@stewardhq/sdk 0.1.0-rc.0 → 0.2.0

package/dist/testing.js

@@ -1,5 +1,5 @@
 import { C as BillingProfileSchema, D as API_VERSION, O as ActorRefSchema, R as ExternalRefSchema, a as EVENT_TYPES, d as ACCOUNT_INCLUDES, i as EVENT_DETAIL_SCHEMAS, r as BillingEventSchema, s as LEGACY_EVENT_TYPES, x as AccountUpsertInputSchema, z as IdSchema } from "./_chunks/events.js";
-import { A as webhookEndpointUrlProblem, Gt as applySettingsPatch, Kt as isReturnUrlAllowed, L as ERROR_CODES, M as PlanSetInputSchema, Mt as checkoutRedirectUrl, Nt as isLegacyCheckoutInput, Q as HEADER_REQUEST_ID, Rt as ProductSettingsPatchSchema, S as WebhookEndpointCreateInputSchema, Tt as CheckoutSessionCreateInputSchema, Xt as CatalogSyncInputSchema, Y as HEADER_ACTOR_REF, Z as HEADER_IDEMPOTENCY_KEY, bt as PortalSessionCreateInputSchema, dt as manualInvoiceTotals, ft as splitInclusiveTax, h as buildDoctorReport, lt as ManualInvoiceInputSchema, mt as GrantCreateInputSchema, pt as CancelSubscriptionInputSchema, rt as InvoiceIssueInputSchema, st as InvoiceVoidInputSchema, v as DEFAULT_ENDPOINT_EVENT_TYPES, w as WebhookEndpointRotateInputSchema, zt as ProductSettingsSchema } from "./_chunks/src.js";
+import { $ as InvoiceIssueInputSchema, A as webhookEndpointUrlProblem, Bt as applySettingsPatch, G as HEADER_ACTOR_REF, Gt as CatalogSyncInputSchema, J as HEADER_REQUEST_ID, L as ERROR_CODES, M as PlanSetInputSchema, Nt as ProductSettingsPatchSchema, Ot as checkoutRedirectUrl, Pt as ProductSettingsSchema, S as WebhookEndpointCreateInputSchema, Vt as isReturnUrlAllowed, at as ManualInvoiceInputSchema, ct as splitInclusiveTax, gt as PortalSessionCreateInputSchema, h as buildDoctorReport, lt as CancelSubscriptionInputSchema, q as HEADER_IDEMPOTENCY_KEY, rt as InvoiceVoidInputSchema, st as manualInvoiceTotals, ut as GrantCreateInputSchema, v as DEFAULT_ENDPOINT_EVENT_TYPES, w as WebhookEndpointRotateInputSchema, xt as CheckoutSessionCreateInputSchema } from "./_chunks/src.js";
 import { i as LIVE_SUBSCRIPTION_STATUSES, r as isValidVkn, s as resolveEntitlements, t as isE164 } from "./_chunks/validators.js";
 import { t as createSteward } from "./_chunks/steward.js";
 import { n as signWebhook } from "./_chunks/webhook.js";
@@ -404,8 +404,7 @@ function toCheckoutSession(w, row) {
 		currency: price.currency,
 		provider: "fake",
 		locale: row.locale,
-		returnUrl: row.returnUrl,
-		successUrl: row.successUrl ?? row.returnUrl,
+		successUrl: row.successUrl,
 		cancelUrl: row.cancelUrl,
 		consents: row.consents,
 		actorRef: row.actorRef,
@@ -630,16 +629,6 @@ function saveProfile(row, profile) {
 	row.profile = saved;
 	return saved;
 }
-function putBillingProfile(w, ref, profile) {
-	const row = w.accounts.get(ref);
-	if (!row) return fail("account_not_found");
-	const saved = saveProfile(row, profile);
-	const { state } = commitAccountChange(w, ref, "billing_profile.updated");
-	return ok({
-		...saved,
-		account: state
-	});
-}
 function accountDetail(w, ref, include) {
 	const row = w.accounts.get(ref);
 	if (!row) return null;
@@ -668,11 +657,8 @@ function accountDetail(w, ref, include) {
 	if (want.has("invoices")) detail.invoices = newest(w.invoices.filter((i) => i.accountRef === ref)).map(toInvoice);
 	return detail;
 }
-/** Sahte sağlayıcının ödeme sayfası (servisin `providers/fake`); eski gövdenin `providerPayload`'ı. */
-const providerPageUrl = (baseUrl, token) => `${baseUrl}/public/v1/providers/fake/checkout/${token}`;
 /** Hosted checkout sayfası (servisin `hostedCheckoutUrl`); sahtede `hosted.ts` sunar. */
 const hostedPageUrl = (baseUrl, id, pageKey) => `${baseUrl}/public/v1/checkout/${id}?k=${pageKey}`;
-const FAKE_PROVIDER_TOKEN_TTL_MS = 18e5;
 const PAGE_KEY_BYTES = 32;
 /** Servis: `appUrl`'in origin'i + `extraReturnOrigins` (sahte, ayarlanmadıysa her adresi kabul eder). */
 function returnUrlAllowed(w, url) {
@@ -687,56 +673,12 @@ function randomPageKey() {
 	const bytes = globalThis.crypto.getRandomValues(new Uint8Array(PAGE_KEY_BYTES));
 	return btoa(String.fromCharCode(...bytes)).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
 }
-function createCheckoutSession(w, baseUrl, ref, input, actorRef) {
-	const row = w.accounts.get(ref);
-	if (!row) return fail("account_not_found");
-	const { settings } = w;
-	if (!returnUrlAllowed(w, input.successUrl)) return fail("return_url_not_allowed");
-	if (liveSubscription(w, ref)) return fail("already_subscribed");
-	const price = sellablePrice(w, input.planCode, input.interval, input.currency);
-	if (!price) return fail("plan_not_sellable");
-	const now = w.now();
-	saveProfile(row, input.profile);
-	const token = `fake_tok_${globalThis.crypto.randomUUID()}`;
-	const expiresAt = Math.min(now + settings.checkoutTtlMinutes * 6e4, now + FAKE_PROVIDER_TOKEN_TTL_MS);
-	const session = {
-		id: w.id(),
-		accountRef: ref,
-		priceId: price.id,
-		status: "open",
-		locale: input.locale,
-		returnUrl: input.successUrl,
-		successUrl: null,
-		cancelUrl: null,
-		consentDocs: [],
-		prefill: null,
-		pageKey: null,
-		consents: input.consents,
-		actorRef,
-		failureReason: null,
-		subscriptionId: null,
-		expiresAt,
-		createdAt: now,
-		completedAt: null,
-		providerToken: token
-	};
-	w.sessions.push(session);
-	commitAccountChange(w, ref, "checkout.opened");
-	return ok({
-		...toCheckoutSession(w, session),
-		url: null,
-		providerPayload: {
-			type: "redirect",
-			url: providerPageUrl(baseUrl, token)
-		}
-	});
-}
 /**
-* `createHostedCheckoutSession` (hosted gövde, F2b): sağlayıcıya gidilmez; doğrulama sırası ve
-* kodları servisle aynı (hesap, dönüş origin'leri, canlı abonelik, satılabilir fiyat). Hesap
-* yoksa `displayName` ile açılır. `url` sahte steward'ın hosted sayfasıdır (`hosted.ts`).
+* `createHostedCheckoutSession` (service): no provider call; validation order and codes match the
+* service (account, return origins, live subscription, sellable price). A missing account is
+* opened with `displayName`. `url` is the fake steward's hosted page (`hosted.ts`).
 */
-function createHostedCheckoutSession(w, baseUrl, ref, input, actorRef) {
+function createCheckoutSession(w, baseUrl, ref, input, actorRef) {
 	const existing = w.accounts.get(ref);
 	if (!existing && input.displayName === void 0) return fail("account_not_found");
 	const { settings } = w;
@@ -757,7 +699,6 @@ function createHostedCheckoutSession(w, baseUrl, ref, input, actorRef) {
 		priceId: price.id,
 		status: "open",
 		locale: input.locale ?? settings.defaultLocale,
-		returnUrl: input.successUrl,
 		successUrl: input.successUrl,
 		cancelUrl: input.cancelUrl ?? null,
 		consentDocs: (input.consents ?? []).map(({ document, version, url }) => ({
@@ -773,8 +714,7 @@ function createHostedCheckoutSession(w, baseUrl, ref, input, actorRef) {
 		subscriptionId: null,
 		expiresAt: now + settings.checkoutTtlMinutes * 6e4,
 		createdAt: now,
-		completedAt: null,
-		providerToken: null
+		completedAt: null
 	};
 	w.sessions.push(session);
 	const { state } = commitAccountChange(w, ref, "checkout.opened");
@@ -831,11 +771,10 @@ function hostedProfile(row, prefill) {
 * Hosted oturum (F2b): sahte sayfada `details` adımı yok. Ödeme sonucundan önce servisteki
 * gönderimin izi yazılır: hesabın profili yoksa ön doldurmadan sahte profil (varsa aynen
 * kalır: sayfa saklı profili ön doldurur), belgelerin onay izi, `billing_profile.updated`.
-* Eski gövdede no-op. Hesap bu arada abone olduysa servis `details`'te oturumu kapatır;
+* Hesap bu arada abone olduysa servis `details`'te oturumu kapatır;
 * çağıranlar o durumda bunu çağırmaz.
 */
 function submitHostedDetails(w, session) {
-	if (session.successUrl === null) return;
 	const row = account(w, session.accountRef);
 	if (!row.profile) saveProfile(row, hostedProfile(row, session.prefill));
 	const acceptedAt = iso(w.now());
@@ -1239,8 +1178,9 @@ function resyncAccount(w, ref) {
 }
 /**
 * `deleteAccount` (`domain/account-deletion.ts`, F4e): önkoşullar sırayla (hesap yok 404,
-* silinmiş 410, canlı abonelik, formu açık checkout — sahte steward'da yalnızca eski
-* gövdeli oturumun formu vardır) ve hiçbiri tutmazsa değişiklik yok. Sonra anonimleştirme:
+* silinmiş 410, canlı abonelik) ve hiçbiri tutmazsa değişiklik yok. The service's
+* `checkout_in_progress` (open provider form) never happens here: the fake hosted page has no
+* provider form, so open sessions are formless and deletion closes them. Sonra anonimleştirme:
 * ad/metadata/profil, oturumların ön doldurması/anahtarı ve onay izinin `ipHash`/`userAgent`'ı,
 * portal oturumları, aktif grant'ler; eski event yüklerinde `displayName`. Faturalar kalır.
 */
@@ -1250,8 +1190,6 @@ function deleteAccount(w, ref, actorRef) {
 	if (row.deletedAt !== void 0) return fail("account_deleted");
 	const live = liveSubscription(w, ref);
 	if (live) return fail("subscription_active", `abonelik ${live.id} canlı; önce hemen iptal edin (mode: immediate)`);
-	const withForm = w.sessions.find((s) => s.accountRef === ref && s.status === "open" && s.providerToken !== null);
-	if (withForm) return fail("checkout_in_progress", `checkout ${withForm.id} sağlayıcı formu açık; süresi ${iso(withForm.expiresAt)} sonrasında dolar, kapanınca tekrar deneyin`);
 	const now = w.now();
 	for (const session of w.sessions.filter((s) => s.accountRef === ref)) {
 		if (session.status === "open") Object.assign(session, {
@@ -1501,33 +1439,10 @@ function portalInvoiceDocument(w, session, invoiceId) {
 		filename: `${safe === "" ? "invoice" : safe}.pdf`
 	};
 }
-function toRecord(w, event) {
-	const d = event.delivery;
-	return {
-		event: event.payload,
-		deliveries: d && w.endpoint ? [{
-			endpointId: w.endpoint.id,
-			status: d.status,
-			attempts: d.attempts,
-			lastHttpStatus: d.lastHttpStatus,
-			lastError: d.lastError,
-			nextAttemptAt: d.status === "pending" ? iso(d.nextAttemptAt) : null,
-			deliveredAt: isoOrNull(d.deliveredAt)
-		}] : []
-	};
-}
-function listEvents(w, query) {
-	if (query.accountRef !== void 0 && !w.accounts.has(query.accountRef)) return fail("account_not_found");
-	const rows = w.events.filter((e) => (query.accountRef === void 0 || e.accountRef === query.accountRef) && (query.cursor === void 0 || e.id < query.cursor)).sort((a, b) => a.id < b.id ? 1 : -1);
-	const page = rows.slice(0, query.limit);
-	return ok({
-		items: page.map((e) => toRecord(w, e)),
-		nextCursor: rows.length > query.limit ? page.at(-1).id : null
-	});
-}
+/** Requeues the event's delivery (dead or delivered included); `false` if there is no such event. */
 function redeliverEvent(w, id) {
 	const event = w.events.find((e) => e.id === id);
-	if (!event) return null;
+	if (!event) return false;
 	if (event.delivery) Object.assign(event.delivery, {
 		status: "pending",
 		attempts: 0,
@@ -1535,7 +1450,7 @@ function redeliverEvent(w, id) {
 		lastError: null,
 		deliveredAt: null
 	});
-	return toRecord(w, event);
+	return true;
 }
 /**
 * Tahsilat sonucu. Dunning'deki abonelikte AYNI başarısız siparişin yeniden
@@ -1713,17 +1628,16 @@ function expireScheduledCancellations(w) {
 	}
 }
 /**
-* Süresi dolan açık oturum: sahte sağlayıcıda ödenmemiş form (`fake:not_completed`).
+* Expired open session (formless: the fake hosted page has no provider form, so `expired`).
 * Servis gibi kapanan oturumun `expiresAt`'i job kirasının sonu (o an + 5 dk) kalır.
 */
 function expireCheckoutSessions(w) {
 	const now = w.now();
 	for (const session of w.sessions) {
 		if (session.status !== "open" || session.expiresAt > now) continue;
-		const failureReason = session.providerToken === null ? "expired" : "expired:fake:not_completed";
 		Object.assign(session, {
 			status: "expired",
-			failureReason,
+			failureReason: "expired",
 			completedAt: now,
 			expiresAt: now + 3e5,
 			...CLOSED_SESSION_CLEANUP
@@ -2080,7 +1994,6 @@ const MUTATING = /* @__PURE__ */ new Set([
 	"DELETE"
 ]);
 const KEY_RE = /^[A-Za-z0-9_.:-]{8,200}$/;
-const EVENT_ID = /^evt_[0-9a-f-]{36}$/;
 const json = (body, status = 200, headers = {}) => ({
 	status,
 	body: JSON.stringify(body),
@@ -2206,23 +2119,6 @@ function routes(w, config) {
 			if (notModified(ctx.headers.get("if-none-match"), etag)) return empty(304, { etag });
 			return json(state, 200, { etag });
 		}),
-		route("GET", "accounts/:ref/entitlements", (ctx) => {
-			const accountRef = ref(ctx);
-			if (!accountRef) return ctx.error("invalid_account_ref");
-			if (!w.accounts.has(accountRef)) return ctx.error("account_not_found");
-			const snapshot = toSnapshot(storedState(w, accountRef));
-			const etag = `"${snapshot.version}"`;
-			if (notModified(ctx.headers.get("if-none-match"), etag)) return empty(304, { etag });
-			return json(snapshot, 200, { etag });
-		}),
-		route("PUT", "accounts/:ref/billing-profile", (ctx) => {
-			const accountRef = ref(ctx);
-			if (!accountRef) return ctx.error("invalid_account_ref");
-			const parsed = parseBody(ctx, BillingProfileSchema);
-			if (!parsed.ok) return parsed.reply;
-			const result = putBillingProfile(w, accountRef, parsed.data);
-			return result.ok ? json(result.value) : failure(ctx, result);
-		}),
 		route("PUT", "accounts/:ref/plan", (ctx) => {
 			const accountRef = ref(ctx);
 			if (!accountRef) return ctx.error("invalid_account_ref");
@@ -2242,7 +2138,7 @@ function routes(w, config) {
 			if (!accountRef) return ctx.error("invalid_account_ref");
 			const parsed = parseBody(ctx, CheckoutSessionCreateInputSchema);
 			if (!parsed.ok) return parsed.reply;
-			const result = isLegacyCheckoutInput(parsed.data) ? createCheckoutSession(w, config.baseUrl, accountRef, parsed.data, ctx.actorRef) : createHostedCheckoutSession(w, config.baseUrl, accountRef, parsed.data, ctx.actorRef);
+			const result = createCheckoutSession(w, config.baseUrl, accountRef, parsed.data, ctx.actorRef);
 			return result.ok ? json(result.value, 201) : failure(ctx, result);
 		}),
 		route("POST", "accounts/:ref/portal-sessions", (ctx) => {
@@ -2314,25 +2210,6 @@ function routes(w, config) {
 					"x-content-sha256": sha256
 				}
 			};
-		}),
-		route("GET", "events", (ctx) => {
-			const query = ctx.url.searchParams;
-			const accountRef = query.get("account") ?? void 0;
-			const cursor = query.get("cursor") ?? void 0;
-			const limit = Number(query.get("limit") ?? 50);
-			if (accountRef !== void 0 && !ExternalRefSchema.safeParse(accountRef).success) return ctx.error("invalid_account_ref");
-			if (cursor !== void 0 && !EVENT_ID.test(cursor)) return ctx.error("invalid_cursor");
-			if (!Number.isInteger(limit) || limit < 1 || limit > 200) return ctx.error("invalid_limit", "1–200");
-			const result = listEvents(w, {
-				...accountRef !== void 0 ? { accountRef } : {},
-				...cursor !== void 0 ? { cursor } : {},
-				limit
-			});
-			return result.ok ? json(result.value) : failure(ctx, result);
-		}),
-		route("POST", "events/:id/redeliver", (ctx) => {
-			const record = EVENT_ID.test(ctx.params.id ?? "") ? redeliverEvent(w, ctx.params.id) : null;
-			return record ? json(record) : ctx.error("event_not_found");
 		})
 	];
 }
@@ -3679,7 +3556,6 @@ function createFakeSteward(options = {}) {
 			},
 			async checkoutCanceled(sessionId) {
 				const row = sessionRow(w, sessionId);
-				if (row.successUrl === null) throw new Error(`simulate.checkoutCanceled: ${sessionId} eski gövdeli oturum (vazgeç yalnızca hosted sayfada)`);
 				cancelCheckout(w, row);
 				return checkoutSessionResponse(w, sessionId);
 			},
@@ -3744,6 +3620,9 @@ function createFakeSteward(options = {}) {
 					out.push(delivery);
 				}
 				return out;
+			},
+			redeliver(eventId) {
+				if (!redeliverEvent(w, eventId)) throw new Error(`simulate.redeliver: unknown event ${eventId}`);
 			}
 		},
 		connect(next) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@stewardhq/sdk",
-  "version": "0.1.0-rc.0",
+  "version": "0.2.0",
   "description": "Steward SDK: contract schemas, typed API client and webhook signing.",
   "type": "module",
   "repository": {
@@ -57,7 +57,7 @@
     "typescript": "^5.9.0",
     "vitest": "^3.0.0",
     "workerd": "^1.20260916.1",
-    "@z9cloud/steward-contract": "0.2.0"
+    "@steward/contract": "0.2.0"
   },
   "scripts": {
     "build": "tsdown && node scripts/check-dist.mjs",

package/dist/_chunks/locale.js

@@ -1,17 +0,0 @@
-//#region src/locale.ts
-/** `tr`, `tr-TR` → tr; diğer her dil → en. */
-function localeOf(locale) {
-	return locale.toLowerCase().startsWith("tr") ? "tr" : "en";
-}
-/**
-* Hosted sayfa dili (`Checkout`, `CustomerPortal`): BCP-47 benzeri etiketin birincil alt etiketi
-* (`tr`, `tr-TR`, `EN_us` → tr/en). Desteklenmeyen dil ya da boş değer → `undefined`: çağıran
-* dili göndermez, steward ürün ayarı `defaultLocale`'i kullanır (ürünün dil algısı sayfayı bozmasın).
-*/
-function hostedLocaleOf(locale) {
-	if (typeof locale !== "string") return void 0;
-	const primary = locale.trim().toLowerCase().split(/[-_]/)[0];
-	return primary === "tr" || primary === "en" ? primary : void 0;
-}
-//#endregion
-export { localeOf as n, hostedLocaleOf as t };