qarpeo 0.0.0-alpha.10

package/dist/runtime/server/routes/mail/suppressions/index.post.mjs

@@ -0,0 +1,23 @@
+import { createError, defineEventHandler, readBody } from "nuxt/server";
+import { suppressEmail } from "../../../utils/mail.mjs";
+export default defineEventHandler(async (event) => {
+  const body = await readBody(event).catch(() => ({})) || {};
+  const email = body.email;
+  if (!email || typeof email !== "string" || !email.includes("@")) {
+    throw createError({
+      statusCode: 400,
+      statusMessage: "A valid email address is required"
+    });
+  }
+  const record = await suppressEmail(event, {
+    email,
+    reason: body.reason || "manual",
+    type: body.type || "manual",
+    source: "api:manual",
+    metadata: body.metadata
+  });
+  return {
+    success: true,
+    record
+  };
+});

package/dist/runtime/server/routes/mail/unsubscribe.d.ts

@@ -0,0 +1,13 @@
+/**
+ * GET & POST /api/mail/unsubscribe
+ *
+ * Implements RFC 8058 One-Click Unsubscribe and browser unsubscribe landing page.
+ * Automatically adds the authenticated recipient email to the suppression list.
+ */
+declare const _default: import("nuxt/server").EventHandler<Promise<string | {
+    success: boolean;
+    unsubscribed: boolean;
+    email: string;
+    suppressedAt: number;
+}>>;
+export default _default;

package/dist/runtime/server/routes/mail/unsubscribe.mjs

@@ -0,0 +1,91 @@
+import { createError, defineEventHandler, getQuery, readBody } from "nuxt/server";
+import { suppressEmail, verifyUnsubscribeToken } from "../../utils/mail.mjs";
+export default defineEventHandler(async (event) => {
+  const method = (event.method || event.node?.req?.method || "GET").toUpperCase();
+  const query = getQuery(event);
+  let token = query.token || "";
+  if (method === "POST") {
+    const body = await readBody(event).catch(() => ({})) || {};
+    token = token || body.token || "";
+    const email2 = await verifyUnsubscribeToken(token);
+    if (!email2) {
+      throw createError({
+        statusCode: 400,
+        statusMessage: "Invalid or expired unsubscribe token"
+      });
+    }
+    const record = await suppressEmail(event, {
+      email: email2,
+      reason: "unsubscribe",
+      type: "unsubscribe",
+      source: "rfc8058_one_click"
+    });
+    return {
+      success: true,
+      unsubscribed: true,
+      email: email2,
+      suppressedAt: record.createdAt
+    };
+  }
+  if (!token) {
+    throw createError({
+      statusCode: 400,
+      statusMessage: "Missing unsubscribe token"
+    });
+  }
+  const email = await verifyUnsubscribeToken(token);
+  if (!email) {
+    return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>Invalid Link - Unsubscribe</title>
+  <style>
+    body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif; background: #f8fafc; color: #0f172a; display: flex; align-items: center; justify-content: center; min-height: 100vh; margin: 0; padding: 16px; }
+    .card { background: #ffffff; border-radius: 12px; border: 1px solid #e2e8f0; max-width: 440px; width: 100%; padding: 32px; text-align: center; box-shadow: 0 4px 6px -1px rgba(0,0,0,0.05); }
+    h1 { font-size: 20px; font-weight: 600; margin: 0 0 8px; color: #dc2626; }
+    p { font-size: 14px; color: #64748b; line-height: 1.5; margin: 0; }
+  </style>
+</head>
+<body>
+  <div class="card">
+    <h1>Invalid or Expired Link</h1>
+    <p>This unsubscribe link is invalid or has expired. If you need assistance, please contact support.</p>
+  </div>
+</body>
+</html>`;
+  }
+  await suppressEmail(event, {
+    email,
+    reason: "unsubscribe",
+    type: "unsubscribe",
+    source: "unsubscribe_link"
+  });
+  return `<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>Unsubscribed Successfully</title>
+  <style>
+    body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif; background: #f8fafc; color: #0f172a; display: flex; align-items: center; justify-content: center; min-height: 100vh; margin: 0; padding: 16px; }
+    .card { background: #ffffff; border-radius: 12px; border: 1px solid #e2e8f0; max-width: 440px; width: 100%; padding: 32px; text-align: center; box-shadow: 0 4px 6px -1px rgba(0,0,0,0.05); }
+    .icon { width: 48px; height: 48px; border-radius: 24px; background: #ecfdf5; color: #059669; display: inline-flex; align-items: center; justify-content: center; font-size: 24px; margin-bottom: 16px; }
+    h1 { font-size: 20px; font-weight: 600; margin: 0 0 8px; }
+    p { font-size: 14px; color: #64748b; line-height: 1.5; margin: 0 0 16px; }
+    .email-box { background: #f1f5f9; border-radius: 6px; padding: 8px 12px; font-size: 13px; font-family: monospace; color: #334155; word-break: break-all; margin-bottom: 16px; }
+    .note { font-size: 12px; color: #94a3b8; }
+  </style>
+</head>
+<body>
+  <div class="card">
+    <div class="icon">\u2713</div>
+    <h1>You have been unsubscribed</h1>
+    <p>You will no longer receive marketing and promotional notifications sent to:</p>
+    <div class="email-box">${email}</div>
+    <p class="note">Essential transactional emails (such as password resets or receipt confirmations) may still be sent.</p>
+  </div>
+</body>
+</html>`;
+});

package/dist/runtime/server/routes/mail/webhooks.post.d.ts

@@ -0,0 +1,12 @@
+/**
+ * POST /api/mail/webhooks
+ *
+ * Ingests webhook events from Resend, Postmark, SendGrid, and Cloudflare.
+ * Handles bounces, spam complaints, unsubscriptions, and delivery tracking.
+ */
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    success: boolean;
+    count: number;
+    results: any[];
+}>>;
+export default _default;

package/dist/runtime/server/routes/mail/webhooks.post.mjs

@@ -0,0 +1,71 @@
+import { defineEventHandler, readBody } from "nuxt/server";
+import { recordEmailBounce, recordEmailClick, recordEmailOpen, recordSoftBounce, suppressEmail } from "../../utils/mail.mjs";
+export default defineEventHandler(async (event) => {
+  const body = await readBody(event).catch(() => ({})) || {};
+  const events = Array.isArray(body) ? body : [body];
+  const results = [];
+  for (const item of events) {
+    const eventType = (item.type || item.event || item.RecordType || item.data?.type || "").toLowerCase();
+    const recipient = item.to || item.recipient || item.data?.to || item.Email || item.data?.recipient || (Array.isArray(item.data?.to) ? item.data.to[0] : void 0);
+    const messageId = item.id || item.messageId || item.data?.email_id || item.MessageID || item.data?.message_id;
+    if (eventType.includes("bounce") || eventType.includes("dropped") || eventType === "failed") {
+      const reason = item.reason || item.Description || item.data?.bounce?.message || "Delivery failure";
+      const isSoft = eventType.includes("soft") || reason.toLowerCase().includes("transient");
+      if (messageId) recordEmailBounce(messageId, reason);
+      if (recipient) {
+        if (isSoft) {
+          await recordSoftBounce(event, recipient);
+        } else {
+          await suppressEmail(event, {
+            email: recipient,
+            reason: "bounce",
+            type: "hard_bounce",
+            source: `webhook:${eventType}`,
+            metadata: { messageId, reason }
+          });
+        }
+      }
+      results.push({ event: "bounce", recipient, processed: true });
+      continue;
+    }
+    if (eventType.includes("complaint") || eventType.includes("spam") || eventType === "spamreport") {
+      if (recipient) {
+        await suppressEmail(event, {
+          email: recipient,
+          reason: "complaint",
+          type: "spam_complaint",
+          source: `webhook:${eventType}`,
+          metadata: { messageId }
+        });
+      }
+      results.push({ event: "complaint", recipient, processed: true });
+      continue;
+    }
+    if (eventType.includes("unsubscribe")) {
+      if (recipient) {
+        await suppressEmail(event, {
+          email: recipient,
+          reason: "unsubscribe",
+          type: "unsubscribe",
+          source: `webhook:${eventType}`,
+          metadata: { messageId }
+        });
+      }
+      results.push({ event: "unsubscribe", recipient, processed: true });
+      continue;
+    }
+    if (eventType.includes("open")) {
+      if (messageId) recordEmailOpen(messageId);
+      results.push({ event: "open", messageId, processed: true });
+      continue;
+    }
+    if (eventType.includes("click")) {
+      const targetUrl = item.url || item.data?.click?.link || item.OriginalLink || "";
+      if (messageId && targetUrl) recordEmailClick(messageId, targetUrl);
+      results.push({ event: "click", messageId, processed: true });
+      continue;
+    }
+    results.push({ event: eventType || "unknown", processed: false });
+  }
+  return { success: true, count: results.length, results };
+});

package/dist/runtime/server/routes/notifications/[id]/read.post.d.ts

@@ -0,0 +1,4 @@
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    ok: boolean;
+}>>;
+export default _default;

package/dist/runtime/server/routes/notifications/[id]/read.post.mjs

@@ -0,0 +1,13 @@
+import { createError, defineEventHandler, getRouterParam } from "nuxt/server";
+import { markNotificationRead } from "../../../utils/notifications.mjs";
+import { getAuthSession } from "../../../utils/session.mjs";
+export default defineEventHandler(async (event) => {
+  const session = await getAuthSession(event);
+  if (!session?.user) {
+    throw createError({ statusCode: 401, message: "Unauthorized" });
+  }
+  const id = getRouterParam(event, "id");
+  if (!id) throw createError({ statusCode: 400, message: "Missing id" });
+  await markNotificationRead(id, session.user.id, event);
+  return { ok: true };
+});

package/dist/runtime/server/routes/notifications/[id].delete.d.ts

@@ -0,0 +1,4 @@
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    ok: boolean;
+}>>;
+export default _default;

package/dist/runtime/server/routes/notifications/[id].delete.mjs

@@ -0,0 +1,13 @@
+import { createError, defineEventHandler, getRouterParam } from "nuxt/server";
+import { deleteNotification } from "../../utils/notifications.mjs";
+import { getAuthSession } from "../../utils/session.mjs";
+export default defineEventHandler(async (event) => {
+  const session = await getAuthSession(event);
+  if (!session?.user) {
+    throw createError({ statusCode: 401, message: "Unauthorized" });
+  }
+  const id = getRouterParam(event, "id");
+  if (!id) throw createError({ statusCode: 400, message: "Missing id" });
+  await deleteNotification(id, session.user.id, event);
+  return { ok: true };
+});

package/dist/runtime/server/routes/notifications/[id].get.d.ts

@@ -0,0 +1,2 @@
+declare const _default: import("nuxt/server").EventHandler<Promise<import("../../../../types").NotificationRecord>>;
+export default _default;

package/dist/runtime/server/routes/notifications/[id].get.mjs

@@ -0,0 +1,15 @@
+import { createError, defineEventHandler, getRouterParam } from "nuxt/server";
+import { getNotifications } from "../../utils/notifications.mjs";
+import { getAuthSession } from "../../utils/session.mjs";
+export default defineEventHandler(async (event) => {
+  const session = await getAuthSession(event);
+  if (!session?.user) {
+    throw createError({ statusCode: 401, message: "Unauthorized" });
+  }
+  const id = getRouterParam(event, "id");
+  if (!id) throw createError({ statusCode: 400, message: "Missing id" });
+  const result = await getNotifications(session.user.id, { limit: 100 }, event);
+  const notification = result.notifications.find((n) => n.id === id);
+  if (!notification) throw createError({ statusCode: 404, message: "Notification not found" });
+  return notification;
+});

package/dist/runtime/server/routes/notifications/index.get.d.ts

@@ -0,0 +1,6 @@
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    notifications: import("../../../../types").NotificationRecord[];
+    total: number;
+    unread: number;
+}>>;
+export default _default;

package/dist/runtime/server/routes/notifications/index.get.mjs

@@ -0,0 +1,18 @@
+import { createError, defineEventHandler, getQuery } from "nuxt/server";
+import { getNotifications } from "../../utils/notifications.mjs";
+import { getAuthSession } from "../../utils/session.mjs";
+export default defineEventHandler(async (event) => {
+  const session = await getAuthSession(event);
+  if (!session?.user) {
+    throw createError({ statusCode: 401, message: "Unauthorized" });
+  }
+  const query = getQuery(event);
+  const limit = Math.min(Number(query.limit) || 20, 100);
+  const offset = Number(query.offset) || 0;
+  const unreadOnly = query.unreadOnly === "true" || query.unreadOnly === "1";
+  return getNotifications(
+    session.user.id,
+    { limit, offset, unreadOnly, tenantId: session.user.tenantId },
+    event
+  );
+});

package/dist/runtime/server/routes/notifications/push/subscribe.post.d.ts

@@ -0,0 +1,4 @@
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    ok: boolean;
+}>>;
+export default _default;

package/dist/runtime/server/routes/notifications/push/subscribe.post.mjs

@@ -0,0 +1,20 @@
+import { createError, defineEventHandler, readBody } from "nuxt/server";
+import { savePushSubscription } from "../../../utils/notifications.mjs";
+import { getAuthSession } from "../../../utils/session.mjs";
+export default defineEventHandler(async (event) => {
+  const session = await getAuthSession(event);
+  if (!session?.user) {
+    throw createError({ statusCode: 401, message: "Unauthorized" });
+  }
+  const body = await readBody(event);
+  if (!body?.endpoint || !body?.keys?.p256dh || !body?.keys?.auth) {
+    throw createError({ statusCode: 400, message: "Invalid push subscription" });
+  }
+  await savePushSubscription(
+    session.user.id,
+    { endpoint: body.endpoint, keys: { p256dh: body.keys.p256dh, auth: body.keys.auth } },
+    session.user.tenantId,
+    event
+  );
+  return { ok: true };
+});

package/dist/runtime/server/routes/notifications/push/unsubscribe.post.d.ts

@@ -0,0 +1,4 @@
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    ok: boolean;
+}>>;
+export default _default;

package/dist/runtime/server/routes/notifications/push/unsubscribe.post.mjs

@@ -0,0 +1,15 @@
+import { createError, defineEventHandler, readBody } from "nuxt/server";
+import { removePushSubscription } from "../../../utils/notifications.mjs";
+import { getAuthSession } from "../../../utils/session.mjs";
+export default defineEventHandler(async (event) => {
+  const session = await getAuthSession(event);
+  if (!session?.user) {
+    throw createError({ statusCode: 401, message: "Unauthorized" });
+  }
+  const body = await readBody(event);
+  if (!body?.endpoint) {
+    throw createError({ statusCode: 400, message: "Missing endpoint" });
+  }
+  await removePushSubscription(body.endpoint, event);
+  return { ok: true };
+});

package/dist/runtime/server/routes/notifications/read-all.post.d.ts

@@ -0,0 +1,4 @@
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    ok: boolean;
+}>>;
+export default _default;

package/dist/runtime/server/routes/notifications/read-all.post.mjs

@@ -0,0 +1,11 @@
+import { createError, defineEventHandler } from "nuxt/server";
+import { markAllNotificationsRead } from "../../utils/notifications.mjs";
+import { getAuthSession } from "../../utils/session.mjs";
+export default defineEventHandler(async (event) => {
+  const session = await getAuthSession(event);
+  if (!session?.user) {
+    throw createError({ statusCode: 401, message: "Unauthorized" });
+  }
+  await markAllNotificationsRead(session.user.id, event);
+  return { ok: true };
+});

package/dist/runtime/server/routes/payments/cancel.post.d.ts

@@ -0,0 +1,7 @@
+/** POST /api/payments/cancel Cancels a subscription at the end of the current period. */
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    success: boolean;
+    subscriptionId: string;
+    status: string;
+}>>;
+export default _default;

package/dist/runtime/server/routes/payments/cancel.post.mjs

@@ -0,0 +1,9 @@
+import { defineEventHandler, readBody, createError } from "nuxt/server";
+import { cancelSubscription } from "../../utils/payments.mjs";
+export default defineEventHandler(async (event) => {
+  const body = await readBody(event).catch(() => ({})) || {};
+  if (!body.subscriptionId) {
+    throw createError({ statusCode: 400, message: "subscriptionId is required" });
+  }
+  return cancelSubscription(event, body.subscriptionId);
+});

package/dist/runtime/server/routes/payments/change-plan.post.d.ts

@@ -0,0 +1,7 @@
+/** POST /api/payments/change-plan Swaps a subscription to a new price/plan with proration. */
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    success: boolean;
+    subscriptionId: string;
+    planId: string;
+}>>;
+export default _default;

package/dist/runtime/server/routes/payments/change-plan.post.mjs

@@ -0,0 +1,12 @@
+import { defineEventHandler, readBody, createError } from "nuxt/server";
+import { changePlan } from "../../utils/payments.mjs";
+export default defineEventHandler(async (event) => {
+  const body = await readBody(event).catch(() => ({})) || {};
+  if (!body.subscriptionId) {
+    throw createError({ statusCode: 400, message: "subscriptionId is required" });
+  }
+  if (!body.newPriceId) {
+    throw createError({ statusCode: 400, message: "newPriceId is required" });
+  }
+  return changePlan(event, body.subscriptionId, body.newPriceId);
+});

package/dist/runtime/server/routes/payments/checkout.post.d.ts

@@ -0,0 +1,9 @@
+/**
+ * POST /api/payments/checkout Generates a checkout session and returns `{ id, url }` to redirect
+ * the user to checkout.
+ */
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    id: string;
+    url: string;
+}>>;
+export default _default;

package/dist/runtime/server/routes/payments/checkout.post.mjs

@@ -0,0 +1,16 @@
+import { defineEventHandler, readBody } from "nuxt/server";
+import { createCheckoutSession } from "../../utils/payments.mjs";
+export default defineEventHandler(async (event) => {
+  const body = await readBody(event) || {};
+  const session = await createCheckoutSession(event, {
+    planId: body.planId,
+    priceId: body.priceId,
+    mode: body.mode,
+    trialDays: body.trialDays,
+    customerEmail: body.customerEmail,
+    successUrl: body.successUrl,
+    cancelUrl: body.cancelUrl,
+    metadata: body.metadata
+  });
+  return session;
+});

package/dist/runtime/server/routes/payments/pause.post.d.ts

@@ -0,0 +1,7 @@
+/** POST /api/payments/pause Pauses collection on a subscription. */
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    success: boolean;
+    subscriptionId: string;
+    status: string;
+}>>;
+export default _default;

package/dist/runtime/server/routes/payments/pause.post.mjs

@@ -0,0 +1,9 @@
+import { defineEventHandler, readBody, createError } from "nuxt/server";
+import { pauseSubscription } from "../../utils/payments.mjs";
+export default defineEventHandler(async (event) => {
+  const body = await readBody(event).catch(() => ({})) || {};
+  if (!body.subscriptionId) {
+    throw createError({ statusCode: 400, message: "subscriptionId is required" });
+  }
+  return pauseSubscription(event, body.subscriptionId);
+});

package/dist/runtime/server/routes/payments/portal.post.d.ts

@@ -0,0 +1,5 @@
+/** POST /api/payments/portal Generates a Customer Billing Portal session and returns `{ url }`. */
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    url: string;
+}>>;
+export default _default;

package/dist/runtime/server/routes/payments/portal.post.mjs

@@ -0,0 +1,9 @@
+import { defineEventHandler, readBody } from "nuxt/server";
+import { createCustomerPortalSession } from "../../utils/payments.mjs";
+export default defineEventHandler(async (event) => {
+  const body = await readBody(event).catch(() => ({})) || {};
+  const session = await createCustomerPortalSession(event, {
+    returnUrl: body.returnUrl
+  });
+  return session;
+});

package/dist/runtime/server/routes/payments/subscription.get.d.ts

@@ -0,0 +1,6 @@
+/** GET /api/payments/subscription Returns the caller's active subscription details from D1. */
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    subscription: import("../../..").QarpeoSubscription | null;
+    isSubscribed: boolean;
+}>>;
+export default _default;

package/dist/runtime/server/routes/payments/subscription.get.mjs

@@ -0,0 +1,9 @@
+import { defineEventHandler } from "nuxt/server";
+import { getSubscription } from "../../utils/payments.mjs";
+export default defineEventHandler(async (event) => {
+  const subscription = await getSubscription(event);
+  return {
+    subscription,
+    isSubscribed: Boolean(subscription && ["active", "trialing"].includes(subscription.status))
+  };
+});

package/dist/runtime/server/routes/payments/usage.get.d.ts

@@ -0,0 +1,12 @@
+/**
+ * GET /api/payments/usage
+ * Queries metered billing usage summary and consumption records.
+ * Query params:
+ *   - eventName: optional filter for a specific metric name
+ *   - since: optional start timestamp in milliseconds
+ *   - until: optional end timestamp in milliseconds
+ *   - userId: optional specific userId override (server-to-server)
+ *   - orgId: optional specific orgId override
+ */
+declare const _default: import("nuxt/server").EventHandler<Promise<import("../../../../types").UsageSummary>>;
+export default _default;

package/dist/runtime/server/routes/payments/usage.get.mjs

@@ -0,0 +1,18 @@
+import { defineEventHandler, getQuery } from "nuxt/server";
+import { getUsageSummary } from "../../utils/payments.mjs";
+export default defineEventHandler(async (event) => {
+  const query = getQuery(event);
+  const eventName = query.eventName ? String(query.eventName) : void 0;
+  const since = query.since ? Number(query.since) : void 0;
+  const until = query.until ? Number(query.until) : void 0;
+  const userId = query.userId ? String(query.userId) : void 0;
+  const orgId = query.orgId ? String(query.orgId) : void 0;
+  const summary = await getUsageSummary(event, {
+    eventName,
+    since,
+    until,
+    userId,
+    orgId
+  });
+  return summary;
+});

package/dist/runtime/server/routes/payments/usage.post.d.ts

@@ -0,0 +1,6 @@
+/**
+ * POST /api/payments/usage
+ * Records a metered usage event (API requests, storage bytes, compute units, etc.)
+ */
+declare const _default: import("nuxt/server").EventHandler<Promise<import("../../../../types").MeterUsageResult>>;
+export default _default;

package/dist/runtime/server/routes/payments/usage.post.mjs

@@ -0,0 +1,24 @@
+import { defineEventHandler, readBody, createError } from "nuxt/server";
+import { reportUsage } from "../../utils/payments.mjs";
+export default defineEventHandler(async (event) => {
+  const body = await readBody(event);
+  if (!body || !body.eventName) {
+    throw createError({
+      statusCode: 400,
+      statusMessage: "Bad Request",
+      message: "Missing required property: eventName"
+    });
+  }
+  const result = await reportUsage(event, {
+    eventName: body.eventName,
+    quantity: typeof body.quantity === "number" ? body.quantity : 1,
+    action: body.action || "increment",
+    userId: body.userId,
+    orgId: body.orgId,
+    customerId: body.customerId,
+    subscriptionId: body.subscriptionId,
+    metadata: body.metadata,
+    timestamp: body.timestamp
+  });
+  return result;
+});

package/dist/runtime/server/routes/payments/webhook.post.d.ts

@@ -0,0 +1,14 @@
+/**
+ * POST /api/payments/webhook Receives and processes webhooks from Stripe, Lemon Squeezy, or Polar.
+ * Verifies signatures using native Web Crypto and keeps D1 subscription records in sync.
+ */
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    success: boolean;
+    eventType?: string;
+    received: boolean;
+} | {
+    received: true;
+    skipped: true;
+    reason: "duplicate";
+}>>;
+export default _default;

package/dist/runtime/server/routes/payments/webhook.post.mjs

@@ -0,0 +1,21 @@
+import { defineEventHandler, createError } from "nuxt/server";
+import { processPaymentWebhook } from "../../utils/payments.mjs";
+export default defineEventHandler(async (event) => {
+  let rawBody;
+  if (event?.req?.text) {
+    rawBody = await event.req.text();
+  } else if (event?.request?.text) {
+    rawBody = await event.request.clone().text();
+  } else if (event?.node?.req) {
+    const chunks = [];
+    for await (const chunk of event.node.req) {
+      chunks.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
+    }
+    rawBody = Buffer.concat(chunks).toString("utf8");
+  }
+  if (!rawBody) {
+    throw createError({ statusCode: 400, message: "Empty request body" });
+  }
+  const result = await processPaymentWebhook(event, rawBody);
+  return { received: true, ...result };
+});

package/dist/runtime/server/routes/realtime/broadcast.post.d.ts

@@ -0,0 +1,4 @@
+declare const _default: import("nuxt/server").EventHandler<Promise<{
+    ok: boolean;
+}>>;
+export default _default;

package/dist/runtime/server/routes/realtime/broadcast.post.mjs

@@ -0,0 +1,26 @@
+import { defineEventHandler, readBody, createError } from "nuxt/server";
+import { getAuthContext } from "../../utils/context.mjs";
+import { broadcastToRoom } from "../../utils/realtime.mjs";
+export default defineEventHandler(async (event) => {
+  const auth = await getAuthContext(event).catch(() => null);
+  if (!auth?.user?.id) {
+    throw createError({
+      statusCode: 401,
+      statusMessage: "Unauthorized",
+      message: "Authentication required to broadcast to realtime rooms."
+    });
+  }
+  const body = await readBody(event);
+  if (!body || !body.room || !body.event) {
+    throw createError({
+      statusCode: 400,
+      statusMessage: "Missing required fields: room and event are required."
+    });
+  }
+  const sender = auth?.user?.name || auth?.user?.email || body.sender || "server";
+  await broadcastToRoom(event, body.room, body.event, body.payload, {
+    sender,
+    excludePeerId: body.excludePeerId
+  });
+  return { ok: true };
+});