sanity-plugin-stripe 0.1.0 → 0.2.0

package/dist/server.js

@@ -1,6 +1,6 @@
-import { a as formatMoney, c as toMinorUnits, i as isObject, n as asNumber, o as formatPrice, r as asString, t as asArray } from "./guards-CAcETsf7.js";
-import { a as lineStatus, c as sanitizeLines, i as lineName, o as readCartProducts } from "./cart-CSjxtjq-.js";
-import { a as stockLeft, c as SHOP_SETTINGS_ID, h as stockId, i as readStockDocuments, l as SHOP_SETTINGS_TYPE, m as stockChangeId, n as STRIPE_SHIPPING_COUNTRIES, p as publishedId, r as STOCK_QUERY, t as EU_COUNTRIES, u as STOCK_CHANGE_TYPE } from "./countries-BuqQF1AW.js";
+import { a as shippingQuote, c as describeInterval, d as lineStatus, f as readCartProducts, h as sanitizeLines, i as resolveRegions, m as readSubscription, n as regionOptions, r as regionsFromSettings, t as readShopSettings, u as lineName } from "./regions-CFDYMokP.js";
+import { c as formatPrice, o as isObject, r as asArray, s as formatMoney, t as EU_COUNTRIES, u as toMinorUnits } from "./countries-Csjmv4lY.js";
+import { c as STOCK_CHANGE_TYPE, f as publishedId, m as stockId, n as readStockDocuments, o as SHOP_SETTINGS_ID, p as stockChangeId, r as stockLeft, s as SHOP_SETTINGS_TYPE, t as STOCK_QUERY } from "./stock-DAsSGayt.js";
 import { Stripe } from "stripe";
 const escapeHtml = (value) => value.replace(/[&<>"']/g, (char) => ({
 	"&": "&amp;",
@@ -21,18 +21,21 @@ function addressLines(name, address) {
 		address.country
 	].filter((line) => !!line);
 }
-/** Where the payment is in the Stripe Dashboard. */
+/** Where the payment is in the Stripe Dashboard: a renewal's invoice, a subscription, a payment. */
 function dashboardUrl(order) {
 	let base = `https://dashboard.stripe.com/${order.livemode ? "" : "test/"}`;
-	return order.paymentIntentId ? `${base}payments/${order.paymentIntentId}` : `${base}checkout/sessions/${order.sessionId}`;
+	return order.invoiceId ? `${base}invoices/${order.invoiceId}` : order.subscription ? `${base}subscriptions/${order.subscription.id}` : order.paymentIntentId ? `${base}payments/${order.paymentIntentId}` : `${base}checkout/sessions/${order.sessionId}`;
 }
-/** A plain order email for the shop: what to pack, where to send it and who paid. */
+/**
+* A plain order email for the shop: what to pack, where to send it and who paid. It serves a
+* subscription's renewal too, from `onRenewal`.
+*/
 function orderEmail(order, options) {
-	let { shopName, locale = "en", stock = [], stockError } = options, money = (minor) => formatMoney(minor, order.currency, locale), count = order.items.reduce((sum, item) => sum + item.quantity, 0), who = order.shipping.name ?? order.customer.name ?? order.customer.email ?? "a customer", subject = `${order.livemode ? "" : "[Test] "}${shopName} order from ${who}: ${count} ${count === 1 ? "item" : "items"}, ${money(order.amountTotal)}`, address = addressLines(order.shipping.name, order.shipping.address), contact = [order.customer.email, order.customer.phone].filter((line) => !!line), shippingLabel = order.regionTitle ? `Shipping (${order.regionTitle})` : "Shipping", link = dashboardUrl(order), date = order.createdAt.toISOString().slice(0, 10), oversold = stock.filter((change) => change.to < 0).map((change) => order.items.find((candidate) => candidate.productId === change.productId && (candidate.variantKey ?? "") === (change.variantKey ?? ""))?.name ?? change.productId), warnings = [...oversold.length ? [`Check your stock: more was sold than was counted in stock for ${oversold.join(", ")}.`] : [], ...stockError ? [`Stock counts were not lowered for this order. Change them by hand. (${stockError})`] : []], text = [
-		`New order on ${date}${order.livemode ? "" : " (test mode, no money moved)"}`,
+	let { shopName, locale = "en", stock = [], stockError } = options, money = (minor) => formatMoney(minor, order.currency, locale), count = order.items.reduce((sum, item) => sum + item.quantity, 0), who = order.shipping.name ?? order.customer.name ?? order.customer.email ?? "a customer", renewal = !!order.invoiceId, subject = `${order.livemode ? "" : "[Test] "}${shopName} ${renewal ? "renewal for" : "order from"} ${who}: ${count} ${count === 1 ? "item" : "items"}, ${money(order.amountTotal)}`, heading = renewal ? "Subscription renewal" : "New order", repeats = order.subscription?.interval ? `subscription, ${describeInterval(order.subscription.interval)}` : "subscription", nameOf = (item) => item.subscription && !renewal ? `${item.name} (${repeats})` : item.name, address = addressLines(order.shipping.name, order.shipping.address), contact = [order.customer.email, order.customer.phone].filter((line) => !!line), shippingLabel = order.regionTitle ? `Shipping (${order.regionTitle})` : "Shipping", link = dashboardUrl(order), date = order.createdAt.toISOString().slice(0, 10), oversold = stock.filter((change) => change.to < 0).map((change) => order.items.find((candidate) => candidate.productId === change.productId && (candidate.variantKey ?? "") === (change.variantKey ?? ""))?.name ?? change.productId), warnings = [...oversold.length ? [`Check your stock: more was sold than was counted in stock for ${oversold.join(", ")}.`] : [], ...stockError ? [`Stock counts were not lowered for this order. Change them by hand. (${stockError})`] : []], text = [
+		`${heading} on ${date}${order.livemode ? "" : " (test mode, no money moved)"}`,
 		"",
 		...warnings.flatMap((warning) => [warning, ""]),
-		...order.items.map((item) => `${item.quantity} × ${item.name}  ${money(item.amountTotal)}`),
+		...order.items.map((item) => `${item.quantity} × ${nameOf(item)}  ${money(item.amountTotal)}`),
 		`${shippingLabel}  ${money(order.amountShipping)}`,
 		`Total  ${money(order.amountTotal)}`,
 		"",
@@ -43,12 +46,12 @@ function orderEmail(order, options) {
 		...contact,
 		"",
 		`In Stripe: ${link}`
-	].join("\n"), rows = order.items.map((item) => `<tr><td style="padding:4px 12px 4px 0">${item.quantity} ×</td><td style="padding:4px 12px 4px 0">${escapeHtml(item.name)}</td><td style="padding:4px 0;text-align:right">${money(item.amountTotal)}</td></tr>`).join("");
+	].join("\n"), rows = order.items.map((item) => `<tr><td style="padding:4px 12px 4px 0">${item.quantity} ×</td><td style="padding:4px 12px 4px 0">${escapeHtml(nameOf(item))}</td><td style="padding:4px 0;text-align:right">${money(item.amountTotal)}</td></tr>`).join("");
 	return {
 		subject,
 		text,
 		html: `<div style="font-family:Helvetica,Arial,sans-serif;font-size:15px;line-height:1.45;color:#191919">
-<p>New order on ${date}${order.livemode ? "" : " <strong>(test mode, no money moved)</strong>"}</p>
+<p>${heading} on ${date}${order.livemode ? "" : " <strong>(test mode, no money moved)</strong>"}</p>
 ${warnings.map((warning) => `<p><strong>${escapeHtml(warning)}</strong></p>\n`).join("")}<table style="border-collapse:collapse">${rows}
 <tr><td></td><td style="padding:4px 12px 4px 0">${escapeHtml(shippingLabel)}</td><td style="padding:4px 0;text-align:right">${money(order.amountShipping)}</td></tr>
 <tr><td></td><td style="padding:4px 12px 4px 0"><strong>Total</strong></td><td style="padding:4px 0;text-align:right"><strong>${money(order.amountTotal)}</strong></td></tr>
@@ -64,13 +67,19 @@ function verifyEvent(stripe, payload, signature, secret) {
 	if (!signature) throw Error("Missing Stripe-Signature header");
 	return stripe.webhooks.constructEvent(payload, signature, secret);
 }
-/** The events a webhook endpoint for the shop listens to. */
+/**
+* The events a webhook endpoint for the shop listens to. The last three are for subscriptions; a
+* shop without any can leave them out.
+*/
 const WEBHOOK_EVENTS = [
 	"checkout.session.completed",
 	"checkout.session.async_payment_succeeded",
-	"checkout.session.async_payment_failed"
+	"checkout.session.async_payment_failed",
+	"invoice.paid",
+	"invoice.payment_failed",
+	"customer.subscription.deleted"
 ];
-/** What a webhook event means for the shop. Only `paid` is fulfilled. */
+/** What a webhook event means for the shop. Only `paid` and a renewal's `invoicePaid` are fulfilled. */
 function classifyEvent(event) {
 	switch (event.type) {
 		case "checkout.session.completed":
@@ -88,6 +97,18 @@ function classifyEvent(event) {
 			type: "failed",
 			session: event.data.object
 		};
+		case "invoice.paid": return {
+			type: "invoicePaid",
+			invoice: event.data.object
+		};
+		case "invoice.payment_failed": return {
+			type: "invoiceFailed",
+			invoice: event.data.object
+		};
+		case "customer.subscription.deleted": return {
+			type: "subscriptionEnded",
+			subscription: event.data.object
+		};
 		default: return { type: "ignored" };
 	}
 }
@@ -115,7 +136,7 @@ const typeFilter = (types) => `_type in [${types.map((type) => JSON.stringify(ty
 */
 function cartProductProjection(options) {
 	let { field, title, slug, image } = resolveProductQuery(options);
-	return `_id, "title": ${title}, "slug": ${slug}, "imageUrl": ${image}, "commerce": ${field}{availability, price, taxClass, variants[]{_key, label, availability}}`;
+	return `_id, "title": ${title}, "slug": ${slug}, "imageUrl": ${image}, "commerce": ${field}{availability, price, taxClass, variants[]{_key, label, availability}, subscription{enabled, price, every, unit}}`;
 }
 /** Every product that has the commerce field filled in, for the cart page. */
 function cartProductsQuery(options) {
@@ -139,50 +160,8 @@ function productVersionsQuery(productIds, options) {
 		params
 	};
 }
-/** The shop settings: shipping regions and whether stock sells out by itself. */
-const SHOP_SETTINGS_QUERY = `*[_type == "${SHOP_SETTINGS_TYPE}" && _id == "${SHOP_SETTINGS_ID}"][0]{shippingRegions[]{_key, title, everywhereElse, countries, rate}, autoSoldOut}`;
-/** The shop settings as Sanity returned them, or null when they aren't published yet. */
-function readShopSettings(value) {
-	return isObject(value) ? {
-		shippingRegions: asArray(value.shippingRegions).flatMap((region) => isObject(region) && typeof region._key == "string" ? [{
-			_key: region._key,
-			title: asString(region.title),
-			everywhereElse: region.everywhereElse === !0,
-			countries: asArray(region.countries).filter((country) => typeof country == "string"),
-			rate: asNumber(region.rate)
-		}] : []),
-		autoSoldOut: typeof value.autoSoldOut == "boolean" ? value.autoSoldOut : null
-	} : null;
-}
-/** Shipping regions from the shop settings, leaving out any that aren't filled in. */
-function regionsFromSettings(settings) {
-	return (settings?.shippingRegions ?? []).flatMap((region) => region.title && typeof region.rate == "number" ? [{
-		id: region._key,
-		title: region.title,
-		countries: region.countries ?? [],
-		everywhereElse: !!region.everywhereElse,
-		rate: region.rate
-	}] : []);
-}
-/**
-* Fills in the "everywhere else" region with every country Stripe ships to that no other region
-* lists, and drops country codes Stripe doesn't accept. Regions left without countries are removed.
-*/
-function resolveRegions(regions) {
-	let supported = new Set(STRIPE_SHIPPING_COUNTRIES), listed = new Set(regions.filter((region) => !region.everywhereElse).flatMap((region) => region.countries));
-	return regions.map((region) => ({
-		...region,
-		countries: region.everywhereElse ? STRIPE_SHIPPING_COUNTRIES.filter((country) => !listed.has(country)) : region.countries.filter((country) => supported.has(country))
-	})).filter((region) => region.countries.length > 0);
-}
-/** The regions a buyer can choose from, the same ones the checkout accepts. */
-function regionOptions(settings) {
-	return resolveRegions(regionsFromSettings(settings)).map(({ id, title, rate }) => ({
-		id,
-		title,
-		rate
-	}));
-}
+/** The shop settings: shipping regions, selling out at 0, and delivery for subscriptions. */
+const SHOP_SETTINGS_QUERY = `*[_type == "${SHOP_SETTINGS_TYPE}" && _id == "${SHOP_SETTINGS_ID}"][0]{shippingRegions[]{_key, title, everywhereElse, countries, rate, freeFrom}, autoSoldOut, subscriptionDelivery}`, sameInterval = (a, b) => a.unit === b.unit && a.every === b.every;
 function buildCheckoutSession(input) {
 	let max = input.maxQuantity ?? 10, currency = input.currency.toLowerCase(), lines = sanitizeLines(input.lines, max);
 	if (!lines.length) return {
@@ -196,24 +175,27 @@ function buildCheckoutSession(input) {
 		error: "region",
 		problems: []
 	};
-	let products = new Map(input.products.map((product) => [product._id, product])), problems = [], lineItems = [];
+	let products = new Map(input.products.map((product) => [product._id, product])), problems = [], lineItems = [], taken = /* @__PURE__ */ new Map(), interval, goods = 0, repeating = 0;
 	for (let line of lines) {
-		let product = products.get(line.productId), status = lineStatus(product, line.variantKey, max), ref = {
+		let product = products.get(line.productId), status = lineStatus(product, line.variantKey, max, line.plan), ref = {
 			productId: line.productId,
 			...line.variantKey ? { variantKey: line.variantKey } : {}
+		}, asked = {
+			...ref,
+			...line.plan ? { plan: line.plan } : {}
 		};
 		if (!product || !status.available) {
 			problems.push({
-				...ref,
+				...asked,
 				...product?.title ? { name: product.title } : {},
 				reason: status.available ? "missing" : status.reason
 			});
 			continue;
 		}
-		let name = lineName(product, status.variant), left = stockLeft(input.stock?.get(line.productId), line.variantKey);
+		let name = lineName(product, status.variant), counted = stockLeft(input.stock?.get(line.productId), line.variantKey), stockKey = `${line.productId}:${line.variantKey ?? ""}`, left = counted === null ? null : counted - (taken.get(stockKey) ?? 0);
 		if (left !== null && left <= 0) {
 			problems.push({
-				...ref,
+				...asked,
 				name,
 				reason: "soldOut"
 			});
@@ -222,19 +204,33 @@ function buildCheckoutSession(input) {
 		let most = left === null ? status.maxQuantity : Math.min(status.maxQuantity, left);
 		if (line.quantity > most) {
 			problems.push({
-				...ref,
+				...asked,
 				name,
 				reason: "tooMany",
 				...input.hideRemaining ? {} : { maxQuantity: most }
 			});
 			continue;
 		}
+		if (taken.set(stockKey, (taken.get(stockKey) ?? 0) + line.quantity), status.interval && (interval ??= status.interval, !sameInterval(status.interval, interval))) {
+			problems.push({
+				...asked,
+				name,
+				reason: "otherInterval"
+			});
+			continue;
+		}
+		let unitAmount = toMinorUnits(status.price, currency);
+		goods += unitAmount * line.quantity, status.interval && (repeating += unitAmount * line.quantity);
 		let taxClass = product.commerce?.taxClass, taxRate = taxClass ? input.taxRates?.[taxClass] : void 0;
 		lineItems.push({
 			quantity: line.quantity,
 			price_data: {
 				currency,
-				unit_amount: toMinorUnits(status.price, currency),
+				unit_amount: unitAmount,
+				...status.interval ? { recurring: {
+					interval: status.interval.unit,
+					interval_count: status.interval.every
+				} } : {},
 				product_data: {
 					name,
 					...product.imageUrl ? { images: [product.imageUrl] } : {},
@@ -244,37 +240,57 @@ function buildCheckoutSession(input) {
 			...taxRate ? { tax_rates: [taxRate] } : {}
 		});
 	}
-	return problems.length ? {
+	if (problems.length) return {
 		ok: !1,
 		error: "unavailable",
 		problems
-	} : {
+	};
+	let rate = toMinorUnits(region.rate, currency), freeFrom = region.freeFrom === void 0 ? null : toMinorUnits(region.freeFrom, currency), charge = (amount) => freeFrom !== null && amount >= freeFrom ? 0 : rate;
+	interval && input.subscriptionDelivery === "rate" && charge(repeating) > 0 && lineItems.push({
+		quantity: 1,
+		price_data: {
+			currency,
+			unit_amount: charge(repeating),
+			recurring: {
+				interval: interval.unit,
+				interval_count: interval.every
+			},
+			product_data: {
+				name: `Delivery: ${region.title}`,
+				metadata: { delivery: region.id }
+			}
+		}
+	});
+	let where = {
+		region: region.id,
+		regionTitle: region.title
+	};
+	return {
 		ok: !0,
 		lines,
 		region,
 		params: {
-			mode: "payment",
+			mode: interval ? "subscription" : "payment",
 			line_items: lineItems,
 			shipping_address_collection: { allowed_countries: region.countries },
-			shipping_options: [{ shipping_rate_data: {
+			...interval ? { subscription_data: { metadata: where } } : { shipping_options: [{ shipping_rate_data: {
 				type: "fixed_amount",
 				display_name: region.title,
 				fixed_amount: {
-					amount: toMinorUnits(region.rate, currency),
+					amount: charge(goods),
 					currency
 				}
-			} }],
+			} }] },
+			...input.promotionCodes ? { allow_promotion_codes: !0 } : {},
 			success_url: input.successUrl,
 			cancel_url: input.cancelUrl,
-			metadata: {
-				region: region.id,
-				regionTitle: region.title
-			},
+			metadata: where,
 			integration_identifier: input.integrationIdentifier,
 			...input.expiresAt ? { expires_at: input.expiresAt } : {}
 		}
 	};
 }
+const keyOf = (step) => `fulfilled_${step}`, stamp = (step) => ({ metadata: { [keyOf(step)]: (/* @__PURE__ */ new Date()).toISOString() } });
 /**
 * Runs a fulfilment step once per Checkout Session, even when Stripe delivers the event again.
 * The step's completion is recorded in the session's own metadata, so a failed step is retried on
@@ -286,29 +302,58 @@ function buildCheckoutSession(input) {
 * with an idempotency key. Stock is guarded on its own, in `decrementStock`.
 */
 async function once(stripe, session, step, fn) {
-	let key = `fulfilled_${step}`;
-	return session.metadata?.[key] ? "skipped" : (await fn(), await stripe.checkout.sessions.update(session.id, { metadata: { [key]: (/* @__PURE__ */ new Date()).toISOString() } }), "done");
+	return session.metadata?.[keyOf(step)] ? "skipped" : (await fn(), await stripe.checkout.sessions.update(session.id, stamp(step)), "done");
 }
+/**
+* The same for a renewal: once per invoice, recorded in the invoice's metadata. `invoice` must be
+* read fresh from Stripe's API.
+*/
+async function oncePerInvoice(stripe, invoice, step, fn) {
+	return invoice.metadata?.[keyOf(step)] ? "skipped" : (await fn(), await stripe.invoices.update(invoice.id, stamp(step)), "done");
+}
+function readInterval(recurring) {
+	if (!recurring) return null;
+	let every = recurring.interval_count;
+	return recurring.interval === "week" ? {
+		unit: "week",
+		every
+	} : recurring.interval === "month" ? {
+		unit: "month",
+		every
+	} : null;
+}
+const metadataOf = (product) => product && typeof product == "object" && !product.deleted ? product.metadata : {}, idOf = (value) => typeof value == "string" ? value : value?.id ?? null;
 /** Reads a completed session and its line items into an order. */
 async function getOrder(stripe, session) {
-	let items = (await stripe.checkout.sessions.listLineItems(session.id, {
+	let lineItems = await stripe.checkout.sessions.listLineItems(session.id, {
 		limit: 100,
 		expand: ["data.price.product"]
-	})).data.map((item) => {
-		let product = item.price?.product, metadata = product && typeof product == "object" && !product.deleted ? product.metadata : {}, ordered = {
+	}), items = [], interval = null, delivery = 0;
+	for (let item of lineItems.data) {
+		let metadata = metadataOf(item.price?.product);
+		if (metadata.delivery) {
+			delivery += item.amount_total;
+			continue;
+		}
+		let ordered = {
 			name: item.description ?? "Item",
 			quantity: item.quantity ?? 1,
 			amountTotal: item.amount_total
 		};
-		return metadata.productId && (ordered.productId = metadata.productId), metadata.variantKey && (ordered.variantKey = metadata.variantKey), ordered;
-	}), shippingDetails = session.collected_information?.shipping_details, paymentIntent = session.payment_intent;
+		metadata.productId && (ordered.productId = metadata.productId), metadata.variantKey && (ordered.variantKey = metadata.variantKey), item.price?.recurring && (ordered.subscription = !0, interval ??= readInterval(item.price.recurring)), items.push(ordered);
+	}
+	let shippingDetails = session.collected_information?.shipping_details, subscriptionId = idOf(session.subscription);
 	return {
 		sessionId: session.id,
-		paymentIntentId: typeof paymentIntent == "string" ? paymentIntent : paymentIntent?.id ?? null,
+		paymentIntentId: idOf(session.payment_intent),
+		...subscriptionId ? { subscription: {
+			id: subscriptionId,
+			interval
+		} } : {},
 		livemode: session.livemode,
 		currency: session.currency ?? "",
 		amountTotal: session.amount_total ?? 0,
-		amountShipping: session.shipping_cost?.amount_total ?? 0,
+		amountShipping: (session.shipping_cost?.amount_total ?? 0) + delivery,
 		...session.metadata?.region ? { regionId: session.metadata.region } : {},
 		...session.metadata?.regionTitle ? { regionTitle: session.metadata.regionTitle } : {},
 		customer: {
@@ -325,6 +370,65 @@ async function getOrder(stripe, session) {
 	};
 }
 /**
+* Reads a paid renewal into an order: what the subscription sends again, and where. The address
+* is the customer's as it is now, so one changed in the customer portal is the one used.
+*
+* `session` is the Checkout Session that started the subscription.
+*/
+async function getRenewal(stripe, invoice, session, subscriptionId) {
+	let subscription = await stripe.subscriptions.retrieve(subscriptionId, { expand: ["items.data.price.product"] }), sold = /* @__PURE__ */ new Map();
+	for (let item of subscription.items.data) {
+		let { product, recurring } = item.price;
+		typeof product == "object" && !product.deleted && sold.set(product.id, {
+			name: product.name,
+			metadata: product.metadata,
+			interval: readInterval(recurring)
+		});
+	}
+	let items = [], interval = null, delivery = 0;
+	for (let line of invoice.lines.data) {
+		let product = sold.get(line.pricing?.price_details?.product ?? "");
+		if (product?.metadata.delivery) {
+			delivery += line.amount;
+			continue;
+		}
+		let ordered = {
+			name: product?.name ?? line.description ?? "Item",
+			quantity: line.quantity ?? 1,
+			amountTotal: line.amount,
+			subscription: !0
+		};
+		product?.metadata.productId && (ordered.productId = product.metadata.productId), product?.metadata.variantKey && (ordered.variantKey = product.metadata.variantKey), interval ??= product?.interval ?? null, items.push(ordered);
+	}
+	let started = session.collected_information?.shipping_details, where = invoice.parent?.subscription_details?.metadata ?? session.metadata;
+	return {
+		sessionId: session.id,
+		paymentIntentId: null,
+		invoiceId: invoice.id,
+		subscription: {
+			id: subscriptionId,
+			interval
+		},
+		livemode: invoice.livemode,
+		currency: invoice.currency,
+		amountTotal: invoice.total,
+		amountShipping: delivery,
+		...where?.region ? { regionId: where.region } : {},
+		...where?.regionTitle ? { regionTitle: where.regionTitle } : {},
+		customer: {
+			name: invoice.customer_name,
+			email: invoice.customer_email,
+			phone: invoice.customer_phone
+		},
+		shipping: {
+			name: invoice.customer_shipping?.name ?? started?.name ?? null,
+			address: invoice.customer_shipping?.address ?? started?.address ?? null
+		},
+		items,
+		createdAt: /* @__PURE__ */ new Date((invoice.status_transitions.paid_at ?? invoice.created) * 1e3)
+	};
+}
+/**
 * Stock documents and every version of a product are only visible with a token, the raw
 * perspective and an API version that knows Content Releases.
 */
@@ -483,7 +587,9 @@ const consoleLog = (level, message) => console[level](message), json = (body, st
 };
 /**
 * The site's checkout route. The browser posts the cart's product references and the chosen
-* shipping region; prices, stock and shipping are read fresh from Sanity here.
+* shipping region; prices, stock and shipping are read fresh from Sanity here. A cart with a
+* subscription in it becomes a subscription checkout; anything bought once in the same cart is
+* charged with the first payment.
 *
 * ```ts
 * // app/api/checkout/route.ts
@@ -534,6 +640,8 @@ function checkoutRoute(options) {
 			integrationIdentifier: options.integrationIdentifier,
 			...stock ? { stock } : {},
 			...options.hideRemaining ? { hideRemaining: !0 } : {},
+			...options.promotionCodes ? { promotionCodes: !0 } : {},
+			...settings?.subscriptionDelivery ? { subscriptionDelivery: settings.subscriptionDelivery } : {},
 			...options.taxRates ? { taxRates: options.taxRates } : {},
 			...options.maxQuantity ? { maxQuantity: options.maxQuantity } : {},
 			...options.expiresInMinutes ? { expiresAt: Math.floor(Date.now() / 1e3) + Math.max(1860, options.expiresInMinutes * 60) } : {}
@@ -566,11 +674,15 @@ function checkoutRoute(options) {
 function absoluteUrl(url, origin) {
 	return /^https?:\/\//.test(url) ? url : `${origin}${url.startsWith("/") ? "" : "/"}${url}`;
 }
+const subscriptionOf = (invoice) => {
+	let subscription = invoice.parent?.subscription_details?.subscription;
+	return typeof subscription == "string" ? subscription : subscription?.id ?? null;
+};
 /**
 * The site's Stripe webhook. A paid order of this shop lowers stock and calls `onOrder`, each
-* once per payment however often Stripe delivers the event. Payments made any other way on the
-* same Stripe account (a Payment Link, another site) are left alone. Nothing is fulfilled on the
-* thank-you page.
+* once per payment however often Stripe delivers the event. A paid renewal of a subscription
+* does the same and calls `onRenewal`. Payments made any other way on the same Stripe account (a
+* Payment Link, another site) are left alone. Nothing is fulfilled on the thank-you page.
 *
 * ```ts
 * // app/api/stripe/webhook/route.ts
@@ -583,8 +695,30 @@ function webhookRoute(options) {
 	let { client, log = consoleLog } = options;
 	resolveProductQuery(options.products);
 	let saidUncounted = !1, ownSession = async (stripe, sessionId) => {
-		let session = await stripe.checkout.sessions.retrieve(sessionId), own = session.mode === "payment" && session.integration_identifier === options.integrationIdentifier;
+		let session = await stripe.checkout.sessions.retrieve(sessionId), own = session.mode !== "setup" && session.integration_identifier === options.integrationIdentifier;
 		return own || log("info", `[stripe webhook] ${sessionId}: not one of this shop's, left alone.`), own ? session : null;
+	}, lowerStock = async (id, order, settings) => {
+		if (!options.stockClient) return saidUncounted || (saidUncounted = !0, log("info", "[stripe webhook] No stockClient: stock counts are left as they are.")), { stock: [] };
+		try {
+			let result = await decrementStock(options.stockClient, {
+				sessionId: id,
+				items: order.items
+			}, {
+				autoSoldOut: settings?.autoSoldOut ?? !0,
+				...options.products ? { products: options.products } : {}
+			});
+			if (result.status === "lowered") {
+				let summary = result.changes.map(({ productId, variantKey, from, to }) => `${productId}${variantKey ? ` ${variantKey}` : ""} ${from} → ${to}`).join(", ");
+				log("info", `[stripe webhook] ${id}: stock ${summary}`);
+			}
+			return { stock: result.changes };
+		} catch (error) {
+			let stockError = reason(error);
+			return log("error", `[stripe webhook] ${id}: stock was not lowered: ${stockError}`), {
+				stock: [],
+				stockError
+			};
+		}
 	}, fulfil = async (stripe, sessionId) => {
 		let session = await ownSession(stripe, sessionId);
 		if (!session) return;
@@ -592,21 +726,7 @@ function webhookRoute(options) {
 			log("info", `[stripe webhook] ${sessionId}: not paid yet.`);
 			return;
 		}
-		let [order, foundSettings] = await Promise.all([getOrder(stripe, session), client.fetch(SHOP_SETTINGS_QUERY)]), settings = readShopSettings(foundSettings), stock = [], stockError;
-		if (options.stockClient) try {
-			let result = await decrementStock(options.stockClient, order, {
-				autoSoldOut: settings?.autoSoldOut ?? !0,
-				...options.products ? { products: options.products } : {}
-			});
-			if (stock = result.changes, result.status === "lowered") {
-				let summary = stock.map(({ productId, variantKey, from, to }) => `${productId}${variantKey ? ` ${variantKey}` : ""} ${from} → ${to}`).join(", ");
-				log("info", `[stripe webhook] ${sessionId}: stock ${summary}`);
-			}
-		} catch (error) {
-			stockError = reason(error), log("error", `[stripe webhook] ${sessionId}: stock was not lowered: ${stockError}`);
-		}
-		else saidUncounted || (saidUncounted = !0, log("info", "[stripe webhook] No stockClient: stock counts are left as they are."));
-		let { onOrder } = options;
+		let [order, foundSettings] = await Promise.all([getOrder(stripe, session), client.fetch(SHOP_SETTINGS_QUERY)]), settings = readShopSettings(foundSettings), { stock, stockError } = await lowerStock(sessionId, order, settings), { onOrder } = options;
 		if (onOrder) {
 			let outcome = await once(stripe, session, "order", async () => {
 				await onOrder(order, {
@@ -620,6 +740,36 @@ function webhookRoute(options) {
 			log("info", `[stripe webhook] ${sessionId}: order ${outcome}.`);
 		}
 		if (stockError) throw Error(`Stock was not lowered: ${stockError}`);
+	}, startedBy = async (stripe, subscriptionId) => {
+		let { data } = await stripe.checkout.sessions.list({
+			subscription: subscriptionId,
+			limit: 1
+		}), session = data[0], own = session?.integration_identifier === options.integrationIdentifier;
+		return own || log("info", `[stripe webhook] ${subscriptionId}: not one of this shop's, left alone.`), own ? session : null;
+	}, renew = async (stripe, invoiceId) => {
+		let invoice = await stripe.invoices.retrieve(invoiceId), subscriptionId = subscriptionOf(invoice);
+		if (!subscriptionId || invoice.billing_reason !== "subscription_cycle") return;
+		let session = await startedBy(stripe, subscriptionId);
+		if (!session) return;
+		if (invoice.status !== "paid") {
+			log("info", `[stripe webhook] ${invoiceId}: not paid yet.`);
+			return;
+		}
+		let [order, foundSettings] = await Promise.all([getRenewal(stripe, invoice, session, subscriptionId), client.fetch(SHOP_SETTINGS_QUERY)]), settings = readShopSettings(foundSettings), { stock, stockError } = await lowerStock(invoiceId, order, settings), { onRenewal } = options;
+		if (onRenewal) {
+			let outcome = await oncePerInvoice(stripe, invoice, "renewal", async () => {
+				await onRenewal(order, {
+					settings,
+					stock,
+					...stockError ? { stockError } : {},
+					session,
+					invoice,
+					stripe
+				});
+			});
+			log("info", `[stripe webhook] ${invoiceId}: renewal ${outcome}.`);
+		}
+		if (stockError) throw Error(`Stock was not lowered: ${stockError}`);
 	};
 	return async (request) => {
 		let { stripe, webhookSecret } = options;
@@ -644,6 +794,33 @@ function webhookRoute(options) {
 					session && (log("warn", `[stripe webhook] ${session.id}: the delayed payment failed.`), await options.onPaymentFailed?.(session));
 					break;
 				}
+				case "invoicePaid":
+					await renew(stripe, result.invoice.id);
+					break;
+				case "invoiceFailed": {
+					let { onRenewalFailed } = options;
+					if (!onRenewalFailed) break;
+					let invoice = await stripe.invoices.retrieve(result.invoice.id), subscriptionId = subscriptionOf(invoice), session = subscriptionId ? await startedBy(stripe, subscriptionId) : null;
+					session && (log("warn", `[stripe webhook] ${invoice.id}: a renewal's payment failed.`), await onRenewalFailed(invoice, {
+						session,
+						stripe
+					}));
+					break;
+				}
+				case "subscriptionEnded": {
+					let { onSubscriptionEnded } = options;
+					if (!onSubscriptionEnded) break;
+					let session = await startedBy(stripe, result.subscription.id);
+					if (session) {
+						let subscription = await stripe.subscriptions.retrieve(result.subscription.id);
+						log("info", `[stripe webhook] ${subscription.id}: the subscription ended.`), await onSubscriptionEnded(subscription, {
+							session,
+							stripe
+						});
+					}
+					break;
+				}
+				case "ignored": await options.onEvent?.(event, { stripe });
 			}
 		} catch (error) {
 			return log("error", `[stripe webhook] ${event.type} ${event.id} failed: ${reason(error)}`), json({ error: "Fulfilment failed" }, 500);
@@ -651,6 +828,52 @@ function webhookRoute(options) {
 		return json({ received: !0 });
 	};
 }
+/**
+* Sends a visitor to Stripe's customer portal, where a subscriber changes their card or address,
+* pauses or cancels, and finds their invoices. There are no accounts to build: the visitor types
+* their email on Stripe's page and Stripe emails them a link in.
+*
+* ```ts
+* // app/account/route.ts
+* export const GET = portalRoute({stripe})
+* ```
+*
+* Switch the portal's login link on once, in the Stripe Dashboard under Settings, Billing,
+* Customer portal, and choose there what subscribers may change.
+*/
+function portalRoute(options) {
+	let { log = consoleLog } = options, link, unavailable = (detail) => (log("error", `[portal] ${detail}`), new Response(options.message ?? "The account page isn't available right now.", {
+		status: 503,
+		headers: {
+			"Content-Type": "text/plain; charset=utf-8",
+			"Cache-Control": "no-store"
+		}
+	}));
+	return async () => {
+		let { stripe } = options;
+		if (!stripe) return unavailable("There is no Stripe key. Set one in the environment.");
+		if (!link || Date.now() - link.at > 3e5) try {
+			let { data } = await stripe.billingPortal.configurations.list({
+				active: !0,
+				limit: 100
+			}), linked = data.filter((configuration) => configuration.login_page.url), url = (linked.find((configuration) => configuration.is_default) ?? linked[0])?.login_page.url;
+			if (!url) return unavailable("The customer portal has no login link. Activate it in the Stripe Dashboard: Settings, Billing, Customer portal.");
+			link = {
+				url,
+				at: Date.now()
+			};
+		} catch (error) {
+			return unavailable(`Stripe could not be asked for the portal's address: ${reason(error)}`);
+		}
+		return new Response(null, {
+			status: 303,
+			headers: {
+				Location: link.url,
+				"Cache-Control": "no-store"
+			}
+		});
+	};
+}
 /** The package's version, sent to Stripe with each call. A test keeps it in step with package.json. */
 const STRIPE_API_VERSION = "2026-10-28.endive";
 /**
@@ -670,11 +893,11 @@ function createStripe(secretKey, config = {}) {
 		apiVersion: STRIPE_API_VERSION,
 		appInfo: {
 			name: "sanity-plugin-stripe",
-			version: "0.1.0",
+			version: "0.2.0",
 			url: "https://github.com/ConfederationStudio/sanity-plugin-stripe"
 		}
 	});
 }
-export { EU_COUNTRIES, SHOP_SETTINGS_QUERY, STRIPE_API_VERSION, WEBHOOK_EVENTS, cartProductProjection, cartProductsQuery, checkoutRoute, createStripe, dashboardUrl, formatMoney, formatPrice, orderEmail, readCartProducts, readShopSettings, readStock, regionOptions, stockLeft, webhookRoute };
+export { EU_COUNTRIES, SHOP_SETTINGS_QUERY, STRIPE_API_VERSION, WEBHOOK_EVENTS, cartProductProjection, cartProductsQuery, checkoutRoute, createStripe, dashboardUrl, describeInterval, formatMoney, formatPrice, orderEmail, portalRoute, readCartProducts, readShopSettings, readStock, readSubscription, regionOptions, shippingQuote, stockLeft, webhookRoute };
 
 //# sourceMappingURL=server.js.map