@umituz/web-polar-payment 1.0.13 → 1.0.15

package/dist/index.mjs

@@ -1,19 +1,32 @@
+// src/infrastructure/constants/billing.constants.ts
+var SUBSCRIPTION_STATUS = Object.freeze({
+  ACTIVE: "active",
+  CANCELED: "canceled",
+  REVOKED: "revoked",
+  TRIALING: "trialing",
+  PAST_DUE: "past_due",
+  INCOMPLETE: "incomplete",
+  INCOMPLETE_EXPIRED: "incomplete_expired",
+  UNPAID: "unpaid",
+  NONE: "none"
+});
+var FREE_PLAN = "free";
+
 // src/infrastructure/utils/normalization.util.ts
+var STATUS_MAP = Object.freeze({
+  [SUBSCRIPTION_STATUS.ACTIVE]: SUBSCRIPTION_STATUS.ACTIVE,
+  [SUBSCRIPTION_STATUS.CANCELED]: SUBSCRIPTION_STATUS.CANCELED,
+  [SUBSCRIPTION_STATUS.REVOKED]: SUBSCRIPTION_STATUS.REVOKED,
+  [SUBSCRIPTION_STATUS.TRIALING]: SUBSCRIPTION_STATUS.TRIALING,
+  [SUBSCRIPTION_STATUS.PAST_DUE]: SUBSCRIPTION_STATUS.PAST_DUE,
+  [SUBSCRIPTION_STATUS.INCOMPLETE]: SUBSCRIPTION_STATUS.INCOMPLETE,
+  [SUBSCRIPTION_STATUS.INCOMPLETE_EXPIRED]: SUBSCRIPTION_STATUS.INCOMPLETE_EXPIRED,
+  [SUBSCRIPTION_STATUS.UNPAID]: SUBSCRIPTION_STATUS.UNPAID,
+  [SUBSCRIPTION_STATUS.NONE]: SUBSCRIPTION_STATUS.NONE
+});
 function normalizeStatus(raw) {
-  const map = {
-    active: "active",
-    trialing: "trialing",
-    past_due: "past_due",
-    incomplete: "incomplete",
-    incomplete_expired: "incomplete_expired",
-    unpaid: "unpaid",
-    canceled: "canceled",
-    cancelled: "canceled",
-    revoked: "revoked",
-    none: "none"
-  };
-  if (typeof raw !== "string") return "none";
-  return map[raw.toLowerCase()] ?? "none";
+  if (raw == null || typeof raw !== "string") return "none";
+  return STATUS_MAP[raw.toLowerCase()] ?? "none";
 }
 function normalizeBillingCycle(interval) {
   if (typeof interval !== "string") return "monthly";
@@ -23,7 +36,7 @@ function normalizeBillingCycle(interval) {
   return "monthly";
 }
 
-// src/infrastructure/services/firebase-billing.service.ts
+// src/infrastructure/utils/firebase-helpers.util.ts
 function asString(value) {
   if (typeof value === "string") return value;
   return void 0;
@@ -35,6 +48,8 @@ function asBoolean(value) {
 function isTimestamp(value) {
   return typeof value === "object" && value !== null && "toDate" in value && typeof value.toDate === "function";
 }
+
+// src/infrastructure/services/firebase-billing.service.ts
 function createFirebaseAdapter(config) {
   const functions = config.functions;
   const firestore = config.firestore;
@@ -55,15 +70,31 @@ function createFirebaseAdapter(config) {
     cancelAtPeriodEnd: config.db?.cancelAtPeriodEndField ?? "cancelAtPeriodEnd",
     currentPeriodEnd: config.db?.currentPeriodEndField ?? "currentPeriodEnd"
   };
+  let httpsCallableCache = null;
+  let firestoreCache = null;
+  async function getHttpsCallable() {
+    if (!httpsCallableCache) {
+      const mod = await import("firebase/functions");
+      httpsCallableCache = mod.httpsCallable;
+    }
+    return httpsCallableCache;
+  }
+  async function getFirestore() {
+    if (!firestoreCache) {
+      const mod = await import("firebase/firestore");
+      firestoreCache = { doc: mod.doc, getDoc: mod.getDoc };
+    }
+    return firestoreCache;
+  }
   async function callable(name, data) {
-    const { httpsCallable } = await import("firebase/functions");
+    const httpsCallable = await getHttpsCallable();
     const fn = httpsCallable(functions, name);
     const result = await fn(data);
     return result.data;
   }
   return {
     async getStatus(userId) {
-      const { doc, getDoc } = await import("firebase/firestore");
+      const { doc, getDoc } = await getFirestore();
       const snap = await getDoc(doc(firestore, db.collection, userId));
       if (!snap.exists()) {
         return { plan: "free", subscriptionStatus: "none" };
@@ -109,26 +140,26 @@ function createFirebaseAdapter(config) {
         callables.portal,
         {}
       );
-      const url = result.url ?? result.customerPortalUrl;
-      if (!url) throw new Error("No portal URL returned from Cloud Function");
-      return url;
+      return result.url;
     }
   };
 }
 
-// src/infrastructure/constants/billing.constants.ts
-var SUBSCRIPTION_STATUS = {
-  ACTIVE: "active",
-  CANCELED: "canceled",
-  REVOKED: "revoked",
-  TRIALING: "trialing",
-  PAST_DUE: "past_due",
-  INCOMPLETE: "incomplete",
-  INCOMPLETE_EXPIRED: "incomplete_expired",
-  UNPAID: "unpaid",
-  NONE: "none"
-};
-var FREE_PLAN = "free";
+// src/infrastructure/utils/validations.util.ts
+function normalizeUserId(userId) {
+  if (typeof userId !== "string") return void 0;
+  const trimmed = userId.trim();
+  return trimmed.length > 0 ? trimmed : void 0;
+}
+function isValidProductId(productId) {
+  return typeof productId === "string" && productId.trim().length > 0;
+}
+function isValidCheckoutUrl(url) {
+  return url.startsWith("https://") || url.startsWith("http://");
+}
+function isProductionInsecureUrl(url) {
+  return url.startsWith("http://") && !url.includes("localhost") && !url.includes("127.0.0.1");
+}
 
 // src/presentation/components/PolarProvider.tsx
 import {
@@ -155,67 +186,72 @@ var FREE_STATUS = {
   plan: "free",
   subscriptionStatus: "none"
 };
-function normalizeUserId(userId) {
-  if (typeof userId !== "string") return void 0;
-  const trimmed = userId.trim();
-  return trimmed.length > 0 ? trimmed : void 0;
-}
 function PolarProvider({ adapter, userId, children }) {
   const [status, setStatus] = useState(FREE_STATUS);
   const [loading, setLoading] = useState(true);
   const adapterRef = useRef(adapter);
+  const statusRef = useRef({ setStatus, setLoading });
+  const userIdRef = useRef(normalizeUserId(userId));
+  const refreshMountedRef = useRef(true);
   adapterRef.current = adapter;
-  const refreshAbortRef = useRef(null);
+  statusRef.current = { setStatus, setLoading };
+  userIdRef.current = normalizeUserId(userId);
   const refresh = useCallback(async () => {
-    const uid = normalizeUserId(userId);
+    const uid = userIdRef.current;
+    const { setStatus: setStatus2, setLoading: setLoading2 } = statusRef.current;
     if (!uid) {
-      setStatus(FREE_STATUS);
-      setLoading(false);
+      setStatus2(FREE_STATUS);
+      setLoading2(false);
       return;
     }
-    refreshAbortRef.current?.abort();
-    const ctrl = new AbortController();
-    refreshAbortRef.current = ctrl;
+    refreshMountedRef.current = true;
     try {
-      setLoading(true);
+      setLoading2(true);
       const s = await adapterRef.current.getStatus(uid);
-      if (!ctrl.signal.aborted) setStatus(s);
+      if (refreshMountedRef.current) setStatus2(s);
     } catch (err) {
-      if (!ctrl.signal.aborted) {
+      if (refreshMountedRef.current) {
         console.error("[polar-billing] getStatus failed:", err);
-        setStatus(FREE_STATUS);
+        setStatus2(FREE_STATUS);
       }
     } finally {
-      if (!ctrl.signal.aborted) setLoading(false);
+      if (refreshMountedRef.current) setLoading2(false);
     }
-  }, [userId]);
+  }, []);
   useEffect(() => {
+    refreshMountedRef.current = true;
     refresh();
     return () => {
-      refreshAbortRef.current?.abort();
+      refreshMountedRef.current = false;
     };
-  }, [refresh]);
+  }, [userId]);
   const startCheckout = useCallback(async (params) => {
-    const uid = normalizeUserId(userId);
-    const result = await adapterRef.current.createCheckout({ ...params, userId: uid });
-    if (!result.url.startsWith("https://")) {
-      throw new Error("[polar-billing] Invalid checkout URL returned: URL must start with https://");
+    if (!isValidProductId(params.productId)) {
+      throw new Error("[polar-billing] Invalid productId: must be a non-empty string");
+    }
+    const uid = userIdRef.current;
+    const result = await adapterRef.current.createCheckout({ ...params, userId: uid ?? void 0 });
+    if (!isValidCheckoutUrl(result.url)) {
+      throw new Error("[polar-billing] Invalid checkout URL returned: URL must start with https:// or http://");
+    }
+    if (isProductionInsecureUrl(result.url)) {
+      console.warn("[polar-billing] WARNING: Using insecure http:// URL in production environment");
     }
     window.location.href = result.url;
-  }, [userId]);
+  }, []);
   const syncSubscription = useCallback(async () => {
-    const uid = normalizeUserId(userId);
+    const uid = userIdRef.current;
     if (!uid) return { synced: false };
     const checkoutId = new URLSearchParams(window.location.search).get("checkout_id") ?? void 0;
     const result = await adapterRef.current.syncSubscription(uid, checkoutId);
     if (result.synced) await refresh();
     return result;
-  }, [userId, refresh]);
+  }, [refresh]);
   const getBillingHistory = useCallback(async () => {
-    const uid = normalizeUserId(userId);
+    const uid = userIdRef.current;
     if (!uid) return [];
     return adapterRef.current.getBillingHistory(uid);
-  }, [userId]);
+  }, []);
   const cancelSubscription = useCallback(
     async (reason) => {
       const result = await adapterRef.current.cancelSubscription(reason);
@@ -225,10 +261,10 @@ function PolarProvider({ adapter, userId, children }) {
     [refresh]
   );
   const getPortalUrl = useCallback(async () => {
-    const uid = normalizeUserId(userId);
+    const uid = userIdRef.current;
     if (!uid) throw new Error("[polar-billing] Cannot get portal URL: No authenticated user");
     return adapterRef.current.getPortalUrl(uid);
-  }, [userId]);
+  }, []);
   const value = useMemo(
     () => ({
       status,
@@ -240,7 +276,7 @@ function PolarProvider({ adapter, userId, children }) {
       cancelSubscription,
       getPortalUrl
     }),
-    [status, loading, refresh, startCheckout, syncSubscription, getBillingHistory, cancelSubscription, getPortalUrl]
+    [status, loading, refresh, syncSubscription]
   );
   return /* @__PURE__ */ jsx(PolarContext.Provider, { value, children });
 }
@@ -249,9 +285,16 @@ export {
   PolarContext,
   PolarProvider,
   SUBSCRIPTION_STATUS,
+  asBoolean,
+  asString,
   createFirebaseAdapter,
+  isProductionInsecureUrl,
+  isTimestamp,
+  isValidCheckoutUrl,
+  isValidProductId,
   normalizeBillingCycle,
   normalizeStatus,
+  normalizeUserId,
   usePolarBilling,
   useSubscription
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@umituz/web-polar-payment",
-  "version": "1.0.13",
+  "version": "1.0.15",
   "description": "Universal Polar.sh subscription billing — Firebase adapter",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",

package/src/domain/entities/cancellation.entity.ts

@@ -1,8 +1,3 @@
-/**
- * Cancellation Entity
- * @description Types for subscription cancellation reasons and outcomes
- */
-
 export type CancellationReason =
   | 'too_expensive'
   | 'missing_features'

package/src/domain/entities/checkout.entity.ts

@@ -1,14 +1,8 @@
-/**
- * Checkout Entity
- * @description Types for initiating and following process of checkouts
- */
-
 export interface CheckoutParams {
   productId: string;
   planKey?: string;
   billingCycle?: 'monthly' | 'yearly';
   successUrl?: string;
-  /** Injected automatically by PolarProvider — do not pass manually */
   userId?: string;
 }
 

package/src/domain/entities/order.entity.ts

@@ -1,8 +1,3 @@
-/**
- * Order Entity
- * @description Types for billing history items
- */
-
 export interface OrderItem {
   id: string;
   createdAt: string;

package/src/domain/entities/subscription.entity.ts

@@ -1,8 +1,3 @@
-/**
- * Subscription Entity
- * @description Types for subscription status and billing cycles
- */
-
 export type SubscriptionStatusValue =
   | 'active'
   | 'canceled'
@@ -24,6 +19,5 @@ export interface SubscriptionStatus {
   currentPeriodEnd?: string;
   billingCycle?: BillingCycle;
   polarCustomerId?: string;
-  /** Token balance (for token-based projects like Aria) */
   tokens?: number;
 }

package/src/domain/entities/sync.entity.ts

@@ -1,8 +1,3 @@
-/**
- * Sync Entity
- * @description Type for subscription synchronization results
- */
-
 export interface SyncResult {
   synced: boolean;
   plan?: string;

package/src/domain/index.ts

@@ -1,7 +1,2 @@
-/**
- * Domain Layer
- * Subpath: @umituz/web-polar-payment/domain
- */
-
 export * from './entities';
 export * from './interfaces';

package/src/index.ts

@@ -1,11 +1,3 @@
-/**
- * @umituz/web-polar-payment
- * Universal Polar.sh subscription billing — Firebase adapter
- *
- * IMPORTANT: Apps should NOT use this root barrel export.
- * Use subpath imports instead: "@umituz/web-polar-payment/domain"
- */
-
 export * from './domain';
 export * from './infrastructure';
 export * from './presentation';

package/src/infrastructure/constants/billing.constants.ts

@@ -1,9 +1,4 @@
-/**
- * Billing Constants
- * @description Standardized subscription states and plan names
- */
-
-export const SUBSCRIPTION_STATUS = {
+export const SUBSCRIPTION_STATUS = Object.freeze({
   ACTIVE: 'active' as const,
   CANCELED: 'canceled' as const,
   REVOKED: 'revoked' as const,
@@ -13,6 +8,16 @@ export const SUBSCRIPTION_STATUS = {
   INCOMPLETE_EXPIRED: 'incomplete_expired' as const,
   UNPAID: 'unpaid' as const,
   NONE: 'none' as const,
-};
+}) as Readonly<{
+  ACTIVE: 'active';
+  CANCELED: 'canceled';
+  REVOKED: 'revoked';
+  TRIALING: 'trialing';
+  PAST_DUE: 'past_due';
+  INCOMPLETE: 'incomplete';
+  INCOMPLETE_EXPIRED: 'incomplete_expired';
+  UNPAID: 'unpaid';
+  NONE: 'none';
+}>;
 
 export const FREE_PLAN = 'free';

package/src/infrastructure/index.ts

@@ -1,8 +1,5 @@
-/**
- * Infrastructure Layer
- * Subpath: @umituz/web-polar-payment/infrastructure
- */
-
 export * from './services/firebase-billing.service';
 export * from './constants/billing.constants';
 export * from './utils/normalization.util';
+export * from './utils/validations.util';
+export * from './utils/firebase-helpers.util';

package/src/infrastructure/services/firebase-billing.service.ts

@@ -9,37 +9,8 @@ import type {
   SyncResult,
 } from '../../domain/entities';
 import { normalizeStatus, normalizeBillingCycle } from '../utils/normalization.util';
+import { asString, asBoolean, isTimestamp } from '../utils/firebase-helpers.util';
 
-/**
- * Type guard to safely extract string value from unknown Firestore data
- */
-function asString(value: unknown): string | undefined {
-  if (typeof value === 'string') return value;
-  return undefined;
-}
-
-/**
- * Type guard to safely extract boolean value from unknown Firestore data
- */
-function asBoolean(value: unknown): boolean | undefined {
-  if (typeof value === 'boolean') return value;
-  return undefined;
-}
-
-/**
- * Type guard to safely check if value is an object with toDate method
- */
-function isTimestamp(value: unknown): value is { toDate(): Date } {
-  return (
-    typeof value === 'object' &&
-    value !== null &&
-    'toDate' in value &&
-    typeof (value as { toDate: unknown }).toDate === 'function'
-  );
-}
-
-// Internal type aliases for Firebase SDK compatibility
-// Using 'any' internally to avoid DTS build issues with external Firebase packages
 type FirebaseFunctions = any;
 type FirebaseFirestore = any;
 
@@ -67,12 +38,7 @@ export interface FirebaseAdapterConfig {
   };
 }
 
-/**
- * Firebase Billing Service
- * @description Implementation of PolarAdapter for Firebase Functions and Firestore.
- */
 export function createFirebaseAdapter(config: FirebaseAdapterConfig): PolarAdapter {
-  // Cast internally to Firebase types for implementation
   const functions = config.functions as FirebaseFunctions;
   const firestore = config.firestore as FirebaseFirestore;
 
@@ -95,8 +61,27 @@ export function createFirebaseAdapter(config: FirebaseAdapterConfig): PolarAdapt
     currentPeriodEnd: config.db?.currentPeriodEndField ?? 'currentPeriodEnd',
   };
 
+  let httpsCallableCache: typeof import('firebase/functions')['httpsCallable'] | null = null;
+  let firestoreCache: { doc: any; getDoc: any } | null = null;
+
+  async function getHttpsCallable() {
+    if (!httpsCallableCache) {
+      const mod = await import('firebase/functions');
+      httpsCallableCache = mod.httpsCallable;
+    }
+    return httpsCallableCache;
+  }
+
+  async function getFirestore() {
+    if (!firestoreCache) {
+      const mod = await import('firebase/firestore');
+      firestoreCache = { doc: mod.doc, getDoc: mod.getDoc };
+    }
+    return firestoreCache;
+  }
+
   async function callable<T = unknown, R = unknown>(name: string, data?: T): Promise<R> {
-    const { httpsCallable } = await import('firebase/functions');
+    const httpsCallable = await getHttpsCallable();
     const fn = (httpsCallable as any)(functions, name) as (data?: T) => Promise<{ data: R }>;
     const result = await fn(data);
     return result.data;
@@ -104,7 +89,7 @@ export function createFirebaseAdapter(config: FirebaseAdapterConfig): PolarAdapt
 
   return {
     async getStatus(userId: string): Promise<SubscriptionStatus> {
-      const { doc, getDoc } = await import('firebase/firestore');
+      const { doc, getDoc } = await getFirestore();
       const snap = await getDoc((doc as any)(firestore, db.collection, userId));
 
       if (!snap.exists()) {
@@ -155,13 +140,11 @@ export function createFirebaseAdapter(config: FirebaseAdapterConfig): PolarAdapt
     },
 
     async getPortalUrl(_userId: string): Promise<string> {
-      const result = await callable<Record<string, never>, { url?: string; customerPortalUrl?: string }>(
+      const result = await callable<Record<string, never>, { url: string }>(
         callables.portal,
         {},
       );
-      const url = result.url ?? result.customerPortalUrl;
-      if (!url) throw new Error('No portal URL returned from Cloud Function');
-      return url;
+      return result.url;
     },
   };
 }

package/src/infrastructure/utils/firebase-helpers.util.ts

@@ -0,0 +1,18 @@
+export function asString(value: unknown): string | undefined {
+  if (typeof value === 'string') return value;
+  return undefined;
+}
+
+export function asBoolean(value: unknown): boolean | undefined {
+  if (typeof value === 'boolean') return value;
+  return undefined;
+}
+
+export function isTimestamp(value: unknown): value is { toDate(): Date } {
+  return (
+    typeof value === 'object' &&
+    value !== null &&
+    'toDate' in value &&
+    typeof (value as { toDate: unknown }).toDate === 'function'
+  );
+}

package/src/infrastructure/utils/normalization.util.ts

@@ -1,31 +1,23 @@
 import type { SubscriptionStatusValue, BillingCycle } from '../../domain/entities';
+import { SUBSCRIPTION_STATUS } from '../constants/billing.constants';
 
-/**
- * Normalize a raw Polar status string to a known value.
- * @description Defaults to 'none' for unknown statuses or non-string input.
- */
-export function normalizeStatus(raw: string): SubscriptionStatusValue {
-  const map: Record<string, SubscriptionStatusValue> = {
-    active: 'active',
-    trialing: 'trialing',
-    past_due: 'past_due',
-    incomplete: 'incomplete',
-    incomplete_expired: 'incomplete_expired',
-    unpaid: 'unpaid',
-    canceled: 'canceled',
-    cancelled: 'canceled',
-    revoked: 'revoked',
-    none: 'none',
-  };
+const STATUS_MAP: Readonly<Record<string, SubscriptionStatusValue>> = Object.freeze({
+  [SUBSCRIPTION_STATUS.ACTIVE]: SUBSCRIPTION_STATUS.ACTIVE,
+  [SUBSCRIPTION_STATUS.CANCELED]: SUBSCRIPTION_STATUS.CANCELED,
+  [SUBSCRIPTION_STATUS.REVOKED]: SUBSCRIPTION_STATUS.REVOKED,
+  [SUBSCRIPTION_STATUS.TRIALING]: SUBSCRIPTION_STATUS.TRIALING,
+  [SUBSCRIPTION_STATUS.PAST_DUE]: SUBSCRIPTION_STATUS.PAST_DUE,
+  [SUBSCRIPTION_STATUS.INCOMPLETE]: SUBSCRIPTION_STATUS.INCOMPLETE,
+  [SUBSCRIPTION_STATUS.INCOMPLETE_EXPIRED]: SUBSCRIPTION_STATUS.INCOMPLETE_EXPIRED,
+  [SUBSCRIPTION_STATUS.UNPAID]: SUBSCRIPTION_STATUS.UNPAID,
+  [SUBSCRIPTION_STATUS.NONE]: SUBSCRIPTION_STATUS.NONE,
+});
 
-  if (typeof raw !== 'string') return 'none';
-  return map[raw.toLowerCase()] ?? 'none';
+export function normalizeStatus(raw: string): SubscriptionStatusValue {
+  if (raw == null || typeof raw !== 'string') return 'none';
+  return STATUS_MAP[raw.toLowerCase()] ?? 'none';
 }
 
-/**
- * Normalize billing interval
- * @description Maps 'month'/'year' to 'monthly'/'yearly'. Defaults to 'monthly' for unknown values or non-string input.
- */
 export function normalizeBillingCycle(interval: string): BillingCycle {
   if (typeof interval !== 'string') return 'monthly';
   const normalized = interval.toLowerCase();

package/src/infrastructure/utils/validations.util.ts

@@ -0,0 +1,17 @@
+export function normalizeUserId(userId: string | undefined): string | undefined {
+  if (typeof userId !== 'string') return undefined;
+  const trimmed = userId.trim();
+  return trimmed.length > 0 ? trimmed : undefined;
+}
+
+export function isValidProductId(productId: unknown): productId is string {
+  return typeof productId === 'string' && productId.trim().length > 0;
+}
+
+export function isValidCheckoutUrl(url: string): boolean {
+  return url.startsWith('https://') || url.startsWith('http://');
+}
+
+export function isProductionInsecureUrl(url: string): boolean {
+  return url.startsWith('http://') && !url.includes('localhost') && !url.includes('127.0.0.1');
+}