updates

rsync-studio-licensing/app/Services/Licensing/LicenseDeliveryService.php

@@ -0,0 +1,40 @@
+<?php
+
+namespace App\Services\Licensing;
+
+use App\Models\LicenseDeliveryOutbox;
+use Illuminate\Support\Facades\Crypt;
+use Illuminate\Support\Facades\Mail;
+
+final class LicenseDeliveryService
+{
+    public function deliverPending(int $limit = 20): int
+    {
+        $delivered = 0;
+        $pending = LicenseDeliveryOutbox::query()
+            ->whereNull('delivered_at')
+            ->whereNotNull('recipient_email')
+            ->where('recipient_email', '!=', '')
+            ->oldest()
+            ->limit(max(1, min($limit, 100)))
+            ->get();
+
+        foreach ($pending as $outbox) {
+            $plain = Crypt::decryptString($outbox->encrypted_license_key);
+            $recipient = strtolower(trim((string) $outbox->recipient_email));
+            if ($recipient === '') {
+                continue;
+            }
+
+            Mail::raw(
+                "Thank you for choosing Rsync Studio.\n\nYour licence key is:\n\n{$plain}\n\nOpen Rsync Studio → Settings → Licence and enter this key to activate your Mac.\n\nKeep this key private. You can manage activations from the Rsync Studio licence portal.",
+                fn ($message) => $message->to($recipient)->subject('Your Rsync Studio licence key')
+            );
+
+            $outbox->update(['delivered_at' => now()]);
+            $delivered++;
+        }
+
+        return $delivered;
+    }
+}

rsync-studio-licensing/app/Services/Licensing/LicenseIssuer.php

@@ -1,41 +1,45 @@
 <?php
+
 namespace App\Services\Licensing;
 
 use App\Models\License;
-use App\Models\LicenseProduct;
 use App\Models\LicenseDeliveryOutbox;
-use Illuminate\Support\Facades\DB;
+use App\Models\LicenseProduct;
 use Illuminate\Support\Facades\Crypt;
+use Illuminate\Support\Facades\DB;
 
 final class LicenseIssuer
 {
     public function issue(LicenseProduct $product, ?string $name, ?string $email, ?string $provider = null, ?string $orderID = null, ?string $customerID = null, bool $queueDelivery = false): array
     {
-        return DB::transaction(function () use ($product,$name,$email,$provider,$orderID,$customerID,$queueDelivery) {
+        return DB::transaction(function () use ($product, $name, $email, $provider, $orderID, $customerID, $queueDelivery) {
             if ($provider && $orderID) {
-                $existing = License::where('payment_provider',$provider)->where('external_order_id',$orderID)->first();
-                if ($existing) return [$existing, null];
+                $existing = License::where('payment_provider', $provider)->where('external_order_id', $orderID)->first();
+                if ($existing) {
+                    return [$existing, null];
+                }
             }
             $plain = LicenseKey::generate();
             $license = License::create([
-                'license_product_id'=>$product->id,
-                'license_key_hash'=>LicenseKey::hash($plain),
-                'license_key_last4'=>substr(LicenseKey::normalize($plain), -4),
-                'customer_name'=>$name,
-                'customer_email'=>$email ? strtolower(trim($email)) : null,
-                'edition'=>$product->edition,
-                'activation_limit'=>$product->activation_limit,
-                'max_major_version'=>$product->max_major_version,
-                'payment_provider'=>$provider,
-                'external_order_id'=>$orderID,
-                'external_customer_id'=>$customerID,
+                'license_product_id' => $product->id,
+                'license_key_hash' => LicenseKey::hash($plain),
+                'license_key_last4' => substr(LicenseKey::normalize($plain), -4),
+                'customer_name' => $name,
+                'customer_email' => $email ? strtolower(trim($email)) : null,
+                'edition' => $product->edition,
+                'activation_limit' => $product->activation_limit,
+                'max_major_version' => $product->max_major_version,
+                'payment_provider' => $provider,
+                'external_order_id' => $orderID,
+                'external_customer_id' => $customerID,
             ]);
             if ($queueDelivery) {
                 LicenseDeliveryOutbox::updateOrCreate(
-                    ['license_id'=>$license->id],
-                    ['encrypted_license_key'=>Crypt::encryptString($plain),'recipient_email'=>$license->customer_email,'delivered_at'=>null]
+                    ['license_id' => $license->id],
+                    ['encrypted_license_key' => Crypt::encryptString($plain), 'recipient_email' => $license->customer_email, 'delivered_at' => null]
                 );
             }
+
             return [$license, $plain];
         });
     }

rsync-studio-licensing/app/Services/Licensing/LicenseKey.php

@@ -1,4 +1,5 @@
 <?php
+
 namespace App\Services\Licensing;
 
 final class LicenseKey
@@ -7,7 +8,10 @@ final class LicenseKey
     {
         $alphabet = 'ABCDEFGHJKLMNPQRSTUVWXYZ23456789';
         $raw = '';
-        for ($i=0; $i<20; $i++) $raw .= $alphabet[random_int(0, strlen($alphabet)-1)];
+        for ($i = 0; $i < 20; $i++) {
+            $raw .= $alphabet[random_int(0, strlen($alphabet) - 1)];
+        }
+
         return implode('-', str_split($raw, 5));
     }
 

rsync-studio-licensing/app/Services/Licensing/LicenseSigner.php

@@ -1,4 +1,5 @@
 <?php
+
 namespace App\Services\Licensing;
 
 use App\Models\License;
@@ -26,21 +27,28 @@ final class LicenseSigner
         ksort($payload, SORT_STRING);
         $json = json_encode($payload, JSON_UNESCAPED_SLASHES | JSON_THROW_ON_ERROR);
         $sig = sodium_crypto_sign_detached($json, $secret);
+
         return 'RS3.'.self::b64url($json).'.'.self::b64url($sig);
     }
 
     public function publicKeyBase64(): string
     {
         $pair = sodium_crypto_sign_seed_keypair($this->privateSeed());
+
         return base64_encode(sodium_crypto_sign_publickey($pair));
     }
 
     private function privateSeed(): string
     {
         $path = config('rsync-studio.private_key_path');
-        if (!$path || !is_file($path)) throw new RuntimeException('RSYNC_STUDIO_LICENSE_PRIVATE_KEY_PATH is not configured or does not exist.');
+        if (! $path || ! is_file($path)) {
+            throw new RuntimeException('RSYNC_STUDIO_LICENSE_PRIVATE_KEY_PATH is not configured or does not exist.');
+        }
         $decoded = base64_decode(trim((string) file_get_contents($path)), true);
-        if ($decoded === false || strlen($decoded) !== SODIUM_CRYPTO_SIGN_SEEDBYTES) throw new RuntimeException('The Rsync Studio private key must be a Base64-encoded 32-byte Ed25519 seed.');
+        if ($decoded === false || strlen($decoded) !== SODIUM_CRYPTO_SIGN_SEEDBYTES) {
+            throw new RuntimeException('The Rsync Studio private key must be a Base64-encoded 32-byte Ed25519 seed.');
+        }
+
         return $decoded;
     }
 

rsync-studio-licensing/app/Services/Licensing/LicenseTokenVerifier.php

@@ -1,4 +1,5 @@
 <?php
+
 namespace App\Services\Licensing;
 
 use RuntimeException;
@@ -8,21 +9,32 @@ final class LicenseTokenVerifier
     public function verify(string $token): array
     {
         $parts = explode('.', trim($token));
-        if (count($parts) !== 3 || $parts[0] !== 'RS3') throw new RuntimeException('Invalid licence token.');
+        if (count($parts) !== 3 || $parts[0] !== 'RS3') {
+            throw new RuntimeException('Invalid licence token.');
+        }
         $payload = $this->decode($parts[1]);
         $signature = $this->decode($parts[2]);
         $public = base64_decode((string) config('rsync-studio.public_key'), true);
-        if ($public === false || strlen($public) !== SODIUM_CRYPTO_SIGN_PUBLICKEYBYTES) throw new RuntimeException('Server licence public key is invalid.');
-        if (!sodium_crypto_sign_verify_detached($signature, $payload, $public)) throw new RuntimeException('Licence token signature is invalid.');
+        if ($public === false || strlen($public) !== SODIUM_CRYPTO_SIGN_PUBLICKEYBYTES) {
+            throw new RuntimeException('Server licence public key is invalid.');
+        }
+        if (! sodium_crypto_sign_verify_detached($signature, $payload, $public)) {
+            throw new RuntimeException('Licence token signature is invalid.');
+        }
         $decoded = json_decode($payload, true, flags: JSON_THROW_ON_ERROR);
+
         return is_array($decoded) ? $decoded : throw new RuntimeException('Licence token payload is invalid.');
     }
+
     private function decode(string $value): string
     {
         $value = strtr($value, '-_', '+/');
         $value .= str_repeat('=', (4 - strlen($value) % 4) % 4);
         $out = base64_decode($value, true);
-        if ($out === false) throw new RuntimeException('Invalid Base64URL value.');
+        if ($out === false) {
+            throw new RuntimeException('Invalid Base64URL value.');
+        }
+
         return $out;
     }
 }