@happyvertical/smrt-subscriptions 0.60.15 → 0.60.17

package/dist/billing/signing.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Signed Checkout metadata and secret hygiene (#4786).
+ *
+ * Another integration on the same Stripe account can create Checkout Sessions
+ * with any metadata it likes. A completed session is only trusted to link a
+ * tenant and plan when its `smrt_*` metadata carries an HMAC made with a
+ * server-side secret at session creation. Uses WebCrypto so the module loads
+ * in every runtime the package does.
+ */
+export declare const METADATA_SIGNATURE_KEY = "smrt_sig";
+export declare const METADATA_PURPOSE = "tenant_subscription";
+/** Compare without an early exit on the first differing character. */
+export declare function constantTimeEqual(left: string, right: string): boolean;
+/** Add the signature to `metadata`. Only `smrt_*` keys are covered. */
+export declare function signCheckoutMetadata(metadata: Record<string, string>, secret: string): Promise<Record<string, string>>;
+export declare function checkoutMetadataValid(metadata: Record<string, string>, secret: string): Promise<boolean>;
+/**
+ * Strip anything shaped like a Stripe key or signing secret. Applied to every
+ * error message before it reaches a log, as provider errors can echo the
+ * credential they were called with.
+ */
+export declare function redactSecrets(text: string): string;
+export declare function safeErrorMessage(error: unknown): string;
+//# sourceMappingURL=signing.d.ts.map

package/dist/billing/signing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.d.ts","sourceRoot":"","sources":["../../src/billing/signing.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,eAAO,MAAM,sBAAsB,aAAa,CAAC;AACjD,eAAO,MAAM,gBAAgB,wBAAwB,CAAC;AAyBtD,sEAAsE;AACtE,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAOtE;AAeD,uEAAuE;AACvE,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAChC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAQjC;AAED,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAChC,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,OAAO,CAAC,CAOlB;AAID;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAElD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAGvD"}

package/dist/billing/types.d.ts

@@ -0,0 +1,265 @@
+/**
+ * Types for the billing host glue (#4786).
+ *
+ * The provider port is structural: `StripeAccountingProvider` from
+ * `@happyvertical/accounting` satisfies it (a compile-time test pins that), so
+ * this package carries no runtime or type dependency on the SDK. Every
+ * provider call goes through that SDK; nothing here talks to Stripe directly.
+ */
+import type { DatabaseInterface } from '@happyvertical/sql';
+import type { SubscriptionPlan } from '../models/SubscriptionPlan.js';
+/** A line item priced by a provider price id (never by a client-sent amount). */
+export interface BillingCheckoutLineItem {
+    price: string;
+    quantity: number;
+}
+export interface BillingCheckoutSessionInput {
+    mode?: 'subscription';
+    successUrl: string;
+    cancelUrl: string;
+    customerExternalId?: string;
+    customerEmail?: string;
+    clientReferenceId?: string;
+    lineItems: BillingCheckoutLineItem[];
+    metadata: Record<string, string>;
+    idempotencyKey?: string;
+}
+/** The slice of a provider subscription this module reads. */
+export interface BillingSubscriptionState {
+    externalId: string;
+    status: string;
+    customerExternalId: string;
+    currentPeriodStart?: Date;
+    currentPeriodEnd?: Date;
+    cancelAtPeriodEnd: boolean;
+    canceledAt?: Date;
+    trialEnd?: Date;
+    raw?: unknown;
+}
+/** A parsed (not yet trusted until `verify` passed) webhook event. */
+export interface BillingProviderWebhookEvent {
+    id?: string;
+    type: string;
+    timestamp: Date;
+    payload: unknown;
+}
+/**
+ * The provider operations the glue needs. `StripeAccountingProvider` from
+ * `@happyvertical/accounting` is assignable to this.
+ */
+export interface BillingProviderPort {
+    readonly webhooks: {
+        verify(payload: string, signature: string, secret: string): boolean;
+        parse(payload: string): BillingProviderWebhookEvent;
+    };
+    readonly billing: {
+        createCheckoutSession(input: BillingCheckoutSessionInput): Promise<{
+            externalId: string;
+            url: string | null;
+        }>;
+        createCustomerPortalSession(input: {
+            customerExternalId: string;
+            returnUrl: string;
+        }): Promise<{
+            url: string;
+        }>;
+        retrieveSubscriptionStatus(subscriptionExternalId: string): Promise<BillingSubscriptionState>;
+    };
+}
+/** Fixed, host-configured destinations. Never taken from a request. */
+export interface BillingUrls {
+    /** Where Checkout sends the buyer after paying. */
+    successUrl: string;
+    /** Where Checkout sends the buyer when they back out. */
+    cancelUrl: string;
+    /** Where the customer portal returns to. */
+    portalReturnUrl: string;
+}
+/**
+ * Structured, secret-free log sink. Every field passed is safe to persist:
+ * event ids, types, tenant ids and reason codes only.
+ */
+export interface BillingLogger {
+    info?(message: string, fields?: Record<string, unknown>): void;
+    warn?(message: string, fields?: Record<string, unknown>): void;
+    error?(message: string, fields?: Record<string, unknown>): void;
+}
+export interface BillingPlanPurchaseContext {
+    tenantId: string;
+    plan: SubscriptionPlan;
+}
+export interface BillingHostOptions {
+    /** The accounting provider (Stripe) from `@happyvertical/accounting`. */
+    provider: BillingProviderPort;
+    /**
+     * Resolved database handle with `transaction()` support (SQLite or
+     * PostgreSQL). Event idempotency and the subscription write share one
+     * transaction on it. Take it from any collection, for example
+     * `(await TenantSubscriptionCollection.create(config)).db`.
+     */
+    db: DatabaseInterface;
+    /** Webhook endpoint signing secret (`whsec_…`). Required, never defaulted. */
+    webhookSecret: string;
+    /**
+     * Secret used to sign new Checkout metadata. Defaults to `webhookSecret`, so
+     * rotating the webhook secret also changes it: list the retired secret in
+     * `metadataVerificationSecrets` for as long as sessions created under it can
+     * still complete, or give the host its own stable secret here.
+     */
+    metadataSigningSecret?: string;
+    /**
+     * Retired secrets still accepted when a completed Checkout is verified (never
+     * used to sign). Needed across a rotation of the signing secret, otherwise a
+     * session paid after the rotation is not trusted and the purchase is dropped.
+     */
+    metadataVerificationSecrets?: readonly string[];
+    /** Maximum webhook signature age in seconds (default 300, at most 900). */
+    webhookToleranceSeconds?: number;
+    /** Largest accepted webhook body in bytes (default 1 MiB). */
+    maxWebhookBodyBytes?: number;
+    urls: BillingUrls;
+    /**
+     * Whether tenant-owned plans (`SubscriptionPlan.tenantId` set) may be sold.
+     * Default `deny`: only operator-owned global plans are sold, so a tenant
+     * that can write plan rows cannot buy entitlements it defined itself. Use
+     * `allow` only when tenants cannot write plans.
+     */
+    tenantPlans?: 'deny' | 'allow';
+    /** Plan key to provider price id. Wins over the plan's own price binding. */
+    prices?: Record<string, string>;
+    /**
+     * Extra purchase policy, evaluated after the built-in checks (plan visible
+     * to the tenant, active, fixed price, price configured, tenant not already
+     * subscribed). Return false to refuse.
+     */
+    canPurchasePlan?: (context: BillingPlanPurchaseContext) => boolean | Promise<boolean>;
+    /** Namespaces the idempotency claim when several accounts share a database. */
+    accountKey?: string;
+    logger?: BillingLogger;
+}
+/** The tenant a host has already authenticated and authorised for billing. */
+export interface BillingAuth {
+    tenantId: string;
+    /** Prefilled on Checkout for a tenant with no billing customer yet. */
+    email?: string;
+}
+export type BillingHostErrorCode = 'invalid_request' | 'tenant_mismatch' | 'plan_unavailable' | 'plan_forbidden' | 'plan_not_purchasable' | 'price_unconfigured' | 'already_subscribed' | 'no_billing_account' | 'checkout_not_reconcilable' | 'provider_error';
+/**
+ * A refusal with a stable code and a fixed message. The message never carries
+ * provider text, ids or configuration, so it is safe to return to a browser.
+ */
+export declare class BillingHostError extends Error {
+    readonly code: BillingHostErrorCode;
+    readonly status: number;
+    constructor(code: BillingHostErrorCode);
+}
+export interface BillingCheckoutResult {
+    /** Hosted checkout page to send the buyer to. */
+    url: string;
+    sessionId: string;
+}
+export interface BillingPortalResult {
+    url: string;
+}
+export type BillingWebhookOutcome = 'applied' | 'ignored' | 'duplicate'
+/**
+ * A paid first-purchase Checkout could not be tied to a session this host
+ * created. It was not linked and not discarded: it is stored for an
+ * operator (`listCheckoutsNeedingReconciliation`, `reconcileCheckout`).
+ */
+ | 'needs_reconciliation';
+/** A paid Checkout session waiting for an operator. Ids and codes only. */
+export interface BillingUnreconciledCheckout {
+    sessionId: string;
+    /** `session_record_missing`, `session_record_mismatch` or `session_expired`. */
+    reason: string;
+    /** The tenant the signed metadata named (not trusted). */
+    claimedTenantId: string;
+    subscriptionId: string;
+    /**
+     * The provider customer that paid. Confirm it is the claimed tenant's own
+     * customer before reconciling: it is the one value that decides who gets
+     * control of the tenant's billing portal.
+     */
+    customerId: string;
+    /** The tenant the host recorded the session for (empty when no record). */
+    targetTenantId: string;
+    /**
+     * True when the claimed tenant has its own pending or completed session
+     * recorded by this host, which suggests the flagged payment is a copy of
+     * that tenant's signed metadata rather than the tenant's purchase.
+     */
+    claimedTenantHasOwnSession: boolean;
+    eventId: string;
+    flaggedAt: Date;
+}
+export interface BillingWebhookResponse {
+    status: number;
+    body: {
+        received: boolean;
+        outcome?: BillingWebhookOutcome;
+        error?: string;
+    };
+}
+export interface BillingHost {
+    createCheckout(auth: BillingAuth, input: {
+        planKey?: string;
+        planId?: string;
+    }): Promise<BillingCheckoutResult>;
+    createPortalLink(auth: BillingAuth): Promise<BillingPortalResult>;
+    /** Paid Checkout sessions flagged `needs_reconciliation`, oldest first. */
+    listCheckoutsNeedingReconciliation(options?: {
+        /** Page size, 1..1000 (default 200). */
+        limit?: number;
+        offset?: number;
+    }): Promise<BillingUnreconciledCheckout[]>;
+    /** How many paid sessions are flagged, so a page is never mistaken for all. */
+    countCheckoutsNeedingReconciliation(): Promise<number>;
+    /**
+     * Operator-only (same rules as `reconcileCheckout`): close a flagged session
+     * on purpose WITHOUT linking it (for example a payment from another
+     * integration on the same account). Terminal state `dismissed`, logged with
+     * the operator id and reason; throws `checkout_not_reconcilable` when the
+     * session is not flagged.
+     */
+    dismissCheckout(input: {
+        sessionId: string;
+        operatorId: string;
+        reason: string;
+    }): Promise<void>;
+    /**
+     * Operator-only, called by host code that has already authenticated and
+     * authorised an operator (never wired to a request handler). Links a flagged
+     * paid session to `tenantId` on purpose, once: the subscription is re-read
+     * from the provider and must be the one recorded when the session was
+     * flagged. `planId` defaults to the plan the signed metadata named. Throws
+     * `checkout_not_reconcilable` when the session is not flagged (or was
+     * already reconciled); otherwise reports whether the link was `applied` or
+     * `ignored` with a reason (for example `already_subscribed`).
+     */
+    reconcileCheckout(input: {
+        sessionId: string;
+        tenantId: string;
+        planId?: string;
+        /** Who is acting; recorded in the audit log. */
+        operatorId: string;
+    }): Promise<{
+        outcome: 'applied' | 'ignored';
+        reason?: string;
+    }>;
+    handleWebhook(input: {
+        payload: string;
+        signature: string | null;
+    }): Promise<BillingWebhookResponse>;
+    /**
+     * Fetch-API handlers for any framework (`+server.ts`, Hono, Workers). The
+     * host authenticates and authorises the caller first and passes the tenant;
+     * checkout and portal never read a tenant, price or URL from the request.
+     */
+    handlers: {
+        checkout(request: Request, auth: BillingAuth): Promise<Response>;
+        portal(request: Request, auth: BillingAuth): Promise<Response>;
+        webhook(request: Request): Promise<Response>;
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/billing/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/billing/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AAEtE,iFAAiF;AACjF,MAAM,WAAW,uBAAuB;IACtC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,2BAA2B;IAC1C,IAAI,CAAC,EAAE,cAAc,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,SAAS,EAAE,uBAAuB,EAAE,CAAC;IACrC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,8DAA8D;AAC9D,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,EAAE,MAAM,CAAC;IAC3B,kBAAkB,CAAC,EAAE,IAAI,CAAC;IAC1B,gBAAgB,CAAC,EAAE,IAAI,CAAC;IACxB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,UAAU,CAAC,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,EAAE,IAAI,CAAC;IAChB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,sEAAsE;AACtE,MAAM,WAAW,2BAA2B;IAC1C,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,IAAI,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE;QACjB,MAAM,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QACpE,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,2BAA2B,CAAC;KACrD,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,qBAAqB,CACnB,KAAK,EAAE,2BAA2B,GACjC,OAAO,CAAC;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;SAAE,CAAC,CAAC;QACvD,2BAA2B,CAAC,KAAK,EAAE;YACjC,kBAAkB,EAAE,MAAM,CAAC;YAC3B,SAAS,EAAE,MAAM,CAAC;SACnB,GAAG,OAAO,CAAC;YAAE,GAAG,EAAE,MAAM,CAAA;SAAE,CAAC,CAAC;QAC7B,0BAA0B,CACxB,sBAAsB,EAAE,MAAM,GAC7B,OAAO,CAAC,wBAAwB,CAAC,CAAC;KACtC,CAAC;CACH;AAED,uEAAuE;AACvE,MAAM,WAAW,WAAW;IAC1B,mDAAmD;IACnD,UAAU,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/D,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IAC/D,KAAK,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACjE;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,gBAAgB,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,yEAAyE;IACzE,QAAQ,EAAE,mBAAmB,CAAC;IAC9B;;;;;OAKG;IACH,EAAE,EAAE,iBAAiB,CAAC;IACtB,8EAA8E;IAC9E,aAAa,EAAE,MAAM,CAAC;IACtB;;;;;OAKG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,2BAA2B,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAChD,2EAA2E;IAC3E,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,8DAA8D;IAC9D,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,IAAI,EAAE,WAAW,CAAC;IAClB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC/B,6EAA6E;IAC7E,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC;;;;OAIG;IACH,eAAe,CAAC,EAAE,CAChB,OAAO,EAAE,0BAA0B,KAChC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAChC,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,8EAA8E;AAC9E,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,uEAAuE;IACvE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,oBAAoB,GAC5B,iBAAiB,GACjB,iBAAiB,GACjB,kBAAkB,GAClB,gBAAgB,GAChB,sBAAsB,GACtB,oBAAoB,GACpB,oBAAoB,GACpB,oBAAoB,GACpB,2BAA2B,GAC3B,gBAAgB,CAAC;AA6BrB;;;GAGG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,IAAI,EAAE,oBAAoB;CAMvC;AAED,MAAM,WAAW,qBAAqB;IACpC,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,MAAM,qBAAqB,GAC7B,SAAS,GACT,SAAS,GACT,WAAW;AACb;;;;GAIG;GACD,sBAAsB,CAAC;AAE3B,2EAA2E;AAC3E,MAAM,WAAW,2BAA2B;IAC1C,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,MAAM,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB,2EAA2E;IAC3E,cAAc,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,0BAA0B,EAAE,OAAO,CAAC;IACpC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE;QACJ,QAAQ,EAAE,OAAO,CAAC;QAClB,OAAO,CAAC,EAAE,qBAAqB,CAAC;QAChC,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,MAAM,WAAW,WAAW;IAC1B,cAAc,CACZ,IAAI,EAAE,WAAW,EACjB,KAAK,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAC3C,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAClC,gBAAgB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAClE,2EAA2E;IAC3E,kCAAkC,CAAC,OAAO,CAAC,EAAE;QAC3C,wCAAwC;QACxC,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,MAAM,CAAC,EAAE,MAAM,CAAC;KACjB,GAAG,OAAO,CAAC,2BAA2B,EAAE,CAAC,CAAC;IAC3C,+EAA+E;IAC/E,mCAAmC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IACvD;;;;;;OAMG;IACH,eAAe,CAAC,KAAK,EAAE;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;KAChB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB;;;;;;;;;OASG;IACH,iBAAiB,CAAC,KAAK,EAAE;QACvB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,gDAAgD;QAChD,UAAU,EAAE,MAAM,CAAC;KACpB,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,SAAS,GAAG,SAAS,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE,aAAa,CAAC,KAAK,EAAE;QACnB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;KAC1B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACpC;;;;OAIG;IACH,QAAQ,EAAE;QACR,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QACjE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC/D,OAAO,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;KAC9C,CAAC;CACH"}

package/dist/index.d.ts

@@ -7,11 +7,12 @@
  * @packageDocumentation
  */
 import './__smrt-register__.js';
+export { BILLING_ENV, type BillingAuth, type BillingCheckoutLineItem, type BillingCheckoutResult, type BillingCheckoutSessionInput, type BillingEnvConfig, type BillingEnvOptions, type BillingHost, BillingHostError, type BillingHostErrorCode, type BillingHostOptions, type BillingLogger, type BillingPlanPurchaseContext, type BillingPortalResult, type BillingProviderPort, type BillingProviderWebhookEvent, type BillingSubscriptionState, type BillingUnreconciledCheckout, type BillingUrls, type BillingWebhookOutcome, type BillingWebhookResponse, createBillingHost, DEFAULT_WEBHOOK_TOLERANCE_SECONDS, MAX_WEBHOOK_TOLERANCE_SECONDS, priceEnvName, readBillingEnv, } from './billing/index.js';
 export { SubscriptionPlanCollection, SubscriptionPlanVersionCollection, TenantSubscriptionCollection, TenantUsageMetricCollection, } from './collections/index.js';
 export { migrateSubscriptionsMoneyToMinorUnits, preflightSubscriptionsMoneyMinorUnits, SUBSCRIPTIONS_MONEY_COLUMNS, SUBSCRIPTIONS_MONEY_MINOR_UNITS_BACKFILL, } from './migrations/moneyMinorUnits.js';
 export { migrateSubscriptionPlanVersions, type SubscriptionPlanVersionsMigrationReport, } from './migrations/planVersions.js';
 export type { PriceBookKind, PricingStrategy, SpendingBasis, SpendingPeriod, SpendingPolicyBehavior, } from './models/index.js';
-export { BillingAdjustment, BillingAdjustmentCollection, ClientCharge, ClientChargeCollection, CreditGrant, CreditGrantCollection, isCurrencyCode, isPriceBookKind, PriceBook, PriceBookAssignment, PriceBookCollection, PricingRule, PricingRuleCollection, RetailCharge, RetailChargeCollection, SpendingPolicy, SpendingPolicyCollection, SubscriptionPlan, SubscriptionPlanVersion, TenantSubscription, TenantUsageMetric, } from './models/index.js';
+export { BillingAdjustment, BillingAdjustmentCollection, BillingCheckoutSession, ClientCharge, ClientChargeCollection, CreditGrant, CreditGrantCollection, isCurrencyCode, isPriceBookKind, PriceBook, PriceBookAssignment, PriceBookCollection, PricingRule, PricingRuleCollection, RetailCharge, RetailChargeCollection, SpendingPolicy, SpendingPolicyCollection, SubscriptionPlan, SubscriptionPlanVersion, TenantSubscription, TenantUsageMetric, } from './models/index.js';
 export { enabledFeatureKeys, extractPlanTerms, isEntitlementUpgrade, PLAN_TERM_FIELDS, samePlanTerms, validThresholds, } from './plan-terms.js';
 export type { PlanVersionReplacement } from './plan-versioning.js';
 export { SubscriptionPlansRecipe } from './recipes.js';
@@ -19,4 +20,5 @@ export type { AssignPriceBooksInput, AutoTopUpGrant, AutoTopUpHook, AutoTopUpReq
 export { AI_HOSTED_SPEND_METRIC, AI_HOSTED_USER_SPEND_METRIC, assertCommercialBillingStorageSupported, CommercialBillingStorageConfigurationError, CommercialUsageService, createHostedAiSpendReader, decideHostedAiSpend, diffEntitlements, ENTITLEMENT_CHANGE_LISTENERS_SLOT_KEY, type EntitlementChange, type EntitlementChangeFailure, type EntitlementChangeListener, type EntitlementChangeOutcome, type EntitlementSnapshot, emptyEntitlementSnapshot, evaluateHostedAiSpendThreshold, evaluateThreshold, evaluateThresholds, FEATURE_GRANT_SOURCE_SLOT_KEY, type GrantingPlanReader, getEntitlementChangeListeners, type HostedAiSpendDecision, type HostedAiSpendEvaluation, HostedAiSpendEvaluator, type HostedAiSpendEvaluatorOptions, type HostedAiSpendPolicy, HostedAiSpendPolicyError, type HostedAiSpendReader, type HostedAiSpendScope, type HostedAiSpendSummary, hasEntitlementChange, hostedAiSpendThresholds, hostedAiTagFragment, isMissingSubscriptionTableError, MICROS_PER_USD, notifyEntitlementChange, ResellerBillingError, ResellerBillingService, registerEntitlementChangeListener, registerSubscriptionFeatureSource, SpendingPolicyEvaluator, type SubscriptionFeatureGrants, SubscriptionFeatureSource, type SubscriptionFeatureSourceOptions, type SubscriptionGrantingPlan, type SubscriptionPlanReader, type SubscriptionPlanVersionReader, SubscriptionResolver, type SubscriptionResolverReaders, snapshotEntitlements, type TenantSubscriptionReader, TenantUsageMeter, type TrackEntitlementChangeOptions, trackEntitlementChange, UnsupportedCommercialBillingStorageError, type UsageSummaryReader, } from './services/index.js';
 export type { AiUsageSummary, BillingInterval, EntitlementResolution, EntitlementResolutionContext, JsonObject, PlanFeatureGrant, PlanTerms, PlanThreshold, PlanVersionPinReason, PricingMode, RecordUsageOptions, Subscriber, SubscriberKind, SubscriptionPlanStatus, SubscriptionPlanVersionOptions, SubscriptionResolverOptions, SubscriptionStatus, SummarizeAiUsageOptions, SummarizeUsageBatchOptions, SummarizeUsageOptions, ThresholdEnforcement, ThresholdEvaluation, ThresholdWindow, UsageMeterOptions, UsageMetricRecord, UsageSummary, UsageWindow, } from './types.js';
 export { assertSubscriberInvariant, getWindowForThreshold, getWindowKey, isValidThreshold, normalizeFeatureGrants, normalizeSubscriber, subscriberToColumns, } from './utils.js';
+export { createVaultRelayAdminClient, NOT_OWNER_CODE, NotOwnerError, type ProvisionRestartAccountInput, type ProvisionRestartAccountResult, provisionRestartAccount, StepUpRequiredError, type SupersedeVaultAccountInput, supersedeVaultAccount, type UnsupersedeVaultAccountInput, unsupersedeVaultAccount, type VaultAccountAction, type VaultAccountAdminDeps, VaultAccountAdminError, type VaultAccountAuditEntry, type VaultAccountAuditSink, type VaultAccountDenial, type VaultAccountDirectory, type VaultRelayAdminClientOptions, type VaultRelayAdminPort, } from './vault-account/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,wBAAwB,CAAC;AAEhC,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,EACjC,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,qCAAqC,EACrC,qCAAqC,EACrC,2BAA2B,EAC3B,wCAAwC,GACzC,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,+BAA+B,EAC/B,KAAK,uCAAuC,GAC7C,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACV,aAAa,EACb,eAAe,EACf,aAAa,EACb,cAAc,EACd,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,iBAAiB,EACjB,2BAA2B,EAC3B,YAAY,EACZ,sBAAsB,EACtB,WAAW,EACX,qBAAqB,EACrB,cAAc,EACd,eAAe,EACf,SAAS,EACT,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,EACX,qBAAqB,EACrB,YAAY,EACZ,sBAAsB,EACtB,cAAc,EACd,wBAAwB,EACxB,gBAAgB,EAChB,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,aAAa,EACb,eAAe,GAChB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAEnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,YAAY,EACV,qBAAqB,EACrB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,yBAAyB,EACzB,wBAAwB,EACxB,6BAA6B,EAC7B,oBAAoB,EACpB,qBAAqB,EACrB,yBAAyB,EACzB,4BAA4B,EAC5B,qBAAqB,EACrB,gBAAgB,EAChB,uBAAuB,EACvB,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,wBAAwB,EACxB,6BAA6B,EAC7B,gBAAgB,EAChB,uBAAuB,EACvB,iCAAiC,EACjC,8BAA8B,EAC9B,WAAW,GACZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,uCAAuC,EACvC,0CAA0C,EAC1C,sBAAsB,EACtB,yBAAyB,EACzB,mBAAmB,EACnB,gBAAgB,EAChB,qCAAqC,EACrC,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,wBAAwB,EACxB,8BAA8B,EAC9B,iBAAiB,EACjB,kBAAkB,EAClB,6BAA6B,EAC7B,KAAK,kBAAkB,EACvB,6BAA6B,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,sBAAsB,EACtB,KAAK,6BAA6B,EAClC,KAAK,mBAAmB,EACxB,wBAAwB,EACxB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,EACnB,+BAA+B,EAC/B,cAAc,EACd,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,EACtB,iCAAiC,EACjC,iCAAiC,EACjC,uBAAuB,EACvB,KAAK,yBAAyB,EAC9B,yBAAyB,EACzB,KAAK,gCAAgC,EACrC,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,6BAA6B,EAClC,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,oBAAoB,EACpB,KAAK,wBAAwB,EAC7B,gBAAgB,EAChB,KAAK,6BAA6B,EAClC,sBAAsB,EACtB,wCAAwC,EACxC,KAAK,kBAAkB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,4BAA4B,EAC5B,UAAU,EACV,gBAAgB,EAChB,SAAS,EACT,aAAa,EACb,oBAAoB,EACpB,WAAW,EACX,kBAAkB,EAClB,UAAU,EACV,cAAc,EACd,sBAAsB,EACtB,8BAA8B,EAC9B,2BAA2B,EAC3B,kBAAkB,EAClB,uBAAuB,EACvB,0BAA0B,EAC1B,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,wBAAwB,CAAC;AAGhC,OAAO,EACL,WAAW,EACX,KAAK,WAAW,EAChB,KAAK,uBAAuB,EAC5B,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,EACtB,KAAK,WAAW,EAChB,gBAAgB,EAChB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,aAAa,EAClB,KAAK,0BAA0B,EAC/B,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,2BAA2B,EAChC,KAAK,wBAAwB,EAC7B,KAAK,2BAA2B,EAChC,KAAK,WAAW,EAChB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,iBAAiB,EACjB,iCAAiC,EACjC,6BAA6B,EAC7B,YAAY,EACZ,cAAc,GACf,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,0BAA0B,EAC1B,iCAAiC,EACjC,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,qCAAqC,EACrC,qCAAqC,EACrC,2BAA2B,EAC3B,wCAAwC,GACzC,MAAM,iCAAiC,CAAC;AAEzC,OAAO,EACL,+BAA+B,EAC/B,KAAK,uCAAuC,GAC7C,MAAM,8BAA8B,CAAC;AACtC,YAAY,EACV,aAAa,EACb,eAAe,EACf,aAAa,EACb,cAAc,EACd,sBAAsB,GACvB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,iBAAiB,EACjB,2BAA2B,EAC3B,sBAAsB,EACtB,YAAY,EACZ,sBAAsB,EACtB,WAAW,EACX,qBAAqB,EACrB,cAAc,EACd,eAAe,EACf,SAAS,EACT,mBAAmB,EACnB,mBAAmB,EACnB,WAAW,EACX,qBAAqB,EACrB,YAAY,EACZ,sBAAsB,EACtB,cAAc,EACd,wBAAwB,EACxB,gBAAgB,EAChB,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,GAClB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,aAAa,EACb,eAAe,GAChB,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAEnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,YAAY,EACV,qBAAqB,EACrB,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,yBAAyB,EACzB,wBAAwB,EACxB,6BAA6B,EAC7B,oBAAoB,EACpB,qBAAqB,EACrB,yBAAyB,EACzB,4BAA4B,EAC5B,qBAAqB,EACrB,gBAAgB,EAChB,uBAAuB,EACvB,YAAY,EACZ,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,wBAAwB,EACxB,6BAA6B,EAC7B,gBAAgB,EAChB,uBAAuB,EACvB,iCAAiC,EACjC,8BAA8B,EAC9B,WAAW,GACZ,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,sBAAsB,EACtB,2BAA2B,EAC3B,uCAAuC,EACvC,0CAA0C,EAC1C,sBAAsB,EACtB,yBAAyB,EACzB,mBAAmB,EACnB,gBAAgB,EAChB,qCAAqC,EACrC,KAAK,iBAAiB,EACtB,KAAK,wBAAwB,EAC7B,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,wBAAwB,EACxB,8BAA8B,EAC9B,iBAAiB,EACjB,kBAAkB,EAClB,6BAA6B,EAC7B,KAAK,kBAAkB,EACvB,6BAA6B,EAC7B,KAAK,qBAAqB,EAC1B,KAAK,uBAAuB,EAC5B,sBAAsB,EACtB,KAAK,6BAA6B,EAClC,KAAK,mBAAmB,EACxB,wBAAwB,EACxB,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,oBAAoB,EACpB,uBAAuB,EACvB,mBAAmB,EACnB,+BAA+B,EAC/B,cAAc,EACd,uBAAuB,EACvB,oBAAoB,EACpB,sBAAsB,EACtB,iCAAiC,EACjC,iCAAiC,EACjC,uBAAuB,EACvB,KAAK,yBAAyB,EAC9B,yBAAyB,EACzB,KAAK,gCAAgC,EACrC,KAAK,wBAAwB,EAC7B,KAAK,sBAAsB,EAC3B,KAAK,6BAA6B,EAClC,oBAAoB,EACpB,KAAK,2BAA2B,EAChC,oBAAoB,EACpB,KAAK,wBAAwB,EAC7B,gBAAgB,EAChB,KAAK,6BAA6B,EAClC,sBAAsB,EACtB,wCAAwC,EACxC,KAAK,kBAAkB,GACxB,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,cAAc,EACd,eAAe,EACf,qBAAqB,EACrB,4BAA4B,EAC5B,UAAU,EACV,gBAAgB,EAChB,SAAS,EACT,aAAa,EACb,oBAAoB,EACpB,WAAW,EACX,kBAAkB,EAClB,UAAU,EACV,cAAc,EACd,sBAAsB,EACtB,8BAA8B,EAC9B,2BAA2B,EAC3B,kBAAkB,EAClB,uBAAuB,EACvB,0BAA0B,EAC1B,qBAAqB,EACrB,oBAAoB,EACpB,mBAAmB,EACnB,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,YAAY,EACZ,WAAW,GACZ,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,YAAY,EACZ,gBAAgB,EAChB,sBAAsB,EACtB,mBAAmB,EACnB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,2BAA2B,EAC3B,cAAc,EACd,aAAa,EACb,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,uBAAuB,EACvB,mBAAmB,EACnB,KAAK,0BAA0B,EAC/B,qBAAqB,EACrB,KAAK,4BAA4B,EACjC,uBAAuB,EACvB,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,sBAAsB,EACtB,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,4BAA4B,EACjC,KAAK,mBAAmB,GACzB,MAAM,0BAA0B,CAAC"}