@softure-ai/billing 0.0.0-stage → 0.1.5

package/dist/stripe-webhook.d.ts

@@ -0,0 +1,101 @@
+import { type Err, type Ok } from "@softure-ai/core";
+/** The header Stripe signs every delivery with (lower case, as `Headers` returns it). */
+export declare const STRIPE_SIGNATURE_HEADER = "stripe-signature";
+/** How far a delivery's timestamp may be from now, in seconds: Stripe's default replay window. */
+export declare const STRIPE_SIGNATURE_TOLERANCE_SECONDS = 300;
+/** The metadata keys a checkout session carries (`stripe()` sets them). */
+export declare const STRIPE_METADATA: {
+    readonly userId: "softure_user_id";
+    readonly planId: "softure_plan_id";
+};
+export type StripeWebhookError = "billing.webhook_invalid";
+export interface SignStripePayloadInput {
+    readonly payload: string;
+    readonly secret: string;
+    /** Unix seconds. */
+    readonly timestamp: number;
+}
+/** A `Stripe-Signature` value as Stripe sends it, e.g. for a test that plays Stripe. */
+export declare function signStripePayload({ payload, secret, timestamp }: SignStripePayloadInput): string;
+export interface VerifyStripeSignatureInput {
+    readonly payload: string;
+    /** The `Stripe-Signature` header, or null when the request had none. */
+    readonly header: string | null;
+    readonly secret: string;
+    readonly now: Date;
+    readonly toleranceSeconds?: number;
+}
+/**
+ * Whether Stripe signed `payload` with `secret` within the tolerance of `now`. Any `v1` entry may
+ * match: Stripe sends one per secret while an old secret is still rolling off.
+ */
+export declare function verifyStripeSignature(input: VerifyStripeSignatureInput): Ok<undefined> | Err<StripeWebhookError>;
+/** A checkout Stripe reports as paid, with what `stripe()` put in its metadata. */
+export interface PaidCheckout {
+    /** The Checkout Session id (`cs_...`). */
+    readonly checkoutId: string;
+    /** The PaymentIntent id (`pi_...`) refunds name; null for a checkout without a charge. */
+    readonly paymentId: string | null;
+    readonly userId: string;
+    readonly planId: string;
+    /** What Stripe charged, in billing's unit (the pinned minor unit, converted from Stripe's). */
+    readonly amount: number;
+    /** ISO 4217, upper case. */
+    readonly currency: string;
+}
+/** A refund Stripe reports as failed or canceled: its money is back with the customer's payment. */
+export interface FailedRefund {
+    /** The PaymentIntent id (`pi_...`) of the refunded payment. */
+    readonly paymentId: string;
+    /** The Refund id (`re_...`). */
+    readonly refundId: string;
+    /** What the refund was for, in billing's unit. */
+    readonly amount: number;
+    /** When Stripe created the refund. */
+    readonly refundCreatedAt: Date;
+    /** When Stripe reported the failure (the event's `created`). */
+    readonly failedAt: Date;
+}
+/** What one delivery asks of billing. */
+export type StripeWebhookEvent = 
+/** A paid checkout: grant its plan, once. */
+{
+    readonly type: "checkout_paid";
+    readonly eventId: string;
+    readonly checkout: PaidCheckout;
+}
+/** A charge refunded in full: take back the access its payment gave, once. `snapshotAt`: when Stripe took the charge's state (the event's `created`). */
+ | {
+    readonly type: "payment_refunded";
+    readonly eventId: string;
+    readonly paymentId: string;
+    readonly snapshotAt: Date;
+}
+/** A charge refunded in part: `amountRefunded` is the total refunded so far, in billing's unit, as of `snapshotAt`. */
+ | {
+    readonly type: "payment_partially_refunded";
+    readonly eventId: string;
+    readonly paymentId: string;
+    readonly amountRefunded: number;
+    readonly snapshotAt: Date;
+}
+/** A refund that failed (or was canceled): give back what it took, once per refund. */
+ | {
+    readonly type: "refund_failed";
+    readonly eventId: string;
+    readonly failure: FailedRefund;
+}
+/** Nothing to do: another event type, a checkout still waiting for its money, a charge with nothing refunded, a session billing did not create. */
+ | {
+    readonly type: "ignored";
+    readonly eventId: string;
+    readonly reason: string;
+};
+/**
+ * The event a verified payload carries. A body that is not a Stripe event, or an event billing acts
+ * on whose object lacks what billing needs, is `billing.webhook_invalid`.
+ */
+export declare function parseStripeEvent(payload: string): Ok<StripeWebhookEvent> | Err<StripeWebhookError>;
+/** `verifyStripeSignature`, then `parseStripeEvent`: nothing unsigned is parsed. */
+export declare function readStripeWebhook(input: VerifyStripeSignatureInput): Ok<StripeWebhookEvent> | Err<StripeWebhookError>;
+//# sourceMappingURL=stripe-webhook.d.ts.map

package/dist/stripe-webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe-webhook.d.ts","sourceRoot":"","sources":["../src/stripe-webhook.ts"],"names":[],"mappings":"AAKA,OAAO,EAAW,KAAK,GAAG,EAAE,KAAK,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAI9D,yFAAyF;AACzF,eAAO,MAAM,uBAAuB,qBAAqB,CAAC;AAC1D,kGAAkG;AAClG,eAAO,MAAM,kCAAkC,MAAM,CAAC;AACtD,2EAA2E;AAC3E,eAAO,MAAM,eAAe;;;CAAoE,CAAC;AAEjG,MAAM,MAAM,kBAAkB,GAAG,yBAAyB,CAAC;AAU3D,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,oBAAoB;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,wFAAwF;AACxF,wBAAgB,iBAAiB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,sBAAsB,GAAG,MAAM,CAEhG;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,wEAAwE;IACxE,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;IACnB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,0BAA0B,GAAG,EAAE,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAqBhH;AAED,mFAAmF;AACnF,MAAM,WAAW,YAAY;IAC3B,0CAA0C;IAC1C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,0FAA0F;IAC1F,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,+FAA+F;IAC/F,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,4BAA4B;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,oGAAoG;AACpG,MAAM,WAAW,YAAY;IAC3B,+DAA+D;IAC/D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,gCAAgC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,kDAAkD;IAClD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,sCAAsC;IACtC,QAAQ,CAAC,eAAe,EAAE,IAAI,CAAC;IAC/B,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;CACzB;AAED,yCAAyC;AACzC,MAAM,MAAM,kBAAkB;AAC5B,6CAA6C;AAC3C;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAA;CAAE;AAC/F,yJAAyJ;GACvJ;IAAE,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAA;CAAE;AACxH,uHAAuH;GACrH;IACE,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC;CAC3B;AACH,uFAAuF;GACrF;IAAE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;CAAE;AAC9F,mJAAmJ;GACjJ;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAsHpF;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,EAAE,CAAC,kBAAkB,CAAC,GAAG,GAAG,CAAC,kBAAkB,CAAC,CA8BlG;AAED,oFAAoF;AACpF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,0BAA0B,GAAG,EAAE,CAAC,kBAAkB,CAAC,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAGrH"}

package/dist/stripe-webhook.js

@@ -0,0 +1,209 @@
+// Stripe webhooks, pure: the `Stripe-Signature` check and the events billing acts on, narrowed with
+// zod. Stripe signs `<timestamp>.<raw body>` with HMAC-SHA256 under the endpoint's secret
+// (https://docs.stripe.com/webhooks#verify-manually); a timestamp older or newer than the tolerance
+// is a replay and fails like a wrong signature. Nothing here touches the database.
+import { createHmac, timingSafeEqual } from "node:crypto";
+import { err, ok } from "@softure-ai/core";
+import { z } from "zod";
+import { fromStripeAmount } from "./stripe-currency.js";
+/** The header Stripe signs every delivery with (lower case, as `Headers` returns it). */
+export const STRIPE_SIGNATURE_HEADER = "stripe-signature";
+/** How far a delivery's timestamp may be from now, in seconds: Stripe's default replay window. */
+export const STRIPE_SIGNATURE_TOLERANCE_SECONDS = 300;
+/** The metadata keys a checkout session carries (`stripe()` sets them). */
+export const STRIPE_METADATA = { userId: "softure_user_id", planId: "softure_plan_id" };
+/** The longest id billing stores; Stripe's ids are far shorter. */
+const MAX_ID_LENGTH = 255;
+const SIGNATURE_PATTERN = /^[0-9a-f]{64}$/;
+function sign(secret, timestamp, payload) {
+    return createHmac("sha256", secret).update(`${String(timestamp)}.${payload}`, "utf8").digest("hex");
+}
+/** A `Stripe-Signature` value as Stripe sends it, e.g. for a test that plays Stripe. */
+export function signStripePayload({ payload, secret, timestamp }) {
+    return `t=${String(timestamp)},v1=${sign(secret, timestamp, payload)}`;
+}
+/**
+ * Whether Stripe signed `payload` with `secret` within the tolerance of `now`. Any `v1` entry may
+ * match: Stripe sends one per secret while an old secret is still rolling off.
+ */
+export function verifyStripeSignature(input) {
+    const { payload, header, secret, now } = input;
+    const tolerance = input.toleranceSeconds ?? STRIPE_SIGNATURE_TOLERANCE_SECONDS;
+    if (header === null || secret === "")
+        return err("billing.webhook_invalid");
+    let timestamp = null;
+    const signatures = [];
+    for (const part of header.split(",")) {
+        const separator = part.indexOf("=");
+        if (separator <= 0)
+            continue;
+        const key = part.slice(0, separator).trim();
+        const value = part.slice(separator + 1).trim();
+        if (key === "t" && /^\d{1,12}$/.test(value))
+            timestamp = Number(value);
+        if (key === "v1" && SIGNATURE_PATTERN.test(value))
+            signatures.push(value);
+    }
+    if (timestamp === null || signatures.length === 0)
+        return err("billing.webhook_invalid");
+    if (Math.abs(Math.floor(now.getTime() / 1000) - timestamp) > tolerance)
+        return err("billing.webhook_invalid");
+    const expected = Buffer.from(sign(secret, timestamp, payload), "hex");
+    const isSigned = signatures.some((signature) => timingSafeEqual(Buffer.from(signature, "hex"), expected));
+    return isSigned ? ok() : err("billing.webhook_invalid");
+}
+const idSchema = z.string().min(1).max(MAX_ID_LENGTH);
+/** Unix seconds, as Stripe dates every event and object (up to the end of year 9999). */
+const unixSecondsSchema = z.number().int().min(0).max(253_402_300_799);
+const envelopeSchema = z.object({
+    id: idSchema,
+    type: z.string().min(1).max(MAX_ID_LENGTH),
+    /** When the event (and the snapshot of its object) was made; billing needs it for refunds only. */
+    created: unixSecondsSchema.optional(),
+    data: z.object({ object: z.unknown() }),
+});
+/** An expanded object or its id. */
+const referenceSchema = z.union([idSchema, z.object({ id: idSchema })]).transform((value) => (typeof value === "string" ? value : value.id));
+const sessionSchema = z.object({
+    id: idSchema,
+    mode: z.string(),
+    payment_status: z.string(),
+    payment_intent: referenceSchema.nullish(),
+    amount_total: z.number().int().min(0).nullish(),
+    currency: z.string().regex(/^[a-zA-Z]{3}$/).nullish(),
+    metadata: z.record(z.string(), z.string()).nullish(),
+});
+const chargeSchema = z.object({
+    payment_intent: referenceSchema.nullish(),
+    refunded: z.boolean(),
+    /** Stripe sends it on every charge; needed only for a partial refund, to convert the amount. */
+    currency: z.string().regex(/^[a-zA-Z]{3}$/).optional(),
+    /** The total refunded so far (Stripe sends it on every charge); needed only for a partial refund. */
+    amount_refunded: z.number().int().min(0).optional(),
+});
+const refundSchema = z.object({
+    id: idSchema,
+    payment_intent: referenceSchema.nullish(),
+    amount: z.number().int().min(0),
+    currency: z.string().regex(/^[a-zA-Z]{3}$/),
+    created: unixSecondsSchema,
+    status: z.string().nullish(),
+});
+/** Refund statuses whose money went back to the payment: the refund took nothing in the end. */
+const FAILED_REFUND_STATUSES = new Set(["failed", "canceled"]);
+/** Payment statuses of a checkout that has its money (`no_payment_required`: a 100% discount). */
+const SETTLED_PAYMENT_STATUSES = new Set(["paid", "no_payment_required"]);
+function readCheckout(eventId, object) {
+    const parsed = sessionSchema.safeParse(object);
+    if (!parsed.success)
+        return null;
+    const session = parsed.data;
+    const userId = session.metadata?.[STRIPE_METADATA.userId];
+    const planId = session.metadata?.[STRIPE_METADATA.planId];
+    if (session.mode !== "payment" || userId === undefined || planId === undefined) {
+        return { type: "ignored", eventId, reason: "a checkout billing did not create" };
+    }
+    if (!SETTLED_PAYMENT_STATUSES.has(session.payment_status)) {
+        // A delayed method (a bank transfer): `checkout.session.async_payment_succeeded` follows.
+        return { type: "ignored", eventId, reason: `a checkout whose payment is ${session.payment_status}` };
+    }
+    if (session.amount_total === null || session.amount_total === undefined || session.currency === null || session.currency === undefined)
+        return null;
+    const currency = session.currency.toUpperCase();
+    return {
+        type: "checkout_paid",
+        eventId,
+        checkout: {
+            checkoutId: session.id,
+            paymentId: session.payment_intent ?? null,
+            userId,
+            planId,
+            amount: fromStripeAmount(session.amount_total, currency),
+            currency,
+        },
+    };
+}
+function fromUnixSeconds(seconds) {
+    return new Date(seconds * 1000);
+}
+function readRefund(eventId, object, created) {
+    const parsed = chargeSchema.safeParse(object);
+    if (!parsed.success || created === undefined)
+        return null;
+    const paymentId = parsed.data.payment_intent;
+    if (paymentId === null || paymentId === undefined)
+        return { type: "ignored", eventId, reason: "a refunded charge without a payment" };
+    const snapshotAt = fromUnixSeconds(created);
+    if (parsed.data.refunded)
+        return { type: "payment_refunded", eventId, paymentId, snapshotAt };
+    const { amount_refunded: amountRefunded, currency } = parsed.data;
+    if (amountRefunded === undefined || currency === undefined)
+        return null;
+    if (amountRefunded === 0)
+        return { type: "ignored", eventId, reason: "a charge with nothing refunded" };
+    return { type: "payment_partially_refunded", eventId, paymentId, amountRefunded: fromStripeAmount(amountRefunded, currency.toUpperCase()), snapshotAt };
+}
+/** A Refund event: `refund.failed` always reports a failure, the update events only with a failed or canceled status. */
+function readFailedRefund(eventId, object, created, isFailure) {
+    const parsed = refundSchema.safeParse(object);
+    if (!parsed.success || created === undefined)
+        return null;
+    const refund = parsed.data;
+    if (!isFailure && !FAILED_REFUND_STATUSES.has(refund.status ?? "")) {
+        return { type: "ignored", eventId, reason: `a refund whose status is ${refund.status ?? "unknown"}` };
+    }
+    const paymentId = refund.payment_intent;
+    if (paymentId === null || paymentId === undefined)
+        return { type: "ignored", eventId, reason: "a failed refund without a payment" };
+    const failure = {
+        paymentId,
+        refundId: refund.id,
+        amount: fromStripeAmount(refund.amount, refund.currency.toUpperCase()),
+        refundCreatedAt: fromUnixSeconds(refund.created),
+        failedAt: fromUnixSeconds(created),
+    };
+    return { type: "refund_failed", eventId, failure };
+}
+/**
+ * The event a verified payload carries. A body that is not a Stripe event, or an event billing acts
+ * on whose object lacks what billing needs, is `billing.webhook_invalid`.
+ */
+export function parseStripeEvent(payload) {
+    let json;
+    try {
+        json = JSON.parse(payload);
+    }
+    catch {
+        return err("billing.webhook_invalid");
+    }
+    const envelope = envelopeSchema.safeParse(json);
+    if (!envelope.success)
+        return err("billing.webhook_invalid");
+    const { id, type, data, created } = envelope.data;
+    let event;
+    switch (type) {
+        case "checkout.session.completed":
+        case "checkout.session.async_payment_succeeded":
+            event = readCheckout(id, data.object);
+            break;
+        case "charge.refunded":
+            event = readRefund(id, data.object, created);
+            break;
+        case "refund.failed":
+            event = readFailedRefund(id, data.object, created, true);
+            break;
+        case "refund.updated":
+        case "charge.refund.updated":
+            event = readFailedRefund(id, data.object, created, false);
+            break;
+        default:
+            event = { type: "ignored", eventId: id, reason: `the event type ${type}` };
+    }
+    return event === null ? err("billing.webhook_invalid") : ok(event);
+}
+/** `verifyStripeSignature`, then `parseStripeEvent`: nothing unsigned is parsed. */
+export function readStripeWebhook(input) {
+    const verified = verifyStripeSignature(input);
+    return verified.ok ? parseStripeEvent(input.payload) : verified;
+}
+//# sourceMappingURL=stripe-webhook.js.map

package/dist/stripe-webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe-webhook.js","sourceRoot":"","sources":["../src/stripe-webhook.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,0FAA0F;AAC1F,oGAAoG;AACpG,mFAAmF;AACnF,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAqB,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAExD,yFAAyF;AACzF,MAAM,CAAC,MAAM,uBAAuB,GAAG,kBAAkB,CAAC;AAC1D,kGAAkG;AAClG,MAAM,CAAC,MAAM,kCAAkC,GAAG,GAAG,CAAC;AACtD,2EAA2E;AAC3E,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,iBAAiB,EAAW,CAAC;AAIjG,mEAAmE;AACnE,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,iBAAiB,GAAG,gBAAgB,CAAC;AAE3C,SAAS,IAAI,CAAC,MAAc,EAAE,SAAiB,EAAE,OAAe;IAC9D,OAAO,UAAU,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtG,CAAC;AASD,wFAAwF;AACxF,MAAM,UAAU,iBAAiB,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAA0B;IACtF,OAAO,KAAK,MAAM,CAAC,SAAS,CAAC,OAAO,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;AACzE,CAAC;AAWD;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAiC;IACrE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IAC/C,MAAM,SAAS,GAAG,KAAK,CAAC,gBAAgB,IAAI,kCAAkC,CAAC;IAC/E,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAE5E,IAAI,SAAS,GAAkB,IAAI,CAAC;IACpC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,SAAS,IAAI,CAAC;YAAE,SAAS;QAC7B,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,GAAG,KAAK,GAAG,IAAI,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,GAAG,KAAK,IAAI,IAAI,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,SAAS,KAAK,IAAI,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACzF,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,SAAS,CAAC,GAAG,SAAS;QAAE,OAAO,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAE9G,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC1G,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;AAC1D,CAAC;AAiDD,MAAM,QAAQ,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;AAEtD,yFAAyF;AACzF,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;AAEvE,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,EAAE,EAAE,QAAQ;IACZ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC;IAC1C,mGAAmG;IACnG,OAAO,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;CACxC,CAAC,CAAC;AAEH,oCAAoC;AACpC,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;AAE7I,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7B,EAAE,EAAE,QAAQ;IACZ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,cAAc,EAAE,eAAe,CAAC,OAAO,EAAE;IACzC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE;IAC/C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,OAAO,EAAE;IACrD,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;CACrD,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,cAAc,EAAE,eAAe,CAAC,OAAO,EAAE;IACzC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACrB,gGAAgG;IAChG,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,QAAQ,EAAE;IACtD,qGAAqG;IACrG,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACpD,CAAC,CAAC;AAEH,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,EAAE,EAAE,QAAQ;IACZ,cAAc,EAAE,eAAe,CAAC,OAAO,EAAE;IACzC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC;IAC3C,OAAO,EAAE,iBAAiB;IAC1B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE;CAC7B,CAAC,CAAC;AAEH,gGAAgG;AAChG,MAAM,sBAAsB,GAAwB,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC;AAEpF,kGAAkG;AAClG,MAAM,wBAAwB,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAE/F,SAAS,YAAY,CAAC,OAAe,EAAE,MAAe;IACpD,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC;IAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAC/E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACnF,CAAC;IACD,IAAI,CAAC,wBAAwB,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;QAC1D,0FAA0F;QAC1F,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,+BAA+B,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;IACvG,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACpJ,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAChD,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,OAAO;QACP,QAAQ,EAAE;YACR,UAAU,EAAE,OAAO,CAAC,EAAE;YACtB,SAAS,EAAE,OAAO,CAAC,cAAc,IAAI,IAAI;YACzC,MAAM;YACN,MAAM;YACN,MAAM,EAAE,gBAAgB,CAAC,OAAO,CAAC,YAAY,EAAE,QAAQ,CAAC;YACxD,QAAQ;SACT;KACF,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO,IAAI,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;AAClC,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,MAAe,EAAE,OAA2B;IAC/E,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC;IAC7C,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,qCAAqC,EAAE,CAAC;IACtI,MAAM,UAAU,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC;IAC9F,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC;IAClE,IAAI,cAAc,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACxE,IAAI,cAAc,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IACxG,OAAO,EAAE,IAAI,EAAE,4BAA4B,EAAE,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,CAAC,cAAc,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC;AAC1J,CAAC;AAED,yHAAyH;AACzH,SAAS,gBAAgB,CAAC,OAAe,EAAE,MAAe,EAAE,OAA2B,EAAE,SAAkB;IACzG,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC;IAC3B,IAAI,CAAC,SAAS,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,4BAA4B,MAAM,CAAC,MAAM,IAAI,SAAS,EAAE,EAAE,CAAC;IACxG,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,CAAC,cAAc,CAAC;IACxC,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAC;IACpI,MAAM,OAAO,GAAiB;QAC5B,SAAS;QACT,QAAQ,EAAE,MAAM,CAAC,EAAE;QACnB,MAAM,EAAE,gBAAgB,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACtE,eAAe,EAAE,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC;QAChD,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC;KACnC,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACxC,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,OAAO,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAC7D,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC;IAClD,IAAI,KAAgC,CAAC;IACrC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,4BAA4B,CAAC;QAClC,KAAK,0CAA0C;YAC7C,KAAK,GAAG,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;YACtC,MAAM;QACR,KAAK,iBAAiB;YACpB,KAAK,GAAG,UAAU,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC7C,MAAM;QACR,KAAK,eAAe;YAClB,KAAK,GAAG,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;YACzD,MAAM;QACR,KAAK,gBAAgB,CAAC;QACtB,KAAK,uBAAuB;YAC1B,KAAK,GAAG,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;YAC1D,MAAM;QACR;YACE,KAAK,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,kBAAkB,IAAI,EAAE,EAAE,CAAC;IAC/E,CAAC;IACD,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;AACrE,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,iBAAiB,CAAC,KAAiC;IACjE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAC9C,OAAO,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;AAClE,CAAC"}

package/dist/stripe.d.ts

@@ -0,0 +1,25 @@
+import type { PaymentContext, PaymentProvider, PaymentRequest } from "./payment.js";
+export declare const STRIPE_API_BASE = "https://api.stripe.com";
+export declare const STRIPE_SECRET_KEY_ENV = "STRIPE_SECRET_KEY";
+/** How long the Checkout request may take before the buyer sees `billing.payment_failed`. */
+export declare const STRIPE_TIMEOUT_MS = 10000;
+export interface StripeOptions {
+    /**
+     * The secret API key (`sk_test_...` in the sandbox). Default: `process.env.STRIPE_SECRET_KEY`,
+     * read on every payment, so the configuration loads at build time without the secret.
+     */
+    readonly secretKey?: string;
+    /** Default: `https://api.stripe.com`. For a proxy or a test server. */
+    readonly apiBase?: string;
+    /** Injected in tests; default: the global `fetch`. */
+    readonly fetch?: typeof fetch;
+}
+/**
+ * The form body of `POST /v1/checkout/sessions` for one payment of the plan: its price as a one-off
+ * line item in Stripe's unit (`toStripeAmount`), the account in `client_reference_id` and the metadata the webhook reads (copied onto
+ * the PaymentIntent, so the charge in Stripe's dashboard names the account too).
+ */
+export declare function getCheckoutSessionParams(ctx: Pick<PaymentContext, "config">, request: PaymentRequest): URLSearchParams;
+/** `billing({ payment: stripe() })`: card, BLIK and transfer payments on Stripe Checkout. */
+export declare function stripe(options?: StripeOptions): PaymentProvider;
+//# sourceMappingURL=stripe.d.ts.map

package/dist/stripe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe.d.ts","sourceRoot":"","sources":["../src/stripe.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAMpF,eAAO,MAAM,eAAe,2BAA2B,CAAC;AACxD,eAAO,MAAM,qBAAqB,sBAAsB,CAAC;AACzD,6FAA6F;AAC7F,eAAO,MAAM,iBAAiB,QAAS,CAAC;AAExC,MAAM,WAAW,aAAa;IAC5B;;;OAGG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,uEAAuE;IACvE,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,sDAAsD;IACtD,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CAC/B;AASD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,eAAe,CAwBtH;AAiBD,6FAA6F;AAC7F,wBAAgB,MAAM,CAAC,OAAO,GAAE,aAAkB,GAAG,eAAe,CA8CnE"}

package/dist/stripe.js

@@ -0,0 +1,116 @@
+// The Stripe adapter (https://docs.stripe.com/api/checkout/sessions/create): a one-time Checkout
+// session per payment, paid on Stripe's page; the verified webhook (`stripeWebhookRoute` in
+// `/next`) grants the plan once Stripe reports the money. Stripe's HTTP API through `fetch`, like
+// mailing's `resend()`: no SDK, and tests inject `fetch`.
+import { err, ok } from "@softure-ai/core";
+import { CHECKOUT_PARAM, PLAN_FIELD } from "./fields.js";
+import { getLocalizedText } from "./plans.js";
+import { STRIPE_PROVIDER } from "./server/payments.js";
+import { describeStripePriceProblem, toStripeAmount } from "./stripe-currency.js";
+import { STRIPE_METADATA } from "./stripe-webhook.js";
+export const STRIPE_API_BASE = "https://api.stripe.com";
+export const STRIPE_SECRET_KEY_ENV = "STRIPE_SECRET_KEY";
+/** How long the Checkout request may take before the buyer sees `billing.payment_failed`. */
+export const STRIPE_TIMEOUT_MS = 10_000;
+function getReturnUrl(returnUrl, result, planId) {
+    const url = new URL(returnUrl);
+    if (planId !== null)
+        url.searchParams.set(PLAN_FIELD, planId);
+    url.searchParams.set(CHECKOUT_PARAM, result);
+    return url.toString();
+}
+/**
+ * The form body of `POST /v1/checkout/sessions` for one payment of the plan: its price as a one-off
+ * line item in Stripe's unit (`toStripeAmount`), the account in `client_reference_id` and the metadata the webhook reads (copied onto
+ * the PaymentIntent, so the charge in Stripe's dashboard names the account too).
+ */
+export function getCheckoutSessionParams(ctx, request) {
+    const { plan, account } = request;
+    const { locale } = ctx.config;
+    const unitAmount = toStripeAmount(plan.price);
+    // The config refuses such a price (`checkPrice`) and `startPayment` checks it first.
+    if (unitAmount === null)
+        throw new Error(`@softure-ai/billing: stripe() cannot charge the price of plan "${plan.id}"`);
+    const params = new URLSearchParams({
+        mode: "payment",
+        locale,
+        client_reference_id: account.id,
+        customer_email: account.email,
+        success_url: getReturnUrl(request.returnUrl, "success", null),
+        cancel_url: getReturnUrl(request.returnUrl, "cancelled", plan.id),
+        "line_items[0][quantity]": "1",
+        "line_items[0][price_data][currency]": plan.price.currency.toLowerCase(),
+        "line_items[0][price_data][unit_amount]": String(unitAmount),
+        "line_items[0][price_data][product_data][name]": getLocalizedText(plan.name, locale),
+        [`metadata[${STRIPE_METADATA.userId}]`]: account.id,
+        [`metadata[${STRIPE_METADATA.planId}]`]: plan.id,
+        [`payment_intent_data[metadata][${STRIPE_METADATA.userId}]`]: account.id,
+        [`payment_intent_data[metadata][${STRIPE_METADATA.planId}]`]: plan.id,
+    });
+    if (plan.description !== undefined)
+        params.set("line_items[0][price_data][product_data][description]", getLocalizedText(plan.description, locale));
+    return params;
+}
+/** The hosted page's URL from Stripe's answer, or null when the answer has none. */
+function readCheckoutUrl(payload) {
+    if (typeof payload !== "object" || payload === null || !Object.hasOwn(payload, "url"))
+        return null;
+    const url = payload.url;
+    return typeof url === "string" && url.startsWith("https://") ? url : null;
+}
+/** Stripe's error type and code for the log; its message can echo the request back. */
+function describeStripeError(payload) {
+    const error = typeof payload === "object" && payload !== null ? payload.error : null;
+    if (typeof error !== "object" || error === null)
+        return "no error body";
+    const { type, code } = error;
+    return [type, code].filter((part) => typeof part === "string").join("/") || "no error type";
+}
+/** `billing({ payment: stripe() })`: card, BLIK and transfer payments on Stripe Checkout. */
+export function stripe(options = {}) {
+    const apiBase = options.apiBase ?? STRIPE_API_BASE;
+    return {
+        name: STRIPE_PROVIDER,
+        collectsInvoiceDetails: false,
+        handsOverRequests: false,
+        checkPrice: describeStripePriceProblem,
+        async startPayment(ctx, request) {
+            const priceProblem = describeStripePriceProblem(request.plan.price);
+            if (priceProblem !== null) {
+                // Only a config built around billing({ ... }) gets here; the options schema refuses it.
+                console.error(`@softure-ai/billing: plan "${request.plan.id}": ${priceProblem}`);
+                return err("billing.payment_failed");
+            }
+            const secretKey = (options.secretKey ?? process.env[STRIPE_SECRET_KEY_ENV] ?? "").trim();
+            if (secretKey === "") {
+                // A deployment without the key cannot take payments until it is set; never the buyer's fault.
+                console.error(`@softure-ai/billing: stripe has no secret key; set ${STRIPE_SECRET_KEY_ENV} or pass stripe({ secretKey })`);
+                return err("billing.payment_failed");
+            }
+            const fetchImpl = options.fetch ?? fetch;
+            let response;
+            try {
+                response = await fetchImpl(new URL("/v1/checkout/sessions", apiBase), {
+                    method: "POST",
+                    headers: { Authorization: `Bearer ${secretKey}`, "Content-Type": "application/x-www-form-urlencoded" },
+                    body: getCheckoutSessionParams(ctx, request),
+                    signal: AbortSignal.timeout(STRIPE_TIMEOUT_MS),
+                    cache: "no-store",
+                });
+            }
+            catch (error) {
+                // A timeout or a network failure: nothing was created that the buyer can pay.
+                console.error(`@softure-ai/billing: the Stripe checkout for plan "${request.plan.id}" could not be created: ${error instanceof Error ? error.name : typeof error}`);
+                return err("billing.payment_failed");
+            }
+            const payload = await response.json().catch(() => null);
+            const url = response.ok ? readCheckoutUrl(payload) : null;
+            if (url === null) {
+                console.error(`@softure-ai/billing: Stripe refused the checkout for plan "${request.plan.id}" (HTTP ${String(response.status)}, ${response.ok ? "no checkout url" : describeStripeError(payload)})`);
+                return err("billing.payment_failed");
+            }
+            return ok({ type: "redirect", url });
+        },
+    };
+}
+//# sourceMappingURL=stripe.js.map

package/dist/stripe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe.js","sourceRoot":"","sources":["../src/stripe.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,4FAA4F;AAC5F,kGAAkG;AAClG,0DAA0D;AAC1D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,UAAU,EAAuB,MAAM,aAAa,CAAC;AAE9E,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,0BAA0B,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,MAAM,CAAC,MAAM,eAAe,GAAG,wBAAwB,CAAC;AACxD,MAAM,CAAC,MAAM,qBAAqB,GAAG,mBAAmB,CAAC;AACzD,6FAA6F;AAC7F,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAcxC,SAAS,YAAY,CAAC,SAAiB,EAAE,MAAsB,EAAE,MAAqB;IACpF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;IAC/B,IAAI,MAAM,KAAK,IAAI;QAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC9D,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,GAAmC,EAAE,OAAuB;IACnG,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAClC,MAAM,EAAE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAC9B,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC9C,qFAAqF;IACrF,IAAI,UAAU,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,kEAAkE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC;IACvH,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,IAAI,EAAE,SAAS;QACf,MAAM;QACN,mBAAmB,EAAE,OAAO,CAAC,EAAE;QAC/B,cAAc,EAAE,OAAO,CAAC,KAAK;QAC7B,WAAW,EAAE,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC;QAC7D,UAAU,EAAE,YAAY,CAAC,OAAO,CAAC,SAAS,EAAE,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;QACjE,yBAAyB,EAAE,GAAG;QAC9B,qCAAqC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,WAAW,EAAE;QACxE,wCAAwC,EAAE,MAAM,CAAC,UAAU,CAAC;QAC5D,+CAA+C,EAAE,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC;QACpF,CAAC,YAAY,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE;QACnD,CAAC,YAAY,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,EAAE;QAChD,CAAC,iCAAiC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,OAAO,CAAC,EAAE;QACxE,CAAC,iCAAiC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,EAAE;KACtE,CAAC,CAAC;IACH,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;QAAE,MAAM,CAAC,GAAG,CAAC,sDAAsD,EAAE,gBAAgB,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;IACnJ,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,oFAAoF;AACpF,SAAS,eAAe,CAAC,OAAgB;IACvC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnG,MAAM,GAAG,GAAa,OAAmC,CAAC,GAAG,CAAC;IAC9D,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5E,CAAC;AAED,uFAAuF;AACvF,SAAS,mBAAmB,CAAC,OAAgB;IAC3C,MAAM,KAAK,GAAY,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI,CAAC,CAAC,CAAE,OAAmC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3H,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,eAAe,CAAC;IACxE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,KAAgC,CAAC;IACxD,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC;AAC9F,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,MAAM,CAAC,UAAyB,EAAE;IAChD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,eAAe,CAAC;IACnD,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,sBAAsB,EAAE,KAAK;QAC7B,iBAAiB,EAAE,KAAK;QACxB,UAAU,EAAE,0BAA0B;QACtC,KAAK,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO;YAC7B,MAAM,YAAY,GAAG,0BAA0B,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACpE,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;gBAC1B,wFAAwF;gBACxF,OAAO,CAAC,KAAK,CAAC,8BAA8B,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,YAAY,EAAE,CAAC,CAAC;gBACjF,OAAO,GAAG,CAAC,wBAAwB,CAAC,CAAC;YACvC,CAAC;YACD,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YACzF,IAAI,SAAS,KAAK,EAAE,EAAE,CAAC;gBACrB,8FAA8F;gBAC9F,OAAO,CAAC,KAAK,CAAC,sDAAsD,qBAAqB,gCAAgC,CAAC,CAAC;gBAC3H,OAAO,GAAG,CAAC,wBAAwB,CAAC,CAAC;YACvC,CAAC;YACD,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;YACzC,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACH,QAAQ,GAAG,MAAM,SAAS,CAAC,IAAI,GAAG,CAAC,uBAAuB,EAAE,OAAO,CAAC,EAAE;oBACpE,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,SAAS,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;oBACtG,IAAI,EAAE,wBAAwB,CAAC,GAAG,EAAE,OAAO,CAAC;oBAC5C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC;oBAC9C,KAAK,EAAE,UAAU;iBAClB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,8EAA8E;gBAC9E,OAAO,CAAC,KAAK,CAAC,sDAAsD,OAAO,CAAC,IAAI,CAAC,EAAE,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC;gBACpK,OAAO,GAAG,CAAC,wBAAwB,CAAC,CAAC;YACvC,CAAC;YACD,MAAM,OAAO,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACjE,MAAM,GAAG,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC1D,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBACjB,OAAO,CAAC,KAAK,CACX,8DAA8D,OAAO,CAAC,IAAI,CAAC,EAAE,WAAW,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,mBAAmB,CAAC,OAAO,CAAC,GAAG,CACtL,CAAC;gBACF,OAAO,GAAG,CAAC,wBAAwB,CAAC,CAAC;YACvC,CAAC;YACD,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACvC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/ui/access-badge.d.ts

@@ -0,0 +1,16 @@
+import { type Locale } from "@softure-ai/core";
+import { type ClassNames } from "@softure-ai/ui";
+import type { Entitlement } from "../contract.js";
+import type { BillingMessages } from "../messages/index.js";
+export type AccessBadgeSlot = "root" | "status" | "detail";
+export interface AccessBadgeProps {
+    readonly entitlement: Entitlement;
+    readonly messages: BillingMessages;
+    readonly locale: Locale;
+    /** The app's IANA time zone, for the dates shown. */
+    readonly timezone: string;
+    readonly classNames?: ClassNames<AccessBadgeSlot>;
+    readonly unstyled?: boolean;
+}
+export declare function AccessBadge({ entitlement, messages, locale, timezone, classNames, unstyled }: AccessBadgeProps): import("react").JSX.Element;
+//# sourceMappingURL=access-badge.d.ts.map

package/dist/ui/access-badge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-badge.d.ts","sourceRoot":"","sources":["../../src/ui/access-badge.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAiB,KAAK,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,KAAK,UAAU,EAAyB,MAAM,gBAAgB,CAAC;AACxE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAG5D,MAAM,MAAM,eAAe,GAAG,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE3D,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qDAAqD;IACrD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,eAAe,CAAC,CAAC;IAClD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AA2BD,wBAAgB,WAAW,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,gBAAgB,+BAiB9G"}

package/dist/ui/access-badge.js

@@ -0,0 +1,43 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// A compact label of where an account stands: "Trial · 5 days left", "Paid · until November 30,
+// 2026", "Lifetime access" or "Read-only". Server-safe: it renders from props, so a server
+// component passes the entitlement it read (`CurrentAccessBadge` in `/next` does).
+import { formatMessage } from "@softure-ai/core";
+import { createSlotClassGetter } from "@softure-ai/ui";
+import { formatDaysLeft, formatLastDay } from "./format.js";
+const TONE = {
+    neutral: "sft:text-foreground",
+    success: "sft:text-success",
+    warning: "sft:text-warning",
+    danger: "sft:text-danger",
+};
+function describe(entitlement, messages, locale, timezone) {
+    switch (entitlement.status) {
+        case "trial":
+            return { status: messages.badge.trial, detail: formatDaysLeft(entitlement.daysLeft, locale, messages), tone: entitlement.isEnding ? "warning" : "neutral" };
+        case "paid":
+            if (entitlement.endsAt === null)
+                return { status: messages.badge.lifetime, tone: "success" };
+            return {
+                status: messages.badge.paid,
+                detail: formatMessage(messages.badge.until, { date: formatLastDay(entitlement.endsAt, locale, timezone) }),
+                tone: entitlement.isEnding ? "warning" : "success",
+            };
+        case "read_only":
+            return { status: messages.badge.readOnly, tone: "danger" };
+    }
+}
+export function AccessBadge({ entitlement, messages, locale, timezone, classNames, unstyled }) {
+    const { status, detail, tone } = describe(entitlement, messages, locale, timezone);
+    const slot = createSlotClassGetter({
+        defaults: {
+            root: "sft:inline-flex sft:items-center sft:gap-1.5 sft:rounded-full sft:border sft:border-border sft:bg-surface sft:px-2.5 sft:py-1 sft:font-sans sft:text-xs",
+            status: `sft:font-medium ${TONE[tone]}`,
+            detail: "sft:text-muted",
+        },
+        classNames,
+        unstyled,
+    });
+    return (_jsxs("span", { className: slot("root"), "data-status": entitlement.status, "data-ending": "isEnding" in entitlement && entitlement.isEnding ? "true" : undefined, children: [_jsx("span", { className: slot("status"), children: status }), detail === undefined ? null : _jsx("span", { className: slot("detail"), children: detail })] }));
+}
+//# sourceMappingURL=access-badge.js.map

package/dist/ui/access-badge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-badge.js","sourceRoot":"","sources":["../../src/ui/access-badge.tsx"],"names":[],"mappings":";AAAA,gGAAgG;AAChG,2FAA2F;AAC3F,mFAAmF;AACnF,OAAO,EAAE,aAAa,EAAe,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAmB,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAGxE,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAgB5D,MAAM,IAAI,GAAmC;IAC3C,OAAO,EAAE,qBAAqB;IAC9B,OAAO,EAAE,kBAAkB;IAC3B,OAAO,EAAE,kBAAkB;IAC3B,MAAM,EAAE,iBAAiB;CAC1B,CAAC;AAEF,SAAS,QAAQ,CAAC,WAAwB,EAAE,QAAyB,EAAE,MAAc,EAAE,QAAgB;IACrG,QAAQ,WAAW,CAAC,MAAM,EAAE,CAAC;QAC3B,KAAK,OAAO;YACV,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,cAAc,CAAC,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;QAC9J,KAAK,MAAM;YACT,IAAI,WAAW,CAAC,MAAM,KAAK,IAAI;gBAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;YAC7F,OAAO;gBACL,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI;gBAC3B,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,aAAa,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;gBAC1G,IAAI,EAAE,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;aACnD,CAAC;QACJ,KAAK,WAAW;YACd,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,QAAQ,EAAoB;IAC7G,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,QAAQ,CAAC,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC;IACnF,MAAM,IAAI,GAAG,qBAAqB,CAAkB;QAClD,QAAQ,EAAE;YACR,IAAI,EAAE,yJAAyJ;YAC/J,MAAM,EAAE,mBAAmB,IAAI,CAAC,IAAI,CAAC,EAAE;YACvC,MAAM,EAAE,gBAAgB;SACzB;QACD,UAAU;QACV,QAAQ;KACT,CAAC,CAAC;IACH,OAAO,CACL,gBAAM,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAe,WAAW,CAAC,MAAM,iBAAe,UAAU,IAAI,WAAW,IAAI,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,aACjJ,eAAM,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAG,MAAM,GAAQ,EAC/C,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,eAAM,SAAS,EAAE,IAAI,CAAC,QAAQ,CAAC,YAAG,MAAM,GAAQ,IAC1E,CACR,CAAC;AACJ,CAAC"}

package/dist/ui/access-notice.d.ts

@@ -0,0 +1,20 @@
+import { type Locale } from "@softure-ai/core";
+import { type ClassNames, type LinkComponentType } from "@softure-ai/ui";
+import type { Entitlement } from "../contract.js";
+import type { BillingMessages } from "../messages/index.js";
+export type AccessNoticeSlot = "root" | "message" | "actions";
+export interface AccessNoticeProps {
+    readonly entitlement: Entitlement;
+    readonly messages: BillingMessages;
+    readonly locale: Locale;
+    /** The app's IANA time zone, for the dates shown. */
+    readonly timezone: string;
+    /** Where to pay or renew (`routes.payment`). */
+    readonly paymentHref: string;
+    /** Renders the link; a plain `<a>` when omitted. */
+    readonly LinkComponent?: LinkComponentType;
+    readonly classNames?: ClassNames<AccessNoticeSlot>;
+    readonly unstyled?: boolean;
+}
+export declare function AccessNotice({ entitlement, messages, locale, timezone, paymentHref, LinkComponent, classNames, unstyled }: AccessNoticeProps): import("react").JSX.Element | null;
+//# sourceMappingURL=access-notice.d.ts.map

package/dist/ui/access-notice.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-notice.d.ts","sourceRoot":"","sources":["../../src/ui/access-notice.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAiB,KAAK,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAc,KAAK,UAAU,EAAyB,KAAK,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAC5G,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAG5D,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,SAAS,GAAG,SAAS,CAAC;AAE9D,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,eAAe,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,qDAAqD;IACrD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,gDAAgD;IAChD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,oDAAoD;IACpD,QAAQ,CAAC,aAAa,CAAC,EAAE,iBAAiB,CAAC;IAC3C,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,CAAC,gBAAgB,CAAC,CAAC;IACnD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAyBD,wBAAgB,YAAY,CAAC,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,iBAAiB,sCAwB5I"}

package/dist/ui/access-notice.js

@@ -0,0 +1,41 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+// The notice an account sees when its access is about to end or has ended, with a link to pay.
+// It renders nothing while access is not in its reminder window. Server-safe and framework-free:
+// the link goes through an injected `LinkComponent` (Next's `Link` in `/next`).
+import { formatMessage } from "@softure-ai/core";
+import { ButtonLink, createSlotClassGetter } from "@softure-ai/ui";
+import { formatLastDay } from "./format.js";
+/** The notice for this entitlement, or null when there is nothing to say. */
+function getNoticeCopy(entitlement, messages, locale, timezone) {
+    const copy = messages.notice;
+    switch (entitlement.status) {
+        case "trial":
+            if (!entitlement.isEnding)
+                return null;
+            return { text: formatMessage(copy.trialEnding, { date: formatLastDay(entitlement.endsAt, locale, timezone) }), action: copy.choosePlan, isEnded: false };
+        case "paid":
+            if (!entitlement.isEnding || entitlement.endsAt === null)
+                return null;
+            return { text: formatMessage(copy.paidEnding, { date: formatLastDay(entitlement.endsAt, locale, timezone) }), action: copy.renew, isEnded: false };
+        case "read_only":
+            return entitlement.reason === "trial_ended"
+                ? { text: copy.trialEnded, action: copy.choosePlan, isEnded: true }
+                : { text: copy.paidEnded, action: copy.renew, isEnded: true };
+    }
+}
+export function AccessNotice({ entitlement, messages, locale, timezone, paymentHref, LinkComponent, classNames, unstyled }) {
+    const notice = getNoticeCopy(entitlement, messages, locale, timezone);
+    if (notice === null)
+        return null;
+    const slot = createSlotClassGetter({
+        defaults: {
+            root: `sft:flex sft:flex-col sft:gap-3 sft:rounded-control sft:border sft:px-4 sft:py-2.5 sft:font-sans sft:text-sm sft:text-foreground ${notice.isEnded ? "sft:border-danger/50 sft:bg-danger/10" : "sft:border-border-strong sft:bg-surface-raised"}`,
+            message: "sft:m-0",
+            actions: "sft:flex sft:shrink-0",
+        },
+        classNames,
+        unstyled,
+    });
+    return (_jsxs("div", { role: "status", className: slot("root"), "data-status": entitlement.status, children: [_jsx("p", { className: slot("message"), children: notice.text }), _jsx("div", { className: slot("actions"), children: _jsx(ButtonLink, { href: paymentHref, LinkComponent: LinkComponent, variant: notice.isEnded ? "primary" : "secondary", size: "sm", unstyled: unstyled, children: notice.action }) })] }));
+}
+//# sourceMappingURL=access-notice.js.map