Revenue attribution

// lib/checkout.ts (Next.js 15 App Router)
import { cookies } from 'next/headers';
import Stripe from 'stripe';

const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!);

export async function createCheckoutSession(priceId: string) {
  // The tracker stores these cookies on your domain. Read them here, on the server that calls Stripe
  const cookieStore = await cookies();

  return stripe.checkout.sessions.create({
    mode: 'payment',
    line_items: [{ price: priceId, quantity: 1 }],
    success_url: 'https://yourdomain.com/checkout/success',
    cancel_url: 'https://yourdomain.com/cart',
    metadata: {
      websiteId: process.env.THEBIZNESS_WEBSITE_ID ?? '', // names the website this sale belongs to
      visitorId: cookieStore.get('thebizness_visitor_id')?.value ?? '',
      sessionId: cookieStore.get('thebizness_session_id')?.value ?? ''
    }
  });
}

// Subscriptions and free trials: also set subscription_data.metadata (Next.js 15 App Router)
import { cookies } from 'next/headers';

const cookieStore = await cookies();
const tracking = {
  websiteId: process.env.THEBIZNESS_WEBSITE_ID ?? '',
  visitorId: cookieStore.get('thebizness_visitor_id')?.value ?? '',
  sessionId: cookieStore.get('thebizness_session_id')?.value ?? ''
};

const session = await stripe.checkout.sessions.create({
  mode: 'subscription',
  line_items: [{ price: priceId, quantity: 1 }],
  success_url: 'https://yourdomain.com/checkout/success',
  cancel_url: 'https://yourdomain.com/pricing',
  // Read from the Checkout Session itself (also when a free trial collects nothing)
  metadata: tracking,
  // Copied onto the subscription and its invoices. The metadata of a Checkout Session never reaches renewal charges
  subscription_data: { metadata: tracking }
});

// Server-side revenue reporting (Node.js 18+, using the built-in fetch)
// Stripe amounts are in the currency's smallest unit (cents for USD, fils for KWD)
const ZERO_DECIMAL_CURRENCIES = new Set(['BIF', 'CLP', 'DJF', 'GNF', 'JPY', 'KMF', 'KRW', 'MGA', 'PYG', 'RWF', 'VND', 'VUV', 'XAF', 'XOF', 'XPF']);
const THREE_DECIMAL_CURRENCIES = new Set(['BHD', 'JOD', 'KWD', 'OMR', 'TND']);

// Converts a Stripe amount to currency units, e.g. toMajorUnits(5000, 'JPY') === 5000, toMajorUnits(999, 'usd') === 9.99
// and toMajorUnits(1234, 'KWD') === 1.234
function toMajorUnits(amount, currency) {
  const code = String(currency).toUpperCase();
  const decimals = ZERO_DECIMAL_CURRENCIES.has(code) ? 0 : THREE_DECIMAL_CURRENCIES.has(code) ? 3 : 2;
  return amount / 10 ** decimals;
}

async function sendConversion(conversion) {
  const response = await fetch('https://thebizness.ai/api/conversions', {
    method: 'POST',
    headers: {
      'Content-Type': 'application/json',
      // The ingest secret from your Configure page. Keep it in an environment variable on the server.
      Authorization: `Bearer ${process.env.THEBIZNESS_INGEST_SECRET}`
    },
    body: JSON.stringify({
      websiteId: process.env.THEBIZNESS_WEBSITE_ID,
      name: conversion.name,                    // e.g. 'Purchase'
      conversionUrl: conversion.conversionUrl,  // the page where the conversion happened
      amount: conversion.amount,                // in currency units, e.g. 99.99
      currency: conversion.currency,            // ISO code, e.g. 'USD'
      visitorId: conversion.visitorId,          // from the thebizness_visitor_id cookie
      sessionId: conversion.sessionId,          // from the thebizness_session_id cookie
      orderId: conversion.orderId,              // optional: a repeated orderId is not counted twice
      metadata: conversion.metadata             // optional, up to 4 KB (a larger object keeps only email)
    })
  });

  // 429 and 5xx mean the sale was not stored: throw so the caller retries. The same orderId is safe to resend.
  if (response.status === 429 || response.status >= 500) {
    throw new Error(`theBizness.ai responded with ${response.status}`);
  }
  return response.json(); // { success: true, accepted: true, id: '...' }, or { accepted: false, reason: '...' }
}

// Usage: report the sale when your own payment flow confirms it
await sendConversion({
  name: 'Purchase',
  conversionUrl: 'https://yourdomain.com/checkout/success',
  amount: toMajorUnits(order.totalInCents, order.currency),
  currency: order.currency.toUpperCase(),
  visitorId: req.cookies.thebizness_visitor_id, // with cookie-parser in Express
  sessionId: req.cookies.thebizness_session_id,
  orderId: order.id,
  metadata: { email: order.customerEmail } // the customer on the revenue record: only ever send it from your server
});

// Your own Stripe webhook endpoint (Next.js API route). Use it only when Stripe is NOT connected in your dashboard.
import { NextRequest, NextResponse } from 'next/server';
import Stripe from 'stripe';

const stripe = new Stripe(process.env.STRIPE_SECRET_KEY!);
const webhookSecret = process.env.STRIPE_WEBHOOK_SECRET!;

// Stripe amounts are in the currency's smallest unit (cents for USD, fils for KWD)
const ZERO_DECIMAL_CURRENCIES = new Set(['BIF', 'CLP', 'DJF', 'GNF', 'JPY', 'KMF', 'KRW', 'MGA', 'PYG', 'RWF', 'VND', 'VUV', 'XAF', 'XOF', 'XPF']);
const THREE_DECIMAL_CURRENCIES = new Set(['BHD', 'JOD', 'KWD', 'OMR', 'TND']);

// Converts a Stripe amount to currency units, e.g. toMajorUnits(5000, 'JPY') === 5000, toMajorUnits(999, 'usd') === 9.99
// and toMajorUnits(1234, 'KWD') === 1.234
function toMajorUnits(amount, currency) {
  const code = String(currency).toUpperCase();
  const decimals = ZERO_DECIMAL_CURRENCIES.has(code) ? 0 : THREE_DECIMAL_CURRENCIES.has(code) ? 3 : 2;
  return amount / 10 ** decimals;
}

export async function POST(request: NextRequest) {
  const body = await request.text();
  const signature = request.headers.get('stripe-signature')!;

  let event: Stripe.Event;

  try {
    event = stripe.webhooks.constructEvent(body, signature, webhookSecret);
  } catch (err) {
    console.error('Webhook signature verification failed:', err);
    return NextResponse.json({ error: 'Webhook error' }, { status: 400 });
  }

  // Handle successful payment. Delayed payment methods (ACH, SEPA, Boleto) send completed as 'unpaid' first,
  // so the sale is recorded when async_payment_succeeded arrives instead.
  if (event.type === 'checkout.session.completed' || event.type === 'checkout.session.async_payment_succeeded') {
    const session = event.data.object as Stripe.Checkout.Session;
    if (session.payment_status === 'unpaid') return NextResponse.json({ received: true });

    // Forward the sale to theBizness.ai with the website's ingest secret. It stays on your server.
    const res = await fetch('https://thebizness.ai/api/conversions', {
      method: 'POST',
      headers: {
        'Content-Type': 'application/json',
        Authorization: `Bearer ${process.env.THEBIZNESS_INGEST_SECRET}`
      },
      body: JSON.stringify({
        websiteId: process.env.THEBIZNESS_WEBSITE_ID,
        name: 'Purchase',
        conversionUrl: 'https://yourdomain.com/checkout/success', // the page where the purchase completes
        amount: toMajorUnits(session.amount_total ?? 0, session.currency ?? 'usd'), // in currency units, e.g. 99.99
        currency: session.currency?.toUpperCase(),
        visitorId: session.metadata?.visitorId, // saved to checkout metadata at checkout creation
        sessionId: session.metadata?.sessionId,
        orderId: session.id, // Stripe checkout session ID, sent on every delivery so retries are not counted twice
        metadata: { email: session.customer_details?.email, stripeSessionId: session.id } // metadata.email is the customer on the revenue record
      })
    });

    // Return a 500 on a transient failure so Stripe retries the webhook. A 202 (accepted: false) is final.
    if (res.status === 429 || res.status >= 500) {
      console.error('theBizness.ai conversion failed:', res.status);
      return NextResponse.json({ error: 'Conversion forward failed' }, { status: 500 });
    }
  }

  return NextResponse.json({ received: true });
}