@vonpay/checkout-cli 0.16.0 → 0.17.0

package/README.md

@@ -53,7 +53,7 @@ All commands are namespaced under `vonpay checkout`:
 | `vonpay checkout refunds list` | List one payment's refunds and its refund totals (`--payment-intent` or `--transaction`) |
 | `vonpay checkout tokens create` | Create a payment-method token for saved-card / MIT flows |
 | `vonpay checkout capabilities` | Show what this merchant's binder supports |
-| `vonpay checkout trigger <event>` | Trigger a synthetic webhook event against your local endpoint (`session.succeeded`, `session.failed`, `payment_intent.*`, `charge.refunded`) |
+| `vonpay checkout trigger <event>` | Trigger a synthetic webhook event against your local endpoint (`charge.*`, `refund.failed`, `payment_intent.*`, `mirror.order.created`, `subscription.*`, `merchant.card_testing_suspected`, `session.*`; `vonpay checkout trigger --help` lists them all) |
 | `vonpay checkout listen` | Stream live webhook delivery attempts; optionally re-forward each to a local URL with `--forward-to` |
 | `vonpay checkout health` | Check API health and latency |
 | `vonpay checkout doctor` | Diagnose runtime + env + live API probe |

package/dist/index.js

@@ -474,6 +474,25 @@ var FIELD_PRINTERS = {
   orderCurrency: (e) => e.orderCurrency ? `Store order currency: ${safeInline(String(e.orderCurrency))}` : null,
   orderStatus: (e) => e.orderStatus ? `Store order status: ${safeInline(String(e.orderStatus))}` : null,
   orderPaymentStatus: (e) => e.orderPaymentStatus ? `Store order payment status: ${safeInline(String(e.orderPaymentStatus))}` : null,
+  // A refused subscription change (built ahead of the API's production release). Validated by
+  // the SDK, printed through safeInline all the same.
+  subscriptionStatus: (e) => e.subscriptionStatus ? `Subscription status: ${safeInline(String(e.subscriptionStatus))}` : null,
+  refusalReason: (e) => e.refusalReason ? `Refused because: ${safeInline(String(e.refusalReason))}` : null,
+  minDate: (e) => e.minDate ? `Earliest date allowed: ${safeInline(String(e.minDate))}` : null,
+  maxDate: (e) => e.maxDate ? `Latest date allowed: ${safeInline(String(e.maxDate))}` : null,
+  currentAmount: (e) => typeof e.currentAmount === "number" ? `Current highest renewal charge: ${safeInline(String(e.currentAmount))} (minor units)` : null,
+  maxAmount: (e) => typeof e.maxAmount === "number" ? `Most this key may make a renewal charge: ${safeInline(String(e.maxAmount))} (minor units)` : e.maxAmount === null ? "Most this key may make a renewal charge: none \u2014 this key may only lower the price" : null,
+  amountCurrency: (e) => e.amountCurrency ? `Renewal charge currency: ${safeInline(String(e.amountCurrency))}` : null,
+  pendingKind: (e) => e.pendingKind ? `Schedule change waiting for its customer notice: ${safeInline(String(e.pendingKind))}` : null,
+  // A charge the payment provider refused before any money moved (built ahead
+  // of the API's production release): the failed payment intent that records
+  // the attempt. The SDK has checked it is a vpi_* id; printed through
+  // safeInline all the same. The next step depends on the code: a card the
+  // processor is still storing (payment_method_unvaulted) is retried as is
+  // after a short wait; every other refusal needs the request or card fixed.
+  // Both under a NEW key: the refused record does not hold the key, and the
+  // processor may refuse a resend under the same one.
+  paymentIntentId: (e) => e.paymentIntentId ? `Refused attempt recorded as: ${safeInline(String(e.paymentIntentId))} (status failed, nothing was charged; ` + (e.code === "payment_method_unvaulted" ? "wait a few seconds, then send the same charge again with a NEW --idempotency-key)" : "fix the request or the card, then charge with a NEW --idempotency-key)") : null,
   // On a withheld retry the SDK sets this to RETRY_WITHHELD_HELP.llmHint — the
   // one wording for every surface — so it is printed as is.
   llmHint: (e) => e.llmHint ? `Hint: ${str(e.llmHint)}` : null,
@@ -1680,6 +1699,15 @@ var SUPPORTED_EVENTS = [
   "payment_intent.failed",
   "payment_intent.cancelled",
   "mirror.order.created",
+  // Opt-in events (an endpoint gets them only when it lists each by name).
+  // Payloads follow checkout's own "Send test event" samples, which are built
+  // by the same code as the real events.
+  "subscription.created",
+  "subscription.renewed",
+  "subscription.payment_failed",
+  "subscription.cancelled",
+  "subscription.updated",
+  "merchant.card_testing_suspected",
   "session.succeeded",
   "session.failed"
 ];
@@ -1701,6 +1729,57 @@ function warnIfUnsubscribable(event, write = (m) => console.warn(m)) {
   return true;
 }
 var PROCESSOR_CONNECTION = null;
+function subscriptionEventData(event, paymentIntentId, amount, currency) {
+  const now = Math.floor(Date.now() / 1e3);
+  const inAMonth = now + 30 * 24 * 60 * 60;
+  const base = {
+    subscription_id: `vsub_test_${randomUUID2().replace(/-/g, "").slice(0, 16)}`,
+    status: "active",
+    billing_cycle: null,
+    next_bill_at: inAMonth,
+    amount: null,
+    renewal_amount: amount,
+    currency,
+    payment_intent_id: null,
+    action: null,
+    decline_message: null,
+    decline_code: null,
+    cancel_reason: null,
+    changed_fields: null,
+    // Who made the change (served since checkout's production release of 2026-10-30): an API key
+    // with no id or label on these samples. Set on every event.
+    actor: { type: "api_key", api_key_id: null, label: null },
+    // A cancel scheduled for the end of the paid period, and the discount on future
+    // renewals (served since 2026-10-30): none on these samples.
+    cancel_at_period_end: false,
+    discount: null,
+    // The merchant's own sign-up metadata; `{}` when none was sent.
+    metadata: {}
+  };
+  switch (event) {
+    case "subscription.created":
+      return { ...base, billing_cycle: 1, amount, payment_intent_id: paymentIntentId };
+    case "subscription.renewed":
+      return { ...base, billing_cycle: 2, amount, payment_intent_id: paymentIntentId };
+    case "subscription.payment_failed":
+      return {
+        ...base,
+        status: "past_due",
+        billing_cycle: 2,
+        next_bill_at: now + 3 * 24 * 60 * 60,
+        amount,
+        payment_intent_id: paymentIntentId,
+        // The same three values `charge.failed` carries for this code.
+        action: "soft",
+        decline_message: "The card was declined for insufficient funds.",
+        decline_code: "insufficient_funds"
+      };
+    case "subscription.cancelled":
+      return { ...base, status: "cancelled", next_bill_at: null, cancel_reason: "too_expensive" };
+    case "subscription.updated":
+      return { ...base, renewal_amount: Math.max(1, Math.floor(amount * 0.9)), changed_fields: ["renewal_amount"] };
+  }
+}
 function buildEventData(event, ids, amount, currency) {
   const base = {
     session_id: ids.sessionId,
@@ -1709,13 +1788,14 @@ function buildEventData(event, ids, amount, currency) {
     amount,
     currency
   };
+  const notARenewal = { subscription_id: null, billing_cycle: null };
   switch (event) {
     case "session.succeeded":
       return base;
     case "payment_intent.succeeded":
-      return { ...base, processor_connection: PROCESSOR_CONNECTION };
+      return { ...base, processor_connection: PROCESSOR_CONNECTION, ...notARenewal };
     case "charge.succeeded":
-      return { ...base, vp_tx_id: ids.transactionId, card: null, processor_connection: PROCESSOR_CONNECTION };
+      return { ...base, vp_tx_id: ids.transactionId, card: null, processor_connection: PROCESSOR_CONNECTION, ...notARenewal };
     case "session.failed":
     case "payment_intent.failed":
       return {
@@ -1727,8 +1807,8 @@ function buildEventData(event, ids, amount, currency) {
         // could be read (as on this ordinary decline) — never permission to retry.
         network_advice: null,
         network_advice_retry_after_ms: null,
-        // payment_intent.failed only: session.failed does not send it.
-        ...event === "payment_intent.failed" ? { processor_connection: PROCESSOR_CONNECTION } : {}
+        // payment_intent.failed only: session.failed sends neither.
+        ...event === "payment_intent.failed" ? { processor_connection: PROCESSOR_CONNECTION, ...notARenewal } : {}
       };
     case "charge.failed":
       return {
@@ -1744,7 +1824,8 @@ function buildEventData(event, ids, amount, currency) {
         // Same two fields and values as payment_intent.failed / session.failed.
         network_advice: null,
         network_advice_retry_after_ms: null,
-        processor_connection: PROCESSOR_CONNECTION
+        processor_connection: PROCESSOR_CONNECTION,
+        ...notARenewal
       };
     case "mirror.order.created":
       return {
@@ -1753,7 +1834,28 @@ function buildEventData(event, ids, amount, currency) {
         order_status_url: null
       };
     case "payment_intent.cancelled":
-      return { ...base, cancellation_reason: "buyer_abandoned", processor_connection: PROCESSOR_CONNECTION };
+      return { ...base, cancellation_reason: "buyer_abandoned", processor_connection: PROCESSOR_CONNECTION, ...notARenewal };
+    case "subscription.created":
+    case "subscription.renewed":
+    case "subscription.payment_failed":
+    case "subscription.cancelled":
+    case "subscription.updated":
+      return subscriptionEventData(event, ids.paymentIntentId, amount, currency);
+    case "merchant.card_testing_suspected": {
+      const now = Math.floor(Date.now() / 1e3);
+      return {
+        patterns: ["expiry_enumeration", "refusal_burst"],
+        window_start: now - 60 * 60,
+        window_end: now,
+        attempts: 30,
+        refused: 24,
+        accepted: 3,
+        distinct_cards: 12,
+        card: { brand: "visa", last4: "4242" },
+        expiry_variants: 9,
+        blocked: false
+      };
+    }
     case "charge.refunded":
       return {
         ...base,
@@ -1768,7 +1870,8 @@ function buildEventData(event, ids, amount, currency) {
         is_partial: false,
         original_charge_amount: amount,
         card: null,
-        processor_connection: PROCESSOR_CONNECTION
+        processor_connection: PROCESSOR_CONNECTION,
+        ...notARenewal
       };
     case "refund.failed":
       return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vonpay/checkout-cli",
-  "version": "0.16.0",
+  "version": "0.17.0",
   "description": "Von Payments CLI — developer tools for checkout integration",
   "repository": {
     "type": "git",
@@ -20,7 +20,7 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@vonpay/checkout-node": "^4.3.0",
+    "@vonpay/checkout-node": "^4.4.0",
     "commander": "^13.0.0",
     "chalk": "^5.4.0",
     "ora": "^8.2.0"