backend-manager 5.0.167 → 5.0.168

package/CHANGELOG.md

@@ -14,6 +14,10 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - `Fixed` for any bug fixes.
 - `Security` in case of vulnerabilities.
 
+# [5.0.168] - 2026-03-21
+### Fixed
+- Immediately suspend subscription on payment denial (PAYMENT.SALE.DENIED, invoice.payment_failed) instead of waiting for the processor to give up retrying — recovery via PAYMENT.SALE.COMPLETED restores active status
+
 # [5.0.167] - 2026-03-20
 ### Changed
 - Extracted `resolveTemperature()` helper for consistency with `resolveFormatting()` and `resolveReasoning()`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "backend-manager",
-  "version": "5.0.167",
+  "version": "5.0.168",
   "description": "Quick tools for developing Firebase functions",
   "main": "src/manager/index.js",
   "bin": {

package/src/manager/events/firestore/payments-webhooks/on-write.js

@@ -218,6 +218,16 @@ async function processPaymentEvent({ category, library, resource, resourceType,
     ? library.toUnifiedSubscription(resource, transformOptions)
     : library.toUnifiedOneTime(resource, transformOptions);
 
+  // Override: immediately suspend on payment denial
+  // Processors keep the sub active while retrying, but we revoke access right away.
+  // If the retry succeeds (e.g. PAYMENT.SALE.COMPLETED), it will restore active status.
+  // PayPal: PAYMENT.SALE.DENIED, Stripe: invoice.payment_failed, Chargebee: payment_failed
+  const PAYMENT_DENIED_EVENTS = ['PAYMENT.SALE.DENIED', 'invoice.payment_failed', 'payment_failed'];
+  if (isSubscription && PAYMENT_DENIED_EVENTS.includes(eventType) && unified.status === 'active') {
+    assistant.log(`Overriding status to suspended: ${eventType} received but provider still says active`);
+    unified.status = 'suspended';
+  }
+
   assistant.log(`Unified ${category}: product=${unified.product.id}, status=${unified.status}`, unified);
 
   // Read checkout context from payments-intents (attribution, discount, supplemental)