[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_154":155,"_156":157},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_103":85,"_27":53,"_13":14,"_104":-5,"_11":105,"_106":107,"_108":109,"_110":111,"_112":113,"_20":-5,"_114":-5,"_115":-5,"_116":25,"_117":118,"_119":120,"_121":-5,"_122":-5,"_123":124},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":53,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",14,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","104692d4-402d-11f1-b56c-42b51c65c3df","name","fileType","http","content","// ─── formsStripeCheckout (v11 — MULTI-ACCOUNT) ──────────────────────────\n// Val.town HTTP endpoint that fronts Stripe for Forms Master checkout flows.\n//\n// MULTI-ACCOUNT ROUTING (v11):\n// Three Stripe accounts settle to three bank accounts:\n// main → Forms Academy - Main (USD, default for everything)\n// residency → Forms Academy - Residency (USD, residency tuition)\n// madrid → Forms Madrid (EUR)\n//\n// Routing rules (applied at checkout time, derived from plan/event row):\n// - subscription_plans.stripe_account is authoritative\n// - events.stripe_account is authoritative\n// - both are auto-derived in DB by the schema (currency='EUR' → madrid;\n// category='residency' AND currency='USD' → residency; else → main)\n//\n// Per-account env vars (NEW):\n// STRIPE_SECRET_KEY_MAIN\n// STRIPE_SECRET_KEY_RESIDENCY\n// STRIPE_SECRET_KEY_MADRID\n//\n// Backward compat: if any of the per-account keys is missing, the val falls\n// back to the legacy STRIPE_SECRET_KEY. So the val behaves identically to v10\n// today (single-account through Residency) until you populate the new env\n// vars. Once all three are populated, routing kicks in automatically.\n//\n// Stripe customer IDs are per-account (NOT portable). p_families now has\n// stripe_customer_id_main / _residency / _madrid columns. The val looks up\n// the right slot for the routing account, creates a customer in that\n// account if missing, and saves it back to the right slot.\n\nconst SUPABASE_URL = \"https://lmgplytnycmvuemhvmfc.supabase.co\";\nconst FORMS_ORG_ID = \"a0000000-0000-0000-0000-000000000001\";\nconst PORTAL_URL = \"https://forms-master.netlify.app\";\nconst FORMS_EMAILS_ENDPOINT = Deno.env.get(\"FORMS_EMAILS_ENDPOINT\")\n || \"https://director--70321ff843c311f1b7a142b51c65c3df.web.val.run\";\n\n// ─── Multi-account key resolution ─────────────────────────────────────────\ntype Account = \"main\" | \"residency\" | \"madrid\";\nconst ACCOUNTS: Account[] = [\"main\", \"residency\", \"madrid\"];\n\n// Legacy single-account key (used as fallback when per-account keys missing).\n// Today this points at Residency. After Phase D it can be removed.\nconst LEGACY_KEY = Deno.env.get(\"STRIPE_SECRET_KEY\") || \"\";\n\nconst STRIPE_KEYS: Record = {\n main: Deno.env.get(\"STRIPE_SECRET_KEY_MAIN\") || LEGACY_KEY,\n residency: Deno.env.get(\"STRIPE_SECRET_KEY_RESIDENCY\") || LEGACY_KEY,\n madrid: Deno.env.get(\"STRIPE_SECRET_KEY_MADRID\") || LEGACY_KEY,\n};\n\nconst ACCOUNT_LABELS: Record = {\n main: \"Forms Academy - Main\",\n residency: \"Forms Academy - Residency\",\n madrid: \"Forms Madrid\",\n};\n\nconst SUPABASE_KEY = Deno.env.get(\"FORMS_SUPABASE_SERVICE_KEY\")\n || Deno.env.get(\"FORMS_SUPABASE_ANON\")\n || \"\";\n\nfor (const a of ACCOUNTS) {\n if (!STRIPE_KEYS[a]) console.warn(`[checkout] No Stripe key for account=${a}`);\n}\nif (!SUPABASE_KEY) console.warn(\"[checkout] No Supabase key set — DB writes will fail\");\n\nfunction keyForAccount(account: Account): string {\n const k = STRIPE_KEYS[account];\n if (!k) throw new Error(`No Stripe key configured for account '${account}' (${ACCOUNT_LABELS[account]})`);\n return k;\n}\n\nfunction customerColumnForAccount(account: Account): string {\n return `stripe_customer_id_${account}`;\n}\n\n// ─── Helpers ──────────────────────────────────────────────────────────────\n\nconst cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n};\n\nfunction json(obj: any, status = 200): Response {\n return new Response(JSON.stringify(obj), {\n status,\n headers: { \"Content-Type\": \"application/json\", ...cors },\n });\n}\n\n// All Stripe calls now require an explicit account. The signature guarantees\n// you can't accidentally hit Stripe with the wrong key.\nasync function stripe(\n account: Account,\n path: string,\n init: { method?: string; body?: Record } = {},\n): Promise {\n const method = init.method || \"POST\";\n let body: string | undefined;\n if (init.body && typeof init.body === \"object\") body = encodeForm(init.body);\n const res = await fetch(`https://api.stripe.com/v1/${path}`, {\n method,\n headers: {\n \"Authorization\": \"Bearer \" + keyForAccount(account),\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body,\n });\n const data = await res.json();\n if (!res.ok) {\n console.error(`[checkout] stripe api error (account=${account}, path=${path})`, data);\n throw new Error(data?.error?.message || \"Stripe API error\");\n }\n return data;\n}\n\nfunction encodeForm(obj: Record): string {\n const parts: string[] = [];\n for (const k of Object.keys(obj)) {\n const v = obj[k];\n if (v === undefined || v === null) continue;\n parts.push(encodeURIComponent(k) + \"=\" + encodeURIComponent(String(v)));\n }\n return parts.join(\"&\");\n}\n\nasync function sb(path: string, init: RequestInit = {}): Promise {\n const res = await fetch(`${SUPABASE_URL}/rest/v1/${path}`, {\n ...init,\n headers: {\n \"apikey\": SUPABASE_KEY,\n \"Authorization\": \"Bearer \" + SUPABASE_KEY,\n \"Content-Type\": \"application/json\",\n ...(init.headers || {}),\n },\n });\n if (!res.ok) {\n const txt = await res.text();\n throw new Error(`Supabase ${res.status}: ${txt}`);\n }\n const ct = res.headers.get(\"Content-Type\") || \"\";\n if (!ct.includes(\"application/json\")) return null;\n return res.json();\n}\n\nasync function sbOne(path: string): Promise {\n const rows = await sb(path);\n return Array.isArray(rows) && rows.length ? rows[0] : null;\n}\n\nasync function sbUpsert(path: string, body: any, onConflict?: string): Promise {\n const url = onConflict ? `${path}?on_conflict=${encodeURIComponent(onConflict)}` : path;\n const res = await fetch(`${SUPABASE_URL}/rest/v1/${url}`, {\n method: \"POST\",\n headers: {\n \"apikey\": SUPABASE_KEY,\n \"Authorization\": \"Bearer \" + SUPABASE_KEY,\n \"Content-Type\": \"application/json\",\n \"Prefer\": \"resolution=merge-duplicates,return=representation\",\n },\n body: JSON.stringify(body),\n });\n if (!res.ok) {\n const txt = await res.text();\n throw new Error(`Supabase upsert ${res.status}: ${txt}`);\n }\n return res.json();\n}\n\nasync function sbPatch(path: string, body: any): Promise {\n const res = await fetch(`${SUPABASE_URL}/rest/v1/${path}`, {\n method: \"PATCH\",\n headers: {\n \"apikey\": SUPABASE_KEY,\n \"Authorization\": \"Bearer \" + SUPABASE_KEY,\n \"Content-Type\": \"application/json\",\n \"Prefer\": \"return=minimal\",\n },\n body: JSON.stringify(body),\n });\n if (!res.ok) {\n const txt = await res.text();\n throw new Error(`Supabase patch ${res.status}: ${txt}`);\n }\n}\n\nasync function sendEmail(kind: string, to: string, data: any): Promise {\n if (!FORMS_EMAILS_ENDPOINT || !to) return;\n try {\n await fetch(FORMS_EMAILS_ENDPOINT, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ kind, to, data, portalUrl: PORTAL_URL }),\n });\n } catch (e) {\n console.error(\"[checkout] sendEmail failed:\", e);\n }\n}\n\nfunction intervalLabel(interval: string, count: number): string {\n const n = count || 1;\n if (n === 1) {\n if (interval === \"month\") return \"monthly\";\n if (interval === \"year\") return \"yearly\";\n if (interval === \"week\") return \"weekly\";\n return interval + \"ly\";\n }\n return `every ${n} ${interval}s`;\n}\n\nfunction computeCancelAt(plan: any): number | null {\n if (!plan?.billing_cycles || plan.billing_cycles <= 0) return null;\n const trialDays = plan.trial_days || 0;\n const ic = plan.interval_count || 1;\n const cycles = plan.billing_cycles;\n const d = new Date();\n if (trialDays > 0) d.setDate(d.getDate() + trialDays);\n const totalUnits = ic * cycles;\n if (plan.interval === \"month\") d.setMonth(d.getMonth() + totalUnits);\n else if (plan.interval === \"year\") d.setFullYear(d.getFullYear() + totalUnits);\n else if (plan.interval === \"week\") d.setDate(d.getDate() + 7 * totalUnits);\n else if (plan.interval === \"day\") d.setDate(d.getDate() + totalUnits);\n else return null;\n return Math.floor(d.getTime() / 1000);\n}\n\n// ─── Routing helpers ──────────────────────────────────────────────────────\nfunction accountForPlan(plan: any): Account {\n const a = plan?.stripe_account;\n if (a === \"main\" || a === \"residency\" || a === \"madrid\") return a;\n console.warn(`[checkout] plan ${plan?.id} has invalid stripe_account=${a}, defaulting to main`);\n return \"main\";\n}\n\nfunction accountForEvent(event: any): Account {\n const a = event?.stripe_account;\n if (a === \"main\" || a === \"residency\" || a === \"madrid\") return a;\n console.warn(`[checkout] event ${event?.id} has invalid stripe_account=${a}, defaulting to main`);\n return \"main\";\n}\n\n// ─── Plan → Stripe product/price (lazy create, per-account) ───────────────\nasync function ensureStripePriceForPlan(plan: any): Promise<{ priceId: string; productId: string; account: Account }> {\n const account = accountForPlan(plan);\n if (plan.stripe_price_id && plan.stripe_product_id) {\n return { priceId: plan.stripe_price_id, productId: plan.stripe_product_id, account };\n }\n let productId = plan.stripe_product_id;\n if (!productId) {\n const product = await stripe(account, \"products\", {\n body: {\n \"name\": plan.name,\n \"metadata[plan_id]\": plan.id,\n \"metadata[org_id]\": plan.org_id,\n ...(plan.description ? { \"description\": plan.description } : {}),\n },\n });\n productId = product.id;\n }\n const price = await stripe(account, \"prices\", {\n body: {\n \"currency\": (plan.currency || \"USD\").toLowerCase(),\n \"unit_amount\": plan.amount_cents,\n \"product\": productId,\n \"recurring[interval]\": plan.interval || \"month\",\n \"recurring[interval_count]\": plan.interval_count || 1,\n \"metadata[plan_id]\": plan.id,\n },\n });\n await sbPatch(`subscription_plans?id=eq.${plan.id}`, {\n stripe_product_id: productId,\n stripe_price_id: price.id,\n });\n return { priceId: price.id, productId, account };\n}\n\n// ─── Customer (lazy create, per-account) ──────────────────────────────────\nasync function ensureStripeCustomerForFamily(\n family: any,\n account: Account,\n email?: string | null,\n): Promise {\n const col = customerColumnForAccount(account);\n if (family[col]) return family[col];\n\n // Backward-compat: legacy stripe_customer_id used to belong to Residency.\n if (account === \"residency\" && family.stripe_customer_id) {\n await sbPatch(`p_families?id=eq.${family.id}`, { [col]: family.stripe_customer_id });\n return family.stripe_customer_id;\n }\n\n const cust = await stripe(account, \"customers\", {\n body: {\n \"name\": family.family_name || \"\",\n ...(email || family.primary_email ? { \"email\": email || family.primary_email } : {}),\n \"metadata[family_id]\": family.id,\n \"metadata[org_id]\": family.org_id,\n \"metadata[stripe_account]\": account,\n },\n });\n await sbPatch(`p_families?id=eq.${family.id}`, { [col]: cust.id });\n return cust.id;\n}\n\n// ─── Family awards → Stripe coupons ───────────────────────────────────────\n// When a parent enters checkout for a residency subscription, the awards\n// recorded by the admin (TEFA, scholarship, sibling) need to become real\n// Stripe Coupons attached to the subscription. This function:\n// 1. Reads pending awards for the family on this plan\n// 2. Creates a Stripe Coupon for each (in the right account)\n// 3. Returns the coupon IDs so they can be applied to the Checkout session\n//\n// A subscription can carry only ONE coupon natively. To stack TEFA +\n// scholarship + sibling, we apply the first as discounts on the line item\n// and stamp the rest in metadata for invoice line-item rendering. When the\n// subscription is created, we then convert all awards into per-invoice\n// \"discounts\" via the Subscriptions API.\n//\n// For now, we create coupons for the awards but only attach the first one\n// natively to the Checkout session. The remaining coupons are stored on the\n// subscription via the webhook handler (which we'll update separately).\n//\n// Idempotent: if award already has stripe_coupon_id, reuse it.\n\nasync function ensurePendingAwardsAsCoupons(\n familyId: string,\n planId: string,\n account: Account,\n): Promise> {\n const awards = await sb(\n `family_awards?family_id=eq.${familyId}&plan_id=eq.${planId}&status=eq.pending&select=*`,\n );\n if (!awards || awards.length === 0) return [];\n\n const out: Array<{ id: string; coupon_id: string; type: string; label: string }> = [];\n\n for (const award of awards) {\n if (award.stripe_coupon_id) {\n out.push({ id: award.id, coupon_id: award.stripe_coupon_id, type: award.award_type, label: award.display_label });\n continue;\n }\n\n // Build coupon body. Stripe requires either amount_off (with currency)\n // OR percent_off, never both. Coupons are \"forever\" duration since we\n // want them to apply to every monthly invoice for the life of the sub.\n const couponBody: Record = {\n \"name\": award.display_label,\n \"duration\": \"forever\",\n \"metadata[forms_award_id]\": award.id,\n \"metadata[forms_award_type]\": award.award_type,\n \"metadata[family_id]\": familyId,\n };\n if (award.amount_cents != null) {\n couponBody[\"amount_off\"] = award.amount_cents;\n couponBody[\"currency\"] = \"usd\"; // residency tuition is USD\n } else if (award.percent_off != null) {\n couponBody[\"percent_off\"] = award.percent_off;\n } else {\n console.warn(`[awards] award ${award.id} has neither amount_off nor percent_off; skipping`);\n continue;\n }\n\n const coupon = await stripe(account, \"coupons\", { body: couponBody });\n await sbPatch(`family_awards?id=eq.${award.id}`, {\n stripe_coupon_id: coupon.id,\n stripe_account: account,\n });\n out.push({ id: award.id, coupon_id: coupon.id, type: award.award_type, label: award.display_label });\n }\n\n return out;\n}\n\n// After a subscription is successfully created, flip the pending awards to\n// active and attach them to the subscription_id. Idempotent.\nasync function activateAwardsForSubscription(\n familyId: string,\n planId: string,\n subscriptionId: string,\n): Promise {\n const awards = await sb(\n `family_awards?family_id=eq.${familyId}&plan_id=eq.${planId}&status=eq.pending&select=*`,\n );\n if (!awards || awards.length === 0) return;\n for (const a of awards) {\n await sbPatch(`family_awards?id=eq.${a.id}`, {\n subscription_id: subscriptionId,\n status: \"active\",\n });\n // History entry\n await sb(`family_award_history`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n award_id: a.id,\n event_type: \"status_changed\",\n snapshot: { ...a, subscription_id: subscriptionId, status: \"active\" },\n change_note: \"Activated on subscription creation\",\n }),\n });\n }\n}\n\n// ─── Subscription projection (writes to DB, stamps stripe_account) ────────\nasync function projectSubscriptionToDb(sub: any, account: Account): Promise {\n const meta = sub.metadata || {};\n const planId = meta.plan_id || null;\n const familyId = meta.family_id || null;\n const playerId = meta.player_id || null;\n const orgId = meta.org_id || FORMS_ORG_ID;\n const item = sub.items?.data?.[0];\n const price = item?.price;\n const row = {\n org_id: orgId,\n family_id: familyId,\n plan_id: planId,\n player_id: playerId,\n stripe_account: account,\n stripe_customer_id: sub.customer,\n stripe_subscription_id: sub.id,\n stripe_price_id: price?.id || null,\n status: sub.status,\n current_period_start: sub.current_period_start ? new Date(sub.current_period_start * 1000).toISOString() : null,\n current_period_end: sub.current_period_end ? new Date(sub.current_period_end * 1000).toISOString() : null,\n cancel_at_period_end: !!sub.cancel_at_period_end,\n canceled_at: sub.canceled_at ? new Date(sub.canceled_at * 1000).toISOString() : null,\n ended_at: sub.ended_at ? new Date(sub.ended_at * 1000).toISOString() : null,\n trial_end: sub.trial_end ? new Date(sub.trial_end * 1000).toISOString() : null,\n amount_cents: price?.unit_amount || null,\n currency: (price?.currency || \"usd\").toUpperCase(),\n interval: price?.recurring?.interval || null,\n interval_count: price?.recurring?.interval_count || null,\n latest_invoice_id: typeof sub.latest_invoice === \"string\" ? sub.latest_invoice : sub.latest_invoice?.id || null,\n metadata: meta,\n };\n if (!familyId) {\n console.warn(\"[checkout] sub missing family_id metadata:\", sub.id);\n return null;\n }\n await sbUpsert(\"family_subscriptions\", row, \"stripe_subscription_id\");\n return row;\n}\n\n// ─── Mode handlers ────────────────────────────────────────────────────────\n\nasync function handleSubscriptionCheckout(body: any): Promise {\n const sub = body.subscription || {};\n const { plan_id, family_id, player_id, customer_email, existing_customer_id } = sub;\n if (!plan_id || !family_id) return json({ error: \"subscription requires plan_id and family_id\" }, 400);\n if (!body.success_url || !body.cancel_url) return json({ error: \"success_url and cancel_url required\" }, 400);\n\n const plan = await sbOne(`subscription_plans?id=eq.${plan_id}&select=*`);\n if (!plan) return json({ error: \"plan not found\" }, 404);\n if (plan.status !== \"active\") return json({ error: \"plan is archived\" }, 400);\n\n const family = await sbOne(`p_families?id=eq.${family_id}&select=*`);\n if (!family) return json({ error: \"family not found\" }, 404);\n\n const { priceId, account } = await ensureStripePriceForPlan(plan);\n const customerId = existing_customer_id\n || await ensureStripeCustomerForFamily(family, account, customer_email);\n\n // Build any pending family awards into Stripe Coupons. The first one is\n // attached to the Checkout session natively (Stripe supports a single\n // coupon per Checkout). Additional coupons are deferred to the webhook\n // handler that listens for subscription.created and applies them via the\n // Subscriptions API. Saved as 'pending' until activation.\n const awardCoupons = await ensurePendingAwardsAsCoupons(family_id, plan_id, account);\n\n const params: Record = {\n \"mode\": \"subscription\",\n \"customer\": customerId,\n \"success_url\": body.success_url,\n \"cancel_url\": body.cancel_url,\n \"line_items[0][price]\": priceId,\n \"line_items[0][quantity]\": 1,\n \"allow_promotion_codes\": \"true\",\n \"metadata[forms_kind]\": \"subscription\",\n \"metadata[plan_id]\": plan_id,\n \"metadata[family_id]\": family_id,\n \"metadata[org_id]\": family.org_id,\n \"metadata[stripe_account]\": account,\n \"subscription_data[metadata][plan_id]\": plan_id,\n \"subscription_data[metadata][family_id]\": family_id,\n \"subscription_data[metadata][org_id]\": family.org_id,\n \"subscription_data[metadata][stripe_account]\": account,\n };\n\n // Apply award coupons. Stripe Checkout supports a single discount; if\n // there are multiple awards, attach the first and stamp the rest in\n // subscription metadata so the webhook can apply them.\n if (awardCoupons.length > 0) {\n params[\"discounts[0][coupon]\"] = awardCoupons[0].coupon_id;\n // Disable promotion codes when we already have a coupon (mutually exclusive in Checkout)\n delete params[\"allow_promotion_codes\"];\n if (awardCoupons.length > 1) {\n const extraIds = awardCoupons.slice(1).map(c => c.coupon_id).join(\",\");\n params[\"subscription_data[metadata][forms_extra_coupons]\"] = extraIds;\n }\n params[\"subscription_data[metadata][forms_award_ids]\"] = awardCoupons.map(c => c.id).join(\",\");\n }\n\n // ACH for high-value USD subscriptions.\n // ACH = 0.8% capped at $5 vs card 2.9% + $0.30. For $1,375 charges,\n // saves $35/charge or $350+/year/family. Threshold: USD plans >= $200/charge.\n const isUsdHighValue = (plan.currency || \"USD\") === \"USD\" && (plan.amount_cents || 0) >= 20000;\n if (isUsdHighValue) {\n params[\"payment_method_types[0]\"] = \"card\";\n params[\"payment_method_types[1]\"] = \"us_bank_account\";\n params[\"payment_method_options[us_bank_account][financial_connections][permissions][0]\"] = \"payment_method\";\n params[\"payment_method_options[us_bank_account][financial_connections][permissions][1]\"] = \"balances\";\n }\n\n // SEPA for EUR subscriptions (Madrid).\n // SEPA = ~0.35% capped at €5/charge vs European cards ~1.5%.\n if (account === \"madrid\" && (plan.currency || \"EUR\") === \"EUR\") {\n params[\"payment_method_types[0]\"] = \"card\";\n params[\"payment_method_types[1]\"] = \"sepa_debit\";\n }\n\n if (player_id) {\n params[\"metadata[player_id]\"] = player_id;\n params[\"subscription_data[metadata][player_id]\"] = player_id;\n }\n if (plan.trial_days && plan.trial_days > 0) {\n params[\"subscription_data[trial_period_days]\"] = plan.trial_days;\n }\n const cancelAt = computeCancelAt(plan);\n if (cancelAt) params[\"subscription_data[metadata][forms_cancel_at]\"] = String(cancelAt);\n\n const session = await stripe(account, \"checkout/sessions\", { body: params });\n return json({ url: session.url, session_id: session.id, account });\n}\n\nasync function handleAdminSubscribe(body: any): Promise {\n const a = body.admin_subscribe || {};\n const { plan_id, family_id, player_id, send_email } = a;\n if (!plan_id || !family_id) return json({ error: \"admin_subscribe requires plan_id and family_id\" }, 400);\n\n const plan = await sbOne(`subscription_plans?id=eq.${plan_id}&select=*`);\n if (!plan) return json({ error: \"plan not found\" }, 404);\n if (plan.status !== \"active\") return json({ error: \"plan is archived\" }, 400);\n const family = await sbOne(`p_families?id=eq.${family_id}&select=*`);\n if (!family) return json({ error: \"family not found\" }, 404);\n\n const { priceId, account } = await ensureStripePriceForPlan(plan);\n const customerId = await ensureStripeCustomerForFamily(family, account, family.primary_email);\n\n // Award coupons (same logic as parent-initiated checkout)\n const awardCoupons = await ensurePendingAwardsAsCoupons(family_id, plan_id, account);\n\n const successUrl = `${PORTAL_URL}/?stripe=sub_success&family_id=${family.id}`;\n const cancelUrl = `${PORTAL_URL}/?stripe=sub_cancel`;\n\n const params: Record = {\n \"mode\": \"subscription\",\n \"customer\": customerId,\n \"success_url\": successUrl,\n \"cancel_url\": cancelUrl,\n \"line_items[0][price]\": priceId,\n \"line_items[0][quantity]\": 1,\n \"allow_promotion_codes\": \"true\",\n \"metadata[forms_kind]\": \"subscription\",\n \"metadata[plan_id]\": plan_id,\n \"metadata[family_id]\": family_id,\n \"metadata[org_id]\": family.org_id,\n \"metadata[stripe_account]\": account,\n \"metadata[admin_initiated]\": \"1\",\n \"subscription_data[metadata][plan_id]\": plan_id,\n \"subscription_data[metadata][family_id]\": family_id,\n \"subscription_data[metadata][org_id]\": family.org_id,\n \"subscription_data[metadata][stripe_account]\": account,\n \"subscription_data[metadata][admin_initiated]\": \"1\",\n };\n\n if (awardCoupons.length > 0) {\n params[\"discounts[0][coupon]\"] = awardCoupons[0].coupon_id;\n delete params[\"allow_promotion_codes\"];\n if (awardCoupons.length > 1) {\n const extraIds = awardCoupons.slice(1).map(c => c.coupon_id).join(\",\");\n params[\"subscription_data[metadata][forms_extra_coupons]\"] = extraIds;\n }\n params[\"subscription_data[metadata][forms_award_ids]\"] = awardCoupons.map(c => c.id).join(\",\");\n }\n\n const isUsdHighValue = (plan.currency || \"USD\") === \"USD\" && (plan.amount_cents || 0) >= 20000;\n if (isUsdHighValue) {\n params[\"payment_method_types[0]\"] = \"card\";\n params[\"payment_method_types[1]\"] = \"us_bank_account\";\n params[\"payment_method_options[us_bank_account][financial_connections][permissions][0]\"] = \"payment_method\";\n params[\"payment_method_options[us_bank_account][financial_connections][permissions][1]\"] = \"balances\";\n }\n if (account === \"madrid\" && (plan.currency || \"EUR\") === \"EUR\") {\n params[\"payment_method_types[0]\"] = \"card\";\n params[\"payment_method_types[1]\"] = \"sepa_debit\";\n }\n\n if (player_id) {\n params[\"metadata[player_id]\"] = player_id;\n params[\"subscription_data[metadata][player_id]\"] = player_id;\n }\n if (plan.trial_days && plan.trial_days > 0) {\n params[\"subscription_data[trial_period_days]\"] = plan.trial_days;\n }\n const cancelAt = computeCancelAt(plan);\n if (cancelAt) params[\"subscription_data[metadata][forms_cancel_at]\"] = String(cancelAt);\n\n const session = await stripe(account, \"checkout/sessions\", { body: params });\n\n if (send_email !== false && family.primary_email) {\n await sendEmail(\"admin_subscription_invite\", family.primary_email, {\n familyName: family.family_name,\n planName: plan.name,\n amountCents: plan.amount_cents,\n currency: plan.currency || \"USD\",\n intervalLabel: intervalLabel(plan.interval || \"month\", plan.interval_count || 1),\n checkoutUrl: session.url,\n trialDays: plan.trial_days || 0,\n });\n }\n return json({ ok: true, url: session.url, session_id: session.id, account, emailed: send_email !== false && !!family.primary_email });\n}\n\nasync function handleCompSubscription(body: any): Promise {\n const c = body.comp_subscription || {};\n const { plan_id, family_id, player_id, reason, ends_at } = c;\n if (!plan_id || !family_id) return json({ error: \"comp requires plan_id and family_id\" }, 400);\n const plan = await sbOne(`subscription_plans?id=eq.${plan_id}&select=*`);\n if (!plan) return json({ error: \"plan not found\" }, 404);\n const family = await sbOne(`p_families?id=eq.${family_id}&select=*`);\n if (!family) return json({ error: \"family not found\" }, 404);\n\n const account = accountForPlan(plan);\n const compId = \"comp_\" + crypto.randomUUID();\n const now = new Date();\n const periodEnd = ends_at ? new Date(ends_at) : (() => {\n const d = new Date(now);\n const ic = plan.interval_count || 1;\n const cycles = (plan.billing_cycles && plan.billing_cycles > 0) ? plan.billing_cycles : 1;\n const totalUnits = ic * cycles;\n if (plan.interval === \"month\") d.setMonth(d.getMonth() + totalUnits);\n else if (plan.interval === \"year\") d.setFullYear(d.getFullYear() + totalUnits);\n else if (plan.interval === \"week\") d.setDate(d.getDate() + 7 * totalUnits);\n else d.setMonth(d.getMonth() + 1);\n return d;\n })();\n\n const row = {\n org_id: family.org_id,\n family_id,\n plan_id,\n player_id: player_id || null,\n stripe_account: account,\n stripe_customer_id: family[customerColumnForAccount(account)] || family.stripe_customer_id || null,\n stripe_subscription_id: compId,\n stripe_price_id: plan.stripe_price_id || null,\n status: \"active\",\n current_period_start: now.toISOString(),\n current_period_end: periodEnd.toISOString(),\n cancel_at_period_end: false,\n amount_cents: plan.amount_cents,\n currency: plan.currency || \"USD\",\n interval: plan.interval,\n interval_count: plan.interval_count || 1,\n metadata: { comp: true, comp_reason: reason || \"Admin comp\", comped_at: now.toISOString() },\n notes: reason ? `Comped: ${reason}` : \"Comped (admin-granted)\",\n started_at: now.toISOString(),\n };\n await sbUpsert(\"family_subscriptions\", row, \"stripe_subscription_id\");\n\n if (family.primary_email) {\n await sendEmail(\"subscription_active\", family.primary_email, {\n familyName: family.family_name,\n planName: plan.name + \" (Comped)\",\n amountCents: 0,\n currency: plan.currency || \"USD\",\n intervalLabel: intervalLabel(plan.interval || \"month\", plan.interval_count || 1),\n currentPeriodEnd: periodEnd.toISOString(),\n portalUrl: PORTAL_URL,\n });\n }\n return json({ ok: true, comp_id: compId, account });\n}\n\nasync function handleBillingPortal(body: any): Promise {\n const p = body.portal || {};\n const { customer_id, return_url, account: explicitAccount } = p;\n if (!customer_id) return json({ error: \"portal requires customer_id\" }, 400);\n if (!return_url) return json({ error: \"portal requires return_url\" }, 400);\n\n // Caller may pass account explicitly. If not, look it up from p_families\n // by matching customer_id against any of the per-account slots.\n let account: Account = explicitAccount && ACCOUNTS.includes(explicitAccount as Account)\n ? explicitAccount as Account\n : \"residency\"; // safe default during transition\n\n if (!explicitAccount) {\n for (const a of ACCOUNTS) {\n const col = customerColumnForAccount(a);\n const fam = await sbOne(`p_families?${col}=eq.${customer_id}&select=id`);\n if (fam) { account = a; break; }\n }\n }\n\n const session = await stripe(account, \"billing_portal/sessions\", {\n body: {\n \"customer\": customer_id,\n \"return_url\": return_url,\n },\n });\n return json({ url: session.url, account });\n}\n\nasync function accountForSubscriptionId(subId: string): Promise {\n const row = await sbOne(`family_subscriptions?stripe_subscription_id=eq.${subId}&select=stripe_account`);\n const a = row?.stripe_account;\n if (a === \"main\" || a === \"residency\" || a === \"madrid\") return a;\n console.warn(`[checkout] sub ${subId} missing stripe_account, defaulting to residency`);\n return \"residency\";\n}\n\nasync function handleCancelSubscription(body: any): Promise {\n const c = body.cancel_subscription || {};\n const { subscription_id, at_period_end } = c;\n if (!subscription_id) return json({ error: \"cancel requires subscription_id\" }, 400);\n const account = await accountForSubscriptionId(subscription_id);\n\n if (at_period_end !== false) {\n const updated = await stripe(account, `subscriptions/${subscription_id}`, {\n body: { \"cancel_at_period_end\": \"true\" },\n });\n await projectSubscriptionToDb(updated, account);\n return json({ ok: true, account, sub: { id: updated.id, status: updated.status, cancel_at_period_end: updated.cancel_at_period_end } });\n } else {\n const deleted = await stripe(account, `subscriptions/${subscription_id}`, { method: \"DELETE\" });\n await projectSubscriptionToDb(deleted, account);\n return json({ ok: true, account, sub: { id: deleted.id, status: deleted.status } });\n }\n}\n\nasync function handlePauseSubscription(body: any): Promise {\n const p = body.pause_subscription || {};\n const { subscription_id, behavior } = p;\n if (!subscription_id) return json({ error: \"pause requires subscription_id\" }, 400);\n const account = await accountForSubscriptionId(subscription_id);\n\n const updated = await stripe(account, `subscriptions/${subscription_id}`, {\n body: { \"pause_collection[behavior]\": behavior || \"void\" },\n });\n await projectSubscriptionToDb(updated, account);\n await sbPatch(`family_subscriptions?stripe_subscription_id=eq.${subscription_id}`, {\n status: \"paused\",\n metadata: { ...(updated.metadata || {}), paused_at: new Date().toISOString(), pause_behavior: behavior || \"void\" },\n });\n const sub = await sbOne(`family_subscriptions?stripe_subscription_id=eq.${subscription_id}&select=*,family:p_families(family_name,primary_email),plan:subscription_plans(name)`);\n if (sub?.family?.primary_email) {\n await sendEmail(\"subscription_paused\", sub.family.primary_email, {\n familyName: sub.family.family_name,\n planName: sub.plan?.name || \"your subscription\",\n portalUrl: PORTAL_URL,\n });\n }\n return json({ ok: true, account, sub: { id: updated.id, status: \"paused\" } });\n}\n\nasync function handleResumeSubscription(body: any): Promise {\n const p = body.resume_subscription || {};\n const { subscription_id } = p;\n if (!subscription_id) return json({ error: \"resume requires subscription_id\" }, 400);\n const account = await accountForSubscriptionId(subscription_id);\n\n const updated = await stripe(account, `subscriptions/${subscription_id}`, {\n body: { \"pause_collection\": \"\" },\n });\n await projectSubscriptionToDb(updated, account);\n const sub = await sbOne(`family_subscriptions?stripe_subscription_id=eq.${subscription_id}&select=*,family:p_families(family_name,primary_email),plan:subscription_plans(name)`);\n if (sub?.family?.primary_email) {\n await sendEmail(\"subscription_resumed\", sub.family.primary_email, {\n familyName: sub.family.family_name,\n planName: sub.plan?.name || \"your subscription\",\n currentPeriodEnd: sub.current_period_end,\n portalUrl: PORTAL_URL,\n });\n }\n return json({ ok: true, account, sub: { id: updated.id, status: updated.status } });\n}\n\n// ─── Event checkout (multi-account) ──────────────────────────────────────\n\nasync function handleEventCheckout(body: any): Promise {\n const { registration_id, event_id, org_id, success_url, cancel_url } = body;\n if (!registration_id || !event_id) return json({ error: \"registration_id and event_id required\" }, 400);\n\n const reg = await sbOne(\n `event_registrations?id=eq.${registration_id}` +\n `&select=*,event:events(*),squad:event_squads(*),family:p_families(*),player:players(first_name,last_name)`\n );\n if (!reg) return json({ error: \"registration not found\" }, 404);\n\n const baseFee = reg.squad?.base_fee_cents ?? reg.event?.base_fee_cents ?? 0;\n const serviceFee = reg.squad?.service_fee_cents ?? reg.event?.service_fee_cents ?? 0;\n const total = baseFee + serviceFee;\n if (total <= 0) return json({ error: \"no fee on this registration\" }, 400);\n\n const account = accountForEvent(reg.event);\n const customerId = reg.family\n ? await ensureStripeCustomerForFamily(reg.family, account, reg.family.primary_email)\n : null;\n const productName = `${reg.event?.name || \"Event\"} — ${reg.player ? reg.player.first_name + \" \" + reg.player.last_name : \"\"}`.trim();\n\n const params: Record = {\n \"mode\": \"payment\",\n \"success_url\": success_url,\n \"cancel_url\": cancel_url,\n \"line_items[0][price_data][currency]\": (reg.event?.currency || \"USD\").toLowerCase(),\n \"line_items[0][price_data][unit_amount]\": total,\n \"line_items[0][price_data][product_data][name]\": productName,\n \"line_items[0][quantity]\": 1,\n \"metadata[forms_kind]\": \"event_registration\",\n \"metadata[registration_id]\": registration_id,\n \"metadata[event_id]\": event_id,\n \"metadata[org_id]\": org_id || reg.event?.org_id || FORMS_ORG_ID,\n \"metadata[stripe_account]\": account,\n \"payment_intent_data[metadata][registration_id]\": registration_id,\n \"payment_intent_data[metadata][stripe_account]\": account,\n };\n\n // SEPA for EUR event registrations (typically MAD Cup)\n if (account === \"madrid\" && (reg.event?.currency || \"EUR\") === \"EUR\") {\n params[\"payment_method_types[0]\"] = \"card\";\n params[\"payment_method_types[1]\"] = \"sepa_debit\";\n }\n\n if (customerId) params[\"customer\"] = customerId;\n else if (reg.family?.primary_email) params[\"customer_email\"] = reg.family.primary_email;\n\n const session = await stripe(account, \"checkout/sessions\", { body: params });\n\n // Stamp the routing decision on the registration row so reporting + webhook\n // recovery know which account this charge will settle to.\n await sbPatch(`event_registrations?id=eq.${registration_id}`, {\n stripe_account: account,\n stripe_checkout_session_id: session.id,\n });\n\n return json({ url: session.url, session_id: session.id, account });\n}\n\n// ─── SYNC FROM STRIPE (per-account) ──────────────────────────────────────\n\nasync function syncCustomerSubsAndInvoices(\n account: Account,\n customerId: string,\n opts?: { knownFamilyId?: string; knownPlanId?: string },\n): Promise<{ subs: number; invoices: number; sub_ids: string[]; }> {\n let subsImported = 0;\n let invoicesImported = 0;\n const subIds: string[] = [];\n\n const subList = await stripe(account, `subscriptions?customer=${customerId}&status=all&limit=100&expand[]=data.items.data.price`, { method: \"GET\" });\n for (const sub of subList.data || []) {\n if (!sub.metadata) sub.metadata = {};\n if (!sub.metadata.family_id && opts?.knownFamilyId) sub.metadata.family_id = opts.knownFamilyId;\n if (!sub.metadata.plan_id && opts?.knownPlanId) sub.metadata.plan_id = opts.knownPlanId;\n if (!sub.metadata.org_id) sub.metadata.org_id = FORMS_ORG_ID;\n if (!sub.metadata.stripe_account) sub.metadata.stripe_account = account;\n\n const row = await projectSubscriptionToDb(sub, account);\n if (row) {\n subsImported++;\n subIds.push(sub.id);\n\n const plan = sub.metadata.plan_id\n ? await sbOne(`subscription_plans?id=eq.${sub.metadata.plan_id}&select=billing_cycles`)\n : null;\n if (plan?.billing_cycles) {\n await sbPatch(`family_subscriptions?stripe_subscription_id=eq.${sub.id}`, {\n billing_cycles_total: plan.billing_cycles,\n });\n }\n }\n }\n\n const invList = await stripe(account, `invoices?customer=${customerId}&limit=100`, { method: \"GET\" });\n for (const inv of invList.data || []) {\n if (!inv.subscription) continue;\n const subStripeId = typeof inv.subscription === \"string\" ? inv.subscription : inv.subscription?.id;\n const sub = await sbOne(`family_subscriptions?stripe_subscription_id=eq.${subStripeId}&select=*`);\n if (!sub) continue;\n\n const row = {\n org_id: sub.org_id,\n family_id: sub.family_id,\n subscription_id: sub.id,\n stripe_account: account,\n stripe_invoice_id: inv.id,\n stripe_subscription_id: subStripeId,\n stripe_customer_id: inv.customer,\n status: inv.status,\n amount_due_cents: inv.amount_due,\n amount_paid_cents: inv.amount_paid,\n currency: (inv.currency || \"usd\").toUpperCase(),\n hosted_invoice_url: inv.hosted_invoice_url || null,\n invoice_pdf_url: inv.invoice_pdf || null,\n paid_at: inv.status_transitions?.paid_at ? new Date(inv.status_transitions.paid_at * 1000).toISOString() : null,\n period_start: inv.period_start ? new Date(inv.period_start * 1000).toISOString() : null,\n period_end: inv.period_end ? new Date(inv.period_end * 1000).toISOString() : null,\n };\n await sbUpsert(\"subscription_invoices\", row, \"stripe_invoice_id\");\n invoicesImported++;\n }\n\n for (const subId of subIds) {\n const paidCount = await sb(`subscription_invoices?stripe_subscription_id=eq.${subId}&status=eq.paid&select=id`);\n await sbPatch(`family_subscriptions?stripe_subscription_id=eq.${subId}`, {\n billing_cycles_paid: Array.isArray(paidCount) ? paidCount.length : 0,\n });\n }\n\n return { subs: subsImported, invoices: invoicesImported, sub_ids: subIds };\n}\n\nasync function handleSyncFamilyFromStripe(body: any): Promise {\n const { family_id } = body.sync_family_from_stripe || {};\n if (!family_id) return json({ error: \"family_id required\" }, 400);\n\n const family = await sbOne(`p_families?id=eq.${family_id}&select=*`);\n if (!family) return json({ error: \"family not found\" }, 404);\n\n // For each account where the family has a customer ID, sync that account.\n // Backward compat: legacy stripe_customer_id is treated as residency.\n let totalSubs = 0;\n let totalInvoices = 0;\n const subIds: string[] = [];\n const perAccount: any[] = [];\n\n for (const account of ACCOUNTS) {\n let custId = family[customerColumnForAccount(account)] as string | null;\n if (!custId && account === \"residency\" && family.stripe_customer_id) {\n custId = family.stripe_customer_id;\n }\n if (!custId) continue;\n try {\n const r = await syncCustomerSubsAndInvoices(account, custId, { knownFamilyId: family_id });\n totalSubs += r.subs;\n totalInvoices += r.invoices;\n subIds.push(...r.sub_ids);\n perAccount.push({ account, customer_id: custId, subs: r.subs, invoices: r.invoices });\n } catch (e: any) {\n perAccount.push({ account, customer_id: custId, error: e.message });\n }\n }\n\n return json({\n ok: true,\n family_id,\n synced_subscriptions: totalSubs,\n synced_invoices: totalInvoices,\n subscription_ids: subIds,\n per_account: perAccount,\n });\n}\n\nasync function handleSyncAllFromStripe(_body: any): Promise {\n const families = await sb(\n `p_families?or=(stripe_customer_id.not.is.null,stripe_customer_id_main.not.is.null,stripe_customer_id_residency.not.is.null,stripe_customer_id_madrid.not.is.null)&org_id=eq.${FORMS_ORG_ID}&select=*`\n );\n let totalSubs = 0;\n let totalInvoices = 0;\n const perFamily: any[] = [];\n\n for (const f of (families || [])) {\n const familyResult: any = { family_id: f.id, family_name: f.family_name, accounts: [] };\n for (const account of ACCOUNTS) {\n let custId = f[customerColumnForAccount(account)] as string | null;\n if (!custId && account === \"residency\" && f.stripe_customer_id) {\n custId = f.stripe_customer_id;\n }\n if (!custId) continue;\n try {\n const r = await syncCustomerSubsAndInvoices(account, custId, { knownFamilyId: f.id });\n totalSubs += r.subs;\n totalInvoices += r.invoices;\n familyResult.accounts.push({ account, subs: r.subs, invoices: r.invoices });\n } catch (e: any) {\n familyResult.accounts.push({ account, error: e.message });\n }\n }\n perFamily.push(familyResult);\n }\n\n return json({\n ok: true,\n families_processed: families?.length || 0,\n total_subscriptions: totalSubs,\n total_invoices: totalInvoices,\n per_family: perFamily,\n });\n}\n\n// ─── Entry point ──────────────────────────────────────────────────────────\n\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") return new Response(null, { headers: cors });\n if (req.method !== \"POST\") return json({ error: \"POST only\" }, 405);\n\n let body: any;\n try { body = await req.json(); } catch { return json({ error: \"invalid json\" }, 400); }\n\n try {\n if (body.subscription) return await handleSubscriptionCheckout(body);\n if (body.admin_subscribe) return await handleAdminSubscribe(body);\n if (body.comp_subscription) return await handleCompSubscription(body);\n if (body.portal) return await handleBillingPortal(body);\n if (body.cancel_subscription) return await handleCancelSubscription(body);\n if (body.pause_subscription) return await handlePauseSubscription(body);\n if (body.resume_subscription) return await handleResumeSubscription(body);\n if (body.sync_family_from_stripe) return await handleSyncFamilyFromStripe(body);\n if (body.sync_all_from_stripe) return await handleSyncAllFromStripe(body);\n if (body.registration_id) return await handleEventCheckout(body);\n } catch (e: any) {\n console.error(\"[checkout] handler error:\", e);\n return json({ error: e.message || \"handler failed\" }, 500);\n }\n\n return json({ error: \"no recognized mode in body\" }, 400);\n}\n","// ─── formsStripeCheckout (v11 — MULTI-ACCOUNT) ──────────────────────────\n// Val.town HTTP endpoint that fronts Stripe for Forms Master checkout flows.\n//\n// MULTI-ACCOUNT ROUTING (v11):\n// Three Stripe accounts settle to three bank accounts:\n// main → Forms Academy - Main (USD, default for everything)\n// residency → Forms Academy - Residency (USD, residency tuition)\n// madrid → Forms Madrid (EUR)\n//\n// Routing rules (applied at checkout time, derived from plan/event row):\n// - subscription_plans.stripe_account is authoritative\n// - events.stripe_account is authoritative\n// - both are auto-derived in DB by the schema (currency='EUR' → madrid;\n// category='residency' AND currency='USD' → residency; else → main)\n//\n// Per-account env vars (NEW):\n// STRIPE_SECRET_KEY_MAIN\n// STRIPE_SECRET_KEY_RESIDENCY\n// STRIPE_SECRET_KEY_MADRID\n//\n// Backward compat: if any of the per-account keys is missing, the val falls\n// back to the legacy STRIPE_SECRET_KEY. So the val behaves identically to v10\n// today (single-account through Residency) until you populate the new env\n// vars. Once all three are populated, routing kicks in automatically.\n//\n// Stripe customer IDs are per-account (NOT portable). p_families now has\n// stripe_customer_id_main / _residency / _madrid columns. The val looks up\n// the right slot for the routing account, creates a customer in that\n// account if missing, and saves it back to the right slot.\n\nconst SUPABASE_URL = \"https://lmgplytnycmvuemhvmfc.supabase.co\";\nconst FORMS_ORG_ID = \"a0000000-0000-0000-0000-000000000001\";\nconst PORTAL_URL = \"https://forms-master.netlify.app\";\nconst FORMS_EMAILS_ENDPOINT = Deno.env.get(\"FORMS_EMAILS_ENDPOINT\")\n || \"https://director--70321ff843c311f1b7a142b51c65c3df.web.val.run\";\n\n// ─── Multi-account key resolution ─────────────────────────────────────────\ntype Account = \"main\" | \"residency\" | \"madrid\";\nconst ACCOUNTS: Account[] = [\"main\", \"residency\", \"madrid\"];\n\n// Legacy single-account key (used as fallback when per-account keys missing).\n// Today this points at Residency. After Phase D it can be removed.\nconst LEGACY_KEY = Deno.env.get(\"STRIPE_SECRET_KEY\") || \"\";\n\nconst STRIPE_KEYS: Record = {\n main: Deno.env.get(\"STRIPE_SECRET_KEY_MAIN\") || LEGACY_KEY,\n residency: Deno.env.get(\"STRIPE_SECRET_KEY_RESIDENCY\") || LEGACY_KEY,\n madrid: Deno.env.get(\"STRIPE_SECRET_KEY_MADRID\") || LEGACY_KEY,\n};\n\nconst ACCOUNT_LABELS: Record = {\n main: \"Forms Academy - Main\",\n residency: \"Forms Academy - Residency\",\n madrid: \"Forms Madrid\",\n};\n\nconst SUPABASE_KEY = Deno.env.get(\"FORMS_SUPABASE_SERVICE_KEY\")\n || Deno.env.get(\"FORMS_SUPABASE_ANON\")\n || \"\";\n\nfor (const a of ACCOUNTS) {\n if (!STRIPE_KEYS[a]) console.warn(`[checkout] No Stripe key for account=${a}`);\n}\nif (!SUPABASE_KEY) console.warn(\"[checkout] No Supabase key set — DB writes will fail\");\n\nfunction keyForAccount(account: Account): string {\n const k = STRIPE_KEYS[account];\n if (!k) throw new Error(`No Stripe key configured for account '${account}' (${ACCOUNT_LABELS[account]})`);\n return k;\n}\n\nfunction customerColumnForAccount(account: Account): string {\n return `stripe_customer_id_${account}`;\n}\n\n// ─── Helpers ──────────────────────────────────────────────────────────────\n\nconst cors = {\n \"Access-Control-Allow-Origin\": \"*\",\n \"Access-Control-Allow-Methods\": \"POST, OPTIONS\",\n \"Access-Control-Allow-Headers\": \"Content-Type\",\n};\n\nfunction json(obj: any, status = 200): Response {\n return new Response(JSON.stringify(obj), {\n status,\n headers: { \"Content-Type\": \"application/json\", ...cors },\n });\n}\n\n// All Stripe calls now require an explicit account. The signature guarantees\n// you can't accidentally hit Stripe with the wrong key.\nasync function stripe(\n account: Account,\n path: string,\n init: { method?: string; body?: Record } = {},\n): Promise {\n const method = init.method || \"POST\";\n let body: string | undefined;\n if (init.body && typeof init.body === \"object\") body = encodeForm(init.body);\n const res = await fetch(`https://api.stripe.com/v1/${path}`, {\n method,\n headers: {\n \"Authorization\": \"Bearer \" + keyForAccount(account),\n \"Content-Type\": \"application/x-www-form-urlencoded\",\n },\n body,\n });\n const data = await res.json();\n if (!res.ok) {\n console.error(`[checkout] stripe api error (account=${account}, path=${path})`, data);\n throw new Error(data?.error?.message || \"Stripe API error\");\n }\n return data;\n}\n\nfunction encodeForm(obj: Record): string {\n const parts: string[] = [];\n for (const k of Object.keys(obj)) {\n const v = obj[k];\n if (v === undefined || v === null) continue;\n parts.push(encodeURIComponent(k) + \"=\" + encodeURIComponent(String(v)));\n }\n return parts.join(\"&\");\n}\n\nasync function sb(path: string, init: RequestInit = {}): Promise {\n const res = await fetch(`${SUPABASE_URL}/rest/v1/${path}`, {\n ...init,\n headers: {\n \"apikey\": SUPABASE_KEY,\n \"Authorization\": \"Bearer \" + SUPABASE_KEY,\n \"Content-Type\": \"application/json\",\n ...(init.headers || {}),\n },\n });\n if (!res.ok) {\n const txt = await res.text();\n throw new Error(`Supabase ${res.status}: ${txt}`);\n }\n const ct = res.headers.get(\"Content-Type\") || \"\";\n if (!ct.includes(\"application/json\")) return null;\n return res.json();\n}\n\nasync function sbOne(path: string): Promise {\n const rows = await sb(path);\n return Array.isArray(rows) && rows.length ? rows[0] : null;\n}\n\nasync function sbUpsert(path: string, body: any, onConflict?: string): Promise {\n const url = onConflict ? `${path}?on_conflict=${encodeURIComponent(onConflict)}` : path;\n const res = await fetch(`${SUPABASE_URL}/rest/v1/${url}`, {\n method: \"POST\",\n headers: {\n \"apikey\": SUPABASE_KEY,\n \"Authorization\": \"Bearer \" + SUPABASE_KEY,\n \"Content-Type\": \"application/json\",\n \"Prefer\": \"resolution=merge-duplicates,return=representation\",\n },\n body: JSON.stringify(body),\n });\n if (!res.ok) {\n const txt = await res.text();\n throw new Error(`Supabase upsert ${res.status}: ${txt}`);\n }\n return res.json();\n}\n\nasync function sbPatch(path: string, body: any): Promise {\n const res = await fetch(`${SUPABASE_URL}/rest/v1/${path}`, {\n method: \"PATCH\",\n headers: {\n \"apikey\": SUPABASE_KEY,\n \"Authorization\": \"Bearer \" + SUPABASE_KEY,\n \"Content-Type\": \"application/json\",\n \"Prefer\": \"return=minimal\",\n },\n body: JSON.stringify(body),\n });\n if (!res.ok) {\n const txt = await res.text();\n throw new Error(`Supabase patch ${res.status}: ${txt}`);\n }\n}\n\nasync function sendEmail(kind: string, to: string, data: any): Promise {\n if (!FORMS_EMAILS_ENDPOINT || !to) return;\n try {\n await fetch(FORMS_EMAILS_ENDPOINT, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ kind, to, data, portalUrl: PORTAL_URL }),\n });\n } catch (e) {\n console.error(\"[checkout] sendEmail failed:\", e);\n }\n}\n\nfunction intervalLabel(interval: string, count: number): string {\n const n = count || 1;\n if (n === 1) {\n if (interval === \"month\") return \"monthly\";\n if (interval === \"year\") return \"yearly\";\n if (interval === \"week\") return \"weekly\";\n return interval + \"ly\";\n }\n return `every ${n} ${interval}s`;\n}\n\nfunction computeCancelAt(plan: any): number | null {\n if (!plan?.billing_cycles || plan.billing_cycles <= 0) return null;\n const trialDays = plan.trial_days || 0;\n const ic = plan.interval_count || 1;\n const cycles = plan.billing_cycles;\n const d = new Date();\n if (trialDays > 0) d.setDate(d.getDate() + trialDays);\n const totalUnits = ic * cycles;\n if (plan.interval === \"month\") d.setMonth(d.getMonth() + totalUnits);\n else if (plan.interval === \"year\") d.setFullYear(d.getFullYear() + totalUnits);\n else if (plan.interval === \"week\") d.setDate(d.getDate() + 7 * totalUnits);\n else if (plan.interval === \"day\") d.setDate(d.getDate() + totalUnits);\n else return null;\n return Math.floor(d.getTime() / 1000);\n}\n\n// ─── Routing helpers ──────────────────────────────────────────────────────\nfunction accountForPlan(plan: any): Account {\n const a = plan?.stripe_account;\n if (a === \"main\" || a === \"residency\" || a === \"madrid\") return a;\n console.warn(`[checkout] plan ${plan?.id} has invalid stripe_account=${a}, defaulting to main`);\n return \"main\";\n}\n\nfunction accountForEvent(event: any): Account {\n const a = event?.stripe_account;\n if (a === \"main\" || a === \"residency\" || a === \"madrid\") return a;\n console.warn(`[checkout] event ${event?.id} has invalid stripe_account=${a}, defaulting to main`);\n return \"main\";\n}\n\n// ─── Plan → Stripe product/price (lazy create, per-account) ───────────────\nasync function ensureStripePriceForPlan(plan: any): Promise<{ priceId: string; productId: string; account: Account }> {\n const account = accountForPlan(plan);\n if (plan.stripe_price_id && plan.stripe_product_id) {\n return { priceId: plan.stripe_price_id, productId: plan.stripe_product_id, account };\n }\n let productId = plan.stripe_product_id;\n if (!productId) {\n const product = await stripe(account, \"products\", {\n body: {\n \"name\": plan.name,\n \"metadata[plan_id]\": plan.id,\n \"metadata[org_id]\": plan.org_id,\n ...(plan.description ? { \"description\": plan.description } : {}),\n },\n });\n productId = product.id;\n }\n const price = await stripe(account, \"prices\", {\n body: {\n \"currency\": (plan.currency || \"USD\").toLowerCase(),\n \"unit_amount\": plan.amount_cents,\n \"product\": productId,\n \"recurring[interval]\": plan.interval || \"month\",\n \"recurring[interval_count]\": plan.interval_count || 1,\n \"metadata[plan_id]\": plan.id,\n },\n });\n await sbPatch(`subscription_plans?id=eq.${plan.id}`, {\n stripe_product_id: productId,\n stripe_price_id: price.id,\n });\n return { priceId: price.id, productId, account };\n}\n\n// ─── Customer (lazy create, per-account) ──────────────────────────────────\nasync function ensureStripeCustomerForFamily(\n family: any,\n account: Account,\n email?: string | null,\n): Promise {\n const col = customerColumnForAccount(account);\n if (family[col]) return family[col];\n\n // Backward-compat: legacy stripe_customer_id used to belong to Residency.\n if (account === \"residency\" && family.stripe_customer_id) {\n await sbPatch(`p_families?id=eq.${family.id}`, { [col]: family.stripe_customer_id });\n return family.stripe_customer_id;\n }\n\n const cust = await stripe(account, \"customers\", {\n body: {\n \"name\": family.family_name || \"\",\n ...(email || family.primary_email ? { \"email\": email || family.primary_email } : {}),\n \"metadata[family_id]\": family.id,\n \"metadata[org_id]\": family.org_id,\n \"metadata[stripe_account]\": account,\n },\n });\n await sbPatch(`p_families?id=eq.${family.id}`, { [col]: cust.id });\n return cust.id;\n}\n\n// ─── Family awards → Stripe coupons ───────────────────────────────────────\n// When a parent enters checkout for a residency subscription, the awards\n// recorded by the admin (TEFA, scholarship, sibling) need to become real\n// Stripe Coupons attached to the subscription. This function:\n// 1. Reads pending awards for the family on this plan\n// 2. Creates a Stripe Coupon for each (in the right account)\n// 3. Returns the coupon IDs so they can be applied to the Checkout session\n//\n// A subscription can carry only ONE coupon natively. To stack TEFA +\n// scholarship + sibling, we apply the first as discounts on the line item\n// and stamp the rest in metadata for invoice line-item rendering. When the\n// subscription is created, we then convert all awards into per-invoice\n// \"discounts\" via the Subscriptions API.\n//\n// For now, we create coupons for the awards but only attach the first one\n// natively to the Checkout session. The remaining coupons are stored on the\n// subscription via the webhook handler (which we'll update separately).\n//\n// Idempotent: if award already has stripe_coupon_id, reuse it.\n\nasync function ensurePendingAwardsAsCoupons(\n familyId: string,\n planId: string,\n account: Account,\n): Promise> {\n const awards = await sb(\n `family_awards?family_id=eq.${familyId}&plan_id=eq.${planId}&status=eq.pending&select=*`,\n );\n if (!awards || awards.length === 0) return [];\n\n const out: Array<{ id: string; coupon_id: string; type: string; label: string }> = [];\n\n for (const award of awards) {\n if (award.stripe_coupon_id) {\n out.push({ id: award.id, coupon_id: award.stripe_coupon_id, type: award.award_type, label: award.display_label });\n continue;\n }\n\n // Build coupon body. Stripe requires either amount_off (with currency)\n // OR percent_off, never both. Coupons are \"forever\" duration since we\n // want them to apply to every monthly invoice for the life of the sub.\n const couponBody: Record = {\n \"name\": award.display_label,\n \"duration\": \"forever\",\n \"metadata[forms_award_id]\": award.id,\n \"metadata[forms_award_type]\": award.award_type,\n \"metadata[family_id]\": familyId,\n };\n if (award.amount_cents != null) {\n couponBody[\"amount_off\"] = award.amount_cents;\n couponBody[\"currency\"] = \"usd\"; // residency tuition is USD\n } else if (award.percent_off != null) {\n couponBody[\"percent_off\"] = award.percent_off;\n } else {\n console.warn(`[awards] award ${award.id} has neither amount_off nor percent_off; skipping`);\n continue;\n }\n\n const coupon = await stripe(account, \"coupons\", { body: couponBody });\n await sbPatch(`family_awards?id=eq.${award.id}`, {\n stripe_coupon_id: coupon.id,\n stripe_account: account,\n });\n out.push({ id: award.id, coupon_id: coupon.id, type: award.award_type, label: award.display_label });\n }\n\n return out;\n}\n\n// After a subscription is successfully created, flip the pending awards to\n// active and attach them to the subscription_id. Idempotent.\nasync function activateAwardsForSubscription(\n familyId: string,\n planId: string,\n subscriptionId: string,\n): Promise {\n const awards = await sb(\n `family_awards?family_id=eq.${familyId}&plan_id=eq.${planId}&status=eq.pending&select=*`,\n );\n if (!awards || awards.length === 0) return;\n for (const a of awards) {\n await sbPatch(`family_awards?id=eq.${a.id}`, {\n subscription_id: subscriptionId,\n status: \"active\",\n });\n // History entry\n await sb(`family_award_history`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n award_id: a.id,\n event_type: \"status_changed\",\n snapshot: { ...a, subscription_id: subscriptionId, status: \"active\" },\n change_note: \"Activated on subscription creation\",\n }),\n });\n }\n}\n\n// ─── Subscription projection (writes to DB, stamps stripe_account) ────────\nasync function projectSubscriptionToDb(sub: any, account: Account): Promise {\n const meta = sub.metadata || {};\n const planId = meta.plan_id || null;\n const familyId = meta.family_id || null;\n const playerId = meta.player_id || null;\n const orgId = meta.org_id || FORMS_ORG_ID;\n const item = sub.items?.data?.[0];\n const price = item?.price;\n const row = {\n org_id: orgId,\n family_id: familyId,\n plan_id: planId,\n player_id: playerId,\n stripe_account: account,\n stripe_customer_id: sub.customer,\n stripe_subscription_id: sub.id,\n stripe_price_id: price?.id || null,\n status: sub.status,\n current_period_start: sub.current_period_start ? new Date(sub.current_period_start * 1000).toISOString() : null,\n current_period_end: sub.current_period_end ? new Date(sub.current_period_end * 1000).toISOString() : null,\n cancel_at_period_end: !!sub.cancel_at_period_end,\n canceled_at: sub.canceled_at ? new Date(sub.canceled_at * 1000).toISOString() : null,\n ended_at: sub.ended_at ? new Date(sub.ended_at * 1000).toISOString() : null,\n trial_end: sub.trial_end ? new Date(sub.trial_end * 1000).toISOString() : null,\n amount_cents: price?.unit_amount || null,\n currency: (price?.currency || \"usd\").toUpperCase(),\n interval: price?.recurring?.interval || null,\n interval_count: price?.recurring?.interval_count || null,\n latest_invoice_id: typeof sub.latest_invoice === \"string\" ? sub.latest_invoice : sub.latest_invoice?.id || null,\n metadata: meta,\n };\n if (!familyId) {\n console.warn(\"[checkout] sub missing family_id metadata:\", sub.id);\n return null;\n }\n await sbUpsert(\"family_subscriptions\", row, \"stripe_subscription_id\");\n return row;\n}\n\n// ─── Mode handlers ────────────────────────────────────────────────────────\n\nasync function handleSubscriptionCheckout(body: any): Promise {\n const sub = body.subscription || {};\n const { plan_id, family_id, player_id, customer_email, existing_customer_id } = sub;\n if (!plan_id || !family_id) return json({ error: \"subscription requires plan_id and family_id\" }, 400);\n if (!body.success_url || !body.cancel_url) return json({ error: \"success_url and cancel_url required\" }, 400);\n\n const plan = await sbOne(`subscription_plans?id=eq.${plan_id}&select=*`);\n if (!plan) return json({ error: \"plan not found\" }, 404);\n if (plan.status !== \"active\") return json({ error: \"plan is archived\" }, 400);\n\n const family = await sbOne(`p_families?id=eq.${family_id}&select=*`);\n if (!family) return json({ error: \"family not found\" }, 404);\n\n const { priceId, account } = await ensureStripePriceForPlan(plan);\n const customerId = existing_customer_id\n || await ensureStripeCustomerForFamily(family, account, customer_email);\n\n // Build any pending family awards into Stripe Coupons. The first one is\n // attached to the Checkout session natively (Stripe supports a single\n // coupon per Checkout). Additional coupons are deferred to the webhook\n // handler that listens for subscription.created and applies them via the\n // Subscriptions API. Saved as 'pending' until activation.\n const awardCoupons = await ensurePendingAwardsAsCoupons(family_id, plan_id, account);\n\n const params: Record = {\n \"mode\": \"subscription\",\n \"customer\": customerId,\n \"success_url\": body.success_url,\n \"cancel_url\": body.cancel_url,\n \"line_items[0][price]\": priceId,\n \"line_items[0][quantity]\": 1,\n \"allow_promotion_codes\": \"true\",\n \"metadata[forms_kind]\": \"subscription\",\n \"metadata[plan_id]\": plan_id,\n \"metadata[family_id]\": family_id,\n \"metadata[org_id]\": family.org_id,\n \"metadata[stripe_account]\": account,\n \"subscription_data[metadata][plan_id]\": plan_id,\n \"subscription_data[metadata][family_id]\": family_id,\n \"subscription_data[metadata][org_id]\": family.org_id,\n \"subscription_data[metadata][stripe_account]\": account,\n };\n\n // Apply award coupons. Stripe Checkout supports a single discount; if\n // there are multiple awards, attach the first and stamp the rest in\n // subscription metadata so the webhook can apply them.\n if (awardCoupons.length > 0) {\n params[\"discounts[0][coupon]\"] = awardCoupons[0].coupon_id;\n // Disable promotion codes when we already have a coupon (mutually exclusive in Checkout)\n delete params[\"allow_promotion_codes\"];\n if (awardCoupons.length > 1) {\n const extraIds = awardCoupons.slice(1).map(c => c.coupon_id).join(\",\");\n params[\"subscription_data[metadata][forms_extra_coupons]\"] = extraIds;\n }\n params[\"subscription_data[metadata][forms_award_ids]\"] = awardCoupons.map(c => c.id).join(\",\");\n }\n\n // ACH for high-value USD subscriptions.\n // ACH = 0.8% capped at $5 vs card 2.9% + $0.30. For $1,375 charges,\n // saves $35/charge or $350+/year/family. Threshold: USD plans >= $200/charge.\n const isUsdHighValue = (plan.currency || \"USD\") === \"USD\" && (plan.amount_cents || 0) >= 20000;\n if (isUsdHighValue) {\n params[\"payment_method_types[0]\"] = \"card\";\n params[\"payment_method_types[1]\"] = \"us_bank_account\";\n params[\"payment_method_options[us_bank_account][financial_connections][permissions][0]\"] = \"payment_method\";\n }\n\n // SEPA for EUR subscriptions (Madrid).\n // SEPA = ~0.35% capped at €5/charge vs European cards ~1.5%.\n if (account === \"madrid\" && (plan.currency || \"EUR\") === \"EUR\") {\n params[\"payment_method_types[0]\"] = \"card\";\n params[\"payment_method_types[1]\"] = \"sepa_debit\";\n }\n\n if (player_id) {\n params[\"metadata[player_id]\"] = player_id;\n params[\"subscription_data[metadata][player_id]\"] = player_id;\n }\n if (plan.trial_days && plan.trial_days > 0) {\n params[\"subscription_data[trial_period_days]\"] = plan.trial_days;\n }\n const cancelAt = computeCancelAt(plan);\n if (cancelAt) params[\"subscription_data[metadata][forms_cancel_at]\"] = String(cancelAt);\n\n const session = await stripe(account, \"checkout/sessions\", { body: params });\n return json({ url: session.url, session_id: session.id, account });\n}\n\nasync function handleAdminSubscribe(body: any): Promise {\n const a = body.admin_subscribe || {};\n const { plan_id, family_id, player_id, send_email } = a;\n if (!plan_id || !family_id) return json({ error: \"admin_subscribe requires plan_id and family_id\" }, 400);\n\n const plan = await sbOne(`subscription_plans?id=eq.${plan_id}&select=*`);\n if (!plan) return json({ error: \"plan not found\" }, 404);\n if (plan.status !== \"active\") return json({ error: \"plan is archived\" }, 400);\n const family = await sbOne(`p_families?id=eq.${family_id}&select=*`);\n if (!family) return json({ error: \"family not found\" }, 404);\n\n const { priceId, account } = await ensureStripePriceForPlan(plan);\n const customerId = await ensureStripeCustomerForFamily(family, account, family.primary_email);\n\n // Award coupons (same logic as parent-initiated checkout)\n const awardCoupons = await ensurePendingAwardsAsCoupons(family_id, plan_id, account);\n\n const successUrl = `${PORTAL_URL}/?stripe=sub_success&family_id=${family.id}`;\n const cancelUrl = `${PORTAL_URL}/?stripe=sub_cancel`;\n\n const params: Record = {\n \"mode\": \"subscription\",\n \"customer\": customerId,\n \"success_url\": successUrl,\n \"cancel_url\": cancelUrl,\n \"line_items[0][price]\": priceId,\n \"line_items[0][quantity]\": 1,\n \"allow_promotion_codes\": \"true\",\n \"metadata[forms_kind]\": \"subscription\",\n \"metadata[plan_id]\": plan_id,\n \"metadata[family_id]\": family_id,\n \"metadata[org_id]\": family.org_id,\n \"metadata[stripe_account]\": account,\n \"metadata[admin_initiated]\": \"1\",\n \"subscription_data[metadata][plan_id]\": plan_id,\n \"subscription_data[metadata][family_id]\": family_id,\n \"subscription_data[metadata][org_id]\": family.org_id,\n \"subscription_data[metadata][stripe_account]\": account,\n \"subscription_data[metadata][admin_initiated]\": \"1\",\n };\n\n if (awardCoupons.length > 0) {\n params[\"discounts[0][coupon]\"] = awardCoupons[0].coupon_id;\n delete params[\"allow_promotion_codes\"];\n if (awardCoupons.length > 1) {\n const extraIds = awardCoupons.slice(1).map(c => c.coupon_id).join(\",\");\n params[\"subscription_data[metadata][forms_extra_coupons]\"] = extraIds;\n }\n params[\"subscription_data[metadata][forms_award_ids]\"] = awardCoupons.map(c => c.id).join(\",\");\n }\n\n const isUsdHighValue = (plan.currency || \"USD\") === \"USD\" && (plan.amount_cents || 0) >= 20000;\n if (isUsdHighValue) {\n params[\"payment_method_types[0]\"] = \"card\";\n params[\"payment_method_types[1]\"] = \"us_bank_account\";\n params[\"payment_method_options[us_bank_account][financial_connections][permissions][0]\"] = \"payment_method\";\n }\n if (account === \"madrid\" && (plan.currency || \"EUR\") === \"EUR\") {\n params[\"payment_method_types[0]\"] = \"card\";\n params[\"payment_method_types[1]\"] = \"sepa_debit\";\n }\n\n if (player_id) {\n params[\"metadata[player_id]\"] = player_id;\n params[\"subscription_data[metadata][player_id]\"] = player_id;\n }\n if (plan.trial_days && plan.trial_days > 0) {\n params[\"subscription_data[trial_period_days]\"] = plan.trial_days;\n }\n const cancelAt = computeCancelAt(plan);\n if (cancelAt) params[\"subscription_data[metadata][forms_cancel_at]\"] = String(cancelAt);\n\n const session = await stripe(account, \"checkout/sessions\", { body: params });\n\n if (send_email !== false && family.primary_email) {\n await sendEmail(\"admin_subscription_invite\", family.primary_email, {\n familyName: family.family_name,\n planName: plan.name,\n amountCents: plan.amount_cents,\n currency: plan.currency || \"USD\",\n intervalLabel: intervalLabel(plan.interval || \"month\", plan.interval_count || 1),\n checkoutUrl: session.url,\n trialDays: plan.trial_days || 0,\n });\n }\n return json({ ok: true, url: session.url, session_id: session.id, account, emailed: send_email !== false && !!family.primary_email });\n}\n\nasync function handleCompSubscription(body: any): Promise {\n const c = body.comp_subscription || {};\n const { plan_id, family_id, player_id, reason, ends_at } = c;\n if (!plan_id || !family_id) return json({ error: \"comp requires plan_id and family_id\" }, 400);\n const plan = await sbOne(`subscription_plans?id=eq.${plan_id}&select=*`);\n if (!plan) return json({ error: \"plan not found\" }, 404);\n const family = await sbOne(`p_families?id=eq.${family_id}&select=*`);\n if (!family) return json({ error: \"family not found\" }, 404);\n\n const account = accountForPlan(plan);\n const compId = \"comp_\" + crypto.randomUUID();\n const now = new Date();\n const periodEnd = ends_at ? new Date(ends_at) : (() => {\n const d = new Date(now);\n const ic = plan.interval_count || 1;\n const cycles = (plan.billing_cycles && plan.billing_cycles > 0) ? plan.billing_cycles : 1;\n const totalUnits = ic * cycles;\n if (plan.interval === \"month\") d.setMonth(d.getMonth() + totalUnits);\n else if (plan.interval === \"year\") d.setFullYear(d.getFullYear() + totalUnits);\n else if (plan.interval === \"week\") d.setDate(d.getDate() + 7 * totalUnits);\n else d.setMonth(d.getMonth() + 1);\n return d;\n })();\n\n const row = {\n org_id: family.org_id,\n family_id,\n plan_id,\n player_id: player_id || null,\n stripe_account: account,\n stripe_customer_id: family[customerColumnForAccount(account)] || family.stripe_customer_id || null,\n stripe_subscription_id: compId,\n stripe_price_id: plan.stripe_price_id || null,\n status: \"active\",\n current_period_start: now.toISOString(),\n current_period_end: periodEnd.toISOString(),\n cancel_at_period_end: false,\n amount_cents: plan.amount_cents,\n currency: plan.currency || \"USD\",\n interval: plan.interval,\n interval_count: plan.interval_count || 1,\n metadata: { comp: true, comp_reason: reason || \"Admin comp\", comped_at: now.toISOString() },\n notes: reason ? `Comped: ${reason}` : \"Comped (admin-granted)\",\n started_at: now.toISOString(),\n };\n await sbUpsert(\"family_subscriptions\", row, \"stripe_subscription_id\");\n\n if (family.primary_email) {\n await sendEmail(\"subscription_active\", family.primary_email, {\n familyName: family.family_name,\n planName: plan.name + \" (Comped)\",\n amountCents: 0,\n currency: plan.currency || \"USD\",\n intervalLabel: intervalLabel(plan.interval || \"month\", plan.interval_count || 1),\n currentPeriodEnd: periodEnd.toISOString(),\n portalUrl: PORTAL_URL,\n });\n }\n return json({ ok: true, comp_id: compId, account });\n}\n\nasync function handleBillingPortal(body: any): Promise {\n const p = body.portal || {};\n const { customer_id, return_url, account: explicitAccount } = p;\n if (!customer_id) return json({ error: \"portal requires customer_id\" }, 400);\n if (!return_url) return json({ error: \"portal requires return_url\" }, 400);\n\n // Caller may pass account explicitly. If not, look it up from p_families\n // by matching customer_id against any of the per-account slots.\n let account: Account = explicitAccount && ACCOUNTS.includes(explicitAccount as Account)\n ? explicitAccount as Account\n : \"residency\"; // safe default during transition\n\n if (!explicitAccount) {\n for (const a of ACCOUNTS) {\n const col = customerColumnForAccount(a);\n const fam = await sbOne(`p_families?${col}=eq.${customer_id}&select=id`);\n if (fam) { account = a; break; }\n }\n }\n\n const session = await stripe(account, \"billing_portal/sessions\", {\n body: {\n \"customer\": customer_id,\n \"return_url\": return_url,\n },\n });\n return json({ url: session.url, account });\n}\n\nasync function accountForSubscriptionId(subId: string): Promise {\n const row = await sbOne(`family_subscriptions?stripe_subscription_id=eq.${subId}&select=stripe_account`);\n const a = row?.stripe_account;\n if (a === \"main\" || a === \"residency\" || a === \"madrid\") return a;\n console.warn(`[checkout] sub ${subId} missing stripe_account, defaulting to residency`);\n return \"residency\";\n}\n\nasync function handleCancelSubscription(body: any): Promise {\n const c = body.cancel_subscription || {};\n const { subscription_id, at_period_end } = c;\n if (!subscription_id) return json({ error: \"cancel requires subscription_id\" }, 400);\n const account = await accountForSubscriptionId(subscription_id);\n\n if (at_period_end !== false) {\n const updated = await stripe(account, `subscriptions/${subscription_id}`, {\n body: { \"cancel_at_period_end\": \"true\" },\n });\n await projectSubscriptionToDb(updated, account);\n return json({ ok: true, account, sub: { id: updated.id, status: updated.status, cancel_at_period_end: updated.cancel_at_period_end } });\n } else {\n const deleted = await stripe(account, `subscriptions/${subscription_id}`, { method: \"DELETE\" });\n await projectSubscriptionToDb(deleted, account);\n return json({ ok: true, account, sub: { id: deleted.id, status: deleted.status } });\n }\n}\n\nasync function handlePauseSubscription(body: any): Promise {\n const p = body.pause_subscription || {};\n const { subscription_id, behavior } = p;\n if (!subscription_id) return json({ error: \"pause requires subscription_id\" }, 400);\n const account = await accountForSubscriptionId(subscription_id);\n\n const updated = await stripe(account, `subscriptions/${subscription_id}`, {\n body: { \"pause_collection[behavior]\": behavior || \"void\" },\n });\n await projectSubscriptionToDb(updated, account);\n await sbPatch(`family_subscriptions?stripe_subscription_id=eq.${subscription_id}`, {\n status: \"paused\",\n metadata: { ...(updated.metadata || {}), paused_at: new Date().toISOString(), pause_behavior: behavior || \"void\" },\n });\n const sub = await sbOne(`family_subscriptions?stripe_subscription_id=eq.${subscription_id}&select=*,family:p_families(family_name,primary_email),plan:subscription_plans(name)`);\n if (sub?.family?.primary_email) {\n await sendEmail(\"subscription_paused\", sub.family.primary_email, {\n familyName: sub.family.family_name,\n planName: sub.plan?.name || \"your subscription\",\n portalUrl: PORTAL_URL,\n });\n }\n return json({ ok: true, account, sub: { id: updated.id, status: \"paused\" } });\n}\n\nasync function handleResumeSubscription(body: any): Promise {\n const p = body.resume_subscription || {};\n const { subscription_id } = p;\n if (!subscription_id) return json({ error: \"resume requires subscription_id\" }, 400);\n const account = await accountForSubscriptionId(subscription_id);\n\n const updated = await stripe(account, `subscriptions/${subscription_id}`, {\n body: { \"pause_collection\": \"\" },\n });\n await projectSubscriptionToDb(updated, account);\n const sub = await sbOne(`family_subscriptions?stripe_subscription_id=eq.${subscription_id}&select=*,family:p_families(family_name,primary_email),plan:subscription_plans(name)`);\n if (sub?.family?.primary_email) {\n await sendEmail(\"subscription_resumed\", sub.family.primary_email, {\n familyName: sub.family.family_name,\n planName: sub.plan?.name || \"your subscription\",\n currentPeriodEnd: sub.current_period_end,\n portalUrl: PORTAL_URL,\n });\n }\n return json({ ok: true, account, sub: { id: updated.id, status: updated.status } });\n}\n\n// ─── Event checkout (multi-account) ──────────────────────────────────────\n\nasync function handleEventCheckout(body: any): Promise {\n const { registration_id, event_id, org_id, success_url, cancel_url } = body;\n if (!registration_id || !event_id) return json({ error: \"registration_id and event_id required\" }, 400);\n\n const reg = await sbOne(\n `event_registrations?id=eq.${registration_id}` +\n `&select=*,event:events(*),squad:event_squads(*),family:p_families(*),player:players(first_name,last_name)`\n );\n if (!reg) return json({ error: \"registration not found\" }, 404);\n\n const baseFee = reg.squad?.base_fee_cents ?? reg.event?.base_fee_cents ?? 0;\n const serviceFee = reg.squad?.service_fee_cents ?? reg.event?.service_fee_cents ?? 0;\n const total = baseFee + serviceFee;\n if (total <= 0) return json({ error: \"no fee on this registration\" }, 400);\n\n const account = accountForEvent(reg.event);\n const customerId = reg.family\n ? await ensureStripeCustomerForFamily(reg.family, account, reg.family.primary_email)\n : null;\n const productName = `${reg.event?.name || \"Event\"} — ${reg.player ? reg.player.first_name + \" \" + reg.player.last_name : \"\"}`.trim();\n\n const params: Record = {\n \"mode\": \"payment\",\n \"success_url\": success_url,\n \"cancel_url\": cancel_url,\n \"line_items[0][price_data][currency]\": (reg.event?.currency || \"USD\").toLowerCase(),\n \"line_items[0][price_data][unit_amount]\": total,\n \"line_items[0][price_data][product_data][name]\": productName,\n \"line_items[0][quantity]\": 1,\n \"metadata[forms_kind]\": \"event_registration\",\n \"metadata[registration_id]\": registration_id,\n \"metadata[event_id]\": event_id,\n \"metadata[org_id]\": org_id || reg.event?.org_id || FORMS_ORG_ID,\n \"metadata[stripe_account]\": account,\n \"payment_intent_data[metadata][registration_id]\": registration_id,\n \"payment_intent_data[metadata][stripe_account]\": account,\n };\n\n // SEPA for EUR event registrations (typically MAD Cup)\n if (account === \"madrid\" && (reg.event?.currency || \"EUR\") === \"EUR\") {\n params[\"payment_method_types[0]\"] = \"card\";\n params[\"payment_method_types[1]\"] = \"sepa_debit\";\n }\n\n if (customerId) params[\"customer\"] = customerId;\n else if (reg.family?.primary_email) params[\"customer_email\"] = reg.family.primary_email;\n\n const session = await stripe(account, \"checkout/sessions\", { body: params });\n\n // Stamp the routing decision on the registration row so reporting + webhook\n // recovery know which account this charge will settle to.\n await sbPatch(`event_registrations?id=eq.${registration_id}`, {\n stripe_account: account,\n stripe_checkout_session_id: session.id,\n });\n\n return json({ url: session.url, session_id: session.id, account });\n}\n\n// ─── SYNC FROM STRIPE (per-account) ──────────────────────────────────────\n\nasync function syncCustomerSubsAndInvoices(\n account: Account,\n customerId: string,\n opts?: { knownFamilyId?: string; knownPlanId?: string },\n): Promise<{ subs: number; invoices: number; sub_ids: string[]; }> {\n let subsImported = 0;\n let invoicesImported = 0;\n const subIds: string[] = [];\n\n const subList = await stripe(account, `subscriptions?customer=${customerId}&status=all&limit=100&expand[]=data.items.data.price`, { method: \"GET\" });\n for (const sub of subList.data || []) {\n if (!sub.metadata) sub.metadata = {};\n if (!sub.metadata.family_id && opts?.knownFamilyId) sub.metadata.family_id = opts.knownFamilyId;\n if (!sub.metadata.plan_id && opts?.knownPlanId) sub.metadata.plan_id = opts.knownPlanId;\n if (!sub.metadata.org_id) sub.metadata.org_id = FORMS_ORG_ID;\n if (!sub.metadata.stripe_account) sub.metadata.stripe_account = account;\n\n const row = await projectSubscriptionToDb(sub, account);\n if (row) {\n subsImported++;\n subIds.push(sub.id);\n\n const plan = sub.metadata.plan_id\n ? await sbOne(`subscription_plans?id=eq.${sub.metadata.plan_id}&select=billing_cycles`)\n : null;\n if (plan?.billing_cycles) {\n await sbPatch(`family_subscriptions?stripe_subscription_id=eq.${sub.id}`, {\n billing_cycles_total: plan.billing_cycles,\n });\n }\n }\n }\n\n const invList = await stripe(account, `invoices?customer=${customerId}&limit=100`, { method: \"GET\" });\n for (const inv of invList.data || []) {\n if (!inv.subscription) continue;\n const subStripeId = typeof inv.subscription === \"string\" ? inv.subscription : inv.subscription?.id;\n const sub = await sbOne(`family_subscriptions?stripe_subscription_id=eq.${subStripeId}&select=*`);\n if (!sub) continue;\n\n const row = {\n org_id: sub.org_id,\n family_id: sub.family_id,\n subscription_id: sub.id,\n stripe_account: account,\n stripe_invoice_id: inv.id,\n stripe_subscription_id: subStripeId,\n stripe_customer_id: inv.customer,\n status: inv.status,\n amount_due_cents: inv.amount_due,\n amount_paid_cents: inv.amount_paid,\n currency: (inv.currency || \"usd\").toUpperCase(),\n hosted_invoice_url: inv.hosted_invoice_url || null,\n invoice_pdf_url: inv.invoice_pdf || null,\n paid_at: inv.status_transitions?.paid_at ? new Date(inv.status_transitions.paid_at * 1000).toISOString() : null,\n period_start: inv.period_start ? new Date(inv.period_start * 1000).toISOString() : null,\n period_end: inv.period_end ? new Date(inv.period_end * 1000).toISOString() : null,\n };\n await sbUpsert(\"subscription_invoices\", row, \"stripe_invoice_id\");\n invoicesImported++;\n }\n\n for (const subId of subIds) {\n const paidCount = await sb(`subscription_invoices?stripe_subscription_id=eq.${subId}&status=eq.paid&select=id`);\n await sbPatch(`family_subscriptions?stripe_subscription_id=eq.${subId}`, {\n billing_cycles_paid: Array.isArray(paidCount) ? paidCount.length : 0,\n });\n }\n\n return { subs: subsImported, invoices: invoicesImported, sub_ids: subIds };\n}\n\nasync function handleSyncFamilyFromStripe(body: any): Promise {\n const { family_id } = body.sync_family_from_stripe || {};\n if (!family_id) return json({ error: \"family_id required\" }, 400);\n\n const family = await sbOne(`p_families?id=eq.${family_id}&select=*`);\n if (!family) return json({ error: \"family not found\" }, 404);\n\n // For each account where the family has a customer ID, sync that account.\n // Backward compat: legacy stripe_customer_id is treated as residency.\n let totalSubs = 0;\n let totalInvoices = 0;\n const subIds: string[] = [];\n const perAccount: any[] = [];\n\n for (const account of ACCOUNTS) {\n let custId = family[customerColumnForAccount(account)] as string | null;\n if (!custId && account === \"residency\" && family.stripe_customer_id) {\n custId = family.stripe_customer_id;\n }\n if (!custId) continue;\n try {\n const r = await syncCustomerSubsAndInvoices(account, custId, { knownFamilyId: family_id });\n totalSubs += r.subs;\n totalInvoices += r.invoices;\n subIds.push(...r.sub_ids);\n perAccount.push({ account, customer_id: custId, subs: r.subs, invoices: r.invoices });\n } catch (e: any) {\n perAccount.push({ account, customer_id: custId, error: e.message });\n }\n }\n\n return json({\n ok: true,\n family_id,\n synced_subscriptions: totalSubs,\n synced_invoices: totalInvoices,\n subscription_ids: subIds,\n per_account: perAccount,\n });\n}\n\nasync function handleSyncAllFromStripe(_body: any): Promise {\n const families = await sb(\n `p_families?or=(stripe_customer_id.not.is.null,stripe_customer_id_main.not.is.null,stripe_customer_id_residency.not.is.null,stripe_customer_id_madrid.not.is.null)&org_id=eq.${FORMS_ORG_ID}&select=*`\n );\n let totalSubs = 0;\n let totalInvoices = 0;\n const perFamily: any[] = [];\n\n for (const f of (families || [])) {\n const familyResult: any = { family_id: f.id, family_name: f.family_name, accounts: [] };\n for (const account of ACCOUNTS) {\n let custId = f[customerColumnForAccount(account)] as string | null;\n if (!custId && account === \"residency\" && f.stripe_customer_id) {\n custId = f.stripe_customer_id;\n }\n if (!custId) continue;\n try {\n const r = await syncCustomerSubsAndInvoices(account, custId, { knownFamilyId: f.id });\n totalSubs += r.subs;\n totalInvoices += r.invoices;\n familyResult.accounts.push({ account, subs: r.subs, invoices: r.invoices });\n } catch (e: any) {\n familyResult.accounts.push({ account, error: e.message });\n }\n }\n perFamily.push(familyResult);\n }\n\n return json({\n ok: true,\n families_processed: families?.length || 0,\n total_subscriptions: totalSubs,\n total_invoices: totalInvoices,\n per_family: perFamily,\n });\n}\n\n// ─── Entry point ──────────────────────────────────────────────────────────\n\nexport default async function (req: Request): Promise {\n if (req.method === \"OPTIONS\") return new Response(null, { headers: cors });\n if (req.method !== \"POST\") return json({ error: \"POST only\" }, 405);\n\n let body: any;\n try { body = await req.json(); } catch { return json({ error: \"invalid json\" }, 400); }\n\n try {\n if (body.subscription) return await handleSubscriptionCheckout(body);\n if (body.admin_subscribe) return await handleAdminSubscribe(body);\n if (body.comp_subscription) return await handleCompSubscription(body);\n if (body.portal) return await handleBillingPortal(body);\n if (body.cancel_subscription) return await handleCancelSubscription(body);\n if (body.pause_subscription) return await handlePauseSubscription(body);\n if (body.resume_subscription) return await handleResumeSubscription(body);\n if (body.sync_family_from_stripe) return await handleSyncFamilyFromStripe(body);\n if (body.sync_all_from_stripe) return await handleSyncAllFromStripe(body);\n if (body.registration_id) return await handleEventCheckout(body);\n } catch (e: any) {\n console.error(\"[checkout] handler error:\", e);\n return json({ error: e.message || \"handler failed\" }, 500);\n }\n\n return json({ error: \"no recognized mode in body\" }, 400);\n}\n","createdAt",["D",1778088732192],"branchVersion","branchId","10427514-402d-11f1-b56c-42b51c65c3df","id","1041a774-402d-11f1-b56c-42b51c65c3df","formsStripeCheckout",["D",1777069771563],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","019cdfb8-beb5-7562-b6a2-fa005c0ee90f","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","019cdfb8-beb5-7562-b6a2-fe2ba5beed97","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_102":98},"org",{"_95":94,"_96":-5,"_97":98,"_18":55,"_99":100,"_101":25},"branch",{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned",25,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","director","handle","displayName","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/1977df9e-bb24-475d-ff22-184507695c00/square512?exp=1789545599&sig=93b165fc38ddcbdba322b7dd6cbdd58cfb427daf904e568db81252317cf545ef","tier","pro","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_43":44,"_32":45,"_38":150,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":53,"_54":53,"_18":55,"_56":-5,"_57":25,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":151,"_79":152,"_81":153,"_83":25},"tree",[145],"files",[145],"counts",{"_133":61,"_134":135,"_136":61,"_137":138,"_139":140},"contents",[125],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_43":126,"_32":28,"_30":31,"_127":-5,"_41":42,"_40":14,"_128":25,"_38":129,"_13":130,"_33":34,"_35":37,"_24":25,"_131":-5,"_27":132},"8422fb14-4971-11f1-a65c-42b51c65c3df","parentId","latest",["D",1778088732192],13,"label",[28],"pulls","branches",1,"forks","envVars",{"_141":143,"_144":61},"connections",{"_141":61,"_142":61},"count","unfilledCount",12,"emptyCount",{"_43":126,"_32":28,"_30":31,"_127":-5,"_41":42,"_40":14,"_128":25,"_38":146,"_13":130,"_33":34,"_35":37,"_24":25,"_131":-5,"_147":148,"_27":149},["D",1778088732192],"children",[],[28],["D",1777069771563],{"_95":94,"_102":98},{"_95":94,"_96":-5,"_97":98,"_18":55,"_99":100,"_101":25},{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_77":-5,"_122":187,"_188":189,"_190":191,"_192":25,"_193":25,"_194":25,"_195":120,"_196":-5,"_197":-7,"_198":-7,"_199":61,"_200":25,"_201":25,"_202":-5,"_203":25,"_204":25,"_205":25,"_206":-5},"ENV",{"_158":159,"_160":161,"_162":85,"_163":164,"_165":166,"_167":168,"_169":170,"_171":172,"_173":174,"_175":176,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v14