@arnaudjnn/billing-tools 0.14.0

package/dist/routes/rest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest.js","sourceRoot":"","sources":["../../src/routes/rest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAWrD,SAAS,OAAO,CAAC,KAAa,EAAE,gBAAyB;IACvD,MAAM,IAAI,GAAG,iBAAiB,KAAK,0BAA0B,CAAC;IAC9D,OAAO,gBAAgB,CAAC,CAAC,CAAC,GAAG,IAAI,wBAAwB,gBAAgB,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACtF,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,qBAAqB,CAAC,IAGrC;IACC,OAAO,KAAK,EAAE,OAAgB,EAAqB,EAAE;QACnD,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACxD,OAAO,WAAW,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE;YACxC,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,YAAY,EAAE,CAAC;gBAC7C,OAAO,QAAQ,CAAC,IAAI,CAAC;oBACnB,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;iBAC1E,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YACrG,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,oBAAoB,CAAC,MAAe;IAC3C,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxD,MAAM,CAAC,GAAG,MAAmE,CAAC;IAC9E,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1D,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,yBAAyB,CAAC,IAMzC;IACC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,eAAe,CAAC;IAC5C,OAAO,KAAK,EACV,OAAgB,EAChB,GAA0C,EACvB,EAAE;QACrB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,GAAG,CAAC,MAAM,CAAC;QAClC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;QACxD,MAAM,EAAE,GACN,OAAO,IAAI,CAAC,gBAAgB,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC;QACvG,OAAO,WAAW,CAAC,UAAU,EAAE,KAAK,IAAI,EAAE;YACxC,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;gBACpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,IAA+B,CAAC,CAAC;gBACzF,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAK,MAA8B,CAAC,MAAM,KAAK,iBAAiB,EAAE,CAAC;oBACzG,MAAM,UAAU,GAAI,MAA2C,CAAC,mBAAmB,CAAC;oBACpF,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE;wBAC3B,MAAM,EAAE,GAAG;wBACX,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS;qBACxE,CAAC,CAAC;gBACL,CAAC;gBACD,IAAI,oBAAoB,CAAC,MAAM,CAAC,EAAE,CAAC;oBACjC,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBACrG,CAAC;gBACD,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAC/B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACjE,IAAI,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;oBAC9C,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBACjH,CAAC;gBACD,MAAM,MAAM,GACV,GAAG,YAAY,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBAC1F,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;YACvD,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/routes/webhook.d.ts

@@ -0,0 +1,8 @@
+import type Stripe from "stripe";
+export interface WebhookOptions {
+    currency?: string;
+    /** Called for events this handler doesn't process (e.g. subscription.*). */
+    onOtherEvent?: (event: Stripe.Event) => Promise<void> | void;
+}
+export declare function createStripeWebhookHandler(opts?: WebhookOptions): (request: Request) => Promise<Response>;
+//# sourceMappingURL=webhook.d.ts.map

package/dist/routes/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../src/routes/webhook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,MAAM,QAAQ,CAAC;AAQjC,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CAC9D;AAOD,wBAAgB,0BAA0B,CAAC,IAAI,GAAE,cAAmB,IAEpD,SAAS,OAAO,KAAG,OAAO,CAAC,QAAQ,CAAC,CAmCnD"}

package/dist/routes/webhook.js

@@ -0,0 +1,39 @@
+import { getStripe, creditTokens } from "../billing.js";
+function customerIdOf(v) {
+    if (!v)
+        return null;
+    return typeof v === "string" ? v : v.id;
+}
+export function createStripeWebhookHandler(opts = {}) {
+    const currency = opts.currency ?? "usd";
+    return async (request) => {
+        const body = await request.text();
+        const signature = request.headers.get("stripe-signature");
+        if (!signature)
+            return Response.json({ error: "Missing signature" }, { status: 400 });
+        let event;
+        try {
+            event = getStripe().webhooks.constructEvent(body, signature, process.env.STRIPE_WEBHOOK_SECRET);
+        }
+        catch (err) {
+            const message = err instanceof Error ? err.message : "Unknown error";
+            return Response.json({ error: `Webhook signature verification failed: ${message}` }, { status: 400 });
+        }
+        if (event.type === "checkout.session.completed") {
+            const session = event.data.object;
+            if (session.mode === "payment") {
+                const customerId = customerIdOf(session.customer);
+                const tokens = parseInt(session.metadata?.tokens || "0", 10);
+                if (customerId && tokens > 0) {
+                    // Idempotency key on the session id: a re-delivered webhook credits once.
+                    await creditTokens(customerId, tokens, `Purchase: ${tokens} tokens via Checkout`, currency, `credit:checkout:${session.id}`);
+                }
+            }
+        }
+        else if (opts.onOtherEvent) {
+            await opts.onOtherEvent(event);
+        }
+        return Response.json({ received: true });
+    };
+}
+//# sourceMappingURL=webhook.js.map

package/dist/routes/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../src/routes/webhook.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAaxD,SAAS,YAAY,CAAC,CAA6C;IACjE,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,OAAuB,EAAE;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC;IACxC,OAAO,KAAK,EAAE,OAAgB,EAAqB,EAAE;QACnD,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;QAC1D,IAAI,CAAC,SAAS;YAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAEtF,IAAI,KAAmB,CAAC;QACxB,IAAI,CAAC;YACH,KAAK,GAAG,SAAS,EAAE,CAAC,QAAQ,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAsB,CAAC,CAAC;QACnG,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC;YACrE,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0CAA0C,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACxG,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,4BAA4B,EAAE,CAAC;YAChD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,MAAiC,CAAC;YAC7D,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAC/B,MAAM,UAAU,GAAG,YAAY,CAAC,OAAO,CAAC,QAAmC,CAAC,CAAC;gBAC7E,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;gBAC7D,IAAI,UAAU,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC7B,0EAA0E;oBAC1E,MAAM,YAAY,CAChB,UAAU,EACV,MAAM,EACN,aAAa,MAAM,sBAAsB,EACzC,QAAQ,EACR,mBAAmB,OAAO,CAAC,EAAE,EAAE,CAChC,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;aAAM,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACjC,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC;AACJ,CAAC"}

package/dist/sync.d.ts

@@ -0,0 +1,58 @@
+import { type PlansConfig } from "./plans.js";
+import type { Mirror, MirrorQuery } from "./mirror.js";
+import type { WorkOSOrgAdapter } from "./adapters/workos-org.js";
+/** Optional custom cursor persistence. By default the sync manages its own tiny
+ *  cursor table via the `query` executor — the app declares nothing. */
+export interface CursorStore {
+    get(source: string): Promise<string | null>;
+    set(source: string, cursor: string | null): Promise<void>;
+}
+export interface BillingSyncOptions {
+    adapter: WorkOSOrgAdapter;
+    plans: PlansConfig;
+    /** DB executor (same one you pass to createMirror). The sync creates + uses
+     *  its own `billing_sync_cursors` table through it — no app schema needed. */
+    query: MirrorQuery;
+    currency?: string;
+    /** Override cursor persistence (advanced). Defaults to the query-backed table. */
+    cursor?: CursorStore;
+    /** Mirror of the WorkOS Organization (e.g. a workspaces table). */
+    orgMirror?: Mirror;
+    /** Mirror of the WorkOS User (e.g. a users table). */
+    userMirror?: Mirror;
+    hooks?: {
+        /** Extra app-specific cleanup when a WorkOS user is deleted (the user
+         *  mirror row is already removed). */
+        onUserDeleted?(workosUserId: string): Promise<void>;
+        /** A subscription invoice failed to collect (dunning). The org's status is
+         *  already set to `past_due`; use this to notify the user / gate access.
+         *  Stripe Smart Retries + the card-updater keep retrying automatically. */
+        onPaymentFailed?(orgId: string): Promise<void>;
+    };
+}
+export interface BillingSync {
+    /** Poll + reconcile once. Use this from a serverless cron route. */
+    runOnce(): Promise<{
+        stripe: number;
+        workos: number;
+    }>;
+    /** Start an in-process interval scheduler (for a long-lived server — e.g.
+     *  Next's instrumentation register()). Runs immediately, then every
+     *  intervalMs (default 60s), never overlapping. Returns a stop() fn.
+     *  For multi-instance deployments run it on one replica (or use runOnce via
+     *  a single external cron) to avoid duplicate polling. */
+    start(opts?: {
+        intervalMs?: number;
+        onError?: (e: unknown) => void;
+    }): () => void;
+}
+export declare function createBillingSync(opts: BillingSyncOptions): BillingSync;
+/** Web-standard (Request → Response) handler that runs one sync cycle — for a
+ *  serverless cron trigger. Framework-agnostic: mount in a Next route
+ *  (`export const GET = createSyncRoute(sync, { secret })`), Hono, Bun, etc.
+ *  If `secret` is set, requests must send it as `Authorization: Bearer <secret>`
+ *  (or an `x-cron-secret` header). */
+export declare function createSyncRoute(sync: BillingSync, opts?: {
+    secret?: string;
+}): (request: Request) => Promise<Response>;
+//# sourceMappingURL=sync.d.ts.map

package/dist/sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../src/sync.ts"],"names":[],"mappings":"AAGA,OAAO,EAAkC,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9E,OAAO,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAajE;wEACwE;AACxE,MAAM,WAAW,WAAW;IAC1B,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5C,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC3D;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,EAAE,WAAW,CAAC;IACnB;kFAC8E;IAC9E,KAAK,EAAE,WAAW,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,mEAAmE;IACnE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sDAAsD;IACtD,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE;QACN;8CACsC;QACtC,aAAa,CAAC,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;QACpD;;mFAE2E;QAC3E,eAAe,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;KAChD,CAAC;CACH;AA6CD,MAAM,WAAW,WAAW;IAC1B,oEAAoE;IACpE,OAAO,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvD;;;;8DAI0D;IAC1D,KAAK,CAAC,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,IAAI,CAAA;KAAE,GAAG,MAAM,IAAI,CAAC;CACnF;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,kBAAkB,GAAG,WAAW,CA4IvE;AAED;;;;sCAIsC;AACtC,wBAAgB,eAAe,CAC7B,IAAI,EAAE,WAAW,EACjB,IAAI,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC7B,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAmBzC"}

package/dist/sync.js

@@ -0,0 +1,202 @@
+import { pollStripeEvents, pollWorkOSEvents } from "./events.js";
+import { creditTokens, getStripe } from "./billing.js";
+import { includedTokens, planForPriceId } from "./plans.js";
+const CURSOR_TABLE = "billing_sync_cursors";
+// A CursorStore backed by a self-managed table via the app's query executor.
+function queryCursorStore(query) {
+    let ensured = false;
+    const ensure = async () => {
+        if (ensured)
+            return;
+        await query(`CREATE TABLE IF NOT EXISTS ${CURSOR_TABLE} (source text PRIMARY KEY, cursor text, updated_at timestamptz NOT NULL DEFAULT now())`, []);
+        ensured = true;
+    };
+    return {
+        async get(source) {
+            await ensure();
+            const r = await query(`SELECT cursor FROM ${CURSOR_TABLE} WHERE source = $1`, [source]);
+            return r.rows[0]?.cursor ?? null;
+        },
+        async set(source, cursor) {
+            if (cursor === null)
+                return;
+            await ensure();
+            await query(`INSERT INTO ${CURSOR_TABLE} (source, cursor) VALUES ($1, $2)
+         ON CONFLICT (source) DO UPDATE SET cursor = $2, updated_at = now()`, [source, cursor]);
+        },
+    };
+}
+const STRIPE_TYPES = [
+    "customer.subscription.created",
+    "customer.subscription.updated",
+    "customer.subscription.deleted",
+    "invoice.paid",
+    "invoice.payment_failed",
+];
+const WORKOS_EVENTS = [
+    "organization.updated",
+    "organization.deleted",
+    "user.updated",
+    "user.deleted",
+];
+export function createBillingSync(opts) {
+    const currency = opts.currency ?? "usd";
+    const cursor = opts.cursor ?? queryCursorStore(opts.query);
+    async function handleStripe(event) {
+        if (event.type.startsWith("customer.subscription.")) {
+            const sub = event.data.object;
+            const orgId = sub.metadata?.org_id;
+            if (!orgId)
+                return;
+            if (event.type === "customer.subscription.deleted") {
+                await opts.adapter.setSubscription(orgId, {
+                    plan: null,
+                    status: "canceled",
+                    subscriptionId: null,
+                    periodEnd: null,
+                });
+                return;
+            }
+            const priceId = sub.items?.data?.[0]?.price?.id;
+            const plan = priceId ? await planForPriceId(priceId) : null;
+            await opts.adapter.setSubscription(orgId, {
+                plan: plan ?? undefined,
+                status: sub.status,
+                subscriptionId: sub.id,
+                periodEnd: sub.current_period_end
+                    ? new Date(sub.current_period_end * 1000).toISOString()
+                    : null,
+            });
+            return;
+        }
+        if (event.type === "invoice.paid") {
+            const invoice = event.data.object;
+            if (invoice.billing_reason !== "subscription_create" && invoice.billing_reason !== "subscription_cycle")
+                return;
+            if (!invoice.subscription || !invoice.customer)
+                return;
+            const sub = await getStripe().subscriptions.retrieve(invoice.subscription);
+            const orgId = sub.metadata?.org_id;
+            if (!orgId)
+                return;
+            const priceId = sub.items?.data?.[0]?.price?.id;
+            const plan = priceId ? await planForPriceId(priceId) : null;
+            if (!plan)
+                return; // unknown price → no grant
+            const seats = await opts.adapter.memberCount(orgId);
+            const tokens = includedTokens(opts.plans, plan, seats);
+            if (tokens > 0) {
+                // Idempotency key on the invoice id: an overlapping/replayed poll grants
+                // the per-cycle tokens exactly once.
+                await creditTokens(invoice.customer, tokens, `Included tokens: ${plan} (${seats} seat${seats === 1 ? "" : "s"})`, currency, `credit:invoice:${invoice.id}`);
+            }
+        }
+        if (event.type === "invoice.payment_failed") {
+            const invoice = event.data.object;
+            if (!invoice.subscription)
+                return; // one-off top-ups don't affect subscription state
+            const sub = (await getStripe().subscriptions.retrieve(invoice.subscription));
+            const orgId = sub.metadata?.org_id;
+            if (!orgId)
+                return;
+            await opts.adapter.setSubscription(orgId, {
+                status: "past_due",
+                subscriptionId: sub.id,
+                periodEnd: sub.current_period_end ? new Date(sub.current_period_end * 1000).toISOString() : null,
+            });
+            await opts.hooks?.onPaymentFailed?.(orgId);
+        }
+    }
+    async function handleWorkOS(event) {
+        const data = event.data;
+        if (!data?.id)
+            return;
+        switch (event.event) {
+            case "organization.updated":
+                await opts.orgMirror?.syncResource(data.id, data);
+                break;
+            case "organization.deleted":
+                await opts.orgMirror?.remove(data.id);
+                break;
+            case "user.updated":
+                await opts.userMirror?.syncResource(data.id, data);
+                break;
+            case "user.deleted":
+                await opts.userMirror?.remove(data.id);
+                await opts.hooks?.onUserDeleted?.(data.id);
+                break;
+        }
+    }
+    async function runOnce() {
+        const s = await pollStripeEvents({
+            after: await cursor.get("stripe"),
+            types: STRIPE_TYPES,
+            onEvent: handleStripe,
+        });
+        await cursor.set("stripe", s.cursor);
+        const w = await pollWorkOSEvents({
+            after: await cursor.get("workos"),
+            events: WORKOS_EVENTS,
+            onEvent: handleWorkOS,
+        });
+        await cursor.set("workos", w.cursor);
+        return { stripe: s.count, workos: w.count };
+    }
+    function start(opts = {}) {
+        const intervalMs = opts.intervalMs ?? 60_000;
+        let running = false;
+        let stopped = false;
+        const tick = async () => {
+            if (running || stopped)
+                return; // never overlap
+            running = true;
+            try {
+                await runOnce();
+            }
+            catch (e) {
+                if (opts.onError)
+                    opts.onError(e);
+                else
+                    console.error(`[billing-sync] ${e.message}`);
+            }
+            finally {
+                running = false;
+            }
+        };
+        const handle = setInterval(tick, intervalMs);
+        // Don't keep the process alive just for the timer.
+        handle.unref?.();
+        void tick(); // run once immediately
+        return () => {
+            stopped = true;
+            clearInterval(handle);
+        };
+    }
+    return { runOnce, start };
+}
+/** Web-standard (Request → Response) handler that runs one sync cycle — for a
+ *  serverless cron trigger. Framework-agnostic: mount in a Next route
+ *  (`export const GET = createSyncRoute(sync, { secret })`), Hono, Bun, etc.
+ *  If `secret` is set, requests must send it as `Authorization: Bearer <secret>`
+ *  (or an `x-cron-secret` header). */
+export function createSyncRoute(sync, opts = {}) {
+    return async (request) => {
+        if (opts.secret) {
+            const auth = request.headers.get("authorization") ?? request.headers.get("x-cron-secret") ?? "";
+            if (auth !== opts.secret && auth !== `Bearer ${opts.secret}`) {
+                return new Response(JSON.stringify({ error: "unauthorized" }), {
+                    status: 401,
+                    headers: { "content-type": "application/json" },
+                });
+            }
+        }
+        try {
+            const result = await sync.runOnce();
+            return Response.json({ ok: true, ...result });
+        }
+        catch (e) {
+            return Response.json({ ok: false, error: e.message }, { status: 500 });
+        }
+    };
+}
+//# sourceMappingURL=sync.js.map

package/dist/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../src/sync.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,cAAc,EAAoB,MAAM,YAAY,CAAC;AAI9E,MAAM,YAAY,GAAG,sBAAsB,CAAC;AA0C5C,6EAA6E;AAC7E,SAAS,gBAAgB,CAAC,KAAkB;IAC1C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;QACxB,IAAI,OAAO;YAAE,OAAO;QACpB,MAAM,KAAK,CACT,8BAA8B,YAAY,wFAAwF,EAClI,EAAE,CACH,CAAC;QACF,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC,CAAC;IACF,OAAO;QACL,KAAK,CAAC,GAAG,CAAC,MAAM;YACd,MAAM,MAAM,EAAE,CAAC;YACf,MAAM,CAAC,GAAG,MAAM,KAAK,CAAC,sBAAsB,YAAY,oBAAoB,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;YACxF,OAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAA6B,IAAI,IAAI,CAAC;QAC3D,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM;YACtB,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO;YAC5B,MAAM,MAAM,EAAE,CAAC;YACf,MAAM,KAAK,CACT,eAAe,YAAY;4EACyC,EACpE,CAAC,MAAM,EAAE,MAAM,CAAC,CACjB,CAAC;QACJ,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,YAAY,GAAG;IACnB,+BAA+B;IAC/B,+BAA+B;IAC/B,+BAA+B;IAC/B,cAAc;IACd,wBAAwB;CACzB,CAAC;AACF,MAAM,aAAa,GAAG;IACpB,sBAAsB;IACtB,sBAAsB;IACtB,cAAc;IACd,cAAc;CACf,CAAC;AAaF,MAAM,UAAU,iBAAiB,CAAC,IAAwB;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,KAAK,CAAC;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAE3D,KAAK,UAAU,YAAY,CAAC,KAAmB;QAC7C,IAAI,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,EAAE,CAAC;YACpD,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,MAA+D,CAAC;YACvF,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC;YACnC,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,IAAI,KAAK,CAAC,IAAI,KAAK,+BAA+B,EAAE,CAAC;gBACnD,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE;oBACxC,IAAI,EAAE,IAAI;oBACV,MAAM,EAAE,UAAU;oBAClB,cAAc,EAAE,IAAI;oBACpB,SAAS,EAAE,IAAI;iBAChB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5D,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE;gBACxC,IAAI,EAAE,IAAI,IAAI,SAAS;gBACvB,MAAM,EAAE,GAAG,CAAC,MAAM;gBAClB,cAAc,EAAE,GAAG,CAAC,EAAE;gBACtB,SAAS,EAAE,GAAG,CAAC,kBAAkB;oBAC/B,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE;oBACvD,CAAC,CAAC,IAAI;aACT,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAClC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,MAI1B,CAAC;YACF,IAAI,OAAO,CAAC,cAAc,KAAK,qBAAqB,IAAI,OAAO,CAAC,cAAc,KAAK,oBAAoB;gBAAE,OAAO;YAChH,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,QAAQ;gBAAE,OAAO;YACvD,MAAM,GAAG,GAAG,MAAM,SAAS,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC3E,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC;YACnC,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;YAChD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5D,IAAI,CAAC,IAAI;gBAAE,OAAO,CAAC,2BAA2B;YAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACpD,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACvD,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;gBACf,yEAAyE;gBACzE,qCAAqC;gBACrC,MAAM,YAAY,CAChB,OAAO,CAAC,QAAQ,EAChB,MAAM,EACN,oBAAoB,IAAI,KAAK,KAAK,QAAQ,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,EACnE,QAAQ,EACR,kBAAkB,OAAO,CAAC,EAAE,EAAE,CAC/B,CAAC;YACJ,CAAC;QACH,CAAC;QAED,IAAI,KAAK,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;YAC5C,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,MAA2D,CAAC;YACvF,IAAI,CAAC,OAAO,CAAC,YAAY;gBAAE,OAAO,CAAC,kDAAkD;YACrF,MAAM,GAAG,GAAG,CAAC,MAAM,SAAS,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,CAAC,CAE1E,CAAC;YACF,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC;YACnC,IAAI,CAAC,KAAK;gBAAE,OAAO;YACnB,MAAM,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,KAAK,EAAE;gBACxC,MAAM,EAAE,UAAU;gBAClB,cAAc,EAAE,GAAG,CAAC,EAAE;gBACtB,SAAS,EAAE,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI;aACjG,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,KAAK,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IAED,KAAK,UAAU,YAAY,CAAC,KAAuC;QACjE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAuB,CAAC;QAC3C,IAAI,CAAC,IAAI,EAAE,EAAE;YAAE,OAAO;QACtB,QAAQ,KAAK,CAAC,KAAK,EAAE,CAAC;YACpB,KAAK,sBAAsB;gBACzB,MAAM,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,IAA+B,CAAC,CAAC;gBAC7E,MAAM;YACR,KAAK,sBAAsB;gBACzB,MAAM,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACtC,MAAM;YACR,KAAK,cAAc;gBACjB,MAAM,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,EAAE,IAA+B,CAAC,CAAC;gBAC9E,MAAM;YACR,KAAK,cAAc;gBACjB,MAAM,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACvC,MAAM,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC3C,MAAM;QACV,CAAC;IACH,CAAC;IAED,KAAK,UAAU,OAAO;QACpB,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAAC;YAC/B,KAAK,EAAE,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACjC,KAAK,EAAE,YAAY;YACnB,OAAO,EAAE,YAAY;SACtB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,GAAG,MAAM,gBAAgB,CAAC;YAC/B,KAAK,EAAE,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;YACjC,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,YAAY;SACtB,CAAC,CAAC;QACH,MAAM,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACrC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC9C,CAAC;IAED,SAAS,KAAK,CAAC,OAAgE,EAAE;QAC/E,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC;QAC7C,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;YACtB,IAAI,OAAO,IAAI,OAAO;gBAAE,OAAO,CAAC,gBAAgB;YAChD,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,CAAC;gBACH,MAAM,OAAO,EAAE,CAAC;YAClB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,IAAI,CAAC,OAAO;oBAAE,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;;oBAC7B,OAAO,CAAC,KAAK,CAAC,kBAAmB,CAAW,CAAC,OAAO,EAAE,CAAC,CAAC;YAC/D,CAAC;oBAAS,CAAC;gBACT,OAAO,GAAG,KAAK,CAAC;YAClB,CAAC;QACH,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,mDAAmD;QAClD,MAAiC,CAAC,KAAK,EAAE,EAAE,CAAC;QAC7C,KAAK,IAAI,EAAE,CAAC,CAAC,uBAAuB;QACpC,OAAO,GAAG,EAAE;YACV,OAAO,GAAG,IAAI,CAAC;YACf,aAAa,CAAC,MAAM,CAAC,CAAC;QACxB,CAAC,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AAC5B,CAAC;AAED;;;;sCAIsC;AACtC,MAAM,UAAU,eAAe,CAC7B,IAAiB,EACjB,OAA4B,EAAE;IAE9B,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAChB,MAAM,IAAI,GACR,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC;YACrF,IAAI,IAAI,KAAK,IAAI,CAAC,MAAM,IAAI,IAAI,KAAK,UAAU,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC;gBAC7D,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,EAAE;oBAC7D,MAAM,EAAE,GAAG;oBACX,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;iBAChD,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;YACpC,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAG,CAAW,CAAC,OAAO,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/tools/billing.d.ts

@@ -0,0 +1,4 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { BillingAdapter, ResolvedConfig } from "../types.js";
+export declare function registerBillingOnlyTools(server: McpServer, adapter: BillingAdapter, config: ResolvedConfig, toolCosts: Record<string, number>): void;
+//# sourceMappingURL=billing.d.ts.map

package/dist/tools/billing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.d.ts","sourceRoot":"","sources":["../../src/tools/billing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAmBlE,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,cAAc,EACtB,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,QAwJlC"}

package/dist/tools/billing.js

@@ -0,0 +1,125 @@
+import { z } from "zod";
+import { enforceAccess } from "../auth.js";
+import { ensureStripeCustomer, getBillingCustomerId, getTokenBalance, getAutoReloadSettings, setAutoReloadSettings, createTokenCheckoutSession, createBillingPortalSession, listInvoices, stripeConfigured, } from "../billing.js";
+const NO_STRIPE = {
+    isError: true,
+    content: [{ type: "text", text: "Billing is not configured (STRIPE_SECRET_KEY unset)." }],
+};
+export function registerBillingOnlyTools(server, adapter, config, toolCosts) {
+    // Resolve (or lazily create) the org's Stripe customer.
+    const customerId = async (orgId) => {
+        const existing = await getBillingCustomerId(adapter, orgId);
+        if (existing)
+            return existing;
+        return ensureStripeCustomer(adapter, orgId, undefined, config);
+    };
+    server.tool("get_token_balance", `Returns your current token balance, per-tool costs, and auto-reload settings.`, {}, async () => {
+        const auth = await enforceAccess(adapter);
+        if ("isError" in auth)
+            return auth;
+        if (!stripeConfigured())
+            return NO_STRIPE;
+        const cid = await customerId(auth.orgId);
+        const balance = await getTokenBalance(cid);
+        const autoReload = await getAutoReloadSettings(cid);
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: JSON.stringify({ token_balance: balance, tool_costs: toolCosts, auto_reload: autoReload || { enabled: false } }, null, 2),
+                },
+            ],
+        };
+    });
+    server.tool("buy_tokens", `Purchase tokens via Stripe Checkout. Returns a payment URL.
+1 unit of currency = 100 tokens. Minimum 5, maximum 200,000. Your card is saved for auto-reload.`, {
+        amount: z.number().min(5).max(200000).describe("Amount in your currency to purchase (e.g. 10 = 1000 tokens)"),
+    }, async ({ amount }) => {
+        const auth = await enforceAccess(adapter);
+        if ("isError" in auth)
+            return auth;
+        if (!stripeConfigured())
+            return NO_STRIPE;
+        const cid = await customerId(auth.orgId);
+        const url = await createTokenCheckoutSession(cid, auth.orgId, amount, config);
+        const tokens = Math.round(amount * 100);
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: JSON.stringify({
+                        status: "checkout_created",
+                        checkout_url: url,
+                        amount,
+                        tokens,
+                        message: `Open this URL to purchase ${tokens} tokens.`,
+                    }, null, 2),
+                },
+            ],
+        };
+    });
+    server.tool("set_auto_reload", `Configure automatic token reload. When your balance drops to or below the threshold
+after a tool call, your saved card is charged to bring the balance back to reload_to.
+Requires a saved card (use buy_tokens first).`, {
+        enabled: z.boolean().describe("Enable or disable auto-reload"),
+        threshold: z.number().min(0).describe("Balance threshold that triggers reload"),
+        reload_to: z.number().min(1).describe("Target balance after reload"),
+    }, async ({ enabled, threshold, reload_to }) => {
+        const auth = await enforceAccess(adapter);
+        if ("isError" in auth)
+            return auth;
+        if (!stripeConfigured())
+            return NO_STRIPE;
+        if (reload_to <= threshold) {
+            return {
+                isError: true,
+                content: [{ type: "text", text: "reload_to must be greater than threshold." }],
+            };
+        }
+        const cid = await customerId(auth.orgId);
+        await setAutoReloadSettings(cid, threshold, reload_to, enabled);
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: JSON.stringify({
+                        status: "ok",
+                        auto_reload: { enabled, threshold, reload_to },
+                        message: enabled
+                            ? `Auto-reload enabled: at <=${threshold} tokens, recharge to ${reload_to}.`
+                            : "Auto-reload disabled.",
+                    }, null, 2),
+                },
+            ],
+        };
+    });
+    server.tool("get_billing_portal", `Get a Stripe billing-portal URL to manage your subscription (upgrade, downgrade, cancel),
+update your payment method, and view invoices. Returns a short-lived link.`, { return_url: z.string().url().optional().describe("Where to send the user back to after the portal (defaults to the app)") }, async ({ return_url }) => {
+        const auth = await enforceAccess(adapter);
+        if ("isError" in auth)
+            return auth;
+        if (!stripeConfigured())
+            return NO_STRIPE;
+        const cid = await customerId(auth.orgId);
+        const url = await createBillingPortalSession(cid, return_url ?? config.baseUrl);
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: JSON.stringify({ status: "portal_created", portal_url: url, message: "Open this URL to manage billing." }, null, 2),
+                },
+            ],
+        };
+    });
+    server.tool("list_invoices", `Returns your recent invoices with amounts, dates, and links to view/download PDFs.`, { limit: z.number().min(1).max(100).optional().default(10).describe("Number to return (default 10)") }, async ({ limit }) => {
+        const auth = await enforceAccess(adapter);
+        if ("isError" in auth)
+            return auth;
+        if (!stripeConfigured())
+            return NO_STRIPE;
+        const cid = await customerId(auth.orgId);
+        const invoices = await listInvoices(cid, limit);
+        return { content: [{ type: "text", text: JSON.stringify({ invoices }, null, 2) }] };
+    });
+}
+//# sourceMappingURL=billing.js.map

package/dist/tools/billing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billing.js","sourceRoot":"","sources":["../../src/tools/billing.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EACL,oBAAoB,EACpB,oBAAoB,EACpB,eAAe,EACf,qBAAqB,EACrB,qBAAqB,EACrB,0BAA0B,EAC1B,0BAA0B,EAC1B,YAAY,EACZ,gBAAgB,GACjB,MAAM,eAAe,CAAC;AAEvB,MAAM,SAAS,GAAG;IAChB,OAAO,EAAE,IAAa;IACtB,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,sDAAsD,EAAE,CAAC;CACnG,CAAC;AAEF,MAAM,UAAU,wBAAwB,CACtC,MAAiB,EACjB,OAAuB,EACvB,MAAsB,EACtB,SAAiC;IAEjC,wDAAwD;IACxD,MAAM,UAAU,GAAG,KAAK,EAAE,KAAa,EAAmB,EAAE;QAC1D,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC5D,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAC9B,OAAO,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACjE,CAAC,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,mBAAmB,EACnB,+EAA+E,EAC/E,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,SAAS,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,CAAC,gBAAgB,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,GAAG,CAAC,CAAC;QAC3C,MAAM,UAAU,GAAG,MAAM,qBAAqB,CAAC,GAAG,CAAC,CAAC;QACpD,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB,EAAE,aAAa,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAChG,IAAI,EACJ,CAAC,CACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,YAAY,EACZ;iGAC6F,EAC7F;QACE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,6DAA6D,CAAC;KAC9G,EACD,KAAK,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QACnB,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,SAAS,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,CAAC,gBAAgB,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,0BAA0B,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9E,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;QACxC,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;wBACE,MAAM,EAAE,kBAAkB;wBAC1B,YAAY,EAAE,GAAG;wBACjB,MAAM;wBACN,MAAM;wBACN,OAAO,EAAE,6BAA6B,MAAM,UAAU;qBACvD,EACD,IAAI,EACJ,CAAC,CACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,iBAAiB,EACjB;;8CAE0C,EAC1C;QACE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC;QAC9D,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,wCAAwC,CAAC;QAC/E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,6BAA6B,CAAC;KACrE,EACD,KAAK,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,EAAE;QAC1C,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,SAAS,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,CAAC,gBAAgB,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;YAC3B,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,2CAA2C,EAAE,CAAC;aACxF,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,qBAAqB,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QAChE,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;wBACE,MAAM,EAAE,IAAI;wBACZ,WAAW,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE;wBAC9C,OAAO,EAAE,OAAO;4BACd,CAAC,CAAC,6BAA6B,SAAS,wBAAwB,SAAS,GAAG;4BAC5E,CAAC,CAAC,uBAAuB;qBAC5B,EACD,IAAI,EACJ,CAAC,CACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,oBAAoB,EACpB;2EACuE,EACvE,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,uEAAuE,CAAC,EAAE,EAC7H,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,SAAS,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,CAAC,gBAAgB,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,MAAM,0BAA0B,CAAC,GAAG,EAAE,UAAU,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC;QAChF,OAAO;YACL,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB,EAAE,MAAM,EAAE,gBAAgB,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,kCAAkC,EAAE,EAC1F,IAAI,EACJ,CAAC,CACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,eAAe,EACf,oFAAoF,EACpF,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EAAE,EACtG,KAAK,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE;QAClB,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,SAAS,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,CAAC,gBAAgB,EAAE;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAChD,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IAC/F,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/keys.d.ts

@@ -0,0 +1,4 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { BillingAdapter, ResolvedConfig } from "../types.js";
+export declare function registerKeyTools(server: McpServer, adapter: BillingAdapter, config: ResolvedConfig): void;
+//# sourceMappingURL=keys.d.ts.map

package/dist/tools/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/tools/keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AAEpE,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAKlE,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,SAAS,EACjB,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,cAAc,QA4HvB"}

package/dist/tools/keys.js

@@ -0,0 +1,107 @@
+import { z } from "zod";
+import { enforceAccess } from "../auth.js";
+import { sendMagicAuth, verifyMagicAuth } from "../magic-auth.js";
+import { ensureStripeCustomer, stripeConfigured } from "../billing.js";
+export function registerKeyTools(server, adapter, config) {
+    server.tool("get_api_key", `Provisions or retrieves an API key for accessing protected tools.
+Call with just an email to start authentication (sends a 6-digit code via email).
+Then call again with the email and the code to complete authentication and receive your API key.
+Add the key to your config as: "Authorization": "Bearer <key>"`, {
+        email: z.string().email().describe("Your email address"),
+        code: z.string().length(6).optional().describe("6-digit verification code from email"),
+    }, async ({ email, code }) => {
+        try {
+            if (!code) {
+                await sendMagicAuth(email);
+                return {
+                    content: [
+                        {
+                            type: "text",
+                            text: JSON.stringify({
+                                status: "code_sent",
+                                message: `A 6-digit verification code has been sent to ${email}. Call get_api_key again with your email and the code to get your API key.`,
+                            }, null, 2),
+                        },
+                    ],
+                };
+            }
+            const user = await verifyMagicAuth(email, code);
+            const { orgId } = await adapter.ensureOrgForUser(user);
+            if (stripeConfigured()) {
+                await ensureStripeCustomer(adapter, orgId, email, config).catch(() => { });
+            }
+            const key = await adapter.mintApiKey(orgId, "API Key", user.id);
+            return {
+                content: [
+                    {
+                        type: "text",
+                        text: JSON.stringify({
+                            status: "ok",
+                            message: "API key created successfully. Add it as an Authorization header. This key is only shown once.",
+                            api_key: key.value,
+                            usage: { header: `Authorization: Bearer ${key.value}` },
+                        }, null, 2),
+                    },
+                ],
+            };
+        }
+        catch (e) {
+            return {
+                isError: true,
+                content: [
+                    {
+                        type: "text",
+                        text: `Authentication error: ${e instanceof Error ? e.message : String(e)}`,
+                    },
+                ],
+            };
+        }
+    });
+    server.tool("list_api_keys", `Lists the API keys for your workspace (obfuscated values, never the full key).
+Useful for finding stale keys to revoke. Free.`, {}, async () => {
+        const auth = await enforceAccess(adapter);
+        if ("isError" in auth)
+            return auth;
+        try {
+            const keys = await adapter.listApiKeys(auth.orgId);
+            return {
+                content: [{ type: "text", text: JSON.stringify({ status: "ok", keys }, null, 2) }],
+            };
+        }
+        catch (e) {
+            return {
+                isError: true,
+                content: [
+                    { type: "text", text: `Failed to list keys: ${e instanceof Error ? e.message : String(e)}` },
+                ],
+            };
+        }
+    });
+    server.tool("revoke_api_key", `Revokes (deletes) an API key by id. Use list_api_keys to find the id.
+The revoked key stops working immediately. Free.`, { api_key_id: z.string().describe("The key id from list_api_keys") }, async ({ api_key_id }) => {
+        const auth = await enforceAccess(adapter);
+        if ("isError" in auth)
+            return auth;
+        try {
+            const revoked = await adapter.revokeApiKey(auth.orgId, api_key_id);
+            if (!revoked) {
+                return {
+                    isError: true,
+                    content: [{ type: "text", text: `Key ${api_key_id} not found in this workspace.` }],
+                };
+            }
+            return {
+                content: [{ type: "text", text: JSON.stringify({ status: "ok", revoked }, null, 2) }],
+            };
+        }
+        catch (e) {
+            return {
+                isError: true,
+                content: [
+                    { type: "text", text: `Failed to revoke key: ${e instanceof Error ? e.message : String(e)}` },
+                ],
+            };
+        }
+    });
+}
+//# sourceMappingURL=keys.js.map

package/dist/tools/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/tools/keys.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAEvE,MAAM,UAAU,gBAAgB,CAC9B,MAAiB,EACjB,OAAuB,EACvB,MAAsB;IAEtB,MAAM,CAAC,IAAI,CACT,aAAa,EACb;;;+DAG2D,EAC3D;QACE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QACxD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,sCAAsC,CAAC;KACvF,EACD,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;QACxB,IAAI,CAAC;YACH,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,aAAa,CAAC,KAAK,CAAC,CAAC;gBAC3B,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;gCACE,MAAM,EAAE,WAAW;gCACnB,OAAO,EAAE,gDAAgD,KAAK,4EAA4E;6BAC3I,EACD,IAAI,EACJ,CAAC,CACF;yBACF;qBACF;iBACF,CAAC;YACJ,CAAC;YAED,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAChD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;YACvD,IAAI,gBAAgB,EAAE,EAAE,CAAC;gBACvB,MAAM,oBAAoB,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC5E,CAAC;YACD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAChE,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB;4BACE,MAAM,EAAE,IAAI;4BACZ,OAAO,EACL,+FAA+F;4BACjG,OAAO,EAAE,GAAG,CAAC,KAAK;4BAClB,KAAK,EAAE,EAAE,MAAM,EAAE,yBAAyB,GAAG,CAAC,KAAK,EAAE,EAAE;yBACxD,EACD,IAAI,EACJ,CAAC,CACF;qBACF;iBACF;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,yBAAyB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;qBAC5E;iBACF;aACF,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,eAAe,EACf;+CAC2C,EAC3C,EAAE,EACF,KAAK,IAAI,EAAE;QACT,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,SAAS,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnD,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC5F,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,wBAAwB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;iBACtG;aACF,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;IAEF,MAAM,CAAC,IAAI,CACT,gBAAgB,EAChB;iDAC6C,EAC7C,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,+BAA+B,CAAC,EAAE,EACpE,KAAK,EAAE,EAAE,UAAU,EAAE,EAAE,EAAE;QACvB,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;QAC1C,IAAI,SAAS,IAAI,IAAI;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YACnE,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,OAAO;oBACL,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,OAAO,UAAU,+BAA+B,EAAE,CAAC;iBAC7F,CAAC;YACJ,CAAC;YACD,OAAO;gBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;aAC/F,CAAC;QACJ,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO;gBACL,OAAO,EAAE,IAAI;gBACb,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,yBAAyB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;iBACvG;aACF,CAAC;QACJ,CAAC;IACH,CAAC,CACF,CAAC;AACJ,CAAC"}

package/dist/tools/register.d.ts

@@ -0,0 +1,20 @@
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { BillingAdapter, BillingConfig } from "../types.js";
+import { type PlansConfig } from "../plans.js";
+export declare function installInputLogging(server: McpServer): void;
+export interface RegisterBillingToolsOptions {
+    adapter: BillingAdapter;
+    config: BillingConfig;
+    /** Per-tool token costs (for get_token_balance to echo). Usually from tools.json. */
+    toolCosts?: Record<string, number>;
+    /** Install the redacted [tool-input] logging wrapper. Default true. */
+    installLogging?: boolean;
+    /** Declarative plans. When set, a `list_plans` tool is registered and the
+     *  Stripe products/prices are auto-provisioned (lazily, on first list). */
+    plans?: PlansConfig;
+    /** Default plan key (e.g. "hobby"). */
+    defaultPlan?: string;
+}
+export declare function registerBillingTools(server: McpServer, opts: RegisterBillingToolsOptions): void;
+export declare const BILLING_TOOL_NAMES: readonly ["get_api_key", "list_api_keys", "revoke_api_key", "get_token_balance", "buy_tokens", "set_auto_reload", "get_billing_portal", "list_invoices"];
+//# sourceMappingURL=register.d.ts.map

package/dist/tools/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../src/tools/register.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAIjE,OAAO,EAAe,KAAK,WAAW,EAAE,MAAM,aAAa,CAAC;AAyB5D,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,SAAS,QAkBpD;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,cAAc,CAAC;IACxB,MAAM,EAAE,aAAa,CAAC;IACtB,qFAAqF;IACrF,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,uEAAuE;IACvE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;+EAC2E;IAC3E,KAAK,CAAC,EAAE,WAAW,CAAC;IACpB,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAID,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,2BAA2B,QAMxF;AAiCD,eAAO,MAAM,kBAAkB,0JASrB,CAAC"}