@vex-chat/spire 2.5.0 → 3.0.0

package/src/ClientManager.ts

@@ -28,7 +28,6 @@ import { MailWSSchema, SocketAuthErrors } from "@vex-chat/types";
 
 import { parse as uuidParse, validate as uuidValidate } from "uuid";
 
-import { callWakeDispatchData } from "./server/callWake.ts";
 import { validateMailIngress } from "./server/mailIngress.ts";
 import { TOKEN_EXPIRY } from "./Spire.ts";
 import { createUint8UUID } from "./utils/createUint8UUID.ts";
@@ -334,28 +333,15 @@ export class ClientManager extends EventEmitter {
                         );
 
                         this.sendSuccess(msg.transmissionID, null);
-                        const callWake = callWakeDispatchData(mail);
-                        if (callWake) {
-                            this.notify(
-                                recipientDevice.owner,
-                                "callWake",
-                                msg.transmissionID,
-                                callWake,
-                                mail.recipient,
-                                undefined,
-                                mail.nonce,
-                            );
-                        } else {
-                            this.notify(
-                                recipientDevice.owner,
-                                "mail",
-                                msg.transmissionID,
-                                null,
-                                mail.recipient,
-                                mail.authorID,
-                                mail.nonce,
-                            );
-                        }
+                        this.notify(
+                            recipientDevice.owner,
+                            "mail",
+                            msg.transmissionID,
+                            null,
+                            mail.recipient,
+                            mail.authorID,
+                            mail.nonce,
+                        );
                     } catch (err: unknown) {
                         this.sendErr(msg.transmissionID, String(err));
                     }

package/src/Database.ts

@@ -7,6 +7,14 @@
 import type { PasskeyRow, ServerDatabase } from "./db/schema.ts";
 import type { SpireOptions } from "./Spire.ts";
 import type {
+    AccountEntitlements,
+    AccountEntitlementSource,
+    AccountTier,
+    BillingAccountState,
+    BillingEnvironment,
+    BillingPlatform,
+    BillingSubscription,
+    BillingSubscriptionStatus,
     Channel,
     Device,
     DevicePayload,
@@ -27,7 +35,7 @@ import type {
 import type { Migration, MigrationProvider } from "kysely";
 
 import { EventEmitter } from "events";
-import { pbkdf2Sync } from "node:crypto";
+import { createHash, pbkdf2Sync } from "node:crypto";
 import { statSync } from "node:fs";
 import * as fs from "node:fs/promises";
 import path from "node:path";
@@ -38,12 +46,43 @@ import {
     getCryptoProfile,
     XUtils,
 } from "@vex-chat/crypto";
-import { MailType } from "@vex-chat/types";
+import {
+    AccountEntitlementSourceSchema,
+    AccountTierSchema,
+    BillingEnvironmentSchema,
+    BillingPlatformSchema,
+    BillingSubscriptionStatusSchema,
+    buildAccountEntitlements,
+    MailType,
+} from "@vex-chat/types";
 
 import argon2 from "argon2";
 
 import { serverMailRetentionCutoffIso } from "./mailRetention.ts";
 
+export interface StoreSubscriptionUpsertInput {
+    environment: BillingEnvironment;
+    expiresAt: null | string;
+    externalOriginalID?: null | string | undefined;
+    externalTransactionID?: null | string | undefined;
+    platform: BillingPlatform;
+    productID: string;
+    purchaseToken?: null | string | undefined;
+    rawPayload: unknown;
+    status: BillingSubscriptionStatus;
+    storeProductID: string;
+    tier: AccountTier;
+    userID: string;
+}
+
+export interface StoreTransactionRecordInput {
+    eventType: string;
+    externalTransactionID?: null | string | undefined;
+    rawPayload: unknown;
+    subscriptionID: string;
+    userID: string;
+}
+
 /**
  * Narrow a plain integer from the `mailType` SQL column to the
  * `MailType` union (0 = initial, 1 = subsequent). Throws if the
@@ -130,10 +169,8 @@ export interface InternalUserRecord extends UserRecord {
     hashAlgo: string;
 }
 
-export type NotificationChannel = "apnsVoip" | "expo" | "fcmCall";
-
 export interface NotificationSubscription {
-    channel: NotificationChannel;
+    channel: "expo";
     createdAt: string;
     deviceID: string;
     enabled: boolean;
@@ -146,7 +183,7 @@ export interface NotificationSubscription {
 }
 
 export interface SaveNotificationSubscriptionInput {
-    channel: NotificationChannel;
+    channel: "expo";
     deviceID: string;
     events: string[];
     platform?: null | string;
@@ -420,13 +457,15 @@ export class Database extends EventEmitter {
                 regPayload.username,
                 userID,
             );
-            const passwordHash =
-                typeof regPayload.password === "string" &&
-                regPayload.password.length > 0
-                    ? await hashPasswordArgon2(regPayload.password)
-                    : "";
-            const hashAlgo =
-                passwordHash.length > 0 ? "argon2id" : "keycluster";
+            if (
+                typeof regPayload.password !== "string" ||
+                regPayload.password.trim().length === 0
+            ) {
+                throw new Error(
+                    "Password is required to register a new account.",
+                );
+            }
+            const passwordHash = await hashPasswordArgon2(regPayload.password);
 
             const user: UserRecord = {
                 lastSeen: new Date().toISOString(),
@@ -440,7 +479,7 @@ export class Database extends EventEmitter {
                 .insertInto("users")
                 .values({
                     ...user,
-                    hashAlgo,
+                    hashAlgo: "argon2id",
                     lastSeen: user.lastSeen,
                 })
                 .execute();
@@ -805,6 +844,78 @@ export class Database extends EventEmitter {
             .executeTakeFirst();
     }
 
+    public async recalculateStoreEntitlements(
+        userID: string,
+    ): Promise<AccountEntitlements> {
+        const subscriptions = await this.retrieveBillingSubscriptions(userID);
+        const nowMs = Date.now();
+        const active = subscriptions
+            .filter((subscription) =>
+                billingStatusCarriesEntitlement(subscription.status),
+            )
+            .filter((subscription) => {
+                if (!subscription.expiresAt) {
+                    return true;
+                }
+                const expiresAtMs = Date.parse(subscription.expiresAt);
+                return Number.isFinite(expiresAtMs) && expiresAtMs > nowMs;
+            })
+            .sort((a, b) => {
+                const tierDelta =
+                    accountTierRank(b.tier) - accountTierRank(a.tier);
+                if (tierDelta !== 0) {
+                    return tierDelta;
+                }
+                return expiryRank(b.expiresAt) - expiryRank(a.expiresAt);
+            });
+
+        const best = active[0];
+        if (best) {
+            return this.setAccountEntitlementTier(userID, best.tier, {
+                expiresAt: best.expiresAt,
+                source: "store",
+            });
+        }
+
+        const current = await this.retrieveAccountEntitlements(userID);
+        if (current.source !== "store") {
+            return current;
+        }
+
+        return this.setAccountEntitlementTier(userID, "free", {
+            expiresAt: null,
+            source: "store",
+        });
+    }
+
+    public async recordStoreTransaction(
+        input: StoreTransactionRecordInput,
+    ): Promise<void> {
+        const subscription = await this.db
+            .selectFrom("billing_store_subscriptions")
+            .selectAll()
+            .where("subscriptionID", "=", input.subscriptionID)
+            .limit(1)
+            .executeTakeFirstOrThrow();
+
+        await this.db
+            .insertInto("billing_store_transactions")
+            .values({
+                environment: subscription.environment,
+                eventType: input.eventType,
+                externalTransactionID: input.externalTransactionID ?? null,
+                platform: subscription.platform,
+                processedAt: new Date().toISOString(),
+                purchaseTokenHash: subscription.purchaseTokenHash,
+                rawPayload: JSON.stringify(input.rawPayload),
+                storeProductID: subscription.storeProductID,
+                subscriptionID: input.subscriptionID,
+                transactionID: crypto.randomUUID(),
+                userID: input.userID,
+            })
+            .execute();
+    }
+
     public async recoverDevice(
         owner: string,
         payload: DevicePayload,
@@ -947,6 +1058,29 @@ export class Database extends EventEmitter {
         });
     }
 
+    public async retrieveAccountEntitlements(
+        userID: string,
+    ): Promise<AccountEntitlements> {
+        const row = await this.db
+            .selectFrom("account_entitlements")
+            .selectAll()
+            .where("userID", "=", userID)
+            .limit(1)
+            .executeTakeFirst();
+
+        if (!row) {
+            return buildAccountEntitlements({ userID });
+        }
+
+        return buildAccountEntitlements({
+            expiresAt: row.expiresAt,
+            refreshedAt: row.updatedAt,
+            source: parseAccountEntitlementSource(row.source),
+            tier: parseAccountTier(row.tier),
+            userID,
+        });
+    }
+
     /**
      * Retrives a list of users that should be notified when a specific resourceID
      * experiences changes.
@@ -970,6 +1104,28 @@ export class Database extends EventEmitter {
         return users;
     }
 
+    public async retrieveBillingAccountState(
+        userID: string,
+    ): Promise<BillingAccountState> {
+        return {
+            entitlements: await this.retrieveAccountEntitlements(userID),
+            subscriptions: await this.retrieveBillingSubscriptions(userID),
+        };
+    }
+
+    public async retrieveBillingSubscriptions(
+        userID: string,
+    ): Promise<BillingSubscription[]> {
+        const rows = await this.db
+            .selectFrom("billing_store_subscriptions")
+            .selectAll()
+            .where("userID", "=", userID)
+            .orderBy("updatedAt", "desc")
+            .execute();
+
+        return rows.map(toBillingSubscription);
+    }
+
     public async retrieveChannel(channelID: string): Promise<Channel | null> {
         const channels: Channel[] = await this.db
             .selectFrom("channels")
@@ -1339,6 +1495,37 @@ export class Database extends EventEmitter {
         return rows.map(toServer);
     }
 
+    public async retrieveStoreSubscriptionOwner(args: {
+        environment: BillingEnvironment;
+        externalOriginalID?: null | string | undefined;
+        platform: BillingPlatform;
+        purchaseToken?: null | string | undefined;
+    }): Promise<null | string> {
+        const purchaseTokenHash = args.purchaseToken
+            ? billingPurchaseTokenHash(
+                  args.platform,
+                  args.environment,
+                  args.purchaseToken,
+              )
+            : null;
+        const existing = await this.findExistingStoreSubscription({
+            environment: args.environment,
+            externalOriginalID: args.externalOriginalID ?? null,
+            platform: args.platform,
+            purchaseTokenHash,
+        });
+        if (!existing) {
+            return null;
+        }
+        const row = await this.db
+            .selectFrom("billing_store_subscriptions")
+            .select(["userID"])
+            .where("subscriptionID", "=", existing.subscriptionID)
+            .limit(1)
+            .executeTakeFirst();
+        return row?.userID ?? null;
+    }
+
     // The identifier is matched as either a userID (UUID branch) or a
     // username (string branch). Username comparison is case-folded so
     // `User` and `user` resolve to the same row regardless of how the
@@ -1501,6 +1688,147 @@ export class Database extends EventEmitter {
         }
     }
 
+    public async setAccountEntitlementTier(
+        userID: string,
+        tier: AccountTier,
+        options?: {
+            expiresAt?: null | string | undefined;
+            source?: AccountEntitlementSource | undefined;
+        },
+    ): Promise<AccountEntitlements> {
+        const parsedTier = AccountTierSchema.parse(tier);
+        const source = AccountEntitlementSourceSchema.parse(
+            options?.source ?? "dev_override",
+        );
+        const expiresAt = options?.expiresAt ?? null;
+        const updatedAt = new Date().toISOString();
+
+        await this.db
+            .insertInto("account_entitlements")
+            .values({
+                expiresAt,
+                source,
+                tier: parsedTier,
+                updatedAt,
+                userID,
+            })
+            .onConflict((oc) =>
+                oc.column("userID").doUpdateSet({
+                    expiresAt,
+                    source,
+                    tier: parsedTier,
+                    updatedAt,
+                }),
+            )
+            .execute();
+
+        return buildAccountEntitlements({
+            expiresAt,
+            refreshedAt: updatedAt,
+            source,
+            tier: parsedTier,
+            userID,
+        });
+    }
+
+    public async upsertStoreSubscription(
+        input: StoreSubscriptionUpsertInput,
+    ): Promise<BillingSubscription> {
+        const now = new Date().toISOString();
+        const purchaseTokenHash = input.purchaseToken
+            ? billingPurchaseTokenHash(
+                  input.platform,
+                  input.environment,
+                  input.purchaseToken,
+              )
+            : null;
+        const existing = await this.findExistingStoreSubscription({
+            environment: input.environment,
+            externalOriginalID: input.externalOriginalID ?? null,
+            platform: input.platform,
+            purchaseTokenHash,
+        });
+        const subscriptionID = existing?.subscriptionID ?? crypto.randomUUID();
+        const row = {
+            environment: input.environment,
+            expiresAt: input.expiresAt,
+            externalOriginalID: input.externalOriginalID ?? null,
+            externalTransactionID: input.externalTransactionID ?? null,
+            platform: input.platform,
+            productID: input.productID,
+            purchaseToken: input.purchaseToken ?? null,
+            purchaseTokenHash,
+            rawPayload: JSON.stringify(input.rawPayload),
+            status: input.status,
+            storeProductID: input.storeProductID,
+            tier: input.tier,
+            updatedAt: now,
+            userID: input.userID,
+        };
+
+        if (existing) {
+            await this.db
+                .updateTable("billing_store_subscriptions")
+                .set(row)
+                .where("subscriptionID", "=", subscriptionID)
+                .execute();
+        } else {
+            await this.db
+                .insertInto("billing_store_subscriptions")
+                .values({
+                    ...row,
+                    createdAt: now,
+                    subscriptionID,
+                })
+                .execute();
+        }
+
+        const saved = await this.db
+            .selectFrom("billing_store_subscriptions")
+            .selectAll()
+            .where("subscriptionID", "=", subscriptionID)
+            .executeTakeFirstOrThrow();
+
+        return toBillingSubscription(saved);
+    }
+
+    private async findExistingStoreSubscription(args: {
+        environment: BillingEnvironment;
+        externalOriginalID: null | string;
+        platform: BillingPlatform;
+        purchaseTokenHash: null | string;
+    }): Promise<null | { subscriptionID: string }> {
+        if (args.externalOriginalID) {
+            const byOriginal = await this.db
+                .selectFrom("billing_store_subscriptions")
+                .select(["subscriptionID"])
+                .where("platform", "=", args.platform)
+                .where("environment", "=", args.environment)
+                .where("externalOriginalID", "=", args.externalOriginalID)
+                .limit(1)
+                .executeTakeFirst();
+            if (byOriginal) {
+                return byOriginal;
+            }
+        }
+
+        if (args.purchaseTokenHash) {
+            const byToken = await this.db
+                .selectFrom("billing_store_subscriptions")
+                .select(["subscriptionID"])
+                .where("platform", "=", args.platform)
+                .where("environment", "=", args.environment)
+                .where("purchaseTokenHash", "=", args.purchaseTokenHash)
+                .limit(1)
+                .executeTakeFirst();
+            if (byToken) {
+                return byToken;
+            }
+        }
+
+        return null;
+    }
+
     private async init(): Promise<void> {
         const migrator = new Migrator({
             db: this.db,
@@ -1590,6 +1918,54 @@ export async function verifyPassword(
     return { needsRehash: valid, valid };
 }
 
+function accountTierRank(tier: AccountTier): number {
+    switch (tier) {
+        case "free":
+            return 0;
+        case "plus":
+            return 1;
+        case "pro":
+            return 2;
+    }
+}
+
+function billingEnvironmentFromRow(environment: string): BillingEnvironment {
+    const parsed = BillingEnvironmentSchema.safeParse(environment);
+    return parsed.success ? parsed.data : "production";
+}
+
+function billingPlatformFromRow(platform: string): BillingPlatform {
+    const parsed = BillingPlatformSchema.safeParse(platform);
+    return parsed.success ? parsed.data : "apple_app_store";
+}
+
+function billingPurchaseTokenHash(
+    platform: BillingPlatform,
+    environment: BillingEnvironment,
+    token: string,
+): string {
+    return createHash("sha256")
+        .update(`${platform}:${environment}:${token}`)
+        .digest("hex");
+}
+
+function billingStatusCarriesEntitlement(
+    status: BillingSubscriptionStatus,
+): boolean {
+    return (
+        status === "active" ||
+        status === "billing_retry" ||
+        status === "grace_period"
+    );
+}
+
+function billingSubscriptionStatusFromRow(
+    status: string,
+): BillingSubscriptionStatus {
+    const parsed = BillingSubscriptionStatusSchema.safeParse(status);
+    return parsed.success ? parsed.data : "pending";
+}
+
 function decodeNotificationEvents(events: string): string[] {
     try {
         const parsed: unknown = JSON.parse(events);
@@ -1612,6 +1988,14 @@ function encodeNotificationEvents(events: string[]): string {
     return JSON.stringify(unique.length > 0 ? unique : ["mail"]);
 }
 
+function expiryRank(expiresAt: null | string): number {
+    if (!expiresAt) {
+        return Number.MAX_SAFE_INTEGER;
+    }
+    const value = Date.parse(expiresAt);
+    return Number.isFinite(value) ? value : 0;
+}
+
 // Mirrors `Spire.normalizeRegistrationUsername` — kept in sync so a
 // caller invoking `createUser` directly (e.g. tests, future internal
 // flows) gets the same lowercase canonicalization the public
@@ -1629,11 +2013,40 @@ function normalizeRegistrationUsername(
     return `key_${seed}`;
 }
 
-function parseNotificationChannel(channel: string): NotificationChannel {
-    if (channel === "apnsVoip" || channel === "expo" || channel === "fcmCall") {
-        return channel;
-    }
-    return "expo";
+function parseAccountEntitlementSource(
+    source: string,
+): AccountEntitlementSource {
+    const parsed = AccountEntitlementSourceSchema.safeParse(source);
+    return parsed.success ? parsed.data : "default";
+}
+
+function parseAccountTier(tier: string): AccountTier {
+    const parsed = AccountTierSchema.safeParse(tier);
+    return parsed.success ? parsed.data : "free";
+}
+
+function toBillingSubscription(row: {
+    environment: string;
+    expiresAt: null | string;
+    platform: string;
+    productID: string;
+    status: string;
+    storeProductID: string;
+    subscriptionID: string;
+    tier: string;
+    updatedAt: string;
+}): BillingSubscription {
+    return {
+        environment: billingEnvironmentFromRow(row.environment),
+        expiresAt: row.expiresAt,
+        platform: billingPlatformFromRow(row.platform),
+        productID: row.productID,
+        status: billingSubscriptionStatusFromRow(row.status),
+        storeProductID: row.storeProductID,
+        subscriptionID: row.subscriptionID,
+        tier: parseAccountTier(row.tier),
+        updatedAt: row.updatedAt,
+    };
 }
 
 function toDevice(row: {
@@ -1685,7 +2098,7 @@ function toNotificationSubscription(row: {
 }): NotificationSubscription {
     return {
         ...row,
-        channel: parseNotificationChannel(row.channel),
+        channel: "expo",
         enabled: Boolean(row.enabled),
         events: decodeNotificationEvents(row.events),
     };