@codelitdev/platform
Composition kernel for CodeLit products: request context, credential kinds, safe errors, UUIDv7 / prefixed public IDs, health/readiness/shutdown, and HTTP/MCP mapping conventions.
The package imports no product schema, reads no environment at import, and performs no network I/O. Products implement authentication, tenant, and authorization adapters.
See docs/architecture.md §6.4 and ADR 0001.
Billing adapters
@codelitdev/platform/billing holds the adapters a product needs around
@codelitdev/billing (architecture §10, ADR 0013). Install
@codelitdev/billing to use it; the root export does not need it.
| Export | Use |
|---|---|
createBillingActionGrants | Single-use action grants: issue a token after authenticating a recent session, grant to build the workflow input, and authorization as createBilling({ authorization }). |
createAesGcmSensitiveValues, aesGcmSensitiveValuesFromEnv | AES-256-GCM for createBilling({ sensitiveValues }), with previous keys for rotation. |
createReturnUrlValidator | Origin allowlist for createBilling({ returnUrlValidator }). |
startBillingWorkers | Runs the maintenance batches on timers; stop() on shutdown. |
handleBillingWebhook, billingWebhookPath | Verifies, stores, and acknowledges a provider webhook at POST /webhooks/billing/<provider>. |
billingErrorResponse | Maps workflow errors to HTTP status and a stable code. |
@codelitdev/platform/billing/drizzle provides
drizzleVerificationGrantStore(db, verification), which keeps grants in
Better Auth's verification table. It needs drizzle-orm.
const grants = createBillingActionGrants({
store: drizzleVerificationGrantStore(db, verification),
});
const billing = createBilling({
// ...
authorization: grants.authorization,
sensitiveValues: aesGcmSensitiveValuesFromEnv(),
returnUrlValidator: createReturnUrlValidator([process.env.WEB_ORIGIN!]),
});
const workers = startBillingWorkers({ billing, workerId: `billing-${process.pid}` });