[Bloders-hub]

Description

Implements Polar.sh payments and billing integration as outlined in the roadmap (#5).

Key Changes:

• packages/billing:
  • Added @orkide/billing package wrapping @polar-sh/sdk.
  • Implemented PolarBillingService for custom checkout sessions, customer portal sessions, and subscription listing.
  • Implemented Standard Webhooks (Svix/Polar HMAC-SHA256) signature verification using Web Crypto API (crypto.subtle), 100% compatible with Cloudflare Workers without Node dependencies.
  • Added replay attack protection with timestamp tolerance check.
• apps/api:
  • Added billing.routes.ts providing endpoints: POST /checkout, GET /portal, and verified POST /webhook.
  • Mounted billingRoutes into the core API application router.
  • Added domain service billing.service.ts for handling subscription active/revocation events.

Testing:

• Vitest tests included in packages/billing/src/webhook.test.ts.

Closes #5

[gitguardian]

️✅ There are no secrets present in this pull request anymore.

If these secrets were true positive and are still valid, we highly recommend you to revoke them.
While these secrets were previously flagged, we no longer have a reference to the
specific commits where they were detected. Once a secret has been leaked into a git
repository, you should consider it compromised, even if it was deleted immediately.
Find here more information about risks.

---

^{_{🦉 GitGuardian detects secrets in your source code to help developers and security teams secure the modern development process. You are seeing this because you or someone else with access to this repository has authorized GitGuardian to scan your pull request.}}