crewly 1.2.1 → 1.2.4

package/dist/backend/backend/src/services/payment/magic-moment.service.js

@@ -0,0 +1,158 @@
+/**
+ * Magic Moment Service
+ *
+ * Tracks anonymous free trial usage for the "Magic Moment" feature.
+ * Allows up to 3 free task submissions per device fingerprint without
+ * requiring authentication, giving users a taste of the AI employee
+ * before they sign up.
+ *
+ * Uses file-based persistence matching the cloud task service pattern.
+ *
+ * @module services/payment/magic-moment.service
+ */
+import { readFile, writeFile, mkdir } from 'node:fs/promises';
+import { join } from 'node:path';
+import { homedir } from 'node:os';
+import { LoggerService } from '../core/logger.service.js';
+import { MAGIC_MOMENT_CONSTANTS, } from './magic-moment.types.js';
+// ---------------------------------------------------------------------------
+// Service
+// ---------------------------------------------------------------------------
+/**
+ * Singleton service for anonymous trial tracking.
+ *
+ * Manages the trial quota per device fingerprint and persists
+ * usage to disk so limits survive server restarts.
+ */
+export class MagicMomentService {
+    static instance = null;
+    logger;
+    storageDir;
+    trialsFilePath;
+    trials = new Map();
+    initialized = false;
+    constructor() {
+        this.logger = LoggerService.getInstance().createComponentLogger('MagicMomentService');
+        this.storageDir = join(homedir(), '.crewly', MAGIC_MOMENT_CONSTANTS.STORAGE_DIR);
+        this.trialsFilePath = join(this.storageDir, MAGIC_MOMENT_CONSTANTS.TRIALS_FILE);
+    }
+    /**
+     * Get or create the singleton instance.
+     *
+     * @returns MagicMomentService singleton
+     */
+    static getInstance() {
+        if (!MagicMomentService.instance) {
+            MagicMomentService.instance = new MagicMomentService();
+        }
+        return MagicMomentService.instance;
+    }
+    /**
+     * Reset the singleton (for testing).
+     */
+    static resetInstance() {
+        MagicMomentService.instance = null;
+    }
+    // -----------------------------------------------------------------------
+    // Initialization
+    // -----------------------------------------------------------------------
+    /**
+     * Initialize the service — load persisted trials from disk.
+     * Idempotent: safe to call multiple times.
+     */
+    async initialize() {
+        if (this.initialized)
+            return;
+        try {
+            await mkdir(this.storageDir, { recursive: true });
+            const raw = await readFile(this.trialsFilePath, 'utf-8').catch(() => '[]');
+            const parsed = JSON.parse(raw);
+            for (const trial of parsed) {
+                this.trials.set(trial.fingerprint, trial);
+            }
+            this.logger.info(`Loaded ${this.trials.size} trial records from disk`);
+        }
+        catch {
+            this.trials = new Map();
+        }
+        this.initialized = true;
+    }
+    // -----------------------------------------------------------------------
+    // Trial Management
+    // -----------------------------------------------------------------------
+    /**
+     * Check whether a device fingerprint has remaining free trials.
+     *
+     * @param fingerprint - Client device fingerprint hash
+     * @returns Trial availability info
+     */
+    async checkTrialAvailability(fingerprint) {
+        await this.initialize();
+        const record = this.trials.get(fingerprint);
+        const used = record?.trialsUsed ?? 0;
+        const remaining = Math.max(0, MAGIC_MOMENT_CONSTANTS.MAX_FREE_TRIALS - used);
+        return {
+            available: remaining > 0,
+            remaining,
+            used,
+            max: MAGIC_MOMENT_CONSTANTS.MAX_FREE_TRIALS,
+        };
+    }
+    /**
+     * Consume one free trial for a device fingerprint.
+     *
+     * @param fingerprint - Client device fingerprint hash
+     * @returns Updated trial availability, or null if no trials remain
+     */
+    async consumeTrial(fingerprint) {
+        await this.initialize();
+        const availability = await this.checkTrialAvailability(fingerprint);
+        if (!availability.available) {
+            return null;
+        }
+        const now = new Date().toISOString();
+        const existing = this.trials.get(fingerprint);
+        const record = {
+            fingerprint,
+            trialsUsed: (existing?.trialsUsed ?? 0) + 1,
+            trialTimestamps: [...(existing?.trialTimestamps ?? []), now],
+            firstTrialAt: existing?.firstTrialAt ?? now,
+            lastTrialAt: now,
+        };
+        this.trials.set(fingerprint, record);
+        await this.persist();
+        this.logger.info(`Trial consumed: fingerprint=${fingerprint.slice(0, 8)}... used=${record.trialsUsed}/${MAGIC_MOMENT_CONSTANTS.MAX_FREE_TRIALS}`);
+        return {
+            available: record.trialsUsed < MAGIC_MOMENT_CONSTANTS.MAX_FREE_TRIALS,
+            remaining: MAGIC_MOMENT_CONSTANTS.MAX_FREE_TRIALS - record.trialsUsed,
+            used: record.trialsUsed,
+            max: MAGIC_MOMENT_CONSTANTS.MAX_FREE_TRIALS,
+        };
+    }
+    /**
+     * Get the trial record for a fingerprint, or null if none exists.
+     *
+     * @param fingerprint - Client device fingerprint hash
+     * @returns Trial record or null
+     */
+    async getTrialRecord(fingerprint) {
+        await this.initialize();
+        return this.trials.get(fingerprint) ?? null;
+    }
+    // -----------------------------------------------------------------------
+    // Helpers
+    // -----------------------------------------------------------------------
+    /**
+     * Persist trial records to disk.
+     */
+    async persist() {
+        try {
+            const data = JSON.stringify(Array.from(this.trials.values()), null, 2);
+            await writeFile(this.trialsFilePath, data, 'utf-8');
+        }
+        catch (err) {
+            this.logger.error('Failed to persist trial records', { error: String(err) });
+        }
+    }
+}
+//# sourceMappingURL=magic-moment.service.js.map

package/dist/backend/backend/src/services/payment/magic-moment.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"magic-moment.service.js","sourceRoot":"","sources":["../../../../../../backend/src/services/payment/magic-moment.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,aAAa,EAAwB,MAAM,2BAA2B,CAAC;AAChF,OAAO,EACN,sBAAsB,GAGtB,MAAM,yBAAyB,CAAC;AAEjC,8EAA8E;AAC9E,UAAU;AACV,8EAA8E;AAE9E;;;;;GAKG;AACH,MAAM,OAAO,kBAAkB;IACtB,MAAM,CAAC,QAAQ,GAA8B,IAAI,CAAC;IAEzC,MAAM,CAAkB;IACxB,UAAU,CAAS;IACnB,cAAc,CAAS;IAChC,MAAM,GAA6B,IAAI,GAAG,EAAE,CAAC;IAC7C,WAAW,GAAG,KAAK,CAAC;IAE5B;QACC,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,oBAAoB,CAAC,CAAC;QACtF,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,sBAAsB,CAAC,WAAW,CAAC,CAAC;QACjF,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,sBAAsB,CAAC,WAAW,CAAC,CAAC;IACjF,CAAC;IAED;;;;OAIG;IACH,MAAM,CAAC,WAAW;QACjB,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,CAAC;YAClC,kBAAkB,CAAC,QAAQ,GAAG,IAAI,kBAAkB,EAAE,CAAC;QACxD,CAAC;QACD,OAAO,kBAAkB,CAAC,QAAQ,CAAC;IACpC,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,aAAa;QACnB,kBAAkB,CAAC,QAAQ,GAAG,IAAI,CAAC;IACpC,CAAC;IAED,0EAA0E;IAC1E,iBAAiB;IACjB,0EAA0E;IAE1E;;;OAGG;IACH,KAAK,CAAC,UAAU;QACf,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAE7B,IAAI,CAAC;YACJ,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAClD,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC3E,MAAM,MAAM,GAAkB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC9C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC5B,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,IAAI,CAAC,MAAM,CAAC,IAAI,0BAA0B,CAAC,CAAC;QACxE,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;QACzB,CAAC;QAED,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;IACzB,CAAC;IAED,0EAA0E;IAC1E,mBAAmB;IACnB,0EAA0E;IAE1E;;;;;OAKG;IACH,KAAK,CAAC,sBAAsB,CAAC,WAAmB;QAC/C,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAExB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,MAAM,EAAE,UAAU,IAAI,CAAC,CAAC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,sBAAsB,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC;QAE7E,OAAO;YACN,SAAS,EAAE,SAAS,GAAG,CAAC;YACxB,SAAS;YACT,IAAI;YACJ,GAAG,EAAE,sBAAsB,CAAC,eAAe;SAC3C,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,YAAY,CAAC,WAAmB;QACrC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QAExB,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;QACpE,IAAI,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC;YAC7B,OAAO,IAAI,CAAC;QACb,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAE9C,MAAM,MAAM,GAAgB;YAC3B,WAAW;YACX,UAAU,EAAE,CAAC,QAAQ,EAAE,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC;YAC3C,eAAe,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE,eAAe,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC;YAC5D,YAAY,EAAE,QAAQ,EAAE,YAAY,IAAI,GAAG;YAC3C,WAAW,EAAE,GAAG;SAChB,CAAC;QAEF,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QAErB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,YAAY,MAAM,CAAC,UAAU,IAAI,sBAAsB,CAAC,eAAe,EAAE,CAAC,CAAC;QAElJ,OAAO;YACN,SAAS,EAAE,MAAM,CAAC,UAAU,GAAG,sBAAsB,CAAC,eAAe;YACrE,SAAS,EAAE,sBAAsB,CAAC,eAAe,GAAG,MAAM,CAAC,UAAU;YACrE,IAAI,EAAE,MAAM,CAAC,UAAU;YACvB,GAAG,EAAE,sBAAsB,CAAC,eAAe;SAC3C,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,cAAc,CAAC,WAAmB;QACvC,MAAM,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC;IAC7C,CAAC;IAED,0EAA0E;IAC1E,UAAU;IACV,0EAA0E;IAE1E;;OAEG;IACK,KAAK,CAAC,OAAO;QACpB,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACvE,MAAM,SAAS,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9E,CAAC;IACF,CAAC"}

package/dist/backend/backend/src/services/payment/magic-moment.types.d.ts

@@ -0,0 +1,95 @@
+/**
+ * Magic Moment Type Definitions
+ *
+ * Types for the anonymous trial system that allows up to 3 free
+ * task submissions without authentication. Trials are tracked by
+ * a client-provided device fingerprint.
+ *
+ * @module services/payment/magic-moment.types
+ */
+/** Magic Moment service configuration. */
+export declare const MAGIC_MOMENT_CONSTANTS: {
+    /** Maximum free trials per device fingerprint */
+    readonly MAX_FREE_TRIALS: 3;
+    /** Storage directory under ~/.crewly/ */
+    readonly STORAGE_DIR: "cloud/magic-moment";
+    /** Trial data file */
+    readonly TRIALS_FILE: "trials.json";
+    /** Minimum fingerprint length */
+    readonly MIN_FINGERPRINT_LENGTH: 8;
+    /** Maximum fingerprint length */
+    readonly MAX_FINGERPRINT_LENGTH: 128;
+};
+/** A single anonymous trial record. */
+export interface TrialRecord {
+    /** Device fingerprint hash */
+    fingerprint: string;
+    /** Number of trials used */
+    trialsUsed: number;
+    /** ISO timestamps of each trial */
+    trialTimestamps: string[];
+    /** ISO timestamp of first trial */
+    firstTrialAt: string;
+    /** ISO timestamp of most recent trial */
+    lastTrialAt: string;
+}
+/** Trial availability check result. */
+export interface TrialAvailability {
+    /** Whether the device can still submit free trials */
+    available: boolean;
+    /** Number of remaining free trials */
+    remaining: number;
+    /** Total trials used */
+    used: number;
+    /** Maximum trials allowed */
+    max: number;
+}
+/** POST /api/magic/submit request body. */
+export interface MagicSubmitBody {
+    /** Client-provided device fingerprint hash */
+    fingerprint: string;
+    /** User's text prompt / instruction */
+    prompt?: string;
+    /** Base64-encoded file data (optional) */
+    fileData?: string;
+    /** Original filename (required if fileData provided) */
+    fileName?: string;
+    /** MIME type of the file (required if fileData provided) */
+    fileMimeType?: string;
+}
+/** Successful magic submit response. */
+export interface MagicSubmitResponse {
+    success: true;
+    data: {
+        taskId: string;
+        message: string;
+        trialsRemaining: number;
+    };
+}
+/** Magic status response. */
+export interface MagicStatusResponse {
+    success: true;
+    data: TrialAvailability;
+}
+/**
+ * Checks whether a MIME type is allowed for magic moment uploads.
+ *
+ * @param mimeType - MIME type to check
+ * @returns True if allowed
+ */
+export declare function isAllowedMagicMimeType(mimeType: string): boolean;
+/**
+ * Validates a device fingerprint string.
+ *
+ * @param fingerprint - Value to validate
+ * @returns Error message or null if valid
+ */
+export declare function validateFingerprint(fingerprint: unknown): string | null;
+/**
+ * Validates a magic moment submit request body.
+ *
+ * @param body - Request body to validate
+ * @returns Error message or null if valid
+ */
+export declare function validateMagicSubmitBody(body: MagicSubmitBody): string | null;
+//# sourceMappingURL=magic-moment.types.d.ts.map

package/dist/backend/backend/src/services/payment/magic-moment.types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"magic-moment.types.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/payment/magic-moment.types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAMH,0CAA0C;AAC1C,eAAO,MAAM,sBAAsB;IAClC,iDAAiD;;IAEjD,yCAAyC;;IAEzC,sBAAsB;;IAEtB,iCAAiC;;IAEjC,iCAAiC;;CAExB,CAAC;AAMX,uCAAuC;AACvC,MAAM,WAAW,WAAW;IAC3B,8BAA8B;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,mCAAmC;IACnC,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,mCAAmC;IACnC,YAAY,EAAE,MAAM,CAAC;IACrB,yCAAyC;IACzC,WAAW,EAAE,MAAM,CAAC;CACpB;AAED,uCAAuC;AACvC,MAAM,WAAW,iBAAiB;IACjC,sDAAsD;IACtD,SAAS,EAAE,OAAO,CAAC;IACnB,sCAAsC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,wBAAwB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,6BAA6B;IAC7B,GAAG,EAAE,MAAM,CAAC;CACZ;AAMD,2CAA2C;AAC3C,MAAM,WAAW,eAAe;IAC/B,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wCAAwC;AACxC,MAAM,WAAW,mBAAmB;IACnC,OAAO,EAAE,IAAI,CAAC;IACd,IAAI,EAAE;QACL,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,MAAM,CAAC;QAChB,eAAe,EAAE,MAAM,CAAC;KACxB,CAAC;CACF;AAED,6BAA6B;AAC7B,MAAM,WAAW,mBAAmB;IACnC,OAAO,EAAE,IAAI,CAAC;IACd,IAAI,EAAE,iBAAiB,CAAC;CACxB;AAcD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEhE;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAWvE;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,eAAe,GAAG,MAAM,GAAG,IAAI,CAwB5E"}

package/dist/backend/backend/src/services/payment/magic-moment.types.js

@@ -0,0 +1,91 @@
+/**
+ * Magic Moment Type Definitions
+ *
+ * Types for the anonymous trial system that allows up to 3 free
+ * task submissions without authentication. Trials are tracked by
+ * a client-provided device fingerprint.
+ *
+ * @module services/payment/magic-moment.types
+ */
+// ---------------------------------------------------------------------------
+// Constants
+// ---------------------------------------------------------------------------
+/** Magic Moment service configuration. */
+export const MAGIC_MOMENT_CONSTANTS = {
+    /** Maximum free trials per device fingerprint */
+    MAX_FREE_TRIALS: 3,
+    /** Storage directory under ~/.crewly/ */
+    STORAGE_DIR: 'cloud/magic-moment',
+    /** Trial data file */
+    TRIALS_FILE: 'trials.json',
+    /** Minimum fingerprint length */
+    MIN_FINGERPRINT_LENGTH: 8,
+    /** Maximum fingerprint length */
+    MAX_FINGERPRINT_LENGTH: 128,
+};
+// ---------------------------------------------------------------------------
+// Type Guards
+// ---------------------------------------------------------------------------
+/** Allowed MIME types for magic moment uploads (matches H5). */
+const ALLOWED_MAGIC_MIME_TYPES = [
+    'image/png',
+    'image/jpeg',
+    'image/gif',
+    'image/webp',
+];
+/**
+ * Checks whether a MIME type is allowed for magic moment uploads.
+ *
+ * @param mimeType - MIME type to check
+ * @returns True if allowed
+ */
+export function isAllowedMagicMimeType(mimeType) {
+    return ALLOWED_MAGIC_MIME_TYPES.includes(mimeType);
+}
+/**
+ * Validates a device fingerprint string.
+ *
+ * @param fingerprint - Value to validate
+ * @returns Error message or null if valid
+ */
+export function validateFingerprint(fingerprint) {
+    if (!fingerprint || typeof fingerprint !== 'string') {
+        return 'fingerprint is required';
+    }
+    if (fingerprint.length < MAGIC_MOMENT_CONSTANTS.MIN_FINGERPRINT_LENGTH) {
+        return `fingerprint must be at least ${MAGIC_MOMENT_CONSTANTS.MIN_FINGERPRINT_LENGTH} characters`;
+    }
+    if (fingerprint.length > MAGIC_MOMENT_CONSTANTS.MAX_FINGERPRINT_LENGTH) {
+        return `fingerprint must be at most ${MAGIC_MOMENT_CONSTANTS.MAX_FINGERPRINT_LENGTH} characters`;
+    }
+    return null;
+}
+/**
+ * Validates a magic moment submit request body.
+ *
+ * @param body - Request body to validate
+ * @returns Error message or null if valid
+ */
+export function validateMagicSubmitBody(body) {
+    const fpError = validateFingerprint(body.fingerprint);
+    if (fpError)
+        return fpError;
+    const hasPrompt = body.prompt && typeof body.prompt === 'string' && body.prompt.trim().length > 0;
+    const hasFile = body.fileData && typeof body.fileData === 'string' && body.fileData.length > 0;
+    if (!hasPrompt && !hasFile) {
+        return 'At least one of prompt or file is required';
+    }
+    if (hasFile) {
+        if (!body.fileName || typeof body.fileName !== 'string' || body.fileName.trim().length === 0) {
+            return 'fileName is required when uploading a file';
+        }
+        if (!body.fileMimeType || typeof body.fileMimeType !== 'string') {
+            return 'fileMimeType is required when uploading a file';
+        }
+        if (!isAllowedMagicMimeType(body.fileMimeType)) {
+            return `Unsupported file type: ${body.fileMimeType}. Only images are allowed for free trials.`;
+        }
+    }
+    return null;
+}
+//# sourceMappingURL=magic-moment.types.js.map

package/dist/backend/backend/src/services/payment/magic-moment.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"magic-moment.types.js","sourceRoot":"","sources":["../../../../../../backend/src/services/payment/magic-moment.types.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,8EAA8E;AAC9E,YAAY;AACZ,8EAA8E;AAE9E,0CAA0C;AAC1C,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACrC,iDAAiD;IACjD,eAAe,EAAE,CAAC;IAClB,yCAAyC;IACzC,WAAW,EAAE,oBAAoB;IACjC,sBAAsB;IACtB,WAAW,EAAE,aAAa;IAC1B,iCAAiC;IACjC,sBAAsB,EAAE,CAAC;IACzB,iCAAiC;IACjC,sBAAsB,EAAE,GAAG;CAClB,CAAC;AAkEX,8EAA8E;AAC9E,cAAc;AACd,8EAA8E;AAE9E,gEAAgE;AAChE,MAAM,wBAAwB,GAAG;IAChC,WAAW;IACX,YAAY;IACZ,WAAW;IACX,YAAY;CACH,CAAC;AAEX;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAC,QAAgB;IACtD,OAAQ,wBAA8C,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,WAAoB;IACvD,IAAI,CAAC,WAAW,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACrD,OAAO,yBAAyB,CAAC;IAClC,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,sBAAsB,CAAC,sBAAsB,EAAE,CAAC;QACxE,OAAO,gCAAgC,sBAAsB,CAAC,sBAAsB,aAAa,CAAC;IACnG,CAAC;IACD,IAAI,WAAW,CAAC,MAAM,GAAG,sBAAsB,CAAC,sBAAsB,EAAE,CAAC;QACxE,OAAO,+BAA+B,sBAAsB,CAAC,sBAAsB,aAAa,CAAC;IAClG,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,IAAqB;IAC5D,MAAM,OAAO,GAAG,mBAAmB,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACtD,IAAI,OAAO;QAAE,OAAO,OAAO,CAAC;IAE5B,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;IAClG,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAE/F,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5B,OAAO,4CAA4C,CAAC;IACrD,CAAC;IAED,IAAI,OAAO,EAAE,CAAC;QACb,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9F,OAAO,4CAA4C,CAAC;QACrD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,EAAE,CAAC;YACjE,OAAO,gDAAgD,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAChD,OAAO,0BAA0B,IAAI,CAAC,YAAY,4CAA4C,CAAC;QAChG,CAAC;IACF,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/backend/backend/src/services/payment/stripe.service.d.ts

@@ -0,0 +1,122 @@
+/**
+ * Stripe Payment Service
+ *
+ * Wraps the Stripe SDK for checkout session creation, subscription
+ * management, customer portal, and webhook event processing.
+ *
+ * Conditionally initialises — if STRIPE_SECRET_KEY is not set, all
+ * methods return graceful errors instead of crashing, allowing the
+ * rest of the backend to run without Stripe credentials.
+ *
+ * Subscription state is persisted locally via a file-based store so
+ * that GET /subscription queries do not require a Stripe API call.
+ *
+ * @module services/payment/stripe.service
+ */
+import type { PlanId, BillingInterval, SubscriptionInfo, CreateCheckoutResponse, CreatePortalResponse, WebhookEventPayload, PaymentOperationResult } from '../../controllers/payment/payment.types.js';
+/** Persisted subscription record keyed by Supabase userId. */
+export interface StoredSubscription {
+    /** Supabase user ID */
+    userId: string;
+    /** Stripe customer ID */
+    customerId: string;
+    /** Stripe subscription ID */
+    subscriptionId: string;
+    /** Plan the user is on */
+    planId: PlanId;
+    /** Subscription status */
+    status: SubscriptionInfo['status'];
+    /** ISO timestamp of billing period end */
+    currentPeriodEnd: string | null;
+    /** Whether subscription cancels at period end */
+    cancelAtPeriodEnd: boolean;
+    /** ISO timestamp of last update */
+    updatedAt: string;
+}
+/**
+ * Singleton service for Stripe payment operations.
+ *
+ * All methods check `isConfigured()` first and return a descriptive
+ * error when Stripe is not available rather than throwing.
+ */
+export declare class StripeService {
+    private static instance;
+    private readonly logger;
+    private readonly secretKey;
+    private readonly webhookSecret;
+    private stripe;
+    private subscriptions;
+    private subscriptionsLoaded;
+    private constructor();
+    /**
+     * Get or create the singleton instance.
+     *
+     * @returns StripeService singleton
+     */
+    static getInstance(): StripeService;
+    /**
+     * Reset the singleton (for testing).
+     */
+    static resetInstance(): void;
+    /**
+     * Whether Stripe is configured and ready to use.
+     *
+     * @returns true if the secret key is set
+     */
+    isConfigured(): boolean;
+    /**
+     * Load subscription state from disk. Idempotent.
+     */
+    private loadSubscriptions;
+    /**
+     * Persist subscription state to disk.
+     */
+    private persistSubscriptions;
+    /**
+     * Update or create a subscription record from a webhook event.
+     *
+     * @param payload - Processed webhook payload
+     */
+    upsertSubscriptionFromWebhook(payload: WebhookEventPayload): Promise<void>;
+    /**
+     * Create a Stripe Checkout Session for a subscription.
+     *
+     * @param userId - Supabase user ID (stored in session metadata)
+     * @param planId - Plan to subscribe to
+     * @param interval - Billing interval
+     * @param successUrl - Redirect URL after successful payment
+     * @param cancelUrl - Redirect URL if user cancels
+     * @returns Result containing the checkout URL and session ID
+     */
+    createCheckoutSession(userId: string, planId: PlanId, interval: BillingInterval, successUrl: string, cancelUrl: string): Promise<PaymentOperationResult<CreateCheckoutResponse>>;
+    /**
+     * Get the current subscription for a user.
+     *
+     * First checks local subscription store (populated by webhooks),
+     * then falls back to Stripe customer search if configured.
+     *
+     * @param userId - Supabase user ID
+     * @returns Subscription info
+     */
+    getSubscription(userId: string): Promise<PaymentOperationResult<SubscriptionInfo>>;
+    /**
+     * Create a Stripe Customer Portal session for subscription management.
+     *
+     * @param userId - Supabase user ID
+     * @param returnUrl - URL to redirect to when the user is done
+     * @returns Portal URL
+     */
+    createPortalSession(userId: string, returnUrl: string): Promise<PaymentOperationResult<CreatePortalResponse>>;
+    /**
+     * Verify and process a Stripe webhook event.
+     *
+     * Uses Stripe SDK signature verification when configured,
+     * then extracts relevant data from the event payload.
+     *
+     * @param rawBody - Raw request body (Buffer)
+     * @param signature - Stripe-Signature header value
+     * @returns Processed webhook event payload
+     */
+    handleWebhookEvent(rawBody: Buffer, signature: string): Promise<PaymentOperationResult<WebhookEventPayload>>;
+}
+//# sourceMappingURL=stripe.service.d.ts.map

package/dist/backend/backend/src/services/payment/stripe.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/payment/stripe.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAOH,OAAO,KAAK,EACX,MAAM,EACN,eAAe,EACf,gBAAgB,EAChB,sBAAsB,EACtB,oBAAoB,EACpB,mBAAmB,EACnB,sBAAsB,EACtB,MAAM,4CAA4C,CAAC;AAgDpD,8DAA8D;AAC9D,MAAM,WAAW,kBAAkB;IAClC,uBAAuB;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,yBAAyB;IACzB,UAAU,EAAE,MAAM,CAAC;IACnB,6BAA6B;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,0BAA0B;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,0BAA0B;IAC1B,MAAM,EAAE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACnC,0CAA0C;IAC1C,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,iDAAiD;IACjD,iBAAiB,EAAE,OAAO,CAAC;IAC3B,mCAAmC;IACnC,SAAS,EAAE,MAAM,CAAC;CAClB;AAMD;;;;;GAKG;AACH,qBAAa,aAAa;IACzB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAA8B;IAErD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAqB;IAC/C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAqB;IACnD,OAAO,CAAC,MAAM,CAAuB;IACrC,OAAO,CAAC,aAAa,CAA8C;IACnE,OAAO,CAAC,mBAAmB,CAAS;IAEpC,OAAO;IAYP;;;;OAIG;IACH,MAAM,CAAC,WAAW,IAAI,aAAa;IAOnC;;OAEG;IACH,MAAM,CAAC,aAAa,IAAI,IAAI;IAI5B;;;;OAIG;IACH,YAAY,IAAI,OAAO;IAQvB;;OAEG;YACW,iBAAiB;IAgB/B;;OAEG;YACW,oBAAoB;IAWlC;;;;OAIG;IACG,6BAA6B,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAkChF;;;;;;;;;OASG;IACG,qBAAqB,CAC1B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,eAAe,EACzB,UAAU,EAAE,MAAM,EAClB,SAAS,EAAE,MAAM,GACf,OAAO,CAAC,sBAAsB,CAAC,sBAAsB,CAAC,CAAC;IAgD1D;;;;;;;;OAQG;IACG,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC,gBAAgB,CAAC,CAAC;IAkExF;;;;;;OAMG;IACG,mBAAmB,CACxB,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,MAAM,GACf,OAAO,CAAC,sBAAsB,CAAC,oBAAoB,CAAC,CAAC;IAsCxD;;;;;;;;;OASG;IACG,kBAAkB,CACvB,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,MAAM,GACf,OAAO,CAAC,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;CAgEvD"}