affitor 0.3.1 → 0.4.0

package/dist/lib/inject.d.ts

@@ -24,4 +24,48 @@ export declare function injectAppLayout(content: string, importSpecifier: string
  * every page, and add the import.
  */
 export declare function injectPagesApp(content: string, importSpecifier: string): InjectResult;
+export interface InjectStripeOpts {
+    /**
+     * The provider sale snippet from `@affitor/recipes` (e.g.
+     * `getRecipe(framework, 'stripe', 's2s').sale!.snippet`). The SDK import line
+     * (`import { Affitor } from '@affitor/sdk/server';`) is stripped before
+     * insertion — the inserted body is just the `affitor.trackSale({...})` call,
+     * indented to match the matched session binding.
+     */
+    saleSnippet: string;
+    /**
+     * Module specifier for the `affitor` client import — e.g. `'../lib/affitor'`
+     * or `'@/lib/affitor'`. When provided and status is 'injected', the transform
+     * also adds `import { affitor } from '<importSpecifier>';` at the top of the
+     * file (idempotent: skipped if that line is already present). Included in
+     * `added[]` so the diff preview shows it.
+     */
+    importSpecifier?: string;
+    /**
+     * Optional indent override (spaces). When omitted, the indent of the matched
+     * session-binding line is reused so the inserted call lines up with its block.
+     */
+    indent?: string;
+}
+/**
+ * Insert `affitor.trackSale(...)` into a Stripe webhook handler, right after the
+ * verified `checkout.session.completed` session object is bound.
+ *
+ * CONSERVATIVE BY DESIGN — only injects when ALL of these hold (else returns
+ * `unrecognized` so the caller prints the patch instead of editing payment code):
+ *   1. The file contains `stripe.webhooks.constructEvent` (it really is a
+ *      verified Stripe webhook — we never edit an unverified handler).
+ *   2. There is a single `checkout.session.completed` reference to anchor on
+ *      (the recipe's stripe snippet reads `session.*`, so the sale belongs in
+ *      that case). Zero or multiple matches → unrecognized (ambiguous).
+ *   3. After that anchor, exactly one line binds the event object to a name we
+ *      can reuse — `const session = event.data.object …` (or `= session …`).
+ *      The trackSale call is inserted on the line after that binding, at the
+ *      binding's own indentation. No binding, or an unexpected variable name →
+ *      unrecognized.
+ *
+ * Returns `already` when a `affitor.trackSale(` / `@affitor/sdk/server` marker is
+ * already present (idempotent re-runs do nothing).
+ */
+export declare function injectStripeTrackSale(content: string, opts: InjectStripeOpts): InjectResult;
 //# sourceMappingURL=inject.d.ts.map

package/dist/lib/inject.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"inject.d.ts","sourceRoot":"","sources":["../../src/lib/inject.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,SAAS,GAAG,cAAc,CAAC;AAEnE,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,YAAY,CAAC;IACrB,8EAA8E;IAC9E,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,gFAAgF;AAChF,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,kBAAkB,EAAE,OAAO,GAAG,MAAM,CAiBtG;AAmBD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,YAAY,CAetF;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,YAAY,CAerF"}
+{"version":3,"file":"inject.d.ts","sourceRoot":"","sources":["../../src/lib/inject.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,MAAM,MAAM,YAAY,GAAG,UAAU,GAAG,SAAS,GAAG,cAAc,CAAC;AAEnE,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,YAAY,CAAC;IACrB,8EAA8E;IAC9E,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,gFAAgF;AAChF,wBAAgB,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,kBAAkB,EAAE,OAAO,GAAG,MAAM,CAiBtG;AA6BD;;;GAGG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,YAAY,CAetF;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,GAAG,YAAY,CAerF;AAiBD,MAAM,WAAW,gBAAgB;IAC/B;;;;;;OAMG;IACH,WAAW,EAAE,MAAM,CAAC;IACpB;;;;;;OAMG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAsBD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,GAAG,YAAY,CA+D3F"}

package/dist/lib/inject.js

@@ -28,11 +28,20 @@ export function ${TRACKER_MARKER}() {
 function importLineFor(importSpecifier) {
     return `import { ${TRACKER_MARKER} } from '${importSpecifier}';`;
 }
-/** Add an import after the last existing top-level import (or at the very top). */
+/**
+ * Add an import after the last existing top-level import (or at the very top).
+ *
+ * Matches COMPLETE import statements — including multi-line destructured imports
+ * (`import {\n  a,\n  b\n} from 'x';`) — so the new line lands AFTER the last
+ * import, never spliced inside a destructure. An `import` starting at column 0
+ * runs to its terminating `from '...'` / `from "..."` clause (or, for a
+ * side-effect import, the bare `import '...'`), spanning newlines as needed.
+ */
 function addImport(content, importLine) {
     if (content.includes(importLine))
         return content;
-    const importRe = /^import .*$/gm;
+    // ^import … from '…'|"…"  (multi-line tolerant), OR a side-effect import '…'.
+    const importRe = /^import\b[\s\S]*?from\s+(['"])[^'"]*\1\s*;?|^import\s+(['"])[^'"]*\2\s*;?/gm;
     let lastEnd = -1;
     let m;
     while ((m = importRe.exec(content)) !== null) {
@@ -78,4 +87,107 @@ export function injectPagesApp(content, importSpecifier) {
     const injected = withImport.replace(compRe, replacement);
     return { content: injected, status: "injected", added: [importLine, `<${TRACKER_MARKER} />`] };
 }
+// ── Server-side: inject `affitor.trackSale(...)` into a Stripe webhook ──
+//
+// This edits PAYMENT code, so it is deliberately conservative: it only injects
+// when it can recognize a clean `checkout.session.completed` shape with a single
+// obvious session binding. Anything ambiguous → `unrecognized`, and the caller
+// PRINTS the exact patch instead of forcing an edit. The transform is pure (no
+// fs) and idempotent (a trackSale / @affitor/sdk/server marker → `already`).
+/** Markers that mean a trackSale call (or the server import) is already wired. */
+const TRACK_SALE_MARKER = "affitor.trackSale(";
+const SERVER_IMPORT_MARKER = "@affitor/sdk/server";
+/** The canonical Stripe webhook-verification call (Node SDK) we anchor on. */
+const CONSTRUCT_EVENT_NEEDLE = "stripe.webhooks.constructEvent";
+/** Drop the recipe's leading `@affitor/sdk/server` import + its blank line. */
+function saleCallBody(snippet) {
+    return snippet
+        .replace(/^import \{ Affitor \} from '@affitor\/sdk\/server';\n+/, "")
+        .trimEnd();
+}
+/** Re-indent a multi-line snippet body to a given base indent. */
+function indentBody(body, indent) {
+    return body
+        .split("\n")
+        .map((line) => (line.length ? indent + line : line))
+        .join("\n");
+}
+/** The import line for the affitor client given a module specifier. */
+function affitorImportLine(importSpecifier) {
+    return `import { affitor } from '${importSpecifier}';`;
+}
+/**
+ * Insert `affitor.trackSale(...)` into a Stripe webhook handler, right after the
+ * verified `checkout.session.completed` session object is bound.
+ *
+ * CONSERVATIVE BY DESIGN — only injects when ALL of these hold (else returns
+ * `unrecognized` so the caller prints the patch instead of editing payment code):
+ *   1. The file contains `stripe.webhooks.constructEvent` (it really is a
+ *      verified Stripe webhook — we never edit an unverified handler).
+ *   2. There is a single `checkout.session.completed` reference to anchor on
+ *      (the recipe's stripe snippet reads `session.*`, so the sale belongs in
+ *      that case). Zero or multiple matches → unrecognized (ambiguous).
+ *   3. After that anchor, exactly one line binds the event object to a name we
+ *      can reuse — `const session = event.data.object …` (or `= session …`).
+ *      The trackSale call is inserted on the line after that binding, at the
+ *      binding's own indentation. No binding, or an unexpected variable name →
+ *      unrecognized.
+ *
+ * Returns `already` when a `affitor.trackSale(` / `@affitor/sdk/server` marker is
+ * already present (idempotent re-runs do nothing).
+ */
+export function injectStripeTrackSale(content, opts) {
+    // Idempotent: never double-inject.
+    // Check for trackSale marker, server import marker, OR the affitor client import
+    // (the specifier we would add) — any of these mean the file is already wired.
+    const clientImportLine = opts.importSpecifier ? affitorImportLine(opts.importSpecifier) : null;
+    if (content.includes(TRACK_SALE_MARKER) ||
+        content.includes(SERVER_IMPORT_MARKER) ||
+        (clientImportLine && content.includes(clientImportLine))) {
+        return { content, status: "already", added: [] };
+    }
+    // (1) Must be a verified Stripe webhook — anchor on constructEvent.
+    if (!content.includes(CONSTRUCT_EVENT_NEEDLE)) {
+        return { content, status: "unrecognized", added: [] };
+    }
+    // (2) Exactly one checkout.session.completed reference (the sale anchor).
+    // Zero (some other event) or many (ambiguous which case) → bail.
+    const completedRe = /checkout\.session\.completed/g;
+    const completedMatches = content.match(completedRe);
+    if (!completedMatches || completedMatches.length !== 1) {
+        return { content, status: "unrecognized", added: [] };
+    }
+    const anchorIdx = content.indexOf("checkout.session.completed");
+    // (3) After the anchor, find a single clean session binding to insert after.
+    // Accept `const session = event.data.object …` or `const session = session …`
+    // (cast variants). The variable MUST be named `session` — the recipe's stripe
+    // snippet reads `session.client_reference_id` / `session.amount_total` /
+    // `session.id`, so any other name would not compile.
+    const after = content.slice(anchorIdx);
+    const bindingRe = /^([ \t]*)const session\s*=\s*(?:event\.data\.object|session)\b[^\n]*$/m;
+    const bindingMatch = after.match(bindingRe);
+    if (!bindingMatch || bindingMatch.index === undefined) {
+        return { content, status: "unrecognized", added: [] };
+    }
+    // Absolute offset of the end of the binding line (insertion point).
+    const bindingLineStart = anchorIdx + bindingMatch.index;
+    const bindingLineEnd = bindingLineStart + bindingMatch[0].length;
+    const indent = opts.indent ?? bindingMatch[1] ?? "      ";
+    const body = saleCallBody(opts.saleSnippet);
+    if (!body.includes(TRACK_SALE_MARKER)) {
+        // The provided snippet isn't a trackSale call — refuse rather than guess.
+        return { content, status: "unrecognized", added: [] };
+    }
+    const block = indentBody(body, indent);
+    const insertion = `\n${indent}// Affitor: report the sale (auto-added by \`affitor onboard\`)\n${block}`;
+    const withSale = content.slice(0, bindingLineEnd) + insertion + content.slice(bindingLineEnd);
+    // Also add the affitor client import when a specifier was provided.
+    let finalContent = withSale;
+    const added = insertion.split("\n").filter((l) => l.trim().length > 0);
+    if (clientImportLine) {
+        finalContent = addImport(withSale, clientImportLine);
+        added.unshift(clientImportLine);
+    }
+    return { content: finalContent, status: "injected", added };
+}
 //# sourceMappingURL=inject.js.map

package/dist/lib/inject.js.map

@@ -1 +1 @@
-{"version":3,"file":"inject.js","sourceRoot":"","sources":["../../src/lib/inject.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAWxC,gFAAgF;AAChF,MAAM,UAAU,sBAAsB,CAAC,SAA0B,EAAE,kBAA2B;IAC5F,MAAM,SAAS,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,OAAO,GAAG,MAAM;;;;;;;kBAOA,cAAc;;wBAER,SAAS;;;;CAIhC,CAAC;AACF,CAAC;AAED,SAAS,aAAa,CAAC,eAAuB;IAC5C,OAAO,YAAY,cAAc,YAAY,eAAe,IAAI,CAAC;AACnE,CAAC;AAED,mFAAmF;AACnF,SAAS,SAAS,CAAC,OAAe,EAAE,UAAkB;IACpD,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,OAAO,CAAC;IACjD,MAAM,QAAQ,GAAG,eAAe,CAAC;IACjC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;IACjB,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7C,OAAO,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,CAAC;QAAE,OAAO,GAAG,UAAU,KAAK,OAAO,EAAE,CAAC;IACvD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,KAAK,UAAU,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAChF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,eAAuB;IACtE,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAEvF,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAErE,MAAM,UAAU,GAAG,aAAa,CAAC,eAAe,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAElD,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;IACjD,MAAM,QAAQ,GAAG,YAAY,cAAc,KAAK,CAAC;IACjD,MAAM,QAAQ,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;IAEpF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;AACzF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,eAAuB;IACrE,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAEvF,MAAM,MAAM,GAAG,wCAAwC,CAAC;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAElE,MAAM,UAAU,GAAG,aAAa,CAAC,eAAe,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAElD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,WAAW,GAAG,cAAc,cAAc,cAAc,SAAS,WAAW,CAAC;IACnF,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAEzD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;AACjG,CAAC"}
+{"version":3,"file":"inject.js","sourceRoot":"","sources":["../../src/lib/inject.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,cAAc,GAAG,gBAAgB,CAAC;AAWxC,gFAAgF;AAChF,MAAM,UAAU,sBAAsB,CAAC,SAA0B,EAAE,kBAA2B;IAC5F,MAAM,SAAS,GAAG,OAAO,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IAC7F,MAAM,MAAM,GAAG,kBAAkB,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7D,OAAO,GAAG,MAAM;;;;;;;kBAOA,cAAc;;wBAER,SAAS;;;;CAIhC,CAAC;AACF,CAAC;AAED,SAAS,aAAa,CAAC,eAAuB;IAC5C,OAAO,YAAY,cAAc,YAAY,eAAe,IAAI,CAAC;AACnE,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,SAAS,CAAC,OAAe,EAAE,UAAkB;IACpD,IAAI,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC;QAAE,OAAO,OAAO,CAAC;IACjD,8EAA8E;IAC9E,MAAM,QAAQ,GACZ,6EAA6E,CAAC;IAChF,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC;IACjB,IAAI,CAAyB,CAAC;IAC9B,OAAO,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC7C,OAAO,GAAG,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,CAAC;QAAE,OAAO,GAAG,UAAU,KAAK,OAAO,EAAE,CAAC;IACvD,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,GAAG,KAAK,UAAU,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AAChF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,eAAuB;IACtE,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAEvF,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC9C,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAErE,MAAM,UAAU,GAAG,aAAa,CAAC,eAAe,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAElD,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;IACjD,MAAM,QAAQ,GAAG,YAAY,cAAc,KAAK,CAAC;IACjD,MAAM,QAAQ,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;IAEpF,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;AACzF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAe,EAAE,eAAuB;IACrE,IAAI,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAEvF,MAAM,MAAM,GAAG,wCAAwC,CAAC;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IAElE,MAAM,UAAU,GAAG,aAAa,CAAC,eAAe,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAElD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,WAAW,GAAG,cAAc,cAAc,cAAc,SAAS,WAAW,CAAC;IACnF,MAAM,QAAQ,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAEzD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,UAAU,EAAE,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;AACjG,CAAC;AAED,2EAA2E;AAC3E,EAAE;AACF,+EAA+E;AAC/E,iFAAiF;AACjF,+EAA+E;AAC/E,+EAA+E;AAC/E,6EAA6E;AAE7E,kFAAkF;AAClF,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AAC/C,MAAM,oBAAoB,GAAG,qBAAqB,CAAC;AAEnD,8EAA8E;AAC9E,MAAM,sBAAsB,GAAG,gCAAgC,CAAC;AA0BhE,+EAA+E;AAC/E,SAAS,YAAY,CAAC,OAAe;IACnC,OAAO,OAAO;SACX,OAAO,CAAC,wDAAwD,EAAE,EAAE,CAAC;SACrE,OAAO,EAAE,CAAC;AACf,CAAC;AAED,kEAAkE;AAClE,SAAS,UAAU,CAAC,IAAY,EAAE,MAAc;IAC9C,OAAO,IAAI;SACR,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;SACnD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,uEAAuE;AACvE,SAAS,iBAAiB,CAAC,eAAuB;IAChD,OAAO,4BAA4B,eAAe,IAAI,CAAC;AACzD,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,IAAsB;IAC3E,mCAAmC;IACnC,iFAAiF;IACjF,8EAA8E;IAC9E,MAAM,gBAAgB,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/F,IACE,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAC;QACnC,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACtC,CAAC,gBAAgB,IAAI,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,EACxD,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACnD,CAAC;IAED,oEAAoE;IACpE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,sBAAsB,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACxD,CAAC;IAED,0EAA0E;IAC1E,iEAAiE;IACjE,MAAM,WAAW,GAAG,+BAA+B,CAAC;IACpD,MAAM,gBAAgB,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IACpD,IAAI,CAAC,gBAAgB,IAAI,gBAAgB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAEhE,6EAA6E;IAC7E,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,qDAAqD;IACrD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,wEAAwE,CAAC;IAC3F,MAAM,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QACtD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACxD,CAAC;IAED,oEAAoE;IACpE,MAAM,gBAAgB,GAAG,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;IACxD,MAAM,cAAc,GAAG,gBAAgB,GAAG,YAAY,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAEjE,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,YAAY,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC;IAC1D,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC;QACtC,0EAA0E;QAC1E,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACxD,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,KAAK,MAAM,oEAAoE,KAAK,EAAE,CAAC;IACzG,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,GAAG,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAE9F,oEAAoE;IACpE,IAAI,YAAY,GAAG,QAAQ,CAAC;IAC5B,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACvE,IAAI,gBAAgB,EAAE,CAAC;QACrB,YAAY,GAAG,SAAS,CAAC,QAAQ,EAAE,gBAAgB,CAAC,CAAC;QACrD,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAClC,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;AAC9D,CAAC"}

package/dist/lib/server-tracking.d.ts

@@ -3,6 +3,10 @@
  * Pure functions (detection + generated source/snippets) — easy to unit test.
  * The wizard installs @affitor/sdk + scaffolds the client file, then PRINTS the
  * trackLead/trackSale snippets — it never edits auth/payment code (per PR-4 §9.3).
+ *
+ * The per-provider `sale` snippet is SOURCED FROM `@affitor/recipes` (the canonical
+ * single source of truth read by CLI + MCP + docs). Do NOT re-inline the snippet
+ * strings here — edit them in `@affitor/recipes` so all three surfaces stay in sync.
  */
 export type PaymentProvider = "stripe" | "polar" | "lemonsqueezy" | "paddle" | "unknown";
 /** Detect the advertiser's payment provider from package.json deps. */

package/dist/lib/server-tracking.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server-tracking.d.ts","sourceRoot":"","sources":["../../src/lib/server-tracking.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AAEH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,OAAO,GAAG,cAAc,GAAG,QAAQ,GAAG,SAAS,CAAC;AASzF,uEAAuE;AACvE,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAYlE;AAED,6FAA6F;AAC7F,wBAAgB,mBAAmB,IAAI,MAAM,CAS5C;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,eAAe,EACzB,UAAU,SAAkB,GAC3B,gBAAgB,CAsElB"}
+{"version":3,"file":"server-tracking.d.ts","sourceRoot":"","sources":["../../src/lib/server-tracking.ts"],"names":[],"mappings":"AAIA;;;;;;;;;GASG;AAEH,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,OAAO,GAAG,cAAc,GAAG,QAAQ,GAAG,SAAS,CAAC;AASzF,uEAAuE;AACvE,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,MAAM,GAAG,eAAe,CAYlE;AAED,6FAA6F;AAC7F,wBAAgB,mBAAmB,IAAI,MAAM,CAS5C;AAED,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAeD;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,eAAe,EACzB,UAAU,SAAkB,GAC3B,gBAAgB,CAwClB"}

package/dist/lib/server-tracking.js

@@ -1,5 +1,6 @@
 import { readFileSync } from "node:fs";
 import { join } from "node:path";
+import { getRecipe } from "@affitor/recipes";
 const PROVIDER_DEPS = {
     stripe: ["stripe", "@stripe/stripe-js"],
     polar: ["@polar-sh/sdk", "@polar-sh/nextjs", "@polar-sh/express"],
@@ -33,6 +34,18 @@ export function affitorClientSource() {
 export const affitor = new Affitor({ apiKey: process.env.AFFITOR_API_KEY ?? '' });
 `;
 }
+/**
+ * The trackSale snippet body for a provider, sourced from the canonical
+ * `@affitor/recipes` registry. We use framework "unknown" (the snippet body is
+ * framework-independent) + mode "s2s" (so a sale snippet exists, not the
+ * Connect/metadata-only path), then strip the leading `@affitor/sdk/server`
+ * import + its blank line — the wizard prints that import via the lead snippet.
+ */
+function recipeSaleBody(provider) {
+    const recipe = getRecipe("unknown", provider, "s2s");
+    const snippet = recipe.sale?.snippet ?? "";
+    return snippet.replace(/^import \{ Affitor \} from '@affitor\/sdk\/server';\n\n/, "");
+}
 /**
  * Tailored trackLead + trackSale snippets. The sale snippet is provider-specific
  * (event name + field paths from the verified provider research). Printed, not
@@ -44,60 +57,29 @@ export function serverTrackingSnippets(provider, importPath = "@/lib/affitor") {
         `// After a user signs up — binds the affiliate click to your user id:`,
         `await affitor.trackLead({ customerExternalId: user.id, clickId: cookies.affitor_click_id });`,
     ].join("\n");
+    // The trackSale snippet body is canonical in @affitor/recipes. We pull it from
+    // there (framework "unknown" — the body is framework-independent; only the
+    // inject_target differs, which the wizard doesn't print) and strip the SDK
+    // import line the recipe prepends (the wizard already prints the import as part
+    // of the lead snippet, via `importPath`).
+    const sale = recipeSaleBody(provider);
     let saleContext;
-    let sale;
     switch (provider) {
         case "polar":
             saleContext = "in your Polar webhook handler (event 'order.paid')";
-            sale = [
-                `await affitor.trackSale({`,
-                `  customerExternalId: order.metadata.user_id ?? order.customer_id,`,
-                `  amount: order.total_amount,        // integer cents`,
-                `  invoiceId: order.id,`,
-                `  saleType: order.subscription_id ? 'subscription' : 'payment',`,
-                `});`,
-            ].join("\n");
             break;
         case "lemonsqueezy":
             saleContext = "in your Lemon Squeezy webhook handler (event 'order_created')";
-            sale = [
-                `await affitor.trackSale({`,
-                `  customerExternalId: payload.meta.custom_data?.user_id ?? data.attributes.user_email,`,
-                `  amount: data.attributes.total,     // integer cents`,
-                `  invoiceId: String(data.id),`,
-                `});`,
-            ].join("\n");
             break;
         case "paddle":
             saleContext = "in your Paddle webhook handler (event 'transaction.completed')";
-            sale = [
-                `await affitor.trackSale({`,
-                `  customerExternalId: data.custom_data?.user_id,`,
-                `  amount: Number(data.details.totals.total),   // cents`,
-                `  invoiceId: data.id,`,
-                `});`,
-            ].join("\n");
             break;
         case "stripe":
             saleContext =
                 "Stripe: prefer Connect autocapture (`affitor stripe connect`). To track manually, in your checkout.session.completed handler";
-            sale = [
-                `await affitor.trackSale({`,
-                `  customerExternalId: session.client_reference_id,`,
-                `  amount: session.amount_total,      // cents`,
-                `  invoiceId: session.id,`,
-                `});`,
-            ].join("\n");
             break;
         default:
             saleContext = "in your payment provider's webhook handler, when a payment succeeds";
-            sale = [
-                `await affitor.trackSale({`,
-                `  customerExternalId: user.id,`,
-                `  amount: amountInCents,`,
-                `  invoiceId: transactionId,`,
-                `});`,
-            ].join("\n");
     }
     const refund = [
         `// In your provider's refund webhook (e.g. order.refunded), reverse the commission`,

package/dist/lib/server-tracking.js.map

@@ -1 +1 @@
-{"version":3,"file":"server-tracking.js","sourceRoot":"","sources":["../../src/lib/server-tracking.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAWjC,MAAM,aAAa,GAA0D;IAC3E,MAAM,EAAE,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,KAAK,EAAE,CAAC,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,CAAC;IACjE,YAAY,EAAE,CAAC,+BAA+B,CAAC;IAC/C,MAAM,EAAE,CAAC,yBAAyB,EAAE,mBAAmB,CAAC;CACzD,CAAC;AAEF,uEAAuE;AACvE,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,IAAI,IAAI,GAA2B,EAAE,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACxE,IAAI,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9D,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,QAA2B,CAAC;IACrE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,mBAAmB;IACjC,OAAO;;;;;;;CAOR,CAAC;AACF,CAAC;AAUD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAyB,EACzB,UAAU,GAAG,eAAe;IAE5B,MAAM,IAAI,GAAG;QACX,4BAA4B,UAAU,IAAI;QAC1C,uEAAuE;QACvE,8FAA8F;KAC/F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,IAAI,WAAmB,CAAC;IACxB,IAAI,IAAY,CAAC;IACjB,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,OAAO;YACV,WAAW,GAAG,oDAAoD,CAAC;YACnE,IAAI,GAAG;gBACL,2BAA2B;gBAC3B,oEAAoE;gBACpE,uDAAuD;gBACvD,wBAAwB;gBACxB,iEAAiE;gBACjE,KAAK;aACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,MAAM;QACR,KAAK,cAAc;YACjB,WAAW,GAAG,+DAA+D,CAAC;YAC9E,IAAI,GAAG;gBACL,2BAA2B;gBAC3B,wFAAwF;gBACxF,uDAAuD;gBACvD,+BAA+B;gBAC/B,KAAK;aACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,MAAM;QACR,KAAK,QAAQ;YACX,WAAW,GAAG,gEAAgE,CAAC;YAC/E,IAAI,GAAG;gBACL,2BAA2B;gBAC3B,kDAAkD;gBAClD,yDAAyD;gBACzD,uBAAuB;gBACvB,KAAK;aACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,MAAM;QACR,KAAK,QAAQ;YACX,WAAW;gBACT,8HAA8H,CAAC;YACjI,IAAI,GAAG;gBACL,2BAA2B;gBAC3B,oDAAoD;gBACpD,+CAA+C;gBAC/C,0BAA0B;gBAC1B,KAAK;aACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACb,MAAM;QACR;YACE,WAAW,GAAG,qEAAqE,CAAC;YACpF,IAAI,GAAG;gBACL,2BAA2B;gBAC3B,gCAAgC;gBAChC,0BAA0B;gBAC1B,6BAA6B;gBAC7B,KAAK;aACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IAED,MAAM,MAAM,GAAG;QACb,oFAAoF;QACpF,mEAAmE;QACnE,qFAAqF;KACtF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACzD,CAAC"}
+{"version":3,"file":"server-tracking.js","sourceRoot":"","sources":["../../src/lib/server-tracking.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAmC,MAAM,kBAAkB,CAAC;AAe9E,MAAM,aAAa,GAA0D;IAC3E,MAAM,EAAE,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IACvC,KAAK,EAAE,CAAC,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,CAAC;IACjE,YAAY,EAAE,CAAC,+BAA+B,CAAC;IAC/C,MAAM,EAAE,CAAC,yBAAyB,EAAE,mBAAmB,CAAC;CACzD,CAAC;AAEF,uEAAuE;AACvE,MAAM,UAAU,qBAAqB,CAAC,GAAW;IAC/C,IAAI,IAAI,GAA2B,EAAE,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACxE,IAAI,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAC9D,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,QAA2B,CAAC;IACrE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,mBAAmB;IACjC,OAAO;;;;;;;CAOR,CAAC;AACF,CAAC;AAUD;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,QAAyB;IAC/C,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,EAAE,QAA0B,EAAE,KAAK,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,IAAI,EAAE,CAAC;IAC3C,OAAO,OAAO,CAAC,OAAO,CAAC,yDAAyD,EAAE,EAAE,CAAC,CAAC;AACxF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAyB,EACzB,UAAU,GAAG,eAAe;IAE5B,MAAM,IAAI,GAAG;QACX,4BAA4B,UAAU,IAAI;QAC1C,uEAAuE;QACvE,8FAA8F;KAC/F,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,+EAA+E;IAC/E,2EAA2E;IAC3E,2EAA2E;IAC3E,gFAAgF;IAChF,0CAA0C;IAC1C,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAEtC,IAAI,WAAmB,CAAC;IACxB,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,OAAO;YACV,WAAW,GAAG,oDAAoD,CAAC;YACnE,MAAM;QACR,KAAK,cAAc;YACjB,WAAW,GAAG,+DAA+D,CAAC;YAC9E,MAAM;QACR,KAAK,QAAQ;YACX,WAAW,GAAG,gEAAgE,CAAC;YAC/E,MAAM;QACR,KAAK,QAAQ;YACX,WAAW;gBACT,8HAA8H,CAAC;YACjI,MAAM;QACR;YACE,WAAW,GAAG,qEAAqE,CAAC;IACxF,CAAC;IAED,MAAM,MAAM,GAAG;QACb,oFAAoF;QACpF,mEAAmE;QACnE,qFAAqF;KACtF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEb,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AACzD,CAAC"}

package/dist/lib/stack-detect.d.ts

@@ -1,9 +1,14 @@
-export type Framework = "next-app" | "next-pages" | "unknown";
+export type Framework = "next-app" | "next-pages" | "fastify" | "express" | "node" | "unknown";
 export type PackageManager = "npm" | "yarn" | "pnpm";
 export interface StackInfo {
     framework: Framework;
     packageManager: PackageManager;
-    /** Absolute path to the entry file to wire (layout.tsx / _app.tsx), or null. */
+    /**
+     * Absolute path to the entry file to wire (layout.tsx / _app.tsx), or null.
+     * For server frameworks (fastify/express/node) this is the detected server
+     * entry if findable (best-effort), else null — the wizard only auto-wires the
+     * Next entry files, so a null here routes the new stacks to printed snippets.
+     */
     entryFile: string | null;
     /** Directory to create the tracker component in, or null. */
     componentDir: string | null;
@@ -11,8 +16,11 @@ export interface StackInfo {
 export declare function detectPackageManager(cwd: string): PackageManager;
 /**
  * Detect the framework + package manager + entry file of the project at `cwd`.
- * Next.js only for now (App Router preferred, then Pages Router); everything
- * else is `unknown` so the wizard falls back to printed instructions.
+ * Order is most-specific first: next-app → next-pages → fastify → express →
+ * node (a package.json + a server signal but no framework) → unknown. Next.js
+ * is the only stack the wizard auto-wires; server frameworks expose a
+ * best-effort `entryFile` but `componentDir: null` keeps them on the printed
+ * snippet path (auto-injection is a later task).
  */
 export declare function detectStack(cwd: string): StackInfo;
 //# sourceMappingURL=stack-detect.d.ts.map

package/dist/lib/stack-detect.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stack-detect.d.ts","sourceRoot":"","sources":["../../src/lib/stack-detect.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,SAAS,GAAG,UAAU,GAAG,YAAY,GAAG,SAAS,CAAC;AAC9D,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;AAErD,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,SAAS,CAAC;IACrB,cAAc,EAAE,cAAc,CAAC;IAC/B,gFAAgF;IAChF,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,6DAA6D;IAC7D,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAWD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAIhE;AAUD;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CA2BlD"}
+{"version":3,"file":"stack-detect.d.ts","sourceRoot":"","sources":["../../src/lib/stack-detect.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,SAAS,GACjB,UAAU,GACV,YAAY,GACZ,SAAS,GACT,SAAS,GACT,MAAM,GACN,SAAS,CAAC;AACd,MAAM,MAAM,cAAc,GAAG,KAAK,GAAG,MAAM,GAAG,MAAM,CAAC;AAErD,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,SAAS,CAAC;IACrB,cAAc,EAAE,cAAc,CAAC;IAC/B;;;;;OAKG;IACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,6DAA6D;IAC7D,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAWD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAIhE;AAwDD;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAwClD"}

package/dist/lib/stack-detect.js

@@ -24,10 +24,63 @@ function firstExisting(cwd, candidates) {
     }
     return null;
 }
+/** Common server entry candidates, in priority order, for non-Next stacks. */
+const SERVER_ENTRY_CANDIDATES = [
+    "src/server.ts",
+    "src/server.js",
+    "src/index.ts",
+    "src/index.js",
+    "src/app.ts",
+    "src/app.js",
+    "src/main.ts",
+    "src/main.js",
+    "server.ts",
+    "server.js",
+    "index.ts",
+    "index.js",
+    "app.ts",
+    "app.js",
+];
+/** Best-effort server entry: the package.json `main`, then common filenames. */
+function findServerEntry(cwd) {
+    try {
+        const pkg = JSON.parse(readFileSync(join(cwd, "package.json"), "utf8"));
+        if (typeof pkg.main === "string" && pkg.main) {
+            const mainPath = join(cwd, pkg.main);
+            if (existsSync(mainPath))
+                return mainPath;
+        }
+    }
+    catch {
+        /* fall through to filename probing */
+    }
+    return firstExisting(cwd, SERVER_ENTRY_CANDIDATES);
+}
+/** Heuristic: does this look like a runnable Node service (no framework dep)? */
+function hasNodeServerSignal(cwd, deps) {
+    if (deps["stripe"])
+        return true; // server-ish: payment provider implies a backend
+    try {
+        const pkg = JSON.parse(readFileSync(join(cwd, "package.json"), "utf8"));
+        if (typeof pkg.main === "string" && pkg.main)
+            return true;
+        if (pkg.bin)
+            return true;
+        if (pkg.scripts && (pkg.scripts.start || pkg.scripts.serve))
+            return true;
+    }
+    catch {
+        return false;
+    }
+    return false;
+}
 /**
  * Detect the framework + package manager + entry file of the project at `cwd`.
- * Next.js only for now (App Router preferred, then Pages Router); everything
- * else is `unknown` so the wizard falls back to printed instructions.
+ * Order is most-specific first: next-app → next-pages → fastify → express →
+ * node (a package.json + a server signal but no framework) → unknown. Next.js
+ * is the only stack the wizard auto-wires; server frameworks expose a
+ * best-effort `entryFile` but `componentDir: null` keeps them on the printed
+ * snippet path (auto-injection is a later task).
  */
 export function detectStack(cwd) {
     const packageManager = detectPackageManager(cwd);
@@ -52,6 +105,18 @@ export function detectStack(cwd) {
             return { framework: "next-pages", packageManager, entryFile: pagesApp, componentDir: dirname(pagesApp) };
         }
     }
+    // Server frameworks (Echoly-class: Fastify + TS + Postgres + Stripe webhook).
+    // entryFile is best-effort; componentDir stays null (no browser component to
+    // scaffold on a backend), which keeps these stacks on the printed-snippet path.
+    if (deps["fastify"]) {
+        return { framework: "fastify", packageManager, entryFile: findServerEntry(cwd), componentDir: null };
+    }
+    if (deps["express"]) {
+        return { framework: "express", packageManager, entryFile: findServerEntry(cwd), componentDir: null };
+    }
+    if (hasNodeServerSignal(cwd, deps)) {
+        return { framework: "node", packageManager, entryFile: findServerEntry(cwd), componentDir: null };
+    }
     return { framework: "unknown", packageManager, entryFile: null, componentDir: null };
 }
 //# sourceMappingURL=stack-detect.js.map

package/dist/lib/stack-detect.js.map

@@ -1 +1 @@
-{"version":3,"file":"stack-detect.js","sourceRoot":"","sources":["../../src/lib/stack-detect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAc1C,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACxE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAC3D,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACtD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,UAAoB;IACtD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC1B,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACpC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,cAAc,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAE3B,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,EAAE;YACnC,gBAAgB;YAChB,gBAAgB;YAChB,oBAAoB;YACpB,oBAAoB;SACrB,CAAC,CAAC;QACH,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3G,CAAC;QAED,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,EAAE;YAClC,gBAAgB;YAChB,gBAAgB;YAChB,oBAAoB;YACpB,oBAAoB;SACrB,CAAC,CAAC;QACH,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3G,CAAC;IACH,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;AACvF,CAAC"}
+{"version":3,"file":"stack-detect.js","sourceRoot":"","sources":["../../src/lib/stack-detect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAyB1C,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACxE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,EAAE,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,GAAW;IAC9C,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IAC3D,IAAI,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QAAE,OAAO,MAAM,CAAC;IACtD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,aAAa,CAAC,GAAW,EAAE,UAAoB;IACtD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAC1B,IAAI,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACpC,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8EAA8E;AAC9E,MAAM,uBAAuB,GAAG;IAC9B,eAAe;IACf,eAAe;IACf,cAAc;IACd,cAAc;IACd,YAAY;IACZ,YAAY;IACZ,aAAa;IACb,aAAa;IACb,WAAW;IACX,WAAW;IACX,UAAU;IACV,UAAU;IACV,QAAQ;IACR,QAAQ;CACT,CAAC;AAEF,gFAAgF;AAChF,SAAS,eAAe,CAAC,GAAW;IAClC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACxE,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;YACrC,IAAI,UAAU,CAAC,QAAQ,CAAC;gBAAE,OAAO,QAAQ,CAAC;QAC5C,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;IACD,OAAO,aAAa,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;AACrD,CAAC;AAED,iFAAiF;AACjF,SAAS,mBAAmB,CAAC,GAAW,EAAE,IAA4B;IACpE,IAAI,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,iDAAiD;IAClF,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACxE,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QAC1D,IAAI,GAAG,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,MAAM,cAAc,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAE3B,IAAI,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,aAAa,CAAC,GAAG,EAAE;YACnC,gBAAgB;YAChB,gBAAgB;YAChB,oBAAoB;YACpB,oBAAoB;SACrB,CAAC,CAAC;QACH,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3G,CAAC;QAED,MAAM,QAAQ,GAAG,aAAa,CAAC,GAAG,EAAE;YAClC,gBAAgB;YAChB,gBAAgB;YAChB,oBAAoB;YACpB,oBAAoB;SACrB,CAAC,CAAC;QACH,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3G,CAAC;IACH,CAAC;IAED,8EAA8E;IAC9E,6EAA6E;IAC7E,gFAAgF;IAChF,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACvG,CAAC;IACD,IAAI,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACpB,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACvG,CAAC;IACD,IAAI,mBAAmB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACpG,CAAC;IAED,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;AACvF,CAAC"}

package/dist/lib/webhook-detect.d.ts

@@ -0,0 +1,21 @@
+import type { Framework } from "./stack-detect.js";
+export interface StripeWebhookLocation {
+    /** Path to the file containing the call, relative to projectRoot. */
+    file: string;
+    /** 1-based line number of the `constructEvent` call. */
+    line: number;
+    /** Framework the hint is tailored for (falls back to "unknown"). */
+    framework: Framework | "unknown";
+    /** Human-readable description of where to inject the trackSale call. */
+    handlerHint: string;
+}
+/**
+ * Scan the project source for the canonical Stripe webhook-verification call and
+ * return its location + a framework-tailored injection hint. Returns null when
+ * no match is found (caller falls back to printing a generic snippet).
+ *
+ * @param projectRoot Absolute path to the project to scan.
+ * @param framework   Detected framework, used to tailor the hint (default "unknown").
+ */
+export declare function detectStripeWebhook(projectRoot: string, framework?: Framework | "unknown"): StripeWebhookLocation | null;
+//# sourceMappingURL=webhook-detect.d.ts.map

package/dist/lib/webhook-detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-detect.d.ts","sourceRoot":"","sources":["../../src/lib/webhook-detect.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AA8BnD,MAAM,WAAW,qBAAqB;IACpC,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;IACb,oEAAoE;IACpE,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC;IACjC,wEAAwE;IACxE,WAAW,EAAE,MAAM,CAAC;CACrB;AAoDD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,EACnB,SAAS,GAAE,SAAS,GAAG,SAAqB,GAC3C,qBAAqB,GAAG,IAAI,CAyB9B"}

package/dist/lib/webhook-detect.js

@@ -0,0 +1,111 @@
+import { readdirSync, readFileSync, statSync } from "node:fs";
+import { join, relative } from "node:path";
+/**
+ * Webhook-locator: finds where an advertiser already verifies Stripe webhooks
+ * so the wizard can point the agent at the exact injection site for trackSale.
+ *
+ * The canonical Stripe webhook-verification call is `stripe.webhooks.constructEvent`
+ * (Node SDK). When we find it, the conversion-tracking call belongs right after
+ * it — the event has been verified and parsed at that point. Dependency-light: a
+ * plain fs walk, no globbing libs. Returns null when not found so the caller
+ * falls back to printing a snippet.
+ */
+/** The canonical Stripe webhook signature-verification call (Node SDK). */
+const STRIPE_WEBHOOK_NEEDLE = "stripe.webhooks.constructEvent";
+const IGNORED_DIRS = new Set([
+    "node_modules",
+    ".git",
+    "dist",
+    ".next",
+    "build",
+    "coverage",
+    ".turbo",
+    ".vercel",
+]);
+/** Source extensions worth scanning (skip binaries, maps, lockfiles, etc.). */
+const SOURCE_EXTENSIONS = [".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"];
+function isSourceFile(name) {
+    return SOURCE_EXTENSIONS.some((ext) => name.endsWith(ext));
+}
+/** Collect candidate source files under `dir`, skipping vendored/build dirs. */
+function collectSourceFiles(dir, out) {
+    let entries;
+    try {
+        entries = readdirSync(dir, { withFileTypes: false });
+    }
+    catch {
+        return; // unreadable dir — skip
+    }
+    for (const name of entries) {
+        const full = join(dir, name);
+        let stat;
+        try {
+            stat = statSync(full);
+        }
+        catch {
+            continue; // broken symlink, etc.
+        }
+        if (stat.isDirectory()) {
+            if (IGNORED_DIRS.has(name) || name.startsWith("."))
+                continue;
+            collectSourceFiles(full, out);
+        }
+        else if (stat.isFile() && isSourceFile(name)) {
+            out.push(full);
+        }
+    }
+}
+/**
+ * Tailor the injection-point hint to the detected framework. The trackSale call
+ * always goes *after* constructEvent (the event is verified + parsed there).
+ */
+function handlerHintFor(framework) {
+    switch (framework) {
+        case "fastify":
+            return "inside the fastify.post('/webhooks/stripe', …) handler, right after constructEvent verifies the event";
+        case "express":
+            return "after constructEvent in the app.post('/webhooks/stripe', …) Express handler";
+        case "next-app":
+            return "in app/api/webhooks/stripe/route.ts, in the POST handler after constructEvent";
+        case "next-pages":
+            return "in pages/api/webhooks/stripe.ts, after constructEvent in the API route handler";
+        case "node":
+            return "after constructEvent in your Stripe webhook HTTP handler";
+        default:
+            return "after constructEvent, where you handle the verified Stripe webhook event";
+    }
+}
+/**
+ * Scan the project source for the canonical Stripe webhook-verification call and
+ * return its location + a framework-tailored injection hint. Returns null when
+ * no match is found (caller falls back to printing a generic snippet).
+ *
+ * @param projectRoot Absolute path to the project to scan.
+ * @param framework   Detected framework, used to tailor the hint (default "unknown").
+ */
+export function detectStripeWebhook(projectRoot, framework = "unknown") {
+    const files = [];
+    collectSourceFiles(projectRoot, files);
+    for (const file of files) {
+        let content;
+        try {
+            content = readFileSync(file, "utf8");
+        }
+        catch {
+            continue; // unreadable file — skip
+        }
+        const idx = content.indexOf(STRIPE_WEBHOOK_NEEDLE);
+        if (idx === -1)
+            continue;
+        // 1-based line number of the first occurrence.
+        const line = content.slice(0, idx).split("\n").length;
+        return {
+            file: relative(projectRoot, file),
+            line,
+            framework,
+            handlerHint: handlerHintFor(framework),
+        };
+    }
+    return null;
+}
+//# sourceMappingURL=webhook-detect.js.map

package/dist/lib/webhook-detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-detect.js","sourceRoot":"","sources":["../../src/lib/webhook-detect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAG3C;;;;;;;;;GASG;AAEH,2EAA2E;AAC3E,MAAM,qBAAqB,GAAG,gCAAgC,CAAC;AAE/D,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC;IAC3B,cAAc;IACd,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,UAAU;IACV,QAAQ;IACR,SAAS;CACV,CAAC,CAAC;AAEH,+EAA+E;AAC/E,MAAM,iBAAiB,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;AAazE,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,gFAAgF;AAChF,SAAS,kBAAkB,CAAC,GAAW,EAAE,GAAa;IACpD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAa,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,wBAAwB;IAClC,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC7B,IAAI,IAAI,CAAC;QACT,IAAI,CAAC;YACH,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,uBAAuB;QACnC,CAAC;QACD,IAAI,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;YACvB,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC7D,kBAAkB,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QAChC,CAAC;aAAM,IAAI,IAAI,CAAC,MAAM,EAAE,IAAI,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,SAAgC;IACtD,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,SAAS;YACZ,OAAO,uGAAuG,CAAC;QACjH,KAAK,SAAS;YACZ,OAAO,6EAA6E,CAAC;QACvF,KAAK,UAAU;YACb,OAAO,+EAA+E,CAAC;QACzF,KAAK,YAAY;YACf,OAAO,gFAAgF,CAAC;QAC1F,KAAK,MAAM;YACT,OAAO,0DAA0D,CAAC;QACpE;YACE,OAAO,0EAA0E,CAAC;IACtF,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CACjC,WAAmB,EACnB,YAAmC,SAAS;IAE5C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,kBAAkB,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAEvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,yBAAyB;QACrC,CAAC;QACD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;QACnD,IAAI,GAAG,KAAK,CAAC,CAAC;YAAE,SAAS;QAEzB,+CAA+C;QAC/C,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC;QACtD,OAAO;YACL,IAAI,EAAE,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;YACjC,IAAI;YACJ,SAAS;YACT,WAAW,EAAE,cAAc,CAAC,SAAS,CAAC;SACvC,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/lib/wizard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"wizard.d.ts","sourceRoot":"","sources":["../../src/lib/wizard.ts"],"names":[],"mappings":"AAoBA,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,OAAO,CAAC;CACtB;AAiBD;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA6DzE"}
+{"version":3,"file":"wizard.d.ts","sourceRoot":"","sources":["../../src/lib/wizard.ts"],"names":[],"mappings":"AAqBA,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,OAAO,CAAC;CACtB;AAiBD;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CA6DzE"}