Artisan commands

php artisan purchases:install --providers   # publish config + migrations, append provider .env keys
php artisan purchases:providers             # list providers and whether each can take traffic
php artisan purchases:verify                # genuinely contact every provider
php artisan purchases:verify stripe         # … or just one
php artisan purchases:replay --provider=apple --since=2026-01-01

purchases:providers says yes only when a provider can take traffic: Apple needs bundle_id (and app_apple_id in production); Google needs package_name, the service account’s client_email and push authentication — a push token, the OIDC audience and service-account pair, or push.authenticate off; Stripe needs both secret and webhook_secret. Anything less reads missing config.

purchases:verify makes a cheap authenticated call per provider — Apple requests a test notification, Google exchanges its service-account credentials for a fresh access token (never a cached one, so a broken key fails at once), Stripe fetches the account balance — and exits non-zero when any check fails, so it works as a deploy gate. The package also contributes its settings to php artisan about, reporting credentials only as SET or MISSING, and a broken duration or provider list as INVALID.