@umituz/web-payment 0.0.0-stage → 1.0.1

package/dist/server.js

@@ -0,0 +1,622 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/server.ts
+var server_exports = {};
+__export(server_exports, {
+  API_BASE_URL: () => API_BASE_URL,
+  BillingApiError: () => BillingApiError,
+  BillingClient: () => BillingClient,
+  CHECKOUT_ID_PARAM: () => CHECKOUT_ID_PARAM,
+  CHECKOUT_ID_PLACEHOLDER: () => CHECKOUT_ID_PLACEHOLDER,
+  DEFAULT_WEBHOOK_TOLERANCE_MS: () => DEFAULT_WEBHOOK_TOLERANCE_MS,
+  PAYMENT_PROVIDER: () => PAYMENT_PROVIDER,
+  PAYMENT_PROVIDER_VALUES: () => PAYMENT_PROVIDER_VALUES,
+  PolarBillingClient: () => PolarBillingClient,
+  SANDBOX_API_BASE_URL: () => SANDBOX_API_BASE_URL,
+  asCheckoutCompleted: () => asCheckoutCompleted,
+  asOrderPaid: () => asOrderPaid,
+  asSubscriptionChanged: () => asSubscriptionChanged,
+  buildCheckoutMetadata: () => buildCheckoutMetadata,
+  createBillingClient: () => createBillingClient,
+  createPaymentClient: () => createPaymentClient,
+  createPolarClient: () => createPolarClient,
+  formatReceiptNumber: () => formatReceiptNumber,
+  isBillingApiError: () => isBillingApiError,
+  isKnownPaymentProvider: () => isKnownPaymentProvider,
+  parsePolarWebhookEvent: () => parsePolarWebhookEvent,
+  parseProductIds: () => parseProductIds,
+  parseWebhookEvent: () => parseWebhookEvent,
+  productIdOf: () => productIdOf,
+  readCheckoutMetadata: () => readCheckoutMetadata,
+  sandboxEnabled: () => sandboxEnabled,
+  successUrlWithCheckoutId: () => successUrlWithCheckoutId,
+  verifyPolarWebhook: () => verifyPolarWebhook,
+  verifyWebhook: () => verifyWebhook
+});
+module.exports = __toCommonJS(server_exports);
+
+// src/infrastructure/constants/billing.constants.ts
+var API_BASE_URL = "https://api.polar.sh/v1";
+
+// src/infrastructure/http/http-client.ts
+var DEFAULT_TIMEOUT_MS = 15e3;
+var FetchHttpClient = class {
+  async request(request) {
+    const init = {
+      method: request.method,
+      headers: {
+        Accept: "application/json",
+        ...request.headers ?? {}
+      }
+    };
+    if (request.body !== void 0) {
+      init.body = JSON.stringify(request.body);
+      init.headers["Content-Type"] = "application/json";
+    }
+    const timeoutMs = request.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const controller = new AbortController();
+    let timedOut = false;
+    const timer = setTimeout(() => {
+      timedOut = true;
+      controller.abort();
+    }, timeoutMs);
+    const forwardAbort = () => controller.abort();
+    if (request.signal) {
+      if (request.signal.aborted) controller.abort();
+      else request.signal.addEventListener("abort", forwardAbort);
+    }
+    init.signal = controller.signal;
+    let response;
+    try {
+      response = await fetch(request.url, init);
+    } catch (error) {
+      if (timedOut && error instanceof Error && error.name === "AbortError") {
+        throw new DOMException(`Request timed out after ${timeoutMs}ms`, "TimeoutError");
+      }
+      throw error;
+    } finally {
+      clearTimeout(timer);
+      request.signal?.removeEventListener("abort", forwardAbort);
+    }
+    const bodyText = await response.text();
+    let data = null;
+    if (bodyText.length > 0) {
+      try {
+        data = JSON.parse(bodyText);
+      } catch {
+        data = null;
+      }
+    }
+    return {
+      status: response.status,
+      ok: response.ok,
+      data,
+      text: async () => bodyText
+    };
+  }
+};
+
+// src/infrastructure/services/product.repository.ts
+var BillingApiError = class _BillingApiError extends Error {
+  constructor(message, status, body) {
+    super(message);
+    this.status = status;
+    this.body = body;
+    this.name = "BillingApiError";
+    Object.setPrototypeOf(this, _BillingApiError.prototype);
+  }
+};
+function isBillingApiError(error) {
+  return error instanceof BillingApiError;
+}
+var defaultClient = new FetchHttpClient();
+
+// src/infrastructure/services/billing.client.ts
+var SANDBOX_API_BASE_URL = "https://sandbox-api.polar.sh/v1";
+function resolveBaseUrl(config) {
+  if (config.baseUrl) return config.baseUrl;
+  return config.sandbox ? SANDBOX_API_BASE_URL : API_BASE_URL;
+}
+function mapCheckout(dto) {
+  return {
+    id: dto.id,
+    url: dto.url ?? "",
+    status: dto.status,
+    customerId: dto.customer_id ?? void 0,
+    customerEmail: dto.customer_email ?? void 0,
+    subscriptionId: dto.subscription_id ?? null,
+    metadata: dto.metadata ?? void 0
+  };
+}
+function mapSubscription(dto) {
+  return {
+    id: dto.id,
+    status: dto.status,
+    productId: dto.product_id,
+    amountCents: dto.amount,
+    currency: dto.currency,
+    currentPeriodStart: dto.current_period_start ?? void 0,
+    currentPeriodEnd: dto.current_period_end ?? void 0,
+    cancelAtPeriodEnd: dto.cancel_at_period_end,
+    canceledAt: dto.canceled_at ?? null,
+    endsAt: dto.ends_at ?? null,
+    startedAt: dto.started_at ?? void 0,
+    customerId: dto.customer_id ?? "",
+    metadata: dto.metadata ?? {}
+  };
+}
+var PolarBillingClient = class {
+  provider = "polar";
+  http;
+  baseUrl;
+  headers;
+  constructor(config) {
+    this.http = config.http ?? new FetchHttpClient();
+    this.baseUrl = resolveBaseUrl(config).replace(/\/$/, "");
+    this.headers = { Authorization: `Bearer ${config.apiToken}` };
+  }
+  async request(method, path, body) {
+    const response = await this.http.request({
+      method,
+      url: `${this.baseUrl}${path}`,
+      headers: this.headers,
+      body
+    });
+    if (!response.ok) {
+      throw new BillingApiError(
+        `Billing API ${method} ${path} failed with ${response.status}`,
+        response.status,
+        await response.text()
+      );
+    }
+    return response.data ?? {};
+  }
+  async createProduct(params) {
+    const dto = await this.request("POST", "/products", {
+      name: params.name,
+      recurring_interval: null,
+      ...params.description ? { description: params.description } : {},
+      prices: [
+        {
+          amount_type: "fixed",
+          price_currency: params.currency ?? "usd",
+          price_amount: params.amountCents
+        }
+      ],
+      ...params.metadata ? { metadata: params.metadata } : {}
+    });
+    return { id: dto.id, name: dto.name ?? params.name };
+  }
+  async createCheckout(params) {
+    const dto = await this.request("POST", "/checkouts", {
+      products: [params.productId],
+      ...params.amountCents !== void 0 ? {
+        prices: {
+          [params.productId]: [
+            {
+              amount_type: "fixed",
+              price_currency: params.currency ?? "usd",
+              price_amount: params.amountCents
+            }
+          ]
+        }
+      } : {},
+      ...params.successUrl ? { success_url: params.successUrl } : {},
+      ...params.customerId ? { customer_id: params.customerId } : {},
+      ...params.customerEmail ? { customer_email: params.customerEmail } : {},
+      ...params.externalCustomerId ? { external_customer_id: params.externalCustomerId } : {},
+      ...params.allowDiscountCodes !== void 0 ? { allow_discount_codes: params.allowDiscountCodes } : {},
+      ...params.metadata ? { metadata: params.metadata } : {}
+    });
+    return mapCheckout(dto);
+  }
+  async getCheckout(id) {
+    const dto = await this.request("GET", `/checkouts/${encodeURIComponent(id)}`);
+    return mapCheckout(dto);
+  }
+  async createPortalSession(customerId, returnUrl) {
+    const dto = await this.request(
+      "POST",
+      "/customer-sessions",
+      {
+        customer_id: customerId,
+        ...returnUrl ? { return_url: returnUrl } : {}
+      }
+    );
+    const url = dto.customer_portal_url;
+    if (!url) {
+      throw new BillingApiError("Billing customer portal session returned no URL", 500, JSON.stringify(dto));
+    }
+    return { url };
+  }
+  async getSubscription(id) {
+    const dto = await this.request("GET", `/subscriptions/${encodeURIComponent(id)}`);
+    return mapSubscription(dto);
+  }
+  async listSubscriptions(filter = {}) {
+    const query = new URLSearchParams();
+    if (filter.customerId) query.set("customer_id", filter.customerId);
+    if (filter.productId) query.set("product_id", filter.productId);
+    const suffix = query.size > 0 ? `?${query.toString()}` : "";
+    const first = await this.request("GET", `/subscriptions${suffix}`);
+    const records = [...first.items ?? []];
+    const maxPage = typeof first.pagination?.max_page === "number" ? first.pagination.max_page : 1;
+    for (let page = 2; page <= maxPage; page += 1) {
+      const next = await this.request(
+        "GET",
+        `/subscriptions${suffix}${suffix ? "&" : "?"}page=${page}`
+      );
+      records.push(...next.items ?? []);
+    }
+    return records.map(mapSubscription);
+  }
+  async updateSubscription(id, patch) {
+    const body = patch.cancelAtPeriodEnd !== void 0 ? { cancel_at_period_end: patch.cancelAtPeriodEnd } : void 0;
+    const dto = await this.request(
+      "PATCH",
+      `/subscriptions/${encodeURIComponent(id)}`,
+      body
+    );
+    return mapSubscription(dto);
+  }
+};
+var BillingClient = PolarBillingClient;
+function createPaymentClient(config) {
+  if (config.provider === "stripe") {
+    throw new Error('Stripe provider client is not yet supported. Use provider "polar" or custom adapter.');
+  }
+  return new PolarBillingClient(config);
+}
+
+// src/domain/enums/payment-provider.enum.ts
+var PAYMENT_PROVIDER = {
+  POLAR: "polar",
+  STRIPE: "stripe"
+};
+var PAYMENT_PROVIDER_VALUES = Object.values(PAYMENT_PROVIDER);
+var PAYMENT_PROVIDER_SET = new Set(PAYMENT_PROVIDER_VALUES);
+function isKnownPaymentProvider(value) {
+  return typeof value === "string" && PAYMENT_PROVIDER_SET.has(value);
+}
+
+// src/infrastructure/webhook/verify-webhook.ts
+var KNOWN_SECRET_PREFIXES = ["whsec_"];
+function headerValue(headers, name) {
+  if (typeof headers.get === "function") {
+    const value = headers.get(name);
+    return value ?? void 0;
+  }
+  const record = headers;
+  return record[name] ?? record[name.toLowerCase()];
+}
+function stripSecretPrefix(secret) {
+  for (const prefix of KNOWN_SECRET_PREFIXES) {
+    if (secret.startsWith(prefix)) return secret.slice(prefix.length);
+  }
+  return secret;
+}
+function base64ToBytes(value) {
+  try {
+    const normalized = value.replace(/-/g, "+").replace(/_/g, "/");
+    const binary = atob(normalized);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i += 1) bytes[i] = binary.charCodeAt(i);
+    return bytes;
+  } catch {
+    return null;
+  }
+}
+function encodeUtf8(value) {
+  return new TextEncoder().encode(value);
+}
+async function hmacSha256(keyBytes, payload) {
+  const cryptoRef = globalThis.crypto;
+  if (!cryptoRef?.subtle) {
+    throw new Error("WebCrypto (crypto.subtle) is not available in this runtime");
+  }
+  const key = await cryptoRef.subtle.importKey(
+    "raw",
+    keyBytes,
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const signature = await cryptoRef.subtle.sign("HMAC", key, encodeUtf8(payload));
+  const bytes = new Uint8Array(signature);
+  let binary = "";
+  for (let i = 0; i < bytes.length; i += 1) binary += String.fromCharCode(bytes[i]);
+  return btoa(binary);
+}
+function keyCandidates(secret) {
+  const stripped = stripSecretPrefix(secret);
+  const decoded = base64ToBytes(stripped);
+  const candidates = [];
+  if (decoded && decoded.length > 0) candidates.push(decoded);
+  const raw = encodeUtf8(secret);
+  if (raw.length > 0) candidates.push(raw);
+  const rawStripped = encodeUtf8(stripped);
+  if (rawStripped.length > 0 && rawStripped.length !== raw.length) candidates.push(rawStripped);
+  return candidates;
+}
+function signaturesFromHeader(header) {
+  return header.split(",").map((part) => part.trim()).filter((part) => part.length > 0).map((part) => part.startsWith("v1,") ? part.slice(3) : part);
+}
+var DEFAULT_WEBHOOK_TOLERANCE_MS = 5 * 60 * 1e3;
+async function verifyWebhook(rawBody, headers, secret, options = {}) {
+  const id = headerValue(headers, "webhook-id");
+  const timestamp = headerValue(headers, "webhook-timestamp");
+  const signatureHeader = headerValue(headers, "webhook-signature");
+  if (!id || !timestamp || !signatureHeader || !secret) return false;
+  if (options.toleranceMs !== void 0) {
+    const age = Math.abs(Date.now() - Number(timestamp) * 1e3);
+    if (!Number.isFinite(age) || age > options.toleranceMs) return false;
+  }
+  const expectedSignatures = signaturesFromHeader(signatureHeader);
+  if (expectedSignatures.length === 0) return false;
+  const payload = `${id}.${timestamp}.${rawBody}`;
+  for (const key of keyCandidates(secret)) {
+    const computed = await hmacSha256(key, payload);
+    for (const expected of expectedSignatures) {
+      if (timingSafeEqual(computed, expected)) return true;
+    }
+  }
+  return false;
+}
+function timingSafeEqual(a, b) {
+  if (a.length !== b.length) return false;
+  let mismatch = 0;
+  for (let i = 0; i < a.length; i += 1) mismatch |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  return mismatch === 0;
+}
+var verifyPolarWebhook = verifyWebhook;
+
+// src/domain/utils/minor-units.ts
+var MINOR_UNIT_DIVISOR = 100;
+var ZERO_DECIMAL_CURRENCIES = /* @__PURE__ */ new Set([
+  "JPY",
+  "KRW",
+  "VND",
+  "CLP",
+  "PYG",
+  "XAF",
+  "XOF",
+  "BIF",
+  "DJF",
+  "GNF",
+  "XPF"
+]);
+function minorUnitDivisor(currency) {
+  return ZERO_DECIMAL_CURRENCIES.has(currency.toUpperCase()) ? 1 : MINOR_UNIT_DIVISOR;
+}
+function toMajorUnits(amount, currency) {
+  return amount / minorUnitDivisor(currency);
+}
+
+// src/infrastructure/webhook/parse-event.ts
+var SUBSCRIPTION_EVENT_TYPES = /* @__PURE__ */ new Set([
+  "subscription.active",
+  "subscription.canceled",
+  "subscription.updated",
+  "subscription.uncanceled",
+  "subscription.revoked"
+]);
+function readString(value) {
+  return typeof value === "string" && value.length > 0 ? value : null;
+}
+function readNumber(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
+function readObject(value) {
+  return value !== null && typeof value === "object" ? value : null;
+}
+function readMetadata(value) {
+  const metadata = readObject(value);
+  if (!metadata)
+    return {};
+  return Object.fromEntries(Object.entries(metadata).filter((entry) => typeof entry[1] === "string"));
+}
+function parseWebhookEvent(rawBody) {
+  let parsed;
+  try {
+    parsed = JSON.parse(rawBody);
+  } catch {
+    return null;
+  }
+  const envelope = readObject(parsed);
+  const type = envelope ? readString(envelope.type) : null;
+  const data = envelope ? readObject(envelope.data) : null;
+  if (!envelope || !type || !data)
+    return null;
+  return { type, data };
+}
+function asCheckoutCompleted(event) {
+  if (event.type !== "checkout.completed")
+    return null;
+  const data = event.data;
+  const product = readObject(data.product);
+  const customer = readObject(data.customer);
+  const minorUnits = readNumber(data.total_amount ?? data.amount);
+  const currency = readString(data.currency);
+  return {
+    checkoutId: readString(data.id),
+    productId: readString(data.product_id) ?? (product ? readString(product.id) : null),
+    customerEmail: readString(data.customer_email) ?? (customer ? readString(customer.email) : null),
+    customerName: readString(data.customer_name) ?? (customer ? readString(customer.name) : null),
+    amount: minorUnits !== null && currency ? toMajorUnits(minorUnits, currency) : null,
+    currency,
+    metadata: readMetadata(data.metadata),
+    createdAt: readString(data.created_at) ?? readString(data.createdAt)
+  };
+}
+function asSubscriptionChanged(event) {
+  if (!SUBSCRIPTION_EVENT_TYPES.has(event.type))
+    return null;
+  const data = event.data;
+  const minorUnits = readNumber(data.amount);
+  const currency = readString(data.currency);
+  return {
+    subscriptionId: readString(data.id),
+    status: readString(data.status),
+    productId: readString(data.product_id),
+    amount: minorUnits !== null && currency ? toMajorUnits(minorUnits, currency) : null,
+    currency,
+    currentPeriodEnd: readString(data.current_period_end),
+    cancelAtPeriodEnd: data.cancel_at_period_end === true,
+    canceledAt: readString(data.canceled_at),
+    endsAt: readString(data.ends_at),
+    customerId: readString(data.customer_id),
+    metadata: readMetadata(data.metadata)
+  };
+}
+function asOrderPaid(event) {
+  if (event.type !== "order.paid")
+    return null;
+  const data = event.data;
+  const product = readObject(data.product);
+  const customer = readObject(data.customer);
+  const minorUnits = readNumber(data.amount);
+  const currency = readString(data.currency);
+  return {
+    orderId: readString(data.id),
+    productId: readString(data.product_id) ?? (product ? readString(product.id) : null),
+    productName: readString(data.product_name) ?? (product ? readString(product.name) : null),
+    amount: minorUnits !== null && currency ? toMajorUnits(minorUnits, currency) : null,
+    currency,
+    customerEmail: readString(data.customer_email) ?? (customer ? readString(customer.email) : null),
+    metadata: readMetadata(data.metadata),
+    createdAt: readString(data.created_at) ?? readString(data.paid_at)
+  };
+}
+var parsePolarWebhookEvent = parseWebhookEvent;
+
+// src/infrastructure/config/billing-env.ts
+var CHECKOUT_ID_PARAM = "checkout_id";
+var CHECKOUT_ID_PLACEHOLDER = "{CHECKOUT_ID}";
+function parseProductIds(raw) {
+  const map = /* @__PURE__ */ new Map();
+  if (typeof raw !== "string" || raw.length === 0) return map;
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    return map;
+  }
+  if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) return map;
+  for (const [key, value] of Object.entries(parsed)) {
+    if (typeof value === "string" && value.length > 0) map.set(key, value);
+  }
+  return map;
+}
+function productIdOf(ids, productKey) {
+  return ids.get(productKey) ?? null;
+}
+function successUrlWithCheckoutId(origin, returnPath) {
+  const separator = returnPath.includes("?") ? "&" : "?";
+  return `${origin}${returnPath}${separator}${CHECKOUT_ID_PARAM}=${CHECKOUT_ID_PLACEHOLDER}`;
+}
+
+// src/infrastructure/services/create-billing-client.ts
+function sandboxEnabled(raw) {
+  if (typeof raw === "boolean") return raw;
+  return raw === "true";
+}
+function createPolarClient(config) {
+  return new PolarBillingClient({
+    apiToken: config.apiToken ?? "",
+    ...sandboxEnabled(config.sandbox) ? { sandbox: true } : {}
+  });
+}
+function createBillingClient(config) {
+  return createPolarClient(config);
+}
+
+// src/infrastructure/utils/checkout-metadata.ts
+function asNonEmptyString(value) {
+  if (typeof value !== "string" || value.length === 0) return void 0;
+  return value;
+}
+function buildCheckoutMetadata(input) {
+  const meta = {
+    userId: input.userId,
+    itemType: input.itemType,
+    itemId: input.itemId
+  };
+  if (input.couponCode && input.couponCode.trim().length > 0) {
+    meta.couponCode = input.couponCode.trim();
+  }
+  if (input.extra) {
+    for (const [key, value] of Object.entries(input.extra)) {
+      if (typeof value === "string" && value.length > 0) {
+        meta[key] = value;
+      }
+    }
+  }
+  return meta;
+}
+function readCheckoutMetadata(metadata, allowedItemTypes) {
+  if (metadata === void 0) return null;
+  const userId = asNonEmptyString(metadata.userId);
+  const itemType = asNonEmptyString(metadata.itemType);
+  const itemId = asNonEmptyString(metadata.itemId);
+  if (!userId || !itemType || !itemId) return null;
+  if (!allowedItemTypes.includes(itemType)) return null;
+  const couponCode = asNonEmptyString(metadata.couponCode);
+  return { userId, itemType, itemId, ...couponCode ? { couponCode } : {} };
+}
+
+// src/infrastructure/utils/receipt.util.ts
+function formatReceiptNumber(id, prefix = "RCP") {
+  if (!id || typeof id !== "string") return `${prefix}-00000000`;
+  const clean = id.replace(/[^a-zA-Z0-9]/g, "");
+  const tail = clean.length >= 8 ? clean.slice(-8) : clean.padStart(8, "0");
+  return `${prefix}-${tail.toUpperCase()}`;
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  API_BASE_URL,
+  BillingApiError,
+  BillingClient,
+  CHECKOUT_ID_PARAM,
+  CHECKOUT_ID_PLACEHOLDER,
+  DEFAULT_WEBHOOK_TOLERANCE_MS,
+  PAYMENT_PROVIDER,
+  PAYMENT_PROVIDER_VALUES,
+  PolarBillingClient,
+  SANDBOX_API_BASE_URL,
+  asCheckoutCompleted,
+  asOrderPaid,
+  asSubscriptionChanged,
+  buildCheckoutMetadata,
+  createBillingClient,
+  createPaymentClient,
+  createPolarClient,
+  formatReceiptNumber,
+  isBillingApiError,
+  isKnownPaymentProvider,
+  parsePolarWebhookEvent,
+  parseProductIds,
+  parseWebhookEvent,
+  productIdOf,
+  readCheckoutMetadata,
+  sandboxEnabled,
+  successUrlWithCheckoutId,
+  verifyPolarWebhook,
+  verifyWebhook
+});