@kernhq/module-billing 0.2.0

package/dist/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../src/contract.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,eAAO,MAAM,SAAS,YAAY,CAAA;AAElC;;;;;;;;;GASG;AACH,eAAO,MAAM,UAAU;;;;;;;iBASrB,CAAA;AACF,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAA;AAEnD;;;;;;GAMG;AACH,eAAO,MAAM,eAAe;;;;;;;iBAO1B,CAAA;AACF,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AAE7D,eAAO,MAAM,eAAe;;;EAA4B,CAAA;AACxD,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAA;AAE7D,eAAO,MAAM,IAAI;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA0Bf,CAAA;AACF,MAAM,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,CAAA;AAEvC;;;;GAIG;AACH,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;iBAWU,CAAA;AACjC,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAA;AAEnD,eAAO,MAAM,UAAU;;;;;;;;;;;;;;;;;;;;;;;;;iBAErB,CAAA;AACF,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAA;AAEnD;;;;GAIG;AACH,eAAO,MAAM,kBAAkB;;;;;;EAAsE,CAAA;AACrG,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAA;AAEnE,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;iBAavB,CAAA;AACF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAA;AAEvD,eAAO,MAAM,KAAK;;;;iBAIhB,CAAA;AACF,MAAM,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,CAAC,CAAA;AAEzC,8EAA8E;AAC9E,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAQ3B,CAAA;AACF,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAA;AAE/D,eAAO,MAAM,OAAO;;;;;;;;;;;;iBAYlB,CAAA;AACF,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,OAAO,CAAC,CAAA;AAE7C,iFAAiF;AACjF,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;iBAkB5B,CAAA;AACF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAA;AAIjE,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAMxB;;;WAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QA2BH,kGAAkG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAKlG,mFAAmF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAiBnF;;;WAGG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAcN,CAAA;AACD,MAAM,MAAM,eAAe,GAAG,OAAO,eAAe,CAAA;AAEpD,eAAO,MAAM,aAAa;IACxB;;;;OAIG;;;;;;;;;;;;;;;;IAaH,uFAAuF;;;;CAExF,CAAA;AAED,eAAO,MAAM,mBAAmB;;;CAGtB,CAAA;AAEV,eAAO,MAAM,kBAAkB;;;;;;;;;;;;EAe7B,CAAA"}

package/dist/contract.js

@@ -0,0 +1,265 @@
+import { baseContract, defineEvent, definePermissions, Id, PageInput, page, WorkspaceId, } from '@kernhq/contracts';
+import { z } from 'zod';
+export const MODULE_ID = 'billing';
+/**
+ * The limits a plan may set.
+ *
+ * These keys mirror `Entitlement` in `@kernhq/kernel` exactly, and that is the point: the kernel
+ * declares what can be limited, this module decides the values, and every key has one place in core
+ * that enforces it. A plan can therefore be edited freely by an instance admin without ever being
+ * able to promise something nothing checks.
+ *
+ * `null` means unlimited, everywhere.
+ */
+export const PlanLimits = z.object({
+    /** billable seats; members with the `guest` role never consume one */
+    seats: z.number().int().positive().nullable().default(null),
+    storageBytes: z.number().int().nonnegative().nullable().default(null),
+    /** module ids this plan allows to be switched on; `null` = every module the instance ships */
+    modules: z.array(z.string()).nullable().default(null),
+    sso: z.boolean().default(true),
+    auditRetentionDays: z.number().int().positive().nullable().default(null),
+    apiRateLimit: z.number().int().positive().nullable().default(null),
+});
+/**
+ * A patch over `PlanLimits`, for comping one limit without touching the rest.
+ *
+ * Written out rather than derived with `.partial()`, because `.partial()` keeps the field defaults:
+ * parsing `{ seats: 50 }` through it returns every other key at its default too, so spreading the
+ * result silently resets limits the admin never mentioned. Absent here means absent.
+ */
+export const PlanLimitsPatch = z.object({
+    seats: z.number().int().positive().nullable().optional(),
+    storageBytes: z.number().int().nonnegative().nullable().optional(),
+    modules: z.array(z.string()).nullable().optional(),
+    sso: z.boolean().optional(),
+    auditRetentionDays: z.number().int().positive().nullable().optional(),
+    apiRateLimit: z.number().int().positive().nullable().optional(),
+});
+export const BillingInterval = z.enum(['month', 'year']);
+export const Plan = z.object({
+    id: Id,
+    /** stable identifier used in URLs and by the marketing site; never reused */
+    slug: z
+        .string()
+        .min(2)
+        .max(48)
+        .regex(/^[a-z0-9](?:[a-z0-9-]*[a-z0-9])?$/),
+    name: z.string().min(1).max(80),
+    description: z.string().max(300).default(''),
+    /** in the currency's smallest unit, so 800 is $8.00 — never a float */
+    priceMinor: z.number().int().nonnegative(),
+    currency: z.string().length(3).default('usd'),
+    interval: BillingInterval.default('month'),
+    /** true when `priceMinor` is charged per seat rather than per workspace */
+    perSeat: z.boolean().default(true),
+    trialDays: z.number().int().nonnegative().default(0),
+    limits: PlanLimits,
+    /** the price object in Stripe; null until the plan is wired to one */
+    stripePriceId: z.string().nullable().default(null),
+    /** what the marketing site lists under the plan */
+    highlights: z.array(z.string()).default([]),
+    published: z.boolean().default(false),
+    order: z.number().int().default(100),
+    createdAt: z.string(),
+    updatedAt: z.string(),
+});
+/**
+ * What a stranger may see. Served unauthenticated so the marketing site can render prices that come
+ * from the same row the instance actually charges against — no internal ids, no Stripe ids, and
+ * published plans only.
+ */
+export const PublicPlan = Plan.pick({
+    slug: true,
+    name: true,
+    description: true,
+    priceMinor: true,
+    currency: true,
+    interval: true,
+    perSeat: true,
+    trialDays: true,
+    highlights: true,
+    order: true,
+}).extend({ limits: PlanLimits });
+export const UpsertPlan = Plan.omit({ id: true, createdAt: true, updatedAt: true }).extend({
+    id: Id.optional(),
+});
+/**
+ * `trialing` and `active` are the two states that entitle a workspace to its plan.
+ * `past_due` still does — there is a grace period — and `suspended` does not.
+ * `canceled` keeps the row so the history and the Stripe ids survive a resubscribe.
+ */
+export const SubscriptionStatus = z.enum(['trialing', 'active', 'past_due', 'canceled', 'suspended']);
+export const Subscription = z.object({
+    workspaceId: WorkspaceId,
+    planId: Id.nullable(),
+    planName: z.string().nullable(),
+    planSlug: z.string().nullable(),
+    status: SubscriptionStatus,
+    seatsPurchased: z.number().int().nonnegative(),
+    trialEndsAt: z.string().nullable(),
+    currentPeriodEnd: z.string().nullable(),
+    cancelAtPeriodEnd: z.boolean(),
+    /** set once the workspace has a Stripe customer; null on a comped or manually managed workspace */
+    stripeCustomerId: z.string().nullable(),
+    stripeSubscriptionId: z.string().nullable(),
+});
+export const Usage = z.object({
+    seats: z.number().int().nonnegative(),
+    storageBytes: z.number().int().nonnegative(),
+    updatedAt: z.string(),
+});
+/** Everything the workspace's own billing screen needs, in one round trip. */
+export const WorkspaceBilling = z.object({
+    subscription: Subscription.nullable(),
+    usage: Usage,
+    limits: PlanLimits,
+    /** false while past due or suspended */
+    active: z.boolean(),
+    /** whether this instance can take a payment at all — false when no Stripe key is configured */
+    paymentsEnabled: z.boolean(),
+});
+export const Invoice = z.object({
+    id: Id,
+    workspaceId: WorkspaceId,
+    number: z.string().nullable(),
+    status: z.string(),
+    totalMinor: z.number().int(),
+    currency: z.string(),
+    periodStart: z.string().nullable(),
+    periodEnd: z.string().nullable(),
+    hostedUrl: z.string().nullable(),
+    pdfUrl: z.string().nullable(),
+    createdAt: z.string(),
+});
+/** One row of the instance console's list of every workspace on the instance. */
+export const AdminWorkspaceRow = z.object({
+    workspaceId: WorkspaceId,
+    workspaceName: z.string(),
+    workspaceSlug: z.string(),
+    planName: z.string().nullable(),
+    planSlug: z.string().nullable(),
+    status: SubscriptionStatus.nullable(),
+    seatsUsed: z.number().int().nonnegative(),
+    seatsPurchased: z.number().int().nonnegative(),
+    storageBytes: z.number().int().nonnegative(),
+    trialEndsAt: z.string().nullable(),
+    currentPeriodEnd: z.string().nullable(),
+    /** what this workspace bills per month, in minor units; annual plans are divided by twelve */
+    monthlyMinor: z.number().int().nonnegative(),
+    currency: z.string(),
+    /** true when an admin has overridden any limit by hand */
+    overridden: z.boolean(),
+    stripeCustomerId: z.string().nullable(),
+});
+const ws = z.object({ workspaceId: WorkspaceId });
+export const billingContract = {
+    plans: {
+        list: baseContract
+            .route({ method: 'GET', path: '/plans', tags: ['billing'] })
+            .input(z.object({ includeUnpublished: z.boolean().default(false) }))
+            .output(z.array(Plan)),
+        /**
+         * Unauthenticated on purpose: this is what kernaio.com and any other instance's marketing page
+         * reads, so that a price is edited in one place and true in both.
+         */
+        public: baseContract
+            .route({ method: 'GET', path: '/plans/public', tags: ['billing'] })
+            .input(z.object({}))
+            .output(z.array(PublicPlan)),
+        upsert: baseContract
+            .route({ method: 'POST', path: '/plans', tags: ['billing'] })
+            .input(UpsertPlan)
+            .output(Plan),
+        setPublished: baseContract
+            .route({ method: 'POST', path: '/plans/{id}/published', tags: ['billing'] })
+            .input(z.object({ id: Id, published: z.boolean() }))
+            .output(Plan),
+        archive: baseContract
+            .route({ method: 'DELETE', path: '/plans/{id}', tags: ['billing'] })
+            .input(z.object({ id: Id }))
+            .output(z.object({ ok: z.literal(true) })),
+    },
+    subscription: {
+        get: baseContract
+            .route({ method: 'GET', path: '/subscription', tags: ['billing'] })
+            .input(ws)
+            .output(WorkspaceBilling),
+        invoices: baseContract
+            .route({ method: 'GET', path: '/subscription/invoices', tags: ['billing'] })
+            .input(ws.extend(PageInput.shape))
+            .output(page(Invoice)),
+        /** Stripe Checkout for a new subscription or a plan change; returns a URL to send the user to. */
+        checkout: baseContract
+            .route({ method: 'POST', path: '/subscription/checkout', tags: ['billing'] })
+            .input(ws.extend({ planSlug: z.string(), seats: z.number().int().positive().optional() }))
+            .output(z.object({ url: z.string() })),
+        /** Stripe's own billing portal: payment method, cancellation, invoice download. */
+        portal: baseContract
+            .route({ method: 'POST', path: '/subscription/portal', tags: ['billing'] })
+            .input(ws.extend({ returnPath: z.string().default('/') }))
+            .output(z.object({ url: z.string() })),
+    },
+    admin: {
+        workspaces: baseContract
+            .route({ method: 'GET', path: '/admin/workspaces', tags: ['billing'] })
+            .input(z.object({ q: z.string().optional(), status: SubscriptionStatus.optional() }).extend(PageInput.shape))
+            .output(page(AdminWorkspaceRow)),
+        setPlan: baseContract
+            .route({ method: 'POST', path: '/admin/workspaces/{workspaceId}/plan', tags: ['billing'] })
+            .input(ws.extend({ planId: Id.nullable(), seatsPurchased: z.number().int().nonnegative().optional() }))
+            .output(Subscription),
+        /**
+         * Comp an account without inventing a plan for it. `null` clears the override and the plan's own
+         * limit applies again.
+         */
+        override: baseContract
+            .route({ method: 'POST', path: '/admin/workspaces/{workspaceId}/override', tags: ['billing'] })
+            .input(ws.extend({ limits: PlanLimitsPatch.nullable() }))
+            .output(Subscription),
+        extendTrial: baseContract
+            .route({ method: 'POST', path: '/admin/workspaces/{workspaceId}/trial', tags: ['billing'] })
+            .input(ws.extend({ days: z.number().int().positive().max(365) }))
+            .output(Subscription),
+        setStatus: baseContract
+            .route({ method: 'POST', path: '/admin/workspaces/{workspaceId}/status', tags: ['billing'] })
+            .input(ws.extend({ status: z.enum(['active', 'suspended']) }))
+            .output(Subscription),
+    },
+};
+export const billingEvents = {
+    /**
+     * Emitted whenever anything changes what a workspace is allowed to do. The kernel listens on
+     * `billing.subscription.*` and drops its entitlement cache, so a customer who has just paid does
+     * not wait out a TTL for the seat they bought.
+     */
+    subscriptionChanged: defineEvent('billing.subscription.changed', z.object({
+        workspaceId: WorkspaceId,
+        status: SubscriptionStatus,
+        planSlug: z.string().nullable(),
+    })),
+    subscriptionSuspended: defineEvent('billing.subscription.suspended', z.object({ workspaceId: WorkspaceId, reason: z.string() })),
+    /** A plan was published or unpublished — what the marketing site shows has changed. */
+    catalogueChanged: defineEvent('billing.catalogue.changed', z.object({ planSlug: z.string() })),
+};
+export const BILLING_PERMISSIONS = {
+    view: 'billing.subscription.view',
+    manage: 'billing.subscription.manage',
+};
+export const billingPermissions = definePermissions([
+    {
+        key: BILLING_PERMISSIONS.view,
+        label: 'View the plan and what it costs',
+        scope: 'workspace',
+        defaultRoles: ['owner', 'admin'],
+        dangerous: false,
+    },
+    {
+        key: BILLING_PERMISSIONS.manage,
+        label: 'Change the plan and the payment method',
+        scope: 'workspace',
+        defaultRoles: ['owner'],
+        dangerous: true,
+    },
+]);
+//# sourceMappingURL=contract.js.map

package/dist/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../src/contract.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EACZ,WAAW,EACX,iBAAiB,EACjB,EAAE,EACF,SAAS,EACT,IAAI,EACJ,WAAW,GACZ,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,MAAM,CAAC,MAAM,SAAS,GAAG,SAAS,CAAA;AAElC;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IACjC,sEAAsE;IACtE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACrE,8FAA8F;IAC9F,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACrD,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC9B,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACxE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACnE,CAAC,CAAA;AAGF;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClE,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClD,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3B,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACrE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAChE,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAA;AAGxD,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,EAAE,EAAE,EAAE;IACN,6EAA6E;IAC7E,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,KAAK,CAAC,mCAAmC,CAAC;IAC7C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,uEAAuE;IACvE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC7C,QAAQ,EAAE,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC;IAC1C,2EAA2E;IAC3E,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACpD,MAAM,EAAE,UAAU;IAClB,sEAAsE;IACtE,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClD,mDAAmD;IACnD,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3C,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACrC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IACpC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAA;AAGF;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC;IAClC,IAAI,EAAE,IAAI;IACV,IAAI,EAAE,IAAI;IACV,WAAW,EAAE,IAAI;IACjB,UAAU,EAAE,IAAI;IAChB,QAAQ,EAAE,IAAI;IACd,QAAQ,EAAE,IAAI;IACd,OAAO,EAAE,IAAI;IACb,SAAS,EAAE,IAAI;IACf,UAAU,EAAE,IAAI;IAChB,KAAK,EAAE,IAAI;CACZ,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAA;AAGjC,MAAM,CAAC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACzF,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE;CAClB,CAAC,CAAA;AAGF;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC,CAAA;AAGrG,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,WAAW,EAAE,WAAW;IACxB,MAAM,EAAE,EAAE,CAAC,QAAQ,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,kBAAkB;IAC1B,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC9C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9B,mGAAmG;IACnG,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACrC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAA;AAGF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,YAAY,EAAE,YAAY,CAAC,QAAQ,EAAE;IACrC,KAAK,EAAE,KAAK;IACZ,MAAM,EAAE,UAAU;IAClB,wCAAwC;IACxC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE;IACnB,+FAA+F;IAC/F,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE;CAC7B,CAAC,CAAA;AAGF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,EAAE,EAAE,EAAE;IACN,WAAW,EAAE,WAAW;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;IAClB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;CACtB,CAAC,CAAA;AAGF,iFAAiF;AACjF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,WAAW,EAAE,WAAW;IACxB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;IACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC9C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,8FAA8F;IAC9F,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IAC5C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,0DAA0D;IAC1D,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE;IACvB,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC,CAAA;AAGF,MAAM,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAA;AAEjD,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,KAAK,EAAE;QACL,IAAI,EAAE,YAAY;aACf,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;aAC3D,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;aACnE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxB;;;WAGG;QACH,MAAM,EAAE,YAAY;aACjB,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;aAClE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;aACnB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9B,MAAM,EAAE,YAAY;aACjB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;aAC5D,KAAK,CAAC,UAAU,CAAC;aACjB,MAAM,CAAC,IAAI,CAAC;QACf,YAAY,EAAE,YAAY;aACvB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;aAC3E,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;aACnD,MAAM,CAAC,IAAI,CAAC;QACf,OAAO,EAAE,YAAY;aAClB,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;aACnE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;aAC3B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;KAC7C;IACD,YAAY,EAAE;QACZ,GAAG,EAAE,YAAY;aACd,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;aAClE,KAAK,CAAC,EAAE,CAAC;aACT,MAAM,CAAC,gBAAgB,CAAC;QAC3B,QAAQ,EAAE,YAAY;aACnB,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;aAC3E,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;aACjC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxB,kGAAkG;QAClG,QAAQ,EAAE,YAAY;aACnB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;aAC5E,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;aACzF,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACxC,mFAAmF;QACnF,MAAM,EAAE,YAAY;aACjB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,sBAAsB,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;aAC1E,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;aACzD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;KACzC;IACD,KAAK,EAAE;QACL,UAAU,EAAE,YAAY;aACrB,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;aACtE,KAAK,CACJ,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,kBAAkB,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CACtG;aACA,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAClC,OAAO,EAAE,YAAY;aAClB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,sCAAsC,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;aAC1F,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,QAAQ,EAAE,EAAE,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;aACtG,MAAM,CAAC,YAAY,CAAC;QACvB;;;WAGG;QACH,QAAQ,EAAE,YAAY;aACnB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,0CAA0C,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;aAC9F,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;aACxD,MAAM,CAAC,YAAY,CAAC;QACvB,WAAW,EAAE,YAAY;aACtB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,uCAAuC,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;aAC3F,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;aAChE,MAAM,CAAC,YAAY,CAAC;QACvB,SAAS,EAAE,YAAY;aACpB,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,wCAAwC,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;aAC5F,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC;aAC7D,MAAM,CAAC,YAAY,CAAC;KACxB;CACF,CAAA;AAGD,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B;;;;OAIG;IACH,mBAAmB,EAAE,WAAW,CAC9B,8BAA8B,EAC9B,CAAC,CAAC,MAAM,CAAC;QACP,WAAW,EAAE,WAAW;QACxB,MAAM,EAAE,kBAAkB;QAC1B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KAChC,CAAC,CACH;IACD,qBAAqB,EAAE,WAAW,CAChC,gCAAgC,EAChC,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAC3D;IACD,uFAAuF;IACvF,gBAAgB,EAAE,WAAW,CAAC,2BAA2B,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;CAC/F,CAAA;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,IAAI,EAAE,2BAA2B;IACjC,MAAM,EAAE,6BAA6B;CAC7B,CAAA;AAEV,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;IAClD;QACE,GAAG,EAAE,mBAAmB,CAAC,IAAI;QAC7B,KAAK,EAAE,iCAAiC;QACxC,KAAK,EAAE,WAAW;QAClB,YAAY,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC;QAChC,SAAS,EAAE,KAAK;KACjB;IACD;QACE,GAAG,EAAE,mBAAmB,CAAC,MAAM;QAC/B,KAAK,EAAE,wCAAwC;QAC/C,KAAK,EAAE,WAAW;QAClB,YAAY,EAAE,CAAC,OAAO,CAAC;QACvB,SAAS,EAAE,IAAI;KAChB;CACF,CAAC,CAAA"}

package/dist/server/index.d.ts

@@ -0,0 +1,11 @@
+import { z } from 'zod';
+export { billingRouter } from './router.js';
+export * from './schema.js';
+export * as billingEntitlements from './services/entitlements.js';
+export * as billingPlans from './services/plans.js';
+export * as billingStripe from './services/stripe.js';
+export * as billingSubscriptions from './services/subscriptions.js';
+export * as billingUsage from './services/usage.js';
+export declare const billingModule: import("@kernhq/kernel").ServerModule<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+export default billingModule;
+//# sourceMappingURL=index.d.ts.map

package/dist/server/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AASvB,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,cAAc,aAAa,CAAA;AAC3B,OAAO,KAAK,mBAAmB,MAAM,4BAA4B,CAAA;AACjE,OAAO,KAAK,YAAY,MAAM,qBAAqB,CAAA;AACnD,OAAO,KAAK,aAAa,MAAM,sBAAsB,CAAA;AACrD,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAA;AACnE,OAAO,KAAK,YAAY,MAAM,qBAAqB,CAAA;AAiBnD,eAAO,MAAM,aAAa,gHA4IxB,CAAA;AAEF,eAAe,aAAa,CAAA"}

package/dist/server/index.js

@@ -0,0 +1,165 @@
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { WorkspaceId } from '@kernhq/contracts';
+import { defineModule, defineServerModule, KernError, packageVersion } from '@kernhq/kernel';
+import { and, eq, isNotNull, lte } from 'drizzle-orm';
+import { z } from 'zod';
+import { billingContract, billingEvents, billingPermissions, MODULE_ID } from '../contract.js';
+import { billingRouter } from './router.js';
+import { schema, subscriptions } from './schema.js';
+import * as entitlements from './services/entitlements.js';
+import * as stripeSvc from './services/stripe.js';
+import * as subsSvc from './services/subscriptions.js';
+import * as usageSvc from './services/usage.js';
+export { billingRouter } from './router.js';
+export * from './schema.js';
+export * as billingEntitlements from './services/entitlements.js';
+export * as billingPlans from './services/plans.js';
+export * as billingStripe from './services/stripe.js';
+export * as billingSubscriptions from './services/subscriptions.js';
+export * as billingUsage from './services/usage.js';
+/**
+ * `procedures` is the service-to-service surface, reachable only over `kernel.call`. It runs with
+ * elevated access, so it must never be reachable by an end user: everything a person does goes
+ * through the oRPC router and its permission middleware.
+ */
+function requireService(principal) {
+    if (principal.kind !== 'service' && !principal.instanceAdmin)
+        throw KernError.forbidden();
+}
+/** Workspaces this instance knows about, asked of core — billing only ever stores ids. */
+async function allWorkspaceIds(kernel) {
+    const rows = await kernel.call('core.workspaces.list', { limit: 10_000 });
+    return rows.map((r) => r.id);
+}
+export const billingModule = defineServerModule({
+    definition: defineModule({
+        id: MODULE_ID,
+        name: 'Billing',
+        version: packageVersion(import.meta.url),
+        description: 'Plans, entitlements and subscriptions — what lets an instance sell seats on itself',
+        icon: 'credit-card',
+        permissions: billingPermissions,
+        events: billingEvents,
+    }),
+    schema,
+    migrationsFolder: join(dirname(fileURLToPath(import.meta.url)), '../../migrations'),
+    contract: billingContract,
+    router: billingRouter,
+    procedures: {
+        /**
+         * The one the kernel calls. Its mere presence on the broker is what switches limits on for the
+         * whole instance — `kernel.entitlements` checks `broker.has()` and treats an absent procedure as
+         * unlimited, which is what every self-hosted Kern does on every request.
+         */
+        'entitlements.get': {
+            input: z.object({ workspaceId: WorkspaceId }),
+            handler: async (input, { kernel, principal }) => {
+                requireService(principal);
+                return entitlements.resolve(kernel, input.workspaceId);
+            },
+        },
+        /** Recount one workspace from core's tables. Used by the nightly job and by support. */
+        'usage.reconcile': {
+            input: z.object({ workspaceId: WorkspaceId }),
+            handler: async (input, { kernel, principal }) => {
+                requireService(principal);
+                return usageSvc.reconcile(kernel, input.workspaceId);
+            },
+        },
+    },
+    subscriptions: {
+        /**
+         * Seats follow membership, and only for members who cost money — a guest is invited to look at
+         * one thing and must not put the workspace over its plan.
+         *
+         * All three events do the same thing: recount. `core.member.removed` does not say what role the
+         * person had and `core.member.updated` does not say what role they had before, so neither can be
+         * turned into a safe delta. Core counts non-guest memberships for one workspace, which is one
+         * indexed query.
+         */
+        'core.member.*': async (e, kernel) => {
+            const p = e.payload;
+            if (!p.workspaceId)
+                return;
+            const seats = await usageSvc.recountSeats(kernel, p.workspaceId);
+            await stripeSvc.syncSeats(kernel, p.workspaceId, seats);
+        },
+        'core.file.ready': async (e, kernel) => {
+            const p = e.payload;
+            if (typeof p.size !== 'number')
+                return;
+            await usageSvc.bump(kernel, p.workspaceId, { storageBytes: p.size });
+        },
+        'core.file.deleted': async (e, kernel) => {
+            const p = e.payload;
+            await usageSvc.bump(kernel, p.workspaceId, { storageBytes: -p.size });
+        },
+        /**
+         * A brand-new workspace starts on the default plan if the instance has one, so a cloud signup is
+         * entitled to something before anybody has touched the admin console. An instance with no
+         * default plan — every self-hosted one — gets no row, which resolves to unlimited.
+         */
+        'core.workspace.created': async (e, kernel) => {
+            const p = e.payload;
+            const slug = process.env.KERN_DEFAULT_PLAN_SLUG;
+            if (!slug)
+                return;
+            const { bySlug } = await import('./services/plans.js');
+            const plan = await bySlug(kernel, slug);
+            if (!plan) {
+                kernel.log.warn({ slug }, 'billing: KERN_DEFAULT_PLAN_SLUG names a plan that does not exist');
+                return;
+            }
+            const trialEndsAt = new Date();
+            trialEndsAt.setUTCDate(trialEndsAt.getUTCDate() + plan.trialDays);
+            await subsSvc.upsert(kernel, p.workspaceId, {
+                planId: plan.id,
+                status: plan.trialDays > 0 ? 'trialing' : 'active',
+                trialEndsAt: plan.trialDays > 0 ? trialEndsAt : null,
+            });
+        },
+    },
+    jobs: [
+        {
+            name: 'billing.reconcile-usage',
+            // nightly; counters move on events all day and this is what proves they were right
+            cron: '17 3 * * *',
+            handler: async (_input, { kernel }) => {
+                for (const workspaceId of await allWorkspaceIds(kernel)) {
+                    try {
+                        const { drift } = await usageSvc.reconcile(kernel, workspaceId);
+                        // Logged, never silently corrected: a counter that keeps needing correction means an
+                        // event is being missed, and quietly fixing the number every night is how that goes
+                        // unnoticed for a year.
+                        if (drift.seats !== 0 || drift.storageBytes !== 0)
+                            kernel.log.warn({ workspaceId, drift }, 'billing: usage counters had drifted');
+                    }
+                    catch (err) {
+                        kernel.log.warn({ err: String(err), workspaceId }, 'billing: reconcile failed');
+                    }
+                }
+            },
+        },
+        {
+            name: 'billing.close-grace-periods',
+            cron: '7 * * * *',
+            handler: async (_input, { kernel }) => {
+                const due = await kernel.database.db
+                    .select({ workspaceId: subscriptions.workspaceId })
+                    .from(subscriptions)
+                    .where(and(eq(subscriptions.status, 'past_due'), isNotNull(subscriptions.graceEndsAt), lte(subscriptions.graceEndsAt, new Date())));
+                for (const row of due) {
+                    await subsSvc.upsert(kernel, row.workspaceId, { status: 'suspended', graceEndsAt: null });
+                    await kernel.emit(billingEvents.subscriptionSuspended, {
+                        workspaceId: row.workspaceId,
+                        reason: 'the grace period after a failed payment ended',
+                    }, { workspaceId: row.workspaceId });
+                    kernel.log.info({ workspaceId: row.workspaceId }, 'billing: grace period ended, workspace suspended');
+                }
+            },
+        },
+    ],
+});
+export default billingModule;
+//# sourceMappingURL=index.js.map

package/dist/server/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/server/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAkB,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/D,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,SAAS,EAAe,cAAc,EAAE,MAAM,gBAAgB,CAAA;AACzG,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,aAAa,CAAA;AACrD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AACvB,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,kBAAkB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAA;AAC9F,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AACnD,OAAO,KAAK,YAAY,MAAM,4BAA4B,CAAA;AAC1D,OAAO,KAAK,SAAS,MAAM,sBAAsB,CAAA;AACjD,OAAO,KAAK,OAAO,MAAM,6BAA6B,CAAA;AACtD,OAAO,KAAK,QAAQ,MAAM,qBAAqB,CAAA;AAE/C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAC3C,cAAc,aAAa,CAAA;AAC3B,OAAO,KAAK,mBAAmB,MAAM,4BAA4B,CAAA;AACjE,OAAO,KAAK,YAAY,MAAM,qBAAqB,CAAA;AACnD,OAAO,KAAK,aAAa,MAAM,sBAAsB,CAAA;AACrD,OAAO,KAAK,oBAAoB,MAAM,6BAA6B,CAAA;AACnE,OAAO,KAAK,YAAY,MAAM,qBAAqB,CAAA;AAEnD;;;;GAIG;AACH,SAAS,cAAc,CAAC,SAAoB;IAC1C,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,aAAa;QAAE,MAAM,SAAS,CAAC,SAAS,EAAE,CAAA;AAC3F,CAAC;AAED,0FAA0F;AAC1F,KAAK,UAAU,eAAe,CAAC,MAAc;IAC3C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,CAAwB,sBAAsB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAA;IAChG,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;AAC9B,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,kBAAkB,CAAC;IAC9C,UAAU,EAAE,YAAY,CAAC;QACvB,EAAE,EAAE,SAAS;QACb,IAAI,EAAE,SAAS;QACf,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC;QACxC,WAAW,EAAE,oFAAoF;QACjG,IAAI,EAAE,aAAa;QACnB,WAAW,EAAE,kBAAkB;QAC/B,MAAM,EAAE,aAAa;KACtB,CAAC;IACF,MAAM;IACN,gBAAgB,EAAE,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,kBAAkB,CAAC;IACnF,QAAQ,EAAE,eAAe;IACzB,MAAM,EAAE,aAAa;IAErB,UAAU,EAAE;QACV;;;;WAIG;QACH,kBAAkB,EAAE;YAClB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;YAC7C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;gBAC9C,cAAc,CAAC,SAAS,CAAC,CAAA;gBACzB,OAAO,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;YACxD,CAAC;SACF;QACD,wFAAwF;QACxF,iBAAiB,EAAE;YACjB,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC;YAC7C,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,EAAE;gBAC9C,cAAc,CAAC,SAAS,CAAC,CAAA;gBACzB,OAAO,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,WAAW,CAAC,CAAA;YACtD,CAAC;SACF;KACF;IAED,aAAa,EAAE;QACb;;;;;;;;WAQG;QACH,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE;YACnC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAmC,CAAA;YAC/C,IAAI,CAAC,CAAC,CAAC,WAAW;gBAAE,OAAM;YAC1B,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,WAAW,CAAC,CAAA;YAChE,MAAM,SAAS,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;QACzD,CAAC;QACD,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE;YACrC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAiD,CAAA;YAC7D,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAM;YACtC,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;QACtE,CAAC;QACD,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE;YACvC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAgD,CAAA;YAC5D,MAAM,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;QACvE,CAAC;QACD;;;;WAIG;QACH,wBAAwB,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE;YAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,OAAkC,CAAA;YAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAA;YAC/C,IAAI,CAAC,IAAI;gBAAE,OAAM;YACjB,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAA;YACtD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YACvC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,kEAAkE,CAAC,CAAA;gBAC7F,OAAM;YACR,CAAC;YACD,MAAM,WAAW,GAAG,IAAI,IAAI,EAAE,CAAA;YAC9B,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,UAAU,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,CAAA;YACjE,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE;gBAC1C,MAAM,EAAE,IAAI,CAAC,EAAE;gBACf,MAAM,EAAE,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ;gBAClD,WAAW,EAAE,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI;aACrD,CAAC,CAAA;QACJ,CAAC;KACF;IAED,IAAI,EAAE;QACJ;YACE,IAAI,EAAE,yBAAyB;YAC/B,mFAAmF;YACnF,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,KAAK,EAAE,MAAe,EAAE,EAAE,MAAM,EAAsB,EAAE,EAAE;gBACjE,KAAK,MAAM,WAAW,IAAI,MAAM,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;oBACxD,IAAI,CAAC;wBACH,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,WAAW,CAAC,CAAA;wBAC/D,qFAAqF;wBACrF,oFAAoF;wBACpF,wBAAwB;wBACxB,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC;4BAC/C,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,EAAE,qCAAqC,CAAC,CAAA;oBAClF,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;wBACb,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,WAAW,EAAE,EAAE,2BAA2B,CAAC,CAAA;oBACjF,CAAC;gBACH,CAAC;YACH,CAAC;SACF;QACD;YACE,IAAI,EAAE,6BAA6B;YACnC,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,KAAK,EAAE,MAAe,EAAE,EAAE,MAAM,EAAsB,EAAE,EAAE;gBACjE,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,EAAE;qBACjC,MAAM,CAAC,EAAE,WAAW,EAAE,aAAa,CAAC,WAAW,EAAE,CAAC;qBAClD,IAAI,CAAC,aAAa,CAAC;qBACnB,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,UAAU,CAAC,EACpC,SAAS,CAAC,aAAa,CAAC,WAAW,CAAC,EACpC,GAAG,CAAC,aAAa,CAAC,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,CAC3C,CACF,CAAA;gBACH,KAAK,MAAM,GAAG,IAAI,GAAG,EAAE,CAAC;oBACtB,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;oBACzF,MAAM,MAAM,CAAC,IAAI,CACf,aAAa,CAAC,qBAAqB,EACnC;wBACE,WAAW,EAAE,GAAG,CAAC,WAA0B;wBAC3C,MAAM,EAAE,+CAA+C;qBACxD,EACD,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CACjC,CAAA;oBACD,MAAM,CAAC,GAAG,CAAC,IAAI,CACb,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,EAChC,kDAAkD,CACnD,CAAA;gBACH,CAAC;YACH,CAAC;SACF;KACF;CACF,CAAC,CAAA;AAEF,eAAe,aAAa,CAAA"}