@umituz/web-polar-payment 1.0.14 → 1.0.15

package/dist/index.d.mts

@@ -2,10 +2,6 @@ import * as react_jsx_runtime from 'react/jsx-runtime';
 import * as react from 'react';
 import { ReactNode } from 'react';
 
-/**
- * Subscription Entity
- * @description Types for subscription status and billing cycles
- */
 type SubscriptionStatusValue = 'active' | 'canceled' | 'revoked' | 'trialing' | 'past_due' | 'incomplete' | 'incomplete_expired' | 'unpaid' | 'none';
 type BillingCycle = 'monthly' | 'yearly';
 interface SubscriptionStatus {
@@ -16,14 +12,9 @@ interface SubscriptionStatus {
     currentPeriodEnd?: string;
     billingCycle?: BillingCycle;
     polarCustomerId?: string;
-    /** Token balance (for token-based projects like Aria) */
     tokens?: number;
 }
 
-/**
- * Order Entity
- * @description Types for billing history items
- */
 interface OrderItem {
     id: string;
     createdAt: string;
@@ -35,16 +26,11 @@ interface OrderItem {
     invoiceUrl?: string;
 }
 
-/**
- * Checkout Entity
- * @description Types for initiating and following process of checkouts
- */
 interface CheckoutParams {
     productId: string;
     planKey?: string;
     billingCycle?: 'monthly' | 'yearly';
     successUrl?: string;
-    /** Injected automatically by PolarProvider — do not pass manually */
     userId?: string;
 }
 interface CheckoutResult {
@@ -52,20 +38,12 @@ interface CheckoutResult {
     id: string;
 }
 
-/**
- * Cancellation Entity
- * @description Types for subscription cancellation reasons and outcomes
- */
 type CancellationReason = 'too_expensive' | 'missing_features' | 'switched_service' | 'unused' | 'customer_service' | 'low_quality' | 'too_complex' | 'other';
 interface CancelResult {
     success: boolean;
     endsAt?: string;
 }
 
-/**
- * Sync Entity
- * @description Type for subscription synchronization results
- */
 interface SyncResult {
     synced: boolean;
     plan?: string;
@@ -108,16 +86,8 @@ interface FirebaseAdapterConfig {
         currentPeriodEndField?: string;
     };
 }
-/**
- * Firebase Billing Service
- * @description Implementation of PolarAdapter for Firebase Functions and Firestore.
- */
 declare function createFirebaseAdapter(config: FirebaseAdapterConfig): PolarAdapter;
 
-/**
- * Billing Constants
- * @description Standardized subscription states and plan names
- */
 declare const SUBSCRIPTION_STATUS: Readonly<{
     ACTIVE: "active";
     CANCELED: "canceled";
@@ -131,21 +101,20 @@ declare const SUBSCRIPTION_STATUS: Readonly<{
 }>;
 declare const FREE_PLAN = "free";
 
-/**
- * Normalize a raw Polar status string to a known value.
- * @description Defaults to 'none' for unknown statuses or non-string input.
- */
 declare function normalizeStatus(raw: string): SubscriptionStatusValue;
-/**
- * Normalize billing interval
- * @description Maps 'month'/'year' to 'monthly'/'yearly'. Defaults to 'monthly' for unknown values or non-string input.
- */
 declare function normalizeBillingCycle(interval: string): BillingCycle;
 
-/**
- * PolarProvider Component
- * @description Context provider for Polar billing management.
- */
+declare function normalizeUserId(userId: string | undefined): string | undefined;
+declare function isValidProductId(productId: unknown): productId is string;
+declare function isValidCheckoutUrl(url: string): boolean;
+declare function isProductionInsecureUrl(url: string): boolean;
+
+declare function asString(value: unknown): string | undefined;
+declare function asBoolean(value: unknown): boolean | undefined;
+declare function isTimestamp(value: unknown): value is {
+    toDate(): Date;
+};
+
 interface PolarProviderProps {
     adapter: PolarAdapter;
     userId?: string;
@@ -164,11 +133,7 @@ interface PolarContextValue {
     getPortalUrl: () => Promise<string>;
 }
 declare const PolarContext: react.Context<PolarContextValue | undefined>;
-/**
- * usePolarBilling Hook
- * @description Hook to access Polar billing context
- */
 declare function usePolarBilling(): PolarContextValue;
 declare const useSubscription: typeof usePolarBilling;
 
-export { type BillingCycle, type CancelResult, type CancellationReason, type CheckoutParams, type CheckoutResult, FREE_PLAN, type FirebaseAdapterConfig, type OrderItem, type PolarAdapter, PolarContext, type PolarContextValue, PolarProvider, SUBSCRIPTION_STATUS, type SubscriptionStatus, type SubscriptionStatusValue, type SyncResult, createFirebaseAdapter, normalizeBillingCycle, normalizeStatus, usePolarBilling, useSubscription };
+export { type BillingCycle, type CancelResult, type CancellationReason, type CheckoutParams, type CheckoutResult, FREE_PLAN, type FirebaseAdapterConfig, type OrderItem, type PolarAdapter, PolarContext, type PolarContextValue, PolarProvider, SUBSCRIPTION_STATUS, type SubscriptionStatus, type SubscriptionStatusValue, type SyncResult, asBoolean, asString, createFirebaseAdapter, isProductionInsecureUrl, isTimestamp, isValidCheckoutUrl, isValidProductId, normalizeBillingCycle, normalizeStatus, normalizeUserId, usePolarBilling, useSubscription };

package/dist/index.d.ts

@@ -2,10 +2,6 @@ import * as react_jsx_runtime from 'react/jsx-runtime';
 import * as react from 'react';
 import { ReactNode } from 'react';
 
-/**
- * Subscription Entity
- * @description Types for subscription status and billing cycles
- */
 type SubscriptionStatusValue = 'active' | 'canceled' | 'revoked' | 'trialing' | 'past_due' | 'incomplete' | 'incomplete_expired' | 'unpaid' | 'none';
 type BillingCycle = 'monthly' | 'yearly';
 interface SubscriptionStatus {
@@ -16,14 +12,9 @@ interface SubscriptionStatus {
     currentPeriodEnd?: string;
     billingCycle?: BillingCycle;
     polarCustomerId?: string;
-    /** Token balance (for token-based projects like Aria) */
     tokens?: number;
 }
 
-/**
- * Order Entity
- * @description Types for billing history items
- */
 interface OrderItem {
     id: string;
     createdAt: string;
@@ -35,16 +26,11 @@ interface OrderItem {
     invoiceUrl?: string;
 }
 
-/**
- * Checkout Entity
- * @description Types for initiating and following process of checkouts
- */
 interface CheckoutParams {
     productId: string;
     planKey?: string;
     billingCycle?: 'monthly' | 'yearly';
     successUrl?: string;
-    /** Injected automatically by PolarProvider — do not pass manually */
     userId?: string;
 }
 interface CheckoutResult {
@@ -52,20 +38,12 @@ interface CheckoutResult {
     id: string;
 }
 
-/**
- * Cancellation Entity
- * @description Types for subscription cancellation reasons and outcomes
- */
 type CancellationReason = 'too_expensive' | 'missing_features' | 'switched_service' | 'unused' | 'customer_service' | 'low_quality' | 'too_complex' | 'other';
 interface CancelResult {
     success: boolean;
     endsAt?: string;
 }
 
-/**
- * Sync Entity
- * @description Type for subscription synchronization results
- */
 interface SyncResult {
     synced: boolean;
     plan?: string;
@@ -108,16 +86,8 @@ interface FirebaseAdapterConfig {
         currentPeriodEndField?: string;
     };
 }
-/**
- * Firebase Billing Service
- * @description Implementation of PolarAdapter for Firebase Functions and Firestore.
- */
 declare function createFirebaseAdapter(config: FirebaseAdapterConfig): PolarAdapter;
 
-/**
- * Billing Constants
- * @description Standardized subscription states and plan names
- */
 declare const SUBSCRIPTION_STATUS: Readonly<{
     ACTIVE: "active";
     CANCELED: "canceled";
@@ -131,21 +101,20 @@ declare const SUBSCRIPTION_STATUS: Readonly<{
 }>;
 declare const FREE_PLAN = "free";
 
-/**
- * Normalize a raw Polar status string to a known value.
- * @description Defaults to 'none' for unknown statuses or non-string input.
- */
 declare function normalizeStatus(raw: string): SubscriptionStatusValue;
-/**
- * Normalize billing interval
- * @description Maps 'month'/'year' to 'monthly'/'yearly'. Defaults to 'monthly' for unknown values or non-string input.
- */
 declare function normalizeBillingCycle(interval: string): BillingCycle;
 
-/**
- * PolarProvider Component
- * @description Context provider for Polar billing management.
- */
+declare function normalizeUserId(userId: string | undefined): string | undefined;
+declare function isValidProductId(productId: unknown): productId is string;
+declare function isValidCheckoutUrl(url: string): boolean;
+declare function isProductionInsecureUrl(url: string): boolean;
+
+declare function asString(value: unknown): string | undefined;
+declare function asBoolean(value: unknown): boolean | undefined;
+declare function isTimestamp(value: unknown): value is {
+    toDate(): Date;
+};
+
 interface PolarProviderProps {
     adapter: PolarAdapter;
     userId?: string;
@@ -164,11 +133,7 @@ interface PolarContextValue {
     getPortalUrl: () => Promise<string>;
 }
 declare const PolarContext: react.Context<PolarContextValue | undefined>;
-/**
- * usePolarBilling Hook
- * @description Hook to access Polar billing context
- */
 declare function usePolarBilling(): PolarContextValue;
 declare const useSubscription: typeof usePolarBilling;
 
-export { type BillingCycle, type CancelResult, type CancellationReason, type CheckoutParams, type CheckoutResult, FREE_PLAN, type FirebaseAdapterConfig, type OrderItem, type PolarAdapter, PolarContext, type PolarContextValue, PolarProvider, SUBSCRIPTION_STATUS, type SubscriptionStatus, type SubscriptionStatusValue, type SyncResult, createFirebaseAdapter, normalizeBillingCycle, normalizeStatus, usePolarBilling, useSubscription };
+export { type BillingCycle, type CancelResult, type CancellationReason, type CheckoutParams, type CheckoutResult, FREE_PLAN, type FirebaseAdapterConfig, type OrderItem, type PolarAdapter, PolarContext, type PolarContextValue, PolarProvider, SUBSCRIPTION_STATUS, type SubscriptionStatus, type SubscriptionStatusValue, type SyncResult, asBoolean, asString, createFirebaseAdapter, isProductionInsecureUrl, isTimestamp, isValidCheckoutUrl, isValidProductId, normalizeBillingCycle, normalizeStatus, normalizeUserId, usePolarBilling, useSubscription };

package/dist/index.js

@@ -34,29 +34,49 @@ __export(index_exports, {
   PolarContext: () => PolarContext,
   PolarProvider: () => PolarProvider,
   SUBSCRIPTION_STATUS: () => SUBSCRIPTION_STATUS,
+  asBoolean: () => asBoolean,
+  asString: () => asString,
   createFirebaseAdapter: () => createFirebaseAdapter,
+  isProductionInsecureUrl: () => isProductionInsecureUrl,
+  isTimestamp: () => isTimestamp,
+  isValidCheckoutUrl: () => isValidCheckoutUrl,
+  isValidProductId: () => isValidProductId,
   normalizeBillingCycle: () => normalizeBillingCycle,
   normalizeStatus: () => normalizeStatus,
+  normalizeUserId: () => normalizeUserId,
   usePolarBilling: () => usePolarBilling,
   useSubscription: () => useSubscription
 });
 module.exports = __toCommonJS(index_exports);
 
+// src/infrastructure/constants/billing.constants.ts
+var SUBSCRIPTION_STATUS = Object.freeze({
+  ACTIVE: "active",
+  CANCELED: "canceled",
+  REVOKED: "revoked",
+  TRIALING: "trialing",
+  PAST_DUE: "past_due",
+  INCOMPLETE: "incomplete",
+  INCOMPLETE_EXPIRED: "incomplete_expired",
+  UNPAID: "unpaid",
+  NONE: "none"
+});
+var FREE_PLAN = "free";
+
 // src/infrastructure/utils/normalization.util.ts
-var STATUS_MAP = {
-  active: "active",
-  trialing: "trialing",
-  past_due: "past_due",
-  incomplete: "incomplete",
-  incomplete_expired: "incomplete_expired",
-  unpaid: "unpaid",
-  canceled: "canceled",
-  cancelled: "canceled",
-  revoked: "revoked",
-  none: "none"
-};
+var STATUS_MAP = Object.freeze({
+  [SUBSCRIPTION_STATUS.ACTIVE]: SUBSCRIPTION_STATUS.ACTIVE,
+  [SUBSCRIPTION_STATUS.CANCELED]: SUBSCRIPTION_STATUS.CANCELED,
+  [SUBSCRIPTION_STATUS.REVOKED]: SUBSCRIPTION_STATUS.REVOKED,
+  [SUBSCRIPTION_STATUS.TRIALING]: SUBSCRIPTION_STATUS.TRIALING,
+  [SUBSCRIPTION_STATUS.PAST_DUE]: SUBSCRIPTION_STATUS.PAST_DUE,
+  [SUBSCRIPTION_STATUS.INCOMPLETE]: SUBSCRIPTION_STATUS.INCOMPLETE,
+  [SUBSCRIPTION_STATUS.INCOMPLETE_EXPIRED]: SUBSCRIPTION_STATUS.INCOMPLETE_EXPIRED,
+  [SUBSCRIPTION_STATUS.UNPAID]: SUBSCRIPTION_STATUS.UNPAID,
+  [SUBSCRIPTION_STATUS.NONE]: SUBSCRIPTION_STATUS.NONE
+});
 function normalizeStatus(raw) {
-  if (typeof raw !== "string") return "none";
+  if (raw == null || typeof raw !== "string") return "none";
   return STATUS_MAP[raw.toLowerCase()] ?? "none";
 }
 function normalizeBillingCycle(interval) {
@@ -67,7 +87,7 @@ function normalizeBillingCycle(interval) {
   return "monthly";
 }
 
-// src/infrastructure/services/firebase-billing.service.ts
+// src/infrastructure/utils/firebase-helpers.util.ts
 function asString(value) {
   if (typeof value === "string") return value;
   return void 0;
@@ -79,6 +99,8 @@ function asBoolean(value) {
 function isTimestamp(value) {
   return typeof value === "object" && value !== null && "toDate" in value && typeof value.toDate === "function";
 }
+
+// src/infrastructure/services/firebase-billing.service.ts
 function createFirebaseAdapter(config) {
   const functions = config.functions;
   const firestore = config.firestore;
@@ -169,26 +191,26 @@ function createFirebaseAdapter(config) {
         callables.portal,
         {}
       );
-      const url = result.url ?? result.customerPortalUrl;
-      if (!url) throw new Error("No portal URL returned from Cloud Function");
-      return url;
+      return result.url;
     }
   };
 }
 
-// src/infrastructure/constants/billing.constants.ts
-var SUBSCRIPTION_STATUS = Object.freeze({
-  ACTIVE: "active",
-  CANCELED: "canceled",
-  REVOKED: "revoked",
-  TRIALING: "trialing",
-  PAST_DUE: "past_due",
-  INCOMPLETE: "incomplete",
-  INCOMPLETE_EXPIRED: "incomplete_expired",
-  UNPAID: "unpaid",
-  NONE: "none"
-});
-var FREE_PLAN = "free";
+// src/infrastructure/utils/validations.util.ts
+function normalizeUserId(userId) {
+  if (typeof userId !== "string") return void 0;
+  const trimmed = userId.trim();
+  return trimmed.length > 0 ? trimmed : void 0;
+}
+function isValidProductId(productId) {
+  return typeof productId === "string" && productId.trim().length > 0;
+}
+function isValidCheckoutUrl(url) {
+  return url.startsWith("https://") || url.startsWith("http://");
+}
+function isProductionInsecureUrl(url) {
+  return url.startsWith("http://") && !url.includes("localhost") && !url.includes("127.0.0.1");
+}
 
 // src/presentation/components/PolarProvider.tsx
 var import_react2 = require("react");
@@ -209,18 +231,13 @@ var FREE_STATUS = {
   plan: "free",
   subscriptionStatus: "none"
 };
-function normalizeUserId(userId) {
-  if (typeof userId !== "string") return void 0;
-  const trimmed = userId.trim();
-  return trimmed.length > 0 ? trimmed : void 0;
-}
 function PolarProvider({ adapter, userId, children }) {
   const [status, setStatus] = (0, import_react2.useState)(FREE_STATUS);
   const [loading, setLoading] = (0, import_react2.useState)(true);
   const adapterRef = (0, import_react2.useRef)(adapter);
   const statusRef = (0, import_react2.useRef)({ setStatus, setLoading });
   const userIdRef = (0, import_react2.useRef)(normalizeUserId(userId));
-  const refreshAbortRef = (0, import_react2.useRef)(null);
+  const refreshMountedRef = (0, import_react2.useRef)(true);
   adapterRef.current = adapter;
   statusRef.current = { setStatus, setLoading };
   userIdRef.current = normalizeUserId(userId);
@@ -232,33 +249,38 @@ function PolarProvider({ adapter, userId, children }) {
       setLoading2(false);
       return;
     }
-    refreshAbortRef.current?.abort();
-    const ctrl = new AbortController();
-    refreshAbortRef.current = ctrl;
+    refreshMountedRef.current = true;
     try {
       setLoading2(true);
       const s = await adapterRef.current.getStatus(uid);
-      if (!ctrl.signal.aborted) setStatus2(s);
+      if (refreshMountedRef.current) setStatus2(s);
     } catch (err) {
-      if (!ctrl.signal.aborted) {
+      if (refreshMountedRef.current) {
         console.error("[polar-billing] getStatus failed:", err);
         setStatus2(FREE_STATUS);
       }
     } finally {
-      if (!ctrl.signal.aborted) setLoading2(false);
+      if (refreshMountedRef.current) setLoading2(false);
     }
   }, []);
   (0, import_react2.useEffect)(() => {
+    refreshMountedRef.current = true;
     refresh();
     return () => {
-      refreshAbortRef.current?.abort();
+      refreshMountedRef.current = false;
     };
-  }, [refresh]);
+  }, [userId]);
   const startCheckout = (0, import_react2.useCallback)(async (params) => {
+    if (!isValidProductId(params.productId)) {
+      throw new Error("[polar-billing] Invalid productId: must be a non-empty string");
+    }
     const uid = userIdRef.current;
     const result = await adapterRef.current.createCheckout({ ...params, userId: uid ?? void 0 });
-    if (!result.url.startsWith("https://")) {
-      throw new Error("[polar-billing] Invalid checkout URL returned: URL must start with https://");
+    if (!isValidCheckoutUrl(result.url)) {
+      throw new Error("[polar-billing] Invalid checkout URL returned: URL must start with https:// or http://");
+    }
+    if (isProductionInsecureUrl(result.url)) {
+      console.warn("[polar-billing] WARNING: Using insecure http:// URL in production environment");
     }
     window.location.href = result.url;
   }, []);
@@ -282,7 +304,6 @@ function PolarProvider({ adapter, userId, children }) {
       return result;
     },
     [refresh]
-    // Only depends on stable refresh
   );
   const getPortalUrl = (0, import_react2.useCallback)(async () => {
     const uid = userIdRef.current;
@@ -301,7 +322,6 @@ function PolarProvider({ adapter, userId, children }) {
       getPortalUrl
     }),
     [status, loading, refresh, syncSubscription]
-    // startCheckout, getBillingHistory, cancelSubscription, getPortalUrl are stable
   );
   return /* @__PURE__ */ (0, import_jsx_runtime.jsx)(PolarContext.Provider, { value, children });
 }
@@ -311,9 +331,16 @@ function PolarProvider({ adapter, userId, children }) {
   PolarContext,
   PolarProvider,
   SUBSCRIPTION_STATUS,
+  asBoolean,
+  asString,
   createFirebaseAdapter,
+  isProductionInsecureUrl,
+  isTimestamp,
+  isValidCheckoutUrl,
+  isValidProductId,
   normalizeBillingCycle,
   normalizeStatus,
+  normalizeUserId,
   usePolarBilling,
   useSubscription
 });

package/dist/index.mjs

@@ -1,18 +1,31 @@
+// src/infrastructure/constants/billing.constants.ts
+var SUBSCRIPTION_STATUS = Object.freeze({
+  ACTIVE: "active",
+  CANCELED: "canceled",
+  REVOKED: "revoked",
+  TRIALING: "trialing",
+  PAST_DUE: "past_due",
+  INCOMPLETE: "incomplete",
+  INCOMPLETE_EXPIRED: "incomplete_expired",
+  UNPAID: "unpaid",
+  NONE: "none"
+});
+var FREE_PLAN = "free";
+
 // src/infrastructure/utils/normalization.util.ts
-var STATUS_MAP = {
-  active: "active",
-  trialing: "trialing",
-  past_due: "past_due",
-  incomplete: "incomplete",
-  incomplete_expired: "incomplete_expired",
-  unpaid: "unpaid",
-  canceled: "canceled",
-  cancelled: "canceled",
-  revoked: "revoked",
-  none: "none"
-};
+var STATUS_MAP = Object.freeze({
+  [SUBSCRIPTION_STATUS.ACTIVE]: SUBSCRIPTION_STATUS.ACTIVE,
+  [SUBSCRIPTION_STATUS.CANCELED]: SUBSCRIPTION_STATUS.CANCELED,
+  [SUBSCRIPTION_STATUS.REVOKED]: SUBSCRIPTION_STATUS.REVOKED,
+  [SUBSCRIPTION_STATUS.TRIALING]: SUBSCRIPTION_STATUS.TRIALING,
+  [SUBSCRIPTION_STATUS.PAST_DUE]: SUBSCRIPTION_STATUS.PAST_DUE,
+  [SUBSCRIPTION_STATUS.INCOMPLETE]: SUBSCRIPTION_STATUS.INCOMPLETE,
+  [SUBSCRIPTION_STATUS.INCOMPLETE_EXPIRED]: SUBSCRIPTION_STATUS.INCOMPLETE_EXPIRED,
+  [SUBSCRIPTION_STATUS.UNPAID]: SUBSCRIPTION_STATUS.UNPAID,
+  [SUBSCRIPTION_STATUS.NONE]: SUBSCRIPTION_STATUS.NONE
+});
 function normalizeStatus(raw) {
-  if (typeof raw !== "string") return "none";
+  if (raw == null || typeof raw !== "string") return "none";
   return STATUS_MAP[raw.toLowerCase()] ?? "none";
 }
 function normalizeBillingCycle(interval) {
@@ -23,7 +36,7 @@ function normalizeBillingCycle(interval) {
   return "monthly";
 }
 
-// src/infrastructure/services/firebase-billing.service.ts
+// src/infrastructure/utils/firebase-helpers.util.ts
 function asString(value) {
   if (typeof value === "string") return value;
   return void 0;
@@ -35,6 +48,8 @@ function asBoolean(value) {
 function isTimestamp(value) {
   return typeof value === "object" && value !== null && "toDate" in value && typeof value.toDate === "function";
 }
+
+// src/infrastructure/services/firebase-billing.service.ts
 function createFirebaseAdapter(config) {
   const functions = config.functions;
   const firestore = config.firestore;
@@ -125,26 +140,26 @@ function createFirebaseAdapter(config) {
         callables.portal,
         {}
       );
-      const url = result.url ?? result.customerPortalUrl;
-      if (!url) throw new Error("No portal URL returned from Cloud Function");
-      return url;
+      return result.url;
     }
   };
 }
 
-// src/infrastructure/constants/billing.constants.ts
-var SUBSCRIPTION_STATUS = Object.freeze({
-  ACTIVE: "active",
-  CANCELED: "canceled",
-  REVOKED: "revoked",
-  TRIALING: "trialing",
-  PAST_DUE: "past_due",
-  INCOMPLETE: "incomplete",
-  INCOMPLETE_EXPIRED: "incomplete_expired",
-  UNPAID: "unpaid",
-  NONE: "none"
-});
-var FREE_PLAN = "free";
+// src/infrastructure/utils/validations.util.ts
+function normalizeUserId(userId) {
+  if (typeof userId !== "string") return void 0;
+  const trimmed = userId.trim();
+  return trimmed.length > 0 ? trimmed : void 0;
+}
+function isValidProductId(productId) {
+  return typeof productId === "string" && productId.trim().length > 0;
+}
+function isValidCheckoutUrl(url) {
+  return url.startsWith("https://") || url.startsWith("http://");
+}
+function isProductionInsecureUrl(url) {
+  return url.startsWith("http://") && !url.includes("localhost") && !url.includes("127.0.0.1");
+}
 
 // src/presentation/components/PolarProvider.tsx
 import {
@@ -171,18 +186,13 @@ var FREE_STATUS = {
   plan: "free",
   subscriptionStatus: "none"
 };
-function normalizeUserId(userId) {
-  if (typeof userId !== "string") return void 0;
-  const trimmed = userId.trim();
-  return trimmed.length > 0 ? trimmed : void 0;
-}
 function PolarProvider({ adapter, userId, children }) {
   const [status, setStatus] = useState(FREE_STATUS);
   const [loading, setLoading] = useState(true);
   const adapterRef = useRef(adapter);
   const statusRef = useRef({ setStatus, setLoading });
   const userIdRef = useRef(normalizeUserId(userId));
-  const refreshAbortRef = useRef(null);
+  const refreshMountedRef = useRef(true);
   adapterRef.current = adapter;
   statusRef.current = { setStatus, setLoading };
   userIdRef.current = normalizeUserId(userId);
@@ -194,33 +204,38 @@ function PolarProvider({ adapter, userId, children }) {
       setLoading2(false);
       return;
     }
-    refreshAbortRef.current?.abort();
-    const ctrl = new AbortController();
-    refreshAbortRef.current = ctrl;
+    refreshMountedRef.current = true;
     try {
       setLoading2(true);
       const s = await adapterRef.current.getStatus(uid);
-      if (!ctrl.signal.aborted) setStatus2(s);
+      if (refreshMountedRef.current) setStatus2(s);
     } catch (err) {
-      if (!ctrl.signal.aborted) {
+      if (refreshMountedRef.current) {
         console.error("[polar-billing] getStatus failed:", err);
         setStatus2(FREE_STATUS);
       }
     } finally {
-      if (!ctrl.signal.aborted) setLoading2(false);
+      if (refreshMountedRef.current) setLoading2(false);
     }
   }, []);
   useEffect(() => {
+    refreshMountedRef.current = true;
     refresh();
     return () => {
-      refreshAbortRef.current?.abort();
+      refreshMountedRef.current = false;
     };
-  }, [refresh]);
+  }, [userId]);
   const startCheckout = useCallback(async (params) => {
+    if (!isValidProductId(params.productId)) {
+      throw new Error("[polar-billing] Invalid productId: must be a non-empty string");
+    }
     const uid = userIdRef.current;
     const result = await adapterRef.current.createCheckout({ ...params, userId: uid ?? void 0 });
-    if (!result.url.startsWith("https://")) {
-      throw new Error("[polar-billing] Invalid checkout URL returned: URL must start with https://");
+    if (!isValidCheckoutUrl(result.url)) {
+      throw new Error("[polar-billing] Invalid checkout URL returned: URL must start with https:// or http://");
+    }
+    if (isProductionInsecureUrl(result.url)) {
+      console.warn("[polar-billing] WARNING: Using insecure http:// URL in production environment");
     }
     window.location.href = result.url;
   }, []);
@@ -244,7 +259,6 @@ function PolarProvider({ adapter, userId, children }) {
       return result;
     },
     [refresh]
-    // Only depends on stable refresh
   );
   const getPortalUrl = useCallback(async () => {
     const uid = userIdRef.current;
@@ -263,7 +277,6 @@ function PolarProvider({ adapter, userId, children }) {
       getPortalUrl
     }),
     [status, loading, refresh, syncSubscription]
-    // startCheckout, getBillingHistory, cancelSubscription, getPortalUrl are stable
   );
   return /* @__PURE__ */ jsx(PolarContext.Provider, { value, children });
 }
@@ -272,9 +285,16 @@ export {
   PolarContext,
   PolarProvider,
   SUBSCRIPTION_STATUS,
+  asBoolean,
+  asString,
   createFirebaseAdapter,
+  isProductionInsecureUrl,
+  isTimestamp,
+  isValidCheckoutUrl,
+  isValidProductId,
   normalizeBillingCycle,
   normalizeStatus,
+  normalizeUserId,
   usePolarBilling,
   useSubscription
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@umituz/web-polar-payment",
-  "version": "1.0.14",
+  "version": "1.0.15",
   "description": "Universal Polar.sh subscription billing — Firebase adapter",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",

package/src/domain/entities/cancellation.entity.ts

@@ -1,8 +1,3 @@
-/**
- * Cancellation Entity
- * @description Types for subscription cancellation reasons and outcomes
- */
-
 export type CancellationReason =
   | 'too_expensive'
   | 'missing_features'

package/src/domain/entities/checkout.entity.ts

@@ -1,14 +1,8 @@
-/**
- * Checkout Entity
- * @description Types for initiating and following process of checkouts
- */
-
 export interface CheckoutParams {
   productId: string;
   planKey?: string;
   billingCycle?: 'monthly' | 'yearly';
   successUrl?: string;
-  /** Injected automatically by PolarProvider — do not pass manually */
   userId?: string;
 }
 

package/src/domain/entities/order.entity.ts

@@ -1,8 +1,3 @@
-/**
- * Order Entity
- * @description Types for billing history items
- */
-
 export interface OrderItem {
   id: string;
   createdAt: string;

package/src/domain/entities/subscription.entity.ts

@@ -1,8 +1,3 @@
-/**
- * Subscription Entity
- * @description Types for subscription status and billing cycles
- */
-
 export type SubscriptionStatusValue =
   | 'active'
   | 'canceled'
@@ -24,6 +19,5 @@ export interface SubscriptionStatus {
   currentPeriodEnd?: string;
   billingCycle?: BillingCycle;
   polarCustomerId?: string;
-  /** Token balance (for token-based projects like Aria) */
   tokens?: number;
 }

package/src/domain/entities/sync.entity.ts

@@ -1,8 +1,3 @@
-/**
- * Sync Entity
- * @description Type for subscription synchronization results
- */
-
 export interface SyncResult {
   synced: boolean;
   plan?: string;

package/src/domain/index.ts

@@ -1,7 +1,2 @@
-/**
- * Domain Layer
- * Subpath: @umituz/web-polar-payment/domain
- */
-
 export * from './entities';
 export * from './interfaces';

package/src/index.ts

@@ -1,11 +1,3 @@
-/**
- * @umituz/web-polar-payment
- * Universal Polar.sh subscription billing — Firebase adapter
- *
- * IMPORTANT: Apps should NOT use this root barrel export.
- * Use subpath imports instead: "@umituz/web-polar-payment/domain"
- */
-
 export * from './domain';
 export * from './infrastructure';
 export * from './presentation';

package/src/infrastructure/constants/billing.constants.ts

@@ -1,9 +1,3 @@
-/**
- * Billing Constants
- * @description Standardized subscription states and plan names
- */
-
-// Object.freeze() prevents accidental mutations and enables V8 optimizations
 export const SUBSCRIPTION_STATUS = Object.freeze({
   ACTIVE: 'active' as const,
   CANCELED: 'canceled' as const,

package/src/infrastructure/index.ts

@@ -1,8 +1,5 @@
-/**
- * Infrastructure Layer
- * Subpath: @umituz/web-polar-payment/infrastructure
- */
-
 export * from './services/firebase-billing.service';
 export * from './constants/billing.constants';
 export * from './utils/normalization.util';
+export * from './utils/validations.util';
+export * from './utils/firebase-helpers.util';

package/src/infrastructure/services/firebase-billing.service.ts

@@ -9,37 +9,8 @@ import type {
   SyncResult,
 } from '../../domain/entities';
 import { normalizeStatus, normalizeBillingCycle } from '../utils/normalization.util';
+import { asString, asBoolean, isTimestamp } from '../utils/firebase-helpers.util';
 
-/**
- * Type guard to safely extract string value from unknown Firestore data
- */
-function asString(value: unknown): string | undefined {
-  if (typeof value === 'string') return value;
-  return undefined;
-}
-
-/**
- * Type guard to safely extract boolean value from unknown Firestore data
- */
-function asBoolean(value: unknown): boolean | undefined {
-  if (typeof value === 'boolean') return value;
-  return undefined;
-}
-
-/**
- * Type guard to safely check if value is an object with toDate method
- */
-function isTimestamp(value: unknown): value is { toDate(): Date } {
-  return (
-    typeof value === 'object' &&
-    value !== null &&
-    'toDate' in value &&
-    typeof (value as { toDate: unknown }).toDate === 'function'
-  );
-}
-
-// Internal type aliases for Firebase SDK compatibility
-// Using 'any' internally to avoid DTS build issues with external Firebase packages
 type FirebaseFunctions = any;
 type FirebaseFirestore = any;
 
@@ -67,12 +38,7 @@ export interface FirebaseAdapterConfig {
   };
 }
 
-/**
- * Firebase Billing Service
- * @description Implementation of PolarAdapter for Firebase Functions and Firestore.
- */
 export function createFirebaseAdapter(config: FirebaseAdapterConfig): PolarAdapter {
-  // Cast internally to Firebase types for implementation
   const functions = config.functions as FirebaseFunctions;
   const firestore = config.firestore as FirebaseFirestore;
 
@@ -95,8 +61,6 @@ export function createFirebaseAdapter(config: FirebaseAdapterConfig): PolarAdapt
     currentPeriodEnd: config.db?.currentPeriodEndField ?? 'currentPeriodEnd',
   };
 
-  // Cache imports to avoid repeated dynamic import overhead
-  // Reduces latency on subsequent calls and GC pressure
   let httpsCallableCache: typeof import('firebase/functions')['httpsCallable'] | null = null;
   let firestoreCache: { doc: any; getDoc: any } | null = null;
 
@@ -176,13 +140,11 @@ export function createFirebaseAdapter(config: FirebaseAdapterConfig): PolarAdapt
     },
 
     async getPortalUrl(_userId: string): Promise<string> {
-      const result = await callable<Record<string, never>, { url?: string; customerPortalUrl?: string }>(
+      const result = await callable<Record<string, never>, { url: string }>(
         callables.portal,
         {},
       );
-      const url = result.url ?? result.customerPortalUrl;
-      if (!url) throw new Error('No portal URL returned from Cloud Function');
-      return url;
+      return result.url;
     },
   };
 }

package/src/infrastructure/utils/firebase-helpers.util.ts

@@ -0,0 +1,18 @@
+export function asString(value: unknown): string | undefined {
+  if (typeof value === 'string') return value;
+  return undefined;
+}
+
+export function asBoolean(value: unknown): boolean | undefined {
+  if (typeof value === 'boolean') return value;
+  return undefined;
+}
+
+export function isTimestamp(value: unknown): value is { toDate(): Date } {
+  return (
+    typeof value === 'object' &&
+    value !== null &&
+    'toDate' in value &&
+    typeof (value as { toDate: unknown }).toDate === 'function'
+  );
+}

package/src/infrastructure/utils/normalization.util.ts

@@ -1,33 +1,23 @@
 import type { SubscriptionStatusValue, BillingCycle } from '../../domain/entities';
+import { SUBSCRIPTION_STATUS } from '../constants/billing.constants';
 
-// Static map outside function scope - created once, reused forever
-// Reduces GC pressure from repeated object allocations
-const STATUS_MAP: Readonly<Record<string, SubscriptionStatusValue>> = {
-  active: 'active',
-  trialing: 'trialing',
-  past_due: 'past_due',
-  incomplete: 'incomplete',
-  incomplete_expired: 'incomplete_expired',
-  unpaid: 'unpaid',
-  canceled: 'canceled',
-  cancelled: 'canceled',
-  revoked: 'revoked',
-  none: 'none',
-};
+const STATUS_MAP: Readonly<Record<string, SubscriptionStatusValue>> = Object.freeze({
+  [SUBSCRIPTION_STATUS.ACTIVE]: SUBSCRIPTION_STATUS.ACTIVE,
+  [SUBSCRIPTION_STATUS.CANCELED]: SUBSCRIPTION_STATUS.CANCELED,
+  [SUBSCRIPTION_STATUS.REVOKED]: SUBSCRIPTION_STATUS.REVOKED,
+  [SUBSCRIPTION_STATUS.TRIALING]: SUBSCRIPTION_STATUS.TRIALING,
+  [SUBSCRIPTION_STATUS.PAST_DUE]: SUBSCRIPTION_STATUS.PAST_DUE,
+  [SUBSCRIPTION_STATUS.INCOMPLETE]: SUBSCRIPTION_STATUS.INCOMPLETE,
+  [SUBSCRIPTION_STATUS.INCOMPLETE_EXPIRED]: SUBSCRIPTION_STATUS.INCOMPLETE_EXPIRED,
+  [SUBSCRIPTION_STATUS.UNPAID]: SUBSCRIPTION_STATUS.UNPAID,
+  [SUBSCRIPTION_STATUS.NONE]: SUBSCRIPTION_STATUS.NONE,
+});
 
-/**
- * Normalize a raw Polar status string to a known value.
- * @description Defaults to 'none' for unknown statuses or non-string input.
- */
 export function normalizeStatus(raw: string): SubscriptionStatusValue {
-  if (typeof raw !== 'string') return 'none';
+  if (raw == null || typeof raw !== 'string') return 'none';
   return STATUS_MAP[raw.toLowerCase()] ?? 'none';
 }
 
-/**
- * Normalize billing interval
- * @description Maps 'month'/'year' to 'monthly'/'yearly'. Defaults to 'monthly' for unknown values or non-string input.
- */
 export function normalizeBillingCycle(interval: string): BillingCycle {
   if (typeof interval !== 'string') return 'monthly';
   const normalized = interval.toLowerCase();

package/src/infrastructure/utils/validations.util.ts

@@ -0,0 +1,17 @@
+export function normalizeUserId(userId: string | undefined): string | undefined {
+  if (typeof userId !== 'string') return undefined;
+  const trimmed = userId.trim();
+  return trimmed.length > 0 ? trimmed : undefined;
+}
+
+export function isValidProductId(productId: unknown): productId is string {
+  return typeof productId === 'string' && productId.trim().length > 0;
+}
+
+export function isValidCheckoutUrl(url: string): boolean {
+  return url.startsWith('https://') || url.startsWith('http://');
+}
+
+export function isProductionInsecureUrl(url: string): boolean {
+  return url.startsWith('http://') && !url.includes('localhost') && !url.includes('127.0.0.1');
+}

package/src/presentation/components/PolarProvider.tsx

@@ -16,11 +16,7 @@ import type {
   OrderItem,
 } from '../../domain/entities';
 import { PolarContext } from '../hooks/usePolarBilling';
-
-/**
- * PolarProvider Component
- * @description Context provider for Polar billing management.
- */
+import { normalizeUserId, isValidProductId, isValidCheckoutUrl, isProductionInsecureUrl } from '../../infrastructure/utils/validations.util';
 
 interface PolarProviderProps {
   adapter: PolarAdapter;
@@ -33,28 +29,19 @@ const FREE_STATUS: SubscriptionStatus = {
   subscriptionStatus: 'none',
 };
 
-function normalizeUserId(userId: string | undefined): string | undefined {
-  if (typeof userId !== 'string') return undefined;
-  const trimmed = userId.trim();
-  return trimmed.length > 0 ? trimmed : undefined;
-}
-
 export function PolarProvider({ adapter, userId, children }: PolarProviderProps) {
   const [status, setStatus] = useState<SubscriptionStatus>(FREE_STATUS);
   const [loading, setLoading] = useState(true);
 
-  // Store adapter and setters in refs to create stable callbacks
   const adapterRef = useRef(adapter);
   const statusRef = useRef({ setStatus, setLoading });
   const userIdRef = useRef(normalizeUserId(userId));
-  const refreshAbortRef = useRef<AbortController | null>(null);
+  const refreshMountedRef = useRef(true);
 
-  // Keep refs in sync
   adapterRef.current = adapter;
   statusRef.current = { setStatus, setLoading };
   userIdRef.current = normalizeUserId(userId);
 
-  // Stable refresh function with no dependencies - prevents cascading re-renders
   const refresh = useCallback(async () => {
     const uid = userIdRef.current;
     const { setStatus, setLoading } = statusRef.current;
@@ -65,37 +52,46 @@ export function PolarProvider({ adapter, userId, children }: PolarProviderProps)
       return;
     }
 
-    refreshAbortRef.current?.abort();
-    const ctrl = new AbortController();
-    refreshAbortRef.current = ctrl;
+    refreshMountedRef.current = true;
 
     try {
       setLoading(true);
       const s = await adapterRef.current.getStatus(uid);
-      if (!ctrl.signal.aborted) setStatus(s);
+      if (refreshMountedRef.current) setStatus(s);
     } catch (err) {
-      if (!ctrl.signal.aborted) {
+      if (refreshMountedRef.current) {
         console.error('[polar-billing] getStatus failed:', err);
         setStatus(FREE_STATUS);
       }
     } finally {
-      if (!ctrl.signal.aborted) setLoading(false);
+      if (refreshMountedRef.current) setLoading(false);
     }
-  }, []); // No dependencies - completely stable
+  }, []);
 
   useEffect(() => {
+    refreshMountedRef.current = true;
     refresh();
-    return () => { refreshAbortRef.current?.abort(); };
-  }, [refresh]); // Only re-run if refresh identity changes (never)
+    return () => { refreshMountedRef.current = false; };
+  }, [userId]);
 
   const startCheckout = useCallback(async (params: CheckoutParams) => {
+    if (!isValidProductId(params.productId)) {
+      throw new Error('[polar-billing] Invalid productId: must be a non-empty string');
+    }
+
     const uid = userIdRef.current;
     const result = await adapterRef.current.createCheckout({ ...params, userId: uid ?? undefined });
-    if (!result.url.startsWith('https://')) {
-      throw new Error('[polar-billing] Invalid checkout URL returned: URL must start with https://');
+
+    if (!isValidCheckoutUrl(result.url)) {
+      throw new Error('[polar-billing] Invalid checkout URL returned: URL must start with https:// or http://');
+    }
+
+    if (isProductionInsecureUrl(result.url)) {
+      console.warn('[polar-billing] WARNING: Using insecure http:// URL in production environment');
     }
+
     window.location.href = result.url;
-  }, []); // No dependencies - stable
+  }, []);
 
   const syncSubscription = useCallback(async (): Promise<SyncResult> => {
     const uid = userIdRef.current;
@@ -105,13 +101,13 @@ export function PolarProvider({ adapter, userId, children }: PolarProviderProps)
     const result = await adapterRef.current.syncSubscription(uid, checkoutId);
     if (result.synced) await refresh();
     return result;
-  }, [refresh]); // Only depends on stable refresh
+  }, [refresh]);
 
   const getBillingHistory = useCallback(async (): Promise<OrderItem[]> => {
     const uid = userIdRef.current;
     if (!uid) return [];
     return adapterRef.current.getBillingHistory(uid);
-  }, []); // No dependencies - stable
+  }, []);
 
   const cancelSubscription = useCallback(
     async (reason?: CancellationReason): Promise<CancelResult> => {
@@ -119,17 +115,15 @@ export function PolarProvider({ adapter, userId, children }: PolarProviderProps)
       if (result.success) await refresh();
       return result;
     },
-    [refresh], // Only depends on stable refresh
+    [refresh],
   );
 
   const getPortalUrl = useCallback(async (): Promise<string> => {
     const uid = userIdRef.current;
     if (!uid) throw new Error('[polar-billing] Cannot get portal URL: No authenticated user');
     return adapterRef.current.getPortalUrl(uid);
-  }, []); // No dependencies - stable
+  }, []);
 
-  // Memoized context value - only recreates when status/loading changes
-  // All functions are stable, so they don't trigger re-creation
   const value = useMemo(
     () => ({
       status,
@@ -141,7 +135,7 @@ export function PolarProvider({ adapter, userId, children }: PolarProviderProps)
       cancelSubscription,
       getPortalUrl,
     }),
-    [status, loading, refresh, syncSubscription], // startCheckout, getBillingHistory, cancelSubscription, getPortalUrl are stable
+    [status, loading, refresh, syncSubscription],
   );
 
   return <PolarContext.Provider value={value}>{children}</PolarContext.Provider>;

package/src/presentation/hooks/usePolarBilling.ts

@@ -21,10 +21,6 @@ export interface PolarContextValue {
 
 export const PolarContext = createContext<PolarContextValue | undefined>(undefined);
 
-/**
- * usePolarBilling Hook
- * @description Hook to access Polar billing context
- */
 export function usePolarBilling(): PolarContextValue {
   const ctx = useContext(PolarContext);
   if (!ctx) throw new Error('usePolarBilling must be used within <PolarProvider>');

package/src/presentation/index.ts

@@ -1,7 +1,2 @@
-/**
- * Presentation Layer
- * Subpath: @umituz/web-polar-payment/presentation
- */
-
 export * from './components/PolarProvider';
 export * from './hooks/usePolarBilling';