xytara 3.1.13 → 3.1.14

package/lib/checkout_processor_adapter.js

@@ -1,217 +1,217 @@
-"use strict";
-
-// Provider-agnostic hosted-checkout processor adapter (fiat money-in).
-//
-// Turns the synthetic hosted-checkout scaffold into a real fiat rail WITHOUT
-// provider lock-in and WITHOUT changing existing behavior: it engages only when
-// env configures a processor. When unconfigured, every function reports
-// "not configured" and the caller preserves the current synthetic flow.
-//
-// First provider: Stripe (Checkout Sessions + webhooks). Dependency-free
-// (node https + crypto). To add another processor, extend the provider
-// switches below; nothing else changes.
-//
-// Env:
-//   XYTARA_CHECKOUT_PROCESSOR = "stripe"   (unset/empty => not configured)
-//   STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET
-//   XYTARA_CHECKOUT_SUCCESS_URL, XYTARA_CHECKOUT_CANCEL_URL
-//   XYTARA_CHECKOUT_PRODUCT_NAME (optional), STRIPE_WEBHOOK_TOLERANCE_SECONDS (optional)
-
-const https = require("https");
-const crypto = require("crypto");
-
-function env(name) {
-  const v = process.env[name];
-  return typeof v === "string" && v.trim() ? v.trim() : "";
-}
-
-function loadCheckoutProcessorConfig() {
-  const provider = env("XYTARA_CHECKOUT_PROCESSOR").toLowerCase();
-  if (provider === "stripe") {
-    return {
-      provider: "stripe",
-      secretKey: env("STRIPE_SECRET_KEY"),
-      webhookSecret: env("STRIPE_WEBHOOK_SECRET"),
-      successUrl: env("XYTARA_CHECKOUT_SUCCESS_URL") || env("STRIPE_SUCCESS_URL"),
-      cancelUrl: env("XYTARA_CHECKOUT_CANCEL_URL") || env("STRIPE_CANCEL_URL"),
-      productName: env("XYTARA_CHECKOUT_PRODUCT_NAME") || "naxytra runtime credits",
-      webhookToleranceSeconds: Math.max(60, Number(env("STRIPE_WEBHOOK_TOLERANCE_SECONDS") || 300) || 300)
-    };
-  }
-  return { provider: null };
-}
-
-function isConfigured(config) {
-  return Boolean(config && config.provider);
-}
-
-function normalizeCurrency(currency) {
-  const c = String(currency || "usd").toLowerCase();
-  // The runtime books some prices as USD_CENTS; the minor-unit amount is already
-  // in cents, so the processor currency is plain "usd".
-  return c === "usd_cents" ? "usd" : c;
-}
-
-// Minimal form-encoded POST to Stripe. Resolves { status, json, raw }.
-function stripePost(path, formParams, secretKey, timeoutMs) {
-  const body = new URLSearchParams(formParams).toString();
-  return new Promise((resolve, reject) => {
-    const req = https.request(
-      {
-        method: "POST",
-        hostname: "api.stripe.com",
-        path,
-        headers: {
-          Authorization: "Bearer " + secretKey,
-          "Content-Type": "application/x-www-form-urlencoded",
-          "Content-Length": Buffer.byteLength(body)
-        }
-      },
-      (res) => {
-        let data = "";
-        res.on("data", (chunk) => {
-          data += chunk;
-        });
-        res.on("end", () => {
-          let json = null;
-          try {
-            json = data ? JSON.parse(data) : null;
-          } catch (_) {
-            json = null;
-          }
-          resolve({ status: res.statusCode, json, raw: data });
-        });
-      }
-    );
-    req.on("error", reject);
-    req.setTimeout(timeoutMs || 15000, () => {
-      req.destroy(new Error("stripe_request_timeout"));
-    });
-    req.write(body);
-    req.end();
-  });
-}
-
-// Create a real processor checkout session for a purchase intent.
-// `intent` = { amountMinor, currency, units, accountId, purchaseIntentId, successUrl?, cancelUrl? }
-// Returns { ok, checkout_url, checkout_reference, checkout_provider } | { ok:false, reason, detail? }.
-async function createProcessorCheckoutSession(config, intent) {
-  if (!isConfigured(config)) return { ok: false, reason: "processor_not_configured" };
-  if (config.provider === "stripe") {
-    if (!config.secretKey) return { ok: false, reason: "stripe_secret_key_missing" };
-    const amountMinor = Number(intent && intent.amountMinor);
-    if (!Number.isFinite(amountMinor) || amountMinor <= 0) return { ok: false, reason: "invalid_amount" };
-    const successUrl = (intent && intent.successUrl) || config.successUrl;
-    const cancelUrl = (intent && intent.cancelUrl) || config.cancelUrl;
-    if (!successUrl || !cancelUrl) return { ok: false, reason: "success_or_cancel_url_missing" };
-    const params = {
-      mode: "payment",
-      success_url: successUrl,
-      cancel_url: cancelUrl,
-      "line_items[0][quantity]": "1",
-      "line_items[0][price_data][currency]": normalizeCurrency(intent.currency),
-      "line_items[0][price_data][unit_amount]": String(Math.round(amountMinor)),
-      "line_items[0][price_data][product_data][name]": config.productName,
-      "metadata[purchase_intent_id]": String((intent && intent.purchaseIntentId) || ""),
-      "metadata[account_id]": String((intent && intent.accountId) || ""),
-      "metadata[credits_units]": String((intent && intent.units) || "")
-    };
-    let res;
-    try {
-      res = await stripePost("/v1/checkout/sessions", params, config.secretKey, 15000);
-    } catch (e) {
-      return { ok: false, reason: "stripe_unreachable", detail: e && e.message ? e.message : "request_error" };
-    }
-    if (!res.json || res.status >= 400) {
-      const detail = res.json && res.json.error ? res.json.error.message : `HTTP ${res.status}`;
-      return { ok: false, reason: "stripe_session_create_failed", detail };
-    }
-    return { ok: true, checkout_url: res.json.url, checkout_reference: res.json.id, checkout_provider: "stripe" };
-  }
-  return { ok: false, reason: "unsupported_processor" };
-}
-
-// Verify a processor webhook request. Returns { ok, event } | { ok:false, reason }.
-// Uses the PROCESSOR's own signature scheme (Stripe: Stripe-Signature "t=,v1=").
-function verifyProcessorWebhook(config, headers, rawBody) {
-  if (!isConfigured(config)) return { ok: false, reason: "processor_not_configured" };
-  if (config.provider === "stripe") {
-    if (!config.webhookSecret) return { ok: false, reason: "stripe_webhook_secret_missing" };
-    const lower = {};
-    for (const k in headers || {}) lower[k.toLowerCase()] = headers[k];
-    const sigHeader = String(lower["stripe-signature"] || "");
-    const parts = {};
-    sigHeader.split(",").forEach((piece) => {
-      const idx = piece.indexOf("=");
-      if (idx === -1) return;
-      const k = piece.slice(0, idx).trim();
-      const v = piece.slice(idx + 1).trim();
-      (parts[k] = parts[k] || []).push(v);
-    });
-    const t = parts.t && parts.t[0];
-    const v1s = parts.v1 || [];
-    if (!t || !v1s.length) return { ok: false, reason: "stripe_signature_malformed" };
-    const ageSeconds = Math.abs(Date.now() / 1000 - Number(t));
-    if (!Number.isFinite(ageSeconds) || ageSeconds > config.webhookToleranceSeconds) {
-      return { ok: false, reason: "stripe_timestamp_out_of_tolerance" };
-    }
-    const expected = crypto.createHmac("sha256", config.webhookSecret).update(`${t}.${rawBody}`, "utf8").digest("hex");
-    const match = v1s.some((v) => {
-      try {
-        return v.length === expected.length && crypto.timingSafeEqual(Buffer.from(v, "hex"), Buffer.from(expected, "hex"));
-      } catch (_) {
-        return false;
-      }
-    });
-    if (!match) return { ok: false, reason: "stripe_signature_invalid" };
-    let event = null;
-    try {
-      event = JSON.parse(rawBody);
-    } catch (_) {
-      return { ok: false, reason: "stripe_body_not_json" };
-    }
-    return { ok: true, event };
-  }
-  return { ok: false, reason: "unsupported_processor" };
-}
-
-// Build the Stripe-Signature header value for a raw body (used by tests and by
-// anyone generating a signed event). Not used in production verification.
-function buildStripeSignatureHeader(webhookSecret, rawBody, timestampSeconds) {
-  const t = String(timestampSeconds || Math.floor(Date.now() / 1000));
-  const v1 = crypto.createHmac("sha256", webhookSecret).update(`${t}.${rawBody}`, "utf8").digest("hex");
-  return `t=${t},v1=${v1}`;
-}
-
-// Translate a verified webhook event into a credit-grant body (matches
-// createExternalCreditGrant), or null when it is not a completed payment.
-function mapProcessorEventToGrant(config, event) {
-  if (!isConfigured(config) || !event || typeof event !== "object") return null;
-  if (config.provider === "stripe") {
-    if (event.type !== "checkout.session.completed") return null;
-    const s = (event.data && event.data.object) || {};
-    if (s.payment_status !== "paid") return null;
-    const md = s.metadata || {};
-    return {
-      account_id: md.account_id || null,
-      units: Number(md.credits_units) || null,
-      source: "stripe",
-      provider_reference: s.payment_intent || s.id || null,
-      idempotency_key: "stripe:" + (event.id || s.id),
-      amount_minor: Number(s.amount_total),
-      currency: String(s.currency || "usd").toUpperCase(),
-      purchase_intent_id: md.purchase_intent_id || null,
-      metadata: { processor: "stripe", checkout_session_id: s.id, event_id: event.id }
-    };
-  }
-  return null;
-}
-
-module.exports = {
-  loadCheckoutProcessorConfig,
-  isConfigured,
-  createProcessorCheckoutSession,
-  verifyProcessorWebhook,
-  buildStripeSignatureHeader,
-  mapProcessorEventToGrant
-};
+"use strict";
+
+// Provider-agnostic hosted-checkout processor adapter (fiat money-in).
+//
+// Turns the synthetic hosted-checkout scaffold into a real fiat rail WITHOUT
+// provider lock-in and WITHOUT changing existing behavior: it engages only when
+// env configures a processor. When unconfigured, every function reports
+// "not configured" and the caller preserves the current synthetic flow.
+//
+// First provider: Stripe (Checkout Sessions + webhooks). Dependency-free
+// (node https + crypto). To add another processor, extend the provider
+// switches below; nothing else changes.
+//
+// Env:
+//   XYTARA_CHECKOUT_PROCESSOR = "stripe"   (unset/empty => not configured)
+//   STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET
+//   XYTARA_CHECKOUT_SUCCESS_URL, XYTARA_CHECKOUT_CANCEL_URL
+//   XYTARA_CHECKOUT_PRODUCT_NAME (optional), STRIPE_WEBHOOK_TOLERANCE_SECONDS (optional)
+
+const https = require("https");
+const crypto = require("crypto");
+
+function env(name) {
+  const v = process.env[name];
+  return typeof v === "string" && v.trim() ? v.trim() : "";
+}
+
+function loadCheckoutProcessorConfig() {
+  const provider = env("XYTARA_CHECKOUT_PROCESSOR").toLowerCase();
+  if (provider === "stripe") {
+    return {
+      provider: "stripe",
+      secretKey: env("STRIPE_SECRET_KEY"),
+      webhookSecret: env("STRIPE_WEBHOOK_SECRET"),
+      successUrl: env("XYTARA_CHECKOUT_SUCCESS_URL") || env("STRIPE_SUCCESS_URL"),
+      cancelUrl: env("XYTARA_CHECKOUT_CANCEL_URL") || env("STRIPE_CANCEL_URL"),
+      productName: env("XYTARA_CHECKOUT_PRODUCT_NAME") || "naxytra runtime credits",
+      webhookToleranceSeconds: Math.max(60, Number(env("STRIPE_WEBHOOK_TOLERANCE_SECONDS") || 300) || 300)
+    };
+  }
+  return { provider: null };
+}
+
+function isConfigured(config) {
+  return Boolean(config && config.provider);
+}
+
+function normalizeCurrency(currency) {
+  const c = String(currency || "usd").toLowerCase();
+  // The runtime books some prices as USD_CENTS; the minor-unit amount is already
+  // in cents, so the processor currency is plain "usd".
+  return c === "usd_cents" ? "usd" : c;
+}
+
+// Minimal form-encoded POST to Stripe. Resolves { status, json, raw }.
+function stripePost(path, formParams, secretKey, timeoutMs) {
+  const body = new URLSearchParams(formParams).toString();
+  return new Promise((resolve, reject) => {
+    const req = https.request(
+      {
+        method: "POST",
+        hostname: "api.stripe.com",
+        path,
+        headers: {
+          Authorization: "Bearer " + secretKey,
+          "Content-Type": "application/x-www-form-urlencoded",
+          "Content-Length": Buffer.byteLength(body)
+        }
+      },
+      (res) => {
+        let data = "";
+        res.on("data", (chunk) => {
+          data += chunk;
+        });
+        res.on("end", () => {
+          let json = null;
+          try {
+            json = data ? JSON.parse(data) : null;
+          } catch (_) {
+            json = null;
+          }
+          resolve({ status: res.statusCode, json, raw: data });
+        });
+      }
+    );
+    req.on("error", reject);
+    req.setTimeout(timeoutMs || 15000, () => {
+      req.destroy(new Error("stripe_request_timeout"));
+    });
+    req.write(body);
+    req.end();
+  });
+}
+
+// Create a real processor checkout session for a purchase intent.
+// `intent` = { amountMinor, currency, units, accountId, purchaseIntentId, successUrl?, cancelUrl? }
+// Returns { ok, checkout_url, checkout_reference, checkout_provider } | { ok:false, reason, detail? }.
+async function createProcessorCheckoutSession(config, intent) {
+  if (!isConfigured(config)) return { ok: false, reason: "processor_not_configured" };
+  if (config.provider === "stripe") {
+    if (!config.secretKey) return { ok: false, reason: "stripe_secret_key_missing" };
+    const amountMinor = Number(intent && intent.amountMinor);
+    if (!Number.isFinite(amountMinor) || amountMinor <= 0) return { ok: false, reason: "invalid_amount" };
+    const successUrl = (intent && intent.successUrl) || config.successUrl;
+    const cancelUrl = (intent && intent.cancelUrl) || config.cancelUrl;
+    if (!successUrl || !cancelUrl) return { ok: false, reason: "success_or_cancel_url_missing" };
+    const params = {
+      mode: "payment",
+      success_url: successUrl,
+      cancel_url: cancelUrl,
+      "line_items[0][quantity]": "1",
+      "line_items[0][price_data][currency]": normalizeCurrency(intent.currency),
+      "line_items[0][price_data][unit_amount]": String(Math.round(amountMinor)),
+      "line_items[0][price_data][product_data][name]": config.productName,
+      "metadata[purchase_intent_id]": String((intent && intent.purchaseIntentId) || ""),
+      "metadata[account_id]": String((intent && intent.accountId) || ""),
+      "metadata[credits_units]": String((intent && intent.units) || "")
+    };
+    let res;
+    try {
+      res = await stripePost("/v1/checkout/sessions", params, config.secretKey, 15000);
+    } catch (e) {
+      return { ok: false, reason: "stripe_unreachable", detail: e && e.message ? e.message : "request_error" };
+    }
+    if (!res.json || res.status >= 400) {
+      const detail = res.json && res.json.error ? res.json.error.message : `HTTP ${res.status}`;
+      return { ok: false, reason: "stripe_session_create_failed", detail };
+    }
+    return { ok: true, checkout_url: res.json.url, checkout_reference: res.json.id, checkout_provider: "stripe" };
+  }
+  return { ok: false, reason: "unsupported_processor" };
+}
+
+// Verify a processor webhook request. Returns { ok, event } | { ok:false, reason }.
+// Uses the PROCESSOR's own signature scheme (Stripe: Stripe-Signature "t=,v1=").
+function verifyProcessorWebhook(config, headers, rawBody) {
+  if (!isConfigured(config)) return { ok: false, reason: "processor_not_configured" };
+  if (config.provider === "stripe") {
+    if (!config.webhookSecret) return { ok: false, reason: "stripe_webhook_secret_missing" };
+    const lower = {};
+    for (const k in headers || {}) lower[k.toLowerCase()] = headers[k];
+    const sigHeader = String(lower["stripe-signature"] || "");
+    const parts = {};
+    sigHeader.split(",").forEach((piece) => {
+      const idx = piece.indexOf("=");
+      if (idx === -1) return;
+      const k = piece.slice(0, idx).trim();
+      const v = piece.slice(idx + 1).trim();
+      (parts[k] = parts[k] || []).push(v);
+    });
+    const t = parts.t && parts.t[0];
+    const v1s = parts.v1 || [];
+    if (!t || !v1s.length) return { ok: false, reason: "stripe_signature_malformed" };
+    const ageSeconds = Math.abs(Date.now() / 1000 - Number(t));
+    if (!Number.isFinite(ageSeconds) || ageSeconds > config.webhookToleranceSeconds) {
+      return { ok: false, reason: "stripe_timestamp_out_of_tolerance" };
+    }
+    const expected = crypto.createHmac("sha256", config.webhookSecret).update(`${t}.${rawBody}`, "utf8").digest("hex");
+    const match = v1s.some((v) => {
+      try {
+        return v.length === expected.length && crypto.timingSafeEqual(Buffer.from(v, "hex"), Buffer.from(expected, "hex"));
+      } catch (_) {
+        return false;
+      }
+    });
+    if (!match) return { ok: false, reason: "stripe_signature_invalid" };
+    let event = null;
+    try {
+      event = JSON.parse(rawBody);
+    } catch (_) {
+      return { ok: false, reason: "stripe_body_not_json" };
+    }
+    return { ok: true, event };
+  }
+  return { ok: false, reason: "unsupported_processor" };
+}
+
+// Build the Stripe-Signature header value for a raw body (used by tests and by
+// anyone generating a signed event). Not used in production verification.
+function buildStripeSignatureHeader(webhookSecret, rawBody, timestampSeconds) {
+  const t = String(timestampSeconds || Math.floor(Date.now() / 1000));
+  const v1 = crypto.createHmac("sha256", webhookSecret).update(`${t}.${rawBody}`, "utf8").digest("hex");
+  return `t=${t},v1=${v1}`;
+}
+
+// Translate a verified webhook event into a credit-grant body (matches
+// createExternalCreditGrant), or null when it is not a completed payment.
+function mapProcessorEventToGrant(config, event) {
+  if (!isConfigured(config) || !event || typeof event !== "object") return null;
+  if (config.provider === "stripe") {
+    if (event.type !== "checkout.session.completed") return null;
+    const s = (event.data && event.data.object) || {};
+    if (s.payment_status !== "paid") return null;
+    const md = s.metadata || {};
+    return {
+      account_id: md.account_id || null,
+      units: Number(md.credits_units) || null,
+      source: "stripe",
+      provider_reference: s.payment_intent || s.id || null,
+      idempotency_key: "stripe:" + (event.id || s.id),
+      amount_minor: Number(s.amount_total),
+      currency: String(s.currency || "usd").toUpperCase(),
+      purchase_intent_id: md.purchase_intent_id || null,
+      metadata: { processor: "stripe", checkout_session_id: s.id, event_id: event.id }
+    };
+  }
+  return null;
+}
+
+module.exports = {
+  loadCheckoutProcessorConfig,
+  isConfigured,
+  createProcessorCheckoutSession,
+  verifyProcessorWebhook,
+  buildStripeSignatureHeader,
+  mapProcessorEventToGrant
+};