@adonis-agora/payments-dashboard 0.2.0

package/CHANGELOG.md

@@ -0,0 +1,246 @@
+# @adonis-agora/payments-dashboard
+
+## 0.2.0
+
+### Minor Changes
+
+- [#6](https://github.com/DavideCarvalho/adonis-agora-payments/pull/6) [`5d2a895`](https://github.com/DavideCarvalho/adonis-agora-payments/commit/5d2a895a41736ea924c1851c71e59a29034b299f) Thanks [@DavideCarvalho](https://github.com/DavideCarvalho)! - Seven things a real operator could not see once money was flowing. Each was found by asking a
+  question of a running install and discovering the console had no way to answer it.
+
+  **"Did THIS student's payment land?" had no answer.** `listPayments` returned
+  `externalReference` — the app's own join key, the one id an operator actually holds — and the
+  dashboard's payments handler dropped it before serialising, so the screen showed the gateway's
+  `pay_…` instead. There was no lookup by reference or by gateway id anywhere: the handler filtered
+  on `status`/`provider`, and so did the client. `PaymentListQuery` now carries
+  `externalReference`, `gatewayId` and `customerId` (all EXACT — `order-4` must never return
+  `order-42`), `GET <dashboard>/api/payments` takes `?reference=` / `?gatewayId=` / `?customerId=`,
+  the row payload carries `externalReference` and `refundedAmount`, and the screen has one search
+  box that tries the app's reference first and the gateway id second, because an operator pasting
+  from a support ticket does not know which of the two they are holding.
+
+  **There was no customers endpoint at all**, though `billing_customers` has held
+  `owner_type`/`owner_id` — written by every app calling `ensureCustomer` — since the first
+  release. That mapping is the only thing tying a payment to a person: the payment row carries
+  `cus_…` and nothing else. `GET <dashboard>/api/customers` lists it with `ownerType`/`ownerId`/
+  `gatewayId`/`provider` filters, the store gained `listCustomersByGatewayIds` so a page of payments
+  resolves its owners in one read rather than one query per row, and every payment row now carries
+  an `owner`. A gateway customer nobody mapped reads as **unmapped**, not as a blank — it means
+  charges are landing that this console can never attribute.
+
+  **No per-payment view, and the ledger could not be filtered.** `BillingListQuery` had no event
+  `type`, so "did a refund event ever arrive?" was unaskable. It does now, and `GET /api/providers`
+  reports the event types an install has actually received so the filter is built from data rather
+  than from the twenty types the package can emit. `GET /api/payments/:gatewayId` assembles what IS
+  knowable about one charge: current state, owner, the disputes filed against it, the ledger rows
+  whose stored delivery names it, and who refunded it. **It is not a history, and it does not claim
+  to be** — `billing_payments` is a single mutable row upserted in place, so what it used to be is
+  recorded nowhere. The ledger strand is a `CAST(payload AS TEXT) LIKE` scan and says so on the wire
+  (`events.matchedBy`) and on screen: it is unindexed, it can over-match, and it cannot see a
+  delivery that never stored the id. No history table was invented. The honest fix is a
+  `payment_gateway_id` column the **processor** fills on the way in, which is a write path this
+  change does not touch.
+
+  **The dispute-deadline check was structurally dead on a real install.** `disputes_due` was the
+  only dispute check, and both reads behind it require `evidence_due_by IS NOT NULL` — a column that
+  can only ever be filled by a gateway that publishes a deadline. On Asaas it comes from
+  `chargeback.deadlineToSendDisputeDocuments`, which the driver's own comments note no published
+  webhook example even contains. So a chargeback could be open with the money already pulled back
+  and `payments:health` reported healthy. A new **`open_disputes`** check counts every unanswered
+  dispute (`warning`, `open`, `under_review`) with no deadline required and **no threshold that can
+  turn it off** — an open chargeback is money already out of the account, so there is no horizon at
+  which it stops mattering. `BillingHealth` gained `openDisputes` (oldest first, because with no
+  deadline, age is the only priority left) and the health panel names them.
+
+  **A lost Asaas dispute could never be closed, so the alarm stayed red forever.** Asaas publishes
+  no lost-dispute event and the driver hardcodes `outcome: 'won'` on close, so `billing_disputes`
+  sat at `open` indefinitely; `listDisputesDueWithin` counts past-deadline rows on purpose, so the
+  check stayed red and a fifteen-minute cron logged the same failure until nobody read it — burying
+  every other finding with it. `POST <dashboard>/api/disputes/:gatewayId/resolve` records how a
+  dispute ENDED: a finished status (`lost`/`won`/`expired`/`canceled`), an outcome, a note, and WHO
+  said so. It sends nothing to a gateway, and the dialog says so twice: the decision was made at the
+  bank, this writes down which way it went. There is still no "fight" and no "accept" — that is a
+  business rule and it stays in the app's code.
+
+  **A rejected delivery left no record and no check covered it.** A bad signature, an unparsable
+  body or an unknown provider is answered `400` with nothing written anywhere, so a rotated webhook
+  token was invisible: zero events, zero failures, every check green. `unconfirmed_payments`
+  eventually fires at 2 h, but only for charges the app itself created — refund, chargeback and
+  dispute-closure deliveries produce no pending payment and simply vanished. A new
+  `billing_audit_events` table records them, a **`rejected_deliveries`** check counts them over 24 h,
+  and `GET <dashboard>/api/audit` surfaces them. **The rejection itself happens in
+  `providers/payments_provider.ts`, which this change does not touch: the endpoint must call
+  `store.recordAuditEvent({ action: 'webhook.rejected', provider, message })` on each `400` path for
+  the check to see anything.** Until it does, the store, the check and the screen are in place and
+  the count is zero.
+
+  **And a refund issued from the console left no audit trail.** The only record was a diagnostic
+  carrying a gateway id, a provider and an amount — and no actor, even though the dashboard's own
+  `enforce()` had already verified exactly who authorised the request. `enforce()` now returns that
+  user, `Deps.actor` carries it per request, and a successful refund writes an audit row naming the
+  person, the amount asked for and whether it was partial. A refund the gateway REFUSED writes
+  nothing: an audit of refunds that never happened is an audit nobody can trust. A console with no
+  `dashboardAuth` records `actor: null` — "unattributed", never an invented "system".
+
+  `billing_audit_events` is a new TABLE, so it needs nothing from the schema module's post-ship
+  ALTER phase: `CREATE TABLE IF NOT EXISTS` carries it to an existing install exactly as well as to a
+  fresh one. An install that upgrades the package before running the migration keeps working — every
+  audit write is additional to an action that already happened, so a missing table skips the note and
+  answers `null` rather than failing a refund the gateway already accepted.
+
+  The console gained two screens (**Customers** and **Activity**) and a per-payment detail view.
+  1261 unit tests, 109 integration tests against real Postgres, 119 dashboard tests, typecheck and
+  lint clean. Every fix proven by mutation, including the JSONB cast — `jsonb LIKE text` is not an
+  operator in Postgres, and the in-memory store would have gone on passing without it.
+
+- [#6](https://github.com/DavideCarvalho/adonis-agora-payments/pull/6) [`5d2a895`](https://github.com/DavideCarvalho/adonis-agora-payments/commit/5d2a895a41736ea924c1851c71e59a29034b299f) Thanks [@DavideCarvalho](https://github.com/DavideCarvalho)! - Add the **Disputes** screen to the billing console. `billing_disputes` had a full JSON API and no
+  UI, so the one table in this package with a deadline was the one you could not see.
+
+  A chargeback has a clock, and missing it loses the money **by default rather than on the merits**,
+  so the screen leads with the clock rather than with the log. Two panels, in this order:
+
+  - **Evidence windows closing** — `GET <api>/disputes?dueWithin=<hours>`: open disputes carrying a
+    deadline, soonest first, deadline as the leading column. The countdown is in hours (`in 5 hours`),
+    not days: rendering that as "today" is the difference between filing this morning and losing by
+    default. The horizon picker opens on **72 h** — the same horizon `payments:health` alerts on, so
+    the console and the cron agree about "soon" — and the count above the table is the server's
+    unbounded `dueWithin.total`, not the page it happened to fit.
+  - **All disputes** — the log, newest first, filterable by status and gateway.
+
+  The work list is deliberately **not** filterable by gateway. It is the one list whose whole job is
+  that nothing gets missed, and narrowing it to Stripe while an Asaas window shuts tonight is exactly
+  the failure it exists to prevent.
+
+  Three nullable facts are rendered as the things they mean, not as missing data:
+
+  - a window **already past its deadline still appears**, marked `past due` with how long ago — it is
+    still open and still unanswered, and going quiet the moment it expires reads as resolved;
+  - a dispute with **no deadline** is absent from the work list and says _the gateway sends no
+    deadline_ in the log, rather than showing a dash. Several gateways send no date, and Woovi's
+    three-day rule is policy rather than a field;
+  - a dispute with **no amount** (Stripe's early fraud warning carries none) says so instead of
+    rendering `R$ 0,00`.
+
+  `warning` does not look like a chargeback: nothing has been pulled back, a refund still prevents the
+  debit, and the row says _no money moved_ in words rather than leaving it to a hue. The seven
+  `DisputeStatus` values get their own hues, and an unmodelled gateway status falls back to grey
+  rather than borrowing one.
+
+  **The screen is read-only and stays that way.** No "fight this", no "accept", no "refund": whether
+  contesting is worth it turns on margin, customer value, the dispute fee and the chargeback ratio
+  that puts a merchant into a card network's monitoring programme. That is a business rule that lives
+  in your app's code, and a console button invites someone to press it without any of that context.
+  The JSON API has no action route for disputes, and a test asserts the client grows no method that
+  implies one.
+
+  Also in the console: the health panel's fourth check (`disputes_due`) now has somewhere to go — its
+  button opens the Disputes screen on exactly the rows it counted — and the panel names **which**
+  windows are closing, with gateway, dispute id and countdown, instead of only how many.
+
+- [#6](https://github.com/DavideCarvalho/adonis-agora-payments/pull/6) [`5d2a895`](https://github.com/DavideCarvalho/adonis-agora-payments/commit/5d2a895a41736ea924c1851c71e59a29034b299f) Thanks [@DavideCarvalho](https://github.com/DavideCarvalho)! - Turn the billing dashboard into a management console: health panel, subscriptions screen, gateway filter, and the first two actions.
+
+  The console could tell you what happened; it could not tell you what needed doing, and it could not
+  do anything about it. Four changes:
+
+  - **A health panel at the top of the Overview**, above the revenue tiles. `billingHealth()` — the
+    three silent failures of a billing install (events claimed and never finished, events the
+    dispatcher gave up on, charges created that never confirmed) — existed only behind
+    `node ace payments:health`. It is now `GET <path>/api/health` and the first thing on the page: a
+    quiet green line when the install is clean, and when it is not, the count, what it means, which
+    provider and event type is failing, and a link straight to those rows.
+  - **A subscriptions screen** (`GET <path>/api/subscriptions`), defaulting to `past_due`, showing
+    plan, customer, trial end and period end. `paused` is rendered as its own state with its own hue
+    and an explicit "not billing" — a paused subscriber is not paying, and reading them as active
+    grants access to someone who is not.
+  - **A gateway filter** on payments, subscriptions and webhook events, built from
+    `GET <path>/api/providers` — what your data actually contains, not the eighteen drivers the
+    package ships. A filtered page reports when its scan stopped short rather than showing a
+    confident empty result.
+  - **Two actions**, the console's first writes. `POST <path>/api/payments/:gatewayId/refund`
+    (optional partial amount, confirmed in the UI with the amount and the customer, refused before the
+    call for a gateway with no refund API, reporting the gateway's own message when it refuses) and
+    `POST <path>/api/webhook-events/:gatewayEventId/retry`, which re-runs a failed event through your
+    own webhook handlers. Both are `POST` only and both run through the existing `authorize` guard and
+    the `dashboardAuth` session.
+
+  Also: the payments filter now offers `authorized` and `disputed` (both were reachable statuses with
+  no way to filter for them), and the SPA's money formatter was aligned with `src/money.ts` — it was
+  missing the three-decimal currencies entirely, so a KWD amount rendered 10× too large.
+
+- [#6](https://github.com/DavideCarvalho/adonis-agora-payments/pull/6) [`5d2a895`](https://github.com/DavideCarvalho/adonis-agora-payments/commit/5d2a895a41736ea924c1851c71e59a29034b299f) Thanks [@DavideCarvalho](https://github.com/DavideCarvalho)! - Revenue was reported gross with nothing saying so, and a partial refund was invisible in it.
+
+  `billing_payments.refunded_amount` landed in the previous release precisely so a PARTIAL refund
+  could be recorded without mangling `amount` or `status`: a R$10 refund on a R$100 charge leaves the
+  row `paid` at `amount: 10000, refundedAmount: 1000`, and the net is one subtraction. But every
+  aggregate went on summing `amount` alone. `revenue()` and `billingOverview`'s revenue metric counted
+  that charge at its full R$100, the console printed it under the single word **Revenue**, and nothing
+  on the screen admitted the number was gross. Money that had already gone back to the cardholder was
+  being reported as earned.
+
+  **`revenue()` is unchanged and still gross.** It was the only revenue figure this library had for
+  two releases and apps read it; redefining it in a release that already carries breaking changes
+  would have moved numbers on other people's screens with no error to announce it. Gross and net are
+  both legitimate — gross is what you collected, net is what you kept — so the fix publishes both.
+
+  **`store.netRevenue({ from, to })` is new**, on the `BillingStore` SPI and on BOTH implementations
+  (`LucidBillingStore` and the `InMemoryBillingStore` in `/testing`). It takes exactly the rows and
+  the window `revenue()` takes — `status = 'paid'`, windowed on `paid_at` — and sums
+  `amount - COALESCE(refunded_amount, 0)` instead of `amount`. Integer minor units throughout, never a
+  division. Two details it has to get right, both proven against real Postgres: `refunded_amount` is
+  `NULL` on every row written before the column existed and `amount - NULL` is `NULL` in SQL, which
+  `SUM` spreads across the whole window — so one legacy row would report zero net revenue for an
+  install that took a million; and a `BIGINT` sum arrives from node-postgres as a **string**, so it is
+  consumed through `Number` like every other amount in the store. On an install whose table predates
+  the column, `netRevenue()` answers exactly what `revenue()` does, because no refund was ever
+  recorded to subtract.
+
+  **`billingOverview` now returns two money metrics**, `revenue` (label `Revenue, gross (cents)`) and
+  `net_revenue` (label `Revenue, net of refunds (cents)`). The `revenue` key keeps its key, its
+  position and its value; only its label gained the word "gross". If you render the metric list by
+  key, add `net_revenue` to whatever you treat as money — a money metric rendered as a plain count is
+  the figure wrong by 100×.
+
+  **The console shows both**, as **Revenue (gross)** ("Paid payments settled in this window. Refunds
+  NOT subtracted.") and **Revenue (net)** ("The same payments, minus what was refunded. This is what
+  you kept."), each labelled in words so neither can be read as the other.
+
+  Nothing else that reports money inherited the blindness: `billingHealth` and `payments:sync` report
+  counts, not amounts, and the payments list and per-payment view already showed `refundedAmount`
+  beside the charge. `meteredBill`'s `total` is a projected overage charge rather than settled
+  revenue, so refunds do not apply to it.
+
+- [#5](https://github.com/DavideCarvalho/adonis-agora-payments/pull/5) [`1db1891`](https://github.com/DavideCarvalho/adonis-agora-payments/commit/1db1891cad2481c468169de8398ffb307befb01a) Thanks [@DavideCarvalho](https://github.com/DavideCarvalho)! - Add `@adonis-agora/payments-dashboard`, the billing console for `@adonis-agora/payments`.
+
+  A React SPA (Vite + Tailwind + TanStack Query) with three read-only screens — an overview of
+  `billingOverview()`'s revenue/subscription/usage aggregates over a selectable window, a payment list,
+  and the webhook-event ledger that surfaces `failed` rows with the handler error that caused them.
+  Everything is a `BillingStore` read; the console makes no gateway calls and has no control actions.
+
+  The Adonis half ships inside `@adonis-agora/payments` and mirrors `@adonis-agora/durable`'s dashboard:
+  a `dashboard_provider` that serves the built bundle from disk (never importing the SPA package), the
+  `BASE_PLACEHOLDER` rewrite that lets one bundle mount at any path, framework-light JSON handlers, and
+  the same optional `dashboardAuth` session gate. New entry points: `@adonis-agora/payments/dashboard`
+  and `@adonis-agora/payments/dashboard_provider`, plus a published `config/payments_dashboard.ts`.
+
+  The dashboard is off-able entirely (`enabled: false` registers no routes at all) and defaults to the
+  same safe auth posture as the durable console: open outside production, and in production a bearer
+  token equal to `PAYMENTS_DASHBOARD_TOKEN`, denying when it is unset.
+
+  Also adds two narrow reads to the `BillingStore` contract — `listPayments(query)` and
+  `listWebhookEvents(query)` — implemented in both `LucidBillingStore` and `InMemoryBillingStore`. They
+  return a normalized plain shape rather than the implementation's row type, so a reader never depends
+  on Lucid.
+
+### Patch Changes
+
+- [#6](https://github.com/DavideCarvalho/adonis-agora-payments/pull/6) [`5d2a895`](https://github.com/DavideCarvalho/adonis-agora-payments/commit/5d2a895a41736ea924c1851c71e59a29034b299f) Thanks [@DavideCarvalho](https://github.com/DavideCarvalho)! - The console's two actions now echo the host app's CSRF token
+
+  The dashboard is mounted inside a host application, and an AdonisJS app running
+  `@adonisjs/shield` guards every state-changing route with CSRF. The SPA sent no token, so
+  `POST …/refund` and `POST …/webhook-events/:id/retry` were rejected before they reached the
+  dashboard's own authorization — the button did nothing, and nothing on screen said why.
+
+  Shield publishes the token as an `XSRF-TOKEN` cookie for exactly this purpose. Both POSTs
+  now read it and send `x-xsrf-token`. No cookie means no header, which is the right answer
+  for a host that does not run shield: an empty token would be worse than none.
+
+  Reads are untouched — CSRF only guards mutations.

package/README.md

@@ -0,0 +1,62 @@
+# @adonis-agora/payments-dashboard
+
+The billing console for [`@adonis-agora/payments`](https://www.npmjs.com/package/@adonis-agora/payments) — a
+React SPA served by a thin AdonisJS provider that ships inside the main package.
+
+Five screens, all driven by the `BillingStore` the app already resolved. Only two things in the whole
+console leave your app — refunding a payment and retrying a failed webhook event:
+
+- **Overview** — `billingHealth()` first, then `billingOverview()` for a selectable window: revenue,
+  active subscriptions (which includes `trialing`), and metered usage per meter.
+- **Payments** — a page of `billing_payments`, newest first, filterable by status and gateway.
+  Refund from here.
+- **Subscriptions** — opens on `past_due`: whose payment is failing and whose access is about to
+  lapse. `paused` is rendered as its own state, never as a shade of `active`.
+- **Disputes** — the evidence windows closing soonest first, then the full chargeback log. **Read
+  only, deliberately**: whether a dispute is worth contesting or cheaper to refund is a business
+  rule that belongs in your app's code, so there is no button for it here (and no API route behind
+  one). The screen exists so nobody misses a window.
+- **Webhook events** — the idempotency ledger. A `failed` row means a handler threw and the
+  dispatcher gave up, so the event's effect never happened; the handler's error is shown in full.
+  Retry from here.
+
+## Install
+
+You do not install this package directly. `@adonis-agora/payments` bundles the built SPA and serves it
+from disk; this package only exists so the bundle is built in the workspace and versioned on its own.
+
+```sh
+node ace configure @adonis-agora/payments
+```
+
+That registers `@adonis-agora/payments/dashboard_provider` and publishes `config/payments_dashboard.ts`.
+
+## Configuration
+
+```ts
+// config/payments_dashboard.ts
+import { defineConfig } from '@adonis-agora/payments/dashboard'
+
+export default defineConfig({
+  enabled: true,               // false => no routes are registered at all
+  path: '/payments-dashboard', // the SPA mounts here; the JSON API at <path>/api
+  currency: 'BRL',             // how the edge formats the integer cents it receives
+})
+```
+
+**Auth defaults to the same posture as `@adonis-agora/durable`'s console**: open outside production;
+in production it requires a bearer token equal to `PAYMENTS_DASHBOARD_TOKEN`, and denies everything
+when that variable is unset. Replace `authorize` with your own guard, and/or add the optional
+`dashboardAuth` session gate (a built-in login page and/or an "open the console from your app"
+endpoint) on top of it.
+
+## Money
+
+Amounts are integer cents everywhere — in the store, in `billingOverview()`, and on the wire. The only
+division by 100 in the whole console is in `src/app/money.ts`, at render.
+
+## Mounting anywhere
+
+`vite build` bakes a placeholder base (`/__PAYMENTS_DASHBOARD__/`) into the asset URLs, which the
+AdonisJS provider rewrites at serve time to whatever `path` is configured. One built bundle mounts at
+any prefix with no rebuild.

package/dist/spa/assets/index-CT5Zon6P.css

@@ -0,0 +1 @@
+*,:before,:after{--tw-border-spacing-x: 0;--tw-border-spacing-y: 0;--tw-translate-x: 0;--tw-translate-y: 0;--tw-rotate: 0;--tw-skew-x: 0;--tw-skew-y: 0;--tw-scale-x: 1;--tw-scale-y: 1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness: proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width: 0px;--tw-ring-offset-color: #fff;--tw-ring-color: rgb(59 130 246 / .5);--tw-ring-offset-shadow: 0 0 #0000;--tw-ring-shadow: 0 0 #0000;--tw-shadow: 0 0 #0000;--tw-shadow-colored: 0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }::backdrop{--tw-border-spacing-x: 0;--tw-border-spacing-y: 0;--tw-translate-x: 0;--tw-translate-y: 0;--tw-rotate: 0;--tw-skew-x: 0;--tw-skew-y: 0;--tw-scale-x: 1;--tw-scale-y: 1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness: proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width: 0px;--tw-ring-offset-color: #fff;--tw-ring-color: rgb(59 130 246 / .5);--tw-ring-offset-shadow: 0 0 #0000;--tw-ring-shadow: 0 0 #0000;--tw-shadow: 0 0 #0000;--tw-shadow-colored: 0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }*,:before,:after{box-sizing:border-box;border-width:0;border-style:solid;border-color:#e5e7eb}:before,:after{--tw-content: ""}html,:host{line-height:1.5;-webkit-text-size-adjust:100%;-moz-tab-size:4;-o-tab-size:4;tab-size:4;font-family:ui-sans-serif,system-ui,sans-serif,"Apple Color Emoji","Segoe UI Emoji",Segoe UI Symbol,"Noto Color Emoji";font-feature-settings:normal;font-variation-settings:normal;-webkit-tap-highlight-color:transparent}body{margin:0;line-height:inherit}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,samp,pre{font-family:JetBrains Mono,ui-monospace,SFMono-Regular,monospace;font-feature-settings:normal;font-variation-settings:normal;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}button,input,optgroup,select,textarea{font-family:inherit;font-feature-settings:inherit;font-variation-settings:inherit;font-size:100%;font-weight:inherit;line-height:inherit;letter-spacing:inherit;color:inherit;margin:0;padding:0}button,select{text-transform:none}button,input:where([type=button]),input:where([type=reset]),input:where([type=submit]){-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dl,dd,h1,h2,h3,h4,h5,h6,hr,figure,p,pre{margin:0}fieldset{margin:0;padding:0}legend{padding:0}ol,ul,menu{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{opacity:1;color:#9ca3af}input::placeholder,textarea::placeholder{opacity:1;color:#9ca3af}button,[role=button]{cursor:pointer}:disabled{cursor:default}img,svg,video,canvas,audio,iframe,embed,object{display:block;vertical-align:middle}img,video{max-width:100%;height:auto}[hidden]:where(:not([hidden=until-found])){display:none}.container{width:100%}@media (min-width: 640px){.container{max-width:640px}}@media (min-width: 768px){.container{max-width:768px}}@media (min-width: 1024px){.container{max-width:1024px}}@media (min-width: 1280px){.container{max-width:1280px}}@media (min-width: 1536px){.container{max-width:1536px}}.visible{visibility:visible}.collapse{visibility:collapse}.fixed{position:fixed}.absolute{position:absolute}.relative{position:relative}.inset-0{top:0;right:0;bottom:0;left:0}.z-10{z-index:10}.z-50{z-index:50}.m-0{margin:0}.m-4{margin:1rem}.mx-4{margin-left:1rem;margin-right:1rem}.mx-auto{margin-left:auto;margin-right:auto}.mb-3{margin-bottom:.75rem}.mb-4{margin-bottom:1rem}.mb-5{margin-bottom:1.25rem}.ml-1\.5{margin-left:.375rem}.ml-2{margin-left:.5rem}.ml-auto{margin-left:auto}.mr-1\.5{margin-right:.375rem}.mt-0\.5{margin-top:.125rem}.mt-1{margin-top:.25rem}.mt-2{margin-top:.5rem}.mt-3{margin-top:.75rem}.mt-4{margin-top:1rem}.block{display:block}.inline{display:inline}.flex{display:flex}.inline-flex{display:inline-flex}.table{display:table}.grid{display:grid}.min-h-full{min-height:100%}.w-32{width:8rem}.w-48{width:12rem}.w-full{width:100%}.min-w-\[16rem\]{min-width:16rem}.min-w-\[3ch\]{min-width:3ch}.max-w-3xl{max-width:48rem}.max-w-6xl{max-width:72rem}.max-w-md{max-width:28rem}.flex-1{flex:1 1 0%}.grow{flex-grow:1}.grid-cols-\[auto\,1fr\]{grid-template-columns:auto 1fr}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-start{align-items:flex-start}.items-center{align-items:center}.justify-end{justify-content:flex-end}.justify-center{justify-content:center}.justify-between{justify-content:space-between}.gap-1{gap:.25rem}.gap-1\.5{gap:.375rem}.gap-2{gap:.5rem}.gap-3{gap:.75rem}.gap-4{gap:1rem}.gap-x-4{-moz-column-gap:1rem;column-gap:1rem}.gap-y-1\.5{row-gap:.375rem}.gap-y-2{row-gap:.5rem}.overflow-x-auto{overflow-x:auto}.overflow-y-auto{overflow-y:auto}.whitespace-pre-wrap{white-space:pre-wrap}.break-words{overflow-wrap:break-word}.break-all{word-break:break-all}.rounded{border-radius:.25rem}.border{border-width:1px}.border-b{border-bottom-width:1px}.border-t{border-top-width:1px}.border-bad\/25{border-color:color-mix(in srgb,var(--bad) 25%,transparent)}.border-bad\/30{border-color:color-mix(in srgb,var(--bad) 30%,transparent)}.border-bad\/40{border-color:color-mix(in srgb,var(--bad) 40%,transparent)}.border-bad\/50{border-color:color-mix(in srgb,var(--bad) 50%,transparent)}.border-good\/30{border-color:color-mix(in srgb,var(--good) 30%,transparent)}.border-good\/40{border-color:color-mix(in srgb,var(--good) 40%,transparent)}.border-indigo-500\/30{border-color:#6366f14d}.border-line{--tw-border-opacity: 1;border-color:color-mix(in srgb,var(--line) calc(var(--tw-border-opacity, 1) * 100%),transparent)}.border-line-soft{--tw-border-opacity: 1;border-color:color-mix(in srgb,var(--line-soft) calc(var(--tw-border-opacity, 1) * 100%),transparent)}.border-rose-500\/40{border-color:#f43f5e66}.border-sky-500\/30{border-color:#0ea5e94d}.border-transparent{border-color:transparent}.border-warn\/30{border-color:color-mix(in srgb,var(--warn) 30%,transparent)}.border-warn\/40{border-color:color-mix(in srgb,var(--warn) 40%,transparent)}.bg-bad\/10{background-color:color-mix(in srgb,var(--bad) 10%,transparent)}.bg-bad\/15{background-color:color-mix(in srgb,var(--bad) 15%,transparent)}.bg-bad\/\[0\.04\]{background-color:color-mix(in srgb,var(--bad) 4%,transparent)}.bg-bad\/\[0\.05\]{background-color:color-mix(in srgb,var(--bad) 5%,transparent)}.bg-bad\/\[0\.06\]{background-color:color-mix(in srgb,var(--bad) 6%,transparent)}.bg-black\/70{background-color:#000000b3}.bg-brand\/15{background-color:color-mix(in srgb,var(--accent) 15%,transparent)}.bg-good\/10{background-color:color-mix(in srgb,var(--good) 10%,transparent)}.bg-good\/\[0\.06\]{background-color:color-mix(in srgb,var(--good) 6%,transparent)}.bg-indigo-500\/10{background-color:#6366f11a}.bg-panel{--tw-bg-opacity: 1;background-color:color-mix(in srgb,var(--panel) calc(var(--tw-bg-opacity, 1) * 100%),transparent)}.bg-panel-2{--tw-bg-opacity: 1;background-color:color-mix(in srgb,var(--panel-2) calc(var(--tw-bg-opacity, 1) * 100%),transparent)}.bg-rose-500\/10{background-color:#f43f5e1a}.bg-sky-500\/10{background-color:#0ea5e91a}.bg-warn\/\[0\.06\]{background-color:color-mix(in srgb,var(--warn) 6%,transparent)}.bg-warn\/\[0\.08\]{background-color:color-mix(in srgb,var(--warn) 8%,transparent)}.bg-zinc-800\/40{background-color:#27272a66}.p-0{padding:0}.p-1{padding:.25rem}.p-2{padding:.5rem}.p-3{padding:.75rem}.p-4{padding:1rem}.px-0{padding-left:0;padding-right:0}.px-1\.5{padding-left:.375rem;padding-right:.375rem}.px-2{padding-left:.5rem;padding-right:.5rem}.px-2\.5{padding-left:.625rem;padding-right:.625rem}.px-3{padding-left:.75rem;padding-right:.75rem}.px-4{padding-left:1rem;padding-right:1rem}.py-1{padding-top:.25rem;padding-bottom:.25rem}.py-1\.5{padding-top:.375rem;padding-bottom:.375rem}.py-2{padding-top:.5rem;padding-bottom:.5rem}.py-3{padding-top:.75rem;padding-bottom:.75rem}.py-4{padding-top:1rem;padding-bottom:1rem}.py-6{padding-top:1.5rem;padding-bottom:1.5rem}.pb-3{padding-bottom:.75rem}.text-left{text-align:left}.text-right{text-align:right}.text-2xl{font-size:1.5rem;line-height:2rem}.text-\[10px\]{font-size:10px}.text-\[11px\]{font-size:11px}.text-lg{font-size:1.125rem;line-height:1.75rem}.text-sm{font-size:.875rem;line-height:1.25rem}.text-xs{font-size:.75rem;line-height:1rem}.font-normal{font-weight:400}.uppercase{text-transform:uppercase}.leading-none{line-height:1}.leading-relaxed{line-height:1.625}.tracking-wider{letter-spacing:.05em}.text-amber-300{--tw-text-opacity: 1;color:rgb(252 211 77 / var(--tw-text-opacity, 1))}.text-brand{--tw-text-opacity: 1;color:color-mix(in srgb,var(--accent) calc(var(--tw-text-opacity, 1) * 100%),transparent)}.text-emerald-300{--tw-text-opacity: 1;color:rgb(110 231 183 / var(--tw-text-opacity, 1))}.text-indigo-300{--tw-text-opacity: 1;color:rgb(165 180 252 / var(--tw-text-opacity, 1))}.text-inherit{color:inherit}.text-rose-200{--tw-text-opacity: 1;color:rgb(254 205 211 / var(--tw-text-opacity, 1))}.text-rose-300{--tw-text-opacity: 1;color:rgb(253 164 175 / var(--tw-text-opacity, 1))}.text-sky-300{--tw-text-opacity: 1;color:rgb(125 211 252 / var(--tw-text-opacity, 1))}.text-zinc-100{--tw-text-opacity: 1;color:rgb(244 244 245 / var(--tw-text-opacity, 1))}.text-zinc-200{--tw-text-opacity: 1;color:rgb(228 228 231 / var(--tw-text-opacity, 1))}.text-zinc-300{--tw-text-opacity: 1;color:rgb(212 212 216 / var(--tw-text-opacity, 1))}.text-zinc-400{--tw-text-opacity: 1;color:rgb(161 161 170 / var(--tw-text-opacity, 1))}.text-zinc-500{--tw-text-opacity: 1;color:rgb(113 113 122 / var(--tw-text-opacity, 1))}.text-zinc-600{--tw-text-opacity: 1;color:rgb(82 82 91 / var(--tw-text-opacity, 1))}.opacity-80{opacity:.8}.shadow-xl{--tw-shadow: 0 20px 25px -5px rgb(0 0 0 / .1), 0 8px 10px -6px rgb(0 0 0 / .1);--tw-shadow-colored: 0 20px 25px -5px var(--tw-shadow-color), 0 8px 10px -6px var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow, 0 0 #0000),var(--tw-ring-shadow, 0 0 #0000),var(--tw-shadow)}.outline{outline-style:solid}.filter{filter:var(--tw-blur) var(--tw-brightness) var(--tw-contrast) var(--tw-grayscale) var(--tw-hue-rotate) var(--tw-invert) var(--tw-saturate) var(--tw-sepia) var(--tw-drop-shadow)}.transition-colors{transition-property:color,background-color,border-color,text-decoration-color,fill,stroke;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}:root{--bg: #09090b;--panel: #0c0c0f;--panel-2: #101017;--line: #1c1c22;--line-soft: #16161a;--text: #e7e7ea;--muted: #76767f;--good: #34d399;--warn: #fbbf24;--bad: #f87171;--live: #60a5fa;--accent: #22d3ee}*{box-sizing:border-box}html,body,#root{height:100%}body{margin:0;background:var(--bg);color:var(--text);font-family:Space Grotesk,ui-sans-serif,system-ui,sans-serif;-webkit-font-smoothing:antialiased}.app-bg{position:fixed;top:0;right:0;bottom:0;left:0;z-index:0;pointer-events:none;background-image:radial-gradient(900px 400px at 78% -8%,color-mix(in srgb,var(--accent) 8%,transparent),transparent 70%),linear-gradient(to right,var(--line-soft) 1px,transparent 1px),linear-gradient(to bottom,var(--line-soft) 1px,transparent 1px);background-size:100% 100%,44px 44px,44px 44px;-webkit-mask-image:linear-gradient(to bottom,black,black 60%,transparent);mask-image:linear-gradient(to bottom,black,black 60%,transparent);opacity:.5}.mono{font-family:JetBrains Mono,ui-monospace,monospace}.tnum{font-variant-numeric:tabular-nums}.s-paid{color:var(--good)}.s-pending{color:#94a3b8}.s-failed{color:var(--bad)}.s-refunded{color:#a78bfa}.s-canceled{color:#71717a}.s-authorized{color:var(--warn)}.s-disputed{color:#fb7185}.s-active{color:var(--good)}.s-trialing{color:var(--live)}.s-past_due{color:var(--bad)}.s-paused,.s-incomplete{color:var(--warn)}.s-ended{color:#71717a}.s-warning{color:var(--warn)}.s-open{color:var(--bad)}.s-under_review{color:var(--live)}.s-won{color:var(--good)}.s-lost,.s-expired{color:#fb7185}.s-received{color:var(--live)}.s-processed{color:var(--good)}.s-unknown{color:var(--muted)}.dot{width:7px;height:7px;border-radius:999px;background:currentColor;box-shadow:0 0 0 3px color-mix(in srgb,currentColor 18%,transparent)}@keyframes rise{0%{opacity:0;transform:translateY(6px)}to{opacity:1;transform:none}}.rise{animation:rise .32s cubic-bezier(.2,.7,.2,1) both}::-webkit-scrollbar{width:10px;height:10px}::-webkit-scrollbar-thumb{background:#26262c;border:3px solid var(--bg);border-radius:999px}.placeholder\:text-zinc-600::-moz-placeholder{--tw-text-opacity: 1;color:rgb(82 82 91 / var(--tw-text-opacity, 1))}.placeholder\:text-zinc-600::placeholder{--tw-text-opacity: 1;color:rgb(82 82 91 / var(--tw-text-opacity, 1))}.last\:border-0:last-child{border-width:0px}.hover\:bg-panel:hover{--tw-bg-opacity: 1;background-color:color-mix(in srgb,var(--panel) calc(var(--tw-bg-opacity, 1) * 100%),transparent)}.hover\:bg-panel-2:hover{--tw-bg-opacity: 1;background-color:color-mix(in srgb,var(--panel-2) calc(var(--tw-bg-opacity, 1) * 100%),transparent)}.hover\:text-zinc-100:hover{--tw-text-opacity: 1;color:rgb(244 244 245 / var(--tw-text-opacity, 1))}.hover\:text-zinc-200:hover{--tw-text-opacity: 1;color:rgb(228 228 231 / var(--tw-text-opacity, 1))}.focus\:border-brand:focus{--tw-border-opacity: 1;border-color:color-mix(in srgb,var(--accent) calc(var(--tw-border-opacity, 1) * 100%),transparent)}.focus\:outline-none:focus{outline:2px solid transparent;outline-offset:2px}.enabled\:hover\:bg-bad\/25:hover:enabled{background-color:color-mix(in srgb,var(--bad) 25%,transparent)}.enabled\:hover\:bg-panel:hover:enabled{--tw-bg-opacity: 1;background-color:color-mix(in srgb,var(--panel) calc(var(--tw-bg-opacity, 1) * 100%),transparent)}.enabled\:hover\:bg-panel-2:hover:enabled{--tw-bg-opacity: 1;background-color:color-mix(in srgb,var(--panel-2) calc(var(--tw-bg-opacity, 1) * 100%),transparent)}.enabled\:hover\:text-zinc-100:hover:enabled{--tw-text-opacity: 1;color:rgb(244 244 245 / var(--tw-text-opacity, 1))}.disabled\:opacity-40:disabled{opacity:.4}.disabled\:opacity-50:disabled{opacity:.5}@media (min-width: 640px){.sm\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}}@media (min-width: 1024px){.lg\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}}