Issue and deliver licenses manually

order_id,product_id,plan_id,email,name
YOUR_ORDER_LINE_001,YOUR_PRODUCT_ID,YOUR_PLAN_ID,buyer-one@example.invalid,Demo Buyer One
YOUR_ORDER_LINE_002,YOUR_PRODUCT_ID,YOUR_PLAN_ID,buyer-two@example.invalid,Demo Buyer Two

php bulk-issue.php dry-run orders.csv

php bulk-issue.php apply orders.csv

php bulk-issue.php export YOUR_ORDER_LINE_001 /absolute/private/delivery.json

<?php
declare(strict_types=1);
// Backend-only CSV issuance with a durable no-blind-retry ledger and encrypted key outbox.
// PHP 8.2+, cURL, PDO SQLite and Sodium. No Composer dependencies.
// Run: php bulk-issue.php dry-run orders.csv; then configure the documented private environment.
// Apply: php bulk-issue.php apply orders.csv; expected safe JSON states, never a key on stdout.
// Export explicitly: php bulk-issue.php export YOUR_ORDER_LINE_ID /absolute/private/delivery.json
if(PHP_SAPI!=='cli'){http_response_code(404);exit;}

function batchRows(string $file): array
{
    $stream=@fopen($file,'rb');if(!$stream)throw new RuntimeException('INPUT_UNAVAILABLE');
    try{
        $header=fgetcsv($stream,escape:'');
        if($header!==['order_id','product_id','plan_id','email','name'])throw new RuntimeException('INVALID_CSV_HEADER');
        $rows=[];$seen=[];$products=[];
        while(($values=fgetcsv($stream,escape:''))!==false){
            if($values===[null])continue;
            if(count($rows)>=50||count($values)!==5)throw new RuntimeException('INVALID_CSV_SIZE');
            $row=array_combine($header,array_map('trim',$values));
            if(!preg_match('/^[A-Za-z0-9_.:-]{1,160}$/D',$row['order_id'])||isset($seen[$row['order_id']])||
                strlen($row['product_id'])<2||strlen($row['product_id'])>190||strlen($row['plan_id'])<2||strlen($row['plan_id'])>140||
                !filter_var($row['email'],FILTER_VALIDATE_EMAIL)||strlen($row['email'])>190||strlen($row['name'])>160)throw new RuntimeException('INVALID_CSV_ROW');
            $seen[$row['order_id']]=true;$products[$row['product_id']]=true;$rows[]=$row;
        }
        if(!$rows||count($products)!==1)throw new RuntimeException('ONE_PRODUCT_PER_BATCH_REQUIRED');
        return $rows;
    }finally{fclose($stream);}
}

function batchEnvironment(): string
{
    $value=strtolower((string)getenv('KDP_ENVIRONMENT'));
    if(!in_array($value,['sandbox','live'],true))throw new RuntimeException('ENVIRONMENT_REQUIRED');
    if($value==='live'&&getenv('KDP_CONFIRM_LIVE')!=='1')throw new RuntimeException('LIVE_CONFIRMATION_REQUIRED');
    return $value;
}

function batchDirectory(string $path): string
{
    if(!str_starts_with($path,DIRECTORY_SEPARATOR)||is_link($path))throw new RuntimeException('PRIVATE_ABSOLUTE_DIRECTORY_REQUIRED');
    if(!is_dir($path)&&!@mkdir($path,0700,true))throw new RuntimeException('PRIVATE_DIRECTORY_UNAVAILABLE');
    if(PHP_OS_FAMILY!=='Windows'&&((int)fileperms($path)&0077)!==0)throw new RuntimeException('DIRECTORY_MUST_BE_OWNER_ONLY');
    return rtrim($path,DIRECTORY_SEPARATOR);
}

function batchKey(): string
{
    $key=base64_decode((string)getenv('KDP_OUTBOX_KEY'),true);
    if($key===false||strlen($key)!==SODIUM_CRYPTO_SECRETBOX_KEYBYTES)throw new RuntimeException('OUTBOX_KEY_REQUIRED');
    return $key;
}

function batchOrderKey(string $order,string $environment): string
{
    $namespace=(string)getenv('KDP_BATCH_NAMESPACE');
    if(!preg_match('/^[A-Za-z0-9_.:-]{1,100}$/D',$namespace))throw new RuntimeException('WORKSPACE_STORE_NAMESPACE_REQUIRED');
    return hash('sha256',$namespace."\0".$environment."\0".$order);
}

function batchDatabase(string $directory): PDO
{
    $path=$directory.'/issuance.sqlite';if(is_link($path))throw new RuntimeException('INVALID_STATE_PATH');
    $database=new PDO('sqlite:'.$path,null,null,[PDO::ATTR_ERRMODE=>PDO::ERRMODE_EXCEPTION,PDO::ATTR_DEFAULT_FETCH_MODE=>PDO::FETCH_ASSOC]);
    chmod($path,0600);
    $database->exec('PRAGMA busy_timeout=3000');
    $database->exec("CREATE TABLE IF NOT EXISTS issuance(order_hash TEXT PRIMARY KEY,request_hash TEXT NOT NULL,request_json TEXT NOT NULL,state TEXT NOT NULL,license_id TEXT,secret_cipher TEXT,request_id TEXT,http_status INTEGER,error_code TEXT,created_at INTEGER NOT NULL)");
    return $database;
}

function batchConfiguration(string $environment): array
{
    $base=rtrim((string)(getenv('KDP_BASE_URL')?:'https://licensing.kdpika.com'),'/');
    $parts=parse_url($base);
    $local=getenv('KDP_ALLOW_LOOPBACK')==='1'&&$environment==='sandbox'&&($parts['scheme']??'')==='http'&&($parts['host']??'')==='127.0.0.1';
    if(!$parts||isset($parts['user'])||isset($parts['pass'])||isset($parts['query'])||isset($parts['fragment'])||!empty($parts['path'])||(!$local&&($parts['scheme']??'')!=='https'))throw new RuntimeException('INVALID_BASE_URL');
    $key=(string)getenv('KDP_API_KEY');
    if(!str_starts_with($key,'lmp_'.$environment.'_'))throw new RuntimeException('KEY_ENVIRONMENT_MISMATCH');
    return [$base,$key,$local];
}

function batchRequest(string $json,string $idempotency,string $environment): array
{
    [$base,$key,$local]=batchConfiguration($environment);
    $raw='';$curl=curl_init($base.'/api/v1/licenses');
    curl_setopt_array($curl,[CURLOPT_POST=>true,CURLOPT_POSTFIELDS=>$json,CURLOPT_FOLLOWLOCATION=>false,CURLOPT_CONNECTTIMEOUT=>5,CURLOPT_TIMEOUT=>15,
        CURLOPT_SSL_VERIFYPEER=>true,CURLOPT_SSL_VERIFYHOST=>2,CURLOPT_PROTOCOLS=>$local?CURLPROTO_HTTP:CURLPROTO_HTTPS,
        CURLOPT_HTTPHEADER=>['Content-Type: application/json','Accept: application/json','Authorization: Bearer '.$key,'Idempotency-Key: '.$idempotency,'User-Agent: KDPika-Manual-Issuance/1'],
        CURLOPT_WRITEFUNCTION=>static function($handle,string $bytes)use(&$raw):int{if(strlen($raw)+strlen($bytes)>1048576)return 0;$raw.=$bytes;return strlen($bytes);}]);
    $sent=curl_exec($curl);$status=(int)curl_getinfo($curl,CURLINFO_RESPONSE_CODE);
    $body=json_decode($raw,true);
    return [$sent!==false,$status,is_array($body)?$body:[]];
}

function batchApply(array $rows,PDO $database,string $environment,string $outboxKey): int
{
    foreach($rows as $row){
        $orderHash=batchOrderKey($row['order_id'],$environment);
        $json=json_encode(['product_id'=>$row['product_id'],'plan_id'=>$row['plan_id'],
            'customer'=>['email'=>$row['email'],'name'=>$row['name']]],JSON_UNESCAPED_SLASHES|JSON_UNESCAPED_UNICODE|JSON_THROW_ON_ERROR);
        $requestHash=hash('sha256',$json);
        $find=$database->prepare('SELECT * FROM issuance WHERE order_hash=?');$find->execute([$orderHash]);$prior=$find->fetch();
        if($prior){
            $state=hash_equals($prior['request_hash'],$requestHash)?$prior['state']:'CONFLICT';
            echo json_encode(['order_hash'=>$orderHash,'state'=>$state,'new_request'=>false]).PHP_EOL;
            if($state!=='DONE')return 2;
            continue;
        }
        // Commit intent before any network attempt. A crash must never silently reset it.
        $insert=$database->prepare("INSERT INTO issuance(order_hash,request_hash,request_json,state,created_at) VALUES(?,?,?,'IN_FLIGHT',?)");
        $insert->execute([$orderHash,$requestHash,$json,time()]);
        try{[$transport,$status,$response]=batchRequest($json,'manual_'.$orderHash,$environment);}
        catch(Throwable){$transport=false;$status=0;$response=[];}
        $license=$response['license']??null;
        $valid=$transport&&$status===201&&($response['success']??null)===true&&is_array($license)&&
            is_string($license['id']??null)&&is_string($license['license_key']??null)&&strlen($license['license_key'])>=12&&strlen($license['license_key'])<=100&&($license['environment']??null)===$environment;
        $requestId=is_string($response['request_id']??null)?substr($response['request_id'],0,190):null;
        $code=is_string($response['error']['code']??null)&&preg_match('/^[A-Z_]{1,80}$/D',$response['error']['code'])?$response['error']['code']:null;
        if(!$valid){
            $database->prepare("UPDATE issuance SET state='REVIEW',http_status=?,request_id=?,error_code=? WHERE order_hash=?")->execute([$status,$requestId,$code,$orderHash]);
            echo json_encode(['order_hash'=>$orderHash,'state'=>'REVIEW','http_status'=>$status,'request_id'=>$requestId,'error_code'=>$code]).PHP_EOL;
            return 2;
        }
        $nonce=random_bytes(SODIUM_CRYPTO_SECRETBOX_NONCEBYTES);
        $cipher=base64_encode($nonce.sodium_crypto_secretbox($license['license_key'],$nonce,$outboxKey));
        // Save the returned key encrypted before reporting completion. If this write fails,
        // IN_FLIGHT remains and the next run refuses a second API call.
        $database->prepare("UPDATE issuance SET state='DONE',license_id=?,secret_cipher=?,request_id=?,http_status=201 WHERE order_hash=?")
            ->execute([$license['id'],$cipher,$requestId,$orderHash]);
        echo json_encode(['order_hash'=>$orderHash,'state'=>'DONE','license_id'=>$license['id'],'request_id'=>$requestId,'new_request'=>true]).PHP_EOL;
        usleep(1100000); // Below the documented 60 creates/minute per-key bucket, before other traffic.
    }
    return 0;
}

function batchExport(PDO $database,string $order,string $environment,string $key,string $target): void
{
    $find=$database->prepare("SELECT license_id,secret_cipher,request_json FROM issuance WHERE order_hash=? AND state='DONE'");
    $find->execute([batchOrderKey($order,$environment)]);$row=$find->fetch();if(!$row)throw new RuntimeException('NO_COMPLETED_DELIVERY');
    $encrypted=base64_decode($row['secret_cipher'],true);if($encrypted===false)throw new RuntimeException('INVALID_OUTBOX');
    $plain=sodium_crypto_secretbox_open(substr($encrypted,SODIUM_CRYPTO_SECRETBOX_NONCEBYTES),substr($encrypted,0,SODIUM_CRYPTO_SECRETBOX_NONCEBYTES),$key);
    if($plain===false)throw new RuntimeException('OUTBOX_DECRYPTION_FAILED');
    if(!str_starts_with($target,DIRECTORY_SEPARATOR))throw new RuntimeException('PRIVATE_EXPORT_PATH_REQUIRED');
    batchDirectory(dirname($target));$stream=@fopen($target,'xb');if(!$stream)throw new RuntimeException('EXPORT_EXISTS_OR_UNAVAILABLE');
    try{chmod($target,0600);$customer=json_decode($row['request_json'],true,flags:JSON_THROW_ON_ERROR)['customer'];
        $json=json_encode(['license_id'=>$row['license_id'],'license_key'=>$plain,'customer'=>$customer],JSON_THROW_ON_ERROR);
        if(fwrite($stream,$json)!==strlen($json))throw new RuntimeException('EXPORT_WRITE_FAILED');
    }finally{fclose($stream);sodium_memzero($plain);}
    echo '{"exported":true,"contains_secret":true}'.PHP_EOL;
}

try{
    if(($argc!==3||!in_array($argv[1],['dry-run','apply'],true))&&($argc!==4||$argv[1]!=='export'))throw new RuntimeException('USAGE_DRY_RUN_APPLY_OR_EXPORT');
    if($argv[1]==='dry-run'){$rows=batchRows($argv[2]);echo json_encode(['valid_rows'=>count($rows),'network_requests'=>0,'state_writes'=>0]).PHP_EOL;exit;}
    umask(0077);$environment=batchEnvironment();$key=batchKey();
    $directory=batchDirectory((string)getenv('KDP_BATCH_STATE'));
    $lock=@fopen($directory.'/worker.lock','c');if(!$lock||!flock($lock,LOCK_EX|LOCK_NB))throw new RuntimeException('BATCH_BUSY');
    try{
        $database=batchDatabase($directory);
        if($argv[1]==='export'){batchExport($database,$argv[2],$environment,$key,$argv[3]);$exit=0;}
        else{$rows=batchRows($argv[2]);batchConfiguration($environment);$exit=batchApply($rows,$database,$environment,$key);}
    }finally{flock($lock,LOCK_UN);fclose($lock);sodium_memzero($key);}
    exit($exit);
}catch(Throwable $error){
    // No raw exception, file path, key, response body or customer data in diagnostics.
    $code=preg_match('/^[A-Z_]+$/D',$error->getMessage())?$error->getMessage():'LOCAL_OPERATION_FAILED';
    echo json_encode(['completed'=>false,'error'=>$code]).PHP_EOL;exit(1);
}