qarpeo 0.0.0-alpha.10

package/dist/runtime/server/utils/payments.mjs

@@ -0,0 +1,1067 @@
+import { useNitroApp } from "nitro/app";
+import { createError, useRuntimeConfig, getRequestHeader } from "nuxt/server";
+import { getD1Binding } from "../../db.mjs";
+import { getQarpeoConfig } from "./config.mjs";
+import { getAuthContext } from "./context.mjs";
+const STRIPE_API_VERSION = "2024-06-20";
+function getPaymentsDb(event) {
+  const bindingName = globalThis.process?.env?.QARPEO_DEFAULT_DB_BINDING || "DB";
+  return getD1Binding(bindingName, event);
+}
+function nanoid(size = 21) {
+  const chars = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
+  const bytes = crypto.getRandomValues(new Uint8Array(size));
+  return Array.from(bytes, (b) => chars[b % chars.length]).join("");
+}
+export function getPaymentsConfig(event) {
+  const cfg = getQarpeoConfig(event).payments || {};
+  const cfEnv = event?.context?.cloudflare?.env || {};
+  const provider = cfg.provider || "stripe";
+  let secretKey = cfg.secretKey || "";
+  let webhookSecret = cfg.webhookSecret || "";
+  if (!secretKey) {
+    if (provider === "stripe") {
+      secretKey = process.env.STRIPE_SECRET_KEY || cfEnv.STRIPE_SECRET_KEY || "";
+    } else if (provider === "lemonsqueezy") {
+      secretKey = process.env.LEMONSQUEEZY_API_KEY || cfEnv.LEMONSQUEEZY_API_KEY || "";
+    } else if (provider === "polar") {
+      secretKey = process.env.POLAR_ACCESS_TOKEN || cfEnv.POLAR_ACCESS_TOKEN || "";
+    }
+  }
+  if (!webhookSecret) {
+    if (provider === "stripe") {
+      webhookSecret = process.env.STRIPE_WEBHOOK_SECRET || cfEnv.STRIPE_WEBHOOK_SECRET || "";
+    } else if (provider === "lemonsqueezy") {
+      webhookSecret = process.env.LEMONSQUEEZY_WEBHOOK_SECRET || cfEnv.LEMONSQUEEZY_WEBHOOK_SECRET || "";
+    } else if (provider === "polar") {
+      webhookSecret = process.env.POLAR_WEBHOOK_SECRET || cfEnv.POLAR_WEBHOOK_SECRET || "";
+    }
+  }
+  return {
+    prefix: "/api/payments",
+    portalReturnUrl: "/",
+    ...cfg,
+    provider,
+    secretKey,
+    webhookSecret
+  };
+}
+let tablesEnsured = false;
+export async function ensurePaymentsTables(event) {
+  if (tablesEnsured) return;
+  const db = getPaymentsDb(event);
+  const statements = [
+    `CREATE TABLE IF NOT EXISTS _qarpeo_customers (
+      id TEXT PRIMARY KEY,
+      user_id TEXT NOT NULL,
+      org_id TEXT,
+      provider TEXT NOT NULL DEFAULT 'stripe',
+      customer_id TEXT NOT NULL,
+      email TEXT NOT NULL,
+      name TEXT,
+      metadata_json TEXT DEFAULT '{}',
+      created_at INTEGER NOT NULL,
+      updated_at INTEGER NOT NULL
+    );`,
+    `CREATE TABLE IF NOT EXISTS _qarpeo_subscriptions (
+      id TEXT PRIMARY KEY,
+      customer_id TEXT NOT NULL,
+      user_id TEXT NOT NULL,
+      org_id TEXT,
+      provider TEXT NOT NULL DEFAULT 'stripe',
+      subscription_id TEXT NOT NULL UNIQUE,
+      plan_id TEXT NOT NULL,
+      price_id TEXT NOT NULL,
+      status TEXT NOT NULL,
+      quantity INTEGER NOT NULL DEFAULT 1,
+      cancel_at_period_end INTEGER NOT NULL DEFAULT 0,
+      current_period_start INTEGER NOT NULL,
+      current_period_end INTEGER NOT NULL,
+      trial_end INTEGER,
+      canceled_at INTEGER,
+      metadata_json TEXT DEFAULT '{}',
+      created_at INTEGER NOT NULL,
+      updated_at INTEGER NOT NULL
+    );`,
+    `CREATE TABLE IF NOT EXISTS _qarpeo_webhook_events (
+      event_id TEXT PRIMARY KEY,
+      provider TEXT NOT NULL,
+      event_type TEXT,
+      processed_at INTEGER NOT NULL
+    );`,
+    `CREATE INDEX IF NOT EXISTS _qarpeo_customers_user_idx ON _qarpeo_customers(user_id);`,
+    `CREATE UNIQUE INDEX IF NOT EXISTS _qarpeo_customers_customer_idx ON _qarpeo_customers(customer_id);`,
+    `CREATE INDEX IF NOT EXISTS _qarpeo_customers_org_idx ON _qarpeo_customers(org_id);`,
+    `CREATE INDEX IF NOT EXISTS _qarpeo_subs_user_idx ON _qarpeo_subscriptions(user_id);`,
+    `CREATE INDEX IF NOT EXISTS _qarpeo_subs_subscription_idx ON _qarpeo_subscriptions(subscription_id);`,
+    `CREATE INDEX IF NOT EXISTS _qarpeo_subs_customer_idx ON _qarpeo_subscriptions(customer_id);`,
+    `CREATE INDEX IF NOT EXISTS _qarpeo_subs_status_idx ON _qarpeo_subscriptions(status);`,
+    `CREATE INDEX IF NOT EXISTS _qarpeo_subs_org_idx ON _qarpeo_subscriptions(org_id);`,
+    `CREATE INDEX IF NOT EXISTS _qarpeo_webhook_events_event_idx ON _qarpeo_webhook_events(event_id);`,
+    `CREATE TABLE IF NOT EXISTS _qarpeo_usage_records (
+      id TEXT PRIMARY KEY,
+      user_id TEXT,
+      org_id TEXT,
+      customer_id TEXT,
+      subscription_id TEXT,
+      event_name TEXT NOT NULL,
+      quantity REAL NOT NULL DEFAULT 1,
+      action TEXT NOT NULL DEFAULT 'increment',
+      metadata_json TEXT DEFAULT '{}',
+      timestamp INTEGER NOT NULL,
+      created_at INTEGER NOT NULL
+    );`,
+    `CREATE INDEX IF NOT EXISTS _qarpeo_usage_user_idx ON _qarpeo_usage_records(user_id);`,
+    `CREATE INDEX IF NOT EXISTS _qarpeo_usage_sub_idx ON _qarpeo_usage_records(subscription_id);`,
+    `CREATE INDEX IF NOT EXISTS _qarpeo_usage_event_idx ON _qarpeo_usage_records(event_name);`,
+    `CREATE INDEX IF NOT EXISTS _qarpeo_usage_timestamp_idx ON _qarpeo_usage_records(timestamp);`
+  ];
+  for (const rawSql of statements) {
+    const sql = rawSql.replace(/\s+/g, " ").trim();
+    try {
+      await db.exec(sql);
+    } catch (err) {
+      console.warn("[qarpeo:payments] ensurePaymentsTables warning:", err);
+    }
+  }
+  tablesEnsured = true;
+}
+import { timingSafeEqualString } from "./crypto.mjs";
+async function computeHmacSha256(keyStr, dataStr) {
+  const encoder = new TextEncoder();
+  const key = await crypto.subtle.importKey(
+    "raw",
+    encoder.encode(keyStr),
+    { name: "HMAC", hash: "SHA-256" },
+    false,
+    ["sign"]
+  );
+  const sig = await crypto.subtle.sign("HMAC", key, encoder.encode(dataStr));
+  return Array.from(new Uint8Array(sig)).map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+export async function verifyStripeSignature(rawBody, signatureHeader, secret, toleranceSec = 300) {
+  if (!signatureHeader || !secret) return false;
+  const parts = signatureHeader.split(",");
+  let timestamp = "";
+  const signatures = [];
+  for (const p of parts) {
+    const [k, v] = p.split("=");
+    if (k === "t") timestamp = v;
+    if (k === "v1") signatures.push(v);
+  }
+  if (!timestamp || !signatures.length) return false;
+  const now = Math.floor(Date.now() / 1e3);
+  const tsNum = parseInt(timestamp, 10);
+  if (isNaN(tsNum) || Math.abs(now - tsNum) > toleranceSec) {
+    return false;
+  }
+  const payload = `${timestamp}.${rawBody}`;
+  const expectedSignature = await computeHmacSha256(secret, payload);
+  return signatures.some((sig) => timingSafeEqualString(sig, expectedSignature));
+}
+export async function verifyLemonSqueezySignature(rawBody, signatureHeader, secret) {
+  if (!signatureHeader || !secret) return false;
+  const expected = await computeHmacSha256(secret, rawBody);
+  return timingSafeEqualString(signatureHeader, expected);
+}
+export async function verifyPolarSignature(rawBody, signatureHeader, secret) {
+  if (!signatureHeader || !secret) return false;
+  const expected = await computeHmacSha256(secret, rawBody);
+  return timingSafeEqualString(signatureHeader, expected);
+}
+export async function verifyPaddleSignature(rawBody, signatureHeader, secret) {
+  if (!signatureHeader || !secret) return false;
+  const parts = {};
+  for (const item of signatureHeader.split(";")) {
+    const idx = item.indexOf("=");
+    if (idx !== -1) {
+      parts[item.slice(0, idx).trim()] = item.slice(idx + 1).trim();
+    }
+  }
+  const ts = parts.ts;
+  const h1 = parts.h1;
+  if (!ts || !h1) return false;
+  const payload = `${ts}:${rawBody}`;
+  const expected = await computeHmacSha256(secret, payload);
+  return timingSafeEqualString(h1, expected);
+}
+export async function processPaymentWebhook(event, rawBody) {
+  await ensurePaymentsTables(event);
+  const db = getPaymentsDb(event);
+  const config = getPaymentsConfig(event);
+  const provider = config.provider;
+  let isValid = false;
+  if (provider === "stripe") {
+    const sig = getRequestHeader(event, "stripe-signature");
+    isValid = await verifyStripeSignature(rawBody, sig, config.webhookSecret);
+  } else if (provider === "lemonsqueezy") {
+    const sig = getRequestHeader(event, "x-signature");
+    isValid = await verifyLemonSqueezySignature(rawBody, sig, config.webhookSecret);
+  } else if (provider === "polar") {
+    const sig = getRequestHeader(event, "webhook-signature");
+    isValid = await verifyPolarSignature(rawBody, sig, config.webhookSecret);
+  }
+  if (!isValid) {
+    throw createError({
+      statusCode: 400,
+      statusMessage: "Bad Request",
+      message: "Invalid webhook signature"
+    });
+  }
+  let payload;
+  try {
+    payload = JSON.parse(rawBody);
+  } catch {
+    throw createError({
+      statusCode: 400,
+      statusMessage: "Bad Request",
+      message: "Invalid JSON payload"
+    });
+  }
+  const now = Date.now();
+  let eventType = "";
+  let eventData = null;
+  let affectedSubId = null;
+  let eventId = "";
+  if (provider === "stripe") {
+    eventId = payload.id || "";
+  } else if (provider === "lemonsqueezy") {
+    eventId = String(payload.meta?.event_id || payload.meta?.id || payload.data?.id || "");
+  } else if (provider === "polar") {
+    eventId = payload.id || "";
+  }
+  if (provider === "lemonsqueezy") {
+    eventType = payload.meta?.event_name || "";
+  } else {
+    eventType = payload.type || "";
+  }
+  if (eventId) {
+    const dedupRes = await db.prepare(
+      "INSERT OR IGNORE INTO _qarpeo_webhook_events (event_id, provider, event_type, processed_at) VALUES (?, ?, ?, ?)"
+    ).bind(eventId, provider, eventType || null, now).run();
+    if (!dedupRes?.meta?.changes) {
+      return { received: true, skipped: true, reason: "duplicate" };
+    }
+  }
+  if (provider === "stripe") {
+    eventType = payload.type;
+    const obj = payload.data?.object || {};
+    eventData = obj;
+    switch (eventType) {
+      case "checkout.session.completed": {
+        const customerId = obj.customer;
+        const customerEmail = obj.customer_details?.email || obj.customer_email || "";
+        const customerName = obj.customer_details?.name || null;
+        const userId = obj.metadata?.userId || obj.client_reference_id;
+        const orgId = obj.metadata?.orgId || null;
+        if (userId && customerId) {
+          await db.prepare(
+            `INSERT INTO _qarpeo_customers (id, user_id, org_id, provider, customer_id, email, name, metadata_json, created_at, updated_at)
+               VALUES (?, ?, ?, 'stripe', ?, ?, ?, ?, ?, ?)
+               ON CONFLICT(customer_id) DO UPDATE SET email = excluded.email, name = excluded.name, org_id = excluded.org_id, metadata_json = excluded.metadata_json, updated_at = excluded.updated_at`
+          ).bind(
+            nanoid(),
+            userId,
+            orgId,
+            customerId,
+            customerEmail,
+            customerName,
+            JSON.stringify(obj.metadata || {}),
+            now,
+            now
+          ).run();
+        }
+        const subId = obj.subscription;
+        if (subId) {
+          affectedSubId = subId;
+          const planId = obj.metadata?.planId || "default";
+          await db.prepare(
+            `INSERT INTO _qarpeo_subscriptions
+                (id, customer_id, user_id, org_id, provider, subscription_id, plan_id, price_id, status, quantity, cancel_at_period_end, current_period_start, current_period_end, trial_end, canceled_at, metadata_json, created_at, updated_at)
+               VALUES (?, ?, ?, ?, 'stripe', ?, ?, '', 'active', 1, 0, ?, ?, null, null, ?, ?, ?)
+               ON CONFLICT(subscription_id) DO NOTHING`
+          ).bind(
+            nanoid(),
+            customerId || "",
+            userId || "",
+            orgId,
+            subId,
+            planId,
+            now,
+            now + 30 * 864e5,
+            JSON.stringify(obj.metadata || {}),
+            now,
+            now
+          ).run();
+        }
+        break;
+      }
+      case "customer.subscription.created":
+      case "customer.subscription.updated": {
+        const subId = obj.id;
+        affectedSubId = subId;
+        const customerId = obj.customer;
+        const status = obj.status;
+        const priceId = obj.items?.data?.[0]?.price?.id || obj.plan?.id || "";
+        const planId = obj.metadata?.planId || obj.items?.data?.[0]?.price?.lookup_key || priceId;
+        const quantity = obj.items?.data?.[0]?.quantity || obj.quantity || 1;
+        const cancelAtPeriodEnd = obj.cancel_at_period_end ? 1 : 0;
+        const periodStart = obj.current_period_start ? obj.current_period_start * 1e3 : now;
+        const periodEnd = obj.current_period_end ? obj.current_period_end * 1e3 : now + 30 * 864e5;
+        const trialEnd = obj.trial_end ? obj.trial_end * 1e3 : null;
+        const canceledAt = obj.canceled_at ? obj.canceled_at * 1e3 : null;
+        const cust = await db.prepare("SELECT user_id, org_id FROM _qarpeo_customers WHERE customer_id = ? LIMIT 1").bind(customerId).first();
+        const userId = cust?.user_id || obj.metadata?.userId || "";
+        const orgId = cust?.org_id || obj.metadata?.orgId || null;
+        await db.prepare(
+          `INSERT INTO _qarpeo_subscriptions
+              (id, customer_id, user_id, org_id, provider, subscription_id, plan_id, price_id, status, quantity, cancel_at_period_end, current_period_start, current_period_end, trial_end, canceled_at, metadata_json, created_at, updated_at)
+             VALUES (?, ?, ?, ?, 'stripe', ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+             ON CONFLICT(subscription_id) DO UPDATE SET
+               plan_id = excluded.plan_id, price_id = excluded.price_id, status = excluded.status,
+               quantity = excluded.quantity, cancel_at_period_end = excluded.cancel_at_period_end,
+               current_period_start = excluded.current_period_start, current_period_end = excluded.current_period_end,
+               trial_end = excluded.trial_end, canceled_at = excluded.canceled_at,
+               metadata_json = excluded.metadata_json, updated_at = excluded.updated_at`
+        ).bind(
+          nanoid(),
+          customerId,
+          userId,
+          orgId,
+          subId,
+          planId,
+          priceId,
+          status,
+          quantity,
+          cancelAtPeriodEnd,
+          periodStart,
+          periodEnd,
+          trialEnd,
+          canceledAt,
+          JSON.stringify(obj.metadata || {}),
+          now,
+          now
+        ).run();
+        break;
+      }
+      case "customer.subscription.deleted": {
+        const subId = obj.id;
+        affectedSubId = subId;
+        await db.prepare(
+          "UPDATE _qarpeo_subscriptions SET status = 'canceled', canceled_at = ?, updated_at = ? WHERE subscription_id = ?"
+        ).bind(now, now, subId).run();
+        break;
+      }
+      case "invoice.payment_succeeded": {
+        const subId = obj.subscription;
+        if (subId) {
+          affectedSubId = subId;
+          await db.prepare(
+            "UPDATE _qarpeo_subscriptions SET status = 'active', updated_at = ? WHERE subscription_id = ?"
+          ).bind(now, subId).run();
+        }
+        break;
+      }
+      case "invoice.payment_failed": {
+        const subId = obj.subscription;
+        if (subId) {
+          affectedSubId = subId;
+          await db.prepare(
+            "UPDATE _qarpeo_subscriptions SET status = 'past_due', updated_at = ? WHERE subscription_id = ?"
+          ).bind(now, subId).run();
+        }
+        break;
+      }
+    }
+  }
+  if (provider === "lemonsqueezy") {
+    eventType = payload.meta?.event_name;
+    const data = payload.data?.attributes || {};
+    eventData = data;
+    const subId = String(payload.data?.id || "");
+    affectedSubId = subId;
+    const customerId = String(data.customer_id || "");
+    const userEmail = data.user_email || "";
+    const customData = payload.meta?.custom_data || {};
+    const userId = customData.user_id || customData.userId || "";
+    const orgId = customData.org_id || customData.orgId || null;
+    const planId = String(data.variant_id || "");
+    if (eventType === "subscription_created" || eventType === "subscription_updated" || eventType === "subscription_resumed") {
+      const status = data.status === "active" ? "active" : data.status === "on_trial" ? "trialing" : data.status === "past_due" ? "past_due" : "canceled";
+      const periodStart = data.renews_at ? new Date(data.created_at).getTime() : now;
+      const periodEnd = data.renews_at ? new Date(data.renews_at).getTime() : now + 30 * 864e5;
+      const cancelAtPeriodEnd = data.cancelled ? 1 : 0;
+      if (customerId && userId) {
+        await db.prepare(
+          "INSERT INTO _qarpeo_customers (id, user_id, org_id, provider, customer_id, email, name, metadata_json, created_at, updated_at) VALUES (?, ?, ?, 'lemonsqueezy', ?, ?, ?, '{}', ?, ?) ON CONFLICT(customer_id) DO UPDATE SET email = excluded.email, name = excluded.name, updated_at = excluded.updated_at"
+        ).bind(nanoid(), userId, orgId, customerId, userEmail, data.user_name || null, now, now).run();
+      }
+      await db.prepare(
+        `INSERT INTO _qarpeo_subscriptions (id, customer_id, user_id, org_id, provider, subscription_id, plan_id, price_id, status, quantity, cancel_at_period_end, current_period_start, current_period_end, trial_end, canceled_at, metadata_json, created_at, updated_at)
+           VALUES (?, ?, ?, ?, 'lemonsqueezy', ?, ?, ?, ?, 1, ?, ?, ?, null, null, '{}', ?, ?)
+           ON CONFLICT(subscription_id) DO UPDATE SET status = excluded.status, cancel_at_period_end = excluded.cancel_at_period_end, current_period_start = excluded.current_period_start, current_period_end = excluded.current_period_end, updated_at = excluded.updated_at`
+      ).bind(
+        nanoid(),
+        customerId,
+        userId,
+        orgId,
+        subId,
+        planId,
+        planId,
+        status,
+        cancelAtPeriodEnd,
+        periodStart,
+        periodEnd,
+        now,
+        now
+      ).run();
+    } else if (eventType === "subscription_cancelled" || eventType === "subscription_expired") {
+      await db.prepare(
+        "UPDATE _qarpeo_subscriptions SET status = 'canceled', canceled_at = ?, updated_at = ? WHERE subscription_id = ?"
+      ).bind(now, now, subId).run();
+    }
+  }
+  if (provider === "polar") {
+    eventType = payload.type;
+    const data = payload.data || {};
+    eventData = data;
+    const subId = data.id;
+    affectedSubId = subId;
+    const customerId = data.customer_id || data.user_id || "";
+    const userId = data.metadata?.userId || data.user?.id || "";
+    const orgId = data.metadata?.orgId || null;
+    const priceId = data.price_id || data.product_id || "";
+    if (eventType === "subscription.created" || eventType === "subscription.updated" || eventType === "subscription.active") {
+      const status = data.status === "active" ? "active" : data.status === "canceled" ? "canceled" : "past_due";
+      const periodStart = data.current_period_start ? new Date(data.current_period_start).getTime() : now;
+      const periodEnd = data.current_period_end ? new Date(data.current_period_end).getTime() : now + 30 * 864e5;
+      await db.prepare(
+        `INSERT INTO _qarpeo_subscriptions (id, customer_id, user_id, org_id, provider, subscription_id, plan_id, price_id, status, quantity, cancel_at_period_end, current_period_start, current_period_end, trial_end, canceled_at, metadata_json, created_at, updated_at)
+           VALUES (?, ?, ?, ?, 'polar', ?, ?, ?, ?, 1, 0, ?, ?, null, null, '{}', ?, ?)
+           ON CONFLICT(subscription_id) DO UPDATE SET status = excluded.status, current_period_start = excluded.current_period_start, current_period_end = excluded.current_period_end, updated_at = excluded.updated_at`
+      ).bind(
+        nanoid(),
+        customerId,
+        userId,
+        orgId,
+        subId,
+        priceId,
+        priceId,
+        status,
+        periodStart,
+        periodEnd,
+        now,
+        now
+      ).run();
+    } else if (eventType === "subscription.canceled" || eventType === "subscription.revoked") {
+      await db.prepare(
+        "UPDATE _qarpeo_subscriptions SET status = 'canceled', canceled_at = ?, updated_at = ? WHERE subscription_id = ?"
+      ).bind(now, now, subId).run();
+    }
+  }
+  if (provider === "paddle") {
+    eventType = payload.event_type || payload.type || "";
+    const data = payload.data || {};
+    eventData = data;
+    const subId = String(data.id || "");
+    affectedSubId = subId;
+    const customerId = String(data.customer_id || "");
+    const customData = data.custom_data || {};
+    const userId = customData.userId || customData.user_id || "";
+    const orgId = customData.orgId || customData.org_id || null;
+    const priceId = data.items?.[0]?.price?.id || "";
+    const planId = customData.planId || priceId;
+    if (eventType === "subscription.created" || eventType === "subscription.updated" || eventType === "subscription.activated" || eventType === "subscription.resumed") {
+      const status = data.status === "active" ? "active" : data.status === "trialing" ? "trialing" : data.status === "past_due" ? "past_due" : data.status === "paused" ? "paused" : "canceled";
+      const periodStart = data.current_billing_period?.starts_at ? new Date(data.current_billing_period.starts_at).getTime() : now;
+      const periodEnd = data.current_billing_period?.ends_at ? new Date(data.current_billing_period.ends_at).getTime() : now + 30 * 864e5;
+      const cancelAtPeriodEnd = data.scheduled_change?.action === "cancel" ? 1 : 0;
+      const quantity = data.items?.[0]?.quantity || 1;
+      if (customerId && userId) {
+        await db.prepare(
+          `INSERT INTO _qarpeo_customers (id, user_id, org_id, provider, customer_id, email, name, metadata_json, created_at, updated_at)
+             VALUES (?, ?, ?, 'paddle', ?, ?, ?, ?, ?, ?)
+             ON CONFLICT(customer_id) DO UPDATE SET org_id = excluded.org_id, metadata_json = excluded.metadata_json, updated_at = excluded.updated_at`
+        ).bind(
+          nanoid(),
+          userId,
+          orgId,
+          customerId,
+          customData.email || "",
+          customData.name || null,
+          JSON.stringify(customData),
+          now,
+          now
+        ).run();
+      }
+      await db.prepare(
+        `INSERT INTO _qarpeo_subscriptions
+            (id, customer_id, user_id, org_id, provider, subscription_id, plan_id, price_id, status, quantity, cancel_at_period_end, current_period_start, current_period_end, trial_end, canceled_at, metadata_json, created_at, updated_at)
+           VALUES (?, ?, ?, ?, 'paddle', ?, ?, ?, ?, ?, ?, ?, ?, null, null, ?, ?, ?)
+           ON CONFLICT(subscription_id) DO UPDATE SET
+             plan_id = excluded.plan_id, price_id = excluded.price_id, status = excluded.status,
+             quantity = excluded.quantity, cancel_at_period_end = excluded.cancel_at_period_end,
+             current_period_start = excluded.current_period_start, current_period_end = excluded.current_period_end,
+             metadata_json = excluded.metadata_json, updated_at = excluded.updated_at`
+      ).bind(
+        nanoid(),
+        customerId,
+        userId,
+        orgId,
+        subId,
+        planId,
+        priceId,
+        status,
+        quantity,
+        cancelAtPeriodEnd,
+        periodStart,
+        periodEnd,
+        JSON.stringify(customData),
+        now,
+        now
+      ).run();
+    } else if (eventType === "subscription.canceled" || eventType === "subscription.past_due") {
+      const newStatus = eventType === "subscription.past_due" ? "past_due" : "canceled";
+      await db.prepare(
+        "UPDATE _qarpeo_subscriptions SET status = ?, canceled_at = ?, updated_at = ? WHERE subscription_id = ?"
+      ).bind(newStatus, newStatus === "canceled" ? now : null, now, subId).run();
+    }
+  }
+  let syncedSubscription = null;
+  if (affectedSubId) {
+    try {
+      const subRow = await db.prepare("SELECT * FROM _qarpeo_subscriptions WHERE subscription_id = ? LIMIT 1").bind(affectedSubId).first();
+      if (subRow) {
+        syncedSubscription = rowToSubscription(subRow);
+      }
+    } catch {
+    }
+  }
+  try {
+    const nitroApp = useNitroApp();
+    await nitroApp.hooks?.callHook("qarpeo:payments:webhook", {
+      event,
+      type: eventType,
+      data: eventData,
+      subscription: syncedSubscription,
+      provider
+    });
+  } catch (hookErr) {
+    console.warn(
+      "[qarpeo:payments] Error calling qarpeo:payments:webhook hook:",
+      hookErr?.message || hookErr
+    );
+  }
+  return { success: true, eventType };
+}
+export async function createCheckoutSession(event, options) {
+  await ensurePaymentsTables(event);
+  const db = getPaymentsDb(event);
+  const config = getPaymentsConfig(event);
+  const auth = await getAuthContext(event);
+  const user = auth?.user;
+  if (!config.secretKey) {
+    throw createError({
+      statusCode: 500,
+      statusMessage: "Internal Server Error",
+      message: "Payment provider secret key is not configured (STRIPE_SECRET_KEY)"
+    });
+  }
+  let priceId = options.priceId;
+  const planId = options.planId || "default";
+  if (!priceId && config.plans && config.plans[planId]) {
+    priceId = config.plans[planId].priceId;
+  }
+  if (!priceId) {
+    throw createError({
+      statusCode: 400,
+      message: `Could not resolve price ID for plan "${planId}"`
+    });
+  }
+  const siteUrl = useRuntimeConfig().public?.siteUrl || "http://localhost:3000";
+  const successUrl = options.successUrl || config.checkoutUrls?.success || `${siteUrl}/?checkout=success`;
+  const cancelUrl = options.cancelUrl || config.checkoutUrls?.cancel || `${siteUrl}/?checkout=cancelled`;
+  const metadata = {
+    planId,
+    ...options.metadata || {}
+  };
+  if (user?.id) metadata.userId = user.id;
+  if (auth?.organization?.id) metadata.orgId = auth.organization.id;
+  if (config.provider === "stripe") {
+    let customerId = null;
+    if (user?.id) {
+      const cust = await db.prepare(
+        "SELECT customer_id FROM _qarpeo_customers WHERE user_id = ? AND provider = 'stripe' LIMIT 1"
+      ).bind(user.id).first();
+      if (cust) customerId = cust.customer_id;
+    }
+    const mode = options.mode || "subscription";
+    const params = new URLSearchParams();
+    params.set("mode", mode);
+    params.set("line_items[0][price]", priceId);
+    params.set("line_items[0][quantity]", "1");
+    params.set("success_url", successUrl);
+    params.set("cancel_url", cancelUrl);
+    if (customerId) {
+      params.set("customer", customerId);
+    } else {
+      const email = options.customerEmail || user?.email;
+      if (email) params.set("customer_email", email);
+    }
+    if (user?.id) params.set("client_reference_id", user.id);
+    for (const [k, v] of Object.entries(metadata)) {
+      params.set(`metadata[${k}]`, String(v));
+      if (mode === "subscription") {
+        params.set(`subscription_data[metadata][${k}]`, String(v));
+      } else if (mode === "payment") {
+        params.set(`payment_intent_data[metadata][${k}]`, String(v));
+      } else if (mode === "setup") {
+        params.set(`setup_intent_data[metadata][${k}]`, String(v));
+      }
+    }
+    if (mode === "subscription") {
+      const trialDays = options.trialDays || config.trialDays;
+      if (trialDays && trialDays > 0) {
+        params.set("subscription_data[trial_period_days]", String(trialDays));
+      }
+    }
+    const res = await fetch("https://api.stripe.com/v1/checkout/sessions", {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${config.secretKey}`,
+        "Content-Type": "application/x-www-form-urlencoded",
+        "Stripe-Version": STRIPE_API_VERSION
+      },
+      body: params.toString()
+    });
+    if (!res.ok) {
+      const errText = await res.text();
+      console.error("[qarpeo:payments] Stripe Checkout error:", errText);
+      throw createError({ statusCode: res.status, message: `Stripe checkout failed: ${errText}` });
+    }
+    const session = await res.json();
+    return { id: session.id, url: session.url };
+  }
+  throw createError({
+    statusCode: 501,
+    message: `Checkout not implemented for provider ${config.provider}`
+  });
+}
+export async function createCustomerPortalSession(event, options) {
+  await ensurePaymentsTables(event);
+  const db = getPaymentsDb(event);
+  const config = getPaymentsConfig(event);
+  const auth = await getAuthContext(event);
+  const user = auth?.user;
+  if (!user?.id) {
+    throw createError({
+      statusCode: 401,
+      message: "Authentication required to access billing portal"
+    });
+  }
+  const cust = await db.prepare("SELECT customer_id FROM _qarpeo_customers WHERE user_id = ? AND provider = ? LIMIT 1").bind(user.id, config.provider).first();
+  if (!cust?.customer_id) {
+    throw createError({ statusCode: 404, message: "No customer account found for this user" });
+  }
+  const siteUrl = useRuntimeConfig().public?.siteUrl || "http://localhost:3000";
+  const returnUrl = options?.returnUrl || config.portalReturnUrl || siteUrl;
+  if (config.provider === "stripe") {
+    const params = new URLSearchParams();
+    params.set("customer", cust.customer_id);
+    params.set("return_url", returnUrl);
+    const res = await fetch("https://api.stripe.com/v1/billing_portal/sessions", {
+      method: "POST",
+      headers: {
+        Authorization: `Bearer ${config.secretKey}`,
+        "Content-Type": "application/x-www-form-urlencoded",
+        "Stripe-Version": STRIPE_API_VERSION
+      },
+      body: params.toString()
+    });
+    if (!res.ok) {
+      const errText = await res.text();
+      throw createError({ statusCode: res.status, message: `Billing portal failed: ${errText}` });
+    }
+    const session = await res.json();
+    return { url: session.url };
+  }
+  throw createError({
+    statusCode: 501,
+    message: `Billing portal not supported for provider ${config.provider}`
+  });
+}
+export async function cancelSubscription(event, subscriptionId) {
+  await ensurePaymentsTables(event);
+  const db = getPaymentsDb(event);
+  const config = getPaymentsConfig(event);
+  if (!subscriptionId) {
+    throw createError({ statusCode: 400, message: "subscriptionId is required" });
+  }
+  if (!config.secretKey) {
+    throw createError({
+      statusCode: 500,
+      statusMessage: "Internal Server Error",
+      message: "Payment provider secret key is not configured (STRIPE_SECRET_KEY)"
+    });
+  }
+  if (config.provider !== "stripe") {
+    throw createError({
+      statusCode: 501,
+      message: `Subscription cancel not implemented for provider ${config.provider}`
+    });
+  }
+  const params = new URLSearchParams();
+  params.set("cancel_at_period_end", "true");
+  const res = await fetch(`https://api.stripe.com/v1/subscriptions/${subscriptionId}`, {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${config.secretKey}`,
+      "Content-Type": "application/x-www-form-urlencoded",
+      "Stripe-Version": STRIPE_API_VERSION
+    },
+    body: params.toString()
+  });
+  if (!res.ok) {
+    const errText = await res.text();
+    throw createError({ statusCode: res.status, message: `Stripe cancel failed: ${errText}` });
+  }
+  const now = Date.now();
+  await db.prepare(
+    "UPDATE _qarpeo_subscriptions SET status = 'canceled', cancel_at_period_end = 1, updated_at = ? WHERE subscription_id = ?"
+  ).bind(now, subscriptionId).run();
+  return { success: true, subscriptionId, status: "canceled" };
+}
+export async function pauseSubscription(event, subscriptionId) {
+  await ensurePaymentsTables(event);
+  const db = getPaymentsDb(event);
+  const config = getPaymentsConfig(event);
+  if (!subscriptionId) {
+    throw createError({ statusCode: 400, message: "subscriptionId is required" });
+  }
+  if (!config.secretKey) {
+    throw createError({
+      statusCode: 500,
+      statusMessage: "Internal Server Error",
+      message: "Payment provider secret key is not configured (STRIPE_SECRET_KEY)"
+    });
+  }
+  if (config.provider !== "stripe") {
+    throw createError({
+      statusCode: 501,
+      message: `Subscription pause not implemented for provider ${config.provider}`
+    });
+  }
+  const params = new URLSearchParams();
+  params.set("pause_collection[behavior]", "void");
+  params.set("pause_collection[resumes_at]", "");
+  const res = await fetch(`https://api.stripe.com/v1/subscriptions/${subscriptionId}`, {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${config.secretKey}`,
+      "Content-Type": "application/x-www-form-urlencoded",
+      "Stripe-Version": STRIPE_API_VERSION
+    },
+    body: params.toString()
+  });
+  if (!res.ok) {
+    const errText = await res.text();
+    throw createError({ statusCode: res.status, message: `Stripe pause failed: ${errText}` });
+  }
+  const now = Date.now();
+  await db.prepare(
+    "UPDATE _qarpeo_subscriptions SET status = 'paused', updated_at = ? WHERE subscription_id = ?"
+  ).bind(now, subscriptionId).run();
+  return { success: true, subscriptionId, status: "paused" };
+}
+export async function changePlan(event, subscriptionId, newPriceId) {
+  await ensurePaymentsTables(event);
+  const db = getPaymentsDb(event);
+  const config = getPaymentsConfig(event);
+  if (!subscriptionId) {
+    throw createError({ statusCode: 400, message: "subscriptionId is required" });
+  }
+  if (!newPriceId) {
+    throw createError({ statusCode: 400, message: "newPriceId is required" });
+  }
+  if (!config.secretKey) {
+    throw createError({
+      statusCode: 500,
+      statusMessage: "Internal Server Error",
+      message: "Payment provider secret key is not configured (STRIPE_SECRET_KEY)"
+    });
+  }
+  if (config.provider !== "stripe") {
+    throw createError({
+      statusCode: 501,
+      message: `Plan change not implemented for provider ${config.provider}`
+    });
+  }
+  const getRes = await fetch(`https://api.stripe.com/v1/subscriptions/${subscriptionId}`, {
+    method: "GET",
+    headers: {
+      Authorization: `Bearer ${config.secretKey}`,
+      "Stripe-Version": STRIPE_API_VERSION
+    }
+  });
+  if (!getRes.ok) {
+    const errText = await getRes.text();
+    throw createError({
+      statusCode: getRes.status,
+      message: `Stripe fetch subscription failed: ${errText}`
+    });
+  }
+  const sub = await getRes.json();
+  const currentItemId = sub?.items?.data?.[0]?.id;
+  if (!currentItemId) {
+    throw createError({ statusCode: 409, message: "Subscription has no item to change" });
+  }
+  const params = new URLSearchParams();
+  params.set("items[0][id]", currentItemId);
+  params.set("items[0][price]", newPriceId);
+  params.set("proration_behavior", "create_prorations");
+  const res = await fetch(`https://api.stripe.com/v1/subscriptions/${subscriptionId}`, {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${config.secretKey}`,
+      "Content-Type": "application/x-www-form-urlencoded",
+      "Stripe-Version": STRIPE_API_VERSION
+    },
+    body: params.toString()
+  });
+  if (!res.ok) {
+    const errText = await res.text();
+    throw createError({ statusCode: res.status, message: `Stripe plan change failed: ${errText}` });
+  }
+  const updated = await res.json();
+  const newPlanId = updated?.items?.data?.[0]?.price?.id || newPriceId;
+  const now = Date.now();
+  await db.prepare(
+    "UPDATE _qarpeo_subscriptions SET plan_id = ?, price_id = ?, updated_at = ? WHERE subscription_id = ?"
+  ).bind(newPlanId, newPriceId, now, subscriptionId).run();
+  return { success: true, subscriptionId, planId: newPlanId };
+}
+function rowToSubscription(row) {
+  let metadata = {};
+  try {
+    metadata = JSON.parse(row.metadata_json || "{}");
+  } catch {
+  }
+  return {
+    id: row.id,
+    customerId: row.customer_id,
+    userId: row.user_id,
+    orgId: row.org_id || null,
+    provider: row.provider,
+    subscriptionId: row.subscription_id,
+    planId: row.plan_id,
+    priceId: row.price_id,
+    status: row.status,
+    quantity: row.quantity || 1,
+    cancelAtPeriodEnd: Boolean(row.cancel_at_period_end),
+    currentPeriodStart: row.current_period_start,
+    currentPeriodEnd: row.current_period_end,
+    trialEnd: row.trial_end || null,
+    canceledAt: row.canceled_at || null,
+    metadata,
+    metadataJson: row.metadata_json || "{}",
+    createdAt: row.created_at,
+    updatedAt: row.updated_at
+  };
+}
+export async function getSubscription(event, options) {
+  await ensurePaymentsTables(event);
+  const db = getPaymentsDb(event);
+  const auth = await getAuthContext(event);
+  const userId = options?.userId || auth?.user?.id;
+  const orgId = options?.orgId || auth?.organization?.id;
+  if (!userId && !orgId) return null;
+  let row = null;
+  if (orgId) {
+    row = await db.prepare(
+      "SELECT * FROM _qarpeo_subscriptions WHERE org_id = ? AND status IN ('active', 'trialing') ORDER BY created_at DESC LIMIT 1"
+    ).bind(orgId).first();
+  }
+  if (!row && userId) {
+    row = await db.prepare(
+      "SELECT * FROM _qarpeo_subscriptions WHERE user_id = ? AND status IN ('active', 'trialing') ORDER BY created_at DESC LIMIT 1"
+    ).bind(userId).first();
+  }
+  return row ? rowToSubscription(row) : null;
+}
+export async function requireSubscription(event, options) {
+  const sub = await getSubscription(event);
+  if (!sub) {
+    throw createError({
+      statusCode: 402,
+      statusMessage: "Payment Required",
+      message: options?.message || "Active subscription required to access this resource"
+    });
+  }
+  const allowedStatuses = options?.status || ["active", "trialing"];
+  if (!allowedStatuses.includes(sub.status)) {
+    throw createError({
+      statusCode: 402,
+      statusMessage: "Payment Required",
+      message: options?.message || `Subscription status is ${sub.status}. Active subscription required.`
+    });
+  }
+  const requiredPlans = options?.plan ? Array.isArray(options.plan) ? options.plan : [options.plan] : [];
+  const requiredTiers = options?.tier ? Array.isArray(options.tier) ? options.tier : [options.tier] : [];
+  const allRequired = [...requiredPlans, ...requiredTiers];
+  if (allRequired.length > 0 && !allRequired.includes(sub.planId)) {
+    throw createError({
+      statusCode: 403,
+      statusMessage: "Forbidden",
+      message: options?.message || `Subscription tier "${sub.planId}" does not satisfy required plan (${allRequired.join(", ")})`
+    });
+  }
+  return sub;
+}
+export async function hasFeature(event, feature) {
+  const sub = await getSubscription(event);
+  if (!sub || sub.status !== "active" && sub.status !== "trialing") return false;
+  const config = getPaymentsConfig(event);
+  const plan = config.plans?.[sub.planId];
+  if (!plan?.features) return false;
+  return plan.features.includes(feature);
+}
+export async function checkLimit(event, limitKey, currentUsage) {
+  const sub = await getSubscription(event);
+  const config = getPaymentsConfig(event);
+  const plan = sub ? config.plans?.[sub.planId] : void 0;
+  const limit = plan?.limits?.[limitKey] ?? Infinity;
+  return {
+    allowed: currentUsage < limit,
+    limit,
+    current: currentUsage
+  };
+}
+export async function reportUsage(event, options) {
+  await ensurePaymentsTables(event);
+  const db = getPaymentsDb(event);
+  const config = getPaymentsConfig(event);
+  const auth = await getAuthContext(event).catch(() => null);
+  const userId = options.userId || auth?.user?.id || null;
+  const orgId = options.orgId || auth?.organization?.id || null;
+  const now = Date.now();
+  const timestamp = options.timestamp || now;
+  const id = nanoid();
+  const quantity = options.quantity ?? 1;
+  const action = options.action || "increment";
+  const metadataJson = options.metadata ? JSON.stringify(options.metadata) : "{}";
+  await db.prepare(
+    `INSERT INTO _qarpeo_usage_records 
+        (id, user_id, org_id, customer_id, subscription_id, event_name, quantity, action, metadata_json, timestamp, created_at)
+       VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`
+  ).bind(
+    id,
+    userId,
+    orgId,
+    options.customerId || null,
+    options.subscriptionId || null,
+    options.eventName,
+    quantity,
+    action,
+    metadataJson,
+    timestamp,
+    now
+  ).run();
+  if (config.provider === "stripe" && config.secretKey) {
+    let custId = options.customerId;
+    if (!custId && userId) {
+      const cust = await db.prepare(
+        "SELECT customer_id FROM _qarpeo_customers WHERE user_id = ? AND provider = 'stripe' LIMIT 1"
+      ).bind(userId).first();
+      if (cust) custId = cust.customer_id;
+    }
+    if (custId) {
+      try {
+        const params = new URLSearchParams();
+        params.set("event_name", options.eventName);
+        params.set("payload[value]", String(quantity));
+        params.set("payload[stripe_customer_id]", custId);
+        params.set("timestamp", String(Math.floor(timestamp / 1e3)));
+        const res = await fetch("https://api.stripe.com/v1/billing/meter_events", {
+          method: "POST",
+          headers: {
+            Authorization: `Bearer ${config.secretKey}`,
+            "Content-Type": "application/x-www-form-urlencoded",
+            "Stripe-Version": STRIPE_API_VERSION
+          },
+          body: params.toString()
+        });
+        if (!res.ok) {
+          const errText = await res.text();
+          console.warn("[qarpeo:payments] Stripe meter event reported non-ok:", errText);
+        }
+      } catch (err) {
+        console.warn("[qarpeo:payments] Failed to report meter event to Stripe:", err);
+      }
+    }
+  }
+  return {
+    success: true,
+    id,
+    eventName: options.eventName,
+    quantity,
+    timestamp
+  };
+}
+export async function getUsageSummary(event, options) {
+  await ensurePaymentsTables(event);
+  const db = getPaymentsDb(event);
+  const auth = await getAuthContext(event).catch(() => null);
+  const userId = options.userId || auth?.user?.id;
+  const orgId = options.orgId || auth?.organization?.id;
+  let sql = "SELECT * FROM _qarpeo_usage_records WHERE 1=1";
+  const params = [];
+  if (options.eventName) {
+    sql += " AND event_name = ?";
+    params.push(options.eventName);
+  }
+  if (orgId) {
+    sql += " AND org_id = ?";
+    params.push(orgId);
+  } else if (userId) {
+    sql += " AND user_id = ?";
+    params.push(userId);
+  }
+  if (options.since) {
+    sql += " AND timestamp >= ?";
+    params.push(options.since);
+  }
+  if (options.until) {
+    sql += " AND timestamp <= ?";
+    params.push(options.until);
+  }
+  sql += " ORDER BY timestamp DESC LIMIT 500";
+  const stmt = db.prepare(sql);
+  const bound = params.length > 0 ? stmt.bind(...params) : stmt;
+  const result = await bound.all();
+  const rows = result.results || [];
+  let total = 0;
+  for (const row of rows) {
+    if (row.action === "set") {
+      total = row.quantity;
+    } else {
+      total += row.quantity;
+    }
+  }
+  return {
+    eventName: options.eventName || "all",
+    total,
+    count: rows.length,
+    records: rows.map((r) => ({
+      id: r.id,
+      userId: r.user_id,
+      orgId: r.org_id,
+      customerId: r.customer_id,
+      subscriptionId: r.subscription_id,
+      eventName: r.event_name,
+      quantity: r.quantity,
+      action: r.action,
+      metadata: JSON.parse(r.metadata_json || "{}"),
+      timestamp: r.timestamp
+    }))
+  };
+}