@develemit/billing 0.2.0 → 0.3.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Emit Dutcher
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -142,6 +142,7 @@ const shadowedCheckSubscribed = createShadowCheck({
   entitled: (e) =>
     e.status === 'active' || e.status === 'trialing' || e.status === 'grace',
   report: (r) => log.info(r), // injectable sink; ShadowReport
+  onReportError: (e) => log.warn(e), // optional; see note below
   sampleRate: 1, // 0..1, default 1
   timeoutMs: 800, // shadow fetch budget, default 800ms
 });
@@ -165,13 +166,36 @@ Invariants:
 4. `sampleRate` short-circuits before any shadow work — no fetch happens on
    a skipped call.
 
+Invariant 1 holds even when the consumer-supplied callbacks themselves
+throw. A `report` sink that throws (uninitialized logger, circular value
+hitting `JSON.stringify`) is swallowed; so is a `subjectIdFor` mapper that
+throws, which simply means the call can't be shadowed — the legacy check
+still runs and still returns its answer. Both escalate through the optional
+`onReportError`. The alternative — letting an observability-only code path
+break real billing checks — is exactly what shadow mode exists to avoid.
+Without `onReportError` set, both failures are silent, so pass it.
+
 Reading disagreement reports: a `report.agree === false` is only worth
 investigating once you've ruled out two expected, transient causes —
 `shadowFromCache: true` combined with a recent plan change (the cached
 answer just hasn't hit its TTL yet), or a webhook that hasn't landed yet
-after a provider-side change. A shadow_error report (timeout/network/5xx/
-parse) is a health signal for emit-billing itself, not a disagreement — it
-means no shadow answer was obtainable, not that it differed.
+after a provider-side change.
+
+A `shadowError` report is a health signal, not a disagreement — no shadow
+answer was obtainable, so there was nothing to compare. Its `reason`
+separates whose problem it is:
+
+| `reason`          | Points at                                              |
+| ----------------- | ------------------------------------------------------ |
+| `timeout`         | emit-billing slow, or `timeoutMs` set too tight        |
+| `network`         | transport — DNS, connection refused, TLS               |
+| `http_error`      | emit-billing returned a non-2xx                        |
+| `parse_error`     | response didn't match the expected schema              |
+| `predicate_error` | **your** `entitled()` callback threw, not emit-billing |
+
+Latency is measured with `performance.now()`, so `shadowLatencyMs` keeps
+sub-millisecond resolution — a cache-served shadow read reports e.g. `0.1`
+rather than a flat `0` that's indistinguishable from "never measured."
 
 ## Behavior
 
@@ -183,6 +207,14 @@ means no shadow answer was obtainable, not that it differed.
   key, validation) — staleness never masks misconfiguration.
 - `createCheckout`, `portalUrl`, and `getSubscription` always call the API
   and throw `BillingApiError` on any failure.
+- `startTrial({ subjectId, feature, durationDays? })` grants a time-boxed,
+  card-less trial entitlement for a subject in your own project (default 7
+  days, capped at 31) — no Stripe subscription involved; the entitlement
+  simply stops at `expiresAt`. One trial ever per subject+feature: repeat
+  calls return the original grant with `created: false`, even after it has
+  expired, so retried signups can't stack or restart a trial. A successful
+  call drops that subject's cached entitlements so the next
+  `getEntitlements` reflects the grant immediately.
 - Every failure is a `BillingApiError` with `status` and `code`. Network
   failures use `status: 0, code: 'network_error'` so callers can tell
   "billing is unreachable" apart from "request was denied".

package/dist/{chunk-3OSJ6UJT.js → chunk-YQNTE5Q6.js}

@@ -84,7 +84,8 @@ var replayOutcomeSchema = z.enum([
   "invalid",
   "unknown_subscription",
   "already_processed",
-  "error"
+  "error",
+  "foreign_project"
 ]);
 var replayResponseSchema = z.object({
   outcome: replayOutcomeSchema
@@ -353,7 +354,12 @@ var adminProjectDashboardResponseSchema = z5.object({
   metrics: projectMetricsSchema,
   monthLabels: z5.array(z5.string()),
   providerKind: z5.string(),
-  plans: z5.array(adminPlanSchema)
+  plans: z5.array(adminPlanSchema),
+  // True when the caller gave no `environment` and the key named more than
+  // one row (sprint 66) — `metrics.environment` was picked by a
+  // deterministic fallback rather than requested explicitly, and the
+  // frontend labels it as such (sprint 68.5).
+  environmentDefaulted: z5.boolean()
 });
 
 // ../shared-types/src/checkout.ts
@@ -402,22 +408,43 @@ var registerProjectRequestSchema = z7.object({
   }
 });
 
-// ../shared-types/src/errors.ts
+// ../shared-types/src/trials.ts
 import { z as z8 } from "zod";
-var errorEnvelopeSchema = z8.object({
-  error: z8.object({
-    code: z8.string(),
-    message: z8.string()
+var MAX_TRIAL_DURATION_DAYS = 31;
+var DEFAULT_TRIAL_DURATION_DAYS = 7;
+var startTrialRequestSchema = z8.object({
+  subjectId: z8.string().min(1),
+  feature: z8.string().min(1),
+  durationDays: z8.number().int().min(1).max(MAX_TRIAL_DURATION_DAYS).default(DEFAULT_TRIAL_DURATION_DAYS)
+});
+var trialGrantSchema = z8.object({
+  id: z8.string(),
+  subjectId: z8.string(),
+  feature: z8.string(),
+  expiresAt: z8.iso.datetime(),
+  createdAt: z8.iso.datetime()
+});
+var startTrialResponseSchema = z8.object({
+  trial: trialGrantSchema,
+  created: z8.boolean()
+});
+
+// ../shared-types/src/errors.ts
+import { z as z9 } from "zod";
+var errorEnvelopeSchema = z9.object({
+  error: z9.object({
+    code: z9.string(),
+    message: z9.string()
   })
 });
 
 // ../shared-types/src/webhook-secret.ts
-import { z as z9 } from "zod";
-var webhookSigningSecretSchema = z9.string().regex(/^whsec_.+/, "must be a non-empty whsec_-prefixed string");
+import { z as z10 } from "zod";
+var webhookSigningSecretSchema = z10.string().regex(/^whsec_.+/, "must be a non-empty whsec_-prefixed string");
 
 // ../shared-types/src/portal-return-url.ts
-import { z as z10 } from "zod";
-var portalReturnUrlSchema = z10.url();
+import { z as z11 } from "zod";
+var portalReturnUrlSchema = z11.url();
 
 // src/errors.ts
 var BillingApiError = class extends Error {
@@ -486,10 +513,11 @@ export {
   entitlementsResponseSchema,
   checkoutResponseSchema,
   portalResponseSchema,
+  startTrialResponseSchema,
   BillingApiError,
   errorFromResponse,
   networkError,
   invalidResponseError,
   checkEntitlement
 };
-//# sourceMappingURL=chunk-3OSJ6UJT.js.map
+//# sourceMappingURL=chunk-YQNTE5Q6.js.map

package/dist/chunk-YQNTE5Q6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../shared-types/src/admin.ts","../../shared-types/src/event-log.ts","../../shared-types/src/entitlements.ts","../../shared-types/src/subscriptions.ts","../../shared-types/src/overrides.ts","../../shared-types/src/checkout.ts","../../shared-types/src/projects.ts","../../shared-types/src/trials.ts","../../shared-types/src/errors.ts","../../shared-types/src/webhook-secret.ts","../../shared-types/src/portal-return-url.ts","../src/errors.ts","../src/guard.ts"],"sourcesContent":["import { z } from 'zod';\nimport {\n  adminEventDetailSchema,\n  adminEventSummarySchema,\n  signatureCountSchema,\n  wouldApplySchema,\n} from './event-log.js';\nimport { entitlementsResponseSchema } from './entitlements.js';\nimport { overrideRecordSchema } from './overrides.js';\nimport { subscriptionStatusSchema } from './subscriptions.js';\n\n// Per-project and ecosystem-wide subscription state counts. `grace` is\n// computed (never stored) — see @org/entitlements' resolveAccessStatus.\nexport const stateCountsSchema = z.object({\n  trialing: z.number(),\n  active: z.number(),\n  past_due: z.number(),\n  grace: z.number(),\n  canceled: z.number(),\n  unpaid: z.number(),\n});\nexport type StateCounts = z.infer<typeof stateCountsSchema>;\n\nconst dashboardMetricsSchema = z.object({\n  mrrCents: z.number(),\n  mrrPrevCents: z.number(),\n  subjectsCount: z.number(),\n  states: stateCountsSchema,\n  deadLetterDepth: z.number(),\n  oldestUnprocessedSec: z.number().nullable(),\n  driftCount: z.number(),\n});\n\nexport const projectMetricsSchema = dashboardMetricsSchema.extend({\n  projectId: z.string(),\n  projectKey: z.string(),\n  projectName: z.string(),\n  subjectType: z.string(),\n  environment: z.enum(['test', 'live']),\n  envLocked: z.boolean(),\n  mrrSeries: z.array(z.number()),\n});\nexport type ProjectMetrics = z.infer<typeof projectMetricsSchema>;\n\nexport const adminMetricsResponseSchema = z.object({\n  ecosystem: dashboardMetricsSchema,\n  // Shared x-axis labels for every project's mrrSeries (same calendar\n  // months across the ecosystem) — empty when no project has snapshots yet.\n  monthLabels: z.array(z.string()),\n  projects: z.array(projectMetricsSchema),\n});\nexport type AdminMetricsResponse = z.infer<typeof adminMetricsResponseSchema>;\n\n// Cursor-based (data-display.md's \"Newer / Older\" contract): the page query\n// and the approximate total are the only two things a caller needs — no\n// offset, no page number.\nexport const adminEventsListResponseSchema = z.object({\n  events: z.array(adminEventSummarySchema),\n  nextCursor: z.string().nullable(),\n  approxTotal: z.number(),\n  signatureCounts: z.array(signatureCountSchema).optional(),\n});\nexport type AdminEventsListResponse = z.infer<\n  typeof adminEventsListResponseSchema\n>;\n\nexport const adminEventDetailResponseSchema = z.object({\n  event: adminEventDetailSchema,\n  transition: z.object({\n    current: z\n      .object({\n        state: subscriptionStatusSchema.exclude(['grace', 'none']),\n        lastEventAt: z.iso.datetime().nullable(),\n      })\n      .nullable(),\n    wouldApply: wouldApplySchema,\n  }),\n});\nexport type AdminEventDetailResponse = z.infer<\n  typeof adminEventDetailResponseSchema\n>;\n\nexport const adminSubjectSchema = z.object({\n  id: z.string(),\n  subjectType: z.string(),\n  externalId: z.string(),\n  providerCustomerId: z.string().nullable(),\n});\nexport type AdminSubject = z.infer<typeof adminSubjectSchema>;\n\n// Grants are the raw material entitlements are computed from (sprints\n// 12-14): a boolean flag or a numeric limit, keyed by feature name.\nexport const featureGrantsSchema = z.record(\n  z.string(),\n  z.union([z.boolean(), z.number()]),\n);\nexport type AdminFeatureGrants = z.infer<typeof featureGrantsSchema>;\n\n// The subject's most recent subscription's plan, independent of whether\n// that subscription currently grants access (unlike entitlements.plan,\n// which is null exactly when it doesn't) — sprint 40's plan-aware comp\n// reads this to restore the plan's real grants rather than a synthetic\n// flag. priceInterval is null when the plan has no price to derive one\n// from; comp falls back to a fixed cycle length in that case.\nexport const adminSubjectSubscriptionPlanSchema = z.object({\n  key: z.string(),\n  featureGrants: featureGrantsSchema,\n  priceInterval: z.enum(['month', 'year']).nullable(),\n});\nexport type AdminSubjectSubscriptionPlan = z.infer<\n  typeof adminSubjectSubscriptionPlanSchema\n>;\n\nexport const adminSubjectLookupResponseSchema = z.object({\n  subject: adminSubjectSchema,\n  entitlements: entitlementsResponseSchema,\n  recentEvents: z.array(adminEventSummarySchema),\n  activeOverrides: z.array(overrideRecordSchema),\n  subscriptionPlan: adminSubjectSubscriptionPlanSchema.nullable(),\n});\nexport type AdminSubjectLookupResponse = z.infer<\n  typeof adminSubjectLookupResponseSchema\n>;\n\nexport const adminPriceSchema = z.object({\n  id: z.string(),\n  interval: z.enum(['month', 'year']),\n  currency: z.string(),\n  unitAmountCents: z.number(),\n  syncStatus: z.enum(['synced', 'pending', 'drifted']),\n  syncedUnitAmountCents: z.number().nullable(),\n});\nexport type AdminPrice = z.infer<typeof adminPriceSchema>;\n\nexport const adminPlanSchema = z.object({\n  id: z.string(),\n  key: z.string(),\n  name: z.string(),\n  featureGrants: featureGrantsSchema,\n  activeSubscriptions: z.number(),\n  prices: z.array(adminPriceSchema),\n});\nexport type AdminPlan = z.infer<typeof adminPlanSchema>;\n\n// Statement descriptors are project-level, not per-plan (packages/db's\n// projects table), but the plan editor screen renders and edits the field\n// alongside the plans it applies to — so the response carries the project's\n// resolved descriptor config as a sibling of the plan list, not duplicated\n// per plan.\nexport const adminPlansResponseSchema = z.object({\n  project: z.object({\n    statementDescriptor: z.string().nullable(),\n    statementDescriptorPrefix: z.string().nullable(),\n  }),\n  plans: z.array(adminPlanSchema),\n});\nexport type AdminPlansResponse = z.infer<typeof adminPlansResponseSchema>;\n\n// Never the raw secret — masked to last-4 (or null if never configured).\nexport const adminProviderResponseSchema = z.object({\n  projectId: z.string(),\n  providerKind: z.string(),\n  environment: z.enum(['test', 'live']),\n  envLocked: z.boolean(),\n  secretKeyMasked: z.string().nullable(),\n  publishableKeyMasked: z.string().nullable(),\n  webhookEndpoint: z.string(),\n  webhookSigningConfigured: z.boolean(),\n  defaultPortalReturnUrl: z.string().nullable(),\n});\nexport type AdminProviderResponse = z.infer<typeof adminProviderResponseSchema>;\n\n// The overrides domain has no project_id column of its own (project scope\n// comes from a join through subjects), so the admin service tags each entry\n// with its project as it assembles the cross-project audit response.\nexport const adminAuditEntrySchema = overrideRecordSchema.extend({\n  projectId: z.string(),\n});\nexport type AdminAuditEntry = z.infer<typeof adminAuditEntrySchema>;\n\nexport const adminAuditResponseSchema = z.object({\n  entries: z.array(adminAuditEntrySchema),\n  nextCursor: z.string().nullable(),\n  approxTotal: z.number(),\n});\nexport type AdminAuditResponse = z.infer<typeof adminAuditResponseSchema>;\n\n// Parallel arrays, not one row per day, to match EventThroughput's own prop\n// shape (data-display.md chart 3) — the web layer passes these straight\n// through without reshaping.\nexport const adminThroughputResponseSchema = z.object({\n  days: z.array(z.string()),\n  processed: z.array(z.number()),\n  failed: z.array(z.number()),\n});\nexport type AdminThroughputResponse = z.infer<\n  typeof adminThroughputResponseSchema\n>;\n\n// No historical snapshot table exists for plan mix (unlike MRR's\n// mrr_snapshots — see packages/db/src/schema/mrr-snapshots.ts's own note\n// that nothing populates it beyond the dev seed). Sprint 38 scopes this to\n// the current month only rather than inventing a snapshot table: `months`\n// and `stacks` always carry exactly one entry.\nexport const adminPlanMixResponseSchema = z.object({\n  months: z.array(z.string()),\n  plans: z.array(z.object({ key: z.string(), name: z.string() })),\n  stacks: z.array(z.array(z.number())),\n});\nexport type AdminPlanMixResponse = z.infer<typeof adminPlanMixResponseSchema>;\n\n// (project_id, error_signature) GROUP BY over the full dead-letter queue —\n// distinct from signatureCountSchema (event-log.ts), which groups by\n// signature alone within one already-project-scoped page and can't tell two\n// projects' identical error text apart.\nexport const adminDeadLetterGroupSchema = z.object({\n  projectId: z.string(),\n  signature: z.string(),\n  count: z.number(),\n  sampleEventId: z.string(),\n  firstReceivedAt: z.iso.datetime(),\n  lastReceivedAt: z.iso.datetime(),\n});\nexport type AdminDeadLetterGroup = z.infer<typeof adminDeadLetterGroupSchema>;\n\nexport const adminDeadLetterGroupsResponseSchema = z.object({\n  groups: z.array(adminDeadLetterGroupSchema),\n});\nexport type AdminDeadLetterGroupsResponse = z.infer<\n  typeof adminDeadLetterGroupsResponseSchema\n>;\n\n// One project's full overview-card payload in a single round trip — the\n// scoped counterpart to adminMetricsResponseSchema's all-projects bundle,\n// for screens that only ever render one project (project-overview.tsx).\nexport const adminProjectDashboardResponseSchema = z.object({\n  metrics: projectMetricsSchema,\n  monthLabels: z.array(z.string()),\n  providerKind: z.string(),\n  plans: z.array(adminPlanSchema),\n  // True when the caller gave no `environment` and the key named more than\n  // one row (sprint 66) — `metrics.environment` was picked by a\n  // deterministic fallback rather than requested explicitly, and the\n  // frontend labels it as such (sprint 68.5).\n  environmentDefaulted: z.boolean(),\n});\nexport type AdminProjectDashboardResponse = z.infer<\n  typeof adminProjectDashboardResponseSchema\n>;\n","import { z } from 'zod';\n\nexport const eventStatusSchema = z.enum([\n  'received',\n  'processed',\n  'failed',\n  'dead_letter',\n  'discarded',\n]);\nexport type EventStatus = z.infer<typeof eventStatusSchema>;\n\n// Matches @org/db's subscription_state enum — the five states the state\n// machine actually stores, not the computed 'grace'/'none' views.\nexport const subscriptionStateSchema = z.enum([\n  'trialing',\n  'active',\n  'past_due',\n  'canceled',\n  'unpaid',\n]);\nexport type SubscriptionStateContract = z.infer<typeof subscriptionStateSchema>;\n\nexport const adminEventSummarySchema = z.object({\n  id: z.string(),\n  projectId: z.string(),\n  providerEventId: z.string(),\n  type: z.string(),\n  status: eventStatusSchema,\n  attempts: z.number(),\n  lastError: z.string().nullable(),\n  errorSignature: z.string().nullable(),\n  receivedAt: z.iso.datetime(),\n  processedAt: z.iso.datetime().nullable(),\n  // event_log has no subject/customer reference column (sprint 24's\n  // repo-drizzle-subjects.ts documents the same gap the other direction) —\n  // derived from the raw Stripe payload's well-known `data.object.customer`\n  // path, so this is null for any non-Stripe-shaped payload.\n  subjectRef: z.string().nullable(),\n});\nexport type AdminEventSummary = z.infer<typeof adminEventSummarySchema>;\n\nexport const adminEventDetailSchema = adminEventSummarySchema.extend({\n  payload: z.record(z.string(), z.unknown()),\n  discardReason: z.string().nullable(),\n  discardedBy: z.string().nullable(),\n  discardedAt: z.iso.datetime().nullable(),\n});\nexport type AdminEventDetail = z.infer<typeof adminEventDetailSchema>;\n\nexport const signatureCountSchema = z.object({\n  signature: z.string(),\n  count: z.number(),\n});\nexport type SignatureCount = z.infer<typeof signatureCountSchema>;\n\nexport const listEventsResponseSchema = z.object({\n  events: z.array(adminEventSummarySchema),\n  total: z.number(),\n  limit: z.number(),\n  offset: z.number(),\n  signatureCounts: z.array(signatureCountSchema),\n});\nexport type ListEventsResponse = z.infer<typeof listEventsResponseSchema>;\n\n// Mirrors ApplyResult from apps/api's pure state machine, plus 'error' for\n// when the stored payload itself can't be replayed (e.g. missing provider\n// credentials) — dry-run degrades to this rather than throwing across the\n// HTTP boundary.\nexport const wouldApplySchema = z.discriminatedUnion('kind', [\n  z.object({ kind: z.literal('create'), to: subscriptionStateSchema }),\n  z.object({\n    kind: z.literal('transition'),\n    from: subscriptionStateSchema,\n    to: subscriptionStateSchema,\n  }),\n  z.object({ kind: z.literal('stale') }),\n  z.object({\n    kind: z.literal('invalid'),\n    from: subscriptionStateSchema,\n    to: subscriptionStateSchema,\n  }),\n  z.object({ kind: z.literal('unknown_subscription') }),\n  z.object({ kind: z.literal('noop'), reason: z.string() }),\n  z.object({ kind: z.literal('error'), reason: z.string() }),\n]);\nexport type WouldApply = z.infer<typeof wouldApplySchema>;\n\nexport const dryRunReplayResponseSchema = z.object({\n  event: adminEventDetailSchema,\n  current: z\n    .object({\n      state: subscriptionStateSchema,\n      lastEventAt: z.iso.datetime().nullable(),\n    })\n    .nullable(),\n  wouldApply: wouldApplySchema,\n});\nexport type DryRunReplayResponse = z.infer<typeof dryRunReplayResponseSchema>;\n\nexport const replayOutcomeSchema = z.enum([\n  'created',\n  'transitioned',\n  'stale',\n  'noop',\n  'invalid',\n  'unknown_subscription',\n  'already_processed',\n  'error',\n  'foreign_project',\n]);\n\nexport const replayResponseSchema = z.object({\n  outcome: replayOutcomeSchema,\n});\nexport type ReplayResponse = z.infer<typeof replayResponseSchema>;\n\nexport const discardEventRequestSchema = z.object({\n  actor: z.string().min(1),\n  reason: z.string(),\n});\nexport type DiscardEventRequest = z.infer<typeof discardEventRequestSchema>;\n\n// Operator-triggered, small-N batches (sprint 39): a hard ceiling so a bulk\n// replay can never process an unbounded number of events, whether in one\n// request or paged across several (sprint 48's progress UI). Shared so the\n// api's per-request clamp and the web client's paging loop can't drift.\nexport const BULK_REPLAY_CAP = 200;\n\n// Opaque-enough keyset cursor over (receivedAt, id), mirroring\n// processing-repo.ts's EventCursor — event_log's id is a random uuid, so\n// receivedAt provides the real chronological order and id only breaks ties.\nexport const replayGroupCursorSchema = z.object({\n  receivedAt: z.iso.datetime(),\n  id: z.string(),\n});\nexport type ReplayGroupCursor = z.infer<typeof replayGroupCursorSchema>;\n\n// A group is targeted either by its (project, signature) pair or by \"every\n// dead-lettered event in this project\" — never both, and never neither.\n// cursor/limit are optional so a bare {projectId, errorSignature|all} still\n// replays a single up-to-BULK_REPLAY_CAP batch exactly as before; the web\n// client's progress UI (sprint 48) pages through with them instead.\nexport const replayGroupRequestSchema = z\n  .object({\n    projectId: z.string().min(1),\n    cursor: replayGroupCursorSchema.optional(),\n    limit: z.number().int().positive().optional(),\n  })\n  .and(\n    z.union([\n      z.object({ errorSignature: z.string().min(1) }),\n      z.object({ all: z.literal(true) }),\n    ]),\n  );\nexport type ReplayGroupRequest = z.infer<typeof replayGroupRequestSchema>;\n\nexport const replayGroupOutcomeEntrySchema = z.object({\n  eventId: z.string(),\n  outcome: replayOutcomeSchema,\n});\n\nexport const replayGroupResponseSchema = z.object({\n  outcomes: z.array(replayGroupOutcomeEntrySchema),\n  // Keyed by ProcessOutcome, but zod v4's record needs .partial() semantics\n  // for an exhaustive enum key type, so this stays a plain string map — the\n  // set of possible keys is still exactly replayOutcomeSchema's members.\n  counts: z.record(z.string(), z.number()),\n  // This call's batch (its own limit, or BULK_REPLAY_CAP by default) hit its\n  // ceiling: more matching events remain beyond what was just replayed.\n  // Paging with nextCursor continues; a non-paging caller reads this the\n  // same way it always has, as \"replay again to finish draining it.\"\n  truncated: z.boolean(),\n  nextCursor: replayGroupCursorSchema.nullable(),\n});\nexport type ReplayGroupResponse = z.infer<typeof replayGroupResponseSchema>;\n","import { z } from 'zod';\n\nimport { subscriptionStatusSchema } from './subscriptions.js';\n\n// Additive alongside the aggregate `source` field below (kept for SDK\n// back-compat): every key in `features`/`limits` gets its own entry here,\n// so a caller no longer has to infer per-key provenance by cross-referencing\n// overrides itself.\nexport const entitlementSourcesSchema = z.object({\n  features: z.record(z.string(), z.enum(['subscription', 'override'])),\n  limits: z.record(z.string(), z.enum(['subscription', 'override'])),\n});\nexport type EntitlementSources = z.infer<typeof entitlementSourcesSchema>;\n\nexport const entitlementsResponseSchema = z.object({\n  plan: z.string().nullable(),\n  features: z.record(z.string(), z.boolean()),\n  limits: z.record(z.string(), z.number()),\n  status: subscriptionStatusSchema,\n  source: z.enum(['subscription', 'override', 'none']),\n  sources: entitlementSourcesSchema,\n});\nexport type EntitlementsResponse = z.infer<typeof entitlementsResponseSchema>;\n","import { z } from 'zod';\n\n// `grace` and `none` are computed from @org/db's stored enum + graceDays, never stored themselves.\nexport const subscriptionStatusSchema = z.enum([\n  'trialing',\n  'active',\n  'past_due',\n  'grace',\n  'canceled',\n  'unpaid',\n  'none',\n]);\nexport type SubscriptionStatus = z.infer<typeof subscriptionStatusSchema>;\n\nconst activeSubscriptionViewSchema = z.object({\n  state: subscriptionStatusSchema.exclude(['none']),\n  planKey: z.string(),\n  currentPeriodEnd: z.iso.datetime(),\n  cancelAtPeriodEnd: z.boolean(),\n});\n\nconst noSubscriptionViewSchema = z.object({\n  state: z.literal('none'),\n});\n\nexport const subscriptionViewSchema = z.discriminatedUnion('state', [\n  activeSubscriptionViewSchema,\n  noSubscriptionViewSchema,\n]);\nexport type SubscriptionView = z.infer<typeof subscriptionViewSchema>;\n","import { z } from 'zod';\n\n// Operator vocabulary (matches the dashboard's comp/extend/revoke buttons),\n// distinct from @org/entitlements' internal grant|revoke computation\n// vocabulary — apps/api's overrides domain translates between the two.\nexport const overrideKindSchema = z.enum(['comp', 'extend', 'revoke']);\nexport type OverrideKind = z.infer<typeof overrideKindSchema>;\n\nexport const overrideTargetSchema = z.discriminatedUnion('type', [\n  z.object({ type: z.literal('feature'), feature: z.string().min(1) }),\n  z.object({\n    type: z.literal('limit'),\n    limit: z.string().min(1),\n    value: z.number(),\n  }),\n]);\nexport type OverrideTarget = z.infer<typeof overrideTargetSchema>;\n\nexport const createOverrideRequestSchema = z.object({\n  subjectId: z.string().min(1),\n  kind: overrideKindSchema,\n  target: overrideTargetSchema,\n  actor: z.string().min(1),\n  reason: z.string().min(4),\n  expiresAt: z.iso.datetime().optional(),\n});\nexport type CreateOverrideRequest = z.infer<typeof createOverrideRequestSchema>;\n\n// Multi-target variant: one subject, one kind/actor/reason/expiresAt, several\n// targets applied atomically (e.g. comping every grant key a plan defines) —\n// see apps/api's overrides service for the all-or-nothing guarantee.\nexport const createBulkOverrideRequestSchema = z.object({\n  subjectId: z.string().min(1),\n  kind: overrideKindSchema,\n  targets: z.array(overrideTargetSchema).min(1),\n  actor: z.string().min(1),\n  reason: z.string().min(4),\n  expiresAt: z.iso.datetime().optional(),\n});\nexport type CreateBulkOverrideRequest = z.infer<\n  typeof createBulkOverrideRequestSchema\n>;\n\nexport const overrideRecordSchema = z.object({\n  id: z.string(),\n  subjectId: z.string(),\n  kind: overrideKindSchema,\n  target: overrideTargetSchema,\n  actor: z.string(),\n  reason: z.string(),\n  expiresAt: z.iso.datetime().nullable(),\n  createdAt: z.iso.datetime(),\n});\nexport type OverrideRecord = z.infer<typeof overrideRecordSchema>;\n\nexport const bulkOverrideResponseSchema = z.object({\n  overrides: z.array(overrideRecordSchema),\n});\nexport type BulkOverrideResponse = z.infer<typeof bulkOverrideResponseSchema>;\n\nexport const listOverridesResponseSchema = z.object({\n  overrides: z.array(overrideRecordSchema),\n  total: z.number(),\n  limit: z.number(),\n  offset: z.number(),\n});\nexport type ListOverridesResponse = z.infer<typeof listOverridesResponseSchema>;\n","import { z } from 'zod';\n\nexport const checkoutRequestSchema = z.object({\n  planKey: z.string(),\n  subjectId: z.string(),\n  successUrl: z.url(),\n  cancelUrl: z.url(),\n  email: z.email().optional(),\n});\nexport type CheckoutRequest = z.infer<typeof checkoutRequestSchema>;\n\nexport const checkoutResponseSchema = z.object({\n  url: z.url(),\n});\nexport type CheckoutResponse = z.infer<typeof checkoutResponseSchema>;\n\nexport const portalRequestSchema = z.object({\n  subjectId: z.string(),\n  returnUrl: z.url(),\n});\nexport type PortalRequest = z.infer<typeof portalRequestSchema>;\n\nexport const portalResponseSchema = z.object({\n  url: z.url(),\n});\nexport type PortalResponse = z.infer<typeof portalResponseSchema>;\n","import { z } from 'zod';\n\n// The source of truth for a registration payload's shape — apps/api's\n// projects service validates against this directly (no parallel\n// hand-written type), and the admin UI can reuse it for form validation.\nexport const registerProjectRequestSchema = z\n  .object({\n    key: z.string().trim().min(1, 'is required'),\n    name: z.string().trim().min(1, 'is required'),\n    subjectType: z.string().trim().min(1, 'is required'),\n    environment: z.enum(['test', 'live'], 'must be \"test\" or \"live\"'),\n    envLocked: z.boolean().optional(),\n    providerKind: z.string().trim().min(1, 'is required'),\n    providerSecretKeyRef: z.string().optional(),\n    providerPublishableKeyRef: z.string().optional(),\n    providerPortalConfigRef: z.string().optional(),\n    statementDescriptor: z.string().optional(),\n    statementDescriptorPrefix: z.string().optional(),\n    graceDays: z.number().min(0, 'must be >= 0').optional(),\n    defaultPortalReturnUrl: z.url().optional(),\n  })\n  .superRefine((input, ctx) => {\n    if (!input.statementDescriptor && !input.statementDescriptorPrefix) {\n      ctx.addIssue({\n        code: 'custom',\n        path: ['statementDescriptor'],\n        message: 'statementDescriptor or statementDescriptorPrefix is required',\n      });\n    }\n  });\nexport type RegisterProjectRequest = z.infer<\n  typeof registerProjectRequestSchema\n>;\n","import { z } from 'zod';\n\n// Cap on self-serve trials: a leaked or buggy project key can cost at most\n// one month of entitlement per subject, never a decade.\nexport const MAX_TRIAL_DURATION_DAYS = 31;\nexport const DEFAULT_TRIAL_DURATION_DAYS = 7;\n\nexport const startTrialRequestSchema = z.object({\n  subjectId: z.string().min(1),\n  feature: z.string().min(1),\n  durationDays: z\n    .number()\n    .int()\n    .min(1)\n    .max(MAX_TRIAL_DURATION_DAYS)\n    .default(DEFAULT_TRIAL_DURATION_DAYS),\n});\n// Input (what a consumer sends — durationDays optional) and output (what the\n// route hands the service — durationDays defaulted) diverge here, unlike the\n// other contracts in this package.\nexport type StartTrialRequest = z.input<typeof startTrialRequestSchema>;\nexport type ParsedStartTrialRequest = z.output<typeof startTrialRequestSchema>;\n\nexport const trialGrantSchema = z.object({\n  id: z.string(),\n  subjectId: z.string(),\n  feature: z.string(),\n  expiresAt: z.iso.datetime(),\n  createdAt: z.iso.datetime(),\n});\nexport type TrialGrant = z.infer<typeof trialGrantSchema>;\n\n// `created: false` means a trial already existed for this subject+feature —\n// possibly one that has since expired (expiresAt in the past). A subject gets\n// one trial ever; retries return the original instead of stacking a new one.\nexport const startTrialResponseSchema = z.object({\n  trial: trialGrantSchema,\n  created: z.boolean(),\n});\nexport type StartTrialResponse = z.infer<typeof startTrialResponseSchema>;\n","import { z } from 'zod';\n\nexport const errorEnvelopeSchema = z.object({\n  error: z.object({\n    code: z.string(),\n    message: z.string(),\n  }),\n});\nexport type ErrorEnvelope = z.infer<typeof errorEnvelopeSchema>;\n","import { z } from 'zod';\n\nexport class InvalidWebhookSecretError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'InvalidWebhookSecretError';\n  }\n}\n\n// Stripe generates its own signing secret when a webhook endpoint is\n// created through its dashboard/API — this only validates the shape of a\n// value an operator copies in from there, it never generates one itself.\nconst webhookSigningSecretSchema = z\n  .string()\n  .regex(/^whsec_.+/, 'must be a non-empty whsec_-prefixed string');\n\nexport function resolveWebhookSigningSecret(value: string): string {\n  const result = webhookSigningSecretSchema.safeParse(value);\n  if (!result.success) {\n    throw new InvalidWebhookSecretError(result.error.issues[0].message);\n  }\n  return result.data;\n}\n","import { z } from 'zod';\n\nexport class InvalidPortalReturnUrlError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'InvalidPortalReturnUrlError';\n  }\n}\n\nconst portalReturnUrlSchema = z.url();\n\nexport function resolveDefaultPortalReturnUrl(value: string): string {\n  const result = portalReturnUrlSchema.safeParse(value);\n  if (!result.success) {\n    throw new InvalidPortalReturnUrlError(result.error.issues[0].message);\n  }\n  return result.data;\n}\n","import { errorEnvelopeSchema } from '@org/shared-types';\n\n// Thrown for every failure path — API denials, transport failures, and\n// malformed responses alike — so consumers can branch on `status`/`code`\n// instead of catching different error shapes.\nexport class BillingApiError extends Error {\n  readonly status: number;\n  readonly code: string;\n\n  constructor(status: number, code: string, message: string) {\n    super(message);\n    this.name = 'BillingApiError';\n    this.status = status;\n    this.code = code;\n  }\n}\n\nexport async function errorFromResponse(\n  response: Response,\n): Promise<BillingApiError> {\n  let code = 'unknown_error';\n  let message = `Request failed with status ${response.status}`;\n\n  try {\n    const body: unknown = await response.json();\n    const parsed = errorEnvelopeSchema.safeParse(body);\n    if (parsed.success) {\n      code = parsed.data.error.code;\n      message = parsed.data.error.message;\n    }\n  } catch {\n    // Body wasn't JSON or didn't match the envelope — keep the defaults.\n  }\n\n  return new BillingApiError(response.status, code, message);\n}\n\n// Status 0 distinguishes \"couldn't reach the API\" from a real HTTP response,\n// so middleware (sprint 16) can fail open on outages without also failing\n// open on 4xx denials.\nexport function networkError(cause: unknown): BillingApiError {\n  const message =\n    cause instanceof Error ? cause.message : 'Network request failed';\n  return new BillingApiError(0, 'network_error', message);\n}\n\nexport function invalidResponseError(message: string): BillingApiError {\n  return new BillingApiError(502, 'invalid_response', message);\n}\n","import { BillingApiError } from './errors.js';\nimport type {\n  CheckEntitlementInput,\n  EntitlementsResult,\n  GuardDecision,\n  LimitCheck,\n} from './types.js';\n\nfunction isMisconfiguration(err: unknown): boolean {\n  return (\n    err instanceof BillingApiError && err.status >= 400 && err.status < 500\n  );\n}\n\nfunction decideOnContent(\n  entitlements: EntitlementsResult,\n  feature: string | undefined,\n  limit: LimitCheck | undefined,\n): GuardDecision {\n  if (feature !== undefined) {\n    return entitlements.features[feature]\n      ? { decision: 'allow', entitlements }\n      : { decision: 'deny', reason: `Feature \"${feature}\" is not entitled` };\n  }\n\n  if (limit !== undefined) {\n    const max = entitlements.limits[limit.key];\n    return max !== undefined && limit.usage < max\n      ? { decision: 'allow', entitlements }\n      : { decision: 'deny', reason: `Limit \"${limit.key}\" has been reached` };\n  }\n\n  return { decision: 'allow', entitlements };\n}\n\n// Framework-agnostic orchestration over BillingClient — Fastify (or any\n// other framework) middleware only needs to map GuardDecision to a\n// response. Keep this file free of any framework import.\nexport async function checkEntitlement(\n  input: CheckEntitlementInput,\n): Promise<GuardDecision> {\n  const { client, subjectId, feature, limit, onUnavailable } = input;\n\n  let entitlements: EntitlementsResult;\n  try {\n    entitlements = await client.getEntitlements(subjectId);\n  } catch (err) {\n    if (isMisconfiguration(err)) {\n      const message =\n        err instanceof Error ? err.message : 'Billing request was rejected';\n      return { decision: 'deny', reason: message, misconfigured: true };\n    }\n    return onUnavailable === 'open'\n      ? { decision: 'unavailable-allow' }\n      : { decision: 'unavailable-deny', reason: 'Billing is unavailable' };\n  }\n\n  // Fresh or stale, this is content-based — a stale entitlements payload is\n  // the graceful-degradation path working, not an unavailability case.\n  return decideOnContent(entitlements, feature, limit);\n}\n"],"mappings":";AAAA,SAAS,KAAAA,UAAS;;;ACAlB,SAAS,SAAS;AAEX,IAAM,oBAAoB,EAAE,KAAK;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAKM,IAAM,0BAA0B,EAAE,KAAK;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGM,IAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,IAAI,EAAE,OAAO;AAAA,EACb,WAAW,EAAE,OAAO;AAAA,EACpB,iBAAiB,EAAE,OAAO;AAAA,EAC1B,MAAM,EAAE,OAAO;AAAA,EACf,QAAQ;AAAA,EACR,UAAU,EAAE,OAAO;AAAA,EACnB,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA,EACpC,YAAY,EAAE,IAAI,SAAS;AAAA,EAC3B,aAAa,EAAE,IAAI,SAAS,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKvC,YAAY,EAAE,OAAO,EAAE,SAAS;AAClC,CAAC;AAGM,IAAM,yBAAyB,wBAAwB,OAAO;AAAA,EACnE,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EACzC,eAAe,EAAE,OAAO,EAAE,SAAS;AAAA,EACnC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,aAAa,EAAE,IAAI,SAAS,EAAE,SAAS;AACzC,CAAC;AAGM,IAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,WAAW,EAAE,OAAO;AAAA,EACpB,OAAO,EAAE,OAAO;AAClB,CAAC;AAGM,IAAM,2BAA2B,EAAE,OAAO;AAAA,EAC/C,QAAQ,EAAE,MAAM,uBAAuB;AAAA,EACvC,OAAO,EAAE,OAAO;AAAA,EAChB,OAAO,EAAE,OAAO;AAAA,EAChB,QAAQ,EAAE,OAAO;AAAA,EACjB,iBAAiB,EAAE,MAAM,oBAAoB;AAC/C,CAAC;AAOM,IAAM,mBAAmB,EAAE,mBAAmB,QAAQ;AAAA,EAC3D,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,QAAQ,GAAG,IAAI,wBAAwB,CAAC;AAAA,EACnE,EAAE,OAAO;AAAA,IACP,MAAM,EAAE,QAAQ,YAAY;AAAA,IAC5B,MAAM;AAAA,IACN,IAAI;AAAA,EACN,CAAC;AAAA,EACD,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,OAAO,EAAE,CAAC;AAAA,EACrC,EAAE,OAAO;AAAA,IACP,MAAM,EAAE,QAAQ,SAAS;AAAA,IACzB,MAAM;AAAA,IACN,IAAI;AAAA,EACN,CAAC;AAAA,EACD,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,sBAAsB,EAAE,CAAC;AAAA,EACpD,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,MAAM,GAAG,QAAQ,EAAE,OAAO,EAAE,CAAC;AAAA,EACxD,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,OAAO,GAAG,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC3D,CAAC;AAGM,IAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,OAAO;AAAA,EACP,SAAS,EACN,OAAO;AAAA,IACN,OAAO;AAAA,IACP,aAAa,EAAE,IAAI,SAAS,EAAE,SAAS;AAAA,EACzC,CAAC,EACA,SAAS;AAAA,EACZ,YAAY;AACd,CAAC;AAGM,IAAM,sBAAsB,EAAE,KAAK;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,IAAM,uBAAuB,EAAE,OAAO;AAAA,EAC3C,SAAS;AACX,CAAC;AAGM,IAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,QAAQ,EAAE,OAAO;AACnB,CAAC;AAYM,IAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,YAAY,EAAE,IAAI,SAAS;AAAA,EAC3B,IAAI,EAAE,OAAO;AACf,CAAC;AAQM,IAAM,2BAA2B,EACrC,OAAO;AAAA,EACN,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC3B,QAAQ,wBAAwB,SAAS;AAAA,EACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAC9C,CAAC,EACA;AAAA,EACC,EAAE,MAAM;AAAA,IACN,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;AAAA,IAC9C,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,IAAI,EAAE,CAAC;AAAA,EACnC,CAAC;AACH;AAGK,IAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,SAAS,EAAE,OAAO;AAAA,EAClB,SAAS;AACX,CAAC;AAEM,IAAM,4BAA4B,EAAE,OAAO;AAAA,EAChD,UAAU,EAAE,MAAM,6BAA6B;AAAA;AAAA;AAAA;AAAA,EAI/C,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAKvC,WAAW,EAAE,QAAQ;AAAA,EACrB,YAAY,wBAAwB,SAAS;AAC/C,CAAC;;;AC7KD,SAAS,KAAAC,UAAS;;;ACAlB,SAAS,KAAAC,UAAS;AAGX,IAAM,2BAA2BA,GAAE,KAAK;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGD,IAAM,+BAA+BA,GAAE,OAAO;AAAA,EAC5C,OAAO,yBAAyB,QAAQ,CAAC,MAAM,CAAC;AAAA,EAChD,SAASA,GAAE,OAAO;AAAA,EAClB,kBAAkBA,GAAE,IAAI,SAAS;AAAA,EACjC,mBAAmBA,GAAE,QAAQ;AAC/B,CAAC;AAED,IAAM,2BAA2BA,GAAE,OAAO;AAAA,EACxC,OAAOA,GAAE,QAAQ,MAAM;AACzB,CAAC;AAEM,IAAM,yBAAyBA,GAAE,mBAAmB,SAAS;AAAA,EAClE;AAAA,EACA;AACF,CAAC;;;ADpBM,IAAM,2BAA2BC,GAAE,OAAO;AAAA,EAC/C,UAAUA,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,KAAK,CAAC,gBAAgB,UAAU,CAAC,CAAC;AAAA,EACnE,QAAQA,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,KAAK,CAAC,gBAAgB,UAAU,CAAC,CAAC;AACnE,CAAC;AAGM,IAAM,6BAA6BA,GAAE,OAAO;AAAA,EACjD,MAAMA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,UAAUA,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,QAAQ,CAAC;AAAA,EAC1C,QAAQA,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,OAAO,CAAC;AAAA,EACvC,QAAQ;AAAA,EACR,QAAQA,GAAE,KAAK,CAAC,gBAAgB,YAAY,MAAM,CAAC;AAAA,EACnD,SAAS;AACX,CAAC;;;AErBD,SAAS,KAAAC,UAAS;AAKX,IAAM,qBAAqBA,GAAE,KAAK,CAAC,QAAQ,UAAU,QAAQ,CAAC;AAG9D,IAAM,uBAAuBA,GAAE,mBAAmB,QAAQ;AAAA,EAC/DA,GAAE,OAAO,EAAE,MAAMA,GAAE,QAAQ,SAAS,GAAG,SAASA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;AAAA,EACnEA,GAAE,OAAO;AAAA,IACP,MAAMA,GAAE,QAAQ,OAAO;AAAA,IACvB,OAAOA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACvB,OAAOA,GAAE,OAAO;AAAA,EAClB,CAAC;AACH,CAAC;AAGM,IAAM,8BAA8BA,GAAE,OAAO;AAAA,EAClD,WAAWA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC3B,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,OAAOA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,QAAQA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,WAAWA,GAAE,IAAI,SAAS,EAAE,SAAS;AACvC,CAAC;AAMM,IAAM,kCAAkCA,GAAE,OAAO;AAAA,EACtD,WAAWA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC3B,MAAM;AAAA,EACN,SAASA,GAAE,MAAM,oBAAoB,EAAE,IAAI,CAAC;AAAA,EAC5C,OAAOA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,QAAQA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,WAAWA,GAAE,IAAI,SAAS,EAAE,SAAS;AACvC,CAAC;AAKM,IAAM,uBAAuBA,GAAE,OAAO;AAAA,EAC3C,IAAIA,GAAE,OAAO;AAAA,EACb,WAAWA,GAAE,OAAO;AAAA,EACpB,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,OAAOA,GAAE,OAAO;AAAA,EAChB,QAAQA,GAAE,OAAO;AAAA,EACjB,WAAWA,GAAE,IAAI,SAAS,EAAE,SAAS;AAAA,EACrC,WAAWA,GAAE,IAAI,SAAS;AAC5B,CAAC;AAGM,IAAM,6BAA6BA,GAAE,OAAO;AAAA,EACjD,WAAWA,GAAE,MAAM,oBAAoB;AACzC,CAAC;AAGM,IAAM,8BAA8BA,GAAE,OAAO;AAAA,EAClD,WAAWA,GAAE,MAAM,oBAAoB;AAAA,EACvC,OAAOA,GAAE,OAAO;AAAA,EAChB,OAAOA,GAAE,OAAO;AAAA,EAChB,QAAQA,GAAE,OAAO;AACnB,CAAC;;;AJpDM,IAAM,oBAAoBC,GAAE,OAAO;AAAA,EACxC,UAAUA,GAAE,OAAO;AAAA,EACnB,QAAQA,GAAE,OAAO;AAAA,EACjB,UAAUA,GAAE,OAAO;AAAA,EACnB,OAAOA,GAAE,OAAO;AAAA,EAChB,UAAUA,GAAE,OAAO;AAAA,EACnB,QAAQA,GAAE,OAAO;AACnB,CAAC;AAGD,IAAM,yBAAyBA,GAAE,OAAO;AAAA,EACtC,UAAUA,GAAE,OAAO;AAAA,EACnB,cAAcA,GAAE,OAAO;AAAA,EACvB,eAAeA,GAAE,OAAO;AAAA,EACxB,QAAQ;AAAA,EACR,iBAAiBA,GAAE,OAAO;AAAA,EAC1B,sBAAsBA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,YAAYA,GAAE,OAAO;AACvB,CAAC;AAEM,IAAM,uBAAuB,uBAAuB,OAAO;AAAA,EAChE,WAAWA,GAAE,OAAO;AAAA,EACpB,YAAYA,GAAE,OAAO;AAAA,EACrB,aAAaA,GAAE,OAAO;AAAA,EACtB,aAAaA,GAAE,OAAO;AAAA,EACtB,aAAaA,GAAE,KAAK,CAAC,QAAQ,MAAM,CAAC;AAAA,EACpC,WAAWA,GAAE,QAAQ;AAAA,EACrB,WAAWA,GAAE,MAAMA,GAAE,OAAO,CAAC;AAC/B,CAAC;AAGM,IAAM,6BAA6BA,GAAE,OAAO;AAAA,EACjD,WAAW;AAAA;AAAA;AAAA,EAGX,aAAaA,GAAE,MAAMA,GAAE,OAAO,CAAC;AAAA,EAC/B,UAAUA,GAAE,MAAM,oBAAoB;AACxC,CAAC;AAMM,IAAM,gCAAgCA,GAAE,OAAO;AAAA,EACpD,QAAQA,GAAE,MAAM,uBAAuB;AAAA,EACvC,YAAYA,GAAE,OAAO,EAAE,SAAS;AAAA,EAChC,aAAaA,GAAE,OAAO;AAAA,EACtB,iBAAiBA,GAAE,MAAM,oBAAoB,EAAE,SAAS;AAC1D,CAAC;AAKM,IAAM,iCAAiCA,GAAE,OAAO;AAAA,EACrD,OAAO;AAAA,EACP,YAAYA,GAAE,OAAO;AAAA,IACnB,SAASA,GACN,OAAO;AAAA,MACN,OAAO,yBAAyB,QAAQ,CAAC,SAAS,MAAM,CAAC;AAAA,MACzD,aAAaA,GAAE,IAAI,SAAS,EAAE,SAAS;AAAA,IACzC,CAAC,EACA,SAAS;AAAA,IACZ,YAAY;AAAA,EACd,CAAC;AACH,CAAC;AAKM,IAAM,qBAAqBA,GAAE,OAAO;AAAA,EACzC,IAAIA,GAAE,OAAO;AAAA,EACb,aAAaA,GAAE,OAAO;AAAA,EACtB,YAAYA,GAAE,OAAO;AAAA,EACrB,oBAAoBA,GAAE,OAAO,EAAE,SAAS;AAC1C,CAAC;AAKM,IAAM,sBAAsBA,GAAE;AAAA,EACnCA,GAAE,OAAO;AAAA,EACTA,GAAE,MAAM,CAACA,GAAE,QAAQ,GAAGA,GAAE,OAAO,CAAC,CAAC;AACnC;AASO,IAAM,qCAAqCA,GAAE,OAAO;AAAA,EACzD,KAAKA,GAAE,OAAO;AAAA,EACd,eAAe;AAAA,EACf,eAAeA,GAAE,KAAK,CAAC,SAAS,MAAM,CAAC,EAAE,SAAS;AACpD,CAAC;AAKM,IAAM,mCAAmCA,GAAE,OAAO;AAAA,EACvD,SAAS;AAAA,EACT,cAAc;AAAA,EACd,cAAcA,GAAE,MAAM,uBAAuB;AAAA,EAC7C,iBAAiBA,GAAE,MAAM,oBAAoB;AAAA,EAC7C,kBAAkB,mCAAmC,SAAS;AAChE,CAAC;AAKM,IAAM,mBAAmBA,GAAE,OAAO;AAAA,EACvC,IAAIA,GAAE,OAAO;AAAA,EACb,UAAUA,GAAE,KAAK,CAAC,SAAS,MAAM,CAAC;AAAA,EAClC,UAAUA,GAAE,OAAO;AAAA,EACnB,iBAAiBA,GAAE,OAAO;AAAA,EAC1B,YAAYA,GAAE,KAAK,CAAC,UAAU,WAAW,SAAS,CAAC;AAAA,EACnD,uBAAuBA,GAAE,OAAO,EAAE,SAAS;AAC7C,CAAC;AAGM,IAAM,kBAAkBA,GAAE,OAAO;AAAA,EACtC,IAAIA,GAAE,OAAO;AAAA,EACb,KAAKA,GAAE,OAAO;AAAA,EACd,MAAMA,GAAE,OAAO;AAAA,EACf,eAAe;AAAA,EACf,qBAAqBA,GAAE,OAAO;AAAA,EAC9B,QAAQA,GAAE,MAAM,gBAAgB;AAClC,CAAC;AAQM,IAAM,2BAA2BA,GAAE,OAAO;AAAA,EAC/C,SAASA,GAAE,OAAO;AAAA,IAChB,qBAAqBA,GAAE,OAAO,EAAE,SAAS;AAAA,IACzC,2BAA2BA,GAAE,OAAO,EAAE,SAAS;AAAA,EACjD,CAAC;AAAA,EACD,OAAOA,GAAE,MAAM,eAAe;AAChC,CAAC;AAIM,IAAM,8BAA8BA,GAAE,OAAO;AAAA,EAClD,WAAWA,GAAE,OAAO;AAAA,EACpB,cAAcA,GAAE,OAAO;AAAA,EACvB,aAAaA,GAAE,KAAK,CAAC,QAAQ,MAAM,CAAC;AAAA,EACpC,WAAWA,GAAE,QAAQ;AAAA,EACrB,iBAAiBA,GAAE,OAAO,EAAE,SAAS;AAAA,EACrC,sBAAsBA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,iBAAiBA,GAAE,OAAO;AAAA,EAC1B,0BAA0BA,GAAE,QAAQ;AAAA,EACpC,wBAAwBA,GAAE,OAAO,EAAE,SAAS;AAC9C,CAAC;AAMM,IAAM,wBAAwB,qBAAqB,OAAO;AAAA,EAC/D,WAAWA,GAAE,OAAO;AACtB,CAAC;AAGM,IAAM,2BAA2BA,GAAE,OAAO;AAAA,EAC/C,SAASA,GAAE,MAAM,qBAAqB;AAAA,EACtC,YAAYA,GAAE,OAAO,EAAE,SAAS;AAAA,EAChC,aAAaA,GAAE,OAAO;AACxB,CAAC;AAMM,IAAM,gCAAgCA,GAAE,OAAO;AAAA,EACpD,MAAMA,GAAE,MAAMA,GAAE,OAAO,CAAC;AAAA,EACxB,WAAWA,GAAE,MAAMA,GAAE,OAAO,CAAC;AAAA,EAC7B,QAAQA,GAAE,MAAMA,GAAE,OAAO,CAAC;AAC5B,CAAC;AAUM,IAAM,6BAA6BA,GAAE,OAAO;AAAA,EACjD,QAAQA,GAAE,MAAMA,GAAE,OAAO,CAAC;AAAA,EAC1B,OAAOA,GAAE,MAAMA,GAAE,OAAO,EAAE,KAAKA,GAAE,OAAO,GAAG,MAAMA,GAAE,OAAO,EAAE,CAAC,CAAC;AAAA,EAC9D,QAAQA,GAAE,MAAMA,GAAE,MAAMA,GAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAOM,IAAM,6BAA6BA,GAAE,OAAO;AAAA,EACjD,WAAWA,GAAE,OAAO;AAAA,EACpB,WAAWA,GAAE,OAAO;AAAA,EACpB,OAAOA,GAAE,OAAO;AAAA,EAChB,eAAeA,GAAE,OAAO;AAAA,EACxB,iBAAiBA,GAAE,IAAI,SAAS;AAAA,EAChC,gBAAgBA,GAAE,IAAI,SAAS;AACjC,CAAC;AAGM,IAAM,sCAAsCA,GAAE,OAAO;AAAA,EAC1D,QAAQA,GAAE,MAAM,0BAA0B;AAC5C,CAAC;AAQM,IAAM,sCAAsCA,GAAE,OAAO;AAAA,EAC1D,SAAS;AAAA,EACT,aAAaA,GAAE,MAAMA,GAAE,OAAO,CAAC;AAAA,EAC/B,cAAcA,GAAE,OAAO;AAAA,EACvB,OAAOA,GAAE,MAAM,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA,EAK9B,sBAAsBA,GAAE,QAAQ;AAClC,CAAC;;;AKrPD,SAAS,KAAAC,UAAS;AAEX,IAAM,wBAAwBA,GAAE,OAAO;AAAA,EAC5C,SAASA,GAAE,OAAO;AAAA,EAClB,WAAWA,GAAE,OAAO;AAAA,EACpB,YAAYA,GAAE,IAAI;AAAA,EAClB,WAAWA,GAAE,IAAI;AAAA,EACjB,OAAOA,GAAE,MAAM,EAAE,SAAS;AAC5B,CAAC;AAGM,IAAM,yBAAyBA,GAAE,OAAO;AAAA,EAC7C,KAAKA,GAAE,IAAI;AACb,CAAC;AAGM,IAAM,sBAAsBA,GAAE,OAAO;AAAA,EAC1C,WAAWA,GAAE,OAAO;AAAA,EACpB,WAAWA,GAAE,IAAI;AACnB,CAAC;AAGM,IAAM,uBAAuBA,GAAE,OAAO;AAAA,EAC3C,KAAKA,GAAE,IAAI;AACb,CAAC;;;ACxBD,SAAS,KAAAC,UAAS;AAKX,IAAM,+BAA+BA,GACzC,OAAO;AAAA,EACN,KAAKA,GAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,aAAa;AAAA,EAC3C,MAAMA,GAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,aAAa;AAAA,EAC5C,aAAaA,GAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,aAAa;AAAA,EACnD,aAAaA,GAAE,KAAK,CAAC,QAAQ,MAAM,GAAG,0BAA0B;AAAA,EAChE,WAAWA,GAAE,QAAQ,EAAE,SAAS;AAAA,EAChC,cAAcA,GAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,aAAa;AAAA,EACpD,sBAAsBA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,2BAA2BA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC/C,yBAAyBA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC7C,qBAAqBA,GAAE,OAAO,EAAE,SAAS;AAAA,EACzC,2BAA2BA,GAAE,OAAO,EAAE,SAAS;AAAA,EAC/C,WAAWA,GAAE,OAAO,EAAE,IAAI,GAAG,cAAc,EAAE,SAAS;AAAA,EACtD,wBAAwBA,GAAE,IAAI,EAAE,SAAS;AAC3C,CAAC,EACA,YAAY,CAAC,OAAO,QAAQ;AAC3B,MAAI,CAAC,MAAM,uBAAuB,CAAC,MAAM,2BAA2B;AAClE,QAAI,SAAS;AAAA,MACX,MAAM;AAAA,MACN,MAAM,CAAC,qBAAqB;AAAA,MAC5B,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF,CAAC;;;AC7BH,SAAS,KAAAC,UAAS;AAIX,IAAM,0BAA0B;AAChC,IAAM,8BAA8B;AAEpC,IAAM,0BAA0BA,GAAE,OAAO;AAAA,EAC9C,WAAWA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC3B,SAASA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACzB,cAAcA,GACX,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,uBAAuB,EAC3B,QAAQ,2BAA2B;AACxC,CAAC;AAOM,IAAM,mBAAmBA,GAAE,OAAO;AAAA,EACvC,IAAIA,GAAE,OAAO;AAAA,EACb,WAAWA,GAAE,OAAO;AAAA,EACpB,SAASA,GAAE,OAAO;AAAA,EAClB,WAAWA,GAAE,IAAI,SAAS;AAAA,EAC1B,WAAWA,GAAE,IAAI,SAAS;AAC5B,CAAC;AAMM,IAAM,2BAA2BA,GAAE,OAAO;AAAA,EAC/C,OAAO;AAAA,EACP,SAASA,GAAE,QAAQ;AACrB,CAAC;;;ACtCD,SAAS,KAAAC,UAAS;AAEX,IAAM,sBAAsBA,GAAE,OAAO;AAAA,EAC1C,OAAOA,GAAE,OAAO;AAAA,IACd,MAAMA,GAAE,OAAO;AAAA,IACf,SAASA,GAAE,OAAO;AAAA,EACpB,CAAC;AACH,CAAC;;;ACPD,SAAS,KAAAC,WAAS;AAYlB,IAAM,6BAA6BC,IAChC,OAAO,EACP,MAAM,aAAa,4CAA4C;;;ACdlE,SAAS,KAAAC,WAAS;AASlB,IAAM,wBAAwBC,IAAE,IAAI;;;ACJ7B,IAAM,kBAAN,cAA8B,MAAM;AAAA,EAChC;AAAA,EACA;AAAA,EAET,YAAY,QAAgB,MAAc,SAAiB;AACzD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,OAAO;AAAA,EACd;AACF;AAEA,eAAsB,kBACpB,UAC0B;AAC1B,MAAI,OAAO;AACX,MAAI,UAAU,8BAA8B,SAAS,MAAM;AAE3D,MAAI;AACF,UAAM,OAAgB,MAAM,SAAS,KAAK;AAC1C,UAAM,SAAS,oBAAoB,UAAU,IAAI;AACjD,QAAI,OAAO,SAAS;AAClB,aAAO,OAAO,KAAK,MAAM;AACzB,gBAAU,OAAO,KAAK,MAAM;AAAA,IAC9B;AAAA,EACF,QAAQ;AAAA,EAER;AAEA,SAAO,IAAI,gBAAgB,SAAS,QAAQ,MAAM,OAAO;AAC3D;AAKO,SAAS,aAAa,OAAiC;AAC5D,QAAM,UACJ,iBAAiB,QAAQ,MAAM,UAAU;AAC3C,SAAO,IAAI,gBAAgB,GAAG,iBAAiB,OAAO;AACxD;AAEO,SAAS,qBAAqB,SAAkC;AACrE,SAAO,IAAI,gBAAgB,KAAK,oBAAoB,OAAO;AAC7D;;;ACxCA,SAAS,mBAAmB,KAAuB;AACjD,SACE,eAAe,mBAAmB,IAAI,UAAU,OAAO,IAAI,SAAS;AAExE;AAEA,SAAS,gBACP,cACA,SACA,OACe;AACf,MAAI,YAAY,QAAW;AACzB,WAAO,aAAa,SAAS,OAAO,IAChC,EAAE,UAAU,SAAS,aAAa,IAClC,EAAE,UAAU,QAAQ,QAAQ,YAAY,OAAO,oBAAoB;AAAA,EACzE;AAEA,MAAI,UAAU,QAAW;AACvB,UAAM,MAAM,aAAa,OAAO,MAAM,GAAG;AACzC,WAAO,QAAQ,UAAa,MAAM,QAAQ,MACtC,EAAE,UAAU,SAAS,aAAa,IAClC,EAAE,UAAU,QAAQ,QAAQ,UAAU,MAAM,GAAG,qBAAqB;AAAA,EAC1E;AAEA,SAAO,EAAE,UAAU,SAAS,aAAa;AAC3C;AAKA,eAAsB,iBACpB,OACwB;AACxB,QAAM,EAAE,QAAQ,WAAW,SAAS,OAAO,cAAc,IAAI;AAE7D,MAAI;AACJ,MAAI;AACF,mBAAe,MAAM,OAAO,gBAAgB,SAAS;AAAA,EACvD,SAAS,KAAK;AACZ,QAAI,mBAAmB,GAAG,GAAG;AAC3B,YAAM,UACJ,eAAe,QAAQ,IAAI,UAAU;AACvC,aAAO,EAAE,UAAU,QAAQ,QAAQ,SAAS,eAAe,KAAK;AAAA,IAClE;AACA,WAAO,kBAAkB,SACrB,EAAE,UAAU,oBAAoB,IAChC,EAAE,UAAU,oBAAoB,QAAQ,yBAAyB;AAAA,EACvE;AAIA,SAAO,gBAAgB,cAAc,SAAS,KAAK;AACrD;","names":["z","z","z","z","z","z","z","z","z","z","z","z","z","z"]}

package/dist/fastify.cjs

@@ -110,7 +110,8 @@ var replayOutcomeSchema = import_zod.z.enum([
   "invalid",
   "unknown_subscription",
   "already_processed",
-  "error"
+  "error",
+  "foreign_project"
 ]);
 var replayResponseSchema = import_zod.z.object({
   outcome: replayOutcomeSchema
@@ -379,7 +380,12 @@ var adminProjectDashboardResponseSchema = import_zod5.z.object({
   metrics: projectMetricsSchema,
   monthLabels: import_zod5.z.array(import_zod5.z.string()),
   providerKind: import_zod5.z.string(),
-  plans: import_zod5.z.array(adminPlanSchema)
+  plans: import_zod5.z.array(adminPlanSchema),
+  // True when the caller gave no `environment` and the key named more than
+  // one row (sprint 66) — `metrics.environment` was picked by a
+  // deterministic fallback rather than requested explicitly, and the
+  // frontend labels it as such (sprint 68.5).
+  environmentDefaulted: import_zod5.z.boolean()
 });
 
 // ../shared-types/src/checkout.ts
@@ -428,22 +434,43 @@ var registerProjectRequestSchema = import_zod7.z.object({
   }
 });
 
-// ../shared-types/src/errors.ts
+// ../shared-types/src/trials.ts
 var import_zod8 = require("zod");
-var errorEnvelopeSchema = import_zod8.z.object({
-  error: import_zod8.z.object({
-    code: import_zod8.z.string(),
-    message: import_zod8.z.string()
+var MAX_TRIAL_DURATION_DAYS = 31;
+var DEFAULT_TRIAL_DURATION_DAYS = 7;
+var startTrialRequestSchema = import_zod8.z.object({
+  subjectId: import_zod8.z.string().min(1),
+  feature: import_zod8.z.string().min(1),
+  durationDays: import_zod8.z.number().int().min(1).max(MAX_TRIAL_DURATION_DAYS).default(DEFAULT_TRIAL_DURATION_DAYS)
+});
+var trialGrantSchema = import_zod8.z.object({
+  id: import_zod8.z.string(),
+  subjectId: import_zod8.z.string(),
+  feature: import_zod8.z.string(),
+  expiresAt: import_zod8.z.iso.datetime(),
+  createdAt: import_zod8.z.iso.datetime()
+});
+var startTrialResponseSchema = import_zod8.z.object({
+  trial: trialGrantSchema,
+  created: import_zod8.z.boolean()
+});
+
+// ../shared-types/src/errors.ts
+var import_zod9 = require("zod");
+var errorEnvelopeSchema = import_zod9.z.object({
+  error: import_zod9.z.object({
+    code: import_zod9.z.string(),
+    message: import_zod9.z.string()
   })
 });
 
 // ../shared-types/src/webhook-secret.ts
-var import_zod9 = require("zod");
-var webhookSigningSecretSchema = import_zod9.z.string().regex(/^whsec_.+/, "must be a non-empty whsec_-prefixed string");
+var import_zod10 = require("zod");
+var webhookSigningSecretSchema = import_zod10.z.string().regex(/^whsec_.+/, "must be a non-empty whsec_-prefixed string");
 
 // ../shared-types/src/portal-return-url.ts
-var import_zod10 = require("zod");
-var portalReturnUrlSchema = import_zod10.z.url();
+var import_zod11 = require("zod");
+var portalReturnUrlSchema = import_zod11.z.url();
 
 // src/errors.ts
 var BillingApiError = class extends Error {

package/dist/fastify.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/fastify.ts","../../shared-types/src/admin.ts","../../shared-types/src/event-log.ts","../../shared-types/src/entitlements.ts","../../shared-types/src/subscriptions.ts","../../shared-types/src/overrides.ts","../../shared-types/src/checkout.ts","../../shared-types/src/projects.ts","../../shared-types/src/errors.ts","../../shared-types/src/webhook-secret.ts","../../shared-types/src/portal-return-url.ts","../src/errors.ts","../src/guard.ts","../src/middleware.ts"],"sourcesContent":["export { default as billingGuardPlugin } from './middleware.js';\nexport type {\n  BillingGuardPluginOptions,\n  RouteGuardOptions,\n} from './fastify-types.js';\n","import { z } from 'zod';\nimport {\n  adminEventDetailSchema,\n  adminEventSummarySchema,\n  signatureCountSchema,\n  wouldApplySchema,\n} from './event-log.js';\nimport { entitlementsResponseSchema } from './entitlements.js';\nimport { overrideRecordSchema } from './overrides.js';\nimport { subscriptionStatusSchema } from './subscriptions.js';\n\n// Per-project and ecosystem-wide subscription state counts. `grace` is\n// computed (never stored) — see @org/entitlements' resolveAccessStatus.\nexport const stateCountsSchema = z.object({\n  trialing: z.number(),\n  active: z.number(),\n  past_due: z.number(),\n  grace: z.number(),\n  canceled: z.number(),\n  unpaid: z.number(),\n});\nexport type StateCounts = z.infer<typeof stateCountsSchema>;\n\nconst dashboardMetricsSchema = z.object({\n  mrrCents: z.number(),\n  mrrPrevCents: z.number(),\n  subjectsCount: z.number(),\n  states: stateCountsSchema,\n  deadLetterDepth: z.number(),\n  oldestUnprocessedSec: z.number().nullable(),\n  driftCount: z.number(),\n});\n\nexport const projectMetricsSchema = dashboardMetricsSchema.extend({\n  projectId: z.string(),\n  projectKey: z.string(),\n  projectName: z.string(),\n  subjectType: z.string(),\n  environment: z.enum(['test', 'live']),\n  envLocked: z.boolean(),\n  mrrSeries: z.array(z.number()),\n});\nexport type ProjectMetrics = z.infer<typeof projectMetricsSchema>;\n\nexport const adminMetricsResponseSchema = z.object({\n  ecosystem: dashboardMetricsSchema,\n  // Shared x-axis labels for every project's mrrSeries (same calendar\n  // months across the ecosystem) — empty when no project has snapshots yet.\n  monthLabels: z.array(z.string()),\n  projects: z.array(projectMetricsSchema),\n});\nexport type AdminMetricsResponse = z.infer<typeof adminMetricsResponseSchema>;\n\n// Cursor-based (data-display.md's \"Newer / Older\" contract): the page query\n// and the approximate total are the only two things a caller needs — no\n// offset, no page number.\nexport const adminEventsListResponseSchema = z.object({\n  events: z.array(adminEventSummarySchema),\n  nextCursor: z.string().nullable(),\n  approxTotal: z.number(),\n  signatureCounts: z.array(signatureCountSchema).optional(),\n});\nexport type AdminEventsListResponse = z.infer<\n  typeof adminEventsListResponseSchema\n>;\n\nexport const adminEventDetailResponseSchema = z.object({\n  event: adminEventDetailSchema,\n  transition: z.object({\n    current: z\n      .object({\n        state: subscriptionStatusSchema.exclude(['grace', 'none']),\n        lastEventAt: z.iso.datetime().nullable(),\n      })\n      .nullable(),\n    wouldApply: wouldApplySchema,\n  }),\n});\nexport type AdminEventDetailResponse = z.infer<\n  typeof adminEventDetailResponseSchema\n>;\n\nexport const adminSubjectSchema = z.object({\n  id: z.string(),\n  subjectType: z.string(),\n  externalId: z.string(),\n  providerCustomerId: z.string().nullable(),\n});\nexport type AdminSubject = z.infer<typeof adminSubjectSchema>;\n\n// Grants are the raw material entitlements are computed from (sprints\n// 12-14): a boolean flag or a numeric limit, keyed by feature name.\nexport const featureGrantsSchema = z.record(\n  z.string(),\n  z.union([z.boolean(), z.number()]),\n);\nexport type AdminFeatureGrants = z.infer<typeof featureGrantsSchema>;\n\n// The subject's most recent subscription's plan, independent of whether\n// that subscription currently grants access (unlike entitlements.plan,\n// which is null exactly when it doesn't) — sprint 40's plan-aware comp\n// reads this to restore the plan's real grants rather than a synthetic\n// flag. priceInterval is null when the plan has no price to derive one\n// from; comp falls back to a fixed cycle length in that case.\nexport const adminSubjectSubscriptionPlanSchema = z.object({\n  key: z.string(),\n  featureGrants: featureGrantsSchema,\n  priceInterval: z.enum(['month', 'year']).nullable(),\n});\nexport type AdminSubjectSubscriptionPlan = z.infer<\n  typeof adminSubjectSubscriptionPlanSchema\n>;\n\nexport const adminSubjectLookupResponseSchema = z.object({\n  subject: adminSubjectSchema,\n  entitlements: entitlementsResponseSchema,\n  recentEvents: z.array(adminEventSummarySchema),\n  activeOverrides: z.array(overrideRecordSchema),\n  subscriptionPlan: adminSubjectSubscriptionPlanSchema.nullable(),\n});\nexport type AdminSubjectLookupResponse = z.infer<\n  typeof adminSubjectLookupResponseSchema\n>;\n\nexport const adminPriceSchema = z.object({\n  id: z.string(),\n  interval: z.enum(['month', 'year']),\n  currency: z.string(),\n  unitAmountCents: z.number(),\n  syncStatus: z.enum(['synced', 'pending', 'drifted']),\n  syncedUnitAmountCents: z.number().nullable(),\n});\nexport type AdminPrice = z.infer<typeof adminPriceSchema>;\n\nexport const adminPlanSchema = z.object({\n  id: z.string(),\n  key: z.string(),\n  name: z.string(),\n  featureGrants: featureGrantsSchema,\n  activeSubscriptions: z.number(),\n  prices: z.array(adminPriceSchema),\n});\nexport type AdminPlan = z.infer<typeof adminPlanSchema>;\n\n// Statement descriptors are project-level, not per-plan (packages/db's\n// projects table), but the plan editor screen renders and edits the field\n// alongside the plans it applies to — so the response carries the project's\n// resolved descriptor config as a sibling of the plan list, not duplicated\n// per plan.\nexport const adminPlansResponseSchema = z.object({\n  project: z.object({\n    statementDescriptor: z.string().nullable(),\n    statementDescriptorPrefix: z.string().nullable(),\n  }),\n  plans: z.array(adminPlanSchema),\n});\nexport type AdminPlansResponse = z.infer<typeof adminPlansResponseSchema>;\n\n// Never the raw secret — masked to last-4 (or null if never configured).\nexport const adminProviderResponseSchema = z.object({\n  projectId: z.string(),\n  providerKind: z.string(),\n  environment: z.enum(['test', 'live']),\n  envLocked: z.boolean(),\n  secretKeyMasked: z.string().nullable(),\n  publishableKeyMasked: z.string().nullable(),\n  webhookEndpoint: z.string(),\n  webhookSigningConfigured: z.boolean(),\n  defaultPortalReturnUrl: z.string().nullable(),\n});\nexport type AdminProviderResponse = z.infer<typeof adminProviderResponseSchema>;\n\n// The overrides domain has no project_id column of its own (project scope\n// comes from a join through subjects), so the admin service tags each entry\n// with its project as it assembles the cross-project audit response.\nexport const adminAuditEntrySchema = overrideRecordSchema.extend({\n  projectId: z.string(),\n});\nexport type AdminAuditEntry = z.infer<typeof adminAuditEntrySchema>;\n\nexport const adminAuditResponseSchema = z.object({\n  entries: z.array(adminAuditEntrySchema),\n  nextCursor: z.string().nullable(),\n  approxTotal: z.number(),\n});\nexport type AdminAuditResponse = z.infer<typeof adminAuditResponseSchema>;\n\n// Parallel arrays, not one row per day, to match EventThroughput's own prop\n// shape (data-display.md chart 3) — the web layer passes these straight\n// through without reshaping.\nexport const adminThroughputResponseSchema = z.object({\n  days: z.array(z.string()),\n  processed: z.array(z.number()),\n  failed: z.array(z.number()),\n});\nexport type AdminThroughputResponse = z.infer<\n  typeof adminThroughputResponseSchema\n>;\n\n// No historical snapshot table exists for plan mix (unlike MRR's\n// mrr_snapshots — see packages/db/src/schema/mrr-snapshots.ts's own note\n// that nothing populates it beyond the dev seed). Sprint 38 scopes this to\n// the current month only rather than inventing a snapshot table: `months`\n// and `stacks` always carry exactly one entry.\nexport const adminPlanMixResponseSchema = z.object({\n  months: z.array(z.string()),\n  plans: z.array(z.object({ key: z.string(), name: z.string() })),\n  stacks: z.array(z.array(z.number())),\n});\nexport type AdminPlanMixResponse = z.infer<typeof adminPlanMixResponseSchema>;\n\n// (project_id, error_signature) GROUP BY over the full dead-letter queue —\n// distinct from signatureCountSchema (event-log.ts), which groups by\n// signature alone within one already-project-scoped page and can't tell two\n// projects' identical error text apart.\nexport const adminDeadLetterGroupSchema = z.object({\n  projectId: z.string(),\n  signature: z.string(),\n  count: z.number(),\n  sampleEventId: z.string(),\n  firstReceivedAt: z.iso.datetime(),\n  lastReceivedAt: z.iso.datetime(),\n});\nexport type AdminDeadLetterGroup = z.infer<typeof adminDeadLetterGroupSchema>;\n\nexport const adminDeadLetterGroupsResponseSchema = z.object({\n  groups: z.array(adminDeadLetterGroupSchema),\n});\nexport type AdminDeadLetterGroupsResponse = z.infer<\n  typeof adminDeadLetterGroupsResponseSchema\n>;\n\n// One project's full overview-card payload in a single round trip — the\n// scoped counterpart to adminMetricsResponseSchema's all-projects bundle,\n// for screens that only ever render one project (project-overview.tsx).\nexport const adminProjectDashboardResponseSchema = z.object({\n  metrics: projectMetricsSchema,\n  monthLabels: z.array(z.string()),\n  providerKind: z.string(),\n  plans: z.array(adminPlanSchema),\n});\nexport type AdminProjectDashboardResponse = z.infer<\n  typeof adminProjectDashboardResponseSchema\n>;\n","import { z } from 'zod';\n\nexport const eventStatusSchema = z.enum([\n  'received',\n  'processed',\n  'failed',\n  'dead_letter',\n  'discarded',\n]);\nexport type EventStatus = z.infer<typeof eventStatusSchema>;\n\n// Matches @org/db's subscription_state enum — the five states the state\n// machine actually stores, not the computed 'grace'/'none' views.\nexport const subscriptionStateSchema = z.enum([\n  'trialing',\n  'active',\n  'past_due',\n  'canceled',\n  'unpaid',\n]);\nexport type SubscriptionStateContract = z.infer<typeof subscriptionStateSchema>;\n\nexport const adminEventSummarySchema = z.object({\n  id: z.string(),\n  projectId: z.string(),\n  providerEventId: z.string(),\n  type: z.string(),\n  status: eventStatusSchema,\n  attempts: z.number(),\n  lastError: z.string().nullable(),\n  errorSignature: z.string().nullable(),\n  receivedAt: z.iso.datetime(),\n  processedAt: z.iso.datetime().nullable(),\n  // event_log has no subject/customer reference column (sprint 24's\n  // repo-drizzle-subjects.ts documents the same gap the other direction) —\n  // derived from the raw Stripe payload's well-known `data.object.customer`\n  // path, so this is null for any non-Stripe-shaped payload.\n  subjectRef: z.string().nullable(),\n});\nexport type AdminEventSummary = z.infer<typeof adminEventSummarySchema>;\n\nexport const adminEventDetailSchema = adminEventSummarySchema.extend({\n  payload: z.record(z.string(), z.unknown()),\n  discardReason: z.string().nullable(),\n  discardedBy: z.string().nullable(),\n  discardedAt: z.iso.datetime().nullable(),\n});\nexport type AdminEventDetail = z.infer<typeof adminEventDetailSchema>;\n\nexport const signatureCountSchema = z.object({\n  signature: z.string(),\n  count: z.number(),\n});\nexport type SignatureCount = z.infer<typeof signatureCountSchema>;\n\nexport const listEventsResponseSchema = z.object({\n  events: z.array(adminEventSummarySchema),\n  total: z.number(),\n  limit: z.number(),\n  offset: z.number(),\n  signatureCounts: z.array(signatureCountSchema),\n});\nexport type ListEventsResponse = z.infer<typeof listEventsResponseSchema>;\n\n// Mirrors ApplyResult from apps/api's pure state machine, plus 'error' for\n// when the stored payload itself can't be replayed (e.g. missing provider\n// credentials) — dry-run degrades to this rather than throwing across the\n// HTTP boundary.\nexport const wouldApplySchema = z.discriminatedUnion('kind', [\n  z.object({ kind: z.literal('create'), to: subscriptionStateSchema }),\n  z.object({\n    kind: z.literal('transition'),\n    from: subscriptionStateSchema,\n    to: subscriptionStateSchema,\n  }),\n  z.object({ kind: z.literal('stale') }),\n  z.object({\n    kind: z.literal('invalid'),\n    from: subscriptionStateSchema,\n    to: subscriptionStateSchema,\n  }),\n  z.object({ kind: z.literal('unknown_subscription') }),\n  z.object({ kind: z.literal('noop'), reason: z.string() }),\n  z.object({ kind: z.literal('error'), reason: z.string() }),\n]);\nexport type WouldApply = z.infer<typeof wouldApplySchema>;\n\nexport const dryRunReplayResponseSchema = z.object({\n  event: adminEventDetailSchema,\n  current: z\n    .object({\n      state: subscriptionStateSchema,\n      lastEventAt: z.iso.datetime().nullable(),\n    })\n    .nullable(),\n  wouldApply: wouldApplySchema,\n});\nexport type DryRunReplayResponse = z.infer<typeof dryRunReplayResponseSchema>;\n\nexport const replayOutcomeSchema = z.enum([\n  'created',\n  'transitioned',\n  'stale',\n  'noop',\n  'invalid',\n  'unknown_subscription',\n  'already_processed',\n  'error',\n]);\n\nexport const replayResponseSchema = z.object({\n  outcome: replayOutcomeSchema,\n});\nexport type ReplayResponse = z.infer<typeof replayResponseSchema>;\n\nexport const discardEventRequestSchema = z.object({\n  actor: z.string().min(1),\n  reason: z.string(),\n});\nexport type DiscardEventRequest = z.infer<typeof discardEventRequestSchema>;\n\n// Operator-triggered, small-N batches (sprint 39): a hard ceiling so a bulk\n// replay can never process an unbounded number of events, whether in one\n// request or paged across several (sprint 48's progress UI). Shared so the\n// api's per-request clamp and the web client's paging loop can't drift.\nexport const BULK_REPLAY_CAP = 200;\n\n// Opaque-enough keyset cursor over (receivedAt, id), mirroring\n// processing-repo.ts's EventCursor — event_log's id is a random uuid, so\n// receivedAt provides the real chronological order and id only breaks ties.\nexport const replayGroupCursorSchema = z.object({\n  receivedAt: z.iso.datetime(),\n  id: z.string(),\n});\nexport type ReplayGroupCursor = z.infer<typeof replayGroupCursorSchema>;\n\n// A group is targeted either by its (project, signature) pair or by \"every\n// dead-lettered event in this project\" — never both, and never neither.\n// cursor/limit are optional so a bare {projectId, errorSignature|all} still\n// replays a single up-to-BULK_REPLAY_CAP batch exactly as before; the web\n// client's progress UI (sprint 48) pages through with them instead.\nexport const replayGroupRequestSchema = z\n  .object({\n    projectId: z.string().min(1),\n    cursor: replayGroupCursorSchema.optional(),\n    limit: z.number().int().positive().optional(),\n  })\n  .and(\n    z.union([\n      z.object({ errorSignature: z.string().min(1) }),\n      z.object({ all: z.literal(true) }),\n    ]),\n  );\nexport type ReplayGroupRequest = z.infer<typeof replayGroupRequestSchema>;\n\nexport const replayGroupOutcomeEntrySchema = z.object({\n  eventId: z.string(),\n  outcome: replayOutcomeSchema,\n});\n\nexport const replayGroupResponseSchema = z.object({\n  outcomes: z.array(replayGroupOutcomeEntrySchema),\n  // Keyed by ProcessOutcome, but zod v4's record needs .partial() semantics\n  // for an exhaustive enum key type, so this stays a plain string map — the\n  // set of possible keys is still exactly replayOutcomeSchema's members.\n  counts: z.record(z.string(), z.number()),\n  // This call's batch (its own limit, or BULK_REPLAY_CAP by default) hit its\n  // ceiling: more matching events remain beyond what was just replayed.\n  // Paging with nextCursor continues; a non-paging caller reads this the\n  // same way it always has, as \"replay again to finish draining it.\"\n  truncated: z.boolean(),\n  nextCursor: replayGroupCursorSchema.nullable(),\n});\nexport type ReplayGroupResponse = z.infer<typeof replayGroupResponseSchema>;\n","import { z } from 'zod';\n\nimport { subscriptionStatusSchema } from './subscriptions.js';\n\n// Additive alongside the aggregate `source` field below (kept for SDK\n// back-compat): every key in `features`/`limits` gets its own entry here,\n// so a caller no longer has to infer per-key provenance by cross-referencing\n// overrides itself.\nexport const entitlementSourcesSchema = z.object({\n  features: z.record(z.string(), z.enum(['subscription', 'override'])),\n  limits: z.record(z.string(), z.enum(['subscription', 'override'])),\n});\nexport type EntitlementSources = z.infer<typeof entitlementSourcesSchema>;\n\nexport const entitlementsResponseSchema = z.object({\n  plan: z.string().nullable(),\n  features: z.record(z.string(), z.boolean()),\n  limits: z.record(z.string(), z.number()),\n  status: subscriptionStatusSchema,\n  source: z.enum(['subscription', 'override', 'none']),\n  sources: entitlementSourcesSchema,\n});\nexport type EntitlementsResponse = z.infer<typeof entitlementsResponseSchema>;\n","import { z } from 'zod';\n\n// `grace` and `none` are computed from @org/db's stored enum + graceDays, never stored themselves.\nexport const subscriptionStatusSchema = z.enum([\n  'trialing',\n  'active',\n  'past_due',\n  'grace',\n  'canceled',\n  'unpaid',\n  'none',\n]);\nexport type SubscriptionStatus = z.infer<typeof subscriptionStatusSchema>;\n\nconst activeSubscriptionViewSchema = z.object({\n  state: subscriptionStatusSchema.exclude(['none']),\n  planKey: z.string(),\n  currentPeriodEnd: z.iso.datetime(),\n  cancelAtPeriodEnd: z.boolean(),\n});\n\nconst noSubscriptionViewSchema = z.object({\n  state: z.literal('none'),\n});\n\nexport const subscriptionViewSchema = z.discriminatedUnion('state', [\n  activeSubscriptionViewSchema,\n  noSubscriptionViewSchema,\n]);\nexport type SubscriptionView = z.infer<typeof subscriptionViewSchema>;\n","import { z } from 'zod';\n\n// Operator vocabulary (matches the dashboard's comp/extend/revoke buttons),\n// distinct from @org/entitlements' internal grant|revoke computation\n// vocabulary — apps/api's overrides domain translates between the two.\nexport const overrideKindSchema = z.enum(['comp', 'extend', 'revoke']);\nexport type OverrideKind = z.infer<typeof overrideKindSchema>;\n\nexport const overrideTargetSchema = z.discriminatedUnion('type', [\n  z.object({ type: z.literal('feature'), feature: z.string().min(1) }),\n  z.object({\n    type: z.literal('limit'),\n    limit: z.string().min(1),\n    value: z.number(),\n  }),\n]);\nexport type OverrideTarget = z.infer<typeof overrideTargetSchema>;\n\nexport const createOverrideRequestSchema = z.object({\n  subjectId: z.string().min(1),\n  kind: overrideKindSchema,\n  target: overrideTargetSchema,\n  actor: z.string().min(1),\n  reason: z.string().min(4),\n  expiresAt: z.iso.datetime().optional(),\n});\nexport type CreateOverrideRequest = z.infer<typeof createOverrideRequestSchema>;\n\n// Multi-target variant: one subject, one kind/actor/reason/expiresAt, several\n// targets applied atomically (e.g. comping every grant key a plan defines) —\n// see apps/api's overrides service for the all-or-nothing guarantee.\nexport const createBulkOverrideRequestSchema = z.object({\n  subjectId: z.string().min(1),\n  kind: overrideKindSchema,\n  targets: z.array(overrideTargetSchema).min(1),\n  actor: z.string().min(1),\n  reason: z.string().min(4),\n  expiresAt: z.iso.datetime().optional(),\n});\nexport type CreateBulkOverrideRequest = z.infer<\n  typeof createBulkOverrideRequestSchema\n>;\n\nexport const overrideRecordSchema = z.object({\n  id: z.string(),\n  subjectId: z.string(),\n  kind: overrideKindSchema,\n  target: overrideTargetSchema,\n  actor: z.string(),\n  reason: z.string(),\n  expiresAt: z.iso.datetime().nullable(),\n  createdAt: z.iso.datetime(),\n});\nexport type OverrideRecord = z.infer<typeof overrideRecordSchema>;\n\nexport const bulkOverrideResponseSchema = z.object({\n  overrides: z.array(overrideRecordSchema),\n});\nexport type BulkOverrideResponse = z.infer<typeof bulkOverrideResponseSchema>;\n\nexport const listOverridesResponseSchema = z.object({\n  overrides: z.array(overrideRecordSchema),\n  total: z.number(),\n  limit: z.number(),\n  offset: z.number(),\n});\nexport type ListOverridesResponse = z.infer<typeof listOverridesResponseSchema>;\n","import { z } from 'zod';\n\nexport const checkoutRequestSchema = z.object({\n  planKey: z.string(),\n  subjectId: z.string(),\n  successUrl: z.url(),\n  cancelUrl: z.url(),\n  email: z.email().optional(),\n});\nexport type CheckoutRequest = z.infer<typeof checkoutRequestSchema>;\n\nexport const checkoutResponseSchema = z.object({\n  url: z.url(),\n});\nexport type CheckoutResponse = z.infer<typeof checkoutResponseSchema>;\n\nexport const portalRequestSchema = z.object({\n  subjectId: z.string(),\n  returnUrl: z.url(),\n});\nexport type PortalRequest = z.infer<typeof portalRequestSchema>;\n\nexport const portalResponseSchema = z.object({\n  url: z.url(),\n});\nexport type PortalResponse = z.infer<typeof portalResponseSchema>;\n","import { z } from 'zod';\n\n// The source of truth for a registration payload's shape — apps/api's\n// projects service validates against this directly (no parallel\n// hand-written type), and the admin UI can reuse it for form validation.\nexport const registerProjectRequestSchema = z\n  .object({\n    key: z.string().trim().min(1, 'is required'),\n    name: z.string().trim().min(1, 'is required'),\n    subjectType: z.string().trim().min(1, 'is required'),\n    environment: z.enum(['test', 'live'], 'must be \"test\" or \"live\"'),\n    envLocked: z.boolean().optional(),\n    providerKind: z.string().trim().min(1, 'is required'),\n    providerSecretKeyRef: z.string().optional(),\n    providerPublishableKeyRef: z.string().optional(),\n    providerPortalConfigRef: z.string().optional(),\n    statementDescriptor: z.string().optional(),\n    statementDescriptorPrefix: z.string().optional(),\n    graceDays: z.number().min(0, 'must be >= 0').optional(),\n    defaultPortalReturnUrl: z.url().optional(),\n  })\n  .superRefine((input, ctx) => {\n    if (!input.statementDescriptor && !input.statementDescriptorPrefix) {\n      ctx.addIssue({\n        code: 'custom',\n        path: ['statementDescriptor'],\n        message: 'statementDescriptor or statementDescriptorPrefix is required',\n      });\n    }\n  });\nexport type RegisterProjectRequest = z.infer<\n  typeof registerProjectRequestSchema\n>;\n","import { z } from 'zod';\n\nexport const errorEnvelopeSchema = z.object({\n  error: z.object({\n    code: z.string(),\n    message: z.string(),\n  }),\n});\nexport type ErrorEnvelope = z.infer<typeof errorEnvelopeSchema>;\n","import { z } from 'zod';\n\nexport class InvalidWebhookSecretError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'InvalidWebhookSecretError';\n  }\n}\n\n// Stripe generates its own signing secret when a webhook endpoint is\n// created through its dashboard/API — this only validates the shape of a\n// value an operator copies in from there, it never generates one itself.\nconst webhookSigningSecretSchema = z\n  .string()\n  .regex(/^whsec_.+/, 'must be a non-empty whsec_-prefixed string');\n\nexport function resolveWebhookSigningSecret(value: string): string {\n  const result = webhookSigningSecretSchema.safeParse(value);\n  if (!result.success) {\n    throw new InvalidWebhookSecretError(result.error.issues[0].message);\n  }\n  return result.data;\n}\n","import { z } from 'zod';\n\nexport class InvalidPortalReturnUrlError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'InvalidPortalReturnUrlError';\n  }\n}\n\nconst portalReturnUrlSchema = z.url();\n\nexport function resolveDefaultPortalReturnUrl(value: string): string {\n  const result = portalReturnUrlSchema.safeParse(value);\n  if (!result.success) {\n    throw new InvalidPortalReturnUrlError(result.error.issues[0].message);\n  }\n  return result.data;\n}\n","import { errorEnvelopeSchema } from '@org/shared-types';\n\n// Thrown for every failure path — API denials, transport failures, and\n// malformed responses alike — so consumers can branch on `status`/`code`\n// instead of catching different error shapes.\nexport class BillingApiError extends Error {\n  readonly status: number;\n  readonly code: string;\n\n  constructor(status: number, code: string, message: string) {\n    super(message);\n    this.name = 'BillingApiError';\n    this.status = status;\n    this.code = code;\n  }\n}\n\nexport async function errorFromResponse(\n  response: Response,\n): Promise<BillingApiError> {\n  let code = 'unknown_error';\n  let message = `Request failed with status ${response.status}`;\n\n  try {\n    const body: unknown = await response.json();\n    const parsed = errorEnvelopeSchema.safeParse(body);\n    if (parsed.success) {\n      code = parsed.data.error.code;\n      message = parsed.data.error.message;\n    }\n  } catch {\n    // Body wasn't JSON or didn't match the envelope — keep the defaults.\n  }\n\n  return new BillingApiError(response.status, code, message);\n}\n\n// Status 0 distinguishes \"couldn't reach the API\" from a real HTTP response,\n// so middleware (sprint 16) can fail open on outages without also failing\n// open on 4xx denials.\nexport function networkError(cause: unknown): BillingApiError {\n  const message =\n    cause instanceof Error ? cause.message : 'Network request failed';\n  return new BillingApiError(0, 'network_error', message);\n}\n\nexport function invalidResponseError(message: string): BillingApiError {\n  return new BillingApiError(502, 'invalid_response', message);\n}\n","import { BillingApiError } from './errors.js';\nimport type {\n  CheckEntitlementInput,\n  EntitlementsResult,\n  GuardDecision,\n  LimitCheck,\n} from './types.js';\n\nfunction isMisconfiguration(err: unknown): boolean {\n  return (\n    err instanceof BillingApiError && err.status >= 400 && err.status < 500\n  );\n}\n\nfunction decideOnContent(\n  entitlements: EntitlementsResult,\n  feature: string | undefined,\n  limit: LimitCheck | undefined,\n): GuardDecision {\n  if (feature !== undefined) {\n    return entitlements.features[feature]\n      ? { decision: 'allow', entitlements }\n      : { decision: 'deny', reason: `Feature \"${feature}\" is not entitled` };\n  }\n\n  if (limit !== undefined) {\n    const max = entitlements.limits[limit.key];\n    return max !== undefined && limit.usage < max\n      ? { decision: 'allow', entitlements }\n      : { decision: 'deny', reason: `Limit \"${limit.key}\" has been reached` };\n  }\n\n  return { decision: 'allow', entitlements };\n}\n\n// Framework-agnostic orchestration over BillingClient — Fastify (or any\n// other framework) middleware only needs to map GuardDecision to a\n// response. Keep this file free of any framework import.\nexport async function checkEntitlement(\n  input: CheckEntitlementInput,\n): Promise<GuardDecision> {\n  const { client, subjectId, feature, limit, onUnavailable } = input;\n\n  let entitlements: EntitlementsResult;\n  try {\n    entitlements = await client.getEntitlements(subjectId);\n  } catch (err) {\n    if (isMisconfiguration(err)) {\n      const message =\n        err instanceof Error ? err.message : 'Billing request was rejected';\n      return { decision: 'deny', reason: message, misconfigured: true };\n    }\n    return onUnavailable === 'open'\n      ? { decision: 'unavailable-allow' }\n      : { decision: 'unavailable-deny', reason: 'Billing is unavailable' };\n  }\n\n  // Fresh or stale, this is content-based — a stale entitlements payload is\n  // the graceful-degradation path working, not an unavailability case.\n  return decideOnContent(entitlements, feature, limit);\n}\n","import type { FastifyPluginAsync, FastifyReply, FastifyRequest } from 'fastify';\n\nimport type {\n  BillingGuardPluginOptions,\n  PreHandler,\n  RouteGuardOptions,\n} from './fastify-types.js';\nimport { checkEntitlement } from './guard.js';\nimport type { GuardDecision, OnUnavailablePolicy } from './types.js';\n\nfunction sendErrorEnvelope(\n  reply: FastifyReply,\n  statusCode: number,\n  code: string,\n  message: string,\n) {\n  return reply.code(statusCode).send({ error: { code, message } });\n}\n\nasync function applyDecision(\n  request: FastifyRequest,\n  reply: FastifyReply,\n  decision: GuardDecision,\n): Promise<void> {\n  switch (decision.decision) {\n    case 'allow':\n      request.entitlements = decision.entitlements;\n      return;\n    case 'unavailable-allow':\n      return;\n    case 'deny':\n      sendErrorEnvelope(\n        reply,\n        403,\n        decision.misconfigured ? 'billing_misconfigured' : 'entitlement_denied',\n        decision.reason,\n      );\n      return;\n    case 'unavailable-deny':\n      sendErrorEnvelope(reply, 503, 'billing_unavailable', decision.reason);\n      return;\n  }\n}\n\nfunction resolvePolicy(\n  fallback: OnUnavailablePolicy,\n  override: OnUnavailablePolicy | undefined,\n): OnUnavailablePolicy {\n  return override ?? fallback;\n}\n\nconst billingGuardPlugin: FastifyPluginAsync<\n  BillingGuardPluginOptions\n> = async (app, opts) => {\n  app.decorateRequest('entitlements', undefined);\n\n  app.decorate(\n    'requireEntitlement',\n    (feature: string, options?: RouteGuardOptions): PreHandler =>\n      async (request, reply) => {\n        const decision = await checkEntitlement({\n          client: opts.client,\n          subjectId: opts.getSubjectId(request),\n          feature,\n          onUnavailable: resolvePolicy(\n            opts.onUnavailable,\n            options?.onUnavailable,\n          ),\n        });\n        await applyDecision(request, reply, decision);\n      },\n  );\n\n  app.decorate(\n    'requireWithinLimit',\n    (\n      limitKey: string,\n      getUsage: (request: FastifyRequest) => number | Promise<number>,\n      options?: RouteGuardOptions,\n    ): PreHandler =>\n      async (request, reply) => {\n        const usage = await getUsage(request);\n        const decision = await checkEntitlement({\n          client: opts.client,\n          subjectId: opts.getSubjectId(request),\n          limit: { key: limitKey, usage },\n          onUnavailable: resolvePolicy(\n            opts.onUnavailable,\n            options?.onUnavailable,\n          ),\n        });\n        await applyDecision(request, reply, decision);\n      },\n  );\n};\n\n// Equivalent to wrapping with the `fastify-plugin` package's `skip-override`\n// marker, without taking it on as a runtime dependency — this package's only\n// runtime dependency stays @org/shared-types. See:\n// https://github.com/fastify/fastify-plugin/blob/main/plugin.js\n(billingGuardPlugin as unknown as Record<symbol, boolean>)[\n  Symbol.for('skip-override')\n] = true;\n\nexport default billingGuardPlugin;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,IAAAA,cAAkB;;;ACAlB,iBAAkB;AAEX,IAAM,oBAAoB,aAAE,KAAK;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAKM,IAAM,0BAA0B,aAAE,KAAK;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGM,IAAM,0BAA0B,aAAE,OAAO;AAAA,EAC9C,IAAI,aAAE,OAAO;AAAA,EACb,WAAW,aAAE,OAAO;AAAA,EACpB,iBAAiB,aAAE,OAAO;AAAA,EAC1B,MAAM,aAAE,OAAO;AAAA,EACf,QAAQ;AAAA,EACR,UAAU,aAAE,OAAO;AAAA,EACnB,WAAW,aAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,gBAAgB,aAAE,OAAO,EAAE,SAAS;AAAA,EACpC,YAAY,aAAE,IAAI,SAAS;AAAA,EAC3B,aAAa,aAAE,IAAI,SAAS,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKvC,YAAY,aAAE,OAAO,EAAE,SAAS;AAClC,CAAC;AAGM,IAAM,yBAAyB,wBAAwB,OAAO;AAAA,EACnE,SAAS,aAAE,OAAO,aAAE,OAAO,GAAG,aAAE,QAAQ,CAAC;AAAA,EACzC,eAAe,aAAE,OAAO,EAAE,SAAS;AAAA,EACnC,aAAa,aAAE,OAAO,EAAE,SAAS;AAAA,EACjC,aAAa,aAAE,IAAI,SAAS,EAAE,SAAS;AACzC,CAAC;AAGM,IAAM,uBAAuB,aAAE,OAAO;AAAA,EAC3C,WAAW,aAAE,OAAO;AAAA,EACpB,OAAO,aAAE,OAAO;AAClB,CAAC;AAGM,IAAM,2BAA2B,aAAE,OAAO;AAAA,EAC/C,QAAQ,aAAE,MAAM,uBAAuB;AAAA,EACvC,OAAO,aAAE,OAAO;AAAA,EAChB,OAAO,aAAE,OAAO;AAAA,EAChB,QAAQ,aAAE,OAAO;AAAA,EACjB,iBAAiB,aAAE,MAAM,oBAAoB;AAC/C,CAAC;AAOM,IAAM,mBAAmB,aAAE,mBAAmB,QAAQ;AAAA,EAC3D,aAAE,OAAO,EAAE,MAAM,aAAE,QAAQ,QAAQ,GAAG,IAAI,wBAAwB,CAAC;AAAA,EACnE,aAAE,OAAO;AAAA,IACP,MAAM,aAAE,QAAQ,YAAY;AAAA,IAC5B,MAAM;AAAA,IACN,IAAI;AAAA,EACN,CAAC;AAAA,EACD,aAAE,OAAO,EAAE,MAAM,aAAE,QAAQ,OAAO,EAAE,CAAC;AAAA,EACrC,aAAE,OAAO;AAAA,IACP,MAAM,aAAE,QAAQ,SAAS;AAAA,IACzB,MAAM;AAAA,IACN,IAAI;AAAA,EACN,CAAC;AAAA,EACD,aAAE,OAAO,EAAE,MAAM,aAAE,QAAQ,sBAAsB,EAAE,CAAC;AAAA,EACpD,aAAE,OAAO,EAAE,MAAM,aAAE,QAAQ,MAAM,GAAG,QAAQ,aAAE,OAAO,EAAE,CAAC;AAAA,EACxD,aAAE,OAAO,EAAE,MAAM,aAAE,QAAQ,OAAO,GAAG,QAAQ,aAAE,OAAO,EAAE,CAAC;AAC3D,CAAC;AAGM,IAAM,6BAA6B,aAAE,OAAO;AAAA,EACjD,OAAO;AAAA,EACP,SAAS,aACN,OAAO;AAAA,IACN,OAAO;AAAA,IACP,aAAa,aAAE,IAAI,SAAS,EAAE,SAAS;AAAA,EACzC,CAAC,EACA,SAAS;AAAA,EACZ,YAAY;AACd,CAAC;AAGM,IAAM,sBAAsB,aAAE,KAAK;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,IAAM,uBAAuB,aAAE,OAAO;AAAA,EAC3C,SAAS;AACX,CAAC;AAGM,IAAM,4BAA4B,aAAE,OAAO;AAAA,EAChD,OAAO,aAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,QAAQ,aAAE,OAAO;AACnB,CAAC;AAYM,IAAM,0BAA0B,aAAE,OAAO;AAAA,EAC9C,YAAY,aAAE,IAAI,SAAS;AAAA,EAC3B,IAAI,aAAE,OAAO;AACf,CAAC;AAQM,IAAM,2BAA2B,aACrC,OAAO;AAAA,EACN,WAAW,aAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC3B,QAAQ,wBAAwB,SAAS;AAAA,EACzC,OAAO,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAC9C,CAAC,EACA;AAAA,EACC,aAAE,MAAM;AAAA,IACN,aAAE,OAAO,EAAE,gBAAgB,aAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;AAAA,IAC9C,aAAE,OAAO,EAAE,KAAK,aAAE,QAAQ,IAAI,EAAE,CAAC;AAAA,EACnC,CAAC;AACH;AAGK,IAAM,gCAAgC,aAAE,OAAO;AAAA,EACpD,SAAS,aAAE,OAAO;AAAA,EAClB,SAAS;AACX,CAAC;AAEM,IAAM,4BAA4B,aAAE,OAAO;AAAA,EAChD,UAAU,aAAE,MAAM,6BAA6B;AAAA;AAAA;AAAA;AAAA,EAI/C,QAAQ,aAAE,OAAO,aAAE,OAAO,GAAG,aAAE,OAAO,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAKvC,WAAW,aAAE,QAAQ;AAAA,EACrB,YAAY,wBAAwB,SAAS;AAC/C,CAAC;;;AC5KD,IAAAC,cAAkB;;;ACAlB,IAAAC,cAAkB;AAGX,IAAM,2BAA2B,cAAE,KAAK;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGD,IAAM,+BAA+B,cAAE,OAAO;AAAA,EAC5C,OAAO,yBAAyB,QAAQ,CAAC,MAAM,CAAC;AAAA,EAChD,SAAS,cAAE,OAAO;AAAA,EAClB,kBAAkB,cAAE,IAAI,SAAS;AAAA,EACjC,mBAAmB,cAAE,QAAQ;AAC/B,CAAC;AAED,IAAM,2BAA2B,cAAE,OAAO;AAAA,EACxC,OAAO,cAAE,QAAQ,MAAM;AACzB,CAAC;AAEM,IAAM,yBAAyB,cAAE,mBAAmB,SAAS;AAAA,EAClE;AAAA,EACA;AACF,CAAC;;;ADpBM,IAAM,2BAA2B,cAAE,OAAO;AAAA,EAC/C,UAAU,cAAE,OAAO,cAAE,OAAO,GAAG,cAAE,KAAK,CAAC,gBAAgB,UAAU,CAAC,CAAC;AAAA,EACnE,QAAQ,cAAE,OAAO,cAAE,OAAO,GAAG,cAAE,KAAK,CAAC,gBAAgB,UAAU,CAAC,CAAC;AACnE,CAAC;AAGM,IAAM,6BAA6B,cAAE,OAAO;AAAA,EACjD,MAAM,cAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,UAAU,cAAE,OAAO,cAAE,OAAO,GAAG,cAAE,QAAQ,CAAC;AAAA,EAC1C,QAAQ,cAAE,OAAO,cAAE,OAAO,GAAG,cAAE,OAAO,CAAC;AAAA,EACvC,QAAQ;AAAA,EACR,QAAQ,cAAE,KAAK,CAAC,gBAAgB,YAAY,MAAM,CAAC;AAAA,EACnD,SAAS;AACX,CAAC;;;AErBD,IAAAC,cAAkB;AAKX,IAAM,qBAAqB,cAAE,KAAK,CAAC,QAAQ,UAAU,QAAQ,CAAC;AAG9D,IAAM,uBAAuB,cAAE,mBAAmB,QAAQ;AAAA,EAC/D,cAAE,OAAO,EAAE,MAAM,cAAE,QAAQ,SAAS,GAAG,SAAS,cAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;AAAA,EACnE,cAAE,OAAO;AAAA,IACP,MAAM,cAAE,QAAQ,OAAO;AAAA,IACvB,OAAO,cAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACvB,OAAO,cAAE,OAAO;AAAA,EAClB,CAAC;AACH,CAAC;AAGM,IAAM,8BAA8B,cAAE,OAAO;AAAA,EAClD,WAAW,cAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC3B,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,OAAO,cAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,QAAQ,cAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,WAAW,cAAE,IAAI,SAAS,EAAE,SAAS;AACvC,CAAC;AAMM,IAAM,kCAAkC,cAAE,OAAO;AAAA,EACtD,WAAW,cAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC3B,MAAM;AAAA,EACN,SAAS,cAAE,MAAM,oBAAoB,EAAE,IAAI,CAAC;AAAA,EAC5C,OAAO,cAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,QAAQ,cAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,WAAW,cAAE,IAAI,SAAS,EAAE,SAAS;AACvC,CAAC;AAKM,IAAM,uBAAuB,cAAE,OAAO;AAAA,EAC3C,IAAI,cAAE,OAAO;AAAA,EACb,WAAW,cAAE,OAAO;AAAA,EACpB,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,OAAO,cAAE,OAAO;AAAA,EAChB,QAAQ,cAAE,OAAO;AAAA,EACjB,WAAW,cAAE,IAAI,SAAS,EAAE,SAAS;AAAA,EACrC,WAAW,cAAE,IAAI,SAAS;AAC5B,CAAC;AAGM,IAAM,6BAA6B,cAAE,OAAO;AAAA,EACjD,WAAW,cAAE,MAAM,oBAAoB;AACzC,CAAC;AAGM,IAAM,8BAA8B,cAAE,OAAO;AAAA,EAClD,WAAW,cAAE,MAAM,oBAAoB;AAAA,EACvC,OAAO,cAAE,OAAO;AAAA,EAChB,OAAO,cAAE,OAAO;AAAA,EAChB,QAAQ,cAAE,OAAO;AACnB,CAAC;;;AJpDM,IAAM,oBAAoB,cAAE,OAAO;AAAA,EACxC,UAAU,cAAE,OAAO;AAAA,EACnB,QAAQ,cAAE,OAAO;AAAA,EACjB,UAAU,cAAE,OAAO;AAAA,EACnB,OAAO,cAAE,OAAO;AAAA,EAChB,UAAU,cAAE,OAAO;AAAA,EACnB,QAAQ,cAAE,OAAO;AACnB,CAAC;AAGD,IAAM,yBAAyB,cAAE,OAAO;AAAA,EACtC,UAAU,cAAE,OAAO;AAAA,EACnB,cAAc,cAAE,OAAO;AAAA,EACvB,eAAe,cAAE,OAAO;AAAA,EACxB,QAAQ;AAAA,EACR,iBAAiB,cAAE,OAAO;AAAA,EAC1B,sBAAsB,cAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,YAAY,cAAE,OAAO;AACvB,CAAC;AAEM,IAAM,uBAAuB,uBAAuB,OAAO;AAAA,EAChE,WAAW,cAAE,OAAO;AAAA,EACpB,YAAY,cAAE,OAAO;AAAA,EACrB,aAAa,cAAE,OAAO;AAAA,EACtB,aAAa,cAAE,OAAO;AAAA,EACtB,aAAa,cAAE,KAAK,CAAC,QAAQ,MAAM,CAAC;AAAA,EACpC,WAAW,cAAE,QAAQ;AAAA,EACrB,WAAW,cAAE,MAAM,cAAE,OAAO,CAAC;AAC/B,CAAC;AAGM,IAAM,6BAA6B,cAAE,OAAO;AAAA,EACjD,WAAW;AAAA;AAAA;AAAA,EAGX,aAAa,cAAE,MAAM,cAAE,OAAO,CAAC;AAAA,EAC/B,UAAU,cAAE,MAAM,oBAAoB;AACxC,CAAC;AAMM,IAAM,gCAAgC,cAAE,OAAO;AAAA,EACpD,QAAQ,cAAE,MAAM,uBAAuB;AAAA,EACvC,YAAY,cAAE,OAAO,EAAE,SAAS;AAAA,EAChC,aAAa,cAAE,OAAO;AAAA,EACtB,iBAAiB,cAAE,MAAM,oBAAoB,EAAE,SAAS;AAC1D,CAAC;AAKM,IAAM,iCAAiC,cAAE,OAAO;AAAA,EACrD,OAAO;AAAA,EACP,YAAY,cAAE,OAAO;AAAA,IACnB,SAAS,cACN,OAAO;AAAA,MACN,OAAO,yBAAyB,QAAQ,CAAC,SAAS,MAAM,CAAC;AAAA,MACzD,aAAa,cAAE,IAAI,SAAS,EAAE,SAAS;AAAA,IACzC,CAAC,EACA,SAAS;AAAA,IACZ,YAAY;AAAA,EACd,CAAC;AACH,CAAC;AAKM,IAAM,qBAAqB,cAAE,OAAO;AAAA,EACzC,IAAI,cAAE,OAAO;AAAA,EACb,aAAa,cAAE,OAAO;AAAA,EACtB,YAAY,cAAE,OAAO;AAAA,EACrB,oBAAoB,cAAE,OAAO,EAAE,SAAS;AAC1C,CAAC;AAKM,IAAM,sBAAsB,cAAE;AAAA,EACnC,cAAE,OAAO;AAAA,EACT,cAAE,MAAM,CAAC,cAAE,QAAQ,GAAG,cAAE,OAAO,CAAC,CAAC;AACnC;AASO,IAAM,qCAAqC,cAAE,OAAO;AAAA,EACzD,KAAK,cAAE,OAAO;AAAA,EACd,eAAe;AAAA,EACf,eAAe,cAAE,KAAK,CAAC,SAAS,MAAM,CAAC,EAAE,SAAS;AACpD,CAAC;AAKM,IAAM,mCAAmC,cAAE,OAAO;AAAA,EACvD,SAAS;AAAA,EACT,cAAc;AAAA,EACd,cAAc,cAAE,MAAM,uBAAuB;AAAA,EAC7C,iBAAiB,cAAE,MAAM,oBAAoB;AAAA,EAC7C,kBAAkB,mCAAmC,SAAS;AAChE,CAAC;AAKM,IAAM,mBAAmB,cAAE,OAAO;AAAA,EACvC,IAAI,cAAE,OAAO;AAAA,EACb,UAAU,cAAE,KAAK,CAAC,SAAS,MAAM,CAAC;AAAA,EAClC,UAAU,cAAE,OAAO;AAAA,EACnB,iBAAiB,cAAE,OAAO;AAAA,EAC1B,YAAY,cAAE,KAAK,CAAC,UAAU,WAAW,SAAS,CAAC;AAAA,EACnD,uBAAuB,cAAE,OAAO,EAAE,SAAS;AAC7C,CAAC;AAGM,IAAM,kBAAkB,cAAE,OAAO;AAAA,EACtC,IAAI,cAAE,OAAO;AAAA,EACb,KAAK,cAAE,OAAO;AAAA,EACd,MAAM,cAAE,OAAO;AAAA,EACf,eAAe;AAAA,EACf,qBAAqB,cAAE,OAAO;AAAA,EAC9B,QAAQ,cAAE,MAAM,gBAAgB;AAClC,CAAC;AAQM,IAAM,2BAA2B,cAAE,OAAO;AAAA,EAC/C,SAAS,cAAE,OAAO;AAAA,IAChB,qBAAqB,cAAE,OAAO,EAAE,SAAS;AAAA,IACzC,2BAA2B,cAAE,OAAO,EAAE,SAAS;AAAA,EACjD,CAAC;AAAA,EACD,OAAO,cAAE,MAAM,eAAe;AAChC,CAAC;AAIM,IAAM,8BAA8B,cAAE,OAAO;AAAA,EAClD,WAAW,cAAE,OAAO;AAAA,EACpB,cAAc,cAAE,OAAO;AAAA,EACvB,aAAa,cAAE,KAAK,CAAC,QAAQ,MAAM,CAAC;AAAA,EACpC,WAAW,cAAE,QAAQ;AAAA,EACrB,iBAAiB,cAAE,OAAO,EAAE,SAAS;AAAA,EACrC,sBAAsB,cAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,iBAAiB,cAAE,OAAO;AAAA,EAC1B,0BAA0B,cAAE,QAAQ;AAAA,EACpC,wBAAwB,cAAE,OAAO,EAAE,SAAS;AAC9C,CAAC;AAMM,IAAM,wBAAwB,qBAAqB,OAAO;AAAA,EAC/D,WAAW,cAAE,OAAO;AACtB,CAAC;AAGM,IAAM,2BAA2B,cAAE,OAAO;AAAA,EAC/C,SAAS,cAAE,MAAM,qBAAqB;AAAA,EACtC,YAAY,cAAE,OAAO,EAAE,SAAS;AAAA,EAChC,aAAa,cAAE,OAAO;AACxB,CAAC;AAMM,IAAM,gCAAgC,cAAE,OAAO;AAAA,EACpD,MAAM,cAAE,MAAM,cAAE,OAAO,CAAC;AAAA,EACxB,WAAW,cAAE,MAAM,cAAE,OAAO,CAAC;AAAA,EAC7B,QAAQ,cAAE,MAAM,cAAE,OAAO,CAAC;AAC5B,CAAC;AAUM,IAAM,6BAA6B,cAAE,OAAO;AAAA,EACjD,QAAQ,cAAE,MAAM,cAAE,OAAO,CAAC;AAAA,EAC1B,OAAO,cAAE,MAAM,cAAE,OAAO,EAAE,KAAK,cAAE,OAAO,GAAG,MAAM,cAAE,OAAO,EAAE,CAAC,CAAC;AAAA,EAC9D,QAAQ,cAAE,MAAM,cAAE,MAAM,cAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAOM,IAAM,6BAA6B,cAAE,OAAO;AAAA,EACjD,WAAW,cAAE,OAAO;AAAA,EACpB,WAAW,cAAE,OAAO;AAAA,EACpB,OAAO,cAAE,OAAO;AAAA,EAChB,eAAe,cAAE,OAAO;AAAA,EACxB,iBAAiB,cAAE,IAAI,SAAS;AAAA,EAChC,gBAAgB,cAAE,IAAI,SAAS;AACjC,CAAC;AAGM,IAAM,sCAAsC,cAAE,OAAO;AAAA,EAC1D,QAAQ,cAAE,MAAM,0BAA0B;AAC5C,CAAC;AAQM,IAAM,sCAAsC,cAAE,OAAO;AAAA,EAC1D,SAAS;AAAA,EACT,aAAa,cAAE,MAAM,cAAE,OAAO,CAAC;AAAA,EAC/B,cAAc,cAAE,OAAO;AAAA,EACvB,OAAO,cAAE,MAAM,eAAe;AAChC,CAAC;;;AKhPD,IAAAC,cAAkB;AAEX,IAAM,wBAAwB,cAAE,OAAO;AAAA,EAC5C,SAAS,cAAE,OAAO;AAAA,EAClB,WAAW,cAAE,OAAO;AAAA,EACpB,YAAY,cAAE,IAAI;AAAA,EAClB,WAAW,cAAE,IAAI;AAAA,EACjB,OAAO,cAAE,MAAM,EAAE,SAAS;AAC5B,CAAC;AAGM,IAAM,yBAAyB,cAAE,OAAO;AAAA,EAC7C,KAAK,cAAE,IAAI;AACb,CAAC;AAGM,IAAM,sBAAsB,cAAE,OAAO;AAAA,EAC1C,WAAW,cAAE,OAAO;AAAA,EACpB,WAAW,cAAE,IAAI;AACnB,CAAC;AAGM,IAAM,uBAAuB,cAAE,OAAO;AAAA,EAC3C,KAAK,cAAE,IAAI;AACb,CAAC;;;ACxBD,IAAAC,cAAkB;AAKX,IAAM,+BAA+B,cACzC,OAAO;AAAA,EACN,KAAK,cAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,aAAa;AAAA,EAC3C,MAAM,cAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,aAAa;AAAA,EAC5C,aAAa,cAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,aAAa;AAAA,EACnD,aAAa,cAAE,KAAK,CAAC,QAAQ,MAAM,GAAG,0BAA0B;AAAA,EAChE,WAAW,cAAE,QAAQ,EAAE,SAAS;AAAA,EAChC,cAAc,cAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,aAAa;AAAA,EACpD,sBAAsB,cAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,2BAA2B,cAAE,OAAO,EAAE,SAAS;AAAA,EAC/C,yBAAyB,cAAE,OAAO,EAAE,SAAS;AAAA,EAC7C,qBAAqB,cAAE,OAAO,EAAE,SAAS;AAAA,EACzC,2BAA2B,cAAE,OAAO,EAAE,SAAS;AAAA,EAC/C,WAAW,cAAE,OAAO,EAAE,IAAI,GAAG,cAAc,EAAE,SAAS;AAAA,EACtD,wBAAwB,cAAE,IAAI,EAAE,SAAS;AAC3C,CAAC,EACA,YAAY,CAAC,OAAO,QAAQ;AAC3B,MAAI,CAAC,MAAM,uBAAuB,CAAC,MAAM,2BAA2B;AAClE,QAAI,SAAS;AAAA,MACX,MAAM;AAAA,MACN,MAAM,CAAC,qBAAqB;AAAA,MAC5B,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF,CAAC;;;AC7BH,IAAAC,cAAkB;AAEX,IAAM,sBAAsB,cAAE,OAAO;AAAA,EAC1C,OAAO,cAAE,OAAO;AAAA,IACd,MAAM,cAAE,OAAO;AAAA,IACf,SAAS,cAAE,OAAO;AAAA,EACpB,CAAC;AACH,CAAC;;;ACPD,IAAAC,cAAkB;AAYlB,IAAM,6BAA6B,cAChC,OAAO,EACP,MAAM,aAAa,4CAA4C;;;ACdlE,IAAAC,eAAkB;AASlB,IAAM,wBAAwB,eAAE,IAAI;;;ACJ7B,IAAM,kBAAN,cAA8B,MAAM;AAAA,EAChC;AAAA,EACA;AAAA,EAET,YAAY,QAAgB,MAAc,SAAiB;AACzD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,OAAO;AAAA,EACd;AACF;;;ACPA,SAAS,mBAAmB,KAAuB;AACjD,SACE,eAAe,mBAAmB,IAAI,UAAU,OAAO,IAAI,SAAS;AAExE;AAEA,SAAS,gBACP,cACA,SACA,OACe;AACf,MAAI,YAAY,QAAW;AACzB,WAAO,aAAa,SAAS,OAAO,IAChC,EAAE,UAAU,SAAS,aAAa,IAClC,EAAE,UAAU,QAAQ,QAAQ,YAAY,OAAO,oBAAoB;AAAA,EACzE;AAEA,MAAI,UAAU,QAAW;AACvB,UAAM,MAAM,aAAa,OAAO,MAAM,GAAG;AACzC,WAAO,QAAQ,UAAa,MAAM,QAAQ,MACtC,EAAE,UAAU,SAAS,aAAa,IAClC,EAAE,UAAU,QAAQ,QAAQ,UAAU,MAAM,GAAG,qBAAqB;AAAA,EAC1E;AAEA,SAAO,EAAE,UAAU,SAAS,aAAa;AAC3C;AAKA,eAAsB,iBACpB,OACwB;AACxB,QAAM,EAAE,QAAQ,WAAW,SAAS,OAAO,cAAc,IAAI;AAE7D,MAAI;AACJ,MAAI;AACF,mBAAe,MAAM,OAAO,gBAAgB,SAAS;AAAA,EACvD,SAAS,KAAK;AACZ,QAAI,mBAAmB,GAAG,GAAG;AAC3B,YAAM,UACJ,eAAe,QAAQ,IAAI,UAAU;AACvC,aAAO,EAAE,UAAU,QAAQ,QAAQ,SAAS,eAAe,KAAK;AAAA,IAClE;AACA,WAAO,kBAAkB,SACrB,EAAE,UAAU,oBAAoB,IAChC,EAAE,UAAU,oBAAoB,QAAQ,yBAAyB;AAAA,EACvE;AAIA,SAAO,gBAAgB,cAAc,SAAS,KAAK;AACrD;;;AClDA,SAAS,kBACP,OACA,YACA,MACA,SACA;AACA,SAAO,MAAM,KAAK,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,EAAE,CAAC;AACjE;AAEA,eAAe,cACb,SACA,OACA,UACe;AACf,UAAQ,SAAS,UAAU;AAAA,IACzB,KAAK;AACH,cAAQ,eAAe,SAAS;AAChC;AAAA,IACF,KAAK;AACH;AAAA,IACF,KAAK;AACH;AAAA,QACE;AAAA,QACA;AAAA,QACA,SAAS,gBAAgB,0BAA0B;AAAA,QACnD,SAAS;AAAA,MACX;AACA;AAAA,IACF,KAAK;AACH,wBAAkB,OAAO,KAAK,uBAAuB,SAAS,MAAM;AACpE;AAAA,EACJ;AACF;AAEA,SAAS,cACP,UACA,UACqB;AACrB,SAAO,YAAY;AACrB;AAEA,IAAM,qBAEF,OAAO,KAAK,SAAS;AACvB,MAAI,gBAAgB,gBAAgB,MAAS;AAE7C,MAAI;AAAA,IACF;AAAA,IACA,CAAC,SAAiB,YAChB,OAAO,SAAS,UAAU;AACxB,YAAM,WAAW,MAAM,iBAAiB;AAAA,QACtC,QAAQ,KAAK;AAAA,QACb,WAAW,KAAK,aAAa,OAAO;AAAA,QACpC;AAAA,QACA,eAAe;AAAA,UACb,KAAK;AAAA,UACL,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AACD,YAAM,cAAc,SAAS,OAAO,QAAQ;AAAA,IAC9C;AAAA,EACJ;AAEA,MAAI;AAAA,IACF;AAAA,IACA,CACE,UACA,UACA,YAEA,OAAO,SAAS,UAAU;AACxB,YAAM,QAAQ,MAAM,SAAS,OAAO;AACpC,YAAM,WAAW,MAAM,iBAAiB;AAAA,QACtC,QAAQ,KAAK;AAAA,QACb,WAAW,KAAK,aAAa,OAAO;AAAA,QACpC,OAAO,EAAE,KAAK,UAAU,MAAM;AAAA,QAC9B,eAAe;AAAA,UACb,KAAK;AAAA,UACL,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AACD,YAAM,cAAc,SAAS,OAAO,QAAQ;AAAA,IAC9C;AAAA,EACJ;AACF;AAMC,mBACC,uBAAO,IAAI,eAAe,CAC5B,IAAI;AAEJ,IAAO,qBAAQ;","names":["import_zod","import_zod","import_zod","import_zod","import_zod","import_zod","import_zod","import_zod","import_zod"]}
+{"version":3,"sources":["../src/fastify.ts","../../shared-types/src/admin.ts","../../shared-types/src/event-log.ts","../../shared-types/src/entitlements.ts","../../shared-types/src/subscriptions.ts","../../shared-types/src/overrides.ts","../../shared-types/src/checkout.ts","../../shared-types/src/projects.ts","../../shared-types/src/trials.ts","../../shared-types/src/errors.ts","../../shared-types/src/webhook-secret.ts","../../shared-types/src/portal-return-url.ts","../src/errors.ts","../src/guard.ts","../src/middleware.ts"],"sourcesContent":["export { default as billingGuardPlugin } from './middleware.js';\nexport type {\n  BillingGuardPluginOptions,\n  RouteGuardOptions,\n} from './fastify-types.js';\n","import { z } from 'zod';\nimport {\n  adminEventDetailSchema,\n  adminEventSummarySchema,\n  signatureCountSchema,\n  wouldApplySchema,\n} from './event-log.js';\nimport { entitlementsResponseSchema } from './entitlements.js';\nimport { overrideRecordSchema } from './overrides.js';\nimport { subscriptionStatusSchema } from './subscriptions.js';\n\n// Per-project and ecosystem-wide subscription state counts. `grace` is\n// computed (never stored) — see @org/entitlements' resolveAccessStatus.\nexport const stateCountsSchema = z.object({\n  trialing: z.number(),\n  active: z.number(),\n  past_due: z.number(),\n  grace: z.number(),\n  canceled: z.number(),\n  unpaid: z.number(),\n});\nexport type StateCounts = z.infer<typeof stateCountsSchema>;\n\nconst dashboardMetricsSchema = z.object({\n  mrrCents: z.number(),\n  mrrPrevCents: z.number(),\n  subjectsCount: z.number(),\n  states: stateCountsSchema,\n  deadLetterDepth: z.number(),\n  oldestUnprocessedSec: z.number().nullable(),\n  driftCount: z.number(),\n});\n\nexport const projectMetricsSchema = dashboardMetricsSchema.extend({\n  projectId: z.string(),\n  projectKey: z.string(),\n  projectName: z.string(),\n  subjectType: z.string(),\n  environment: z.enum(['test', 'live']),\n  envLocked: z.boolean(),\n  mrrSeries: z.array(z.number()),\n});\nexport type ProjectMetrics = z.infer<typeof projectMetricsSchema>;\n\nexport const adminMetricsResponseSchema = z.object({\n  ecosystem: dashboardMetricsSchema,\n  // Shared x-axis labels for every project's mrrSeries (same calendar\n  // months across the ecosystem) — empty when no project has snapshots yet.\n  monthLabels: z.array(z.string()),\n  projects: z.array(projectMetricsSchema),\n});\nexport type AdminMetricsResponse = z.infer<typeof adminMetricsResponseSchema>;\n\n// Cursor-based (data-display.md's \"Newer / Older\" contract): the page query\n// and the approximate total are the only two things a caller needs — no\n// offset, no page number.\nexport const adminEventsListResponseSchema = z.object({\n  events: z.array(adminEventSummarySchema),\n  nextCursor: z.string().nullable(),\n  approxTotal: z.number(),\n  signatureCounts: z.array(signatureCountSchema).optional(),\n});\nexport type AdminEventsListResponse = z.infer<\n  typeof adminEventsListResponseSchema\n>;\n\nexport const adminEventDetailResponseSchema = z.object({\n  event: adminEventDetailSchema,\n  transition: z.object({\n    current: z\n      .object({\n        state: subscriptionStatusSchema.exclude(['grace', 'none']),\n        lastEventAt: z.iso.datetime().nullable(),\n      })\n      .nullable(),\n    wouldApply: wouldApplySchema,\n  }),\n});\nexport type AdminEventDetailResponse = z.infer<\n  typeof adminEventDetailResponseSchema\n>;\n\nexport const adminSubjectSchema = z.object({\n  id: z.string(),\n  subjectType: z.string(),\n  externalId: z.string(),\n  providerCustomerId: z.string().nullable(),\n});\nexport type AdminSubject = z.infer<typeof adminSubjectSchema>;\n\n// Grants are the raw material entitlements are computed from (sprints\n// 12-14): a boolean flag or a numeric limit, keyed by feature name.\nexport const featureGrantsSchema = z.record(\n  z.string(),\n  z.union([z.boolean(), z.number()]),\n);\nexport type AdminFeatureGrants = z.infer<typeof featureGrantsSchema>;\n\n// The subject's most recent subscription's plan, independent of whether\n// that subscription currently grants access (unlike entitlements.plan,\n// which is null exactly when it doesn't) — sprint 40's plan-aware comp\n// reads this to restore the plan's real grants rather than a synthetic\n// flag. priceInterval is null when the plan has no price to derive one\n// from; comp falls back to a fixed cycle length in that case.\nexport const adminSubjectSubscriptionPlanSchema = z.object({\n  key: z.string(),\n  featureGrants: featureGrantsSchema,\n  priceInterval: z.enum(['month', 'year']).nullable(),\n});\nexport type AdminSubjectSubscriptionPlan = z.infer<\n  typeof adminSubjectSubscriptionPlanSchema\n>;\n\nexport const adminSubjectLookupResponseSchema = z.object({\n  subject: adminSubjectSchema,\n  entitlements: entitlementsResponseSchema,\n  recentEvents: z.array(adminEventSummarySchema),\n  activeOverrides: z.array(overrideRecordSchema),\n  subscriptionPlan: adminSubjectSubscriptionPlanSchema.nullable(),\n});\nexport type AdminSubjectLookupResponse = z.infer<\n  typeof adminSubjectLookupResponseSchema\n>;\n\nexport const adminPriceSchema = z.object({\n  id: z.string(),\n  interval: z.enum(['month', 'year']),\n  currency: z.string(),\n  unitAmountCents: z.number(),\n  syncStatus: z.enum(['synced', 'pending', 'drifted']),\n  syncedUnitAmountCents: z.number().nullable(),\n});\nexport type AdminPrice = z.infer<typeof adminPriceSchema>;\n\nexport const adminPlanSchema = z.object({\n  id: z.string(),\n  key: z.string(),\n  name: z.string(),\n  featureGrants: featureGrantsSchema,\n  activeSubscriptions: z.number(),\n  prices: z.array(adminPriceSchema),\n});\nexport type AdminPlan = z.infer<typeof adminPlanSchema>;\n\n// Statement descriptors are project-level, not per-plan (packages/db's\n// projects table), but the plan editor screen renders and edits the field\n// alongside the plans it applies to — so the response carries the project's\n// resolved descriptor config as a sibling of the plan list, not duplicated\n// per plan.\nexport const adminPlansResponseSchema = z.object({\n  project: z.object({\n    statementDescriptor: z.string().nullable(),\n    statementDescriptorPrefix: z.string().nullable(),\n  }),\n  plans: z.array(adminPlanSchema),\n});\nexport type AdminPlansResponse = z.infer<typeof adminPlansResponseSchema>;\n\n// Never the raw secret — masked to last-4 (or null if never configured).\nexport const adminProviderResponseSchema = z.object({\n  projectId: z.string(),\n  providerKind: z.string(),\n  environment: z.enum(['test', 'live']),\n  envLocked: z.boolean(),\n  secretKeyMasked: z.string().nullable(),\n  publishableKeyMasked: z.string().nullable(),\n  webhookEndpoint: z.string(),\n  webhookSigningConfigured: z.boolean(),\n  defaultPortalReturnUrl: z.string().nullable(),\n});\nexport type AdminProviderResponse = z.infer<typeof adminProviderResponseSchema>;\n\n// The overrides domain has no project_id column of its own (project scope\n// comes from a join through subjects), so the admin service tags each entry\n// with its project as it assembles the cross-project audit response.\nexport const adminAuditEntrySchema = overrideRecordSchema.extend({\n  projectId: z.string(),\n});\nexport type AdminAuditEntry = z.infer<typeof adminAuditEntrySchema>;\n\nexport const adminAuditResponseSchema = z.object({\n  entries: z.array(adminAuditEntrySchema),\n  nextCursor: z.string().nullable(),\n  approxTotal: z.number(),\n});\nexport type AdminAuditResponse = z.infer<typeof adminAuditResponseSchema>;\n\n// Parallel arrays, not one row per day, to match EventThroughput's own prop\n// shape (data-display.md chart 3) — the web layer passes these straight\n// through without reshaping.\nexport const adminThroughputResponseSchema = z.object({\n  days: z.array(z.string()),\n  processed: z.array(z.number()),\n  failed: z.array(z.number()),\n});\nexport type AdminThroughputResponse = z.infer<\n  typeof adminThroughputResponseSchema\n>;\n\n// No historical snapshot table exists for plan mix (unlike MRR's\n// mrr_snapshots — see packages/db/src/schema/mrr-snapshots.ts's own note\n// that nothing populates it beyond the dev seed). Sprint 38 scopes this to\n// the current month only rather than inventing a snapshot table: `months`\n// and `stacks` always carry exactly one entry.\nexport const adminPlanMixResponseSchema = z.object({\n  months: z.array(z.string()),\n  plans: z.array(z.object({ key: z.string(), name: z.string() })),\n  stacks: z.array(z.array(z.number())),\n});\nexport type AdminPlanMixResponse = z.infer<typeof adminPlanMixResponseSchema>;\n\n// (project_id, error_signature) GROUP BY over the full dead-letter queue —\n// distinct from signatureCountSchema (event-log.ts), which groups by\n// signature alone within one already-project-scoped page and can't tell two\n// projects' identical error text apart.\nexport const adminDeadLetterGroupSchema = z.object({\n  projectId: z.string(),\n  signature: z.string(),\n  count: z.number(),\n  sampleEventId: z.string(),\n  firstReceivedAt: z.iso.datetime(),\n  lastReceivedAt: z.iso.datetime(),\n});\nexport type AdminDeadLetterGroup = z.infer<typeof adminDeadLetterGroupSchema>;\n\nexport const adminDeadLetterGroupsResponseSchema = z.object({\n  groups: z.array(adminDeadLetterGroupSchema),\n});\nexport type AdminDeadLetterGroupsResponse = z.infer<\n  typeof adminDeadLetterGroupsResponseSchema\n>;\n\n// One project's full overview-card payload in a single round trip — the\n// scoped counterpart to adminMetricsResponseSchema's all-projects bundle,\n// for screens that only ever render one project (project-overview.tsx).\nexport const adminProjectDashboardResponseSchema = z.object({\n  metrics: projectMetricsSchema,\n  monthLabels: z.array(z.string()),\n  providerKind: z.string(),\n  plans: z.array(adminPlanSchema),\n  // True when the caller gave no `environment` and the key named more than\n  // one row (sprint 66) — `metrics.environment` was picked by a\n  // deterministic fallback rather than requested explicitly, and the\n  // frontend labels it as such (sprint 68.5).\n  environmentDefaulted: z.boolean(),\n});\nexport type AdminProjectDashboardResponse = z.infer<\n  typeof adminProjectDashboardResponseSchema\n>;\n","import { z } from 'zod';\n\nexport const eventStatusSchema = z.enum([\n  'received',\n  'processed',\n  'failed',\n  'dead_letter',\n  'discarded',\n]);\nexport type EventStatus = z.infer<typeof eventStatusSchema>;\n\n// Matches @org/db's subscription_state enum — the five states the state\n// machine actually stores, not the computed 'grace'/'none' views.\nexport const subscriptionStateSchema = z.enum([\n  'trialing',\n  'active',\n  'past_due',\n  'canceled',\n  'unpaid',\n]);\nexport type SubscriptionStateContract = z.infer<typeof subscriptionStateSchema>;\n\nexport const adminEventSummarySchema = z.object({\n  id: z.string(),\n  projectId: z.string(),\n  providerEventId: z.string(),\n  type: z.string(),\n  status: eventStatusSchema,\n  attempts: z.number(),\n  lastError: z.string().nullable(),\n  errorSignature: z.string().nullable(),\n  receivedAt: z.iso.datetime(),\n  processedAt: z.iso.datetime().nullable(),\n  // event_log has no subject/customer reference column (sprint 24's\n  // repo-drizzle-subjects.ts documents the same gap the other direction) —\n  // derived from the raw Stripe payload's well-known `data.object.customer`\n  // path, so this is null for any non-Stripe-shaped payload.\n  subjectRef: z.string().nullable(),\n});\nexport type AdminEventSummary = z.infer<typeof adminEventSummarySchema>;\n\nexport const adminEventDetailSchema = adminEventSummarySchema.extend({\n  payload: z.record(z.string(), z.unknown()),\n  discardReason: z.string().nullable(),\n  discardedBy: z.string().nullable(),\n  discardedAt: z.iso.datetime().nullable(),\n});\nexport type AdminEventDetail = z.infer<typeof adminEventDetailSchema>;\n\nexport const signatureCountSchema = z.object({\n  signature: z.string(),\n  count: z.number(),\n});\nexport type SignatureCount = z.infer<typeof signatureCountSchema>;\n\nexport const listEventsResponseSchema = z.object({\n  events: z.array(adminEventSummarySchema),\n  total: z.number(),\n  limit: z.number(),\n  offset: z.number(),\n  signatureCounts: z.array(signatureCountSchema),\n});\nexport type ListEventsResponse = z.infer<typeof listEventsResponseSchema>;\n\n// Mirrors ApplyResult from apps/api's pure state machine, plus 'error' for\n// when the stored payload itself can't be replayed (e.g. missing provider\n// credentials) — dry-run degrades to this rather than throwing across the\n// HTTP boundary.\nexport const wouldApplySchema = z.discriminatedUnion('kind', [\n  z.object({ kind: z.literal('create'), to: subscriptionStateSchema }),\n  z.object({\n    kind: z.literal('transition'),\n    from: subscriptionStateSchema,\n    to: subscriptionStateSchema,\n  }),\n  z.object({ kind: z.literal('stale') }),\n  z.object({\n    kind: z.literal('invalid'),\n    from: subscriptionStateSchema,\n    to: subscriptionStateSchema,\n  }),\n  z.object({ kind: z.literal('unknown_subscription') }),\n  z.object({ kind: z.literal('noop'), reason: z.string() }),\n  z.object({ kind: z.literal('error'), reason: z.string() }),\n]);\nexport type WouldApply = z.infer<typeof wouldApplySchema>;\n\nexport const dryRunReplayResponseSchema = z.object({\n  event: adminEventDetailSchema,\n  current: z\n    .object({\n      state: subscriptionStateSchema,\n      lastEventAt: z.iso.datetime().nullable(),\n    })\n    .nullable(),\n  wouldApply: wouldApplySchema,\n});\nexport type DryRunReplayResponse = z.infer<typeof dryRunReplayResponseSchema>;\n\nexport const replayOutcomeSchema = z.enum([\n  'created',\n  'transitioned',\n  'stale',\n  'noop',\n  'invalid',\n  'unknown_subscription',\n  'already_processed',\n  'error',\n  'foreign_project',\n]);\n\nexport const replayResponseSchema = z.object({\n  outcome: replayOutcomeSchema,\n});\nexport type ReplayResponse = z.infer<typeof replayResponseSchema>;\n\nexport const discardEventRequestSchema = z.object({\n  actor: z.string().min(1),\n  reason: z.string(),\n});\nexport type DiscardEventRequest = z.infer<typeof discardEventRequestSchema>;\n\n// Operator-triggered, small-N batches (sprint 39): a hard ceiling so a bulk\n// replay can never process an unbounded number of events, whether in one\n// request or paged across several (sprint 48's progress UI). Shared so the\n// api's per-request clamp and the web client's paging loop can't drift.\nexport const BULK_REPLAY_CAP = 200;\n\n// Opaque-enough keyset cursor over (receivedAt, id), mirroring\n// processing-repo.ts's EventCursor — event_log's id is a random uuid, so\n// receivedAt provides the real chronological order and id only breaks ties.\nexport const replayGroupCursorSchema = z.object({\n  receivedAt: z.iso.datetime(),\n  id: z.string(),\n});\nexport type ReplayGroupCursor = z.infer<typeof replayGroupCursorSchema>;\n\n// A group is targeted either by its (project, signature) pair or by \"every\n// dead-lettered event in this project\" — never both, and never neither.\n// cursor/limit are optional so a bare {projectId, errorSignature|all} still\n// replays a single up-to-BULK_REPLAY_CAP batch exactly as before; the web\n// client's progress UI (sprint 48) pages through with them instead.\nexport const replayGroupRequestSchema = z\n  .object({\n    projectId: z.string().min(1),\n    cursor: replayGroupCursorSchema.optional(),\n    limit: z.number().int().positive().optional(),\n  })\n  .and(\n    z.union([\n      z.object({ errorSignature: z.string().min(1) }),\n      z.object({ all: z.literal(true) }),\n    ]),\n  );\nexport type ReplayGroupRequest = z.infer<typeof replayGroupRequestSchema>;\n\nexport const replayGroupOutcomeEntrySchema = z.object({\n  eventId: z.string(),\n  outcome: replayOutcomeSchema,\n});\n\nexport const replayGroupResponseSchema = z.object({\n  outcomes: z.array(replayGroupOutcomeEntrySchema),\n  // Keyed by ProcessOutcome, but zod v4's record needs .partial() semantics\n  // for an exhaustive enum key type, so this stays a plain string map — the\n  // set of possible keys is still exactly replayOutcomeSchema's members.\n  counts: z.record(z.string(), z.number()),\n  // This call's batch (its own limit, or BULK_REPLAY_CAP by default) hit its\n  // ceiling: more matching events remain beyond what was just replayed.\n  // Paging with nextCursor continues; a non-paging caller reads this the\n  // same way it always has, as \"replay again to finish draining it.\"\n  truncated: z.boolean(),\n  nextCursor: replayGroupCursorSchema.nullable(),\n});\nexport type ReplayGroupResponse = z.infer<typeof replayGroupResponseSchema>;\n","import { z } from 'zod';\n\nimport { subscriptionStatusSchema } from './subscriptions.js';\n\n// Additive alongside the aggregate `source` field below (kept for SDK\n// back-compat): every key in `features`/`limits` gets its own entry here,\n// so a caller no longer has to infer per-key provenance by cross-referencing\n// overrides itself.\nexport const entitlementSourcesSchema = z.object({\n  features: z.record(z.string(), z.enum(['subscription', 'override'])),\n  limits: z.record(z.string(), z.enum(['subscription', 'override'])),\n});\nexport type EntitlementSources = z.infer<typeof entitlementSourcesSchema>;\n\nexport const entitlementsResponseSchema = z.object({\n  plan: z.string().nullable(),\n  features: z.record(z.string(), z.boolean()),\n  limits: z.record(z.string(), z.number()),\n  status: subscriptionStatusSchema,\n  source: z.enum(['subscription', 'override', 'none']),\n  sources: entitlementSourcesSchema,\n});\nexport type EntitlementsResponse = z.infer<typeof entitlementsResponseSchema>;\n","import { z } from 'zod';\n\n// `grace` and `none` are computed from @org/db's stored enum + graceDays, never stored themselves.\nexport const subscriptionStatusSchema = z.enum([\n  'trialing',\n  'active',\n  'past_due',\n  'grace',\n  'canceled',\n  'unpaid',\n  'none',\n]);\nexport type SubscriptionStatus = z.infer<typeof subscriptionStatusSchema>;\n\nconst activeSubscriptionViewSchema = z.object({\n  state: subscriptionStatusSchema.exclude(['none']),\n  planKey: z.string(),\n  currentPeriodEnd: z.iso.datetime(),\n  cancelAtPeriodEnd: z.boolean(),\n});\n\nconst noSubscriptionViewSchema = z.object({\n  state: z.literal('none'),\n});\n\nexport const subscriptionViewSchema = z.discriminatedUnion('state', [\n  activeSubscriptionViewSchema,\n  noSubscriptionViewSchema,\n]);\nexport type SubscriptionView = z.infer<typeof subscriptionViewSchema>;\n","import { z } from 'zod';\n\n// Operator vocabulary (matches the dashboard's comp/extend/revoke buttons),\n// distinct from @org/entitlements' internal grant|revoke computation\n// vocabulary — apps/api's overrides domain translates between the two.\nexport const overrideKindSchema = z.enum(['comp', 'extend', 'revoke']);\nexport type OverrideKind = z.infer<typeof overrideKindSchema>;\n\nexport const overrideTargetSchema = z.discriminatedUnion('type', [\n  z.object({ type: z.literal('feature'), feature: z.string().min(1) }),\n  z.object({\n    type: z.literal('limit'),\n    limit: z.string().min(1),\n    value: z.number(),\n  }),\n]);\nexport type OverrideTarget = z.infer<typeof overrideTargetSchema>;\n\nexport const createOverrideRequestSchema = z.object({\n  subjectId: z.string().min(1),\n  kind: overrideKindSchema,\n  target: overrideTargetSchema,\n  actor: z.string().min(1),\n  reason: z.string().min(4),\n  expiresAt: z.iso.datetime().optional(),\n});\nexport type CreateOverrideRequest = z.infer<typeof createOverrideRequestSchema>;\n\n// Multi-target variant: one subject, one kind/actor/reason/expiresAt, several\n// targets applied atomically (e.g. comping every grant key a plan defines) —\n// see apps/api's overrides service for the all-or-nothing guarantee.\nexport const createBulkOverrideRequestSchema = z.object({\n  subjectId: z.string().min(1),\n  kind: overrideKindSchema,\n  targets: z.array(overrideTargetSchema).min(1),\n  actor: z.string().min(1),\n  reason: z.string().min(4),\n  expiresAt: z.iso.datetime().optional(),\n});\nexport type CreateBulkOverrideRequest = z.infer<\n  typeof createBulkOverrideRequestSchema\n>;\n\nexport const overrideRecordSchema = z.object({\n  id: z.string(),\n  subjectId: z.string(),\n  kind: overrideKindSchema,\n  target: overrideTargetSchema,\n  actor: z.string(),\n  reason: z.string(),\n  expiresAt: z.iso.datetime().nullable(),\n  createdAt: z.iso.datetime(),\n});\nexport type OverrideRecord = z.infer<typeof overrideRecordSchema>;\n\nexport const bulkOverrideResponseSchema = z.object({\n  overrides: z.array(overrideRecordSchema),\n});\nexport type BulkOverrideResponse = z.infer<typeof bulkOverrideResponseSchema>;\n\nexport const listOverridesResponseSchema = z.object({\n  overrides: z.array(overrideRecordSchema),\n  total: z.number(),\n  limit: z.number(),\n  offset: z.number(),\n});\nexport type ListOverridesResponse = z.infer<typeof listOverridesResponseSchema>;\n","import { z } from 'zod';\n\nexport const checkoutRequestSchema = z.object({\n  planKey: z.string(),\n  subjectId: z.string(),\n  successUrl: z.url(),\n  cancelUrl: z.url(),\n  email: z.email().optional(),\n});\nexport type CheckoutRequest = z.infer<typeof checkoutRequestSchema>;\n\nexport const checkoutResponseSchema = z.object({\n  url: z.url(),\n});\nexport type CheckoutResponse = z.infer<typeof checkoutResponseSchema>;\n\nexport const portalRequestSchema = z.object({\n  subjectId: z.string(),\n  returnUrl: z.url(),\n});\nexport type PortalRequest = z.infer<typeof portalRequestSchema>;\n\nexport const portalResponseSchema = z.object({\n  url: z.url(),\n});\nexport type PortalResponse = z.infer<typeof portalResponseSchema>;\n","import { z } from 'zod';\n\n// The source of truth for a registration payload's shape — apps/api's\n// projects service validates against this directly (no parallel\n// hand-written type), and the admin UI can reuse it for form validation.\nexport const registerProjectRequestSchema = z\n  .object({\n    key: z.string().trim().min(1, 'is required'),\n    name: z.string().trim().min(1, 'is required'),\n    subjectType: z.string().trim().min(1, 'is required'),\n    environment: z.enum(['test', 'live'], 'must be \"test\" or \"live\"'),\n    envLocked: z.boolean().optional(),\n    providerKind: z.string().trim().min(1, 'is required'),\n    providerSecretKeyRef: z.string().optional(),\n    providerPublishableKeyRef: z.string().optional(),\n    providerPortalConfigRef: z.string().optional(),\n    statementDescriptor: z.string().optional(),\n    statementDescriptorPrefix: z.string().optional(),\n    graceDays: z.number().min(0, 'must be >= 0').optional(),\n    defaultPortalReturnUrl: z.url().optional(),\n  })\n  .superRefine((input, ctx) => {\n    if (!input.statementDescriptor && !input.statementDescriptorPrefix) {\n      ctx.addIssue({\n        code: 'custom',\n        path: ['statementDescriptor'],\n        message: 'statementDescriptor or statementDescriptorPrefix is required',\n      });\n    }\n  });\nexport type RegisterProjectRequest = z.infer<\n  typeof registerProjectRequestSchema\n>;\n","import { z } from 'zod';\n\n// Cap on self-serve trials: a leaked or buggy project key can cost at most\n// one month of entitlement per subject, never a decade.\nexport const MAX_TRIAL_DURATION_DAYS = 31;\nexport const DEFAULT_TRIAL_DURATION_DAYS = 7;\n\nexport const startTrialRequestSchema = z.object({\n  subjectId: z.string().min(1),\n  feature: z.string().min(1),\n  durationDays: z\n    .number()\n    .int()\n    .min(1)\n    .max(MAX_TRIAL_DURATION_DAYS)\n    .default(DEFAULT_TRIAL_DURATION_DAYS),\n});\n// Input (what a consumer sends — durationDays optional) and output (what the\n// route hands the service — durationDays defaulted) diverge here, unlike the\n// other contracts in this package.\nexport type StartTrialRequest = z.input<typeof startTrialRequestSchema>;\nexport type ParsedStartTrialRequest = z.output<typeof startTrialRequestSchema>;\n\nexport const trialGrantSchema = z.object({\n  id: z.string(),\n  subjectId: z.string(),\n  feature: z.string(),\n  expiresAt: z.iso.datetime(),\n  createdAt: z.iso.datetime(),\n});\nexport type TrialGrant = z.infer<typeof trialGrantSchema>;\n\n// `created: false` means a trial already existed for this subject+feature —\n// possibly one that has since expired (expiresAt in the past). A subject gets\n// one trial ever; retries return the original instead of stacking a new one.\nexport const startTrialResponseSchema = z.object({\n  trial: trialGrantSchema,\n  created: z.boolean(),\n});\nexport type StartTrialResponse = z.infer<typeof startTrialResponseSchema>;\n","import { z } from 'zod';\n\nexport const errorEnvelopeSchema = z.object({\n  error: z.object({\n    code: z.string(),\n    message: z.string(),\n  }),\n});\nexport type ErrorEnvelope = z.infer<typeof errorEnvelopeSchema>;\n","import { z } from 'zod';\n\nexport class InvalidWebhookSecretError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'InvalidWebhookSecretError';\n  }\n}\n\n// Stripe generates its own signing secret when a webhook endpoint is\n// created through its dashboard/API — this only validates the shape of a\n// value an operator copies in from there, it never generates one itself.\nconst webhookSigningSecretSchema = z\n  .string()\n  .regex(/^whsec_.+/, 'must be a non-empty whsec_-prefixed string');\n\nexport function resolveWebhookSigningSecret(value: string): string {\n  const result = webhookSigningSecretSchema.safeParse(value);\n  if (!result.success) {\n    throw new InvalidWebhookSecretError(result.error.issues[0].message);\n  }\n  return result.data;\n}\n","import { z } from 'zod';\n\nexport class InvalidPortalReturnUrlError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'InvalidPortalReturnUrlError';\n  }\n}\n\nconst portalReturnUrlSchema = z.url();\n\nexport function resolveDefaultPortalReturnUrl(value: string): string {\n  const result = portalReturnUrlSchema.safeParse(value);\n  if (!result.success) {\n    throw new InvalidPortalReturnUrlError(result.error.issues[0].message);\n  }\n  return result.data;\n}\n","import { errorEnvelopeSchema } from '@org/shared-types';\n\n// Thrown for every failure path — API denials, transport failures, and\n// malformed responses alike — so consumers can branch on `status`/`code`\n// instead of catching different error shapes.\nexport class BillingApiError extends Error {\n  readonly status: number;\n  readonly code: string;\n\n  constructor(status: number, code: string, message: string) {\n    super(message);\n    this.name = 'BillingApiError';\n    this.status = status;\n    this.code = code;\n  }\n}\n\nexport async function errorFromResponse(\n  response: Response,\n): Promise<BillingApiError> {\n  let code = 'unknown_error';\n  let message = `Request failed with status ${response.status}`;\n\n  try {\n    const body: unknown = await response.json();\n    const parsed = errorEnvelopeSchema.safeParse(body);\n    if (parsed.success) {\n      code = parsed.data.error.code;\n      message = parsed.data.error.message;\n    }\n  } catch {\n    // Body wasn't JSON or didn't match the envelope — keep the defaults.\n  }\n\n  return new BillingApiError(response.status, code, message);\n}\n\n// Status 0 distinguishes \"couldn't reach the API\" from a real HTTP response,\n// so middleware (sprint 16) can fail open on outages without also failing\n// open on 4xx denials.\nexport function networkError(cause: unknown): BillingApiError {\n  const message =\n    cause instanceof Error ? cause.message : 'Network request failed';\n  return new BillingApiError(0, 'network_error', message);\n}\n\nexport function invalidResponseError(message: string): BillingApiError {\n  return new BillingApiError(502, 'invalid_response', message);\n}\n","import { BillingApiError } from './errors.js';\nimport type {\n  CheckEntitlementInput,\n  EntitlementsResult,\n  GuardDecision,\n  LimitCheck,\n} from './types.js';\n\nfunction isMisconfiguration(err: unknown): boolean {\n  return (\n    err instanceof BillingApiError && err.status >= 400 && err.status < 500\n  );\n}\n\nfunction decideOnContent(\n  entitlements: EntitlementsResult,\n  feature: string | undefined,\n  limit: LimitCheck | undefined,\n): GuardDecision {\n  if (feature !== undefined) {\n    return entitlements.features[feature]\n      ? { decision: 'allow', entitlements }\n      : { decision: 'deny', reason: `Feature \"${feature}\" is not entitled` };\n  }\n\n  if (limit !== undefined) {\n    const max = entitlements.limits[limit.key];\n    return max !== undefined && limit.usage < max\n      ? { decision: 'allow', entitlements }\n      : { decision: 'deny', reason: `Limit \"${limit.key}\" has been reached` };\n  }\n\n  return { decision: 'allow', entitlements };\n}\n\n// Framework-agnostic orchestration over BillingClient — Fastify (or any\n// other framework) middleware only needs to map GuardDecision to a\n// response. Keep this file free of any framework import.\nexport async function checkEntitlement(\n  input: CheckEntitlementInput,\n): Promise<GuardDecision> {\n  const { client, subjectId, feature, limit, onUnavailable } = input;\n\n  let entitlements: EntitlementsResult;\n  try {\n    entitlements = await client.getEntitlements(subjectId);\n  } catch (err) {\n    if (isMisconfiguration(err)) {\n      const message =\n        err instanceof Error ? err.message : 'Billing request was rejected';\n      return { decision: 'deny', reason: message, misconfigured: true };\n    }\n    return onUnavailable === 'open'\n      ? { decision: 'unavailable-allow' }\n      : { decision: 'unavailable-deny', reason: 'Billing is unavailable' };\n  }\n\n  // Fresh or stale, this is content-based — a stale entitlements payload is\n  // the graceful-degradation path working, not an unavailability case.\n  return decideOnContent(entitlements, feature, limit);\n}\n","import type { FastifyPluginAsync, FastifyReply, FastifyRequest } from 'fastify';\n\nimport type {\n  BillingGuardPluginOptions,\n  PreHandler,\n  RouteGuardOptions,\n} from './fastify-types.js';\nimport { checkEntitlement } from './guard.js';\nimport type { GuardDecision, OnUnavailablePolicy } from './types.js';\n\nfunction sendErrorEnvelope(\n  reply: FastifyReply,\n  statusCode: number,\n  code: string,\n  message: string,\n) {\n  return reply.code(statusCode).send({ error: { code, message } });\n}\n\nasync function applyDecision(\n  request: FastifyRequest,\n  reply: FastifyReply,\n  decision: GuardDecision,\n): Promise<void> {\n  switch (decision.decision) {\n    case 'allow':\n      request.entitlements = decision.entitlements;\n      return;\n    case 'unavailable-allow':\n      return;\n    case 'deny':\n      sendErrorEnvelope(\n        reply,\n        403,\n        decision.misconfigured ? 'billing_misconfigured' : 'entitlement_denied',\n        decision.reason,\n      );\n      return;\n    case 'unavailable-deny':\n      sendErrorEnvelope(reply, 503, 'billing_unavailable', decision.reason);\n      return;\n  }\n}\n\nfunction resolvePolicy(\n  fallback: OnUnavailablePolicy,\n  override: OnUnavailablePolicy | undefined,\n): OnUnavailablePolicy {\n  return override ?? fallback;\n}\n\nconst billingGuardPlugin: FastifyPluginAsync<\n  BillingGuardPluginOptions\n> = async (app, opts) => {\n  app.decorateRequest('entitlements', undefined);\n\n  app.decorate(\n    'requireEntitlement',\n    (feature: string, options?: RouteGuardOptions): PreHandler =>\n      async (request, reply) => {\n        const decision = await checkEntitlement({\n          client: opts.client,\n          subjectId: opts.getSubjectId(request),\n          feature,\n          onUnavailable: resolvePolicy(\n            opts.onUnavailable,\n            options?.onUnavailable,\n          ),\n        });\n        await applyDecision(request, reply, decision);\n      },\n  );\n\n  app.decorate(\n    'requireWithinLimit',\n    (\n      limitKey: string,\n      getUsage: (request: FastifyRequest) => number | Promise<number>,\n      options?: RouteGuardOptions,\n    ): PreHandler =>\n      async (request, reply) => {\n        const usage = await getUsage(request);\n        const decision = await checkEntitlement({\n          client: opts.client,\n          subjectId: opts.getSubjectId(request),\n          limit: { key: limitKey, usage },\n          onUnavailable: resolvePolicy(\n            opts.onUnavailable,\n            options?.onUnavailable,\n          ),\n        });\n        await applyDecision(request, reply, decision);\n      },\n  );\n};\n\n// Equivalent to wrapping with the `fastify-plugin` package's `skip-override`\n// marker, without taking it on as a runtime dependency — this package's only\n// runtime dependency stays @org/shared-types. See:\n// https://github.com/fastify/fastify-plugin/blob/main/plugin.js\n(billingGuardPlugin as unknown as Record<symbol, boolean>)[\n  Symbol.for('skip-override')\n] = true;\n\nexport default billingGuardPlugin;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,IAAAA,cAAkB;;;ACAlB,iBAAkB;AAEX,IAAM,oBAAoB,aAAE,KAAK;AAAA,EACtC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAKM,IAAM,0BAA0B,aAAE,KAAK;AAAA,EAC5C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGM,IAAM,0BAA0B,aAAE,OAAO;AAAA,EAC9C,IAAI,aAAE,OAAO;AAAA,EACb,WAAW,aAAE,OAAO;AAAA,EACpB,iBAAiB,aAAE,OAAO;AAAA,EAC1B,MAAM,aAAE,OAAO;AAAA,EACf,QAAQ;AAAA,EACR,UAAU,aAAE,OAAO;AAAA,EACnB,WAAW,aAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,gBAAgB,aAAE,OAAO,EAAE,SAAS;AAAA,EACpC,YAAY,aAAE,IAAI,SAAS;AAAA,EAC3B,aAAa,aAAE,IAAI,SAAS,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKvC,YAAY,aAAE,OAAO,EAAE,SAAS;AAClC,CAAC;AAGM,IAAM,yBAAyB,wBAAwB,OAAO;AAAA,EACnE,SAAS,aAAE,OAAO,aAAE,OAAO,GAAG,aAAE,QAAQ,CAAC;AAAA,EACzC,eAAe,aAAE,OAAO,EAAE,SAAS;AAAA,EACnC,aAAa,aAAE,OAAO,EAAE,SAAS;AAAA,EACjC,aAAa,aAAE,IAAI,SAAS,EAAE,SAAS;AACzC,CAAC;AAGM,IAAM,uBAAuB,aAAE,OAAO;AAAA,EAC3C,WAAW,aAAE,OAAO;AAAA,EACpB,OAAO,aAAE,OAAO;AAClB,CAAC;AAGM,IAAM,2BAA2B,aAAE,OAAO;AAAA,EAC/C,QAAQ,aAAE,MAAM,uBAAuB;AAAA,EACvC,OAAO,aAAE,OAAO;AAAA,EAChB,OAAO,aAAE,OAAO;AAAA,EAChB,QAAQ,aAAE,OAAO;AAAA,EACjB,iBAAiB,aAAE,MAAM,oBAAoB;AAC/C,CAAC;AAOM,IAAM,mBAAmB,aAAE,mBAAmB,QAAQ;AAAA,EAC3D,aAAE,OAAO,EAAE,MAAM,aAAE,QAAQ,QAAQ,GAAG,IAAI,wBAAwB,CAAC;AAAA,EACnE,aAAE,OAAO;AAAA,IACP,MAAM,aAAE,QAAQ,YAAY;AAAA,IAC5B,MAAM;AAAA,IACN,IAAI;AAAA,EACN,CAAC;AAAA,EACD,aAAE,OAAO,EAAE,MAAM,aAAE,QAAQ,OAAO,EAAE,CAAC;AAAA,EACrC,aAAE,OAAO;AAAA,IACP,MAAM,aAAE,QAAQ,SAAS;AAAA,IACzB,MAAM;AAAA,IACN,IAAI;AAAA,EACN,CAAC;AAAA,EACD,aAAE,OAAO,EAAE,MAAM,aAAE,QAAQ,sBAAsB,EAAE,CAAC;AAAA,EACpD,aAAE,OAAO,EAAE,MAAM,aAAE,QAAQ,MAAM,GAAG,QAAQ,aAAE,OAAO,EAAE,CAAC;AAAA,EACxD,aAAE,OAAO,EAAE,MAAM,aAAE,QAAQ,OAAO,GAAG,QAAQ,aAAE,OAAO,EAAE,CAAC;AAC3D,CAAC;AAGM,IAAM,6BAA6B,aAAE,OAAO;AAAA,EACjD,OAAO;AAAA,EACP,SAAS,aACN,OAAO;AAAA,IACN,OAAO;AAAA,IACP,aAAa,aAAE,IAAI,SAAS,EAAE,SAAS;AAAA,EACzC,CAAC,EACA,SAAS;AAAA,EACZ,YAAY;AACd,CAAC;AAGM,IAAM,sBAAsB,aAAE,KAAK;AAAA,EACxC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,IAAM,uBAAuB,aAAE,OAAO;AAAA,EAC3C,SAAS;AACX,CAAC;AAGM,IAAM,4BAA4B,aAAE,OAAO;AAAA,EAChD,OAAO,aAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,QAAQ,aAAE,OAAO;AACnB,CAAC;AAYM,IAAM,0BAA0B,aAAE,OAAO;AAAA,EAC9C,YAAY,aAAE,IAAI,SAAS;AAAA,EAC3B,IAAI,aAAE,OAAO;AACf,CAAC;AAQM,IAAM,2BAA2B,aACrC,OAAO;AAAA,EACN,WAAW,aAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC3B,QAAQ,wBAAwB,SAAS;AAAA,EACzC,OAAO,aAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS;AAC9C,CAAC,EACA;AAAA,EACC,aAAE,MAAM;AAAA,IACN,aAAE,OAAO,EAAE,gBAAgB,aAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;AAAA,IAC9C,aAAE,OAAO,EAAE,KAAK,aAAE,QAAQ,IAAI,EAAE,CAAC;AAAA,EACnC,CAAC;AACH;AAGK,IAAM,gCAAgC,aAAE,OAAO;AAAA,EACpD,SAAS,aAAE,OAAO;AAAA,EAClB,SAAS;AACX,CAAC;AAEM,IAAM,4BAA4B,aAAE,OAAO;AAAA,EAChD,UAAU,aAAE,MAAM,6BAA6B;AAAA;AAAA;AAAA;AAAA,EAI/C,QAAQ,aAAE,OAAO,aAAE,OAAO,GAAG,aAAE,OAAO,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA,EAKvC,WAAW,aAAE,QAAQ;AAAA,EACrB,YAAY,wBAAwB,SAAS;AAC/C,CAAC;;;AC7KD,IAAAC,cAAkB;;;ACAlB,IAAAC,cAAkB;AAGX,IAAM,2BAA2B,cAAE,KAAK;AAAA,EAC7C;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGD,IAAM,+BAA+B,cAAE,OAAO;AAAA,EAC5C,OAAO,yBAAyB,QAAQ,CAAC,MAAM,CAAC;AAAA,EAChD,SAAS,cAAE,OAAO;AAAA,EAClB,kBAAkB,cAAE,IAAI,SAAS;AAAA,EACjC,mBAAmB,cAAE,QAAQ;AAC/B,CAAC;AAED,IAAM,2BAA2B,cAAE,OAAO;AAAA,EACxC,OAAO,cAAE,QAAQ,MAAM;AACzB,CAAC;AAEM,IAAM,yBAAyB,cAAE,mBAAmB,SAAS;AAAA,EAClE;AAAA,EACA;AACF,CAAC;;;ADpBM,IAAM,2BAA2B,cAAE,OAAO;AAAA,EAC/C,UAAU,cAAE,OAAO,cAAE,OAAO,GAAG,cAAE,KAAK,CAAC,gBAAgB,UAAU,CAAC,CAAC;AAAA,EACnE,QAAQ,cAAE,OAAO,cAAE,OAAO,GAAG,cAAE,KAAK,CAAC,gBAAgB,UAAU,CAAC,CAAC;AACnE,CAAC;AAGM,IAAM,6BAA6B,cAAE,OAAO;AAAA,EACjD,MAAM,cAAE,OAAO,EAAE,SAAS;AAAA,EAC1B,UAAU,cAAE,OAAO,cAAE,OAAO,GAAG,cAAE,QAAQ,CAAC;AAAA,EAC1C,QAAQ,cAAE,OAAO,cAAE,OAAO,GAAG,cAAE,OAAO,CAAC;AAAA,EACvC,QAAQ;AAAA,EACR,QAAQ,cAAE,KAAK,CAAC,gBAAgB,YAAY,MAAM,CAAC;AAAA,EACnD,SAAS;AACX,CAAC;;;AErBD,IAAAC,cAAkB;AAKX,IAAM,qBAAqB,cAAE,KAAK,CAAC,QAAQ,UAAU,QAAQ,CAAC;AAG9D,IAAM,uBAAuB,cAAE,mBAAmB,QAAQ;AAAA,EAC/D,cAAE,OAAO,EAAE,MAAM,cAAE,QAAQ,SAAS,GAAG,SAAS,cAAE,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;AAAA,EACnE,cAAE,OAAO;AAAA,IACP,MAAM,cAAE,QAAQ,OAAO;AAAA,IACvB,OAAO,cAAE,OAAO,EAAE,IAAI,CAAC;AAAA,IACvB,OAAO,cAAE,OAAO;AAAA,EAClB,CAAC;AACH,CAAC;AAGM,IAAM,8BAA8B,cAAE,OAAO;AAAA,EAClD,WAAW,cAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC3B,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,OAAO,cAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,QAAQ,cAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,WAAW,cAAE,IAAI,SAAS,EAAE,SAAS;AACvC,CAAC;AAMM,IAAM,kCAAkC,cAAE,OAAO;AAAA,EACtD,WAAW,cAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC3B,MAAM;AAAA,EACN,SAAS,cAAE,MAAM,oBAAoB,EAAE,IAAI,CAAC;AAAA,EAC5C,OAAO,cAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,QAAQ,cAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,WAAW,cAAE,IAAI,SAAS,EAAE,SAAS;AACvC,CAAC;AAKM,IAAM,uBAAuB,cAAE,OAAO;AAAA,EAC3C,IAAI,cAAE,OAAO;AAAA,EACb,WAAW,cAAE,OAAO;AAAA,EACpB,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,OAAO,cAAE,OAAO;AAAA,EAChB,QAAQ,cAAE,OAAO;AAAA,EACjB,WAAW,cAAE,IAAI,SAAS,EAAE,SAAS;AAAA,EACrC,WAAW,cAAE,IAAI,SAAS;AAC5B,CAAC;AAGM,IAAM,6BAA6B,cAAE,OAAO;AAAA,EACjD,WAAW,cAAE,MAAM,oBAAoB;AACzC,CAAC;AAGM,IAAM,8BAA8B,cAAE,OAAO;AAAA,EAClD,WAAW,cAAE,MAAM,oBAAoB;AAAA,EACvC,OAAO,cAAE,OAAO;AAAA,EAChB,OAAO,cAAE,OAAO;AAAA,EAChB,QAAQ,cAAE,OAAO;AACnB,CAAC;;;AJpDM,IAAM,oBAAoB,cAAE,OAAO;AAAA,EACxC,UAAU,cAAE,OAAO;AAAA,EACnB,QAAQ,cAAE,OAAO;AAAA,EACjB,UAAU,cAAE,OAAO;AAAA,EACnB,OAAO,cAAE,OAAO;AAAA,EAChB,UAAU,cAAE,OAAO;AAAA,EACnB,QAAQ,cAAE,OAAO;AACnB,CAAC;AAGD,IAAM,yBAAyB,cAAE,OAAO;AAAA,EACtC,UAAU,cAAE,OAAO;AAAA,EACnB,cAAc,cAAE,OAAO;AAAA,EACvB,eAAe,cAAE,OAAO;AAAA,EACxB,QAAQ;AAAA,EACR,iBAAiB,cAAE,OAAO;AAAA,EAC1B,sBAAsB,cAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,YAAY,cAAE,OAAO;AACvB,CAAC;AAEM,IAAM,uBAAuB,uBAAuB,OAAO;AAAA,EAChE,WAAW,cAAE,OAAO;AAAA,EACpB,YAAY,cAAE,OAAO;AAAA,EACrB,aAAa,cAAE,OAAO;AAAA,EACtB,aAAa,cAAE,OAAO;AAAA,EACtB,aAAa,cAAE,KAAK,CAAC,QAAQ,MAAM,CAAC;AAAA,EACpC,WAAW,cAAE,QAAQ;AAAA,EACrB,WAAW,cAAE,MAAM,cAAE,OAAO,CAAC;AAC/B,CAAC;AAGM,IAAM,6BAA6B,cAAE,OAAO;AAAA,EACjD,WAAW;AAAA;AAAA;AAAA,EAGX,aAAa,cAAE,MAAM,cAAE,OAAO,CAAC;AAAA,EAC/B,UAAU,cAAE,MAAM,oBAAoB;AACxC,CAAC;AAMM,IAAM,gCAAgC,cAAE,OAAO;AAAA,EACpD,QAAQ,cAAE,MAAM,uBAAuB;AAAA,EACvC,YAAY,cAAE,OAAO,EAAE,SAAS;AAAA,EAChC,aAAa,cAAE,OAAO;AAAA,EACtB,iBAAiB,cAAE,MAAM,oBAAoB,EAAE,SAAS;AAC1D,CAAC;AAKM,IAAM,iCAAiC,cAAE,OAAO;AAAA,EACrD,OAAO;AAAA,EACP,YAAY,cAAE,OAAO;AAAA,IACnB,SAAS,cACN,OAAO;AAAA,MACN,OAAO,yBAAyB,QAAQ,CAAC,SAAS,MAAM,CAAC;AAAA,MACzD,aAAa,cAAE,IAAI,SAAS,EAAE,SAAS;AAAA,IACzC,CAAC,EACA,SAAS;AAAA,IACZ,YAAY;AAAA,EACd,CAAC;AACH,CAAC;AAKM,IAAM,qBAAqB,cAAE,OAAO;AAAA,EACzC,IAAI,cAAE,OAAO;AAAA,EACb,aAAa,cAAE,OAAO;AAAA,EACtB,YAAY,cAAE,OAAO;AAAA,EACrB,oBAAoB,cAAE,OAAO,EAAE,SAAS;AAC1C,CAAC;AAKM,IAAM,sBAAsB,cAAE;AAAA,EACnC,cAAE,OAAO;AAAA,EACT,cAAE,MAAM,CAAC,cAAE,QAAQ,GAAG,cAAE,OAAO,CAAC,CAAC;AACnC;AASO,IAAM,qCAAqC,cAAE,OAAO;AAAA,EACzD,KAAK,cAAE,OAAO;AAAA,EACd,eAAe;AAAA,EACf,eAAe,cAAE,KAAK,CAAC,SAAS,MAAM,CAAC,EAAE,SAAS;AACpD,CAAC;AAKM,IAAM,mCAAmC,cAAE,OAAO;AAAA,EACvD,SAAS;AAAA,EACT,cAAc;AAAA,EACd,cAAc,cAAE,MAAM,uBAAuB;AAAA,EAC7C,iBAAiB,cAAE,MAAM,oBAAoB;AAAA,EAC7C,kBAAkB,mCAAmC,SAAS;AAChE,CAAC;AAKM,IAAM,mBAAmB,cAAE,OAAO;AAAA,EACvC,IAAI,cAAE,OAAO;AAAA,EACb,UAAU,cAAE,KAAK,CAAC,SAAS,MAAM,CAAC;AAAA,EAClC,UAAU,cAAE,OAAO;AAAA,EACnB,iBAAiB,cAAE,OAAO;AAAA,EAC1B,YAAY,cAAE,KAAK,CAAC,UAAU,WAAW,SAAS,CAAC;AAAA,EACnD,uBAAuB,cAAE,OAAO,EAAE,SAAS;AAC7C,CAAC;AAGM,IAAM,kBAAkB,cAAE,OAAO;AAAA,EACtC,IAAI,cAAE,OAAO;AAAA,EACb,KAAK,cAAE,OAAO;AAAA,EACd,MAAM,cAAE,OAAO;AAAA,EACf,eAAe;AAAA,EACf,qBAAqB,cAAE,OAAO;AAAA,EAC9B,QAAQ,cAAE,MAAM,gBAAgB;AAClC,CAAC;AAQM,IAAM,2BAA2B,cAAE,OAAO;AAAA,EAC/C,SAAS,cAAE,OAAO;AAAA,IAChB,qBAAqB,cAAE,OAAO,EAAE,SAAS;AAAA,IACzC,2BAA2B,cAAE,OAAO,EAAE,SAAS;AAAA,EACjD,CAAC;AAAA,EACD,OAAO,cAAE,MAAM,eAAe;AAChC,CAAC;AAIM,IAAM,8BAA8B,cAAE,OAAO;AAAA,EAClD,WAAW,cAAE,OAAO;AAAA,EACpB,cAAc,cAAE,OAAO;AAAA,EACvB,aAAa,cAAE,KAAK,CAAC,QAAQ,MAAM,CAAC;AAAA,EACpC,WAAW,cAAE,QAAQ;AAAA,EACrB,iBAAiB,cAAE,OAAO,EAAE,SAAS;AAAA,EACrC,sBAAsB,cAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,iBAAiB,cAAE,OAAO;AAAA,EAC1B,0BAA0B,cAAE,QAAQ;AAAA,EACpC,wBAAwB,cAAE,OAAO,EAAE,SAAS;AAC9C,CAAC;AAMM,IAAM,wBAAwB,qBAAqB,OAAO;AAAA,EAC/D,WAAW,cAAE,OAAO;AACtB,CAAC;AAGM,IAAM,2BAA2B,cAAE,OAAO;AAAA,EAC/C,SAAS,cAAE,MAAM,qBAAqB;AAAA,EACtC,YAAY,cAAE,OAAO,EAAE,SAAS;AAAA,EAChC,aAAa,cAAE,OAAO;AACxB,CAAC;AAMM,IAAM,gCAAgC,cAAE,OAAO;AAAA,EACpD,MAAM,cAAE,MAAM,cAAE,OAAO,CAAC;AAAA,EACxB,WAAW,cAAE,MAAM,cAAE,OAAO,CAAC;AAAA,EAC7B,QAAQ,cAAE,MAAM,cAAE,OAAO,CAAC;AAC5B,CAAC;AAUM,IAAM,6BAA6B,cAAE,OAAO;AAAA,EACjD,QAAQ,cAAE,MAAM,cAAE,OAAO,CAAC;AAAA,EAC1B,OAAO,cAAE,MAAM,cAAE,OAAO,EAAE,KAAK,cAAE,OAAO,GAAG,MAAM,cAAE,OAAO,EAAE,CAAC,CAAC;AAAA,EAC9D,QAAQ,cAAE,MAAM,cAAE,MAAM,cAAE,OAAO,CAAC,CAAC;AACrC,CAAC;AAOM,IAAM,6BAA6B,cAAE,OAAO;AAAA,EACjD,WAAW,cAAE,OAAO;AAAA,EACpB,WAAW,cAAE,OAAO;AAAA,EACpB,OAAO,cAAE,OAAO;AAAA,EAChB,eAAe,cAAE,OAAO;AAAA,EACxB,iBAAiB,cAAE,IAAI,SAAS;AAAA,EAChC,gBAAgB,cAAE,IAAI,SAAS;AACjC,CAAC;AAGM,IAAM,sCAAsC,cAAE,OAAO;AAAA,EAC1D,QAAQ,cAAE,MAAM,0BAA0B;AAC5C,CAAC;AAQM,IAAM,sCAAsC,cAAE,OAAO;AAAA,EAC1D,SAAS;AAAA,EACT,aAAa,cAAE,MAAM,cAAE,OAAO,CAAC;AAAA,EAC/B,cAAc,cAAE,OAAO;AAAA,EACvB,OAAO,cAAE,MAAM,eAAe;AAAA;AAAA;AAAA;AAAA;AAAA,EAK9B,sBAAsB,cAAE,QAAQ;AAClC,CAAC;;;AKrPD,IAAAC,cAAkB;AAEX,IAAM,wBAAwB,cAAE,OAAO;AAAA,EAC5C,SAAS,cAAE,OAAO;AAAA,EAClB,WAAW,cAAE,OAAO;AAAA,EACpB,YAAY,cAAE,IAAI;AAAA,EAClB,WAAW,cAAE,IAAI;AAAA,EACjB,OAAO,cAAE,MAAM,EAAE,SAAS;AAC5B,CAAC;AAGM,IAAM,yBAAyB,cAAE,OAAO;AAAA,EAC7C,KAAK,cAAE,IAAI;AACb,CAAC;AAGM,IAAM,sBAAsB,cAAE,OAAO;AAAA,EAC1C,WAAW,cAAE,OAAO;AAAA,EACpB,WAAW,cAAE,IAAI;AACnB,CAAC;AAGM,IAAM,uBAAuB,cAAE,OAAO;AAAA,EAC3C,KAAK,cAAE,IAAI;AACb,CAAC;;;ACxBD,IAAAC,cAAkB;AAKX,IAAM,+BAA+B,cACzC,OAAO;AAAA,EACN,KAAK,cAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,aAAa;AAAA,EAC3C,MAAM,cAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,aAAa;AAAA,EAC5C,aAAa,cAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,aAAa;AAAA,EACnD,aAAa,cAAE,KAAK,CAAC,QAAQ,MAAM,GAAG,0BAA0B;AAAA,EAChE,WAAW,cAAE,QAAQ,EAAE,SAAS;AAAA,EAChC,cAAc,cAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,aAAa;AAAA,EACpD,sBAAsB,cAAE,OAAO,EAAE,SAAS;AAAA,EAC1C,2BAA2B,cAAE,OAAO,EAAE,SAAS;AAAA,EAC/C,yBAAyB,cAAE,OAAO,EAAE,SAAS;AAAA,EAC7C,qBAAqB,cAAE,OAAO,EAAE,SAAS;AAAA,EACzC,2BAA2B,cAAE,OAAO,EAAE,SAAS;AAAA,EAC/C,WAAW,cAAE,OAAO,EAAE,IAAI,GAAG,cAAc,EAAE,SAAS;AAAA,EACtD,wBAAwB,cAAE,IAAI,EAAE,SAAS;AAC3C,CAAC,EACA,YAAY,CAAC,OAAO,QAAQ;AAC3B,MAAI,CAAC,MAAM,uBAAuB,CAAC,MAAM,2BAA2B;AAClE,QAAI,SAAS;AAAA,MACX,MAAM;AAAA,MACN,MAAM,CAAC,qBAAqB;AAAA,MAC5B,SAAS;AAAA,IACX,CAAC;AAAA,EACH;AACF,CAAC;;;AC7BH,IAAAC,cAAkB;AAIX,IAAM,0BAA0B;AAChC,IAAM,8BAA8B;AAEpC,IAAM,0BAA0B,cAAE,OAAO;AAAA,EAC9C,WAAW,cAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC3B,SAAS,cAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACzB,cAAc,cACX,OAAO,EACP,IAAI,EACJ,IAAI,CAAC,EACL,IAAI,uBAAuB,EAC3B,QAAQ,2BAA2B;AACxC,CAAC;AAOM,IAAM,mBAAmB,cAAE,OAAO;AAAA,EACvC,IAAI,cAAE,OAAO;AAAA,EACb,WAAW,cAAE,OAAO;AAAA,EACpB,SAAS,cAAE,OAAO;AAAA,EAClB,WAAW,cAAE,IAAI,SAAS;AAAA,EAC1B,WAAW,cAAE,IAAI,SAAS;AAC5B,CAAC;AAMM,IAAM,2BAA2B,cAAE,OAAO;AAAA,EAC/C,OAAO;AAAA,EACP,SAAS,cAAE,QAAQ;AACrB,CAAC;;;ACtCD,IAAAC,cAAkB;AAEX,IAAM,sBAAsB,cAAE,OAAO;AAAA,EAC1C,OAAO,cAAE,OAAO;AAAA,IACd,MAAM,cAAE,OAAO;AAAA,IACf,SAAS,cAAE,OAAO;AAAA,EACpB,CAAC;AACH,CAAC;;;ACPD,IAAAC,eAAkB;AAYlB,IAAM,6BAA6B,eAChC,OAAO,EACP,MAAM,aAAa,4CAA4C;;;ACdlE,IAAAC,eAAkB;AASlB,IAAM,wBAAwB,eAAE,IAAI;;;ACJ7B,IAAM,kBAAN,cAA8B,MAAM;AAAA,EAChC;AAAA,EACA;AAAA,EAET,YAAY,QAAgB,MAAc,SAAiB;AACzD,UAAM,OAAO;AACb,SAAK,OAAO;AACZ,SAAK,SAAS;AACd,SAAK,OAAO;AAAA,EACd;AACF;;;ACPA,SAAS,mBAAmB,KAAuB;AACjD,SACE,eAAe,mBAAmB,IAAI,UAAU,OAAO,IAAI,SAAS;AAExE;AAEA,SAAS,gBACP,cACA,SACA,OACe;AACf,MAAI,YAAY,QAAW;AACzB,WAAO,aAAa,SAAS,OAAO,IAChC,EAAE,UAAU,SAAS,aAAa,IAClC,EAAE,UAAU,QAAQ,QAAQ,YAAY,OAAO,oBAAoB;AAAA,EACzE;AAEA,MAAI,UAAU,QAAW;AACvB,UAAM,MAAM,aAAa,OAAO,MAAM,GAAG;AACzC,WAAO,QAAQ,UAAa,MAAM,QAAQ,MACtC,EAAE,UAAU,SAAS,aAAa,IAClC,EAAE,UAAU,QAAQ,QAAQ,UAAU,MAAM,GAAG,qBAAqB;AAAA,EAC1E;AAEA,SAAO,EAAE,UAAU,SAAS,aAAa;AAC3C;AAKA,eAAsB,iBACpB,OACwB;AACxB,QAAM,EAAE,QAAQ,WAAW,SAAS,OAAO,cAAc,IAAI;AAE7D,MAAI;AACJ,MAAI;AACF,mBAAe,MAAM,OAAO,gBAAgB,SAAS;AAAA,EACvD,SAAS,KAAK;AACZ,QAAI,mBAAmB,GAAG,GAAG;AAC3B,YAAM,UACJ,eAAe,QAAQ,IAAI,UAAU;AACvC,aAAO,EAAE,UAAU,QAAQ,QAAQ,SAAS,eAAe,KAAK;AAAA,IAClE;AACA,WAAO,kBAAkB,SACrB,EAAE,UAAU,oBAAoB,IAChC,EAAE,UAAU,oBAAoB,QAAQ,yBAAyB;AAAA,EACvE;AAIA,SAAO,gBAAgB,cAAc,SAAS,KAAK;AACrD;;;AClDA,SAAS,kBACP,OACA,YACA,MACA,SACA;AACA,SAAO,MAAM,KAAK,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,EAAE,CAAC;AACjE;AAEA,eAAe,cACb,SACA,OACA,UACe;AACf,UAAQ,SAAS,UAAU;AAAA,IACzB,KAAK;AACH,cAAQ,eAAe,SAAS;AAChC;AAAA,IACF,KAAK;AACH;AAAA,IACF,KAAK;AACH;AAAA,QACE;AAAA,QACA;AAAA,QACA,SAAS,gBAAgB,0BAA0B;AAAA,QACnD,SAAS;AAAA,MACX;AACA;AAAA,IACF,KAAK;AACH,wBAAkB,OAAO,KAAK,uBAAuB,SAAS,MAAM;AACpE;AAAA,EACJ;AACF;AAEA,SAAS,cACP,UACA,UACqB;AACrB,SAAO,YAAY;AACrB;AAEA,IAAM,qBAEF,OAAO,KAAK,SAAS;AACvB,MAAI,gBAAgB,gBAAgB,MAAS;AAE7C,MAAI;AAAA,IACF;AAAA,IACA,CAAC,SAAiB,YAChB,OAAO,SAAS,UAAU;AACxB,YAAM,WAAW,MAAM,iBAAiB;AAAA,QACtC,QAAQ,KAAK;AAAA,QACb,WAAW,KAAK,aAAa,OAAO;AAAA,QACpC;AAAA,QACA,eAAe;AAAA,UACb,KAAK;AAAA,UACL,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AACD,YAAM,cAAc,SAAS,OAAO,QAAQ;AAAA,IAC9C;AAAA,EACJ;AAEA,MAAI;AAAA,IACF;AAAA,IACA,CACE,UACA,UACA,YAEA,OAAO,SAAS,UAAU;AACxB,YAAM,QAAQ,MAAM,SAAS,OAAO;AACpC,YAAM,WAAW,MAAM,iBAAiB;AAAA,QACtC,QAAQ,KAAK;AAAA,QACb,WAAW,KAAK,aAAa,OAAO;AAAA,QACpC,OAAO,EAAE,KAAK,UAAU,MAAM;AAAA,QAC9B,eAAe;AAAA,UACb,KAAK;AAAA,UACL,SAAS;AAAA,QACX;AAAA,MACF,CAAC;AACD,YAAM,cAAc,SAAS,OAAO,QAAQ;AAAA,IAC9C;AAAA,EACJ;AACF;AAMC,mBACC,uBAAO,IAAI,eAAe,CAC5B,IAAI;AAEJ,IAAO,qBAAQ;","names":["import_zod","import_zod","import_zod","import_zod","import_zod","import_zod","import_zod","import_zod","import_zod","import_zod"]}

package/dist/fastify.d.cts

@@ -1,5 +1,5 @@
 import { FastifyRequest, FastifyReply, FastifyPluginAsync } from 'fastify';
-import { E as EntitlementsResult, O as OnUnavailablePolicy, B as BillingClient } from './types-CVx_O7Sc.cjs';
+import { E as EntitlementsResult, O as OnUnavailablePolicy, B as BillingClient } from './types-C1m-_c0H.cjs';
 import 'zod';
 
 type PreHandler = (request: FastifyRequest, reply: FastifyReply) => Promise<void>;

package/dist/fastify.d.ts

@@ -1,5 +1,5 @@
 import { FastifyRequest, FastifyReply, FastifyPluginAsync } from 'fastify';
-import { E as EntitlementsResult, O as OnUnavailablePolicy, B as BillingClient } from './types-CVx_O7Sc.js';
+import { E as EntitlementsResult, O as OnUnavailablePolicy, B as BillingClient } from './types-C1m-_c0H.js';
 import 'zod';
 
 type PreHandler = (request: FastifyRequest, reply: FastifyReply) => Promise<void>;

package/dist/fastify.js

@@ -1,6 +1,6 @@
 import {
   checkEntitlement
-} from "./chunk-3OSJ6UJT.js";
+} from "./chunk-YQNTE5Q6.js";
 
 // src/middleware.ts
 function sendErrorEnvelope(reply, statusCode, code, message) {