@mesub/node 0.1.0 → 0.1.2

package/dist/{chunk-VMKI4VVA.cjs.map → chunk-SJRQDWTI.cjs.map}

@@ -1 +1 @@
-{"version":3,"sources":["/home/runner/work/node-sdk/node-sdk/dist/chunk-VMKI4VVA.cjs","../src/guard.ts"],"names":[],"mappings":"AAAA;AACE;AACA;AACF,wDAA6B;AAC7B;AACA;ACiCO,IAAM,cAAA,EAA8C;AAAA,EACvD,eAAA,EAAiB,GAAA;AAAA,EACjB,SAAA,EAAW,GAAA;AAAA,EACX,WAAA,EAAa;AACjB,CAAA;AAMO,IAAM,0BAAA,EAA4B,EAAA;AAMlC,SAAS,YAAA,CAAa,OAAA,EAA4D;AACrF,EAAA,MAAM,MAAA,kBAAQ,OAAA,mBAAQ,QAAA,6BAAU,YAAA;AAEhC,EAAA,OAAO,MAAA,CAAO,MAAA,IAAU,KAAA,EAAA,EAAY,0BAAA,EAA4B,IAAA,CAAK,IAAA,CAAK,MAAA,EAAQ,GAAI,CAAC,CAAA;AAC3F;AAEA,IAAI,MAAA;AAGG,SAAS,aAAA,CAAA,EAAuB;AACnC,EAAA,OAAA,IAAW,IAAI,4BAAA,CAAM,CAAA;AAErB,EAAA,OAAO,MAAA;AACX;AAcO,SAAS,OAAA,CAAa,IAAA,EAAuB,OAAA,EAAwB;AACxE,EAAA,OAAO,YAAA,CAAa,OAAO,KAAA,IAAS,WAAA,EAAa,IAAA,CAAK,OAAO,EAAA,EAAI,IAAI,CAAA;AACzE;AAOO,SAAS,SAAA,CAAe,IAAA,EAA6B;AACxD,EAAA,GAAA,CAAI,OAAO,KAAA,IAAS,UAAA,EAAY,YAAA,CAAa,IAAI,CAAA;AACrD;AAQA,IAAM,UAAA,EAAY,CAAA;AAElB,SAAS,YAAA,CAAa,KAAA,EAA0B;AAC5C,EAAA,MAAM,MAAA,EACF,OAAO,MAAA,IAAU,SAAA,EAAW,CAAC,KAAK,EAAA,EAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,EAAA,EAAI,MAAA,EAAQ,CAAC,CAAA;AAE1E,EAAA,GAAA,CAAI,KAAA,CAAM,OAAA,IAAW,EAAA,GAAK,CAAC,KAAA,CAAM,KAAA,CAAM,CAAC,IAAA,EAAA,GAAS,OAAO,KAAA,IAAS,SAAA,GAAY,KAAA,IAAS,EAAE,CAAA,EAAG;AACvF,IAAA,MAAM,IAAI,SAAA,CAAU,iEAAiE,CAAA;AAAA,EACzF;AAEA,EAAA,MAAM,OAAA,EAAS,CAAC,GAAG,IAAI,GAAA,CAAI,KAAiB,CAAC,CAAA;AAE7C,EAAA,GAAA,CAAI,MAAA,CAAO,OAAA,EAAS,SAAA,EAAW;AAC3B,IAAA,MAAM,IAAI,SAAA;AAAA,MACN,CAAA,mBAAA,EAAsB,SAAS,CAAA,6DAAA;AAAA,IACnC,CAAA;AAAA,EACJ;AAEA,EAAA,OAAO,MAAA;AACX;AAgBO,SAAS,aAAA,CAAmB,OAAA,EAAkD;AACjF,EAAA,GAAA,CAAI,uBAAO,OAAA,6BAAS,WAAA,IAAa,UAAA,EAAY;AACzC,IAAA,MAAM,IAAI,SAAA;AAAA,MACN;AAAA,IAEJ,CAAA;AAAA,EACJ;AACJ;AAQA,MAAA,SAAsB,OAAA,CAClB,OAAA,EACA,QAAA,EACqB;AACrB,EAAA,MAAM,MAAA,EAAQ,MAAM,QAAA,CAAS,OAAO,CAAA;AAEpC,EAAA,GAAA,CAAI,MAAA,IAAU,KAAA,GAAQ,MAAA,IAAU,KAAA,CAAA,EAAW,OAAO,IAAA;AAElD,EAAA,MAAM,MAAA,EAAQ,0CAAA,KAAgB,CAAA;AAE9B,EAAA,GAAA,CAAI,KAAA,CAAM,MAAA,IAAU,EAAA,EAAI;AACpB,IAAA,MAAM,IAAI,SAAA;AAAA,MACN;AAAA,IACJ,CAAA;AAAA,EACJ;AAEA,EAAA,OAAO,KAAA;AACX;AAGA,SAAS,UAAA,CAAW,KAAA,EAAiC;AACjD,EAAA,GAAA,CAAI,KAAA,CAAM,KAAA,IAAS,QAAA,EAAU,OAAO,KAAA,CAAM,KAAA;AAE1C,EAAA,OAAO,KAAA,CAAM,KAAA,IAAS,QAAA,EAAU,EAAE,KAAA,EAAO,KAAA,CAAM,MAAM,EAAA,EAAI,EAAE,WAAA,EAAa,KAAA,CAAM,MAAM,CAAA;AACxF;AAqBA,MAAA,SAAsB,KAAA,CAClB,MAAA,EACA,KAAA,EACA,QAAA,EACqB;AACrB,EAAA,GAAA,CAAI,CAAC,KAAA,EAAO,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,MAAA,EAAQ,kBAAkB,CAAA;AAE/D,EAAA,MAAM,MAAA,EAAQ,QAAA,CAAS,CAAA;AACvB,EAAA,MAAM,SAAA,EAAW,UAAA,CAAW,KAAK,CAAA;AACjC,EAAA,MAAM,QAAA,EAAU,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,EAAA,GAAS,MAAA,CAAO,MAAA,CAAO,QAAA,EAAU,IAAI,CAAC,CAAA;AAGjE,EAAA,IAAA,CAAA,MAAW,SAAA,GAAY,OAAA,EAAS,QAAA,CAAS,KAAA,CAAM,CAAA,EAAA,GAAM,KAAA,CAAS,CAAA;AAE9D,EAAA,IAAI,KAAA;AACJ,EAAA,IAAI,WAAA;AAEJ,EAAA,IAAA,CAAA,MAAW,CAAC,KAAA,EAAO,IAAI,EAAA,GAAK,OAAA,CAAQ,OAAA,CAAQ,CAAA,EAAG;AAC3C,IAAA,MAAM,SAAA,EAAW,MAAM,IAAA;AAEvB,IAAA,GAAA,CAAI,QAAA,CAAS,MAAA,EAAQ;AACjB,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,QAAA,EAAU,KAAA,EAAO,IAAA,EAAM,KAAA,CAAM,KAAK,CAAA,EAAI,SAAS,CAAA;AAAA,IAC3E;AAEA,IAAA,MAAA,IAAU,QAAA;AAGV,IAAA,GAAA,CAAI,QAAA,CAAS,WAAA,EAAa,YAAA,IAAgB,QAAA;AAAA,EAC9C;AAEA,EAAA,GAAA,CAAI,WAAA,EAAa,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,MAAA,EAAQ,aAAA,EAAe,QAAA,EAAU,YAAY,CAAA;AAEvF,EAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,MAAA,EAAQ,WAAA,EAAa,GAAI,MAAA,EAAQ,EAAE,QAAA,EAAU,MAAM,EAAA,EAAI,CAAC,EAAG,CAAA;AACxF;AAGO,SAAS,UAAA,CAAW,OAAA,EAAoD;AAC3E,EAAA,OAAO;AAAA,IACH,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,OAAA,CAAQ,MAAA;AAAA,IAChB,mBAAI,OAAA,qBAAQ,QAAA,6BAAU,SAAA,EAAS,EAAE,MAAA,EAAQ,OAAA,CAAQ,QAAA,CAAS,MAAA,CAAO,OAAO,EAAA,EAAI,CAAC;AAAA,EACjF,CAAA;AACJ;AAEO,SAAS,QAAA,CAAS,OAAA,EAAgE;AACrF,EAAA,MAAM,EAAE,SAAS,EAAA,EAAI,OAAA;AAErB,EAAA,OAAO;AAAA,IACH,MAAA,EACI,QAAA,CAAS,KAAA,IAAS,SAAA,EAAW,QAAA,CAAS,MAAA,mCAAS,OAAA,qBAAQ,QAAA,qBAAS,MAAA,6BAAQ,QAAA,UAAU,MAAA;AAAA,IACtF,QAAA;AAAA,IACA,IAAA,EAAM,OAAA,CAAQ,IAAA;AAAA,IACd,MAAA,EAAQ,OAAA,CAAQ,QAAA,CAAS,MAAA;AAAA,IACzB,KAAA,EAAO,OAAA,CAAQ,QAAA,CAAS;AAAA,EAC5B,CAAA;AACJ;AAEO,SAAS,QAAA,CAAS,OAAA,EAA4D;AACjF,EAAA,OAAO;AAAA,IACH,MAAA,EAAQ,OAAA,CAAQ,MAAA;AAAA,IAChB,MAAA,EAAQ,aAAA,CAAc,OAAA,CAAQ,MAAM,CAAA;AAAA,IACpC,MAAA,mCAAQ,OAAA,qBAAQ,QAAA,+BAAU,QAAA,UAAU;AAAA,EACxC,CAAA;AACJ;ADxJA;AACA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,yTAAC","file":"/home/runner/work/node-sdk/node-sdk/dist/chunk-VMKI4VVA.cjs","sourcesContent":[null,"import type { AccessAnswer, Customer } from './answer.js';\nimport { type Decision, Mesub } from './client.js';\nimport { type Asked, customerOf } from './customer.js';\n\n/** Why a request was turned away, and what it answers by default. */\nexport type DenialReason = 'unauthenticated' | 'no_access' | 'unavailable';\n\nexport type GuardOutcome =\n    | { allowed: true; customer: Asked; plan: string; decision: Decision }\n    | { allowed: false; reason: DenialReason; decision?: Decision };\n\n/** Who is asking and what Mesub answered, as a guarded route receives it. */\nexport interface MesubAccess {\n    /**\n     * The wallet that pays. Asked by external id or email, the one Mesub\n     * answered with; null when the answer is the outage fallback's and holds none.\n     */\n    wallet: string | null;\n    /** Who Mesub was asked about: a wallet, your own id for them, or their email. */\n    customer: Asked;\n    /** The plan that let the request through: the first of the list that did. */\n    plan: string;\n    /** Mesub's answer for that plan. */\n    answer: AccessAnswer | null;\n    /** The answer came from the outage fallback. */\n    stale: boolean;\n}\n\n/** A refusal, as `onDenied` receives it. */\nexport interface Denial {\n    reason: DenialReason;\n    /** 401, 402 or 503: what would be answered without `onDenied`. */\n    status: number;\n    /** Mesub's answer, for the first plan asked when there are several. */\n    answer: AccessAnswer | null;\n}\n\n/** What a guard answers by default for each refusal. */\nexport const DENIAL_STATUS: Record<DenialReason, number> = {\n    unauthenticated: 401,\n    no_access: 402,\n    unavailable: 503,\n};\n\n/**\n * Seconds a client should wait before asking again when Mesub is unreachable\n * and did not say how long itself.\n */\nexport const UNAVAILABLE_RETRY_AFTER_S = 30;\n\n/**\n * The `Retry-After` of a guard's 503, in seconds: the one Mesub sent with its\n * 429 or 503 when it sent one, `UNAVAILABLE_RETRY_AFTER_S` otherwise (#132).\n */\nexport function retryAfterOf(outcome: Extract<GuardOutcome, { allowed: false }>): string {\n    const asked = outcome.decision?.retryAfter;\n\n    return String(asked === undefined ? UNAVAILABLE_RETRY_AFTER_S : Math.ceil(asked / 1000));\n}\n\nlet shared: Mesub | undefined;\n\n/** The client a middleware uses when given none: built once, from MESUB_API_KEY. */\nexport function defaultClient(): Mesub {\n    shared ??= new Mesub();\n\n    return shared;\n}\n\n/**\n * The plan a guard asks about: one, any one of several (the first that grants\n * lets the request through), or either of those worked out per request.\n */\nexport type PlanOption<Req> =\n    string | readonly string[] | ((request: Req) => string | readonly string[]);\n\n/**\n * The plans a guard asks about for that request, in order, each once. A\n * plan that is not a non-empty string, or no plan at all, is a broken\n * integration: thrown, never read as a refusal.\n */\nexport function plansOf<Req>(plan: PlanOption<Req>, request: Req): string[] {\n    return checkedPlans(typeof plan === 'function' ? plan(request) : plan);\n}\n\n/**\n * Checks a fixed plan when the guard is built, so a typo fails at start-up\n * rather than on the first request. One worked out per request is checked\n * then, by `plansOf`.\n */\nexport function checkPlan<Req>(plan: PlanOption<Req>): void {\n    if (typeof plan !== 'function') checkedPlans(plan);\n}\n\n/**\n * Each plan a guard asks about is one call to `/v1/access`, made for every\n * request, against the key's 1000 calls a minute. Three is what a Dev\n * project can hold; a list longer than that is more likely built from the\n * request than written by hand.\n */\nconst MAX_PLANS = 3;\n\nfunction checkedPlans(value: unknown): string[] {\n    const plans: unknown[] =\n        typeof value === 'string' ? [value] : Array.isArray(value) ? value : [];\n\n    if (plans.length === 0 || !plans.every((plan) => typeof plan === 'string' && plan !== '')) {\n        throw new TypeError('A guard needs a plan, or a list of plans, as non-empty strings.');\n    }\n\n    const unique = [...new Set(plans as string[])];\n\n    if (unique.length > MAX_PLANS) {\n        throw new TypeError(\n            `A guard asks about ${MAX_PLANS} plans at most: each one is a call to Mesub on every request.`,\n        );\n    }\n\n    return unique;\n}\n\n/**\n * Who is asking, from your own auth: `(req) => ({ external_id: req.user.id })`,\n * a wallet, or an email. Null or undefined when nobody is signed in, a 401.\n * May be async.\n *\n * It must come from a session you verified, never from the request itself (a\n * query, a body, a header the caller writes): whoever names a subscriber\n * would get their access.\n */\nexport type CustomerOption<Req> = (\n    request: Req,\n) => Customer | string | null | undefined | Promise<Customer | string | null | undefined>;\n\n/** Checked when the guard is built: without `customer` it could not tell who is asking. */\nexport function checkCustomer<Req>(options: { customer: CustomerOption<Req> }): void {\n    if (typeof options?.customer !== 'function') {\n        throw new TypeError(\n            'A guard needs `customer`: a function of the request returning who is signed in, ' +\n                'e.g. `(req) => ({ external_id: req.user.id })`.',\n        );\n    }\n}\n\n/**\n * Who is asking, as `customer` names them, or null for nobody.\n *\n * A `customer` that returns something Mesub cannot be asked about (two\n * identifiers, an empty one, not a string) is a broken integration: thrown.\n */\nexport async function askerOf<Req>(\n    request: Req,\n    customer: CustomerOption<Req>,\n): Promise<Asked | null> {\n    const named = await customer(request);\n\n    if (named === null || named === undefined) return null;\n\n    const asked = customerOf(named);\n\n    if (asked.value === '') {\n        throw new TypeError(\n            '`customer` returned an empty value: return null when nobody is signed in.',\n        );\n    }\n\n    return asked;\n}\n\n/** The customer as `decide` takes it. */\nfunction asCustomer(asked: Asked): Customer | string {\n    if (asked.kind === 'wallet') return asked.value;\n\n    return asked.kind === 'email' ? { email: asked.value } : { external_id: asked.value };\n}\n\n/**\n * The one decision the middlewares make: who is asking, from `askerOf`, then\n * whether they have access to one of the plans.\n *\n * - nobody is asking (`customer` returned null): `unauthenticated`\n * - the fallback of `hasAccess` otherwise, per plan, through `decide`,\n *   within the client's `guardTimeout`. The plans are asked at once, so\n *   several fit the same budget, and read in order: the first that grants\n *   lets the request through, without waiting for the ones after it.\n *   `unavailable` when none grants and Mesub failed (outage, rate limit) or\n *   the budget ran out on one with nothing cached: 402 only ever means\n *   Mesub said no, for every plan\n *\n * An integration error (a bad API key, an unknown plan) is thrown, unless a\n * plan before it in the list already granted.\n *\n * `plansFor` runs only once somebody is identified: a plan worked out from\n * the request never runs, nor throws, for an anonymous one.\n */\nexport async function guard(\n    client: Mesub,\n    asked: Asked | null,\n    plansFor: () => readonly string[],\n): Promise<GuardOutcome> {\n    if (!asked) return { allowed: false, reason: 'unauthenticated' };\n\n    const plans = plansFor();\n    const customer = asCustomer(asked);\n    const pending = plans.map((plan) => client.decide(customer, plan));\n\n    // The ones not read, once a plan before them grants, must not reject unhandled.\n    for (const decision of pending) decision.catch(() => undefined);\n\n    let first: Decision | undefined;\n    let unavailable: Decision | undefined;\n\n    for (const [index, next] of pending.entries()) {\n        const decision = await next;\n\n        if (decision.access) {\n            return { allowed: true, customer: asked, plan: plans[index]!, decision };\n        }\n\n        first ??= decision;\n        // Mesub failed or did not answer within the budget, and nothing was\n        // cached for that customer and plan: not a no, an outage.\n        if (decision.unavailable) unavailable ??= decision;\n    }\n\n    if (unavailable) return { allowed: false, reason: 'unavailable', decision: unavailable };\n\n    return { allowed: false, reason: 'no_access', ...(first ? { decision: first } : {}) };\n}\n\n/** The body a refusal answers with. `status` only when there is an answer to read it from. */\nexport function denialBody(outcome: Extract<GuardOutcome, { allowed: false }>) {\n    return {\n        access: false,\n        reason: outcome.reason,\n        ...(outcome.decision?.answer ? { status: outcome.decision.answer.status } : {}),\n    };\n}\n\nexport function accessOf(outcome: Extract<GuardOutcome, { allowed: true }>): MesubAccess {\n    const { customer } = outcome;\n\n    return {\n        wallet:\n            customer.kind === 'wallet' ? customer.value : (outcome.decision.answer?.wallet ?? null),\n        customer,\n        plan: outcome.plan,\n        answer: outcome.decision.answer,\n        stale: outcome.decision.stale,\n    };\n}\n\nexport function denialOf(outcome: Extract<GuardOutcome, { allowed: false }>): Denial {\n    return {\n        reason: outcome.reason,\n        status: DENIAL_STATUS[outcome.reason],\n        answer: outcome.decision?.answer ?? null,\n    };\n}\n"]}
+{"version":3,"sources":["/home/runner/work/node-sdk/node-sdk/dist/chunk-SJRQDWTI.cjs","../src/guard.ts"],"names":[],"mappings":"AAAA;AACE;AACA;AACF,wDAA6B;AAC7B;AACA;ACiCO,IAAM,cAAA,EAA8C;AAAA,EACvD,eAAA,EAAiB,GAAA;AAAA,EACjB,SAAA,EAAW,GAAA;AAAA,EACX,WAAA,EAAa;AACjB,CAAA;AAMO,IAAM,0BAAA,EAA4B,EAAA;AAMlC,SAAS,YAAA,CAAa,OAAA,EAA4D;AACrF,EAAA,MAAM,MAAA,kBAAQ,OAAA,mBAAQ,QAAA,6BAAU,YAAA;AAEhC,EAAA,OAAO,MAAA,CAAO,MAAA,IAAU,KAAA,EAAA,EAAY,0BAAA,EAA4B,IAAA,CAAK,IAAA,CAAK,MAAA,EAAQ,GAAI,CAAC,CAAA;AAC3F;AAEA,IAAI,MAAA;AAGG,SAAS,aAAA,CAAA,EAAuB;AACnC,EAAA,OAAA,IAAW,IAAI,4BAAA,CAAM,CAAA;AAErB,EAAA,OAAO,MAAA;AACX;AAcO,SAAS,OAAA,CAAa,IAAA,EAAuB,OAAA,EAAwB;AACxE,EAAA,OAAO,YAAA,CAAa,OAAO,KAAA,IAAS,WAAA,EAAa,IAAA,CAAK,OAAO,EAAA,EAAI,IAAI,CAAA;AACzE;AAOO,SAAS,SAAA,CAAe,IAAA,EAA6B;AACxD,EAAA,GAAA,CAAI,OAAO,KAAA,IAAS,UAAA,EAAY,YAAA,CAAa,IAAI,CAAA;AACrD;AAQA,IAAM,UAAA,EAAY,CAAA;AAElB,SAAS,YAAA,CAAa,KAAA,EAA0B;AAC5C,EAAA,MAAM,MAAA,EACF,OAAO,MAAA,IAAU,SAAA,EAAW,CAAC,KAAK,EAAA,EAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,EAAA,EAAI,MAAA,EAAQ,CAAC,CAAA;AAE1E,EAAA,GAAA,CAAI,KAAA,CAAM,OAAA,IAAW,EAAA,GAAK,CAAC,KAAA,CAAM,KAAA,CAAM,CAAC,IAAA,EAAA,GAAS,OAAO,KAAA,IAAS,SAAA,GAAY,KAAA,IAAS,EAAE,CAAA,EAAG;AACvF,IAAA,MAAM,IAAI,SAAA,CAAU,iEAAiE,CAAA;AAAA,EACzF;AAEA,EAAA,MAAM,OAAA,EAAS,CAAC,GAAG,IAAI,GAAA,CAAI,KAAiB,CAAC,CAAA;AAE7C,EAAA,GAAA,CAAI,MAAA,CAAO,OAAA,EAAS,SAAA,EAAW;AAC3B,IAAA,MAAM,IAAI,SAAA;AAAA,MACN,CAAA,mBAAA,EAAsB,SAAS,CAAA,6DAAA;AAAA,IACnC,CAAA;AAAA,EACJ;AAEA,EAAA,OAAO,MAAA;AACX;AAgBO,SAAS,aAAA,CAAmB,OAAA,EAAkD;AACjF,EAAA,GAAA,CAAI,uBAAO,OAAA,6BAAS,WAAA,IAAa,UAAA,EAAY;AACzC,IAAA,MAAM,IAAI,SAAA;AAAA,MACN;AAAA,IAEJ,CAAA;AAAA,EACJ;AACJ;AAQA,MAAA,SAAsB,OAAA,CAClB,OAAA,EACA,QAAA,EACqB;AACrB,EAAA,MAAM,MAAA,EAAQ,MAAM,QAAA,CAAS,OAAO,CAAA;AAEpC,EAAA,GAAA,CAAI,MAAA,IAAU,KAAA,GAAQ,MAAA,IAAU,KAAA,CAAA,EAAW,OAAO,IAAA;AAElD,EAAA,MAAM,MAAA,EAAQ,0CAAA,KAAgB,CAAA;AAE9B,EAAA,GAAA,CAAI,KAAA,CAAM,MAAA,IAAU,EAAA,EAAI;AACpB,IAAA,MAAM,IAAI,SAAA;AAAA,MACN;AAAA,IACJ,CAAA;AAAA,EACJ;AAEA,EAAA,OAAO,KAAA;AACX;AAGA,SAAS,UAAA,CAAW,KAAA,EAAiC;AACjD,EAAA,GAAA,CAAI,KAAA,CAAM,KAAA,IAAS,QAAA,EAAU,OAAO,KAAA,CAAM,KAAA;AAE1C,EAAA,OAAO,KAAA,CAAM,KAAA,IAAS,QAAA,EAAU,EAAE,KAAA,EAAO,KAAA,CAAM,MAAM,EAAA,EAAI,EAAE,WAAA,EAAa,KAAA,CAAM,MAAM,CAAA;AACxF;AAqBA,MAAA,SAAsB,KAAA,CAClB,MAAA,EACA,KAAA,EACA,QAAA,EACqB;AACrB,EAAA,GAAA,CAAI,CAAC,KAAA,EAAO,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,MAAA,EAAQ,kBAAkB,CAAA;AAE/D,EAAA,MAAM,MAAA,EAAQ,QAAA,CAAS,CAAA;AACvB,EAAA,MAAM,SAAA,EAAW,UAAA,CAAW,KAAK,CAAA;AACjC,EAAA,MAAM,QAAA,EAAU,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,EAAA,GAAS,MAAA,CAAO,MAAA,CAAO,QAAA,EAAU,IAAI,CAAC,CAAA;AAGjE,EAAA,IAAA,CAAA,MAAW,SAAA,GAAY,OAAA,EAAS,QAAA,CAAS,KAAA,CAAM,CAAA,EAAA,GAAM,KAAA,CAAS,CAAA;AAE9D,EAAA,IAAI,KAAA;AACJ,EAAA,IAAI,WAAA;AAEJ,EAAA,IAAA,CAAA,MAAW,CAAC,KAAA,EAAO,IAAI,EAAA,GAAK,OAAA,CAAQ,OAAA,CAAQ,CAAA,EAAG;AAC3C,IAAA,MAAM,SAAA,EAAW,MAAM,IAAA;AAEvB,IAAA,GAAA,CAAI,QAAA,CAAS,MAAA,EAAQ;AACjB,MAAA,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,QAAA,EAAU,KAAA,EAAO,IAAA,EAAM,KAAA,CAAM,KAAK,CAAA,EAAI,SAAS,CAAA;AAAA,IAC3E;AAEA,IAAA,MAAA,IAAU,QAAA;AAGV,IAAA,GAAA,CAAI,QAAA,CAAS,WAAA,EAAa,YAAA,IAAgB,QAAA;AAAA,EAC9C;AAEA,EAAA,GAAA,CAAI,WAAA,EAAa,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,MAAA,EAAQ,aAAA,EAAe,QAAA,EAAU,YAAY,CAAA;AAEvF,EAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,MAAA,EAAQ,WAAA,EAAa,GAAI,MAAA,EAAQ,EAAE,QAAA,EAAU,MAAM,EAAA,EAAI,CAAC,EAAG,CAAA;AACxF;AAGO,SAAS,UAAA,CAAW,OAAA,EAAoD;AAC3E,EAAA,OAAO;AAAA,IACH,MAAA,EAAQ,KAAA;AAAA,IACR,MAAA,EAAQ,OAAA,CAAQ,MAAA;AAAA,IAChB,mBAAI,OAAA,qBAAQ,QAAA,6BAAU,SAAA,EAAS,EAAE,MAAA,EAAQ,OAAA,CAAQ,QAAA,CAAS,MAAA,CAAO,OAAO,EAAA,EAAI,CAAC;AAAA,EACjF,CAAA;AACJ;AAEO,SAAS,QAAA,CAAS,OAAA,EAAgE;AACrF,EAAA,MAAM,EAAE,SAAS,EAAA,EAAI,OAAA;AAErB,EAAA,OAAO;AAAA,IACH,MAAA,EACI,QAAA,CAAS,KAAA,IAAS,SAAA,EAAW,QAAA,CAAS,MAAA,mCAAS,OAAA,qBAAQ,QAAA,qBAAS,MAAA,6BAAQ,QAAA,UAAU,MAAA;AAAA,IACtF,QAAA;AAAA,IACA,IAAA,EAAM,OAAA,CAAQ,IAAA;AAAA,IACd,MAAA,EAAQ,OAAA,CAAQ,QAAA,CAAS,MAAA;AAAA,IACzB,KAAA,EAAO,OAAA,CAAQ,QAAA,CAAS;AAAA,EAC5B,CAAA;AACJ;AAEO,SAAS,QAAA,CAAS,OAAA,EAA4D;AACjF,EAAA,OAAO;AAAA,IACH,MAAA,EAAQ,OAAA,CAAQ,MAAA;AAAA,IAChB,MAAA,EAAQ,aAAA,CAAc,OAAA,CAAQ,MAAM,CAAA;AAAA,IACpC,MAAA,mCAAQ,OAAA,qBAAQ,QAAA,+BAAU,QAAA,UAAU;AAAA,EACxC,CAAA;AACJ;ADxJA;AACA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,yTAAC","file":"/home/runner/work/node-sdk/node-sdk/dist/chunk-SJRQDWTI.cjs","sourcesContent":[null,"import type { AccessAnswer, Customer } from './answer.js';\nimport { type Decision, Mesub } from './client.js';\nimport { type Asked, customerOf } from './customer.js';\n\n/** Why a request was turned away, and what it answers by default. */\nexport type DenialReason = 'unauthenticated' | 'no_access' | 'unavailable';\n\nexport type GuardOutcome =\n    | { allowed: true; customer: Asked; plan: string; decision: Decision }\n    | { allowed: false; reason: DenialReason; decision?: Decision };\n\n/** Who is asking and what Mesub answered, as a guarded route receives it. */\nexport interface MesubAccess {\n    /**\n     * The wallet that pays. Asked by external id or email, the one Mesub\n     * answered with; null when the answer is the outage fallback's and holds none.\n     */\n    wallet: string | null;\n    /** Who Mesub was asked about: a wallet, your own id for them, or their email. */\n    customer: Asked;\n    /** The plan that let the request through: the first of the list that did. */\n    plan: string;\n    /** Mesub's answer for that plan. */\n    answer: AccessAnswer | null;\n    /** The answer came from the outage fallback. */\n    stale: boolean;\n}\n\n/** A refusal, as `onDenied` receives it. */\nexport interface Denial {\n    reason: DenialReason;\n    /** 401, 402 or 503: what would be answered without `onDenied`. */\n    status: number;\n    /** Mesub's answer, for the first plan asked when there are several. */\n    answer: AccessAnswer | null;\n}\n\n/** What a guard answers by default for each refusal. */\nexport const DENIAL_STATUS: Record<DenialReason, number> = {\n    unauthenticated: 401,\n    no_access: 402,\n    unavailable: 503,\n};\n\n/**\n * Seconds a client should wait before asking again when Mesub is unreachable\n * and did not say how long itself.\n */\nexport const UNAVAILABLE_RETRY_AFTER_S = 30;\n\n/**\n * The `Retry-After` of a guard's 503, in seconds: the one Mesub sent with its\n * 429 or 503 when it sent one, `UNAVAILABLE_RETRY_AFTER_S` otherwise (#132).\n */\nexport function retryAfterOf(outcome: Extract<GuardOutcome, { allowed: false }>): string {\n    const asked = outcome.decision?.retryAfter;\n\n    return String(asked === undefined ? UNAVAILABLE_RETRY_AFTER_S : Math.ceil(asked / 1000));\n}\n\nlet shared: Mesub | undefined;\n\n/** The client a middleware uses when given none: built once, from MESUB_API_KEY. */\nexport function defaultClient(): Mesub {\n    shared ??= new Mesub();\n\n    return shared;\n}\n\n/**\n * The plan a guard asks about: one, any one of several (the first that grants\n * lets the request through), or either of those worked out per request.\n */\nexport type PlanOption<Req> =\n    string | readonly string[] | ((request: Req) => string | readonly string[]);\n\n/**\n * The plans a guard asks about for that request, in order, each once. A\n * plan that is not a non-empty string, or no plan at all, is a broken\n * integration: thrown, never read as a refusal.\n */\nexport function plansOf<Req>(plan: PlanOption<Req>, request: Req): string[] {\n    return checkedPlans(typeof plan === 'function' ? plan(request) : plan);\n}\n\n/**\n * Checks a fixed plan when the guard is built, so a typo fails at start-up\n * rather than on the first request. One worked out per request is checked\n * then, by `plansOf`.\n */\nexport function checkPlan<Req>(plan: PlanOption<Req>): void {\n    if (typeof plan !== 'function') checkedPlans(plan);\n}\n\n/**\n * Each plan a guard asks about is one call to `/v1/access`, made for every\n * request, against the key's 1000 calls a minute. Three is what a Dev\n * project can hold; a list longer than that is more likely built from the\n * request than written by hand.\n */\nconst MAX_PLANS = 3;\n\nfunction checkedPlans(value: unknown): string[] {\n    const plans: unknown[] =\n        typeof value === 'string' ? [value] : Array.isArray(value) ? value : [];\n\n    if (plans.length === 0 || !plans.every((plan) => typeof plan === 'string' && plan !== '')) {\n        throw new TypeError('A guard needs a plan, or a list of plans, as non-empty strings.');\n    }\n\n    const unique = [...new Set(plans as string[])];\n\n    if (unique.length > MAX_PLANS) {\n        throw new TypeError(\n            `A guard asks about ${MAX_PLANS} plans at most: each one is a call to Mesub on every request.`,\n        );\n    }\n\n    return unique;\n}\n\n/**\n * Who is asking, from your own auth: `(req) => ({ external_id: req.user.id })`,\n * a wallet, or an email. Null or undefined when nobody is signed in, a 401.\n * May be async.\n *\n * It must come from a session you verified, never from the request itself (a\n * query, a body, a header the caller writes): whoever names a subscriber\n * would get their access.\n */\nexport type CustomerOption<Req> = (\n    request: Req,\n) => Customer | string | null | undefined | Promise<Customer | string | null | undefined>;\n\n/** Checked when the guard is built: without `customer` it could not tell who is asking. */\nexport function checkCustomer<Req>(options: { customer: CustomerOption<Req> }): void {\n    if (typeof options?.customer !== 'function') {\n        throw new TypeError(\n            'A guard needs `customer`: a function of the request returning who is signed in, ' +\n                'e.g. `(req) => ({ external_id: req.user.id })`.',\n        );\n    }\n}\n\n/**\n * Who is asking, as `customer` names them, or null for nobody.\n *\n * A `customer` that returns something Mesub cannot be asked about (two\n * identifiers, an empty one, not a string) is a broken integration: thrown.\n */\nexport async function askerOf<Req>(\n    request: Req,\n    customer: CustomerOption<Req>,\n): Promise<Asked | null> {\n    const named = await customer(request);\n\n    if (named === null || named === undefined) return null;\n\n    const asked = customerOf(named);\n\n    if (asked.value === '') {\n        throw new TypeError(\n            '`customer` returned an empty value: return null when nobody is signed in.',\n        );\n    }\n\n    return asked;\n}\n\n/** The customer as `decide` takes it. */\nfunction asCustomer(asked: Asked): Customer | string {\n    if (asked.kind === 'wallet') return asked.value;\n\n    return asked.kind === 'email' ? { email: asked.value } : { external_id: asked.value };\n}\n\n/**\n * The one decision the middlewares make: who is asking, from `askerOf`, then\n * whether they have access to one of the plans.\n *\n * - nobody is asking (`customer` returned null): `unauthenticated`\n * - the fallback of `hasAccess` otherwise, per plan, through `decide`,\n *   within the client's `guardTimeout`. The plans are asked at once, so\n *   several fit the same budget, and read in order: the first that grants\n *   lets the request through, without waiting for the ones after it.\n *   `unavailable` when none grants and Mesub failed (outage, rate limit) or\n *   the budget ran out on one with nothing cached: 402 only ever means\n *   Mesub said no, for every plan\n *\n * An integration error (a bad API key, an unknown plan) is thrown, unless a\n * plan before it in the list already granted.\n *\n * `plansFor` runs only once somebody is identified: a plan worked out from\n * the request never runs, nor throws, for an anonymous one.\n */\nexport async function guard(\n    client: Mesub,\n    asked: Asked | null,\n    plansFor: () => readonly string[],\n): Promise<GuardOutcome> {\n    if (!asked) return { allowed: false, reason: 'unauthenticated' };\n\n    const plans = plansFor();\n    const customer = asCustomer(asked);\n    const pending = plans.map((plan) => client.decide(customer, plan));\n\n    // The ones not read, once a plan before them grants, must not reject unhandled.\n    for (const decision of pending) decision.catch(() => undefined);\n\n    let first: Decision | undefined;\n    let unavailable: Decision | undefined;\n\n    for (const [index, next] of pending.entries()) {\n        const decision = await next;\n\n        if (decision.access) {\n            return { allowed: true, customer: asked, plan: plans[index]!, decision };\n        }\n\n        first ??= decision;\n        // Mesub failed or did not answer within the budget, and nothing was\n        // cached for that customer and plan: not a no, an outage.\n        if (decision.unavailable) unavailable ??= decision;\n    }\n\n    if (unavailable) return { allowed: false, reason: 'unavailable', decision: unavailable };\n\n    return { allowed: false, reason: 'no_access', ...(first ? { decision: first } : {}) };\n}\n\n/** The body a refusal answers with. `status` only when there is an answer to read it from. */\nexport function denialBody(outcome: Extract<GuardOutcome, { allowed: false }>) {\n    return {\n        access: false,\n        reason: outcome.reason,\n        ...(outcome.decision?.answer ? { status: outcome.decision.answer.status } : {}),\n    };\n}\n\nexport function accessOf(outcome: Extract<GuardOutcome, { allowed: true }>): MesubAccess {\n    const { customer } = outcome;\n\n    return {\n        wallet:\n            customer.kind === 'wallet' ? customer.value : (outcome.decision.answer?.wallet ?? null),\n        customer,\n        plan: outcome.plan,\n        answer: outcome.decision.answer,\n        stale: outcome.decision.stale,\n    };\n}\n\nexport function denialOf(outcome: Extract<GuardOutcome, { allowed: false }>): Denial {\n    return {\n        reason: outcome.reason,\n        status: DENIAL_STATUS[outcome.reason],\n        answer: outcome.decision?.answer ?? null,\n    };\n}\n"]}

package/dist/{client-Dm1jamju.d.cts → client-BEuDegEY.d.cts}

@@ -1,4 +1,4 @@
-import { j as ServerSubscription, B as BlockedReason, T as Transport, R as RequestOptions, w as Subscriptions, A as AccessAnswer, a as AccessList, C as Customer, b as AccessOptions } from './subscriptions-D1hE7MUc.cjs';
+import { j as ServerSubscription, B as BlockedReason, T as Transport, R as RequestOptions, w as Subscriptions, A as AccessAnswer, a as AccessList, C as Customer, b as AccessOptions } from './subscriptions-B6Lin6i_.cjs';
 
 /** One cached answer, with the two moments that decide what it is still good for. */
 interface CacheEntry<T> {
@@ -198,6 +198,12 @@ interface FirstPayment {
     mint: string | null;
     /** The transaction that paid it. */
     signature: string | null;
+    /**
+     * What the receiver's account got of it: `amount` less the fee a
+     * Token-2022 mint withholds. Null when not known, absent from a Mesub that
+     * predates it.
+     */
+    amount_received?: string | null;
 }
 /**
  * `subscription.ended`: `changed_at` only on a cancellation that reached its

package/dist/{client-BQuRYSdB.d.ts → client-CXQLkSAJ.d.ts}

@@ -1,4 +1,4 @@
-import { j as ServerSubscription, B as BlockedReason, T as Transport, R as RequestOptions, w as Subscriptions, A as AccessAnswer, a as AccessList, C as Customer, b as AccessOptions } from './subscriptions-D1hE7MUc.js';
+import { j as ServerSubscription, B as BlockedReason, T as Transport, R as RequestOptions, w as Subscriptions, A as AccessAnswer, a as AccessList, C as Customer, b as AccessOptions } from './subscriptions-B6Lin6i_.js';
 
 /** One cached answer, with the two moments that decide what it is still good for. */
 interface CacheEntry<T> {
@@ -198,6 +198,12 @@ interface FirstPayment {
     mint: string | null;
     /** The transaction that paid it. */
     signature: string | null;
+    /**
+     * What the receiver's account got of it: `amount` less the fee a
+     * Token-2022 mint withholds. Null when not known, absent from a Mesub that
+     * predates it.
+     */
+    amount_received?: string | null;
 }
 /**
  * `subscription.ended`: `changed_at` only on a cancellation that reached its

package/dist/{errors-DqW3DMBS.d.ts → errors-BN4ZWUfM.d.ts}

@@ -1,4 +1,4 @@
-import { j as ServerSubscription } from './subscriptions-D1hE7MUc.js';
+import { j as ServerSubscription } from './subscriptions-B6Lin6i_.js';
 
 /**
  * Stable codes to branch on, one per kind of failure; `apiCode` tells the

package/dist/{errors-CtPucyOh.d.cts → errors-DcLfunS-.d.cts}

@@ -1,4 +1,4 @@
-import { j as ServerSubscription } from './subscriptions-D1hE7MUc.cjs';
+import { j as ServerSubscription } from './subscriptions-B6Lin6i_.cjs';
 
 /**
  * Stable codes to branch on, one per kind of failure; `apiCode` tells the

package/dist/express.cjs

@@ -3,7 +3,7 @@
 
 
 
-var _chunkPCDZI7B4cjs = require('./chunk-PCDZI7B4.cjs');
+var _chunk66VVEXMUcjs = require('./chunk-66VVEXMU.cjs');
 
 
 
@@ -15,16 +15,16 @@ var _chunkPCDZI7B4cjs = require('./chunk-PCDZI7B4.cjs');
 
 
 
-var _chunkVMKI4VVAcjs = require('./chunk-VMKI4VVA.cjs');
+var _chunkSJRQDWTIcjs = require('./chunk-SJRQDWTI.cjs');
 
 
-var _chunkSGSYQJYTcjs = require('./chunk-SGSYQJYT.cjs');
+var _chunk4JSJOX35cjs = require('./chunk-4JSJOX35.cjs');
 
 // src/express.ts
 function forNext(error) {
-  if (!(error instanceof _chunkSGSYQJYTcjs.MesubError) || error.status === null) return error;
+  if (!(error instanceof _chunk4JSJOX35cjs.MesubError) || error.status === null) return error;
   if (error.status < 400 || error.status >= 500) return error;
-  return new (0, _chunkSGSYQJYTcjs.MesubError)(error.message, {
+  return new (0, _chunk4JSJOX35cjs.MesubError)(error.message, {
     status: 500,
     code: error.code,
     apiCode: error.apiCode,
@@ -36,30 +36,30 @@ function forNext(error) {
   });
 }
 function requirePlan(plan, options) {
-  _chunkVMKI4VVAcjs.checkPlan.call(void 0, plan);
-  _chunkVMKI4VVAcjs.checkCustomer.call(void 0, options);
+  _chunkSJRQDWTIcjs.checkPlan.call(void 0, plan);
+  _chunkSJRQDWTIcjs.checkCustomer.call(void 0, options);
   return async (req, res, next) => {
     try {
-      const client = _nullishCoalesce(options.client, () => ( _chunkVMKI4VVAcjs.defaultClient.call(void 0, )));
-      const outcome = await _chunkVMKI4VVAcjs.guard.call(void 0, 
+      const client = _nullishCoalesce(options.client, () => ( _chunkSJRQDWTIcjs.defaultClient.call(void 0, )));
+      const outcome = await _chunkSJRQDWTIcjs.guard.call(void 0, 
         client,
-        await _chunkVMKI4VVAcjs.askerOf.call(void 0, req, options.customer),
-        () => _chunkVMKI4VVAcjs.plansOf.call(void 0, plan, req)
+        await _chunkSJRQDWTIcjs.askerOf.call(void 0, req, options.customer),
+        () => _chunkSJRQDWTIcjs.plansOf.call(void 0, plan, req)
       );
       if (outcome.allowed) {
-        const locals = _chunkVMKI4VVAcjs.accessOf.call(void 0, outcome);
+        const locals = _chunkSJRQDWTIcjs.accessOf.call(void 0, outcome);
         res.locals["mesub"] = locals;
         return next();
       }
-      const denial = _chunkVMKI4VVAcjs.denialOf.call(void 0, outcome);
+      const denial = _chunkSJRQDWTIcjs.denialOf.call(void 0, outcome);
       if (options.onDenied) {
         await options.onDenied(denial, req, res, next);
         return;
       }
       if (outcome.reason === "unavailable") {
-        res.setHeader("Retry-After", _chunkVMKI4VVAcjs.retryAfterOf.call(void 0, outcome));
+        res.setHeader("Retry-After", _chunkSJRQDWTIcjs.retryAfterOf.call(void 0, outcome));
       }
-      res.status(denial.status).json(_chunkVMKI4VVAcjs.denialBody.call(void 0, outcome));
+      res.status(denial.status).json(_chunkSJRQDWTIcjs.denialBody.call(void 0, outcome));
     } catch (error) {
       next(forNext(error));
     }
@@ -74,14 +74,14 @@ async function jsonBody(req) {
   for await (const chunk of req) {
     const bytes = Buffer.isBuffer(chunk) ? chunk : Buffer.from(String(chunk));
     size += bytes.length;
-    if (size > _chunkPCDZI7B4cjs.MAX_BODY_BYTES) throw new RangeError("The body is too large.");
+    if (size > _chunk66VVEXMUcjs.MAX_BODY_BYTES) throw new RangeError("The body is too large.");
     chunks.push(bytes);
   }
   if (size === 0) return void 0;
   return JSON.parse(Buffer.concat(chunks).toString("utf8"));
 }
 function mesubRoutes(options) {
-  _chunkPCDZI7B4cjs.checkWidgetOptions.call(void 0, options);
+  _chunk66VVEXMUcjs.checkWidgetOptions.call(void 0, options);
   return async (req, res, next) => {
     try {
       let body;
@@ -98,10 +98,10 @@ function mesubRoutes(options) {
         return;
       }
       const publicRead = req.method === "GET" && req.path.startsWith("/plans/");
-      const asked = publicRead ? null : await _chunkPCDZI7B4cjs.widgetCustomer.call(void 0, req, options.customer);
+      const asked = publicRead ? null : await _chunk66VVEXMUcjs.widgetCustomer.call(void 0, req, options.customer);
       const email = asked && options.email ? await options.email(req) : void 0;
-      const answer = await _chunkPCDZI7B4cjs.handleWidget.call(void 0, 
-        _nullishCoalesce(options.client, () => ( _chunkVMKI4VVAcjs.defaultClient.call(void 0, ))),
+      const answer = await _chunk66VVEXMUcjs.handleWidget.call(void 0, 
+        _nullishCoalesce(options.client, () => ( _chunkSJRQDWTIcjs.defaultClient.call(void 0, ))),
         {
           method: req.method,
           path: req.path,
@@ -125,5 +125,5 @@ function mesubRoutes(options) {
 
 
 
-exports.MesubError = _chunkSGSYQJYTcjs.MesubError; exports.mesubRoutes = mesubRoutes; exports.requirePlan = requirePlan;
+exports.MesubError = _chunk4JSJOX35cjs.MesubError; exports.mesubRoutes = mesubRoutes; exports.requirePlan = requirePlan;
 //# sourceMappingURL=express.cjs.map

package/dist/express.d.cts

@@ -1,11 +1,11 @@
 import { Request, Response, NextFunction, RequestHandler } from 'express';
-import { M as Mesub } from './client-Dm1jamju.cjs';
-import { M as MesubAccess, C as CustomerOption, D as Denial, P as PlanOption } from './guard-Dhy4fI6n.cjs';
-export { A as Asked, a as DenialReason } from './guard-Dhy4fI6n.cjs';
-import { W as WidgetRoutesOptions } from './routes-DWkRFOP0.cjs';
-export { a as WidgetPayment, b as WidgetSubscriptionDetail, c as WidgetSubscriptionList } from './routes-DWkRFOP0.cjs';
-export { M as MesubError } from './errors-CtPucyOh.cjs';
-export { C as Customer } from './subscriptions-D1hE7MUc.cjs';
+import { M as Mesub } from './client-BEuDegEY.cjs';
+import { M as MesubAccess, C as CustomerOption, D as Denial, P as PlanOption } from './guard-D4AB5HtN.cjs';
+export { A as Asked, a as DenialReason } from './guard-D4AB5HtN.cjs';
+import { W as WidgetRoutesOptions } from './routes-CMzB52P6.cjs';
+export { a as WidgetPayment, b as WidgetSubscriptionDetail, c as WidgetSubscriptionList } from './routes-CMzB52P6.cjs';
+export { M as MesubError } from './errors-DcLfunS-.cjs';
+export { C as Customer } from './subscriptions-B6Lin6i_.cjs';
 
 /** `@mesub/node/express`: `requirePlan()`. */
 

package/dist/express.d.ts

@@ -1,11 +1,11 @@
 import { Request, Response, NextFunction, RequestHandler } from 'express';
-import { M as Mesub } from './client-BQuRYSdB.js';
-import { M as MesubAccess, C as CustomerOption, D as Denial, P as PlanOption } from './guard-DKb6iU1z.js';
-export { A as Asked, a as DenialReason } from './guard-DKb6iU1z.js';
-import { W as WidgetRoutesOptions } from './routes-CLtZnUzl.js';
-export { a as WidgetPayment, b as WidgetSubscriptionDetail, c as WidgetSubscriptionList } from './routes-CLtZnUzl.js';
-export { M as MesubError } from './errors-DqW3DMBS.js';
-export { C as Customer } from './subscriptions-D1hE7MUc.js';
+import { M as Mesub } from './client-CXQLkSAJ.js';
+import { M as MesubAccess, C as CustomerOption, D as Denial, P as PlanOption } from './guard-CaXiHMVF.js';
+export { A as Asked, a as DenialReason } from './guard-CaXiHMVF.js';
+import { W as WidgetRoutesOptions } from './routes-B7wN4sby.js';
+export { a as WidgetPayment, b as WidgetSubscriptionDetail, c as WidgetSubscriptionList } from './routes-B7wN4sby.js';
+export { M as MesubError } from './errors-BN4ZWUfM.js';
+export { C as Customer } from './subscriptions-B6Lin6i_.js';
 
 /** `@mesub/node/express`: `requirePlan()`. */
 

package/dist/express.js

@@ -3,7 +3,7 @@ import {
   checkWidgetOptions,
   handleWidget,
   widgetCustomer
-} from "./chunk-ELK7IBLO.js";
+} from "./chunk-J2CE4QWV.js";
 import {
   accessOf,
   askerOf,
@@ -15,10 +15,10 @@ import {
   guard,
   plansOf,
   retryAfterOf
-} from "./chunk-XDLLXY7Y.js";
+} from "./chunk-4AAPR37Y.js";
 import {
   MesubError
-} from "./chunk-KMPBFNJE.js";
+} from "./chunk-NOS4FWWQ.js";
 
 // src/express.ts
 function forNext(error) {

package/dist/{guard-DKb6iU1z.d.ts → guard-CaXiHMVF.d.ts}

@@ -1,4 +1,4 @@
-import { C as Customer, A as AccessAnswer } from './subscriptions-D1hE7MUc.js';
+import { C as Customer, A as AccessAnswer } from './subscriptions-B6Lin6i_.js';
 
 /** Who a call is about, normalised as Mesub reads it. */
 interface Asked {

package/dist/{guard-Dhy4fI6n.d.cts → guard-D4AB5HtN.d.cts}

@@ -1,4 +1,4 @@
-import { C as Customer, A as AccessAnswer } from './subscriptions-D1hE7MUc.cjs';
+import { C as Customer, A as AccessAnswer } from './subscriptions-B6Lin6i_.cjs';
 
 /** Who a call is about, normalised as Mesub reads it. */
 interface Asked {

package/dist/index.cjs

@@ -10,7 +10,7 @@
 
 
 
-var _chunkSGSYQJYTcjs = require('./chunk-SGSYQJYT.cjs');
+var _chunk4JSJOX35cjs = require('./chunk-4JSJOX35.cjs');
 
 
 
@@ -35,5 +35,5 @@ var _chunk43Q4PNF7cjs = require('./chunk-43Q4PNF7.cjs');
 
 
 
-exports.ACCESS_LINE = _chunk43Q4PNF7cjs.ACCESS_LINE; exports.API_VERSION = _chunkSGSYQJYTcjs.API_VERSION; exports.API_VERSION_HEADER = _chunkSGSYQJYTcjs.API_VERSION_HEADER; exports.AccessCache = _chunkSGSYQJYTcjs.AccessCache; exports.CONFIRMATIONS = _chunk43Q4PNF7cjs.CONFIRMATIONS; exports.DEFAULT_MAX_ENTRIES = _chunkSGSYQJYTcjs.DEFAULT_MAX_ENTRIES; exports.DEFAULT_MAX_STALE_MS = _chunkSGSYQJYTcjs.DEFAULT_MAX_STALE_MS; exports.MemoryStore = _chunkSGSYQJYTcjs.MemoryStore; exports.Mesub = _chunkSGSYQJYTcjs.Mesub; exports.MesubError = _chunkSGSYQJYTcjs.MesubError; exports.MesubSubmitError = _chunkSGSYQJYTcjs.MesubSubmitError; exports.SITUATIONS = _chunk43Q4PNF7cjs.SITUATIONS; exports.VERSION = _chunkSGSYQJYTcjs.VERSION; exports.explain = _chunk43Q4PNF7cjs.explain; exports.situationOf = _chunk43Q4PNF7cjs.situationOf; exports.verifyWebhook = _chunkSGSYQJYTcjs.verifyWebhook;
+exports.ACCESS_LINE = _chunk43Q4PNF7cjs.ACCESS_LINE; exports.API_VERSION = _chunk4JSJOX35cjs.API_VERSION; exports.API_VERSION_HEADER = _chunk4JSJOX35cjs.API_VERSION_HEADER; exports.AccessCache = _chunk4JSJOX35cjs.AccessCache; exports.CONFIRMATIONS = _chunk43Q4PNF7cjs.CONFIRMATIONS; exports.DEFAULT_MAX_ENTRIES = _chunk4JSJOX35cjs.DEFAULT_MAX_ENTRIES; exports.DEFAULT_MAX_STALE_MS = _chunk4JSJOX35cjs.DEFAULT_MAX_STALE_MS; exports.MemoryStore = _chunk4JSJOX35cjs.MemoryStore; exports.Mesub = _chunk4JSJOX35cjs.Mesub; exports.MesubError = _chunk4JSJOX35cjs.MesubError; exports.MesubSubmitError = _chunk4JSJOX35cjs.MesubSubmitError; exports.SITUATIONS = _chunk43Q4PNF7cjs.SITUATIONS; exports.VERSION = _chunk4JSJOX35cjs.VERSION; exports.explain = _chunk43Q4PNF7cjs.explain; exports.situationOf = _chunk43Q4PNF7cjs.situationOf; exports.verifyWebhook = _chunk4JSJOX35cjs.verifyWebhook;
 //# sourceMappingURL=index.cjs.map

package/dist/index.d.cts

@@ -1,11 +1,11 @@
-import { C as CacheStore, a as CacheEntry } from './client-Dm1jamju.cjs';
-export { A as AccessCache, b as AccessCacheOptions, c as AccessChangedDetail, d as CachedAnswer, e as CreatedDetail, D as DEFAULT_MAX_STALE_MS, f as Decision, E as EndedDetail, g as EventList, h as EventListParams, i as EventNetwork, j as EventType, k as Events, F as FirstPayment, H as HeaderSource, M as Mesub, l as MesubEvent, m as MesubOptions, N as NoDetail, P as PaymentFailedDetail, n as Plan, o as PlanStatus, p as PlanToken, q as Plans, R as RenewalIssue, r as RenewalUpcomingDetail, s as RenewedDetail, t as Revalidating, S as StoppedDetail, u as SubscriptionAccessGrantedEvent, v as SubscriptionAccessRevokedEvent, w as SubscriptionCancelledEvent, x as SubscriptionCreatedEvent, y as SubscriptionEndedEvent, z as SubscriptionExpiredEvent, B as SubscriptionPausedEvent, G as SubscriptionPaymentFailedEvent, I as SubscriptionRenewalUpcomingEvent, J as SubscriptionRenewedEvent, K as SubscriptionResumedEvent, L as SubscriptionStoppedEvent, O as SubscriptionUnpausedEvent, T as TestEvent, V as VerifyWebhookOptions, W as WebhookBody, Q as WebhookEvent, U as WebhookEventType, X as Webhooks, Y as verifyWebhook } from './client-Dm1jamju.cjs';
-export { M as MesubError, a as MesubErrorCode, b as MesubErrorOptions, c as MesubSubmitError, d as MesubSubmitErrorOptions } from './errors-CtPucyOh.cjs';
-export { A as AccessAnswer, a as AccessList, b as AccessOptions, c as AttemptsParams, B as BlockedReason, d as ConfirmOptions, e as ConfirmParams, f as ConfirmReasonCode, g as ConfirmResult, C as Customer, E as EndReason, L as LateReason, h as ListParams, P as PaymentStatus, i as PullOutcome, R as RequestOptions, S as ServedAttempt, j as ServerSubscription, k as ServerSubscriptionList, l as ServerSubscriptionStatus, m as StopReason, n as SubmitOptions, o as SubmitParams, p as SubmitResult, q as SubscribeCosts, r as SubscribeParams, s as SubscribeTransaction, t as SubscriptionAttempt, u as SubscriptionAttemptList, v as SubscriptionStatus, w as Subscriptions, W as WalletTransaction } from './subscriptions-D1hE7MUc.cjs';
+import { C as CacheStore, a as CacheEntry } from './client-BEuDegEY.cjs';
+export { A as AccessCache, b as AccessCacheOptions, c as AccessChangedDetail, d as CachedAnswer, e as CreatedDetail, D as DEFAULT_MAX_STALE_MS, f as Decision, E as EndedDetail, g as EventList, h as EventListParams, i as EventNetwork, j as EventType, k as Events, F as FirstPayment, H as HeaderSource, M as Mesub, l as MesubEvent, m as MesubOptions, N as NoDetail, P as PaymentFailedDetail, n as Plan, o as PlanStatus, p as PlanToken, q as Plans, R as RenewalIssue, r as RenewalUpcomingDetail, s as RenewedDetail, t as Revalidating, S as StoppedDetail, u as SubscriptionAccessGrantedEvent, v as SubscriptionAccessRevokedEvent, w as SubscriptionCancelledEvent, x as SubscriptionCreatedEvent, y as SubscriptionEndedEvent, z as SubscriptionExpiredEvent, B as SubscriptionPausedEvent, G as SubscriptionPaymentFailedEvent, I as SubscriptionRenewalUpcomingEvent, J as SubscriptionRenewedEvent, K as SubscriptionResumedEvent, L as SubscriptionStoppedEvent, O as SubscriptionUnpausedEvent, T as TestEvent, V as VerifyWebhookOptions, W as WebhookBody, Q as WebhookEvent, U as WebhookEventType, X as Webhooks, Y as verifyWebhook } from './client-BEuDegEY.cjs';
+export { M as MesubError, a as MesubErrorCode, b as MesubErrorOptions, c as MesubSubmitError, d as MesubSubmitErrorOptions } from './errors-DcLfunS-.cjs';
+export { A as AccessAnswer, a as AccessList, b as AccessOptions, c as AttemptsParams, B as BlockedReason, d as ConfirmOptions, e as ConfirmParams, f as ConfirmReasonCode, g as ConfirmResult, C as Customer, E as EndReason, L as LateReason, h as ListParams, P as PaymentStatus, i as PullOutcome, R as RequestOptions, S as ServedAttempt, j as ServerSubscription, k as ServerSubscriptionList, l as ServerSubscriptionStatus, m as StopReason, n as SubmitOptions, o as SubmitParams, p as SubmitResult, q as SubscribeCosts, r as SubscribeParams, s as SubscribeTransaction, t as SubscriptionAttempt, u as SubscriptionAttemptList, v as SubscriptionStatus, w as Subscriptions, W as WalletTransaction } from './subscriptions-B6Lin6i_.cjs';
 export { ACCESS_LINE, CONFIRMATIONS, ConfirmationKey, ExplainOptions, Explainable, ExplainedAction, Explanation, SITUATIONS, Situation, SituationActionId, SituationActionTemplate, SituationActor, SituationKey, SituationText, explain, situationOf } from './situations.cjs';
 
 /** Kept in step with package.json by `test/version.spec.ts`. */
-declare const VERSION = "0.1.0";
+declare const VERSION = "0.1.2";
 /**
  * The version of the Mesub API this release was written against, sent in
  * the `Mesub-Version` header of every call, so the API can change its

package/dist/index.d.ts

@@ -1,11 +1,11 @@
-import { C as CacheStore, a as CacheEntry } from './client-BQuRYSdB.js';
-export { A as AccessCache, b as AccessCacheOptions, c as AccessChangedDetail, d as CachedAnswer, e as CreatedDetail, D as DEFAULT_MAX_STALE_MS, f as Decision, E as EndedDetail, g as EventList, h as EventListParams, i as EventNetwork, j as EventType, k as Events, F as FirstPayment, H as HeaderSource, M as Mesub, l as MesubEvent, m as MesubOptions, N as NoDetail, P as PaymentFailedDetail, n as Plan, o as PlanStatus, p as PlanToken, q as Plans, R as RenewalIssue, r as RenewalUpcomingDetail, s as RenewedDetail, t as Revalidating, S as StoppedDetail, u as SubscriptionAccessGrantedEvent, v as SubscriptionAccessRevokedEvent, w as SubscriptionCancelledEvent, x as SubscriptionCreatedEvent, y as SubscriptionEndedEvent, z as SubscriptionExpiredEvent, B as SubscriptionPausedEvent, G as SubscriptionPaymentFailedEvent, I as SubscriptionRenewalUpcomingEvent, J as SubscriptionRenewedEvent, K as SubscriptionResumedEvent, L as SubscriptionStoppedEvent, O as SubscriptionUnpausedEvent, T as TestEvent, V as VerifyWebhookOptions, W as WebhookBody, Q as WebhookEvent, U as WebhookEventType, X as Webhooks, Y as verifyWebhook } from './client-BQuRYSdB.js';
-export { M as MesubError, a as MesubErrorCode, b as MesubErrorOptions, c as MesubSubmitError, d as MesubSubmitErrorOptions } from './errors-DqW3DMBS.js';
-export { A as AccessAnswer, a as AccessList, b as AccessOptions, c as AttemptsParams, B as BlockedReason, d as ConfirmOptions, e as ConfirmParams, f as ConfirmReasonCode, g as ConfirmResult, C as Customer, E as EndReason, L as LateReason, h as ListParams, P as PaymentStatus, i as PullOutcome, R as RequestOptions, S as ServedAttempt, j as ServerSubscription, k as ServerSubscriptionList, l as ServerSubscriptionStatus, m as StopReason, n as SubmitOptions, o as SubmitParams, p as SubmitResult, q as SubscribeCosts, r as SubscribeParams, s as SubscribeTransaction, t as SubscriptionAttempt, u as SubscriptionAttemptList, v as SubscriptionStatus, w as Subscriptions, W as WalletTransaction } from './subscriptions-D1hE7MUc.js';
+import { C as CacheStore, a as CacheEntry } from './client-CXQLkSAJ.js';
+export { A as AccessCache, b as AccessCacheOptions, c as AccessChangedDetail, d as CachedAnswer, e as CreatedDetail, D as DEFAULT_MAX_STALE_MS, f as Decision, E as EndedDetail, g as EventList, h as EventListParams, i as EventNetwork, j as EventType, k as Events, F as FirstPayment, H as HeaderSource, M as Mesub, l as MesubEvent, m as MesubOptions, N as NoDetail, P as PaymentFailedDetail, n as Plan, o as PlanStatus, p as PlanToken, q as Plans, R as RenewalIssue, r as RenewalUpcomingDetail, s as RenewedDetail, t as Revalidating, S as StoppedDetail, u as SubscriptionAccessGrantedEvent, v as SubscriptionAccessRevokedEvent, w as SubscriptionCancelledEvent, x as SubscriptionCreatedEvent, y as SubscriptionEndedEvent, z as SubscriptionExpiredEvent, B as SubscriptionPausedEvent, G as SubscriptionPaymentFailedEvent, I as SubscriptionRenewalUpcomingEvent, J as SubscriptionRenewedEvent, K as SubscriptionResumedEvent, L as SubscriptionStoppedEvent, O as SubscriptionUnpausedEvent, T as TestEvent, V as VerifyWebhookOptions, W as WebhookBody, Q as WebhookEvent, U as WebhookEventType, X as Webhooks, Y as verifyWebhook } from './client-CXQLkSAJ.js';
+export { M as MesubError, a as MesubErrorCode, b as MesubErrorOptions, c as MesubSubmitError, d as MesubSubmitErrorOptions } from './errors-BN4ZWUfM.js';
+export { A as AccessAnswer, a as AccessList, b as AccessOptions, c as AttemptsParams, B as BlockedReason, d as ConfirmOptions, e as ConfirmParams, f as ConfirmReasonCode, g as ConfirmResult, C as Customer, E as EndReason, L as LateReason, h as ListParams, P as PaymentStatus, i as PullOutcome, R as RequestOptions, S as ServedAttempt, j as ServerSubscription, k as ServerSubscriptionList, l as ServerSubscriptionStatus, m as StopReason, n as SubmitOptions, o as SubmitParams, p as SubmitResult, q as SubscribeCosts, r as SubscribeParams, s as SubscribeTransaction, t as SubscriptionAttempt, u as SubscriptionAttemptList, v as SubscriptionStatus, w as Subscriptions, W as WalletTransaction } from './subscriptions-B6Lin6i_.js';
 export { ACCESS_LINE, CONFIRMATIONS, ConfirmationKey, ExplainOptions, Explainable, ExplainedAction, Explanation, SITUATIONS, Situation, SituationActionId, SituationActionTemplate, SituationActor, SituationKey, SituationText, explain, situationOf } from './situations.js';
 
 /** Kept in step with package.json by `test/version.spec.ts`. */
-declare const VERSION = "0.1.0";
+declare const VERSION = "0.1.2";
 /**
  * The version of the Mesub API this release was written against, sent in
  * the `Mesub-Version` header of every call, so the API can change its

package/dist/index.js

@@ -10,7 +10,7 @@ import {
   MesubSubmitError,
   VERSION,
   verifyWebhook
-} from "./chunk-KMPBFNJE.js";
+} from "./chunk-NOS4FWWQ.js";
 import {
   ACCESS_LINE,
   CONFIRMATIONS,

package/dist/nest.cjs

@@ -9,10 +9,10 @@
 
 
 
-var _chunkVMKI4VVAcjs = require('./chunk-VMKI4VVA.cjs');
+var _chunkSJRQDWTIcjs = require('./chunk-SJRQDWTI.cjs');
 
 
-var _chunkSGSYQJYTcjs = require('./chunk-SGSYQJYT.cjs');
+var _chunk4JSJOX35cjs = require('./chunk-4JSJOX35.cjs');
 
 // src/nest.ts
 
@@ -25,28 +25,28 @@ function setHeader(response, name, value) {
   else if (typeof response.header === "function") response.header(name, value);
 }
 function RequirePlan(plan, options) {
-  _chunkVMKI4VVAcjs.checkPlan.call(void 0, plan);
-  _chunkVMKI4VVAcjs.checkCustomer.call(void 0, options);
+  _chunkSJRQDWTIcjs.checkPlan.call(void 0, plan);
+  _chunkSJRQDWTIcjs.checkCustomer.call(void 0, options);
   class MesubPlanGuard {
     async canActivate(context) {
       const http = context.switchToHttp();
       const request = http.getRequest();
-      const client = _nullishCoalesce(options.client, () => ( _chunkVMKI4VVAcjs.defaultClient.call(void 0, )));
-      const outcome = await _chunkVMKI4VVAcjs.guard.call(void 0, 
+      const client = _nullishCoalesce(options.client, () => ( _chunkSJRQDWTIcjs.defaultClient.call(void 0, )));
+      const outcome = await _chunkSJRQDWTIcjs.guard.call(void 0, 
         client,
-        await _chunkVMKI4VVAcjs.askerOf.call(void 0, request, options.customer),
-        () => _chunkVMKI4VVAcjs.plansOf.call(void 0, plan, request)
+        await _chunkSJRQDWTIcjs.askerOf.call(void 0, request, options.customer),
+        () => _chunkSJRQDWTIcjs.plansOf.call(void 0, plan, request)
       );
       if (outcome.allowed) {
-        request.mesub = _chunkVMKI4VVAcjs.accessOf.call(void 0, outcome);
+        request.mesub = _chunkSJRQDWTIcjs.accessOf.call(void 0, outcome);
         return true;
       }
-      const denial = _chunkVMKI4VVAcjs.denialOf.call(void 0, outcome);
+      const denial = _chunkSJRQDWTIcjs.denialOf.call(void 0, outcome);
       await _optionalChain([options, 'access', _ => _.onDenied, 'optionalCall', _2 => _2(denial, request)]);
       if (outcome.reason === "unavailable") {
-        setHeader(http.getResponse(), "Retry-After", _chunkVMKI4VVAcjs.retryAfterOf.call(void 0, outcome));
+        setHeader(http.getResponse(), "Retry-After", _chunkSJRQDWTIcjs.retryAfterOf.call(void 0, outcome));
       }
-      throw new (0, _common.HttpException)(_chunkVMKI4VVAcjs.denialBody.call(void 0, outcome), denial.status);
+      throw new (0, _common.HttpException)(_chunkSJRQDWTIcjs.denialBody.call(void 0, outcome), denial.status);
     }
   }
   return _common.mixin.call(void 0, MesubPlanGuard);
@@ -58,5 +58,5 @@ var MesubAccess = _common.createParamDecorator.call(void 0,
 
 
 
-exports.MesubAccess = MesubAccess; exports.MesubError = _chunkSGSYQJYTcjs.MesubError; exports.RequirePlan = RequirePlan;
+exports.MesubAccess = MesubAccess; exports.MesubError = _chunk4JSJOX35cjs.MesubError; exports.RequirePlan = RequirePlan;
 //# sourceMappingURL=nest.cjs.map

package/dist/nest.d.cts

@@ -1,9 +1,9 @@
 import { Type, CanActivate } from '@nestjs/common';
-import { H as HeaderSource, M as Mesub } from './client-Dm1jamju.cjs';
-import { M as MesubAccess$1, P as PlanOption, C as CustomerOption, D as Denial } from './guard-Dhy4fI6n.cjs';
-export { A as Asked, a as DenialReason } from './guard-Dhy4fI6n.cjs';
-export { M as MesubError } from './errors-CtPucyOh.cjs';
-export { C as Customer } from './subscriptions-D1hE7MUc.cjs';
+import { H as HeaderSource, M as Mesub } from './client-BEuDegEY.cjs';
+import { M as MesubAccess$1, P as PlanOption, C as CustomerOption, D as Denial } from './guard-D4AB5HtN.cjs';
+export { A as Asked, a as DenialReason } from './guard-D4AB5HtN.cjs';
+export { M as MesubError } from './errors-DcLfunS-.cjs';
+export { C as Customer } from './subscriptions-B6Lin6i_.cjs';
 
 /** `@mesub/node/nest`: `RequirePlan()` and `@MesubAccess()`. */
 

package/dist/nest.d.ts

@@ -1,9 +1,9 @@
 import { Type, CanActivate } from '@nestjs/common';
-import { H as HeaderSource, M as Mesub } from './client-BQuRYSdB.js';
-import { M as MesubAccess$1, P as PlanOption, C as CustomerOption, D as Denial } from './guard-DKb6iU1z.js';
-export { A as Asked, a as DenialReason } from './guard-DKb6iU1z.js';
-export { M as MesubError } from './errors-DqW3DMBS.js';
-export { C as Customer } from './subscriptions-D1hE7MUc.js';
+import { H as HeaderSource, M as Mesub } from './client-CXQLkSAJ.js';
+import { M as MesubAccess$1, P as PlanOption, C as CustomerOption, D as Denial } from './guard-CaXiHMVF.js';
+export { A as Asked, a as DenialReason } from './guard-CaXiHMVF.js';
+export { M as MesubError } from './errors-BN4ZWUfM.js';
+export { C as Customer } from './subscriptions-B6Lin6i_.js';
 
 /** `@mesub/node/nest`: `RequirePlan()` and `@MesubAccess()`. */
 

package/dist/nest.js

@@ -9,10 +9,10 @@ import {
   guard,
   plansOf,
   retryAfterOf
-} from "./chunk-XDLLXY7Y.js";
+} from "./chunk-4AAPR37Y.js";
 import {
   MesubError
-} from "./chunk-KMPBFNJE.js";
+} from "./chunk-NOS4FWWQ.js";
 
 // src/nest.ts
 import {

package/dist/next.cjs

@@ -3,7 +3,7 @@
 
 
 
-var _chunkPCDZI7B4cjs = require('./chunk-PCDZI7B4.cjs');
+var _chunk66VVEXMUcjs = require('./chunk-66VVEXMU.cjs');
 
 
 
@@ -15,27 +15,27 @@ var _chunkPCDZI7B4cjs = require('./chunk-PCDZI7B4.cjs');
 
 
 
-var _chunkVMKI4VVAcjs = require('./chunk-VMKI4VVA.cjs');
+var _chunkSJRQDWTIcjs = require('./chunk-SJRQDWTI.cjs');
 
 
-var _chunkSGSYQJYTcjs = require('./chunk-SGSYQJYT.cjs');
+var _chunk4JSJOX35cjs = require('./chunk-4JSJOX35.cjs');
 
 // src/next.ts
 function withMesub(handler, options) {
-  _chunkVMKI4VVAcjs.checkPlan.call(void 0, options.plan);
-  _chunkVMKI4VVAcjs.checkCustomer.call(void 0, options);
+  _chunkSJRQDWTIcjs.checkPlan.call(void 0, options.plan);
+  _chunkSJRQDWTIcjs.checkCustomer.call(void 0, options);
   return async (request, context) => {
-    const client = _nullishCoalesce(options.client, () => ( _chunkVMKI4VVAcjs.defaultClient.call(void 0, )));
-    const outcome = await _chunkVMKI4VVAcjs.guard.call(void 0, 
+    const client = _nullishCoalesce(options.client, () => ( _chunkSJRQDWTIcjs.defaultClient.call(void 0, )));
+    const outcome = await _chunkSJRQDWTIcjs.guard.call(void 0, 
       client,
-      await _chunkVMKI4VVAcjs.askerOf.call(void 0, request, options.customer),
-      () => _chunkVMKI4VVAcjs.plansOf.call(void 0, options.plan, request)
+      await _chunkSJRQDWTIcjs.askerOf.call(void 0, request, options.customer),
+      () => _chunkSJRQDWTIcjs.plansOf.call(void 0, options.plan, request)
     );
-    if (outcome.allowed) return handler(request, _chunkVMKI4VVAcjs.accessOf.call(void 0, outcome), context);
-    const denial = _chunkVMKI4VVAcjs.denialOf.call(void 0, outcome);
+    if (outcome.allowed) return handler(request, _chunkSJRQDWTIcjs.accessOf.call(void 0, outcome), context);
+    const denial = _chunkSJRQDWTIcjs.denialOf.call(void 0, outcome);
     if (options.onDenied) return await options.onDenied(denial, request);
-    const headers = outcome.reason === "unavailable" ? { "Retry-After": _chunkVMKI4VVAcjs.retryAfterOf.call(void 0, outcome) } : {};
-    return Response.json(_chunkVMKI4VVAcjs.denialBody.call(void 0, outcome), { status: denial.status, headers });
+    const headers = outcome.reason === "unavailable" ? { "Retry-After": _chunkSJRQDWTIcjs.retryAfterOf.call(void 0, outcome) } : {};
+    return Response.json(_chunkSJRQDWTIcjs.denialBody.call(void 0, outcome), { status: denial.status, headers });
   };
 }
 async function pathOf(context) {
@@ -44,7 +44,7 @@ async function pathOf(context) {
   return `/${(_nullishCoalesce(segments, () => ( []))).map((segment) => encodeURIComponent(String(segment))).join("/")}`;
 }
 async function textOf(request) {
-  if (Number(request.headers.get("content-length")) > _chunkPCDZI7B4cjs.MAX_BODY_BYTES) return null;
+  if (Number(request.headers.get("content-length")) > _chunk66VVEXMUcjs.MAX_BODY_BYTES) return null;
   if (request.body === null) return "";
   const reader = request.body.getReader();
   const decoder = new TextDecoder();
@@ -54,7 +54,7 @@ async function textOf(request) {
     const { done, value } = await reader.read();
     if (done) return text + decoder.decode();
     size += value.byteLength;
-    if (size > _chunkPCDZI7B4cjs.MAX_BODY_BYTES) {
+    if (size > _chunk66VVEXMUcjs.MAX_BODY_BYTES) {
       await reader.cancel();
       return null;
     }
@@ -62,7 +62,7 @@ async function textOf(request) {
   }
 }
 function mesubRouteHandlers(options) {
-  _chunkPCDZI7B4cjs.checkWidgetOptions.call(void 0, options);
+  _chunk66VVEXMUcjs.checkWidgetOptions.call(void 0, options);
   const handle = async (request, context) => {
     const path = await pathOf(context);
     let body;
@@ -84,10 +84,10 @@ function mesubRouteHandlers(options) {
       }
     }
     const publicRead = request.method === "GET" && path.startsWith("/plans/");
-    const asked = publicRead ? null : await _chunkPCDZI7B4cjs.widgetCustomer.call(void 0, request, options.customer);
+    const asked = publicRead ? null : await _chunk66VVEXMUcjs.widgetCustomer.call(void 0, request, options.customer);
     const email = asked && options.email ? await options.email(request) : void 0;
-    const answer = await _chunkPCDZI7B4cjs.handleWidget.call(void 0, 
-      _nullishCoalesce(options.client, () => ( _chunkVMKI4VVAcjs.defaultClient.call(void 0, ))),
+    const answer = await _chunk66VVEXMUcjs.handleWidget.call(void 0, 
+      _nullishCoalesce(options.client, () => ( _chunkSJRQDWTIcjs.defaultClient.call(void 0, ))),
       {
         method: request.method,
         path,
@@ -109,5 +109,5 @@ function mesubRouteHandlers(options) {
 
 
 
-exports.MesubError = _chunkSGSYQJYTcjs.MesubError; exports.mesubRouteHandlers = mesubRouteHandlers; exports.withMesub = withMesub;
+exports.MesubError = _chunk4JSJOX35cjs.MesubError; exports.mesubRouteHandlers = mesubRouteHandlers; exports.withMesub = withMesub;
 //# sourceMappingURL=next.cjs.map

package/dist/next.d.cts

@@ -1,10 +1,10 @@
-import { M as Mesub } from './client-Dm1jamju.cjs';
-import { M as MesubAccess, P as PlanOption, C as CustomerOption, D as Denial } from './guard-Dhy4fI6n.cjs';
-export { A as Asked, a as DenialReason } from './guard-Dhy4fI6n.cjs';
-import { W as WidgetRoutesOptions } from './routes-DWkRFOP0.cjs';
-export { a as WidgetPayment, b as WidgetSubscriptionDetail, c as WidgetSubscriptionList } from './routes-DWkRFOP0.cjs';
-export { M as MesubError } from './errors-CtPucyOh.cjs';
-export { C as Customer } from './subscriptions-D1hE7MUc.cjs';
+import { M as Mesub } from './client-BEuDegEY.cjs';
+import { M as MesubAccess, P as PlanOption, C as CustomerOption, D as Denial } from './guard-D4AB5HtN.cjs';
+export { A as Asked, a as DenialReason } from './guard-D4AB5HtN.cjs';
+import { W as WidgetRoutesOptions } from './routes-CMzB52P6.cjs';
+export { a as WidgetPayment, b as WidgetSubscriptionDetail, c as WidgetSubscriptionList } from './routes-CMzB52P6.cjs';
+export { M as MesubError } from './errors-DcLfunS-.cjs';
+export { C as Customer } from './subscriptions-B6Lin6i_.cjs';
 
 /** `@mesub/node/next`: `withMesub()`. Web `Request`/`Response` only, nothing imported from `next`. */