for a durable database-backed adapter. It
-supports Prisma, TypeORM, Sequelize, Drizzle, and any driver that can implement
-the small `SiglumeSqlExecutor` interface. Run
-`createSiglumeSdrpSqlSchema({ dialect: "postgres" })` once in a migration or
-translate the returned SQL into your migration tool.
+Use one of the durable database-backed adapters before opening checkout to
+users:
+
+- `siglume-order-store.sql.ts`: Prisma, TypeORM, Sequelize, Drizzle, or any
+  driver that can implement the small `SiglumeSqlExecutor` interface. For an
+  existing product database, run
+  `createSiglumeSdrpSqlSchema({ dialect: "postgres", include_orders_table: false })`
+  once in a migration or translate the returned SQL into your migration tool.
+  Your own order table must expose the mapped `id`, `amount_minor`, and
+  `currency` columns. `status` and `updated_at` are optional but recommended
+  when you want the adapter to write paid/fulfilled state back to your table.
+  Use `include_orders_table: true` only for the sample `orders` table.
+- `siglume-order-store.dynamodb.ts`: DynamoDB with conditional writes and
+  `TransactWrite`.
+- `siglume-order-store.mongodb.ts`: MongoDB with unique indexes for the active
+  checkout attempt, challenge hash, and webhook event id.
+- `siglume-order-store.firestore.ts`: Firestore transactions and single-field
+  challenge lookup.
 
 Keep `processWebhookEventOnce()` transactional: record the webhook event as
 processed only after the order update or review write succeeds. The generated