@umituz/web-payment 0.0.0-stage → 1.0.1

package/dist/server.mjs

@@ -0,0 +1,417 @@
+import {
+  CHECKOUT_ID_PARAM,
+  CHECKOUT_ID_PLACEHOLDER,
+  parseProductIds,
+  productIdOf,
+  successUrlWithCheckoutId
+} from "./chunk-QFB7AOSQ.mjs";
+import {
+  PAYMENT_PROVIDER,
+  PAYMENT_PROVIDER_VALUES,
+  buildCheckoutMetadata,
+  formatReceiptNumber,
+  isKnownPaymentProvider,
+  readCheckoutMetadata
+} from "./chunk-2KV7JFYF.mjs";
+import {
+  toMajorUnits
+} from "./chunk-PIWNUAKW.mjs";
+import {
+  API_BASE_URL,
+  BillingApiError,
+  FetchHttpClient,
+  isBillingApiError
+} from "./chunk-XQ2HJTTA.mjs";
+import "./chunk-U45FS4FF.mjs";
+import "./chunk-RQTMBR74.mjs";
+
+// src/infrastructure/services/billing.client.ts
+var SANDBOX_API_BASE_URL = "https://sandbox-api.polar.sh/v1";
+function resolveBaseUrl(config) {
+  if (config.baseUrl) return config.baseUrl;
+  return config.sandbox ? SANDBOX_API_BASE_URL : API_BASE_URL;
+}
+function mapCheckout(dto) {
+  return {
+    id: dto.id,
+    url: dto.url ?? "",
+    status: dto.status,
+    customerId: dto.customer_id ?? void 0,
+    customerEmail: dto.customer_email ?? void 0,
+    subscriptionId: dto.subscription_id ?? null,
+    metadata: dto.metadata ?? void 0
+  };
+}
+function mapSubscription(dto) {
+  return {
+    id: dto.id,
+    status: dto.status,
+    productId: dto.product_id,
+    amountCents: dto.amount,
+    currency: dto.currency,
+    currentPeriodStart: dto.current_period_start ?? void 0,
+    currentPeriodEnd: dto.current_period_end ?? void 0,
+    cancelAtPeriodEnd: dto.cancel_at_period_end,
+    canceledAt: dto.canceled_at ?? null,
+    endsAt: dto.ends_at ?? null,
+    startedAt: dto.started_at ?? void 0,
+    customerId: dto.customer_id ?? "",
+    metadata: dto.metadata ?? {}
+  };
+}
+var PolarBillingClient = class {
+  provider = "polar";
+  http;
+  baseUrl;
+  headers;
+  constructor(config) {
+    this.http = config.http ?? new FetchHttpClient();
+    this.baseUrl = resolveBaseUrl(config).replace(/\/$/, "");
+    this.headers = { Authorization: `Bearer ${config.apiToken}` };
+  }
+  async request(method, path, body) {
+    const response = await this.http.request({
+      method,
+      url: `${this.baseUrl}${path}`,
+      headers: this.headers,
+      body
+    });
+    if (!response.ok) {
+      throw new BillingApiError(
+        `Billing API ${method} ${path} failed with ${response.status}`,
+        response.status,
+        await response.text()
+      );
+    }
+    return response.data ?? {};
+  }
+  async createProduct(params) {
+    const dto = await this.request("POST", "/products", {
+      name: params.name,
+      recurring_interval: null,
+      ...params.description ? { description: params.description } : {},
+      prices: [
+        {
+          amount_type: "fixed",
+          price_currency: params.currency ?? "usd",
+          price_amount: params.amountCents
+        }
+      ],
+      ...params.metadata ? { metadata: params.metadata } : {}
+    });
+    return { id: dto.id, name: dto.name ?? params.name };
+  }
+  async createCheckout(params) {
+    const dto = await this.request("POST", "/checkouts", {
+      products: [params.productId],
+      ...params.amountCents !== void 0 ? {
+        prices: {
+          [params.productId]: [
+            {
+              amount_type: "fixed",
+              price_currency: params.currency ?? "usd",
+              price_amount: params.amountCents
+            }
+          ]
+        }
+      } : {},
+      ...params.successUrl ? { success_url: params.successUrl } : {},
+      ...params.customerId ? { customer_id: params.customerId } : {},
+      ...params.customerEmail ? { customer_email: params.customerEmail } : {},
+      ...params.externalCustomerId ? { external_customer_id: params.externalCustomerId } : {},
+      ...params.allowDiscountCodes !== void 0 ? { allow_discount_codes: params.allowDiscountCodes } : {},
+      ...params.metadata ? { metadata: params.metadata } : {}
+    });
+    return mapCheckout(dto);
+  }
+  async getCheckout(id) {
+    const dto = await this.request("GET", `/checkouts/${encodeURIComponent(id)}`);
+    return mapCheckout(dto);
+  }
+  async createPortalSession(customerId, returnUrl) {
+    const dto = await this.request(
+      "POST",
+      "/customer-sessions",
+      {
+        customer_id: customerId,
+        ...returnUrl ? { return_url: returnUrl } : {}
+      }
+    );
+    const url = dto.customer_portal_url;
+    if (!url) {
+      throw new BillingApiError("Billing customer portal session returned no URL", 500, JSON.stringify(dto));
+    }
+    return { url };
+  }
+  async getSubscription(id) {
+    const dto = await this.request("GET", `/subscriptions/${encodeURIComponent(id)}`);
+    return mapSubscription(dto);
+  }
+  async listSubscriptions(filter = {}) {
+    const query = new URLSearchParams();
+    if (filter.customerId) query.set("customer_id", filter.customerId);
+    if (filter.productId) query.set("product_id", filter.productId);
+    const suffix = query.size > 0 ? `?${query.toString()}` : "";
+    const first = await this.request("GET", `/subscriptions${suffix}`);
+    const records = [...first.items ?? []];
+    const maxPage = typeof first.pagination?.max_page === "number" ? first.pagination.max_page : 1;
+    for (let page = 2; page <= maxPage; page += 1) {
+      const next = await this.request(
+        "GET",
+        `/subscriptions${suffix}${suffix ? "&" : "?"}page=${page}`
+      );
+      records.push(...next.items ?? []);
+    }
+    return records.map(mapSubscription);
+  }
+  async updateSubscription(id, patch) {
+    const body = patch.cancelAtPeriodEnd !== void 0 ? { cancel_at_period_end: patch.cancelAtPeriodEnd } : void 0;
+    const dto = await this.request(
+      "PATCH",
+      `/subscriptions/${encodeURIComponent(id)}`,
+      body
+    );
+    return mapSubscription(dto);
+  }
+};
+var BillingClient = PolarBillingClient;
+function createPaymentClient(config) {
+  if (config.provider === "stripe") {
+    throw new Error('Stripe provider client is not yet supported. Use provider "polar" or custom adapter.');
+  }
+  return new PolarBillingClient(config);
+}
+
+// src/infrastructure/webhook/verify-webhook.ts
+var KNOWN_SECRET_PREFIXES = ["whsec_"];
+function headerValue(headers, name) {
+  if (typeof headers.get === "function") {
+    const value = headers.get(name);
+    return value ?? void 0;
+  }
+  const record = headers;
+  return record[name] ?? record[name.toLowerCase()];
+}
+function stripSecretPrefix(secret) {
+  for (const prefix of KNOWN_SECRET_PREFIXES) {
+    if (secret.startsWith(prefix)) return secret.slice(prefix.length);
+  }
+  return secret;
+}
+function base64ToBytes(value) {
+  try {
+    const normalized = value.replace(/-/g, "+").replace(/_/g, "/");
+    const binary = atob(normalized);
+    const bytes = new Uint8Array(binary.length);
+    for (let i = 0; i < binary.length; i += 1) bytes[i] = binary.charCodeAt(i);
+    return bytes;
+  } catch {
+    return null;
+  }
+}
+function encodeUtf8(value) {
+  return new TextEncoder().encode(value);
+}
+async function hmacSha256(keyBytes, payload) {
+  const cryptoRef = globalThis.crypto;
+  if (!cryptoRef?.subtle) {
+    throw new Error("WebCrypto (crypto.subtle) is not available in this runtime");
+  }
+  const key = await cryptoRef.subtle.importKey(
+    "raw",
+    keyBytes,
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const signature = await cryptoRef.subtle.sign("HMAC", key, encodeUtf8(payload));
+  const bytes = new Uint8Array(signature);
+  let binary = "";
+  for (let i = 0; i < bytes.length; i += 1) binary += String.fromCharCode(bytes[i]);
+  return btoa(binary);
+}
+function keyCandidates(secret) {
+  const stripped = stripSecretPrefix(secret);
+  const decoded = base64ToBytes(stripped);
+  const candidates = [];
+  if (decoded && decoded.length > 0) candidates.push(decoded);
+  const raw = encodeUtf8(secret);
+  if (raw.length > 0) candidates.push(raw);
+  const rawStripped = encodeUtf8(stripped);
+  if (rawStripped.length > 0 && rawStripped.length !== raw.length) candidates.push(rawStripped);
+  return candidates;
+}
+function signaturesFromHeader(header) {
+  return header.split(",").map((part) => part.trim()).filter((part) => part.length > 0).map((part) => part.startsWith("v1,") ? part.slice(3) : part);
+}
+var DEFAULT_WEBHOOK_TOLERANCE_MS = 5 * 60 * 1e3;
+async function verifyWebhook(rawBody, headers, secret, options = {}) {
+  const id = headerValue(headers, "webhook-id");
+  const timestamp = headerValue(headers, "webhook-timestamp");
+  const signatureHeader = headerValue(headers, "webhook-signature");
+  if (!id || !timestamp || !signatureHeader || !secret) return false;
+  if (options.toleranceMs !== void 0) {
+    const age = Math.abs(Date.now() - Number(timestamp) * 1e3);
+    if (!Number.isFinite(age) || age > options.toleranceMs) return false;
+  }
+  const expectedSignatures = signaturesFromHeader(signatureHeader);
+  if (expectedSignatures.length === 0) return false;
+  const payload = `${id}.${timestamp}.${rawBody}`;
+  for (const key of keyCandidates(secret)) {
+    const computed = await hmacSha256(key, payload);
+    for (const expected of expectedSignatures) {
+      if (timingSafeEqual(computed, expected)) return true;
+    }
+  }
+  return false;
+}
+function timingSafeEqual(a, b) {
+  if (a.length !== b.length) return false;
+  let mismatch = 0;
+  for (let i = 0; i < a.length; i += 1) mismatch |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  return mismatch === 0;
+}
+var verifyPolarWebhook = verifyWebhook;
+
+// src/infrastructure/webhook/parse-event.ts
+var SUBSCRIPTION_EVENT_TYPES = /* @__PURE__ */ new Set([
+  "subscription.active",
+  "subscription.canceled",
+  "subscription.updated",
+  "subscription.uncanceled",
+  "subscription.revoked"
+]);
+function readString(value) {
+  return typeof value === "string" && value.length > 0 ? value : null;
+}
+function readNumber(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : null;
+}
+function readObject(value) {
+  return value !== null && typeof value === "object" ? value : null;
+}
+function readMetadata(value) {
+  const metadata = readObject(value);
+  if (!metadata)
+    return {};
+  return Object.fromEntries(Object.entries(metadata).filter((entry) => typeof entry[1] === "string"));
+}
+function parseWebhookEvent(rawBody) {
+  let parsed;
+  try {
+    parsed = JSON.parse(rawBody);
+  } catch {
+    return null;
+  }
+  const envelope = readObject(parsed);
+  const type = envelope ? readString(envelope.type) : null;
+  const data = envelope ? readObject(envelope.data) : null;
+  if (!envelope || !type || !data)
+    return null;
+  return { type, data };
+}
+function asCheckoutCompleted(event) {
+  if (event.type !== "checkout.completed")
+    return null;
+  const data = event.data;
+  const product = readObject(data.product);
+  const customer = readObject(data.customer);
+  const minorUnits = readNumber(data.total_amount ?? data.amount);
+  const currency = readString(data.currency);
+  return {
+    checkoutId: readString(data.id),
+    productId: readString(data.product_id) ?? (product ? readString(product.id) : null),
+    customerEmail: readString(data.customer_email) ?? (customer ? readString(customer.email) : null),
+    customerName: readString(data.customer_name) ?? (customer ? readString(customer.name) : null),
+    amount: minorUnits !== null && currency ? toMajorUnits(minorUnits, currency) : null,
+    currency,
+    metadata: readMetadata(data.metadata),
+    createdAt: readString(data.created_at) ?? readString(data.createdAt)
+  };
+}
+function asSubscriptionChanged(event) {
+  if (!SUBSCRIPTION_EVENT_TYPES.has(event.type))
+    return null;
+  const data = event.data;
+  const minorUnits = readNumber(data.amount);
+  const currency = readString(data.currency);
+  return {
+    subscriptionId: readString(data.id),
+    status: readString(data.status),
+    productId: readString(data.product_id),
+    amount: minorUnits !== null && currency ? toMajorUnits(minorUnits, currency) : null,
+    currency,
+    currentPeriodEnd: readString(data.current_period_end),
+    cancelAtPeriodEnd: data.cancel_at_period_end === true,
+    canceledAt: readString(data.canceled_at),
+    endsAt: readString(data.ends_at),
+    customerId: readString(data.customer_id),
+    metadata: readMetadata(data.metadata)
+  };
+}
+function asOrderPaid(event) {
+  if (event.type !== "order.paid")
+    return null;
+  const data = event.data;
+  const product = readObject(data.product);
+  const customer = readObject(data.customer);
+  const minorUnits = readNumber(data.amount);
+  const currency = readString(data.currency);
+  return {
+    orderId: readString(data.id),
+    productId: readString(data.product_id) ?? (product ? readString(product.id) : null),
+    productName: readString(data.product_name) ?? (product ? readString(product.name) : null),
+    amount: minorUnits !== null && currency ? toMajorUnits(minorUnits, currency) : null,
+    currency,
+    customerEmail: readString(data.customer_email) ?? (customer ? readString(customer.email) : null),
+    metadata: readMetadata(data.metadata),
+    createdAt: readString(data.created_at) ?? readString(data.paid_at)
+  };
+}
+var parsePolarWebhookEvent = parseWebhookEvent;
+
+// src/infrastructure/services/create-billing-client.ts
+function sandboxEnabled(raw) {
+  if (typeof raw === "boolean") return raw;
+  return raw === "true";
+}
+function createPolarClient(config) {
+  return new PolarBillingClient({
+    apiToken: config.apiToken ?? "",
+    ...sandboxEnabled(config.sandbox) ? { sandbox: true } : {}
+  });
+}
+function createBillingClient(config) {
+  return createPolarClient(config);
+}
+export {
+  API_BASE_URL,
+  BillingApiError,
+  BillingClient,
+  CHECKOUT_ID_PARAM,
+  CHECKOUT_ID_PLACEHOLDER,
+  DEFAULT_WEBHOOK_TOLERANCE_MS,
+  PAYMENT_PROVIDER,
+  PAYMENT_PROVIDER_VALUES,
+  PolarBillingClient,
+  SANDBOX_API_BASE_URL,
+  asCheckoutCompleted,
+  asOrderPaid,
+  asSubscriptionChanged,
+  buildCheckoutMetadata,
+  createBillingClient,
+  createPaymentClient,
+  createPolarClient,
+  formatReceiptNumber,
+  isBillingApiError,
+  isKnownPaymentProvider,
+  parsePolarWebhookEvent,
+  parseProductIds,
+  parseWebhookEvent,
+  productIdOf,
+  readCheckoutMetadata,
+  sandboxEnabled,
+  successUrlWithCheckoutId,
+  verifyPolarWebhook,
+  verifyWebhook
+};

package/dist/visual-tokens-BCLVR85G.d.mts

@@ -0,0 +1,94 @@
+interface NavigationStrategy {
+    redirect(url: string): void;
+}
+declare class WindowNavigationStrategy implements NavigationStrategy {
+    redirect(url: string): void;
+}
+declare class NoopNavigationStrategy implements NavigationStrategy {
+    redirect(_url: string): void;
+}
+
+declare const VisualTokens: Readonly<{
+    readonly spacing: Readonly<{
+        none: 0;
+        xs: 4;
+        sm: 6;
+        md: 8;
+        lg: 12;
+        xl: 16;
+        xxl: 20;
+        section: 24;
+        page: 32;
+    }>;
+    readonly radius: Readonly<{
+        sm: 6;
+        md: 8;
+        lg: 12;
+        pill: 999;
+    }>;
+    readonly fontSize: Readonly<{
+        caption: 12;
+        body: 14;
+        title: 18;
+        display: 24;
+    }>;
+    readonly fontWeight: Readonly<{
+        regular: 400;
+        medium: 500;
+        strong: 600;
+    }>;
+    readonly lineHeight: Readonly<{
+        tight: 1.25;
+        normal: 1.5;
+    }>;
+    readonly opacity: Readonly<{
+        muted: 0.7;
+        disabled: 0.6;
+        hover: 0.85;
+    }>;
+    readonly color: Readonly<{
+        textPrimary: "#111827";
+        textMuted: "#6b7280";
+        textOnPrimary: "#ffffff";
+        textInverse: "#ffffff";
+        textError: "#b91c1c";
+        textOnError: "#ffffff";
+        surfacePrimary: "#ffffff";
+        surfaceMuted: "#f9fafb";
+        surfaceSubtle: "#f3f4f6";
+        surfaceWarning: "#fef3c7";
+        surfaceDanger: "#fee2e2";
+        surfaceDangerMuted: "#fef2f2";
+        borderSubtle: "#e5e7eb";
+        borderStrong: "#d1d5db";
+        borderWarning: "#fecaca";
+        brandPrimary: "#2563eb";
+        brandPrimaryHover: "#1d4ed8";
+        brandDanger: "#dc2626";
+        brandDangerHover: "#b91c1c";
+        brandDangerText: "#991b1b";
+        badgeNeutralBg: "#e5e7eb";
+        badgeNeutralFg: "#111827";
+        badgeActiveBg: "#dcfce7";
+        badgeActiveFg: "#166534";
+        badgeWarningBg: "#fef3c7";
+        badgeWarningFg: "#92400e";
+        badgeDangerBg: "#fee2e2";
+        badgeDangerFg: "#991b1b";
+    }>;
+    readonly transition: Readonly<{
+        instant: "120ms ease";
+    }>;
+    readonly layout: Readonly<{
+        cardMinWidth: 260;
+        benefitListMax: 5;
+    }>;
+}>;
+type VisualTone = 'neutral' | 'active' | 'warning' | 'danger';
+interface VisualTonePair {
+    readonly bg: string;
+    readonly fg: string;
+}
+declare const TONE_PAIRS: Readonly<Record<VisualTone, VisualTonePair>>;
+
+export { type NavigationStrategy as N, TONE_PAIRS as T, VisualTokens as V, WindowNavigationStrategy as W, NoopNavigationStrategy as a, type VisualTone as b, type VisualTonePair as c };

package/dist/visual-tokens-BCLVR85G.d.ts

@@ -0,0 +1,94 @@
+interface NavigationStrategy {
+    redirect(url: string): void;
+}
+declare class WindowNavigationStrategy implements NavigationStrategy {
+    redirect(url: string): void;
+}
+declare class NoopNavigationStrategy implements NavigationStrategy {
+    redirect(_url: string): void;
+}
+
+declare const VisualTokens: Readonly<{
+    readonly spacing: Readonly<{
+        none: 0;
+        xs: 4;
+        sm: 6;
+        md: 8;
+        lg: 12;
+        xl: 16;
+        xxl: 20;
+        section: 24;
+        page: 32;
+    }>;
+    readonly radius: Readonly<{
+        sm: 6;
+        md: 8;
+        lg: 12;
+        pill: 999;
+    }>;
+    readonly fontSize: Readonly<{
+        caption: 12;
+        body: 14;
+        title: 18;
+        display: 24;
+    }>;
+    readonly fontWeight: Readonly<{
+        regular: 400;
+        medium: 500;
+        strong: 600;
+    }>;
+    readonly lineHeight: Readonly<{
+        tight: 1.25;
+        normal: 1.5;
+    }>;
+    readonly opacity: Readonly<{
+        muted: 0.7;
+        disabled: 0.6;
+        hover: 0.85;
+    }>;
+    readonly color: Readonly<{
+        textPrimary: "#111827";
+        textMuted: "#6b7280";
+        textOnPrimary: "#ffffff";
+        textInverse: "#ffffff";
+        textError: "#b91c1c";
+        textOnError: "#ffffff";
+        surfacePrimary: "#ffffff";
+        surfaceMuted: "#f9fafb";
+        surfaceSubtle: "#f3f4f6";
+        surfaceWarning: "#fef3c7";
+        surfaceDanger: "#fee2e2";
+        surfaceDangerMuted: "#fef2f2";
+        borderSubtle: "#e5e7eb";
+        borderStrong: "#d1d5db";
+        borderWarning: "#fecaca";
+        brandPrimary: "#2563eb";
+        brandPrimaryHover: "#1d4ed8";
+        brandDanger: "#dc2626";
+        brandDangerHover: "#b91c1c";
+        brandDangerText: "#991b1b";
+        badgeNeutralBg: "#e5e7eb";
+        badgeNeutralFg: "#111827";
+        badgeActiveBg: "#dcfce7";
+        badgeActiveFg: "#166534";
+        badgeWarningBg: "#fef3c7";
+        badgeWarningFg: "#92400e";
+        badgeDangerBg: "#fee2e2";
+        badgeDangerFg: "#991b1b";
+    }>;
+    readonly transition: Readonly<{
+        instant: "120ms ease";
+    }>;
+    readonly layout: Readonly<{
+        cardMinWidth: 260;
+        benefitListMax: 5;
+    }>;
+}>;
+type VisualTone = 'neutral' | 'active' | 'warning' | 'danger';
+interface VisualTonePair {
+    readonly bg: string;
+    readonly fg: string;
+}
+declare const TONE_PAIRS: Readonly<Record<VisualTone, VisualTonePair>>;
+
+export { type NavigationStrategy as N, TONE_PAIRS as T, VisualTokens as V, WindowNavigationStrategy as W, NoopNavigationStrategy as a, type VisualTone as b, type VisualTonePair as c };