@antelopejs/dms-saas 0.2.0 → 0.3.0

package/README.md

@@ -17,9 +17,8 @@ See the design documents in `dms/saas/` (sibling repo) for the full architectura
 The module registers `frontend-vue/dms.frontend.ts` with the Vue 3 Inertia
 adapter. It preserves the `DmsSaas*` component names, the `auth/no-workspace`
 page override, client-only displays, global guards, and English/French catalogs.
-Public module configuration moves from `public.cmsSaas` to `public.dmsSaas` —
-a breaking change for any frontend reading the old key. Stripe secrets are
-never exposed to the frontend.
+Public module configuration is exposed under `public.dmsSaas`. Stripe secrets
+are never exposed to the frontend.
 
 The backend integration requires `@antelopejs/dms`. Frontend source
 verification runs through `@antelopejs/dms-frontend` and the DMS frontend
@@ -41,7 +40,8 @@ environment or in `playground/.env`.
 An account can reach the product before it owns anything to log into: an OAuth
 sign-in for an unknown e-mail, or any entry point the core answers with
 `requires_tenant_assignment`. The `auth/no-workspace` page is where that
-account buys its way in — a workspace, a plan, a card — and
+account opens its first workspace — on the free plan, with a card when
+`registration.paymentMethod` asks for one — and
 `POST /api/saas/register/finalize` provisions it and answers with a token pair
 for the workspace it just created, so the visitor lands signed in instead of
 back on the login screen.
@@ -59,8 +59,8 @@ declare the finalize endpoint in the frontend server's environment:
 DMS_AUTH_ESTABLISH_ENDPOINTS=/api/saas/register/finalize
 ```
 
-Without it the loader answers `403` and a visitor who has paid stays signed
-out. A replacement completion screen keeps the same requirement, and can build
+Without it the loader answers `403` and a visitor who has just registered stays
+signed out. A replacement completion screen keeps the same requirement, and can build
 its request with the auto-imported `buildSessionEstablishRequest()` helper
 rather than restating the endpoint and the payload shape.
 
@@ -73,6 +73,11 @@ permissions, regardless of assigned roles. Permissions outside the plan are
 removed even when a role grants them. Other members retain only the intersection
 of their incoming permissions and the resolved plan.
 
+A plan grants exactly the ids it lists, nothing nested under them: the plan
+editor's permission tree adds a node's descendants and ancestors when it is
+ticked, so plans built from the UI list every component id, and plans seeded by
+code must list them too.
+
 Tenant ownership never grants `*`, even if a plan contains it. An incoming `*`
 (including the DMS platform owner's wildcard) retains the existing behavior:
 the wildcard survives, and other incoming permissions are intersected with the
@@ -131,6 +136,164 @@ accepted, each is promoted before the tenant message is persisted, and failed
 writes move promoted files back to staging. Ticket-specific metadata routes
 verify that a key belongs to the requested thread before issuing its read URL.
 
+## Registration
+
+Public registration is short: an account (name, e-mail, password) and the
+acceptance of the terms, plus a card when the deployment asks for one. The
+workspace it opens lands on the catalogue's first free plan — the lowest
+`order` among active plans priced 0 and open to individuals — under a default
+name its owner renames from the workspace settings. Customer type, billing
+address, VAT number and plan choice belong to the upgrade flow. Registration
+answers `409 saas.errors.plan.no_free_plan` while the catalogue has no such
+plan.
+
+`POST /api/saas/register` holds the password to the DMS password policy
+(`isPasswordCompliant` from `@antelopejs/interface-dms/auth/password`) before
+it looks the e-mail up or creates anything, and answers
+`400 saas.errors.registration.password_policy` otherwise. The OAuth completion
+carries no password.
+
+Two module options shape it:
+
+```json
+{
+  "modules": {
+    "dms-saas": {
+      "config": {
+        "admissionMode": "open",
+        "registration": { "paymentMethod": "required" }
+      }
+    }
+  }
+}
+```
+
+`registration.paymentMethod` decides whether registration asks for a card:
+
+| Value | Behaviour |
+| --- | --- |
+| `required` (default) | The card step is shown and must be completed. The workspace gets a Stripe customer and a free subscription on that card, and the free-workspace-per-card cap applies. |
+| `optional` | The card step is shown, and the visitor may choose to add a card later. Without a card the workspace is card-less, as under `none`. |
+| `none` | The card step is never shown, `GET /api/saas/register/setup-intent` answers `400 saas.errors.registration.payment_method_disabled`, and Stripe is never called: the workspace gets a local free subscription with no Stripe customer, which the upgrade checkout creates when the owner first pays. A card sent anyway is ignored. |
+
+Under `optional` and `none`, a card-less workspace has no card fingerprint, so
+the free-workspace-per-card cap does not apply to it: the only remaining limit
+on free workspaces is one account per e-mail address.
+
+The option covers both public entry points — `POST /api/saas/register` and the
+`auth/no-workspace` completion — and nothing else: invitation sign-up never
+asks for a plan or a card, whatever `admissionMode` and
+`registration.paymentMethod` say. Tenant-side workspace creation keeps
+requiring a card.
+
+`admissionMode: "invitation-only"` closes public registration: every
+`/api/saas/register` route answers `403 saas.errors.registration_closed` before
+looking at the card policy, the registration screens render a "registration by
+invitation only" state instead of the form, and the login page drops its
+sign-up link. Invitations keep working.
+
+Both values reach the browser through the frontend module options
+(`useDmsRuntimeConfig().public.dmsSaas.admissionMode` and
+`.registrationPaymentMethod`); `useSaasRegistration()` already reads them.
+
+The Stripe SetupIntent behind the card step is restricted to cards on the
+server (`payment_method_types: ["card"]`); the Payment Element is created from
+its client secret alone, since Stripe refuses `paymentMethodTypes` next to a
+`clientSecret`.
+
+## Default plan
+
+A workspace is never without a plan. The default plan is the catalogue's
+first free plan — the lowest `order` among active plans priced 0 and open to
+individuals — unless `defaultPlanSlug` names another such plan:
+
+```json
+{ "modules": { "dms-saas": { "config": { "defaultPlanSlug": "free" } } } }
+```
+
+It is what registration opens, and it is attached, as an active card-less
+subscription, to every workspace that has no subscription at all — the
+platform's `default` tenant and workspaces created outside dms-saas included.
+The backfill runs at startup and with the billing-state recompute every 15
+minutes, and the billing page covers a workspace on first read; each pass is
+idempotent and never touches a workspace that holds any subscription. While
+the catalogue has no free plan, nothing is attached and a warning is logged.
+
+Once attached, the plan's permissions cap the workspace's members like any
+other plan (see [Tenant owner permissions](#tenant-owner-permissions)).
+
+## Plan feature labels and values
+
+A feature row stores one display name and one tooltip. The tenant plan pages
+(the plan card summary and the plan comparison table) render both through the
+DMS display string convention: a value starting with `$` is an i18n key,
+anything else is shown as written. A module declaring features either stores
+plain text or stores `$<key>` and ships that key in its own frontend locale
+files (`frontend-vue/i18n/locales/<name>-<locale>.json`):
+
+```ts
+{
+  displayName: "$cloud.plan_features.egress.label",
+  tooltip: "$cloud.plan_features.egress.tooltip",
+}
+```
+
+A key missing in the viewer's locale falls back to the fallback locale; a
+tooltip key missing everywhere hides the tooltip.
+
+Values are formatted from the feature's `valueType` and `unit`: `-1` reads as
+unlimited, booleans as ✓/—, numbers are grouped in the viewer's locale. A
+`per <unit>` unit makes the value a price in the plan's currency, and
+`currency units` an amount of it. Known units are scaled to something a person
+reads at a glance; any other unit is shown verbatim after the grouped number.
+A text value follows the same convention as labels: a `$<key>` value is
+translated in the declaring module's locales, anything else is shown as stored.
+
+| Stored unit | Quantity reads as | `per <unit>` price reads as |
+|-------------|-------------------|-----------------------------|
+| `byte(s)` | bytes, KB, MB, GB or TB (powers of 1000) | per GB |
+| `minute(s)` | minutes | per minute |
+
+A module declaring features in its own units teaches the plan pages how they
+read with `registerPlanFeatureUnit`, auto-imported like the other dms-saas
+composables. Call it from a frontend plugin that runs on the server and in the
+browser, so server-rendered and hydrated values agree. Each scale says how
+many stored units it holds; a quantity takes the largest scale it fills, and a
+`per <unit>` price reads per `priceScale`. Labels are full i18n keys the module
+ships in its own locales, each a node holding a `quantity` message
+(`{value}`, pluralised on the scaled value) and a `price` message (`{price}`):
+
+```ts
+// frontend-vue/app/plugins/plan-feature-units.ts
+const MINUTES_PER_HOUR = 60;
+const vcpuHour = { label: "cloud.plan.units.vcpu_hour", size: MINUTES_PER_HOUR };
+
+export default defineDmsPlugin(() => {
+  registerPlanFeatureUnit(["vCPU-minute", "vCPU-minutes"], {
+    scales: [vcpuHour],
+    priceScale: vcpuHour,
+  });
+});
+```
+
+```json
+{
+  "cloud": {
+    "plan": {
+      "units": {
+        "vcpu_hour": {
+          "quantity": "{value} vCPU-hour | {value} vCPU-hours",
+          "price": "{price} / vCPU-hour"
+        }
+      }
+    }
+  }
+}
+```
+
+Units match case-insensitively, and a registered unit takes precedence over a
+built-in one of the same name.
+
 ## Extension points
 
 ### Consuming this module
@@ -144,7 +307,7 @@ boots the registration graph:
 | Subpath | Surface |
 | --- | --- |
 | `@antelopejs/interface-dms-saas` | every extension point except `db`: billing, data API, pages, plans, provisioning and registration flat, plus the `invoiceLineItems` and `workspaceLifecycle` namespaces |
-| `@antelopejs/interface-dms-saas/billing` | customer balance and complimentary subscription state |
+| `@antelopejs/interface-dms-saas/billing` | customer balance, upcoming invoice preview and complimentary subscription state |
 | `@antelopejs/interface-dms-saas/data-api` | hidden-value data API filters |
 | `@antelopejs/interface-dms-saas/db` | canonical SaaS tables and data models |
 | `@antelopejs/interface-dms-saas/hidden-filter` | the `HiddenStringFilter` decorator on its own |
@@ -199,19 +362,31 @@ races the bundled one instead of overriding it:
 
 Then register your own page on the `register` slug and build it on the
 `useSaasRegistration()` composable the Vue adapter auto-imports. It holds the
-whole flow — plan loading and filtering by customer type, the Stripe setup
-intent and card confirmation, the order the requirements are validated in, the
-provisioning call and the landing route — and renders nothing:
+whole flow — the card policy, the Stripe setup intent and card confirmation,
+the order the requirements are validated in, the provisioning call and the
+landing route — and renders nothing, so a re-themed screen keeps the same
+steps:
 
 ```vue
 <script setup lang="ts">
-const { form, plans, errorMessage, isSubmitting, formatPlanPrice, submit } =
-  useSaasRegistration({ redirectTo: "/welcome" });
+const {
+  form, // name, email, password, hasAcceptedLegal, skipsPaymentMethod
+  paymentElementId,
+  canSkipPaymentMethod, // true under `optional`
+  isPaymentStepVisible, // bind with v-show so the Stripe element stays mounted
+  passwordStrength, // { strength, score, color } for <DmsPasswordStrength>
+  isRegistrationClosed, // render the invitation-only state instead of the form
+  errorMessage,
+  isSubmitting,
+  submit,
+} = useSaasRegistration({ redirectTo: "/welcome" });
 </script>
 ```
 
 Nothing it returns throws: a failure surfaces as a translated `errorMessage`,
-and `submit()` resolves to the new tenant id or `null`. Every screen stays
+and `submit()` resolves to the new tenant id or `null`. A password outside the
+DMS policy stops `submit()` before the card is confirmed. The workspace name is
+the localised `saas.register.default_workspace_name`. Every screen stays
 enabled by default, so an existing project needs no configuration change.
 
 ### Registration extras and the provisioning hook
@@ -354,6 +529,77 @@ export async function stop(): Promise<void> {
   why it is only reported at error level once dms-saas is attached. Two modules
   registering the same `id` before that collapse into one silently, so pick an
   `id` no other module could plausibly choose.
+- Resolvers are also called to price the [upcoming invoice
+  preview](#upcoming-invoice-preview). Such a call carries `isPreview: true`,
+  a synthetic `upcoming_<subscription id>` `invoiceId`, and a `periodEnd` set
+  to the time of the request: the running cycle's usage so far. Its lines are
+  only quoted to Stripe, never invoiced. A resolver that throws or returns an
+  invalid line then makes the preview `unavailable` rather than short.
+
+### Upcoming invoice preview
+
+`GetUpcomingInvoicePreview` returns what Stripe will bill the current
+workspace next, tax included, so a page can show the exact VAT and total before
+the invoice exists. Stripe computes every figure (Stripe Tax: country, VAT
+number, reverse charge); dms-saas copies them without recomputing any.
+
+```ts
+import { GetUpcomingInvoicePreview } from "@antelopejs/interface-dms-saas/billing";
+
+const preview = await GetUpcomingInvoicePreview({ tenantId, userId });
+if (preview.status === "available") {
+  const { taxMinorUnits, totalMinorUnits, currency } = preview;
+  render({ tax: taxMinorUnits, total: totalMinorUnits, currency });
+}
+```
+
+The scope must come from a trusted authentication boundary: the call rejects
+with `403` a user who is not a member of the tenant or is refused by the tenant
+access gate (a workspace awaiting its first payment, or suspended).
+
+The result is always one of three states, and Stripe errors never throw:
+
+| `status` | Meaning | `reason` |
+| --- | --- | --- |
+| `available` | Stripe priced the next invoice | — |
+| `absent` | Nothing to bill next | `free_plan`, `complimentary`, `customer_not_configured`, `subscription_not_configured` (no plan, or no Stripe subscription yet), `no_upcoming_invoice` (the subscription ends with the current cycle) |
+| `unavailable` | An invoice is due but cannot be priced exactly right now; the cause is logged | `stripe_not_configured` (placeholder keys), `tax_not_configured` (Stripe Tax inactive), `tax_location_invalid`, `tax_location_required`, `tax_calculation_failed`, `usage_unavailable` (a line items provider failed), `provider_error` (any other Stripe failure) |
+
+A missing payment method does not prevent a preview: Stripe prices the invoice
+all the same.
+
+An `available` preview carries:
+
+- `currency` (uppercase ISO 4217) and integer amounts in its minor units:
+  `subtotalMinorUnits` (lines before discounts and tax),
+  `totalExcludingTaxMinorUnits`, `taxMinorUnits`, `totalMinorUnits` (tax
+  included) and `amountDueMinorUnits` (after the customer balance).
+- `taxes`: one entry per tax Stripe applied, with its amount, taxable amount,
+  `ratePercentage`, `country`, `taxType` (`vat`…), `taxabilityReason` and
+  `isReverseCharge`. `taxCountry` and `isReverseCharge` summarize them; a
+  reverse-charged invoice has a zero tax amount and `isReverseCharge: true`.
+- `lines`: `subscription` for the plan, `usage` for the lines quoted by the
+  [invoice line items](#invoice-line-items) providers (with their
+  `usageLineKey`), `invoice_item` for any other pending Stripe item. Each has
+  its pre-tax amount, its tax and its period. `hasMoreLines` flags a list
+  Stripe truncated; the totals are always complete.
+- `periodStart` / `periodEnd` (the cycle the invoice closes), `billingDate`
+  (when Stripe issues it), `usageThrough` (how far the quoted usage runs, null
+  without usage lines) and `computedAt`. Dates are ISO 8601 strings.
+
+Usage is quoted up to the time of the request with the same providers, paid
+coverage window and line validation as the renewal invoice, so the preview's
+tax covers plan and usage together. It is an estimate of a cycle still running:
+the renewal invoice bills the whole cycle.
+
+Previews are cached per workspace for an hour, shared by every instance through
+the database. Set `upcomingInvoicePreviewCacheTtlSeconds` to change that
+lifetime, or to `0` to price every request. A cached preview is dropped as soon
+as the workspace's subscription (plan change, status) or billing identity
+(address, VAT number) changes locally, and when Stripe reports an invoice
+created, finalized, paid or voided, a subscription updated or deleted, or a
+customer updated. `unavailable` results are never cached. Display
+`computedAt` to tell the reader how current the figures are.
 
 ### Workspace settings pages
 
@@ -464,7 +710,7 @@ jobs never use timed takeover; startup marks interrupted jobs as
 `reconciliation_required`, retaining their per-workspace evidence and pending
 subscription intents instead of blindly replaying effects.
 
-The historical `migrate-and-delete` endpoint now requests migration only.
+The `migrate-and-delete` endpoint requests a migration only.
 Inspect `GET /api/saas/plans-deletion/migrations/:migrationId` for the snapshot,
 outcomes, and reconciliation requirements. **Snapshot completion does not retire
 the source plan.** The source remains available even at zero observed references;
@@ -496,9 +742,8 @@ the terminal receipt, and does not promise exactly-once delivery or external ord
 
 Stripe webhook dispatch admits an event once and fences completion with its
 admitted revision. An old `pending` record never permits timed takeover. Handler
-failures become `reconciliation_required`; legacy `failed` records also block
-replay because they may contain partial effects. Redelivery receives an error
-while unresolved, rather than a successful acknowledgement or another execution.
+failures become `reconciliation_required`, which blocks replay because the
+attempt may have partial effects. Redelivery receives an error while unresolved, rather than a successful acknowledgement or another execution.
 
 Inspect `stripe_webhook_events` by Stripe event ID for its result, revision, and
 error message. Recovery requires establishing the prior executor's quiescence
@@ -509,12 +754,9 @@ remain indefinitely. The existing retention policy still removes old terminal
 
 Revision mutations require the published database interface `0.1.6` or later
 and an adapter implementing that contract. The MongoDB test adapter uses `1.3.1`,
-and any DMS release carrying this module satisfies the requirement. New records
-initialize revisions; legacy PostgreSQL rows with a declared revision column
-require an explicit revision backfill
-before these mutations can proceed. An absent revision is not equivalent to
-`null`, and unsupported bootstrap fails closed. Do not run this backfill against
-shared data without a separately approved migration and quiescent writers.
+and any DMS release carrying this module satisfies the requirement. Every
+record is written with a revision, and these mutations refuse a record without
+one; see [Upgrading](#upgrading) for rows written by earlier builds.
 
 Lifecycle-dependent modules register a required consumer through the public
 interface:
@@ -635,10 +877,7 @@ interrupted pre-payment preparation requires payment/provisioning recovery;
 it never emits `created` merely because the tenant exists. HTTP creation requests
 are not made idempotent by the delivery operation ID.
 
-These additions require a dms-saas package built from this source revision (or
-a later release containing it), including its lifecycle table fields and worker.
-The previously published `0.2.5` package does not provide the gate or `created`
-contract. Register consumers before startup reconciliation; use the existing
+Register consumers before startup reconciliation; use the existing
 tenant inventory and gate for bootstrap/backfill rather than treating `created`
 as a historical inventory API.
 
@@ -666,7 +905,6 @@ uses the existing database operation receipt to authorize publication. Published
 prerequisites are the database interface `0.1.6`, the storage interface `0.1.3`,
 and a compatible provider: local `0.1.4` or S3 `0.1.3`, all of which any DMS
 release carrying this module provides. Tests use MongoDB `1.3.1`.
-There is no legacy move/existence fallback.
 
 Source admissions remain insert-only and permanent. Rejected work cannot publish,
 even if a delayed promotion finishes. Owner-initiated paginated support recovery
@@ -684,8 +922,44 @@ cleanup pass, so storage expiry/operational cleanup must account for them. Do no
 delete receipts to free a source for another request or garbage-collect a file
 that a committed support message still references.
 
-The earlier draft seal schema has no production installations and is replaced,
-not migrated online. If retaining development fixtures from that draft, stop
-writers and reconcile or discard those disposable support fixtures and their
-private files offline before adopting this schema. Do not reinterpret old seal
-records as confirmed promotion ownership.
+## Upgrading
+
+### Rows written by earlier builds
+
+Billing no longer infers state from rows that predate the current fields. Rows
+imported from the pre-DMS codebase or written by earlier builds must be fixed
+in the database, with writers stopped, before upgrading:
+
+- **`tenant_subscriptions.isComplimentary`** is required. Only
+  `isComplimentary: true` makes a subscription complimentary; a missing value
+  is read as not complimentary. Set `isComplimentary: true` on admin gifts that
+  lack it (typically rows with no `stripeCustomerId`, no `stripeSubscriptionId`
+  and a status other than `pending_payment`), otherwise they are billed and
+  shown as paid plans. Backfill `isComplimentary: false` on every other row
+  that lacks the field, including workspaces created through paid provisioning
+  before this change, so the stored rows match the table type.
+- **`invoices.documentType`** is required. Invoice lists and reads only match
+  `documentType: "invoice"`; a row without it is neither listed nor readable.
+  Set `documentType: "invoice"` on every invoice row that lacks it.
+- **`stripe_webhook_events.result`** no longer accepts `failed`. Such attempts
+  may carry partial effects: establish their outcome as described for
+  `reconciliation_required` above, then set their result to
+  `reconciliation_required` or delete the record once resolved.
+- **`revision`** is required on `tenant_subscriptions`, `segments`,
+  `user_segments`, `plan_migrations`, `stripe_webhook_events`,
+  `saas_lifecycle_deliveries` and `saas_operator_actions`. Revision-fenced
+  writes no longer adopt a row without one: they refuse it, so the workflow
+  holding that row stalls. Give every row lacking the field (absent or `null`)
+  an initial revision, any unique string such as a fresh UUID. Segments created
+  through the platform data API by earlier builds are the usual case.
+- **`tenant_subscriptions.paidUsagePeriods`** is required. It is the only
+  source of usage coverage: a renewal invoice bills usage only inside a period
+  recorded for its own Stripe subscription, and a missing ledger is no longer
+  read as "bill the whole window". Rows lacking it (or holding `null`) are
+  typically default-plan, free-plan and pending-checkout subscriptions, and
+  workspaces created through paid provisioning. Set it by kind:
+  - a row with a `stripeSubscriptionId`, not complimentary:
+    `[{ stripeSubscriptionId, start, end: null }]`, where `start` is the Stripe
+    subscription's `start_date` (or any earlier date), so renewals keep billing
+    their whole window;
+  - every other row (no Stripe subscription, or `isComplimentary: true`): `[]`.

package/dist/billing-state/index.d.ts

@@ -1,4 +1,5 @@
 import { type BillingState, type TenantSubscription } from "../db";
+export * from "./past-due-banner";
 export * from "./recovery";
 export declare function deriveBillingState(subscription: TenantSubscription | undefined): BillingState;
 export declare function recomputeTenantBillingState(tenantId: string): Promise<void>;

package/dist/billing-state/index.js

@@ -20,6 +20,7 @@ exports.recomputeAllTenantBillingStates = recomputeAllTenantBillingStates;
 const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
 const db_1 = require("@antelopejs/interface-dms/db");
 const db_2 = require("../db");
+__exportStar(require("./past-due-banner"), exports);
 __exportStar(require("./recovery"), exports);
 const ACTIVE_STATUS = "active";
 const FREE_STATE = "free";

package/dist/billing-state/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/billing-state/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAeA,gDAWC;AAED,kEAwBC;AAED,0EAMC;AA5DD,6FAAqE;AACrE,qDAA2D;AAC3D,8BAKe;AAEf,6CAA2B;AAE3B,MAAM,aAAa,GAAG,QAAQ,CAAC;AAC/B,MAAM,UAAU,GAAiB,MAAM,CAAC;AACxC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAE/B,SAAgB,kBAAkB,CAChC,YAA4C;IAE5C,IAAI,CAAC,YAAY;QAAE,OAAO,UAAU,CAAC;IACrC,IACE,YAAY,CAAC,MAAM,KAAK,aAAa;QACrC,CAAC,YAAY,CAAC,oBAAoB,EAClC,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,YAAY,CAAC,MAAM,CAAC;AAC7B,CAAC;AAEM,KAAK,UAAU,2BAA2B,CAC/C,QAAgB;IAEhB,MAAM,KAAK,GAAG,IAAA,wCAAQ,EAAC,4BAAuB,CAAC,CAAC;IAChD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,oBAAoB,EAAE,OAAO,EAAE,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,QAAQ,EAAE,SAAS;YAAE,OAAO;QAChC,MAAM,YAAY,GAAG,MAAM,IAAA,wCAAQ,EACjC,4BAAuB,EACvB,QAAQ,CACT,CAAC,OAAO,EAAE,CAAC;QACZ,IAAI,YAAY,EAAE,iBAAiB;YAAE,OAAO;QAC5C,IACE,MAAM,KAAK,CAAC,eAAe,CACzB,QAAQ,EACR,kBAAkB,CAAC,YAAY,CAAC,EAChC,QAAQ,CACT;YAED,OAAO;IACX,CAAC;IACD,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,+BAA+B;IACnD,MAAM,OAAO,GAAG,MAAM,IAAA,wCAAQ,EAAC,gBAAW,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC;IACrE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,GAAG;YAAE,SAAS;QAC1B,MAAM,2BAA2B,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC;AACH,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/billing-state/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAgBA,gDAWC;AAED,kEAwBC;AAED,0EAMC;AA7DD,6FAAqE;AACrE,qDAA2D;AAC3D,8BAKe;AAEf,oDAAkC;AAClC,6CAA2B;AAE3B,MAAM,aAAa,GAAG,QAAQ,CAAC;AAC/B,MAAM,UAAU,GAAiB,MAAM,CAAC;AACxC,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAE/B,SAAgB,kBAAkB,CAChC,YAA4C;IAE5C,IAAI,CAAC,YAAY;QAAE,OAAO,UAAU,CAAC;IACrC,IACE,YAAY,CAAC,MAAM,KAAK,aAAa;QACrC,CAAC,YAAY,CAAC,oBAAoB,EAClC,CAAC;QACD,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,OAAO,YAAY,CAAC,MAAM,CAAC;AAC7B,CAAC;AAEM,KAAK,UAAU,2BAA2B,CAC/C,QAAgB;IAEhB,MAAM,KAAK,GAAG,IAAA,wCAAQ,EAAC,4BAAuB,CAAC,CAAC;IAChD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,oBAAoB,EAAE,OAAO,EAAE,EAAE,CAAC;QAChE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;QACpD,IAAI,QAAQ,EAAE,SAAS;YAAE,OAAO;QAChC,MAAM,YAAY,GAAG,MAAM,IAAA,wCAAQ,EACjC,4BAAuB,EACvB,QAAQ,CACT,CAAC,OAAO,EAAE,CAAC;QACZ,IAAI,YAAY,EAAE,iBAAiB;YAAE,OAAO;QAC5C,IACE,MAAM,KAAK,CAAC,eAAe,CACzB,QAAQ,EACR,kBAAkB,CAAC,YAAY,CAAC,EAChC,QAAQ,CACT;YAED,OAAO;IACX,CAAC;IACD,MAAM,IAAI,KAAK,CACb,gEAAgE,CACjE,CAAC;AACJ,CAAC;AAEM,KAAK,UAAU,+BAA+B;IACnD,MAAM,OAAO,GAAG,MAAM,IAAA,wCAAQ,EAAC,gBAAW,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,CAAC;IACrE,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,CAAC,MAAM,CAAC,GAAG;YAAE,SAAS;QAC1B,MAAM,2BAA2B,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC;AACH,CAAC"}

package/dist/billing-state/past-due-banner.d.ts

@@ -0,0 +1,4 @@
+import { type LayoutBannerComponentInfo, type LayoutBannerContext } from "@antelopejs/interface-dms/layout-banners";
+export declare function isPastDueBannerVisible({ user, tenantId, }: LayoutBannerContext): Promise<boolean>;
+export declare const PAST_DUE_BANNER: LayoutBannerComponentInfo;
+export declare function registerPastDueBanner(): void;

package/dist/billing-state/past-due-banner.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PAST_DUE_BANNER = void 0;
+exports.isPastDueBannerVisible = isPastDueBannerVisible;
+exports.registerPastDueBanner = registerPastDueBanner;
+const interface_database_decorators_1 = require("@antelopejs/interface-database-decorators");
+const layout_banners_1 = require("@antelopejs/interface-dms/layout-banners");
+const db_1 = require("../db");
+const PAST_DUE_STATE = "past_due";
+async function isPastDueBannerVisible({ user, tenantId, }) {
+    if (!user)
+        return false;
+    const state = await (0, interface_database_decorators_1.GetModel)(db_1.TenantBillingStateModel).findByTenant(tenantId);
+    return !state?.deletedAt && state?.billingState === PAST_DUE_STATE;
+}
+exports.PAST_DUE_BANNER = {
+    key: "dms-saas:past-due",
+    variant: layout_banners_1.LayoutBannerVariant.ERROR,
+    component: "DmsSaasPastDueBanner",
+    visible: isPastDueBannerVisible,
+};
+function registerPastDueBanner() {
+    (0, layout_banners_1.RegisterLayoutBanner)(exports.PAST_DUE_BANNER);
+}
+//# sourceMappingURL=past-due-banner.js.map

package/dist/billing-state/past-due-banner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"past-due-banner.js","sourceRoot":"","sources":["../../src/billing-state/past-due-banner.ts"],"names":[],"mappings":";;;AAgBA,wDAOC;AASD,sDAEC;AAlCD,6FAAqE;AACrE,6EAKkD;AAClD,8BAAmE;AAEnE,MAAM,cAAc,GAAiB,UAAU,CAAC;AAOzC,KAAK,UAAU,sBAAsB,CAAC,EAC3C,IAAI,EACJ,QAAQ,GACY;IACpB,IAAI,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,KAAK,GAAG,MAAM,IAAA,wCAAQ,EAAC,4BAAuB,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC7E,OAAO,CAAC,KAAK,EAAE,SAAS,IAAI,KAAK,EAAE,YAAY,KAAK,cAAc,CAAC;AACrE,CAAC;AAEY,QAAA,eAAe,GAA8B;IACxD,GAAG,EAAE,mBAAmB;IACxB,OAAO,EAAE,oCAAmB,CAAC,KAAK;IAClC,SAAS,EAAE,sBAAsB;IACjC,OAAO,EAAE,sBAAsB;CAChC,CAAC;AAEF,SAAgB,qBAAqB;IACnC,IAAA,qCAAoB,EAAC,uBAAe,CAAC,CAAC;AACxC,CAAC"}

package/dist/config/runtime.d.ts

@@ -1,5 +1,10 @@
-import type { DmsSaasConfig } from "../types";
+import { type DmsSaasConfig, type RegistrationPaymentMethodPolicy } from "../types";
 export declare function setRuntimeConfig(config: DmsSaasConfig): void;
+export declare function getRegistrationPaymentMethodPolicy(): RegistrationPaymentMethodPolicy;
+export declare function assertRegistrationCardAccepted(): void;
+export declare function resolveRegistrationPaymentMethodId(paymentMethodId: string | undefined): string | undefined;
+export declare function getDefaultPlanSlug(): string | undefined;
+export declare function getUpcomingInvoicePreviewCacheTtlMs(): number;
 export declare function getAllowedRedirectHosts(): string[];
 export declare function getSupportStorage(): string;
 export declare function assertAdmissionOpen(isPlatformOwner?: boolean): void;

package/dist/config/runtime.js

@@ -1,24 +1,73 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.setRuntimeConfig = setRuntimeConfig;
+exports.getRegistrationPaymentMethodPolicy = getRegistrationPaymentMethodPolicy;
+exports.assertRegistrationCardAccepted = assertRegistrationCardAccepted;
+exports.resolveRegistrationPaymentMethodId = resolveRegistrationPaymentMethodId;
+exports.getDefaultPlanSlug = getDefaultPlanSlug;
+exports.getUpcomingInvoicePreviewCacheTtlMs = getUpcomingInvoicePreviewCacheTtlMs;
 exports.getAllowedRedirectHosts = getAllowedRedirectHosts;
 exports.getSupportStorage = getSupportStorage;
 exports.assertAdmissionOpen = assertAdmissionOpen;
 exports.isAllowedRedirectUrl = isAllowedRedirectUrl;
 const interface_api_util_1 = require("@antelopejs/interface-api-util");
+const types_1 = require("../types");
 const dev_mode_1 = require("./dev-mode");
 const REDIRECT_PROTOCOLS = ["http:", "https:"];
 const LOOPBACK_HOSTNAMES = ["localhost", "127.0.0.1", "::1", "[::1]"];
+const HTTP_BAD_REQUEST = 400;
 const HTTP_UNAVAILABLE = 503;
 const ADMISSION_MODES = ["open", "invitation-only"];
+const DEFAULT_UPCOMING_INVOICE_PREVIEW_CACHE_TTL_SECONDS = 3600;
+const MS_PER_SECOND = 1000;
 let runtimeConfig = null;
-function setRuntimeConfig(config) {
+function assertValidAdmissionMode(config) {
     if (config.admissionMode !== undefined &&
         !ADMISSION_MODES.includes(config.admissionMode)) {
         throw new Error("Invalid dms-saas admissionMode: expected open or invitation-only");
     }
+}
+function assertValidRegistrationPaymentMethod(config) {
+    const policy = config.registration?.paymentMethod;
+    if (policy !== undefined &&
+        !types_1.REGISTRATION_PAYMENT_METHOD_POLICIES.includes(policy)) {
+        throw new Error("Invalid dms-saas registration.paymentMethod: expected required, optional or none");
+    }
+}
+function assertValidUpcomingInvoicePreviewCacheTtl(config) {
+    const ttl = config.upcomingInvoicePreviewCacheTtlSeconds;
+    if (ttl === undefined || (Number.isFinite(ttl) && ttl >= 0))
+        return;
+    throw new Error("Invalid dms-saas upcomingInvoicePreviewCacheTtlSeconds: expected a non-negative number");
+}
+function setRuntimeConfig(config) {
+    assertValidAdmissionMode(config);
+    assertValidRegistrationPaymentMethod(config);
+    assertValidUpcomingInvoicePreviewCacheTtl(config);
     runtimeConfig = config;
 }
+function getRegistrationPaymentMethodPolicy() {
+    return (runtimeConfig?.registration?.paymentMethod ??
+        types_1.DEFAULT_REGISTRATION_PAYMENT_METHOD_POLICY);
+}
+function assertRegistrationCardAccepted() {
+    (0, interface_api_util_1.assert)(getRegistrationPaymentMethodPolicy() !== "none", HTTP_BAD_REQUEST, "saas.errors.registration.payment_method_disabled");
+}
+function resolveRegistrationPaymentMethodId(paymentMethodId) {
+    const policy = getRegistrationPaymentMethodPolicy();
+    if (policy === "none")
+        return undefined;
+    (0, interface_api_util_1.assert)(policy === "optional" || paymentMethodId, HTTP_BAD_REQUEST, "saas.errors.registration.payment_method_required");
+    return paymentMethodId || undefined;
+}
+function getDefaultPlanSlug() {
+    return runtimeConfig?.defaultPlanSlug;
+}
+function getUpcomingInvoicePreviewCacheTtlMs() {
+    const seconds = runtimeConfig?.upcomingInvoicePreviewCacheTtlSeconds ??
+        DEFAULT_UPCOMING_INVOICE_PREVIEW_CACHE_TTL_SECONDS;
+    return seconds * MS_PER_SECOND;
+}
 function getAllowedRedirectHosts() {
     return runtimeConfig?.allowedRedirectHosts ?? [];
 }

package/dist/config/runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/config/runtime.ts"],"names":[],"mappings":";;AAWA,4CAUC;AAED,0DAEC;AAGD,8CAQC;AAGD,kDAOC;AAuBD,oDAKC;AA1ED,uEAAwD;AAExD,yCAAuC;AAEvC,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC/C,MAAM,kBAAkB,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AACtE,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AAEpD,IAAI,aAAa,GAAyB,IAAI,CAAC;AAE/C,SAAgB,gBAAgB,CAAC,MAAqB;IACpD,IACE,MAAM,CAAC,aAAa,KAAK,SAAS;QAClC,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,EAC/C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;IACJ,CAAC;IACD,aAAa,GAAG,MAAM,CAAC;AACzB,CAAC;AAED,SAAgB,uBAAuB;IACrC,OAAO,aAAa,EAAE,oBAAoB,IAAI,EAAE,CAAC;AACnD,CAAC;AAGD,SAAgB,iBAAiB;IAC/B,MAAM,OAAO,GAAG,aAAa,EAAE,cAAc,CAAC;IAC9C,IAAA,2BAAM,EACJ,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EACxD,gBAAgB,EAChB,yCAAyC,CAC1C,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC;AAGD,SAAgB,mBAAmB,CAAC,eAAe,GAAG,KAAK;IACzD,MAAM,cAAc,GAAG,GAAG,CAAC;IAC3B,IAAA,2BAAM,EACJ,eAAe,IAAI,aAAa,EAAE,aAAa,KAAK,iBAAiB,EACrE,cAAc,EACd,iCAAiC,CAClC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,OAAO,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAQ;IAC7B,OAAO,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACnD,CAAC;AAUD,SAAgB,oBAAoB,CAAC,MAAc;IACjD,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,IAAA,oBAAS,GAAE,IAAI,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,OAAO,uBAAuB,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACzD,CAAC"}
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/config/runtime.ts"],"names":[],"mappings":";;AAoDA,4CAKC;AAGD,gFAKC;AAGD,wEAMC;AAYD,gFAWC;AAED,gDAEC;AAGD,kFAKC;AAED,0DAEC;AAGD,8CAQC;AAGD,kDAOC;AAuBD,oDAKC;AAlKD,uEAAwD;AACxD,oCAKkB;AAClB,yCAAuC;AAEvC,MAAM,kBAAkB,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC/C,MAAM,kBAAkB,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AACtE,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,gBAAgB,GAAG,GAAG,CAAC;AAC7B,MAAM,eAAe,GAAG,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AACpD,MAAM,kDAAkD,GAAG,IAAI,CAAC;AAChE,MAAM,aAAa,GAAG,IAAI,CAAC;AAE3B,IAAI,aAAa,GAAyB,IAAI,CAAC;AAE/C,SAAS,wBAAwB,CAAC,MAAqB;IACrD,IACE,MAAM,CAAC,aAAa,KAAK,SAAS;QAClC,CAAC,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC,EAC/C,CAAC;QACD,MAAM,IAAI,KAAK,CACb,kEAAkE,CACnE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,oCAAoC,CAAC,MAAqB;IACjE,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC;IAClD,IACE,MAAM,KAAK,SAAS;QACpB,CAAC,4CAAoC,CAAC,QAAQ,CAAC,MAAM,CAAC,EACtD,CAAC;QACD,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAS,yCAAyC,CAChD,MAAqB;IAErB,MAAM,GAAG,GAAG,MAAM,CAAC,qCAAqC,CAAC;IACzD,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC;QAAE,OAAO;IACpE,MAAM,IAAI,KAAK,CACb,wFAAwF,CACzF,CAAC;AACJ,CAAC;AAED,SAAgB,gBAAgB,CAAC,MAAqB;IACpD,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACjC,oCAAoC,CAAC,MAAM,CAAC,CAAC;IAC7C,yCAAyC,CAAC,MAAM,CAAC,CAAC;IAClD,aAAa,GAAG,MAAM,CAAC;AACzB,CAAC;AAGD,SAAgB,kCAAkC;IAChD,OAAO,CACL,aAAa,EAAE,YAAY,EAAE,aAAa;QAC1C,kDAA0C,CAC3C,CAAC;AACJ,CAAC;AAGD,SAAgB,8BAA8B;IAC5C,IAAA,2BAAM,EACJ,kCAAkC,EAAE,KAAK,MAAM,EAC/C,gBAAgB,EAChB,kDAAkD,CACnD,CAAC;AACJ,CAAC;AAYD,SAAgB,kCAAkC,CAChD,eAAmC;IAEnC,MAAM,MAAM,GAAG,kCAAkC,EAAE,CAAC;IACpD,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,SAAS,CAAC;IACxC,IAAA,2BAAM,EACJ,MAAM,KAAK,UAAU,IAAI,eAAe,EACxC,gBAAgB,EAChB,kDAAkD,CACnD,CAAC;IACF,OAAO,eAAe,IAAI,SAAS,CAAC;AACtC,CAAC;AAED,SAAgB,kBAAkB;IAChC,OAAO,aAAa,EAAE,eAAe,CAAC;AACxC,CAAC;AAGD,SAAgB,mCAAmC;IACjD,MAAM,OAAO,GACX,aAAa,EAAE,qCAAqC;QACpD,kDAAkD,CAAC;IACrD,OAAO,OAAO,GAAG,aAAa,CAAC;AACjC,CAAC;AAED,SAAgB,uBAAuB;IACrC,OAAO,aAAa,EAAE,oBAAoB,IAAI,EAAE,CAAC;AACnD,CAAC;AAGD,SAAgB,iBAAiB;IAC/B,MAAM,OAAO,GAAG,aAAa,EAAE,cAAc,CAAC;IAC9C,IAAA,2BAAM,EACJ,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EACxD,gBAAgB,EAChB,yCAAyC,CAC1C,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC;AAGD,SAAgB,mBAAmB,CAAC,eAAe,GAAG,KAAK;IACzD,MAAM,cAAc,GAAG,GAAG,CAAC;IAC3B,IAAA,2BAAM,EACJ,eAAe,IAAI,aAAa,EAAE,aAAa,KAAK,iBAAiB,EACrE,cAAc,EACd,iCAAiC,CAClC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAc;IACtC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;QAC/B,OAAO,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,GAAQ;IAC7B,OAAO,kBAAkB,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACnD,CAAC;AAUD,SAAgB,oBAAoB,CAAC,MAAc;IACjD,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,IAAA,oBAAS,GAAE,IAAI,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,OAAO,uBAAuB,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;AACzD,CAAC"}

package/dist/crons/recompute-billing-state.js

@@ -7,11 +7,14 @@ exports.scheduleRecomputeBillingState = scheduleRecomputeBillingState;
 const logging_1 = require("@antelopejs/interface-core/logging");
 const node_cron_1 = __importDefault(require("node-cron"));
 const billing_state_1 = require("../billing-state");
+const default_plan_1 = require("../workspaces/default-plan");
 const CRON_NAME = "recompute-billing-state";
 const CRON_SCHEDULE = "*/15 * * * *";
 function scheduleRecomputeBillingState() {
     return node_cron_1.default.schedule(CRON_SCHEDULE, () => {
-        void (0, billing_state_1.recomputeAllTenantBillingStates)().catch((error) => {
+        void (0, default_plan_1.backfillDefaultSubscriptions)()
+            .then(billing_state_1.recomputeAllTenantBillingStates)
+            .catch((error) => {
             logging_1.Logging.Error(`[dms-saas:cron:${CRON_NAME}] failed`, error);
         });
     });

package/dist/crons/recompute-billing-state.js.map

@@ -1 +1 @@
-{"version":3,"file":"recompute-billing-state.js","sourceRoot":"","sources":["../../src/crons/recompute-billing-state.ts"],"names":[],"mappings":";;;;;AAOA,sEAMC;AAbD,gEAA6D;AAC7D,0DAAqD;AACrD,oDAAmE;AAEnE,MAAM,SAAS,GAAG,yBAAyB,CAAC;AAC5C,MAAM,aAAa,GAAG,cAAc,CAAC;AAErC,SAAgB,6BAA6B;IAC3C,OAAO,mBAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QACvC,KAAK,IAAA,+CAA+B,GAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC9D,iBAAO,CAAC,KAAK,CAAC,kBAAkB,SAAS,UAAU,EAAE,KAAK,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"recompute-billing-state.js","sourceRoot":"","sources":["../../src/crons/recompute-billing-state.ts"],"names":[],"mappings":";;;;;AAQA,sEAUC;AAlBD,gEAA6D;AAC7D,0DAAqD;AACrD,oDAAmE;AACnE,6DAA0E;AAE1E,MAAM,SAAS,GAAG,yBAAyB,CAAC;AAC5C,MAAM,aAAa,GAAG,cAAc,CAAC;AAErC,SAAgB,6BAA6B;IAC3C,OAAO,mBAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAGvC,KAAK,IAAA,2CAA4B,GAAE;aAChC,IAAI,CAAC,+CAA+B,CAAC;aACrC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YACxB,iBAAO,CAAC,KAAK,CAAC,kBAAkB,SAAS,UAAU,EAAE,KAAK,CAAC,CAAC;QAC9D,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/data-api/platformOwner/index.d.ts

@@ -2,6 +2,7 @@ export * from "./admin-user-invoices";
 export * from "./admin-user-workspaces";
 export * from "./credit-notes";
 export * from "./features";
+export * from "./invitations";
 export * from "./invoices";
 export * from "./members";
 export * from "./plan-migrations";

package/dist/data-api/platformOwner/index.js

@@ -18,6 +18,7 @@ __exportStar(require("./admin-user-invoices"), exports);
 __exportStar(require("./admin-user-workspaces"), exports);
 __exportStar(require("./credit-notes"), exports);
 __exportStar(require("./features"), exports);
+__exportStar(require("./invitations"), exports);
 __exportStar(require("./invoices"), exports);
 __exportStar(require("./members"), exports);
 __exportStar(require("./plan-migrations"), exports);