@voltro/plugin-billing 0.85.0 → 0.87.0

package/dist/provision.js

@@ -0,0 +1,153 @@
+import { diffMeter as e, diffPortal as t, diffPrice as n, diffProduct as r, diffTaxSettings as i, diffWebhook as a, sellingReadiness as o } from "./catalog.js";
+import { redactStripeKeys as s, stripeRest as c } from "./stripeRest.js";
+import { execFileSync as l } from "node:child_process";
+import { chmodSync as u, existsSync as d, readFileSync as f, realpathSync as p, writeFileSync as m } from "node:fs";
+import { dirname as h, resolve as g } from "node:path";
+//#region src/provision.ts
+var _ = (e) => e.filter((e) => e.applied !== !0 && (e.kind === "create" || e.kind === "update" || e.kind === "adopt" || e.kind === "drift")), v = async (s, c, l) => {
+	let u = c.environments[l.env], d = await s.get("/v1/tax/settings"), f = l.env === "live";
+	if (d.livemode !== f) throw Error(`the key reaches a ${d.livemode ? "LIVE" : "test"} account, not ${l.env}`);
+	let p = [], m = {}, h = async (e, t) => {
+		let n = "apply" in e ? e.apply : void 0;
+		if (l.apply && n !== void 0) {
+			let r = await s.post(n.path, n.params);
+			t?.(r), p.push({
+				...e,
+				applied: !0
+			});
+		} else p.push(e);
+	}, g = await s.list("/v1/billing/meters"), _ = /* @__PURE__ */ new Map();
+	for (let t of c.meters) {
+		let n = e(t, g);
+		_.set(t.eventName, n.id), await h(n.finding, (e) => {
+			_.set(t.eventName, e.id);
+		});
+	}
+	let v = await s.list("/v1/products"), y = [];
+	for (let e of c.products) {
+		let t = r(e, v), n = {
+			inPortal: e.inPortal,
+			productId: t.id,
+			priceId: null
+		};
+		await h(t.finding, (e) => {
+			n.productId = e.id;
+		}), y.push(n);
+	}
+	for (let [e, t] of c.products.entries()) {
+		let r = y[e], i = t.price.meter;
+		if (t.price.usageType === "metered" && (i === void 0 || !_.has(i))) {
+			p.push({
+				kind: "manual",
+				object: `price ${t.price.lookupKey}`,
+				detail: `metered, but names no catalog meter (${i ?? "none"})`
+			});
+			continue;
+		}
+		let a = i === void 0 ? null : _.get(i) ?? null, o = r.productId ?? (l.apply ? null : `pending:${t.key}`), c = a ?? (l.apply || t.price.usageType !== "metered" ? a : `pending:${i}`), u = (await s.list("/v1/prices", { lookup_keys: [t.price.lookupKey] }))[0] ?? null, d = r.productId === null ? [] : await s.list("/v1/prices", { product: r.productId }), f = n(t.price, o, c, u, d, l.allowPriceChange);
+		r.priceId = f.id, await h(f.finding, (e) => {
+			r.priceId = e.id;
+		}), r.priceId !== null && (m[t.price.envName] = r.priceId);
+	}
+	await h(i(c.tax, d));
+	let b = y.filter((e) => e.inPortal), x = b.every((e) => e.productId !== null && e.priceId !== null) ? b.map((e) => ({
+		productId: e.productId,
+		priceId: e.priceId
+	})) : null, S = await s.list("/v1/billing_portal/configurations", { expand: ["data.features.subscription_update.products"] });
+	for (let e of t(c.portal, u, x, S)) await h(e);
+	let C = a(u, await s.list("/v1/webhook_endpoints"));
+	C.kind === "create" && l.apply && l.envOut === null ? p.push({
+		kind: "manual",
+		object: C.object,
+		detail: "not created: pass --env-out so its signing secret is captured (Stripe shows it once)"
+	}) : await h(C, (e) => {
+		typeof e.secret == "string" && (m.STRIPE_WEBHOOK_SECRET = e.secret);
+	});
+	let w = await s.get("/v1/account").catch(() => null), T = await s.list("/v1/tax_ids", { owner: { type: "account" } }).catch(() => null), E = await s.list("/v1/tax/registrations", { status: "active" }).catch(() => []);
+	return p.push(...o({
+		catalog: c,
+		env: u,
+		chargesEnabled: w === null ? null : w.charges_enabled === !0,
+		accountTaxIds: T === null ? null : T.length,
+		activeRegistrations: E.map((e) => e.country)
+	})), {
+		livemode: d.livemode,
+		findings: p,
+		envOut: m
+	};
+}, y = (e, t) => {
+	let n = new Set(Object.keys(t)), r = e.split("\n").filter((e) => !n.has(e.split("=")[0] ?? ""));
+	for (; r.length > 0 && r[r.length - 1] === "";) r.pop();
+	return [
+		...r,
+		...Object.entries(t).map(([e, t]) => `${e}=${t}`),
+		""
+	].join("\n");
+}, b = (e, t) => {
+	try {
+		return l("git", [...e], {
+			cwd: t,
+			stdio: "ignore"
+		}), !0;
+	} catch {
+		return !1;
+	}
+}, x = (e, t = b, n = (e) => d(e) ? p(e) : e) => {
+	for (let r of /* @__PURE__ */ new Set([g(e), g(n(g(e)))])) {
+		let n = h(r);
+		if (t(["rev-parse", "--is-inside-work-tree"], n) && !t([
+			"check-ignore",
+			"-q",
+			r
+		], n)) return `${e} is inside a git work tree and not ignored — write it to a gitignored file or outside the repo`;
+	}
+	return null;
+}, S = (e) => {
+	let t = (t) => {
+		let n = e.indexOf(t);
+		return n < 0 ? null : e[n + 1];
+	}, n = t("--env");
+	if (n !== "sandbox" && n !== "live") return "--env sandbox|live is required";
+	let r = t("--env-out");
+	if (r === void 0 || r?.startsWith("--")) return "--env-out needs a file path";
+	let i = {
+		env: n,
+		apply: e.includes("--apply"),
+		allowPriceChange: e.includes("--allow-price-change"),
+		confirmLive: e.includes("--confirm-live"),
+		strict: e.includes("--strict"),
+		envOut: r
+	};
+	return i.env === "live" && i.apply && !i.confirmLive ? "writing to LIVE needs --confirm-live (run without --apply first to see the plan)" : i;
+}, C = (e, t, n) => {
+	let r = t.STRIPE_PROVISION_KEY?.trim() || (e === "sandbox" ? n?.trim() : void 0);
+	return r === void 0 || r.length === 0 ? { refusal: "set STRIPE_PROVISION_KEY (a sandbox run also reads STRIPE_SECRET_KEY from the dotenv file)" } : e === "live" && !/^(sk|rk)_live_/.test(r) ? { refusal: "--env live needs a live key (sk_live_/rk_live_)" } : e === "sandbox" && !/^(sk|rk)_test_/.test(r) ? { refusal: "--env sandbox needs a test key (sk_test_/rk_test_)" } : { key: r };
+}, w = (e, t) => d(e) ? f(e, "utf8").split("\n").find((e) => e.startsWith(`${t}=`))?.slice(t.length + 1).trim() : void 0, T = async (e, t, n = {}) => {
+	let r = n.vars ?? process.env, i = (e) => (console.error(`stripe provision: ${e}`), 2), a = S(t);
+	if (typeof a == "string") return i(a);
+	if (a.envOut !== null) {
+		let e = x(a.envOut);
+		if (e !== null) return i(e);
+	}
+	let o = C(a.env, r, n.dotenv === void 0 ? void 0 : w(n.dotenv, "STRIPE_SECRET_KEY"));
+	if ("refusal" in o) return i(o.refusal);
+	let l;
+	try {
+		l = await v((n.rest ?? c)(o.key), e, a);
+	} catch (e) {
+		return console.error(`stripe provision: ${s(e instanceof Error ? e.message : String(e))}`), 1;
+	}
+	console.log(`Stripe ${a.env} (${l.livemode ? "LIVE" : "test mode"}) — ${a.apply ? "apply" : "check"}`);
+	for (let e of l.findings) {
+		let t = e.applied === !0 ? `${e.kind} ✓` : e.kind;
+		console.log(`  ${t.padEnd(10)} ${e.object}${"detail" in e ? ` — ${e.detail}` : ""}`);
+	}
+	if (a.envOut !== null) {
+		let e = a.envOut;
+		m(e, y(d(e) ? f(e, "utf8") : "", l.envOut), { mode: 384 }), u(e, 384), console.log(`  wrote ${Object.keys(l.envOut).sort().join(", ")} to ${e}`);
+	}
+	let p = _(l.findings), h = l.findings.filter((e) => e.kind === "manual");
+	return console.log(`  ${p.length} open, ${h.length} manual`), p.length > 0 || a.strict && h.length > 0 ? 1 : 0;
+};
+//#endregion
+export { x as envOutRefusal, y as mergeEnvFile, _ as openFindings, S as parseProvisionArgs, v as provisionStripeCatalog, C as resolveProvisionKey, T as runStripeProvision };