webpeel 0.12.0 → 0.12.2

package/dist/server/routes/search.js

@@ -0,0 +1,287 @@
+/**
+ * Search endpoint with caching — supports DuckDuckGo (default) and Brave (BYOK)
+ */
+import { Router } from 'express';
+import { fetch as undiciFetch } from 'undici';
+import { load } from 'cheerio';
+import { LRUCache } from 'lru-cache';
+import { peel } from '../../index.js';
+import { getSearchProvider, } from '../../core/search-provider.js';
+export function createSearchRouter(authStore) {
+    const router = Router();
+    // LRU cache: 15 minute TTL, max 500 entries, 50MB total size
+    const cache = new LRUCache({
+        max: 500,
+        ttl: 15 * 60 * 1000, // 15 minutes
+        maxSize: 50 * 1024 * 1024, // 50MB
+        sizeCalculation: (entry) => {
+            return JSON.stringify(entry).length;
+        },
+    });
+    router.get('/v1/search', async (req, res) => {
+        try {
+            const { q, count, scrapeResults, sources, categories, tbs, country, location } = req.query;
+            // --- Search provider (new: BYOK Brave support) ---
+            const providerParam = (req.query.provider || '').toLowerCase() || 'duckduckgo';
+            const validProviders = ['duckduckgo', 'brave'];
+            const providerId = validProviders.includes(providerParam)
+                ? providerParam
+                : 'duckduckgo';
+            // API key: query param, header, or empty
+            const searchApiKey = req.query.searchApiKey ||
+                req.headers['x-search-api-key'] ||
+                '';
+            // Validate query parameter
+            if (!q || typeof q !== 'string') {
+                res.status(400).json({
+                    error: 'invalid_request',
+                    message: 'Missing or invalid "q" parameter. Pass a search query: GET /v1/search?q=your+search+terms',
+                    example: 'curl "https://api.webpeel.dev/v1/search?q=latest+AI+news&count=5"',
+                    docs: 'https://webpeel.dev/docs/api-reference#search',
+                });
+                return;
+            }
+            // Parse and validate count
+            const resultCount = count ? parseInt(count, 10) : 5;
+            if (isNaN(resultCount) || resultCount < 1 || resultCount > 10) {
+                res.status(400).json({
+                    error: 'invalid_request',
+                    message: 'Invalid "count" parameter: must be between 1 and 10',
+                });
+                return;
+            }
+            // Parse sources parameter (comma-separated: web,news,images)
+            const sourcesStr = sources || 'web';
+            const sourcesArray = sourcesStr.split(',').map(s => s.trim());
+            const shouldScrape = scrapeResults === 'true';
+            // Parse new search parameters
+            const categoriesStr = categories || '';
+            const tbsStr = tbs || '';
+            const countryStr = country || '';
+            const locationStr = location || '';
+            // Build cache key (include all parameters)
+            const cacheKey = `search:${providerId}:${q}:${resultCount}:${sourcesStr}:${shouldScrape}:${categoriesStr}:${tbsStr}:${countryStr}:${locationStr}`;
+            // Check cache
+            const cached = cache.get(cacheKey);
+            if (cached) {
+                res.setHeader('X-Cache', 'HIT');
+                res.setHeader('X-Cache-Age', Math.floor((Date.now() - cached.timestamp) / 1000).toString());
+                res.json({
+                    success: true,
+                    data: cached.data,
+                });
+                return;
+            }
+            const startTime = Date.now();
+            const data = {};
+            // Fetch web results via the search-provider abstraction
+            if (sourcesArray.includes('web')) {
+                const provider = getSearchProvider(providerId);
+                const providerResults = await provider.searchWeb(q, {
+                    count: resultCount,
+                    apiKey: searchApiKey || undefined,
+                    tbs: tbsStr || undefined,
+                    country: countryStr || undefined,
+                    location: locationStr || undefined,
+                });
+                // Map to SearchResult (with optional content field)
+                let results = providerResults.map(r => ({
+                    title: r.title,
+                    url: r.url,
+                    snippet: r.snippet,
+                }));
+                // Apply category filtering if specified
+                if (categoriesStr) {
+                    const categoryList = categoriesStr.split(',').map(c => c.trim().toLowerCase());
+                    results = results.filter(result => {
+                        const urlLower = result.url.toLowerCase();
+                        return categoryList.some(category => {
+                            switch (category) {
+                                case 'github':
+                                    return urlLower.includes('github.com');
+                                case 'pdf':
+                                    return urlLower.endsWith('.pdf');
+                                case 'docs':
+                                case 'documentation':
+                                    return urlLower.includes('/docs') || urlLower.includes('/documentation');
+                                case 'blog':
+                                    return urlLower.includes('blog') || urlLower.includes('/post/');
+                                case 'news':
+                                    return urlLower.includes('news') || urlLower.includes('/article/');
+                                case 'video':
+                                    return urlLower.includes('youtube.com') || urlLower.includes('vimeo.com');
+                                case 'social':
+                                    return urlLower.includes('twitter.com') || urlLower.includes('x.com') ||
+                                        urlLower.includes('facebook.com') || urlLower.includes('linkedin.com');
+                                default:
+                                    return urlLower.includes(category);
+                            }
+                        });
+                    });
+                }
+                // Scrape each result URL if requested
+                if (shouldScrape) {
+                    for (const result of results) {
+                        try {
+                            const peelResult = await peel(result.url, {
+                                format: 'markdown',
+                                maxTokens: 2000,
+                            });
+                            result.content = peelResult.content;
+                        }
+                        catch (error) {
+                            result.content = `[Failed to scrape: ${error.message}]`;
+                        }
+                    }
+                }
+                data.web = results;
+            }
+            // Fetch news results (DDG only — Brave news is not supported via HTML scraping)
+            if (sourcesArray.includes('news')) {
+                const newsUrl = `https://html.duckduckgo.com/html/?q=${encodeURIComponent(q)}&t=news`;
+                const response = await undiciFetch(newsUrl, {
+                    headers: {
+                        'User-Agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36',
+                    },
+                });
+                if (response.ok) {
+                    const html = await response.text();
+                    const $ = load(html);
+                    const results = [];
+                    $('.result').each((_i, elem) => {
+                        if (results.length >= resultCount)
+                            return;
+                        const $result = $(elem);
+                        let title = $result.find('.result__title').text().trim();
+                        const rawUrl = $result.find('.result__a').attr('href') || '';
+                        let snippet = $result.find('.result__snippet').text().trim();
+                        const sourceText = $result.find('.result__extras__url').text().trim();
+                        if (!title || !rawUrl)
+                            return;
+                        let url = rawUrl;
+                        try {
+                            const ddgUrl = new URL(rawUrl, 'https://duckduckgo.com');
+                            const uddg = ddgUrl.searchParams.get('uddg');
+                            if (uddg) {
+                                url = decodeURIComponent(uddg);
+                            }
+                        }
+                        catch {
+                            // Use raw URL if parsing fails
+                        }
+                        try {
+                            const parsed = new URL(url);
+                            if (!['http:', 'https:'].includes(parsed.protocol)) {
+                                return;
+                            }
+                            url = parsed.href;
+                        }
+                        catch {
+                            return;
+                        }
+                        title = title.slice(0, 200);
+                        snippet = snippet.slice(0, 500);
+                        results.push({
+                            title,
+                            url,
+                            snippet,
+                            source: sourceText.slice(0, 100),
+                        });
+                    });
+                    data.news = results;
+                }
+            }
+            // Fetch image results (DDG only)
+            if (sourcesArray.includes('images')) {
+                const imagesUrl = `https://html.duckduckgo.com/html/?q=${encodeURIComponent(q)}&t=images`;
+                const response = await undiciFetch(imagesUrl, {
+                    headers: {
+                        'User-Agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36',
+                    },
+                });
+                if (response.ok) {
+                    const html = await response.text();
+                    const $ = load(html);
+                    const results = [];
+                    $('.result').each((_i, elem) => {
+                        if (results.length >= resultCount)
+                            return;
+                        const $result = $(elem);
+                        const title = $result.find('.result__title').text().trim();
+                        const thumbnail = $result.find('.result__image img').attr('src') || '';
+                        const rawUrl = $result.find('.result__a').attr('href') || '';
+                        const sourceText = $result.find('.result__extras__url').text().trim();
+                        if (!title || !rawUrl || !thumbnail)
+                            return;
+                        let url = rawUrl;
+                        try {
+                            const ddgUrl = new URL(rawUrl, 'https://duckduckgo.com');
+                            const uddg = ddgUrl.searchParams.get('uddg');
+                            if (uddg) {
+                                url = decodeURIComponent(uddg);
+                            }
+                        }
+                        catch {
+                            // Use raw URL if parsing fails
+                        }
+                        results.push({
+                            title: title.slice(0, 200),
+                            url,
+                            thumbnail,
+                            source: sourceText.slice(0, 100),
+                        });
+                    });
+                    data.images = results;
+                }
+            }
+            const elapsed = Date.now() - startTime;
+            // Track usage
+            const isSoftLimited = req.auth?.softLimited === true;
+            const hasExtraUsage = req.auth?.extraUsageAvailable === true;
+            const pgStore = authStore;
+            if (req.auth?.keyInfo?.key && typeof pgStore.trackBurstUsage === 'function') {
+                // Track burst usage (always)
+                await pgStore.trackBurstUsage(req.auth.keyInfo.key);
+                // If soft-limited with extra usage available, charge to extra usage
+                if (isSoftLimited && hasExtraUsage) {
+                    const extraResult = await pgStore.trackExtraUsage(req.auth.keyInfo.key, 'search', `search:${q}`, elapsed, 200);
+                    if (extraResult.success) {
+                        res.setHeader('X-Extra-Usage-Charged', `$${extraResult.cost.toFixed(4)}`);
+                        res.setHeader('X-Extra-Usage-New-Balance', extraResult.newBalance.toFixed(2));
+                    }
+                }
+                else if (!isSoftLimited) {
+                    // Normal weekly usage tracking
+                    await pgStore.trackUsage(req.auth.keyInfo.key, 'search');
+                }
+            }
+            // Cache results
+            cache.set(cacheKey, {
+                data,
+                timestamp: Date.now(),
+            });
+            // Add headers
+            res.setHeader('X-Cache', 'MISS');
+            res.setHeader('X-Credits-Used', '1');
+            res.setHeader('X-Processing-Time', elapsed.toString());
+            res.setHeader('X-Fetch-Type', 'search');
+            res.json({
+                success: true,
+                data,
+            });
+        }
+        catch (error) {
+            const err = error;
+            // SECURITY: Generic error message to prevent information disclosure
+            console.error('Search error:', err); // Log full error server-side
+            res.status(500).json({
+                error: 'search_failed',
+                message: 'Search request failed. If using Brave provider, verify your API key. Otherwise try again.',
+                hint: 'Free search uses DuckDuckGo (no key required). For higher quality, add provider=brave&searchApiKey=YOUR_KEY',
+                docs: 'https://webpeel.dev/docs/api-reference#search',
+            });
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=search.js.map

package/dist/server/routes/search.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"search.js","sourceRoot":"","sources":["../../../src/server/routes/search.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,KAAK,IAAI,WAAW,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,SAAS,CAAC;AAC/B,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAErC,OAAO,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AACtC,OAAO,EACL,iBAAiB,GAGlB,MAAM,+BAA+B,CAAC;AAiCvC,MAAM,UAAU,kBAAkB,CAAC,SAAoB;IACrD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,6DAA6D;IAC7D,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAqB;QAC7C,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,aAAa;QAClC,OAAO,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,OAAO;QAClC,eAAe,EAAE,CAAC,KAAK,EAAE,EAAE;YACzB,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC;QACtC,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC7D,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,KAAK,CAAC;YAE3F,oDAAoD;YACpD,MAAM,aAAa,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,QAAkB,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,YAAY,CAAC;YACzF,MAAM,cAAc,GAAuB,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;YACnE,MAAM,UAAU,GAAqB,cAAc,CAAC,QAAQ,CAAC,aAAiC,CAAC;gBAC7F,CAAC,CAAE,aAAkC;gBACrC,CAAC,CAAC,YAAY,CAAC;YAEjB,yCAAyC;YACzC,MAAM,YAAY,GACf,GAAG,CAAC,KAAK,CAAC,YAAuB;gBACjC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAY;gBAC3C,EAAE,CAAC;YAEL,2BAA2B;YAC3B,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;gBAChC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,iBAAiB;oBACxB,OAAO,EAAE,2FAA2F;oBACpG,OAAO,EAAE,mEAAmE;oBAC5E,IAAI,EAAE,+CAA+C;iBACtD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,2BAA2B;YAC3B,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAe,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC9D,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,WAAW,GAAG,EAAE,EAAE,CAAC;gBAC9D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,iBAAiB;oBACxB,OAAO,EAAE,qDAAqD;iBAC/D,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,6DAA6D;YAC7D,MAAM,UAAU,GAAI,OAAkB,IAAI,KAAK,CAAC;YAChD,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YAC9D,MAAM,YAAY,GAAG,aAAa,KAAK,MAAM,CAAC;YAE9C,8BAA8B;YAC9B,MAAM,aAAa,GAAI,UAAqB,IAAI,EAAE,CAAC;YACnD,MAAM,MAAM,GAAI,GAAc,IAAI,EAAE,CAAC;YACrC,MAAM,UAAU,GAAI,OAAkB,IAAI,EAAE,CAAC;YAC7C,MAAM,WAAW,GAAI,QAAmB,IAAI,EAAE,CAAC;YAE/C,2CAA2C;YAC3C,MAAM,QAAQ,GAAG,UAAU,UAAU,IAAI,CAAC,IAAI,WAAW,IAAI,UAAU,IAAI,YAAY,IAAI,aAAa,IAAI,MAAM,IAAI,UAAU,IAAI,WAAW,EAAE,CAAC;YAElJ,cAAc;YACd,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACnC,IAAI,MAAM,EAAE,CAAC;gBACX,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;gBAChC,GAAG,CAAC,SAAS,CAAC,aAAa,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAC5F,GAAG,CAAC,IAAI,CAAC;oBACP,OAAO,EAAE,IAAI;oBACb,IAAI,EAAE,MAAM,CAAC,IAAI;iBAClB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAC7B,MAAM,IAAI,GAIN,EAAE,CAAC;YAEP,wDAAwD;YACxD,IAAI,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;gBAC/C,MAAM,eAAe,GAAsB,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE;oBACrE,KAAK,EAAE,WAAW;oBAClB,MAAM,EAAE,YAAY,IAAI,SAAS;oBACjC,GAAG,EAAE,MAAM,IAAI,SAAS;oBACxB,OAAO,EAAE,UAAU,IAAI,SAAS;oBAChC,QAAQ,EAAE,WAAW,IAAI,SAAS;iBACnC,CAAC,CAAC;gBAEH,oDAAoD;gBACpD,IAAI,OAAO,GAAmB,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBACtD,KAAK,EAAE,CAAC,CAAC,KAAK;oBACd,GAAG,EAAE,CAAC,CAAC,GAAG;oBACV,OAAO,EAAE,CAAC,CAAC,OAAO;iBACnB,CAAC,CAAC,CAAC;gBAEJ,wCAAwC;gBACxC,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;oBAC/E,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE;wBAChC,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC;wBAC1C,OAAO,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE;4BAClC,QAAQ,QAAQ,EAAE,CAAC;gCACjB,KAAK,QAAQ;oCACX,OAAO,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;gCACzC,KAAK,KAAK;oCACR,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gCACnC,KAAK,MAAM,CAAC;gCACZ,KAAK,eAAe;oCAClB,OAAO,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;gCAC3E,KAAK,MAAM;oCACT,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gCAClE,KAAK,MAAM;oCACT,OAAO,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gCACrE,KAAK,OAAO;oCACV,OAAO,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;gCAC5E,KAAK,QAAQ;oCACX,OAAO,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;wCAC9D,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;gCAChF;oCACE,OAAO,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;4BACvC,CAAC;wBACH,CAAC,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;gBACL,CAAC;gBAED,sCAAsC;gBACtC,IAAI,YAAY,EAAE,CAAC;oBACjB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;wBAC7B,IAAI,CAAC;4BACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE;gCACxC,MAAM,EAAE,UAAU;gCAClB,SAAS,EAAE,IAAI;6BAChB,CAAC,CAAC;4BACH,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC;wBACtC,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACf,MAAM,CAAC,OAAO,GAAG,sBAAuB,KAAe,CAAC,OAAO,GAAG,CAAC;wBACrE,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC;YACrB,CAAC;YAED,gFAAgF;YAChF,IAAI,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;gBAClC,MAAM,OAAO,GAAG,uCAAuC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;gBACtF,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,OAAO,EAAE;oBAC1C,OAAO,EAAE;wBACP,YAAY,EAAE,oEAAoE;qBACnF;iBACF,CAAC,CAAC;gBAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAChB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACnC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;oBACrB,MAAM,OAAO,GAAiB,EAAE,CAAC;oBAEjC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE;wBAC7B,IAAI,OAAO,CAAC,MAAM,IAAI,WAAW;4BAAE,OAAO;wBAE1C,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;wBACxB,IAAI,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;wBACzD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;wBAC7D,IAAI,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;wBAC7D,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;wBAEtE,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM;4BAAE,OAAO;wBAE9B,IAAI,GAAG,GAAG,MAAM,CAAC;wBACjB,IAAI,CAAC;4BACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;4BACzD,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;4BAC7C,IAAI,IAAI,EAAE,CAAC;gCACT,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;4BACjC,CAAC;wBACH,CAAC;wBAAC,MAAM,CAAC;4BACP,+BAA+B;wBACjC,CAAC;wBAED,IAAI,CAAC;4BACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;4BAC5B,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gCACnD,OAAO;4BACT,CAAC;4BACD,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC;wBACpB,CAAC;wBAAC,MAAM,CAAC;4BACP,OAAO;wBACT,CAAC;wBAED,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;wBAC5B,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;wBAEhC,OAAO,CAAC,IAAI,CAAC;4BACX,KAAK;4BACL,GAAG;4BACH,OAAO;4BACP,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;yBACjC,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;oBAEH,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC;gBACtB,CAAC;YACH,CAAC;YAED,iCAAiC;YACjC,IAAI,YAAY,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACpC,MAAM,SAAS,GAAG,uCAAuC,kBAAkB,CAAC,CAAC,CAAC,WAAW,CAAC;gBAC1F,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,SAAS,EAAE;oBAC5C,OAAO,EAAE;wBACP,YAAY,EAAE,oEAAoE;qBACnF;iBACF,CAAC,CAAC;gBAEH,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;oBAChB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACnC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;oBACrB,MAAM,OAAO,GAAkB,EAAE,CAAC;oBAElC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE;wBAC7B,IAAI,OAAO,CAAC,MAAM,IAAI,WAAW;4BAAE,OAAO;wBAE1C,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;wBACxB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;wBAC3D,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;wBACvE,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;wBAC7D,MAAM,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;wBAEtE,IAAI,CAAC,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS;4BAAE,OAAO;wBAE5C,IAAI,GAAG,GAAG,MAAM,CAAC;wBACjB,IAAI,CAAC;4BACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAC;4BACzD,MAAM,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;4BAC7C,IAAI,IAAI,EAAE,CAAC;gCACT,GAAG,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;4BACjC,CAAC;wBACH,CAAC;wBAAC,MAAM,CAAC;4BACP,+BAA+B;wBACjC,CAAC;wBAED,OAAO,CAAC,IAAI,CAAC;4BACX,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;4BAC1B,GAAG;4BACH,SAAS;4BACT,MAAM,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;yBACjC,CAAC,CAAC;oBACL,CAAC,CAAC,CAAC;oBAEH,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC;gBACxB,CAAC;YACH,CAAC;YAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;YAEvC,cAAc;YACd,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,EAAE,WAAW,KAAK,IAAI,CAAC;YACrD,MAAM,aAAa,GAAG,GAAG,CAAC,IAAI,EAAE,mBAAmB,KAAK,IAAI,CAAC;YAE7D,MAAM,OAAO,GAAG,SAAgB,CAAC;YACjC,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,OAAO,OAAO,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;gBAC5E,6BAA6B;gBAC7B,MAAM,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;gBAEpD,oEAAoE;gBACpE,IAAI,aAAa,IAAI,aAAa,EAAE,CAAC;oBACnC,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,eAAe,CAC/C,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EACpB,QAAQ,EACR,UAAU,CAAC,EAAE,EACb,OAAO,EACP,GAAG,CACJ,CAAC;oBAEF,IAAI,WAAW,CAAC,OAAO,EAAE,CAAC;wBACxB,GAAG,CAAC,SAAS,CAAC,uBAAuB,EAAE,IAAI,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;wBAC1E,GAAG,CAAC,SAAS,CAAC,2BAA2B,EAAE,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;oBAChF,CAAC;gBACH,CAAC;qBAAM,IAAI,CAAC,aAAa,EAAE,CAAC;oBAC1B,+BAA+B;oBAC/B,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;gBAC3D,CAAC;YACH,CAAC;YAED,gBAAgB;YAChB,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE;gBAClB,IAAI;gBACJ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;aACtB,CAAC,CAAC;YAEH,cAAc;YACd,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;YACjC,GAAG,CAAC,SAAS,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;YACrC,GAAG,CAAC,SAAS,CAAC,mBAAmB,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YACvD,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,QAAQ,CAAC,CAAC;YAExC,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO,EAAE,IAAI;gBACb,IAAI;aACL,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,KAAc,CAAC;YAC3B,oEAAoE;YACpE,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,CAAC,6BAA6B;YAClE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,eAAe;gBACtB,OAAO,EAAE,2FAA2F;gBACpG,IAAI,EAAE,6GAA6G;gBACnH,IAAI,EAAE,+CAA+C;aACtD,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server/routes/stats.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Stats endpoint - provides dashboard statistics
+ */
+import { Router } from 'express';
+import { AuthStore } from '../auth-store.js';
+export declare function createStatsRouter(authStore: AuthStore): Router;
+//# sourceMappingURL=stats.d.ts.map

package/dist/server/routes/stats.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stats.d.ts","sourceRoot":"","sources":["../../../src/server/routes/stats.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AAEpD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,SAAS,GAAG,MAAM,CAkE9D"}

package/dist/server/routes/stats.js

@@ -0,0 +1,65 @@
+/**
+ * Stats endpoint - provides dashboard statistics
+ */
+import { Router } from 'express';
+import { PostgresAuthStore } from '../pg-auth-store.js';
+export function createStatsRouter(authStore) {
+    const router = Router();
+    router.get('/v1/stats', async (req, res) => {
+        try {
+            // Require authentication (API key or JWT session token)
+            const userId = req.auth?.keyInfo?.accountId || req.user?.userId;
+            if (!userId) {
+                res.status(401).json({
+                    error: 'unauthorized',
+                    message: 'Authentication required',
+                });
+                return;
+            }
+            // Only works with PostgreSQL backend
+            if (!(authStore instanceof PostgresAuthStore)) {
+                res.status(501).json({
+                    error: 'not_implemented',
+                    message: 'Stats endpoint requires PostgreSQL backend',
+                });
+                return;
+            }
+            // Access pool via any cast (pool is private but we need direct DB access)
+            const pgStore = authStore;
+            // Get stats from usage_logs table
+            const statsQuery = `
+        SELECT 
+          COUNT(*) as total_requests,
+          AVG(CASE WHEN status_code >= 200 AND status_code < 300 THEN 1.0 ELSE 0.0 END) * 100 as success_rate,
+          AVG(processing_time_ms) as avg_response_time
+        FROM usage_logs
+        WHERE user_id = $1
+      `;
+            const result = await pgStore.pool.query(statsQuery, [userId]);
+            if (result.rows.length === 0) {
+                // No data yet - return defaults
+                res.json({
+                    totalRequests: 0,
+                    successRate: 100,
+                    avgResponseTime: 0,
+                });
+                return;
+            }
+            const row = result.rows[0];
+            res.json({
+                totalRequests: parseInt(row.total_requests) || 0,
+                successRate: parseFloat(row.success_rate) || 100,
+                avgResponseTime: Math.round(parseFloat(row.avg_response_time)) || 0,
+            });
+        }
+        catch (error) {
+            console.error('Stats error:', error);
+            res.status(500).json({
+                error: 'internal_error',
+                message: 'Failed to retrieve stats',
+            });
+        }
+    });
+    return router;
+}
+//# sourceMappingURL=stats.js.map

package/dist/server/routes/stats.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stats.js","sourceRoot":"","sources":["../../../src/server/routes/stats.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AACpD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGxD,MAAM,UAAU,iBAAiB,CAAC,SAAoB;IACpD,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,MAAM,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5D,IAAI,CAAC;YACH,wDAAwD;YACxD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,SAAS,IAAK,GAAW,CAAC,IAAI,EAAE,MAAM,CAAC;YACzE,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,cAAc;oBACrB,OAAO,EAAE,yBAAyB;iBACnC,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,qCAAqC;YACrC,IAAI,CAAC,CAAC,SAAS,YAAY,iBAAiB,CAAC,EAAE,CAAC;gBAC9C,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,iBAAiB;oBACxB,OAAO,EAAE,4CAA4C;iBACtD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,0EAA0E;YAC1E,MAAM,OAAO,GAAG,SAAgB,CAAC;YAEjC,kCAAkC;YAClC,MAAM,UAAU,GAAG;;;;;;;OAOlB,CAAC;YAEF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YAE9D,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC7B,gCAAgC;gBAChC,GAAG,CAAC,IAAI,CAAC;oBACP,aAAa,EAAE,CAAC;oBAChB,WAAW,EAAE,GAAG;oBAChB,eAAe,EAAE,CAAC;iBACnB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAE3B,GAAG,CAAC,IAAI,CAAC;gBACP,aAAa,EAAE,QAAQ,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC;gBAChD,WAAW,EAAE,UAAU,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,GAAG;gBAChD,eAAe,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC;aACpE,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,OAAO,CAAC,KAAK,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;YACrC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,gBAAgB;gBACvB,OAAO,EAAE,0BAA0B;aACpC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/server/routes/stripe.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Stripe webhook handler for subscription management
+ */
+import { Router } from 'express';
+/**
+ * Create Stripe webhook router
+ */
+export declare function createStripeRouter(): Router;
+//# sourceMappingURL=stripe.d.ts.map

package/dist/server/routes/stripe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe.d.ts","sourceRoot":"","sources":["../../../src/server/routes/stripe.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AAepD;;GAEG;AACH,wBAAgB,kBAAkB,IAAI,MAAM,CA4G3C"}

package/dist/server/routes/stripe.js

@@ -0,0 +1,233 @@
+/**
+ * Stripe webhook handler for subscription management
+ */
+import { Router } from 'express';
+import Stripe from 'stripe';
+import pg from 'pg';
+const { Pool } = pg;
+/**
+ * Tier configuration (weekly usage model)
+ */
+const TIER_LIMITS = {
+    free: { weekly_limit: 125, burst_limit: 25, rate_limit: 10 },
+    pro: { weekly_limit: 1250, burst_limit: 100, rate_limit: 60 },
+    max: { weekly_limit: 6250, burst_limit: 500, rate_limit: 200 },
+};
+/**
+ * Create Stripe webhook router
+ */
+export function createStripeRouter() {
+    const router = Router();
+    const stripeSecretKey = process.env.STRIPE_SECRET_KEY;
+    const webhookSecret = process.env.STRIPE_WEBHOOK_SECRET;
+    const dbUrl = process.env.DATABASE_URL;
+    if (!stripeSecretKey) {
+        console.warn('STRIPE_SECRET_KEY not configured - Stripe webhooks disabled');
+        return router;
+    }
+    if (!webhookSecret) {
+        console.warn('STRIPE_WEBHOOK_SECRET not configured - Stripe webhooks disabled');
+        return router;
+    }
+    if (!dbUrl) {
+        throw new Error('DATABASE_URL environment variable is required');
+    }
+    const stripe = new Stripe(stripeSecretKey);
+    const pool = new Pool({
+        connectionString: dbUrl,
+        // TLS: enabled when DATABASE_URL contains sslmode=require.
+        // Secure by default (rejectUnauthorized: true); set PG_REJECT_UNAUTHORIZED=false
+        // only for managed DBs (Render/Neon/Supabase) that use self-signed certs.
+        ssl: process.env.DATABASE_URL?.includes('sslmode=require')
+            ? { rejectUnauthorized: process.env.PG_REJECT_UNAUTHORIZED !== 'false' }
+            : undefined,
+    });
+    /**
+     * POST /v1/webhooks/stripe
+     * Handle Stripe webhook events
+     * SECURITY: Verifies webhook signature
+     */
+    router.post('/', async (req, res) => {
+        try {
+            const sig = req.headers['stripe-signature'];
+            if (!sig || typeof sig !== 'string') {
+                res.status(400).json({
+                    error: 'missing_signature',
+                    message: 'Stripe signature header missing',
+                });
+                return;
+            }
+            // SECURITY: Verify webhook signature
+            let event;
+            try {
+                event = stripe.webhooks.constructEvent(req.body, sig, webhookSecret);
+            }
+            catch (err) {
+                console.error('Webhook signature verification failed:', err.message);
+                res.status(400).json({
+                    error: 'invalid_signature',
+                    message: 'Webhook signature verification failed',
+                });
+                return;
+            }
+            // Handle different event types
+            switch (event.type) {
+                case 'checkout.session.completed': {
+                    const session = event.data.object;
+                    await handleCheckoutCompleted(pool, session);
+                    break;
+                }
+                case 'customer.subscription.updated': {
+                    const subscription = event.data.object;
+                    await handleSubscriptionUpdated(pool, subscription);
+                    break;
+                }
+                case 'customer.subscription.deleted': {
+                    const subscription = event.data.object;
+                    await handleSubscriptionDeleted(pool, subscription);
+                    break;
+                }
+                case 'invoice.payment_failed': {
+                    const invoice = event.data.object;
+                    await handlePaymentFailed(pool, invoice);
+                    break;
+                }
+                default:
+                    console.log(`Unhandled event type: ${event.type}`);
+            }
+            res.json({ received: true });
+        }
+        catch (error) {
+            console.error('Webhook error:', error);
+            res.status(500).json({
+                error: 'webhook_failed',
+                message: 'Failed to process webhook',
+            });
+        }
+    });
+    return router;
+}
+/**
+ * Handle checkout.session.completed
+ * Upgrade user tier and set limits
+ */
+async function handleCheckoutCompleted(pool, session) {
+    try {
+        const customerId = session.customer;
+        const subscriptionId = session.subscription;
+        // Get subscription to determine tier
+        const stripe = new Stripe(process.env.STRIPE_SECRET_KEY);
+        const subscription = await stripe.subscriptions.retrieve(subscriptionId);
+        // Determine tier from price ID (you'll need to configure these)
+        const priceId = subscription.items.data[0]?.price.id;
+        const tier = getTierFromPriceId(priceId);
+        const limits = TIER_LIMITS[tier];
+        // Update user
+        await pool.query(`UPDATE users 
+      SET 
+        stripe_customer_id = $1,
+        stripe_subscription_id = $2,
+        tier = $3,
+        weekly_limit = $4,
+        burst_limit = $5,
+        rate_limit = $6,
+        updated_at = now()
+      WHERE stripe_customer_id = $1 OR email = $7`, [
+            customerId,
+            subscriptionId,
+            tier,
+            limits.weekly_limit,
+            limits.burst_limit,
+            limits.rate_limit,
+            session.customer_email,
+        ]);
+        console.log(`Checkout completed for customer ${customerId}: upgraded to ${tier}`);
+    }
+    catch (error) {
+        console.error('Failed to handle checkout completion:', error);
+        throw error;
+    }
+}
+/**
+ * Handle customer.subscription.updated
+ * Update user tier based on subscription changes
+ */
+async function handleSubscriptionUpdated(pool, subscription) {
+    try {
+        const customerId = subscription.customer;
+        const priceId = subscription.items.data[0]?.price.id;
+        const tier = getTierFromPriceId(priceId);
+        const limits = TIER_LIMITS[tier];
+        await pool.query(`UPDATE users 
+      SET 
+        tier = $1,
+        weekly_limit = $2,
+        burst_limit = $3,
+        rate_limit = $4,
+        stripe_subscription_id = $5,
+        updated_at = now()
+      WHERE stripe_customer_id = $6`, [tier, limits.weekly_limit, limits.burst_limit, limits.rate_limit, subscription.id, customerId]);
+        console.log(`Subscription updated for customer ${customerId}: tier=${tier}`);
+    }
+    catch (error) {
+        console.error('Failed to handle subscription update:', error);
+        throw error;
+    }
+}
+/**
+ * Handle customer.subscription.deleted
+ * Downgrade user to free tier
+ */
+async function handleSubscriptionDeleted(pool, subscription) {
+    try {
+        const customerId = subscription.customer;
+        const limits = TIER_LIMITS.free;
+        await pool.query(`UPDATE users 
+      SET 
+        tier = 'free',
+        weekly_limit = $1,
+        burst_limit = $2,
+        rate_limit = $3,
+        stripe_subscription_id = NULL,
+        updated_at = now()
+      WHERE stripe_customer_id = $4`, [limits.weekly_limit, limits.burst_limit, limits.rate_limit, customerId]);
+        console.log(`Subscription deleted for customer ${customerId}: downgraded to free`);
+    }
+    catch (error) {
+        console.error('Failed to handle subscription deletion:', error);
+        throw error;
+    }
+}
+/**
+ * Handle invoice.payment_failed
+ * Log payment failure (could add email notification here)
+ */
+async function handlePaymentFailed(pool, invoice) {
+    try {
+        const customerId = invoice.customer;
+        // Get user email for logging
+        const result = await pool.query('SELECT email FROM users WHERE stripe_customer_id = $1', [customerId]);
+        if (result.rows.length > 0) {
+            console.warn(`Payment failed for customer ${customerId} (${result.rows[0].email})`);
+            // Note: Email notification not implemented. Log only for now.
+        }
+    }
+    catch (error) {
+        console.error('Failed to handle payment failure:', error);
+        throw error;
+    }
+}
+/**
+ * Map Stripe price ID to tier
+ * Maps Stripe price IDs to tiers (configured via STRIPE_PRICE_PRO and STRIPE_PRICE_MAX env vars)
+ */
+function getTierFromPriceId(priceId) {
+    // Map price IDs to tiers
+    const priceMap = {
+        // Add your Stripe price IDs here
+        [process.env.STRIPE_PRICE_PRO || '']: 'pro',
+        [process.env.STRIPE_PRICE_MAX || '']: 'max',
+    };
+    return priceMap[priceId] || 'free';
+}
+//# sourceMappingURL=stripe.js.map

package/dist/server/routes/stripe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe.js","sourceRoot":"","sources":["../../../src/server/routes/stripe.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AACpD,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;AAEpB;;GAEG;AACH,MAAM,WAAW,GAAG;IAClB,IAAI,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,WAAW,EAAE,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;IAC5D,GAAG,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE;IAC7D,GAAG,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,WAAW,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE;CAC/D,CAAC;AAEF;;GAEG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,MAAM,eAAe,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACtD,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACxD,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC;IAEvC,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,OAAO,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;QAC5E,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,OAAO,CAAC,IAAI,CAAC,iEAAiE,CAAC,CAAC;QAChF,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,eAAe,CAAC,CAAC;IAE3C,MAAM,IAAI,GAAG,IAAI,IAAI,CAAC;QACpB,gBAAgB,EAAE,KAAK;QACvB,2DAA2D;QAC3D,iFAAiF;QACjF,0EAA0E;QAC1E,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,QAAQ,CAAC,iBAAiB,CAAC;YACxD,CAAC,CAAC,EAAE,kBAAkB,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,KAAK,OAAO,EAAE;YACxE,CAAC,CAAC,SAAS;KACd,CAAC,CAAC;IAEH;;;;OAIG;IACH,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACrD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;YAE5C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;gBACpC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,mBAAmB;oBAC1B,OAAO,EAAE,iCAAiC;iBAC3C,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,qCAAqC;YACrC,IAAI,KAAmB,CAAC;YACxB,IAAI,CAAC;gBACH,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,cAAc,CACpC,GAAG,CAAC,IAAI,EACR,GAAG,EACH,aAAa,CACd,CAAC;YACJ,CAAC;YAAC,OAAO,GAAQ,EAAE,CAAC;gBAClB,OAAO,CAAC,KAAK,CAAC,wCAAwC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;gBACrE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,mBAAmB;oBAC1B,OAAO,EAAE,uCAAuC;iBACjD,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YAED,+BAA+B;YAC/B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;gBACnB,KAAK,4BAA4B,CAAC,CAAC,CAAC;oBAClC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,MAAiC,CAAC;oBAC7D,MAAM,uBAAuB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBAC7C,MAAM;gBACR,CAAC;gBAED,KAAK,+BAA+B,CAAC,CAAC,CAAC;oBACrC,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,MAA6B,CAAC;oBAC9D,MAAM,yBAAyB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;oBACpD,MAAM;gBACR,CAAC;gBAED,KAAK,+BAA+B,CAAC,CAAC,CAAC;oBACrC,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,MAA6B,CAAC;oBAC9D,MAAM,yBAAyB,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;oBACpD,MAAM;gBACR,CAAC;gBAED,KAAK,wBAAwB,CAAC,CAAC,CAAC;oBAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,MAAwB,CAAC;oBACpD,MAAM,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;oBACzC,MAAM;gBACR,CAAC;gBAED;oBACE,OAAO,CAAC,GAAG,CAAC,yBAAyB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACvD,CAAC;YAED,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,gBAAgB,EAAE,KAAK,CAAC,CAAC;YACvC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,gBAAgB;gBACvB,OAAO,EAAE,2BAA2B;aACrC,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,uBAAuB,CACpC,IAAa,EACb,OAAgC;IAEhC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,OAAO,CAAC,QAAkB,CAAC;QAC9C,MAAM,cAAc,GAAG,OAAO,CAAC,YAAsB,CAAC;QAEtD,qCAAqC;QACrC,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAkB,CAAC,CAAC;QAC1D,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QAEzE,gEAAgE;QAChE,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QAEzC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAEjC,cAAc;QACd,MAAM,IAAI,CAAC,KAAK,CACd;;;;;;;;;kDAS4C,EAC5C;YACE,UAAU;YACV,cAAc;YACd,IAAI;YACJ,MAAM,CAAC,YAAY;YACnB,MAAM,CAAC,WAAW;YAClB,MAAM,CAAC,UAAU;YACjB,OAAO,CAAC,cAAc;SACvB,CACF,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,mCAAmC,UAAU,iBAAiB,IAAI,EAAE,CAAC,CAAC;IACpF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;QAC9D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,yBAAyB,CACtC,IAAa,EACb,YAAiC;IAEjC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,YAAY,CAAC,QAAkB,CAAC;QACnD,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;QAEjC,MAAM,IAAI,CAAC,KAAK,CACd;;;;;;;;oCAQ8B,EAC9B,CAAC,IAAI,EAAE,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,EAAE,EAAE,UAAU,CAAC,CAChG,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,qCAAqC,UAAU,UAAU,IAAI,EAAE,CAAC,CAAC;IAC/E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,KAAK,CAAC,CAAC;QAC9D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,yBAAyB,CACtC,IAAa,EACb,YAAiC;IAEjC,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,YAAY,CAAC,QAAkB,CAAC;QACnD,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC;QAEhC,MAAM,IAAI,CAAC,KAAK,CACd;;;;;;;;oCAQ8B,EAC9B,CAAC,MAAM,CAAC,YAAY,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,CACzE,CAAC;QAEF,OAAO,CAAC,GAAG,CAAC,qCAAqC,UAAU,sBAAsB,CAAC,CAAC;IACrF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,yCAAyC,EAAE,KAAK,CAAC,CAAC;QAChE,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,mBAAmB,CAChC,IAAa,EACb,OAAuB;IAEvB,IAAI,CAAC;QACH,MAAM,UAAU,GAAG,OAAO,CAAC,QAAkB,CAAC;QAE9C,6BAA6B;QAC7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAC7B,uDAAuD,EACvD,CAAC,UAAU,CAAC,CACb,CAAC;QAEF,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,+BAA+B,UAAU,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC;YACpF,8DAA8D;QAChE,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,mCAAmC,EAAE,KAAK,CAAC,CAAC;QAC1D,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,OAAe;IACzC,yBAAyB;IACzB,MAAM,QAAQ,GAA2C;QACvD,iCAAiC;QACjC,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,KAAK;QAC3C,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,EAAE,KAAK;KAC5C,CAAC;IAEF,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC;AACrC,CAAC"}

package/dist/server/routes/users.d.ts

@@ -0,0 +1,9 @@
+/**
+ * User authentication and API key management routes
+ */
+import { Router } from 'express';
+/**
+ * Create user routes
+ */
+export declare function createUserRouter(): Router;
+//# sourceMappingURL=users.d.ts.map