@mesub/node 0.0.0-stage → 0.1.2

package/dist/guard-CaXiHMVF.d.ts

@@ -0,0 +1,51 @@
+import { C as Customer, A as AccessAnswer } from './subscriptions-B6Lin6i_.js';
+
+/** Who a call is about, normalised as Mesub reads it. */
+interface Asked {
+    kind: 'wallet' | 'external_id' | 'email';
+    value: string;
+}
+
+/** Why a request was turned away, and what it answers by default. */
+type DenialReason = 'unauthenticated' | 'no_access' | 'unavailable';
+/** Who is asking and what Mesub answered, as a guarded route receives it. */
+interface MesubAccess {
+    /**
+     * The wallet that pays. Asked by external id or email, the one Mesub
+     * answered with; null when the answer is the outage fallback's and holds none.
+     */
+    wallet: string | null;
+    /** Who Mesub was asked about: a wallet, your own id for them, or their email. */
+    customer: Asked;
+    /** The plan that let the request through: the first of the list that did. */
+    plan: string;
+    /** Mesub's answer for that plan. */
+    answer: AccessAnswer | null;
+    /** The answer came from the outage fallback. */
+    stale: boolean;
+}
+/** A refusal, as `onDenied` receives it. */
+interface Denial {
+    reason: DenialReason;
+    /** 401, 402 or 503: what would be answered without `onDenied`. */
+    status: number;
+    /** Mesub's answer, for the first plan asked when there are several. */
+    answer: AccessAnswer | null;
+}
+/**
+ * The plan a guard asks about: one, any one of several (the first that grants
+ * lets the request through), or either of those worked out per request.
+ */
+type PlanOption<Req> = string | readonly string[] | ((request: Req) => string | readonly string[]);
+/**
+ * Who is asking, from your own auth: `(req) => ({ external_id: req.user.id })`,
+ * a wallet, or an email. Null or undefined when nobody is signed in, a 401.
+ * May be async.
+ *
+ * It must come from a session you verified, never from the request itself (a
+ * query, a body, a header the caller writes): whoever names a subscriber
+ * would get their access.
+ */
+type CustomerOption<Req> = (request: Req) => Customer | string | null | undefined | Promise<Customer | string | null | undefined>;
+
+export type { Asked as A, CustomerOption as C, Denial as D, MesubAccess as M, PlanOption as P, DenialReason as a };

package/dist/guard-D4AB5HtN.d.cts

@@ -0,0 +1,51 @@
+import { C as Customer, A as AccessAnswer } from './subscriptions-B6Lin6i_.cjs';
+
+/** Who a call is about, normalised as Mesub reads it. */
+interface Asked {
+    kind: 'wallet' | 'external_id' | 'email';
+    value: string;
+}
+
+/** Why a request was turned away, and what it answers by default. */
+type DenialReason = 'unauthenticated' | 'no_access' | 'unavailable';
+/** Who is asking and what Mesub answered, as a guarded route receives it. */
+interface MesubAccess {
+    /**
+     * The wallet that pays. Asked by external id or email, the one Mesub
+     * answered with; null when the answer is the outage fallback's and holds none.
+     */
+    wallet: string | null;
+    /** Who Mesub was asked about: a wallet, your own id for them, or their email. */
+    customer: Asked;
+    /** The plan that let the request through: the first of the list that did. */
+    plan: string;
+    /** Mesub's answer for that plan. */
+    answer: AccessAnswer | null;
+    /** The answer came from the outage fallback. */
+    stale: boolean;
+}
+/** A refusal, as `onDenied` receives it. */
+interface Denial {
+    reason: DenialReason;
+    /** 401, 402 or 503: what would be answered without `onDenied`. */
+    status: number;
+    /** Mesub's answer, for the first plan asked when there are several. */
+    answer: AccessAnswer | null;
+}
+/**
+ * The plan a guard asks about: one, any one of several (the first that grants
+ * lets the request through), or either of those worked out per request.
+ */
+type PlanOption<Req> = string | readonly string[] | ((request: Req) => string | readonly string[]);
+/**
+ * Who is asking, from your own auth: `(req) => ({ external_id: req.user.id })`,
+ * a wallet, or an email. Null or undefined when nobody is signed in, a 401.
+ * May be async.
+ *
+ * It must come from a session you verified, never from the request itself (a
+ * query, a body, a header the caller writes): whoever names a subscriber
+ * would get their access.
+ */
+type CustomerOption<Req> = (request: Req) => Customer | string | null | undefined | Promise<Customer | string | null | undefined>;
+
+export type { Asked as A, CustomerOption as C, Denial as D, MesubAccess as M, PlanOption as P, DenialReason as a };

package/dist/index.cjs

@@ -0,0 +1,39 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});
+
+
+
+
+
+
+
+
+
+
+
+var _chunk4JSJOX35cjs = require('./chunk-4JSJOX35.cjs');
+
+
+
+
+
+
+var _chunk43Q4PNF7cjs = require('./chunk-43Q4PNF7.cjs');
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+exports.ACCESS_LINE = _chunk43Q4PNF7cjs.ACCESS_LINE; exports.API_VERSION = _chunk4JSJOX35cjs.API_VERSION; exports.API_VERSION_HEADER = _chunk4JSJOX35cjs.API_VERSION_HEADER; exports.AccessCache = _chunk4JSJOX35cjs.AccessCache; exports.CONFIRMATIONS = _chunk43Q4PNF7cjs.CONFIRMATIONS; exports.DEFAULT_MAX_ENTRIES = _chunk4JSJOX35cjs.DEFAULT_MAX_ENTRIES; exports.DEFAULT_MAX_STALE_MS = _chunk4JSJOX35cjs.DEFAULT_MAX_STALE_MS; exports.MemoryStore = _chunk4JSJOX35cjs.MemoryStore; exports.Mesub = _chunk4JSJOX35cjs.Mesub; exports.MesubError = _chunk4JSJOX35cjs.MesubError; exports.MesubSubmitError = _chunk4JSJOX35cjs.MesubSubmitError; exports.SITUATIONS = _chunk43Q4PNF7cjs.SITUATIONS; exports.VERSION = _chunk4JSJOX35cjs.VERSION; exports.explain = _chunk43Q4PNF7cjs.explain; exports.situationOf = _chunk43Q4PNF7cjs.situationOf; exports.verifyWebhook = _chunk4JSJOX35cjs.verifyWebhook;
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/node-sdk/node-sdk/dist/index.cjs"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,i3BAAC","file":"/home/runner/work/node-sdk/node-sdk/dist/index.cjs"}

package/dist/index.d.cts

@@ -0,0 +1,44 @@
+import { C as CacheStore, a as CacheEntry } from './client-BEuDegEY.cjs';
+export { A as AccessCache, b as AccessCacheOptions, c as AccessChangedDetail, d as CachedAnswer, e as CreatedDetail, D as DEFAULT_MAX_STALE_MS, f as Decision, E as EndedDetail, g as EventList, h as EventListParams, i as EventNetwork, j as EventType, k as Events, F as FirstPayment, H as HeaderSource, M as Mesub, l as MesubEvent, m as MesubOptions, N as NoDetail, P as PaymentFailedDetail, n as Plan, o as PlanStatus, p as PlanToken, q as Plans, R as RenewalIssue, r as RenewalUpcomingDetail, s as RenewedDetail, t as Revalidating, S as StoppedDetail, u as SubscriptionAccessGrantedEvent, v as SubscriptionAccessRevokedEvent, w as SubscriptionCancelledEvent, x as SubscriptionCreatedEvent, y as SubscriptionEndedEvent, z as SubscriptionExpiredEvent, B as SubscriptionPausedEvent, G as SubscriptionPaymentFailedEvent, I as SubscriptionRenewalUpcomingEvent, J as SubscriptionRenewedEvent, K as SubscriptionResumedEvent, L as SubscriptionStoppedEvent, O as SubscriptionUnpausedEvent, T as TestEvent, V as VerifyWebhookOptions, W as WebhookBody, Q as WebhookEvent, U as WebhookEventType, X as Webhooks, Y as verifyWebhook } from './client-BEuDegEY.cjs';
+export { M as MesubError, a as MesubErrorCode, b as MesubErrorOptions, c as MesubSubmitError, d as MesubSubmitErrorOptions } from './errors-DcLfunS-.cjs';
+export { A as AccessAnswer, a as AccessList, b as AccessOptions, c as AttemptsParams, B as BlockedReason, d as ConfirmOptions, e as ConfirmParams, f as ConfirmReasonCode, g as ConfirmResult, C as Customer, E as EndReason, L as LateReason, h as ListParams, P as PaymentStatus, i as PullOutcome, R as RequestOptions, S as ServedAttempt, j as ServerSubscription, k as ServerSubscriptionList, l as ServerSubscriptionStatus, m as StopReason, n as SubmitOptions, o as SubmitParams, p as SubmitResult, q as SubscribeCosts, r as SubscribeParams, s as SubscribeTransaction, t as SubscriptionAttempt, u as SubscriptionAttemptList, v as SubscriptionStatus, w as Subscriptions, W as WalletTransaction } from './subscriptions-B6Lin6i_.cjs';
+export { ACCESS_LINE, CONFIRMATIONS, ConfirmationKey, ExplainOptions, Explainable, ExplainedAction, Explanation, SITUATIONS, Situation, SituationActionId, SituationActionTemplate, SituationActor, SituationKey, SituationText, explain, situationOf } from './situations.cjs';
+
+/** Kept in step with package.json by `test/version.spec.ts`. */
+declare const VERSION = "0.1.2";
+/**
+ * The version of the Mesub API this release was written against, sent in
+ * the `Mesub-Version` header of every call, so the API can change its
+ * answers for newer releases without breaking this one. Moved only with a
+ * release, never by a merchant.
+ */
+declare const API_VERSION = "2026-10-02";
+/** The header `API_VERSION` is sent in. */
+declare const API_VERSION_HEADER = "Mesub-Version";
+
+/** How many answers the memory store keeps before dropping the least recently used. */
+declare const DEFAULT_MAX_ENTRIES = 10000;
+interface MemoryStoreOptions {
+    /** A whole number above 0: 10 000 by default. */
+    maxEntries?: number;
+    /** The clock, replaced in tests. */
+    now?: () => number;
+}
+/**
+ * The default store: an LRU in a `Map`, which keeps insertion order. Reading
+ * an entry moves it to the end, so the first key is always the least recently
+ * used one. It lives in this process only: a restart empties it.
+ */
+declare class MemoryStore<T = unknown> implements CacheStore<T> {
+    private readonly entries;
+    private readonly maxEntries;
+    private readonly now;
+    constructor(options?: MemoryStoreOptions);
+    /** How many entries are held, expired ones included until they are read. */
+    get size(): number;
+    get(key: string): CacheEntry<T> | undefined;
+    set(key: string, entry: CacheEntry<T>, _ttlMs: number): void;
+    delete(key: string): void;
+}
+
+export { API_VERSION, API_VERSION_HEADER, CacheEntry, CacheStore, DEFAULT_MAX_ENTRIES, MemoryStore, type MemoryStoreOptions, VERSION };

package/dist/index.d.ts

@@ -0,0 +1,44 @@
+import { C as CacheStore, a as CacheEntry } from './client-CXQLkSAJ.js';
+export { A as AccessCache, b as AccessCacheOptions, c as AccessChangedDetail, d as CachedAnswer, e as CreatedDetail, D as DEFAULT_MAX_STALE_MS, f as Decision, E as EndedDetail, g as EventList, h as EventListParams, i as EventNetwork, j as EventType, k as Events, F as FirstPayment, H as HeaderSource, M as Mesub, l as MesubEvent, m as MesubOptions, N as NoDetail, P as PaymentFailedDetail, n as Plan, o as PlanStatus, p as PlanToken, q as Plans, R as RenewalIssue, r as RenewalUpcomingDetail, s as RenewedDetail, t as Revalidating, S as StoppedDetail, u as SubscriptionAccessGrantedEvent, v as SubscriptionAccessRevokedEvent, w as SubscriptionCancelledEvent, x as SubscriptionCreatedEvent, y as SubscriptionEndedEvent, z as SubscriptionExpiredEvent, B as SubscriptionPausedEvent, G as SubscriptionPaymentFailedEvent, I as SubscriptionRenewalUpcomingEvent, J as SubscriptionRenewedEvent, K as SubscriptionResumedEvent, L as SubscriptionStoppedEvent, O as SubscriptionUnpausedEvent, T as TestEvent, V as VerifyWebhookOptions, W as WebhookBody, Q as WebhookEvent, U as WebhookEventType, X as Webhooks, Y as verifyWebhook } from './client-CXQLkSAJ.js';
+export { M as MesubError, a as MesubErrorCode, b as MesubErrorOptions, c as MesubSubmitError, d as MesubSubmitErrorOptions } from './errors-BN4ZWUfM.js';
+export { A as AccessAnswer, a as AccessList, b as AccessOptions, c as AttemptsParams, B as BlockedReason, d as ConfirmOptions, e as ConfirmParams, f as ConfirmReasonCode, g as ConfirmResult, C as Customer, E as EndReason, L as LateReason, h as ListParams, P as PaymentStatus, i as PullOutcome, R as RequestOptions, S as ServedAttempt, j as ServerSubscription, k as ServerSubscriptionList, l as ServerSubscriptionStatus, m as StopReason, n as SubmitOptions, o as SubmitParams, p as SubmitResult, q as SubscribeCosts, r as SubscribeParams, s as SubscribeTransaction, t as SubscriptionAttempt, u as SubscriptionAttemptList, v as SubscriptionStatus, w as Subscriptions, W as WalletTransaction } from './subscriptions-B6Lin6i_.js';
+export { ACCESS_LINE, CONFIRMATIONS, ConfirmationKey, ExplainOptions, Explainable, ExplainedAction, Explanation, SITUATIONS, Situation, SituationActionId, SituationActionTemplate, SituationActor, SituationKey, SituationText, explain, situationOf } from './situations.js';
+
+/** Kept in step with package.json by `test/version.spec.ts`. */
+declare const VERSION = "0.1.2";
+/**
+ * The version of the Mesub API this release was written against, sent in
+ * the `Mesub-Version` header of every call, so the API can change its
+ * answers for newer releases without breaking this one. Moved only with a
+ * release, never by a merchant.
+ */
+declare const API_VERSION = "2026-10-02";
+/** The header `API_VERSION` is sent in. */
+declare const API_VERSION_HEADER = "Mesub-Version";
+
+/** How many answers the memory store keeps before dropping the least recently used. */
+declare const DEFAULT_MAX_ENTRIES = 10000;
+interface MemoryStoreOptions {
+    /** A whole number above 0: 10 000 by default. */
+    maxEntries?: number;
+    /** The clock, replaced in tests. */
+    now?: () => number;
+}
+/**
+ * The default store: an LRU in a `Map`, which keeps insertion order. Reading
+ * an entry moves it to the end, so the first key is always the least recently
+ * used one. It lives in this process only: a restart empties it.
+ */
+declare class MemoryStore<T = unknown> implements CacheStore<T> {
+    private readonly entries;
+    private readonly maxEntries;
+    private readonly now;
+    constructor(options?: MemoryStoreOptions);
+    /** How many entries are held, expired ones included until they are read. */
+    get size(): number;
+    get(key: string): CacheEntry<T> | undefined;
+    set(key: string, entry: CacheEntry<T>, _ttlMs: number): void;
+    delete(key: string): void;
+}
+
+export { API_VERSION, API_VERSION_HEADER, CacheEntry, CacheStore, DEFAULT_MAX_ENTRIES, MemoryStore, type MemoryStoreOptions, VERSION };

package/dist/index.js

@@ -0,0 +1,39 @@
+import {
+  API_VERSION,
+  API_VERSION_HEADER,
+  AccessCache,
+  DEFAULT_MAX_ENTRIES,
+  DEFAULT_MAX_STALE_MS,
+  MemoryStore,
+  Mesub,
+  MesubError,
+  MesubSubmitError,
+  VERSION,
+  verifyWebhook
+} from "./chunk-NOS4FWWQ.js";
+import {
+  ACCESS_LINE,
+  CONFIRMATIONS,
+  SITUATIONS,
+  explain,
+  situationOf
+} from "./chunk-JJWHMB2X.js";
+export {
+  ACCESS_LINE,
+  API_VERSION,
+  API_VERSION_HEADER,
+  AccessCache,
+  CONFIRMATIONS,
+  DEFAULT_MAX_ENTRIES,
+  DEFAULT_MAX_STALE_MS,
+  MemoryStore,
+  Mesub,
+  MesubError,
+  MesubSubmitError,
+  SITUATIONS,
+  VERSION,
+  explain,
+  situationOf,
+  verifyWebhook
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/nest.cjs

@@ -0,0 +1,62 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+
+
+
+
+
+
+
+
+
+var _chunkSJRQDWTIcjs = require('./chunk-SJRQDWTI.cjs');
+
+
+var _chunk4JSJOX35cjs = require('./chunk-4JSJOX35.cjs');
+
+// src/nest.ts
+
+
+
+
+var _common = require('@nestjs/common');
+function setHeader(response, name, value) {
+  if (typeof response.setHeader === "function") response.setHeader(name, value);
+  else if (typeof response.header === "function") response.header(name, value);
+}
+function RequirePlan(plan, options) {
+  _chunkSJRQDWTIcjs.checkPlan.call(void 0, plan);
+  _chunkSJRQDWTIcjs.checkCustomer.call(void 0, options);
+  class MesubPlanGuard {
+    async canActivate(context) {
+      const http = context.switchToHttp();
+      const request = http.getRequest();
+      const client = _nullishCoalesce(options.client, () => ( _chunkSJRQDWTIcjs.defaultClient.call(void 0, )));
+      const outcome = await _chunkSJRQDWTIcjs.guard.call(void 0, 
+        client,
+        await _chunkSJRQDWTIcjs.askerOf.call(void 0, request, options.customer),
+        () => _chunkSJRQDWTIcjs.plansOf.call(void 0, plan, request)
+      );
+      if (outcome.allowed) {
+        request.mesub = _chunkSJRQDWTIcjs.accessOf.call(void 0, outcome);
+        return true;
+      }
+      const denial = _chunkSJRQDWTIcjs.denialOf.call(void 0, outcome);
+      await _optionalChain([options, 'access', _ => _.onDenied, 'optionalCall', _2 => _2(denial, request)]);
+      if (outcome.reason === "unavailable") {
+        setHeader(http.getResponse(), "Retry-After", _chunkSJRQDWTIcjs.retryAfterOf.call(void 0, outcome));
+      }
+      throw new (0, _common.HttpException)(_chunkSJRQDWTIcjs.denialBody.call(void 0, outcome), denial.status);
+    }
+  }
+  return _common.mixin.call(void 0, MesubPlanGuard);
+}
+var MesubAccess = _common.createParamDecorator.call(void 0, 
+  (_data, context) => context.switchToHttp().getRequest().mesub
+);
+
+
+
+
+exports.MesubAccess = MesubAccess; exports.MesubError = _chunk4JSJOX35cjs.MesubError; exports.RequirePlan = RequirePlan;
+//# sourceMappingURL=nest.cjs.map

package/dist/nest.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/home/runner/work/node-sdk/node-sdk/dist/nest.cjs","../src/nest.ts"],"names":[],"mappings":"AAAA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,wDAA6B;AAC7B;AACE;AACF,wDAA6B;AAC7B;AACA;ACfA;AAEI;AAEA;AACA;AAAA,wCAEG;AAkEP,SAAS,SAAA,CAAU,QAAA,EAAsB,IAAA,EAAc,KAAA,EAAe;AAClE,EAAA,GAAA,CAAI,OAAO,QAAA,CAAS,UAAA,IAAc,UAAA,EAAY,QAAA,CAAS,SAAA,CAAU,IAAA,EAAM,KAAK,CAAA;AAAA,EAAA,KAAA,GAAA,CACnE,OAAO,QAAA,CAAS,OAAA,IAAW,UAAA,EAAY,QAAA,CAAS,MAAA,CAAO,IAAA,EAAM,KAAK,CAAA;AAC/E;AAcO,SAAS,WAAA,CACZ,IAAA,EACA,OAAA,EACiB;AACjB,EAAA,yCAAA,IAAc,CAAA;AACd,EAAA,6CAAA,OAAqB,CAAA;AAAA,EAErB,MAAM,eAAsC;AAAA,IACxC,MAAM,WAAA,CAAY,OAAA,EAA6C;AAC3D,MAAA,MAAM,KAAA,EAAO,OAAA,CAAQ,YAAA,CAAa,CAAA;AAClC,MAAA,MAAM,QAAA,EAAU,IAAA,CAAK,UAAA,CAAgB,CAAA;AACrC,MAAA,MAAM,OAAA,mBAAS,OAAA,CAAQ,MAAA,UAAU,6CAAA,GAAc;AAC/C,MAAA,MAAM,QAAA,EAAU,MAAM,qCAAA;AAAA,QAAM,MAAA;AAAA,QAAQ,MAAM,uCAAA,OAAQ,EAAS,OAAA,CAAQ,QAAQ,CAAA;AAAA,QAAG,CAAA,EAAA,GAC1E,uCAAA,IAAQ,EAAM,OAAO;AAAA,MACzB,CAAA;AAEA,MAAA,GAAA,CAAI,OAAA,CAAQ,OAAA,EAAS;AACjB,QAAA,OAAA,CAAQ,MAAA,EAAQ,wCAAA,OAAgB,CAAA;AAEhC,QAAA,OAAO,IAAA;AAAA,MACX;AAEA,MAAA,MAAM,OAAA,EAAS,wCAAA,OAAgB,CAAA;AAE/B,MAAA,sBAAM,OAAA,mBAAQ,QAAA,0BAAA,CAAW,MAAA,EAAQ,OAAO,GAAA;AAExC,MAAA,GAAA,CAAI,OAAA,CAAQ,OAAA,IAAW,aAAA,EAAe;AAClC,QAAA,SAAA,CAAU,IAAA,CAAK,WAAA,CAAwB,CAAA,EAAG,aAAA,EAAe,4CAAA,OAAoB,CAAC,CAAA;AAAA,MAClF;AAEA,MAAA,MAAM,IAAI,0BAAA,CAAc,0CAAA,OAAkB,CAAA,EAAG,MAAA,CAAO,MAAM,CAAA;AAAA,IAC9D;AAAA,EACJ;AAEA,EAAA,OAAO,2BAAA,cAAoB,CAAA;AAC/B;AAGO,IAAM,YAAA,EAAc,0CAAA;AAAA,EACvB,CAAC,KAAA,EAAgB,OAAA,EAAA,GACb,OAAA,CAAQ,YAAA,CAAa,CAAA,CAAE,UAAA,CAAyB,CAAA,CAAE;AAC1D,CAAA;AD5EA;AACE;AACA;AACA;AACF,wHAAC","file":"/home/runner/work/node-sdk/node-sdk/dist/nest.cjs","sourcesContent":[null,"/** `@mesub/node/nest`: `RequirePlan()` and `@MesubAccess()`. */\nimport {\n    type CanActivate,\n    createParamDecorator,\n    type ExecutionContext,\n    HttpException,\n    mixin,\n    type Type,\n} from '@nestjs/common';\n\nimport type { Mesub } from './client.js';\nimport {\n    accessOf,\n    askerOf,\n    checkCustomer,\n    checkPlan,\n    type CustomerOption,\n    type Denial,\n    defaultClient,\n    denialBody,\n    denialOf,\n    guard,\n    type MesubAccess as Access,\n    type PlanOption,\n    plansOf,\n    retryAfterOf,\n} from './guard.js';\nimport type { HeaderSource } from './webhooks.js';\n\nexport { MesubError } from './errors.js';\nexport type { CustomerOption, Denial, DenialReason, PlanOption } from './guard.js';\nexport type { Asked } from './customer.js';\nexport type { Customer } from './answer.js';\n\n/** Who is asking and what Mesub answered, as `@MesubAccess()` gives it. */\nexport type MesubAccess = Access;\n\n/** An Express or Fastify request, as far as the guard reads and writes it. */\nexport interface MesubRequest {\n    headers: HeaderSource;\n    /** Set by `RequirePlan` when the request is let through. */\n    mesub?: MesubAccess;\n}\n\n/**\n * `Req` is your request as your own auth guard leaves it: name it to read\n * `req.user` in `customer` without a cast,\n * `RequirePlan<AuthedRequest>('pro', { customer: (req) => ... })`.\n */\nexport interface RequirePlanOptions<Req extends MesubRequest = MesubRequest> {\n    /** Defaults to one client built from MESUB_API_KEY. */\n    client?: Mesub;\n    /**\n     * Who is asking, from your own auth:\n     * `(req) => ({ external_id: req.user.id })`, a wallet or an email. Null when\n     * nobody is signed in. It must come from a session you verified, never\n     * from the request itself.\n     */\n    customer: CustomerOption<Req>;\n    /**\n     * Answer a refusal yourself by throwing your own exception, with your own\n     * status and body. It may be async: what it returns is awaited, and a\n     * rejection is thrown like a throw. If it returns, the default refusal\n     * is thrown.\n     */\n    onDenied?: (denial: Denial, request: Req) => unknown;\n}\n\n/** Express has `setHeader`, a Fastify reply has `header`. */\ninterface HeaderSink {\n    setHeader?: (name: string, value: string) => unknown;\n    header?: (name: string, value: string) => unknown;\n}\n\nfunction setHeader(response: HeaderSink, name: string, value: string) {\n    if (typeof response.setHeader === 'function') response.setHeader(name, value);\n    else if (typeof response.header === 'function') response.header(name, value);\n}\n\n/**\n * A guard letting a request through only for a subscriber with access to that\n * plan: `@UseGuards(RequirePlan('pro', { customer }))` on a controller or a\n * route. The plan is a slug, a list of which any one will do\n * (`['pro', 'team']`), or either worked out per request. `@MesubAccess()` says\n * which one let it through.\n *\n * Who is asking is who `customer` says, from your own auth. Refusals throw an\n * `HttpException` of 401 (nobody signed in), 402 (Mesub said no) or 503 with\n * Retry-After (Mesub unreachable, with no answer known for that subscriber).\n * Integration errors are thrown as they are, for Nest to log and answer 500.\n */\nexport function RequirePlan<Req extends MesubRequest = MesubRequest>(\n    plan: PlanOption<Req>,\n    options: RequirePlanOptions<Req>,\n): Type<CanActivate> {\n    checkPlan(plan);\n    checkCustomer(options);\n\n    class MesubPlanGuard implements CanActivate {\n        async canActivate(context: ExecutionContext): Promise<boolean> {\n            const http = context.switchToHttp();\n            const request = http.getRequest<Req>();\n            const client = options.client ?? defaultClient();\n            const outcome = await guard(client, await askerOf(request, options.customer), () =>\n                plansOf(plan, request),\n            );\n\n            if (outcome.allowed) {\n                request.mesub = accessOf(outcome);\n\n                return true;\n            }\n\n            const denial = denialOf(outcome);\n\n            await options.onDenied?.(denial, request);\n\n            if (outcome.reason === 'unavailable') {\n                setHeader(http.getResponse<HeaderSink>(), 'Retry-After', retryAfterOf(outcome));\n            }\n\n            throw new HttpException(denialBody(outcome), denial.status);\n        }\n    }\n\n    return mixin(MesubPlanGuard);\n}\n\n/** The `MesubAccess` that `RequirePlan` left on the request, as a handler parameter. */\nexport const MesubAccess = createParamDecorator(\n    (_data: unknown, context: ExecutionContext): MesubAccess | undefined =>\n        context.switchToHttp().getRequest<MesubRequest>().mesub,\n);\n"]}

package/dist/nest.d.cts

@@ -0,0 +1,57 @@
+import { Type, CanActivate } from '@nestjs/common';
+import { H as HeaderSource, M as Mesub } from './client-BEuDegEY.cjs';
+import { M as MesubAccess$1, P as PlanOption, C as CustomerOption, D as Denial } from './guard-D4AB5HtN.cjs';
+export { A as Asked, a as DenialReason } from './guard-D4AB5HtN.cjs';
+export { M as MesubError } from './errors-DcLfunS-.cjs';
+export { C as Customer } from './subscriptions-B6Lin6i_.cjs';
+
+/** `@mesub/node/nest`: `RequirePlan()` and `@MesubAccess()`. */
+
+/** An Express or Fastify request, as far as the guard reads and writes it. */
+interface MesubRequest {
+    headers: HeaderSource;
+    /** Set by `RequirePlan` when the request is let through. */
+    mesub?: MesubAccess;
+}
+/**
+ * `Req` is your request as your own auth guard leaves it: name it to read
+ * `req.user` in `customer` without a cast,
+ * `RequirePlan<AuthedRequest>('pro', { customer: (req) => ... })`.
+ */
+interface RequirePlanOptions<Req extends MesubRequest = MesubRequest> {
+    /** Defaults to one client built from MESUB_API_KEY. */
+    client?: Mesub;
+    /**
+     * Who is asking, from your own auth:
+     * `(req) => ({ external_id: req.user.id })`, a wallet or an email. Null when
+     * nobody is signed in. It must come from a session you verified, never
+     * from the request itself.
+     */
+    customer: CustomerOption<Req>;
+    /**
+     * Answer a refusal yourself by throwing your own exception, with your own
+     * status and body. It may be async: what it returns is awaited, and a
+     * rejection is thrown like a throw. If it returns, the default refusal
+     * is thrown.
+     */
+    onDenied?: (denial: Denial, request: Req) => unknown;
+}
+/**
+ * A guard letting a request through only for a subscriber with access to that
+ * plan: `@UseGuards(RequirePlan('pro', { customer }))` on a controller or a
+ * route. The plan is a slug, a list of which any one will do
+ * (`['pro', 'team']`), or either worked out per request. `@MesubAccess()` says
+ * which one let it through.
+ *
+ * Who is asking is who `customer` says, from your own auth. Refusals throw an
+ * `HttpException` of 401 (nobody signed in), 402 (Mesub said no) or 503 with
+ * Retry-After (Mesub unreachable, with no answer known for that subscriber).
+ * Integration errors are thrown as they are, for Nest to log and answer 500.
+ */
+declare function RequirePlan<Req extends MesubRequest = MesubRequest>(plan: PlanOption<Req>, options: RequirePlanOptions<Req>): Type<CanActivate>;
+/** Who is asking and what Mesub answered, as `@MesubAccess()` gives it. */
+type MesubAccess = MesubAccess$1;
+/** The `MesubAccess` that `RequirePlan` left on the request, as a handler parameter. */
+declare const MesubAccess: (...dataOrPipes: unknown[]) => ParameterDecorator;
+
+export { CustomerOption, Denial, MesubAccess, type MesubRequest, PlanOption, RequirePlan, type RequirePlanOptions };

package/dist/nest.d.ts

@@ -0,0 +1,57 @@
+import { Type, CanActivate } from '@nestjs/common';
+import { H as HeaderSource, M as Mesub } from './client-CXQLkSAJ.js';
+import { M as MesubAccess$1, P as PlanOption, C as CustomerOption, D as Denial } from './guard-CaXiHMVF.js';
+export { A as Asked, a as DenialReason } from './guard-CaXiHMVF.js';
+export { M as MesubError } from './errors-BN4ZWUfM.js';
+export { C as Customer } from './subscriptions-B6Lin6i_.js';
+
+/** `@mesub/node/nest`: `RequirePlan()` and `@MesubAccess()`. */
+
+/** An Express or Fastify request, as far as the guard reads and writes it. */
+interface MesubRequest {
+    headers: HeaderSource;
+    /** Set by `RequirePlan` when the request is let through. */
+    mesub?: MesubAccess;
+}
+/**
+ * `Req` is your request as your own auth guard leaves it: name it to read
+ * `req.user` in `customer` without a cast,
+ * `RequirePlan<AuthedRequest>('pro', { customer: (req) => ... })`.
+ */
+interface RequirePlanOptions<Req extends MesubRequest = MesubRequest> {
+    /** Defaults to one client built from MESUB_API_KEY. */
+    client?: Mesub;
+    /**
+     * Who is asking, from your own auth:
+     * `(req) => ({ external_id: req.user.id })`, a wallet or an email. Null when
+     * nobody is signed in. It must come from a session you verified, never
+     * from the request itself.
+     */
+    customer: CustomerOption<Req>;
+    /**
+     * Answer a refusal yourself by throwing your own exception, with your own
+     * status and body. It may be async: what it returns is awaited, and a
+     * rejection is thrown like a throw. If it returns, the default refusal
+     * is thrown.
+     */
+    onDenied?: (denial: Denial, request: Req) => unknown;
+}
+/**
+ * A guard letting a request through only for a subscriber with access to that
+ * plan: `@UseGuards(RequirePlan('pro', { customer }))` on a controller or a
+ * route. The plan is a slug, a list of which any one will do
+ * (`['pro', 'team']`), or either worked out per request. `@MesubAccess()` says
+ * which one let it through.
+ *
+ * Who is asking is who `customer` says, from your own auth. Refusals throw an
+ * `HttpException` of 401 (nobody signed in), 402 (Mesub said no) or 503 with
+ * Retry-After (Mesub unreachable, with no answer known for that subscriber).
+ * Integration errors are thrown as they are, for Nest to log and answer 500.
+ */
+declare function RequirePlan<Req extends MesubRequest = MesubRequest>(plan: PlanOption<Req>, options: RequirePlanOptions<Req>): Type<CanActivate>;
+/** Who is asking and what Mesub answered, as `@MesubAccess()` gives it. */
+type MesubAccess = MesubAccess$1;
+/** The `MesubAccess` that `RequirePlan` left on the request, as a handler parameter. */
+declare const MesubAccess: (...dataOrPipes: unknown[]) => ParameterDecorator;
+
+export { CustomerOption, Denial, MesubAccess, type MesubRequest, PlanOption, RequirePlan, type RequirePlanOptions };

package/dist/nest.js

@@ -0,0 +1,62 @@
+import {
+  accessOf,
+  askerOf,
+  checkCustomer,
+  checkPlan,
+  defaultClient,
+  denialBody,
+  denialOf,
+  guard,
+  plansOf,
+  retryAfterOf
+} from "./chunk-4AAPR37Y.js";
+import {
+  MesubError
+} from "./chunk-NOS4FWWQ.js";
+
+// src/nest.ts
+import {
+  createParamDecorator,
+  HttpException,
+  mixin
+} from "@nestjs/common";
+function setHeader(response, name, value) {
+  if (typeof response.setHeader === "function") response.setHeader(name, value);
+  else if (typeof response.header === "function") response.header(name, value);
+}
+function RequirePlan(plan, options) {
+  checkPlan(plan);
+  checkCustomer(options);
+  class MesubPlanGuard {
+    async canActivate(context) {
+      const http = context.switchToHttp();
+      const request = http.getRequest();
+      const client = options.client ?? defaultClient();
+      const outcome = await guard(
+        client,
+        await askerOf(request, options.customer),
+        () => plansOf(plan, request)
+      );
+      if (outcome.allowed) {
+        request.mesub = accessOf(outcome);
+        return true;
+      }
+      const denial = denialOf(outcome);
+      await options.onDenied?.(denial, request);
+      if (outcome.reason === "unavailable") {
+        setHeader(http.getResponse(), "Retry-After", retryAfterOf(outcome));
+      }
+      throw new HttpException(denialBody(outcome), denial.status);
+    }
+  }
+  return mixin(MesubPlanGuard);
+}
+var MesubAccess = createParamDecorator(
+  (_data, context) => context.switchToHttp().getRequest().mesub
+);
+export {
+  MesubAccess,
+  MesubError,
+  RequirePlan
+};
+//# sourceMappingURL=nest.js.map

package/dist/nest.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/nest.ts"],"sourcesContent":["/** `@mesub/node/nest`: `RequirePlan()` and `@MesubAccess()`. */\nimport {\n    type CanActivate,\n    createParamDecorator,\n    type ExecutionContext,\n    HttpException,\n    mixin,\n    type Type,\n} from '@nestjs/common';\n\nimport type { Mesub } from './client.js';\nimport {\n    accessOf,\n    askerOf,\n    checkCustomer,\n    checkPlan,\n    type CustomerOption,\n    type Denial,\n    defaultClient,\n    denialBody,\n    denialOf,\n    guard,\n    type MesubAccess as Access,\n    type PlanOption,\n    plansOf,\n    retryAfterOf,\n} from './guard.js';\nimport type { HeaderSource } from './webhooks.js';\n\nexport { MesubError } from './errors.js';\nexport type { CustomerOption, Denial, DenialReason, PlanOption } from './guard.js';\nexport type { Asked } from './customer.js';\nexport type { Customer } from './answer.js';\n\n/** Who is asking and what Mesub answered, as `@MesubAccess()` gives it. */\nexport type MesubAccess = Access;\n\n/** An Express or Fastify request, as far as the guard reads and writes it. */\nexport interface MesubRequest {\n    headers: HeaderSource;\n    /** Set by `RequirePlan` when the request is let through. */\n    mesub?: MesubAccess;\n}\n\n/**\n * `Req` is your request as your own auth guard leaves it: name it to read\n * `req.user` in `customer` without a cast,\n * `RequirePlan<AuthedRequest>('pro', { customer: (req) => ... })`.\n */\nexport interface RequirePlanOptions<Req extends MesubRequest = MesubRequest> {\n    /** Defaults to one client built from MESUB_API_KEY. */\n    client?: Mesub;\n    /**\n     * Who is asking, from your own auth:\n     * `(req) => ({ external_id: req.user.id })`, a wallet or an email. Null when\n     * nobody is signed in. It must come from a session you verified, never\n     * from the request itself.\n     */\n    customer: CustomerOption<Req>;\n    /**\n     * Answer a refusal yourself by throwing your own exception, with your own\n     * status and body. It may be async: what it returns is awaited, and a\n     * rejection is thrown like a throw. If it returns, the default refusal\n     * is thrown.\n     */\n    onDenied?: (denial: Denial, request: Req) => unknown;\n}\n\n/** Express has `setHeader`, a Fastify reply has `header`. */\ninterface HeaderSink {\n    setHeader?: (name: string, value: string) => unknown;\n    header?: (name: string, value: string) => unknown;\n}\n\nfunction setHeader(response: HeaderSink, name: string, value: string) {\n    if (typeof response.setHeader === 'function') response.setHeader(name, value);\n    else if (typeof response.header === 'function') response.header(name, value);\n}\n\n/**\n * A guard letting a request through only for a subscriber with access to that\n * plan: `@UseGuards(RequirePlan('pro', { customer }))` on a controller or a\n * route. The plan is a slug, a list of which any one will do\n * (`['pro', 'team']`), or either worked out per request. `@MesubAccess()` says\n * which one let it through.\n *\n * Who is asking is who `customer` says, from your own auth. Refusals throw an\n * `HttpException` of 401 (nobody signed in), 402 (Mesub said no) or 503 with\n * Retry-After (Mesub unreachable, with no answer known for that subscriber).\n * Integration errors are thrown as they are, for Nest to log and answer 500.\n */\nexport function RequirePlan<Req extends MesubRequest = MesubRequest>(\n    plan: PlanOption<Req>,\n    options: RequirePlanOptions<Req>,\n): Type<CanActivate> {\n    checkPlan(plan);\n    checkCustomer(options);\n\n    class MesubPlanGuard implements CanActivate {\n        async canActivate(context: ExecutionContext): Promise<boolean> {\n            const http = context.switchToHttp();\n            const request = http.getRequest<Req>();\n            const client = options.client ?? defaultClient();\n            const outcome = await guard(client, await askerOf(request, options.customer), () =>\n                plansOf(plan, request),\n            );\n\n            if (outcome.allowed) {\n                request.mesub = accessOf(outcome);\n\n                return true;\n            }\n\n            const denial = denialOf(outcome);\n\n            await options.onDenied?.(denial, request);\n\n            if (outcome.reason === 'unavailable') {\n                setHeader(http.getResponse<HeaderSink>(), 'Retry-After', retryAfterOf(outcome));\n            }\n\n            throw new HttpException(denialBody(outcome), denial.status);\n        }\n    }\n\n    return mixin(MesubPlanGuard);\n}\n\n/** The `MesubAccess` that `RequirePlan` left on the request, as a handler parameter. */\nexport const MesubAccess = createParamDecorator(\n    (_data: unknown, context: ExecutionContext): MesubAccess | undefined =>\n        context.switchToHttp().getRequest<MesubRequest>().mesub,\n);\n"],"mappings":";;;;;;;;;;;;;;;;;AACA;AAAA,EAEI;AAAA,EAEA;AAAA,EACA;AAAA,OAEG;AAkEP,SAAS,UAAU,UAAsB,MAAc,OAAe;AAClE,MAAI,OAAO,SAAS,cAAc,WAAY,UAAS,UAAU,MAAM,KAAK;AAAA,WACnE,OAAO,SAAS,WAAW,WAAY,UAAS,OAAO,MAAM,KAAK;AAC/E;AAcO,SAAS,YACZ,MACA,SACiB;AACjB,YAAU,IAAI;AACd,gBAAc,OAAO;AAAA,EAErB,MAAM,eAAsC;AAAA,IACxC,MAAM,YAAY,SAA6C;AAC3D,YAAM,OAAO,QAAQ,aAAa;AAClC,YAAM,UAAU,KAAK,WAAgB;AACrC,YAAM,SAAS,QAAQ,UAAU,cAAc;AAC/C,YAAM,UAAU,MAAM;AAAA,QAAM;AAAA,QAAQ,MAAM,QAAQ,SAAS,QAAQ,QAAQ;AAAA,QAAG,MAC1E,QAAQ,MAAM,OAAO;AAAA,MACzB;AAEA,UAAI,QAAQ,SAAS;AACjB,gBAAQ,QAAQ,SAAS,OAAO;AAEhC,eAAO;AAAA,MACX;AAEA,YAAM,SAAS,SAAS,OAAO;AAE/B,YAAM,QAAQ,WAAW,QAAQ,OAAO;AAExC,UAAI,QAAQ,WAAW,eAAe;AAClC,kBAAU,KAAK,YAAwB,GAAG,eAAe,aAAa,OAAO,CAAC;AAAA,MAClF;AAEA,YAAM,IAAI,cAAc,WAAW,OAAO,GAAG,OAAO,MAAM;AAAA,IAC9D;AAAA,EACJ;AAEA,SAAO,MAAM,cAAc;AAC/B;AAGO,IAAM,cAAc;AAAA,EACvB,CAAC,OAAgB,YACb,QAAQ,aAAa,EAAE,WAAyB,EAAE;AAC1D;","names":[]}