@noodleseed/one 0.52.1 → 0.54.0

package/node_modules/@noodle-borg/service/dist/billing/postgres-subscription-reconciliation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-subscription-reconciliation.d.ts","sourceRoot":"","sources":["../../src/billing/postgres-subscription-reconciliation.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,IAAI,CAAC;AA6B3C,OAAO,EACL,KAAK,wCAAwC,EAC7C,KAAK,uCAAuC,EAC5C,KAAK,sCAAsC,EAM5C,MAAM,kCAAkC,CAAC;AAK1C,MAAM,WAAW,qDAAqD;IACpE,QAAQ,CAAC,0BAA0B,EAAE,MAAM,CAAC;IAC5C,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,MAAM,CAAC;CAC5B;AAED,mFAAmF;AACnF,qBAAa,8CACX,YAAW,sCAAsC;;gBAQrC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,qDAAqD;IAchF,yBAAyB,CAC7B,UAAU,EAAE,wCAAwC,GACnD,OAAO,CAAC,uCAAuC,CAAC;CAiHpD"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-subscription-reconciliation.js

@@ -0,0 +1,123 @@
+import { createHash, randomUUID } from 'node:crypto';
+import { insertAuditEvent } from '@noodle-borg/module-audit';
+import { readBillingMeterTransactionTime } from './postgres-meter-clock.js';
+import { BILLING_METER_EPOCH_LIFECYCLE_LOCK_KEY } from './postgres-meter-epochs.js';
+import { requireActiveBillingAccount, requireEnforcedBillingAccount, requirePaidAuthority, } from './postgres-subscription-reconciliation-authority.js';
+import { compareAndSwapPointers, findOperation, insertOperation, insertPaidSnapshot, insertRevision, readActiveSnapshotForUpdate, readCurrentSubscriptionForUpdate, replayOperation, requireNoLaterSnapshot, validateCurrentSubscription, validateSubscriptionHistory, } from './postgres-subscription-reconciliation-persistence.js';
+import { conflict, keyGeneration, rollbackQuietly, timeout, translateTransactionError, } from './postgres-subscription-reconciliation-support.js';
+import { createPaidEntitlementSnapshot } from './subscription-model.js';
+import { billingSubscriptionReconciliationContractError, billingSubscriptionReconciliationRequestFingerprint, billingSubscriptionReconciliationSuccessAudit, normalizeBillingSubscriptionReconciliationRequest, requireCurrentlyEffectivePaidSubscription, } from './subscription-reconciliation.js';
+const DEFAULT_LOCK_TIMEOUT_MS = 5_000;
+const DEFAULT_STATEMENT_TIMEOUT_MS = 10_000;
+/** Atomic provider-neutral paid history and entitlement-pointer reconciliation. */
+export class PostgresBillingSubscriptionReconciliationStore {
+    #pool;
+    #keyGeneration;
+    #lockTimeoutMs;
+    #statementTimeoutMs;
+    #id;
+    constructor(pool, options) {
+        this.#pool = pool;
+        this.#keyGeneration = keyGeneration(options.authoritativeKeyGeneration);
+        this.#lockTimeoutMs = timeout('billing subscription reconciliation lock timeout', options.lockTimeoutMs ?? DEFAULT_LOCK_TIMEOUT_MS);
+        this.#statementTimeoutMs = timeout('billing subscription reconciliation statement timeout', options.statementTimeoutMs ?? DEFAULT_STATEMENT_TIMEOUT_MS);
+        this.#id = options.id ?? randomUUID;
+    }
+    async reconcilePaidSubscription(rawRequest) {
+        const request = normalizeRequest(rawRequest);
+        const fingerprint = billingSubscriptionReconciliationRequestFingerprint(request);
+        const idempotencyHash = createHash('sha256').update(request.idempotencyKey).digest('hex');
+        const client = await this.#pool.connect();
+        let transactionOpen = false;
+        try {
+            await client.query('BEGIN ISOLATION LEVEL READ COMMITTED');
+            transactionOpen = true;
+            await client.query(`SELECT set_config('lock_timeout', $1, true),
+                set_config('statement_timeout', $2, true)`, [`${this.#lockTimeoutMs}ms`, `${this.#statementTimeoutMs}ms`]);
+            await client.query('SELECT pg_advisory_xact_lock_shared(hashtextextended($1, 0))', [
+                BILLING_METER_EPOCH_LIFECYCLE_LOCK_KEY,
+            ]);
+            await advisoryLock(client, `billing-subscription-reconciliation-key:${idempotencyHash}`);
+            const operation = await findOperation(client, idempotencyHash);
+            if (operation !== undefined) {
+                const replay = replayOperation(operation, fingerprint);
+                await client.query('COMMIT');
+                transactionOpen = false;
+                return replay;
+            }
+            await advisoryLock(client, `billing-subscription-reconciliation-account:${request.billingAccountId}`);
+            await advisoryLock(client, `billing-subscription-reconciliation-subscription:${request.revision.subscriptionId}`);
+            await requirePaidAuthority(client, this.#keyGeneration);
+            await requireActiveBillingAccount(client, request.billingAccountId);
+            await requireEnforcedBillingAccount(client, request.billingAccountId);
+            const previousSnapshot = await readActiveSnapshotForUpdate(client, request.billingAccountId);
+            if (previousSnapshot === undefined ||
+                previousSnapshot.version !== request.expectedActiveSnapshotVersion) {
+                throw conflict('active_snapshot_conflict', 'the active entitlement snapshot changed; retry from the current billing account state');
+            }
+            await requireNoLaterSnapshot(client, request.billingAccountId, previousSnapshot.version);
+            const currentSubscription = await readCurrentSubscriptionForUpdate(client, request.billingAccountId);
+            validateCurrentSubscription(currentSubscription, request.expectedCurrentBaseSubscription, previousSnapshot);
+            await validateSubscriptionHistory(client, request, currentSubscription);
+            const reconciledAt = await readBillingMeterTransactionTime(client);
+            requireCurrentlyEffectivePaidSubscription(request.revision, reconciledAt);
+            const paidSnapshot = createPaidEntitlementSnapshot({
+                id: request.snapshotId,
+                version: previousSnapshot.version + 1,
+                sourceSubscription: request.revision,
+                previousSnapshot,
+            });
+            if (currentSubscription === undefined) {
+                await client.query(`INSERT INTO billing_base_subscriptions (id, billing_account_id, created_at)
+           VALUES ($1, $2, $3)`, [request.revision.subscriptionId, request.billingAccountId, request.revision.createdAt]);
+            }
+            await insertRevision(client, request.revision);
+            await insertPaidSnapshot(client, paidSnapshot);
+            await compareAndSwapPointers(client, request, previousSnapshot.id, currentSubscription);
+            const result = {
+                schemaVersion: 1,
+                billingAccountId: request.billingAccountId,
+                subscriptionId: request.revision.subscriptionId,
+                subscriptionRevisionVersion: request.revision.version,
+                snapshotId: paidSnapshot.id,
+                snapshotVersion: paidSnapshot.version,
+                planVersionId: paidSnapshot.planVersionId,
+                reconciledAt,
+                replayed: false,
+            };
+            await insertOperation(client, {
+                operationId: `bsro_${this.#id()}`,
+                idempotencyHash,
+                fingerprint,
+                result,
+                createdAt: reconciledAt,
+            });
+            await insertAuditEvent(client, billingSubscriptionReconciliationSuccessAudit(result), {
+                now: () => new Date(reconciledAt),
+            });
+            await client.query('COMMIT');
+            transactionOpen = false;
+            return result;
+        }
+        catch (error) {
+            if (transactionOpen)
+                await rollbackQuietly(client);
+            throw translateTransactionError(error);
+        }
+        finally {
+            client.release();
+        }
+    }
+}
+function normalizeRequest(rawRequest) {
+    try {
+        return normalizeBillingSubscriptionReconciliationRequest(rawRequest);
+    }
+    catch {
+        throw billingSubscriptionReconciliationContractError();
+    }
+}
+async function advisoryLock(client, identity) {
+    await client.query('SELECT pg_advisory_xact_lock(hashtextextended($1, 0))', [identity]);
+}
+//# sourceMappingURL=postgres-subscription-reconciliation.js.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-subscription-reconciliation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-subscription-reconciliation.js","sourceRoot":"","sources":["../../src/billing/postgres-subscription-reconciliation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAE7D,OAAO,EAAE,+BAA+B,EAAE,MAAM,2BAA2B,CAAC;AAC5E,OAAO,EAAE,sCAAsC,EAAE,MAAM,4BAA4B,CAAC;AACpF,OAAO,EACL,2BAA2B,EAC3B,6BAA6B,EAC7B,oBAAoB,GACrB,MAAM,qDAAqD,CAAC;AAC7D,OAAO,EACL,sBAAsB,EACtB,aAAa,EACb,eAAe,EACf,kBAAkB,EAClB,cAAc,EACd,2BAA2B,EAC3B,gCAAgC,EAChC,eAAe,EACf,sBAAsB,EACtB,2BAA2B,EAC3B,2BAA2B,GAC5B,MAAM,uDAAuD,CAAC;AAC/D,OAAO,EACL,QAAQ,EACR,aAAa,EACb,eAAe,EACf,OAAO,EACP,yBAAyB,GAC1B,MAAM,mDAAmD,CAAC;AAC3D,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AACxE,OAAO,EAIL,8CAA8C,EAC9C,mDAAmD,EACnD,6CAA6C,EAC7C,iDAAiD,EACjD,yCAAyC,GAC1C,MAAM,kCAAkC,CAAC;AAE1C,MAAM,uBAAuB,GAAG,KAAK,CAAC;AACtC,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAS5C,mFAAmF;AACnF,MAAM,OAAO,8CAA8C;IAGhD,KAAK,CAAO;IACZ,cAAc,CAAS;IACvB,cAAc,CAAS;IACvB,mBAAmB,CAAS;IAC5B,GAAG,CAAe;IAE3B,YAAY,IAAU,EAAE,OAA8D;QACpF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,cAAc,GAAG,aAAa,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QACxE,IAAI,CAAC,cAAc,GAAG,OAAO,CAC3B,kDAAkD,EAClD,OAAO,CAAC,aAAa,IAAI,uBAAuB,CACjD,CAAC;QACF,IAAI,CAAC,mBAAmB,GAAG,OAAO,CAChC,uDAAuD,EACvD,OAAO,CAAC,kBAAkB,IAAI,4BAA4B,CAC3D,CAAC;QACF,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,EAAE,IAAI,UAAU,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,yBAAyB,CAC7B,UAAoD;QAEpD,MAAM,OAAO,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,mDAAmD,CAAC,OAAO,CAAC,CAAC;QACjF,MAAM,eAAe,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC;QAC1C,IAAI,eAAe,GAAG,KAAK,CAAC;QAC5B,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;YAC3D,eAAe,GAAG,IAAI,CAAC;YACvB,MAAM,MAAM,CAAC,KAAK,CAChB;0DACkD,EAClD,CAAC,GAAG,IAAI,CAAC,cAAc,IAAI,EAAE,GAAG,IAAI,CAAC,mBAAmB,IAAI,CAAC,CAC9D,CAAC;YACF,MAAM,MAAM,CAAC,KAAK,CAAC,8DAA8D,EAAE;gBACjF,sCAAsC;aACvC,CAAC,CAAC;YACH,MAAM,YAAY,CAAC,MAAM,EAAE,2CAA2C,eAAe,EAAE,CAAC,CAAC;YAEzF,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;YAC/D,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;gBACvD,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC7B,eAAe,GAAG,KAAK,CAAC;gBACxB,OAAO,MAAM,CAAC;YAChB,CAAC;YAED,MAAM,YAAY,CAChB,MAAM,EACN,+CAA+C,OAAO,CAAC,gBAAgB,EAAE,CAC1E,CAAC;YACF,MAAM,YAAY,CAChB,MAAM,EACN,oDAAoD,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE,CACtF,CAAC;YACF,MAAM,oBAAoB,CAAC,MAAM,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;YACxD,MAAM,2BAA2B,CAAC,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;YACpE,MAAM,6BAA6B,CAAC,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAEtE,MAAM,gBAAgB,GAAG,MAAM,2BAA2B,CAAC,MAAM,EAAE,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAC7F,IACE,gBAAgB,KAAK,SAAS;gBAC9B,gBAAgB,CAAC,OAAO,KAAK,OAAO,CAAC,6BAA6B,EAClE,CAAC;gBACD,MAAM,QAAQ,CACZ,0BAA0B,EAC1B,uFAAuF,CACxF,CAAC;YACJ,CAAC;YACD,MAAM,sBAAsB,CAAC,MAAM,EAAE,OAAO,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,OAAO,CAAC,CAAC;YAEzF,MAAM,mBAAmB,GAAG,MAAM,gCAAgC,CAChE,MAAM,EACN,OAAO,CAAC,gBAAgB,CACzB,CAAC;YACF,2BAA2B,CACzB,mBAAmB,EACnB,OAAO,CAAC,+BAA+B,EACvC,gBAAgB,CACjB,CAAC;YACF,MAAM,2BAA2B,CAAC,MAAM,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC;YACxE,MAAM,YAAY,GAAG,MAAM,+BAA+B,CAAC,MAAM,CAAC,CAAC;YACnE,yCAAyC,CAAC,OAAO,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;YAE1E,MAAM,YAAY,GAAG,6BAA6B,CAAC;gBACjD,EAAE,EAAE,OAAO,CAAC,UAAU;gBACtB,OAAO,EAAE,gBAAgB,CAAC,OAAO,GAAG,CAAC;gBACrC,kBAAkB,EAAE,OAAO,CAAC,QAAQ;gBACpC,gBAAgB;aACjB,CAAC,CAAC;YAEH,IAAI,mBAAmB,KAAK,SAAS,EAAE,CAAC;gBACtC,MAAM,MAAM,CAAC,KAAK,CAChB;+BACqB,EACrB,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC,gBAAgB,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CACxF,CAAC;YACJ,CAAC;YACD,MAAM,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAC/C,MAAM,kBAAkB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;YAC/C,MAAM,sBAAsB,CAAC,MAAM,EAAE,OAAO,EAAE,gBAAgB,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;YAExF,MAAM,MAAM,GAA4C;gBACtD,aAAa,EAAE,CAAC;gBAChB,gBAAgB,EAAE,OAAO,CAAC,gBAAgB;gBAC1C,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,cAAc;gBAC/C,2BAA2B,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO;gBACrD,UAAU,EAAE,YAAY,CAAC,EAAE;gBAC3B,eAAe,EAAE,YAAY,CAAC,OAAO;gBACrC,aAAa,EAAE,YAAY,CAAC,aAAa;gBACzC,YAAY;gBACZ,QAAQ,EAAE,KAAK;aAChB,CAAC;YACF,MAAM,eAAe,CAAC,MAAM,EAAE;gBAC5B,WAAW,EAAE,QAAQ,IAAI,CAAC,GAAG,EAAE,EAAE;gBACjC,eAAe;gBACf,WAAW;gBACX,MAAM;gBACN,SAAS,EAAE,YAAY;aACxB,CAAC,CAAC;YACH,MAAM,gBAAgB,CAAC,MAAM,EAAE,6CAA6C,CAAC,MAAM,CAAC,EAAE;gBACpF,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC;aAClC,CAAC,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YAC7B,eAAe,GAAG,KAAK,CAAC;YACxB,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,eAAe;gBAAE,MAAM,eAAe,CAAC,MAAM,CAAC,CAAC;YACnD,MAAM,yBAAyB,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,CAAC;IACH,CAAC;CACF;AAED,SAAS,gBAAgB,CAAC,UAAoD;IAC5E,IAAI,CAAC;QACH,OAAO,iDAAiD,CAAC,UAAU,CAAC,CAAC;IACvE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,8CAA8C,EAAE,CAAC;IACzD,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,MAAkB,EAAE,QAAgB;IAC9D,MAAM,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;AAC1F,CAAC"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-subscription-schema.d.ts

@@ -0,0 +1,4 @@
+import type { Pool } from 'pg';
+/** Additive, dormant paid-subscription history. This schema never advances an active snapshot. */
+export declare function ensureBillingSubscriptionSchema(pool: Pool): Promise<void>;
+//# sourceMappingURL=postgres-subscription-schema.d.ts.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-subscription-schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-subscription-schema.d.ts","sourceRoot":"","sources":["../../src/billing/postgres-subscription-schema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAc,MAAM,IAAI,CAAC;AAE3C,kGAAkG;AAClG,wBAAsB,+BAA+B,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAmB/E"}

package/node_modules/@noodle-borg/service/dist/billing/postgres-subscription-schema.js

@@ -0,0 +1,419 @@
+/** Additive, dormant paid-subscription history. This schema never advances an active snapshot. */
+export async function ensureBillingSubscriptionSchema(pool) {
+    const client = await pool.connect();
+    try {
+        await client.query('BEGIN');
+        try {
+            // Service replicas may all start against the same database. Serialize this migration so the
+            // catalog checks and trigger installation below cannot race one another.
+            await client.query(`SELECT pg_advisory_xact_lock(hashtext('noodle.billing.subscription-schema.v1'))`);
+            await ensureBillingSubscriptionSchemaTx(client);
+            await client.query('COMMIT');
+        }
+        catch (error) {
+            await client.query('ROLLBACK');
+            throw error;
+        }
+    }
+    finally {
+        client.release();
+    }
+}
+async function ensureBillingSubscriptionSchemaTx(client) {
+    await client.query(`
+    CREATE TABLE IF NOT EXISTS billing_base_subscriptions (
+      id                 text PRIMARY KEY,
+      billing_account_id text NOT NULL REFERENCES billing_accounts(id) ON DELETE RESTRICT,
+      created_at         timestamptz NOT NULL,
+      UNIQUE (billing_account_id, id)
+    )
+  `);
+    await client.query(`
+    CREATE TABLE IF NOT EXISTS billing_base_subscription_revisions (
+      schema_version      integer NOT NULL CHECK (schema_version = 1),
+      subscription_id     text NOT NULL,
+      billing_account_id  text NOT NULL,
+      version             integer NOT NULL CHECK (version > 0),
+      plan_version_id     text NOT NULL
+        CHECK (plan_version_id IN ('pro@1', 'scale@1'))
+        REFERENCES billing_plan_versions(id) ON DELETE RESTRICT,
+      state               text NOT NULL CHECK (state IN ('active', 'payment_grace', 'ended')),
+      billing_interval    text NOT NULL CHECK (billing_interval IN ('month', 'year')),
+      currency            text NOT NULL CHECK (currency = 'usd'),
+      base_amount_minor   bigint NOT NULL
+        CHECK (base_amount_minor >= 0 AND base_amount_minor <= 9007199254740991),
+      CONSTRAINT billing_base_subscription_revisions_price_check CHECK (
+        (plan_version_id = 'pro@1' AND billing_interval = 'month' AND base_amount_minor = 3000) OR
+        (plan_version_id = 'pro@1' AND billing_interval = 'year' AND base_amount_minor = 30000) OR
+        (plan_version_id = 'scale@1' AND billing_interval = 'month' AND base_amount_minor = 30000) OR
+        (plan_version_id = 'scale@1' AND billing_interval = 'year' AND base_amount_minor = 300000)
+      ),
+      current_period_start timestamptz NOT NULL,
+      current_period_end   timestamptz NOT NULL CHECK (current_period_end > current_period_start),
+      effective_from       timestamptz NOT NULL,
+      effective_until      timestamptz NOT NULL CHECK (effective_until > effective_from),
+      renews               boolean NOT NULL,
+      content_checksum     text NOT NULL,
+      verified_at          timestamptz NOT NULL,
+      created_at           timestamptz NOT NULL,
+      PRIMARY KEY (subscription_id, version),
+      UNIQUE (billing_account_id, subscription_id, version),
+      UNIQUE (billing_account_id, subscription_id, version, plan_version_id),
+      CONSTRAINT billing_base_subscription_revisions_snapshot_source_key
+        UNIQUE (
+          billing_account_id,
+          subscription_id,
+          version,
+          plan_version_id,
+          effective_from,
+          effective_until
+        ),
+      FOREIGN KEY (billing_account_id, subscription_id)
+        REFERENCES billing_base_subscriptions(billing_account_id, id) ON DELETE RESTRICT,
+      CHECK (verified_at >= effective_from),
+      CHECK (created_at >= verified_at),
+      CHECK (state <> 'active' OR effective_until = current_period_end),
+      CONSTRAINT billing_base_subscription_revisions_payment_grace_check CHECK (
+        state <> 'payment_grace' OR
+        (
+          effective_until = current_period_end + INTERVAL '168 hours' AND
+          verified_at >= current_period_end
+        )
+      ),
+      CHECK (state <> 'ended' OR (NOT renews AND verified_at >= effective_until))
+    )
+  `);
+    await client.query(`
+    DO $billing_subscription_price_constraint$
+    BEGIN
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_constraint
+        WHERE conname = 'billing_base_subscription_revisions_price_check'
+          AND conrelid = 'billing_base_subscription_revisions'::regclass
+      ) THEN
+        ALTER TABLE billing_base_subscription_revisions
+          ADD CONSTRAINT billing_base_subscription_revisions_price_check CHECK (
+            (plan_version_id = 'pro@1' AND billing_interval = 'month' AND base_amount_minor = 3000) OR
+            (plan_version_id = 'pro@1' AND billing_interval = 'year' AND base_amount_minor = 30000) OR
+            (plan_version_id = 'scale@1' AND billing_interval = 'month' AND base_amount_minor = 30000) OR
+            (plan_version_id = 'scale@1' AND billing_interval = 'year' AND base_amount_minor = 300000)
+          );
+      END IF;
+    END
+    $billing_subscription_price_constraint$
+  `);
+    await client.query(`
+    CREATE TABLE IF NOT EXISTS billing_account_current_base_subscriptions (
+      billing_account_id text PRIMARY KEY REFERENCES billing_accounts(id) ON DELETE RESTRICT,
+      subscription_id    text NOT NULL,
+      revision_version   integer NOT NULL CHECK (revision_version > 0),
+      FOREIGN KEY (billing_account_id, subscription_id, revision_version)
+        REFERENCES billing_base_subscription_revisions
+          (billing_account_id, subscription_id, version)
+        ON DELETE RESTRICT
+    )
+  `);
+    await client.query(`
+    CREATE TABLE IF NOT EXISTS billing_subscription_reconciliation_operations (
+      operation_id         text PRIMARY KEY,
+      schema_version       integer NOT NULL CHECK (schema_version = 1),
+      action               text NOT NULL CHECK (action = 'paid_reconcile'),
+      billing_account_id   text NOT NULL REFERENCES billing_accounts(id) ON DELETE RESTRICT,
+      idempotency_key_hash text NOT NULL UNIQUE
+        CHECK (idempotency_key_hash ~ '^[0-9a-f]{64}$'),
+      request_fingerprint  text NOT NULL
+        CHECK (request_fingerprint ~ '^[0-9a-f]{64}$'),
+      subscription_id      text NOT NULL,
+      revision_version     integer NOT NULL CHECK (revision_version > 0),
+      snapshot_id          text NOT NULL,
+      result               jsonb NOT NULL,
+      created_at           timestamptz NOT NULL,
+      UNIQUE (billing_account_id, subscription_id, revision_version),
+      UNIQUE (billing_account_id, snapshot_id),
+      FOREIGN KEY (billing_account_id, snapshot_id)
+        REFERENCES billing_entitlement_snapshots(billing_account_id, id)
+        ON DELETE RESTRICT
+    )
+  `);
+    await client.query(`
+    ALTER TABLE billing_entitlement_snapshots
+      ADD COLUMN IF NOT EXISTS schema_version integer NOT NULL DEFAULT 1,
+      ADD COLUMN IF NOT EXISTS effective_until timestamptz,
+      ADD COLUMN IF NOT EXISTS source_subscription_id text,
+      ADD COLUMN IF NOT EXISTS source_subscription_version integer
+  `);
+    await client.query(`
+    DO $billing_reconciliation_snapshot_binding$
+    BEGIN
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_constraint
+        WHERE conname = 'billing_entitlement_snapshots_reconciliation_source_key'
+          AND conrelid = 'billing_entitlement_snapshots'::regclass
+      ) THEN
+        ALTER TABLE billing_entitlement_snapshots
+          ADD CONSTRAINT billing_entitlement_snapshots_reconciliation_source_key
+          UNIQUE (
+            billing_account_id,
+            id,
+            source_subscription_id,
+            source_subscription_version
+          );
+      END IF;
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_constraint
+        WHERE conname = 'billing_reconciliation_operation_snapshot_source_fk'
+          AND conrelid = 'billing_subscription_reconciliation_operations'::regclass
+      ) THEN
+        ALTER TABLE billing_subscription_reconciliation_operations
+          ADD CONSTRAINT billing_reconciliation_operation_snapshot_source_fk
+          FOREIGN KEY (
+            billing_account_id,
+            snapshot_id,
+            subscription_id,
+            revision_version
+          ) REFERENCES billing_entitlement_snapshots (
+            billing_account_id,
+            id,
+            source_subscription_id,
+            source_subscription_version
+          ) ON DELETE RESTRICT;
+      END IF;
+    END
+    $billing_reconciliation_snapshot_binding$
+  `);
+    await client.query(`
+    DO $billing_snapshot_anchor_consistency$
+    BEGIN
+      IF EXISTS (
+        SELECT 1
+        FROM billing_entitlement_snapshots
+        GROUP BY billing_account_id
+        HAVING MIN(monthly_usage_anchor) <> MAX(monthly_usage_anchor)
+      ) THEN
+        RAISE EXCEPTION 'persisted billing account has inconsistent monthly usage anchors';
+      END IF;
+    END
+    $billing_snapshot_anchor_consistency$
+  `);
+    await client.query(`
+    CREATE OR REPLACE FUNCTION billing_enforce_entitlement_anchor_stability()
+    RETURNS trigger
+    LANGUAGE plpgsql
+    AS $billing_snapshot_anchor_guard$
+    BEGIN
+      IF TG_OP = 'UPDATE' THEN
+        IF NEW.billing_account_id IS DISTINCT FROM OLD.billing_account_id THEN
+          RAISE EXCEPTION 'billing entitlement snapshot account is immutable'
+            USING ERRCODE = '23514';
+        END IF;
+        IF NEW.monthly_usage_anchor IS DISTINCT FROM OLD.monthly_usage_anchor THEN
+          RAISE EXCEPTION 'billing account monthly usage anchor is immutable'
+            USING ERRCODE = '23514';
+        END IF;
+        RETURN NEW;
+      END IF;
+
+      PERFORM 1 FROM billing_accounts
+      WHERE id = NEW.billing_account_id
+      FOR UPDATE;
+      IF EXISTS (
+        SELECT 1 FROM billing_entitlement_snapshots
+        WHERE billing_account_id = NEW.billing_account_id
+          AND monthly_usage_anchor IS DISTINCT FROM NEW.monthly_usage_anchor
+      ) THEN
+        RAISE EXCEPTION 'billing account monthly usage anchor is immutable'
+          USING ERRCODE = '23514';
+      END IF;
+      RETURN NEW;
+    END
+    $billing_snapshot_anchor_guard$
+  `);
+    await client.query(`
+    DO $billing_snapshot_anchor_trigger$
+    BEGIN
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_trigger
+        WHERE tgname = 'billing_entitlement_snapshots_anchor_stability'
+          AND tgrelid = 'billing_entitlement_snapshots'::regclass
+          AND NOT tgisinternal
+      ) THEN
+        BEGIN
+          CREATE TRIGGER billing_entitlement_snapshots_anchor_stability
+          BEFORE INSERT OR UPDATE ON billing_entitlement_snapshots
+          FOR EACH ROW EXECUTE FUNCTION billing_enforce_entitlement_anchor_stability();
+        EXCEPTION WHEN duplicate_object THEN
+          NULL;
+        END;
+      END IF;
+    END
+    $billing_snapshot_anchor_trigger$
+  `);
+    await client.query(`
+    DO $billing_paid_snapshot_constraints$
+    BEGIN
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_constraint
+        WHERE conname = 'billing_base_subscription_revisions_snapshot_source_key'
+          AND conrelid = 'billing_base_subscription_revisions'::regclass
+      ) THEN
+        BEGIN
+          ALTER TABLE billing_base_subscription_revisions
+            ADD CONSTRAINT billing_base_subscription_revisions_snapshot_source_key
+            UNIQUE (
+              billing_account_id,
+              subscription_id,
+              version,
+              plan_version_id,
+              effective_from,
+              effective_until
+            );
+        EXCEPTION WHEN duplicate_object THEN
+          NULL;
+        END;
+      END IF;
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_constraint
+        WHERE conname = 'billing_entitlement_snapshots_provenance_v2_check'
+          AND conrelid = 'billing_entitlement_snapshots'::regclass
+      ) THEN
+        BEGIN
+          ALTER TABLE billing_entitlement_snapshots
+            ADD CONSTRAINT billing_entitlement_snapshots_provenance_v2_check
+            CHECK (
+              verification_status = 'verified' AND (
+                (
+                  schema_version = 1 AND
+                  source_kind = 'system-free' AND
+                  generation_reason = 'default-account-created' AND
+                  effective_until IS NULL AND
+                  source_subscription_id IS NULL AND
+                  source_subscription_version IS NULL
+                ) OR (
+                  schema_version = 2 AND
+                  source_kind = 'subscription' AND
+                  generation_reason = 'subscription-reconciled' AND
+                  effective_until > effective_from AND
+                  source_subscription_id IS NOT NULL AND
+                  source_subscription_version > 0
+                )
+              )
+            );
+        EXCEPTION WHEN duplicate_object THEN
+          NULL;
+        END;
+      END IF;
+    END
+    $billing_paid_snapshot_constraints$
+  `);
+    // Replace the earlier four-column draft FK inside the same transaction. Including both effective
+    // bounds makes the snapshot an exact projection of the referenced immutable revision.
+    await client.query(`
+    DO $billing_paid_snapshot_revision_fk$
+    BEGIN
+      IF EXISTS (
+        SELECT 1 FROM pg_constraint
+        WHERE conname = 'billing_entitlement_snapshots_subscription_revision_fk'
+          AND conrelid = 'billing_entitlement_snapshots'::regclass
+          AND array_length(conkey, 1) <> 6
+      ) THEN
+        ALTER TABLE billing_entitlement_snapshots
+          DROP CONSTRAINT billing_entitlement_snapshots_subscription_revision_fk;
+      END IF;
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_constraint
+        WHERE conname = 'billing_entitlement_snapshots_subscription_revision_fk'
+          AND conrelid = 'billing_entitlement_snapshots'::regclass
+      ) THEN
+        BEGIN
+          ALTER TABLE billing_entitlement_snapshots
+            ADD CONSTRAINT billing_entitlement_snapshots_subscription_revision_fk
+            FOREIGN KEY (
+              billing_account_id,
+              source_subscription_id,
+              source_subscription_version,
+              plan_version_id,
+              effective_from,
+              effective_until
+            ) REFERENCES billing_base_subscription_revisions (
+              billing_account_id,
+              subscription_id,
+              version,
+              plan_version_id,
+              effective_from,
+              effective_until
+            ) ON DELETE RESTRICT;
+        EXCEPTION WHEN duplicate_object THEN
+          NULL;
+        END;
+      END IF;
+    END
+    $billing_paid_snapshot_revision_fk$
+  `);
+    // Install the replacement provenance guard before retiring the legacy Free-only checks. PostgreSQL
+    // exposes all of this transactional DDL atomically, so readers never observe an unguarded table.
+    await client.query(`
+    ALTER TABLE billing_entitlement_snapshots
+      DROP CONSTRAINT IF EXISTS billing_entitlement_snapshots_source_kind_check,
+      DROP CONSTRAINT IF EXISTS billing_entitlement_snapshots_generation_reason_check,
+      DROP CONSTRAINT IF EXISTS billing_entitlement_snapshots_verification_status_check
+  `);
+    await client.query(`
+    CREATE OR REPLACE FUNCTION billing_reject_subscription_history_mutation()
+    RETURNS trigger
+    LANGUAGE plpgsql
+    AS $billing_subscription_history_guard$
+    BEGIN
+      RAISE EXCEPTION 'billing subscription history is append-only' USING ERRCODE = '55000';
+    END
+    $billing_subscription_history_guard$
+  `);
+    await client.query(`
+    DO $billing_subscription_history_triggers$
+    BEGIN
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_trigger
+        WHERE tgname = 'billing_base_subscriptions_append_only'
+          AND tgrelid = 'billing_base_subscriptions'::regclass
+          AND NOT tgisinternal
+      ) THEN
+        BEGIN
+          CREATE TRIGGER billing_base_subscriptions_append_only
+          BEFORE UPDATE OR DELETE ON billing_base_subscriptions
+          FOR EACH ROW EXECUTE FUNCTION billing_reject_subscription_history_mutation();
+        EXCEPTION WHEN duplicate_object THEN
+          NULL;
+        END;
+      END IF;
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_trigger
+        WHERE tgname = 'billing_base_subscription_revisions_append_only'
+          AND tgrelid = 'billing_base_subscription_revisions'::regclass
+          AND NOT tgisinternal
+      ) THEN
+        BEGIN
+          CREATE TRIGGER billing_base_subscription_revisions_append_only
+          BEFORE UPDATE OR DELETE ON billing_base_subscription_revisions
+          FOR EACH ROW EXECUTE FUNCTION billing_reject_subscription_history_mutation();
+        EXCEPTION WHEN duplicate_object THEN
+          NULL;
+        END;
+      END IF;
+      IF NOT EXISTS (
+        SELECT 1 FROM pg_trigger
+        WHERE tgname = 'billing_subscription_reconciliation_operations_append_only'
+          AND tgrelid = 'billing_subscription_reconciliation_operations'::regclass
+          AND NOT tgisinternal
+      ) THEN
+        BEGIN
+          CREATE TRIGGER billing_subscription_reconciliation_operations_append_only
+          BEFORE UPDATE OR DELETE ON billing_subscription_reconciliation_operations
+          FOR EACH ROW EXECUTE FUNCTION billing_reject_subscription_history_mutation();
+        EXCEPTION WHEN duplicate_object THEN
+          NULL;
+        END;
+      END IF;
+    END
+    $billing_subscription_history_triggers$
+  `);
+}
+//# sourceMappingURL=postgres-subscription-schema.js.map

package/node_modules/@noodle-borg/service/dist/billing/postgres-subscription-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"postgres-subscription-schema.js","sourceRoot":"","sources":["../../src/billing/postgres-subscription-schema.ts"],"names":[],"mappings":"AAEA,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,IAAU;IAC9D,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC;YACH,4FAA4F;YAC5F,yEAAyE;YACzE,MAAM,MAAM,CAAC,KAAK,CAChB,iFAAiF,CAClF,CAAC;YACF,MAAM,iCAAiC,CAAC,MAAM,CAAC,CAAC;YAChD,MAAM,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC/B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,OAAO,EAAE,CAAC;IACnB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,iCAAiC,CAAC,MAAkB;IACjE,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;GAOlB,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDlB,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;GAkBlB,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;GAUlB,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;GAqBlB,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;GAMlB,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsClB,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;GAalB,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgClB,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;GAmBlB,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwDlB,CAAC,CAAC;IAEH,iGAAiG;IACjG,sFAAsF;IACtF,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyClB,CAAC,CAAC;IAEH,mGAAmG;IACnG,iGAAiG;IACjG,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;GAKlB,CAAC,CAAC;IAEH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;GASlB,CAAC,CAAC;IACH,MAAM,MAAM,CAAC,KAAK,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+ClB,CAAC,CAAC;AACL,CAAC"}

package/node_modules/@noodle-borg/service/dist/billing/subscription-model.d.ts

@@ -0,0 +1,40 @@
+import { type EntitlementSnapshotRecord, type PaidEntitlementSnapshotRecord } from './model.js';
+export type BillingBaseSubscriptionState = 'active' | 'payment_grace' | 'ended';
+export type BillingInterval = 'month' | 'year';
+export interface BillingBaseSubscriptionRecord {
+    readonly id: string;
+    readonly billingAccountId: string;
+    readonly createdAt: string;
+}
+export interface BillingBaseSubscriptionRevisionRecord {
+    readonly schemaVersion: 1;
+    readonly subscriptionId: string;
+    readonly billingAccountId: string;
+    readonly version: number;
+    readonly planVersionId: string;
+    readonly state: BillingBaseSubscriptionState;
+    readonly billingInterval: BillingInterval;
+    readonly currency: 'usd';
+    readonly baseAmountMinor: number;
+    readonly currentPeriodStart: string;
+    readonly currentPeriodEnd: string;
+    readonly effectiveFrom: string;
+    readonly effectiveUntil: string;
+    readonly renews: boolean;
+    readonly contentChecksum: string;
+    readonly verifiedAt: string;
+    readonly createdAt: string;
+}
+export type BillingBaseSubscriptionRevisionInput = Omit<BillingBaseSubscriptionRevisionRecord, 'schemaVersion' | 'contentChecksum'>;
+export declare function createBillingBaseSubscriptionRevision(input: BillingBaseSubscriptionRevisionInput): BillingBaseSubscriptionRevisionRecord;
+export declare function parseBillingBaseSubscriptionRevision(value: unknown): BillingBaseSubscriptionRevisionRecord;
+export interface CreatePaidEntitlementSnapshotInput {
+    readonly id: string;
+    readonly version: number;
+    readonly sourceSubscription: BillingBaseSubscriptionRevisionRecord;
+    readonly previousSnapshot: EntitlementSnapshotRecord;
+}
+export declare function createPaidEntitlementSnapshot(input: CreatePaidEntitlementSnapshotInput): PaidEntitlementSnapshotRecord;
+export declare function parsePaidEntitlementSnapshot(value: unknown): PaidEntitlementSnapshotRecord;
+export declare function validateBillingSubscriptionId(value: string): string;
+//# sourceMappingURL=subscription-model.d.ts.map

package/node_modules/@noodle-borg/service/dist/billing/subscription-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscription-model.d.ts","sourceRoot":"","sources":["../../src/billing/subscription-model.ts"],"names":[],"mappings":"AACA,OAAO,EAGL,KAAK,yBAAyB,EAC9B,KAAK,6BAA6B,EAEnC,MAAM,YAAY,CAAC;AAMpB,MAAM,MAAM,4BAA4B,GAAG,QAAQ,GAAG,eAAe,GAAG,OAAO,CAAC;AAChF,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,MAAM,CAAC;AAI/C,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;IAC7C,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,MAAM,oCAAoC,GAAG,IAAI,CACrD,qCAAqC,EACrC,eAAe,GAAG,iBAAiB,CACpC,CAAC;AAOF,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,oCAAoC,GAC1C,qCAAqC,CAMvC;AAED,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,OAAO,GACb,qCAAqC,CAyBvC;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,kBAAkB,EAAE,qCAAqC,CAAC;IACnE,QAAQ,CAAC,gBAAgB,EAAE,yBAAyB,CAAC;CACtD;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,kCAAkC,GACxC,6BAA6B,CAsC/B;AAmDD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,6BAA6B,CAmC1F;AA6LD,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGnE"}