palaryn 0.1.0

package/dist/src/billing/stripe-client.js

@@ -0,0 +1,51 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.StripeClient = void 0;
+const stripe_1 = __importDefault(require("stripe"));
+class StripeClient {
+    constructor(config) {
+        this.stripe = new stripe_1.default(config.secret_key);
+        this.config = config;
+    }
+    async createCustomer(email, workspaceId, name) {
+        return this.stripe.customers.create({
+            email,
+            name: name || undefined,
+            metadata: { workspace_id: workspaceId },
+        });
+    }
+    async createCheckoutSession(customerId, priceId, workspaceId) {
+        return this.stripe.checkout.sessions.create({
+            customer: customerId,
+            mode: 'subscription',
+            line_items: [{ price: priceId, quantity: 1 }],
+            success_url: this.config.checkout_success_url || `${process.env.APP_BASE_URL || 'http://localhost:5173'}/billing?success=true&session_id={CHECKOUT_SESSION_ID}`,
+            cancel_url: this.config.checkout_cancel_url || `${process.env.APP_BASE_URL || 'http://localhost:5173'}/billing?canceled=true`,
+            metadata: { workspace_id: workspaceId },
+        });
+    }
+    async createPortalSession(customerId) {
+        return this.stripe.billingPortal.sessions.create({
+            customer: customerId,
+            return_url: this.config.portal_return_url || undefined,
+        });
+    }
+    async getSubscription(subscriptionId) {
+        return this.stripe.subscriptions.retrieve(subscriptionId);
+    }
+    async getInvoices(customerId, limit = 10) {
+        const result = await this.stripe.invoices.list({
+            customer: customerId,
+            limit,
+        });
+        return result.data;
+    }
+    constructEvent(payload, signature) {
+        return this.stripe.webhooks.constructEvent(payload, signature, this.config.webhook_secret);
+    }
+}
+exports.StripeClient = StripeClient;
+//# sourceMappingURL=stripe-client.js.map

package/dist/src/billing/stripe-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe-client.js","sourceRoot":"","sources":["../../../src/billing/stripe-client.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AAG5B,MAAa,YAAY;IAIvB,YAAY,MAAoB;QAC9B,IAAI,CAAC,MAAM,GAAG,IAAI,gBAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAC5C,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,KAAa,EAAE,WAAmB,EAAE,IAAa;QACpE,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;YAClC,KAAK;YACL,IAAI,EAAE,IAAI,IAAI,SAAS;YACvB,QAAQ,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE;SACxC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,qBAAqB,CAAC,UAAkB,EAAE,OAAe,EAAE,WAAmB;QAClF,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC1C,QAAQ,EAAE,UAAU;YACpB,IAAI,EAAE,cAAc;YACpB,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;YAC7C,WAAW,EAAE,IAAI,CAAC,MAAM,CAAC,oBAAoB,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,uBAAuB,wDAAwD;YAC/J,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,mBAAmB,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,uBAAuB,wBAAwB;YAC7H,QAAQ,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE;SACxC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,UAAkB;QAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC;YAC/C,QAAQ,EAAE,UAAU;YACpB,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,IAAI,SAAS;SACvD,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,cAAsB;QAC1C,OAAO,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,UAAkB,EAAE,QAAgB,EAAE;QACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC;YAC7C,QAAQ,EAAE,UAAU;YACpB,KAAK;SACN,CAAC,CAAC;QACH,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IAED,cAAc,CAAC,OAAe,EAAE,SAAiB;QAC/C,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CACxC,OAAO,EACP,SAAS,EACT,IAAI,CAAC,MAAM,CAAC,cAAc,CAC3B,CAAC;IACJ,CAAC;CACF;AAtDD,oCAsDC"}

package/dist/src/billing/webhook-handler.d.ts

@@ -0,0 +1,19 @@
+import Stripe from 'stripe';
+import { SubscriptionStore, WorkspaceStore } from '../storage/interfaces';
+import { StripeConfig } from '../types/stripe-config';
+export declare class WebhookHandler {
+    private subscriptionStore;
+    private workspaceStore;
+    private config;
+    constructor(subscriptionStore: SubscriptionStore, workspaceStore: WorkspaceStore, config: StripeConfig);
+    handleEvent(event: Stripe.Event): Promise<void>;
+    private resolvePlan;
+    private handleCheckoutCompleted;
+    private handleSubscriptionUpdated;
+    private handleSubscriptionDeleted;
+    private getSubscriptionIdFromInvoice;
+    private handlePaymentFailed;
+    private handlePaymentSucceeded;
+    private mapStripeStatus;
+}
+//# sourceMappingURL=webhook-handler.d.ts.map

package/dist/src/billing/webhook-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-handler.d.ts","sourceRoot":"","sources":["../../../src/billing/webhook-handler.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE1E,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAEtD,qBAAa,cAAc;IAEvB,OAAO,CAAC,iBAAiB;IACzB,OAAO,CAAC,cAAc;IACtB,OAAO,CAAC,MAAM;gBAFN,iBAAiB,EAAE,iBAAiB,EACpC,cAAc,EAAE,cAAc,EAC9B,MAAM,EAAE,YAAY;IAGxB,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC;IAoBrD,OAAO,CAAC,WAAW;YAML,uBAAuB;YAuCvB,yBAAyB;YAoCzB,yBAAyB;IAmBvC,OAAO,CAAC,4BAA4B;YAOtB,mBAAmB;YAanB,sBAAsB;IAepC,OAAO,CAAC,eAAe;CAaxB"}

package/dist/src/billing/webhook-handler.js

@@ -0,0 +1,169 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebhookHandler = void 0;
+const crypto_1 = require("crypto");
+class WebhookHandler {
+    constructor(subscriptionStore, workspaceStore, config) {
+        this.subscriptionStore = subscriptionStore;
+        this.workspaceStore = workspaceStore;
+        this.config = config;
+    }
+    async handleEvent(event) {
+        switch (event.type) {
+            case 'checkout.session.completed':
+                await this.handleCheckoutCompleted(event.data.object);
+                break;
+            case 'customer.subscription.updated':
+                await this.handleSubscriptionUpdated(event.data.object);
+                break;
+            case 'customer.subscription.deleted':
+                await this.handleSubscriptionDeleted(event.data.object);
+                break;
+            case 'invoice.payment_failed':
+                await this.handlePaymentFailed(event.data.object);
+                break;
+            case 'invoice.payment_succeeded':
+                await this.handlePaymentSucceeded(event.data.object);
+                break;
+        }
+    }
+    resolvePlan(priceId) {
+        if (priceId === this.config.price_ids.pro_monthly)
+            return 'pro';
+        if (priceId === this.config.price_ids.business_monthly)
+            return 'business';
+        return 'free';
+    }
+    async handleCheckoutCompleted(session) {
+        const workspaceId = session.metadata?.workspace_id;
+        if (!workspaceId || !session.subscription || !session.customer)
+            return;
+        const subscriptionId = typeof session.subscription === 'string' ? session.subscription : session.subscription.id;
+        const customerId = typeof session.customer === 'string' ? session.customer : session.customer.id;
+        // Check for existing subscription by workspace (idempotency)
+        const existing = this.subscriptionStore.getByWorkspace(workspaceId);
+        if (existing && existing.stripe_subscription_id === subscriptionId)
+            return;
+        // Resolve plan from the checkout session line items (stored in subscription)
+        // We need to determine plan from the price ID - use a default for now,
+        // the subscription.updated event will set the correct plan
+        const now = new Date().toISOString();
+        if (existing) {
+            // Update existing subscription
+            this.subscriptionStore.update(existing.id, {
+                stripe_subscription_id: subscriptionId,
+                stripe_customer_id: customerId,
+                status: 'active',
+                updated_at: now,
+            });
+        }
+        else {
+            // Create new subscription record
+            this.subscriptionStore.create({
+                id: (0, crypto_1.randomUUID)(),
+                workspace_id: workspaceId,
+                stripe_customer_id: customerId,
+                stripe_subscription_id: subscriptionId,
+                plan: 'pro', // Default; subscription.updated will correct this
+                status: 'active',
+                created_at: now,
+                updated_at: now,
+            });
+        }
+    }
+    async handleSubscriptionUpdated(subscription) {
+        const existing = this.subscriptionStore.getByStripeSubscriptionId(subscription.id);
+        if (!existing)
+            return;
+        const now = new Date().toISOString();
+        // Guard: skip if our record is strictly newer than this event's creation timestamp
+        const eventCreatedAt = new Date(subscription.created * 1000).toISOString();
+        if (existing.updated_at > eventCreatedAt)
+            return;
+        // Resolve plan from the first line item's price
+        const priceId = subscription.items?.data?.[0]?.price?.id;
+        const plan = priceId ? this.resolvePlan(priceId) : existing.plan;
+        const status = this.mapStripeStatus(subscription.status);
+        // Access period timestamps (Stripe SDK types vary across versions)
+        const subAny = subscription;
+        const periodStart = subAny.current_period_start;
+        const periodEnd = subAny.current_period_end;
+        this.subscriptionStore.update(existing.id, {
+            plan,
+            status,
+            current_period_start: periodStart ? new Date(periodStart * 1000).toISOString() : undefined,
+            current_period_end: periodEnd ? new Date(periodEnd * 1000).toISOString() : undefined,
+            cancel_at_period_end: subscription.cancel_at_period_end,
+            updated_at: now,
+        });
+        // Update workspace plan
+        this.workspaceStore.update(existing.workspace_id, {
+            plan,
+            updated_at: now,
+        });
+    }
+    async handleSubscriptionDeleted(subscription) {
+        const existing = this.subscriptionStore.getByStripeSubscriptionId(subscription.id);
+        if (!existing)
+            return;
+        const now = new Date().toISOString();
+        this.subscriptionStore.update(existing.id, {
+            status: 'canceled',
+            plan: 'free',
+            updated_at: now,
+        });
+        // Downgrade workspace to free
+        this.workspaceStore.update(existing.workspace_id, {
+            plan: 'free',
+            updated_at: now,
+        });
+    }
+    getSubscriptionIdFromInvoice(invoice) {
+        // Stripe SDK types vary across versions for invoice.subscription
+        const sub = invoice.subscription;
+        if (!sub)
+            return undefined;
+        return typeof sub === 'string' ? sub : sub.id;
+    }
+    async handlePaymentFailed(invoice) {
+        const subscriptionId = this.getSubscriptionIdFromInvoice(invoice);
+        if (!subscriptionId)
+            return;
+        const existing = this.subscriptionStore.getByStripeSubscriptionId(subscriptionId);
+        if (!existing)
+            return;
+        this.subscriptionStore.update(existing.id, {
+            status: 'past_due',
+            updated_at: new Date().toISOString(),
+        });
+    }
+    async handlePaymentSucceeded(invoice) {
+        const subscriptionId = this.getSubscriptionIdFromInvoice(invoice);
+        if (!subscriptionId)
+            return;
+        const existing = this.subscriptionStore.getByStripeSubscriptionId(subscriptionId);
+        if (!existing)
+            return;
+        if (existing.status === 'past_due' || existing.status === 'incomplete') {
+            this.subscriptionStore.update(existing.id, {
+                status: 'active',
+                updated_at: new Date().toISOString(),
+            });
+        }
+    }
+    mapStripeStatus(status) {
+        switch (status) {
+            case 'active': return 'active';
+            case 'past_due': return 'past_due';
+            case 'canceled': return 'canceled';
+            case 'trialing': return 'trialing';
+            case 'incomplete': return 'incomplete';
+            case 'incomplete_expired': return 'canceled';
+            case 'unpaid': return 'past_due';
+            case 'paused': return 'canceled';
+            default: return 'active';
+        }
+    }
+}
+exports.WebhookHandler = WebhookHandler;
+//# sourceMappingURL=webhook-handler.js.map

package/dist/src/billing/webhook-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-handler.js","sourceRoot":"","sources":["../../../src/billing/webhook-handler.ts"],"names":[],"mappings":";;;AACA,mCAAoC;AAKpC,MAAa,cAAc;IACzB,YACU,iBAAoC,EACpC,cAA8B,EAC9B,MAAoB;QAFpB,sBAAiB,GAAjB,iBAAiB,CAAmB;QACpC,mBAAc,GAAd,cAAc,CAAgB;QAC9B,WAAM,GAAN,MAAM,CAAc;IAC3B,CAAC;IAEJ,KAAK,CAAC,WAAW,CAAC,KAAmB;QACnC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,4BAA4B;gBAC/B,MAAM,IAAI,CAAC,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,MAAiC,CAAC,CAAC;gBACjF,MAAM;YACR,KAAK,+BAA+B;gBAClC,MAAM,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,MAA6B,CAAC,CAAC;gBAC/E,MAAM;YACR,KAAK,+BAA+B;gBAClC,MAAM,IAAI,CAAC,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,MAA6B,CAAC,CAAC;gBAC/E,MAAM;YACR,KAAK,wBAAwB;gBAC3B,MAAM,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,MAAwB,CAAC,CAAC;gBACpE,MAAM;YACR,KAAK,2BAA2B;gBAC9B,MAAM,IAAI,CAAC,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,MAAwB,CAAC,CAAC;gBACvE,MAAM;QACV,CAAC;IACH,CAAC;IAEO,WAAW,CAAC,OAAe;QACjC,IAAI,OAAO,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW;YAAE,OAAO,KAAK,CAAC;QAChE,IAAI,OAAO,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,gBAAgB;YAAE,OAAO,UAAU,CAAC;QAC1E,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,uBAAuB,CAAC,OAAgC;QACpE,MAAM,WAAW,GAAG,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC;QACnD,IAAI,CAAC,WAAW,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,QAAQ;YAAE,OAAO;QAEvE,MAAM,cAAc,GAAG,OAAO,OAAO,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QACjH,MAAM,UAAU,GAAG,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QAEjG,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,cAAc,CAAC,WAAW,CAAC,CAAC;QACpE,IAAI,QAAQ,IAAI,QAAQ,CAAC,sBAAsB,KAAK,cAAc;YAAE,OAAO;QAE3E,6EAA6E;QAC7E,uEAAuE;QACvE,2DAA2D;QAC3D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,IAAI,QAAQ,EAAE,CAAC;YACb,+BAA+B;YAC/B,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE;gBACzC,sBAAsB,EAAE,cAAc;gBACtC,kBAAkB,EAAE,UAAU;gBAC9B,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,iCAAiC;YACjC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC;gBAC5B,EAAE,EAAE,IAAA,mBAAU,GAAE;gBAChB,YAAY,EAAE,WAAW;gBACzB,kBAAkB,EAAE,UAAU;gBAC9B,sBAAsB,EAAE,cAAc;gBACtC,IAAI,EAAE,KAAK,EAAE,kDAAkD;gBAC/D,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,GAAG;gBACf,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,yBAAyB,CAAC,YAAiC;QACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,QAAQ;YAAE,OAAO;QAEtB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACrC,mFAAmF;QACnF,MAAM,cAAc,GAAG,IAAI,IAAI,CAAC,YAAY,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3E,IAAI,QAAQ,CAAC,UAAU,GAAG,cAAc;YAAE,OAAO;QAEjD,gDAAgD;QAChD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAEjE,MAAM,MAAM,GAAG,IAAI,CAAC,eAAe,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;QAEzD,mEAAmE;QACnE,MAAM,MAAM,GAAG,YAAmB,CAAC;QACnC,MAAM,WAAW,GAAG,MAAM,CAAC,oBAAoB,CAAC;QAChD,MAAM,SAAS,GAAG,MAAM,CAAC,kBAAkB,CAAC;QAE5C,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE;YACzC,IAAI;YACJ,MAAM;YACN,oBAAoB,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;YAC1F,kBAAkB,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS;YACpF,oBAAoB,EAAE,YAAY,CAAC,oBAAoB;YACvD,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;QAEH,wBAAwB;QACxB,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE;YAChD,IAAI;YACJ,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,yBAAyB,CAAC,YAAiC;QACvE,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,QAAQ;YAAE,OAAO;QAEtB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAErC,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE;YACzC,MAAM,EAAE,UAAU;YAClB,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;QAEH,8BAA8B;QAC9B,IAAI,CAAC,cAAc,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,EAAE;YAChD,IAAI,EAAE,MAAM;YACZ,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IAEO,4BAA4B,CAAC,OAAuB;QAC1D,iEAAiE;QACjE,MAAM,GAAG,GAAI,OAAe,CAAC,YAAY,CAAC;QAC1C,IAAI,CAAC,GAAG;YAAE,OAAO,SAAS,CAAC;QAC3B,OAAO,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAChD,CAAC;IAEO,KAAK,CAAC,mBAAmB,CAAC,OAAuB;QACvD,MAAM,cAAc,GAAG,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAClE,IAAI,CAAC,cAAc;YAAE,OAAO;QAE5B,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,cAAc,CAAC,CAAC;QAClF,IAAI,CAAC,QAAQ;YAAE,OAAO;QAEtB,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE;YACzC,MAAM,EAAE,UAAU;YAClB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACrC,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,sBAAsB,CAAC,OAAuB;QAC1D,MAAM,cAAc,GAAG,IAAI,CAAC,4BAA4B,CAAC,OAAO,CAAC,CAAC;QAClE,IAAI,CAAC,cAAc;YAAE,OAAO;QAE5B,MAAM,QAAQ,GAAG,IAAI,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,cAAc,CAAC,CAAC;QAClF,IAAI,CAAC,QAAQ;YAAE,OAAO;QAEtB,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,IAAI,QAAQ,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;YACvE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,EAAE;gBACzC,MAAM,EAAE,QAAQ;gBAChB,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACrC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAEO,eAAe,CAAC,MAAkC;QACxD,QAAQ,MAAM,EAAE,CAAC;YACf,KAAK,QAAQ,CAAC,CAAC,OAAO,QAAQ,CAAC;YAC/B,KAAK,UAAU,CAAC,CAAC,OAAO,UAAU,CAAC;YACnC,KAAK,UAAU,CAAC,CAAC,OAAO,UAAU,CAAC;YACnC,KAAK,UAAU,CAAC,CAAC,OAAO,UAAU,CAAC;YACnC,KAAK,YAAY,CAAC,CAAC,OAAO,YAAY,CAAC;YACvC,KAAK,oBAAoB,CAAC,CAAC,OAAO,UAAU,CAAC;YAC7C,KAAK,QAAQ,CAAC,CAAC,OAAO,UAAU,CAAC;YACjC,KAAK,QAAQ,CAAC,CAAC,OAAO,UAAU,CAAC;YACjC,OAAO,CAAC,CAAC,OAAO,QAAQ,CAAC;QAC3B,CAAC;IACH,CAAC;CACF;AA/KD,wCA+KC"}

package/dist/src/billing/webhook-routes.d.ts

@@ -0,0 +1,5 @@
+import { Router } from 'express';
+import { StripeClient } from './stripe-client';
+import { WebhookHandler } from './webhook-handler';
+export declare function createWebhookRouter(stripeClient: StripeClient, handler: WebhookHandler): Router;
+//# sourceMappingURL=webhook-routes.d.ts.map

package/dist/src/billing/webhook-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-routes.d.ts","sourceRoot":"","sources":["../../../src/billing/webhook-routes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AAEpD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEnD,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,GAAG,MAAM,CAsB/F"}

package/dist/src/billing/webhook-routes.js

@@ -0,0 +1,30 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWebhookRouter = createWebhookRouter;
+const express_1 = require("express");
+const express_2 = __importDefault(require("express"));
+function createWebhookRouter(stripeClient, handler) {
+    const router = (0, express_1.Router)();
+    // IMPORTANT: Use express.raw() for Stripe signature verification
+    router.post('/stripe/webhook', express_2.default.raw({ type: 'application/json' }), async (req, res) => {
+        const sig = req.headers['stripe-signature'];
+        if (!sig) {
+            res.status(400).json({ error: 'Missing stripe-signature header' });
+            return;
+        }
+        try {
+            const event = stripeClient.constructEvent(req.body, sig);
+            await handler.handleEvent(event);
+            res.json({ received: true });
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : 'Webhook signature verification failed';
+            res.status(400).json({ error: message });
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=webhook-routes.js.map

package/dist/src/billing/webhook-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-routes.js","sourceRoot":"","sources":["../../../src/billing/webhook-routes.ts"],"names":[],"mappings":";;;;;AAKA,kDAsBC;AA3BD,qCAAoD;AACpD,sDAA8B;AAI9B,SAAgB,mBAAmB,CAAC,YAA0B,EAAE,OAAuB;IACrF,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;IAExB,iEAAiE;IACjE,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,iBAAO,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC9G,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAW,CAAC;QACtD,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,CAAC;YACnE,OAAO;QACT,CAAC;QAED,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,YAAY,CAAC,cAAc,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YACzD,MAAM,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACjC,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,uCAAuC,CAAC;YAC7F,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAC3C,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/src/budget/manager.d.ts

@@ -0,0 +1,95 @@
+import { BudgetConfig, CostEstimate } from '../types/budget';
+import { BudgetReport, UsageData } from '../types/tool-result';
+import { BudgetStore, WorkspaceBudgetConfig } from '../storage/interfaces';
+import { ToolCall } from '../types/tool-call';
+export interface CostRecord {
+    estimated_cost_usd: number;
+    actual_cost_usd?: number;
+    usage?: UsageData;
+}
+export declare class BudgetManager {
+    private config;
+    private costTable;
+    private externalStore?;
+    private taskStates;
+    private userDailySpend;
+    private userMonthlySpend;
+    private workspaceDailySpend;
+    private workspaceMonthlySpend;
+    private callRetryCounts;
+    private costRecords;
+    private reservations;
+    /** Promise-based mutex per budget key to serialize concurrent reservations */
+    private budgetLocks;
+    constructor(config: BudgetConfig, store?: BudgetStore);
+    estimateCost(toolCall: ToolCall): CostEstimate;
+    check(toolCall: ToolCall, overrides?: WorkspaceBudgetConfig): {
+        allowed: boolean;
+        reason?: string;
+        report: BudgetReport;
+    };
+    /**
+     * Atomically check budget and reserve the estimated cost.
+     * The reservation temporarily reduces available budget so concurrent
+     * requests cannot both pass the check.
+     * Uses a per-task lock to serialize concurrent reservations for the same budget key.
+     */
+    reserveAndCheck(toolCall: ToolCall, overrides?: WorkspaceBudgetConfig): Promise<{
+        allowed: boolean;
+        reason?: string;
+        report: BudgetReport;
+        reservationKey?: string;
+    }>;
+    /**
+     * Synchronous check-and-reserve. Must be called while holding the per-task lock.
+     */
+    private _reserveAndCheckSync;
+    /**
+     * Commit a reservation with the actual cost. Releases the difference
+     * between the reserved (estimated) amount and the actual cost.
+     */
+    commitReservation(reservationKey: string, actualCost: number): void;
+    /**
+     * Release a reservation entirely (e.g. on error before execution completes).
+     * Removes the reserved amount from all counters.
+     */
+    releaseReservation(reservationKey: string): void;
+    /**
+     * Record a completed tool call's cost.
+     * When skipCostIncrement is true (e.g. because a reservation already accounts
+     * for the cost), only step counting and cost record storage are performed.
+     */
+    record(toolCall: ToolCall, costOrRecord: number | CostRecord, skipCostIncrement?: boolean): void;
+    /** Remove counter entries whose date/month suffix doesn't match today */
+    private pruneStaleCounters;
+    recordRetry(toolCallId: string): {
+        allowed: boolean;
+        count: number;
+    };
+    getReport(toolCall: ToolCall, estimatedCost: number, effectiveConfig?: BudgetConfig): BudgetReport;
+    getReportWithActual(toolCall: ToolCall, estimatedCost: number, actualCostUsd?: number, usage?: UsageData): BudgetReport;
+    getCostTable(): Record<string, number>;
+    getCostRecord(toolCallId: string): CostRecord | undefined;
+    private getTaskState;
+    private getDateKey;
+    private getMonthKey;
+    flush(): Promise<void>;
+    reset(): void;
+    /** Get spending data for a specific actor */
+    getActorSpending(actorId: string, days?: number): {
+        daily_spend: number;
+        monthly_spend: number;
+        task_count: number;
+        total_spend: number;
+    };
+    getConfig(): BudgetConfig;
+    /** Return aggregate spending across all tracked entities */
+    getSpendingSummary(): {
+        task_total: number;
+        user_daily_total: number;
+        user_monthly_total: number;
+        workspace_daily_total: number;
+        workspace_monthly_total: number;
+    };
+}
+//# sourceMappingURL=manager.d.ts.map

package/dist/src/budget/manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../../src/budget/manager.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAe,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,uBAAuB,CAAC;AAC3E,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAgB9C,MAAM,WAAW,UAAU;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAAe;IAC7B,OAAO,CAAC,SAAS,CAAyB;IAC1C,OAAO,CAAC,aAAa,CAAC,CAAc;IAEpC,OAAO,CAAC,UAAU,CAA2B;IAC7C,OAAO,CAAC,cAAc,CAAsB;IAC5C,OAAO,CAAC,gBAAgB,CAAsB;IAC9C,OAAO,CAAC,mBAAmB,CAAsB;IACjD,OAAO,CAAC,qBAAqB,CAAsB;IACnD,OAAO,CAAC,eAAe,CAAsB;IAC7C,OAAO,CAAC,WAAW,CAA0B;IAC7C,OAAO,CAAC,YAAY,CAA2G;IAC/H,8EAA8E;IAC9E,OAAO,CAAC,WAAW,CAA6B;gBAEpC,MAAM,EAAE,YAAY,EAAE,KAAK,CAAC,EAAE,WAAW;IA6BrD,YAAY,CAAC,QAAQ,EAAE,QAAQ,GAAG,YAAY;IAqC9C,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,qBAAqB,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,YAAY,CAAA;KAAE;IAmGzH;;;;;OAKG;IACG,eAAe,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,qBAAqB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,YAAY,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAqC3K;;OAEG;IACH,OAAO,CAAC,oBAAoB;IA2C5B;;;OAGG;IACH,iBAAiB,CAAC,cAAc,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI;IAqCnE;;;OAGG;IACH,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI;IAmChD;;;;OAIG;IACH,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,GAAG,UAAU,EAAE,iBAAiB,UAAQ,GAAG,IAAI;IA4D9F,yEAAyE;IACzE,OAAO,CAAC,kBAAkB;IA2B1B,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE;IAkBpE,SAAS,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,YAAY,GAAG,YAAY;IAWlG,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,EAAE,aAAa,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,SAAS,GAAG,YAAY;IAUvH,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAKtC,aAAa,CAAC,UAAU,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS;IAKzD,OAAO,CAAC,YAAY;IAoBpB,OAAO,CAAC,UAAU;IAKlB,OAAO,CAAC,WAAW;IAKb,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAI5B,KAAK,IAAI,IAAI;IAab,6CAA6C;IAC7C,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG;QAChD,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,UAAU,EAAE,MAAM,CAAC;QACnB,WAAW,EAAE,MAAM,CAAC;KACrB;IA+BD,SAAS,IAAI,YAAY;IAIzB,4DAA4D;IAC5D,kBAAkB,IAAI;QACpB,UAAU,EAAE,MAAM,CAAC;QACnB,gBAAgB,EAAE,MAAM,CAAC;QACzB,kBAAkB,EAAE,MAAM,CAAC;QAC3B,qBAAqB,EAAE,MAAM,CAAC;QAC9B,uBAAuB,EAAE,MAAM,CAAC;KACjC;CAqCF"}