@openlup/platform 0.27.0 → 0.28.0

package/src/account-support/contracts/customer360.ts

@@ -0,0 +1,150 @@
+/** Verified human administrator context, supplied by the host. */
+export interface OperatorContext { operatorId: string; role: "admin"; isMachineActor: false; graph: "managed" | "native" }
+/** Verbatim parsed customer-360 lookup vocabulary; defaults belong to the host codec. */
+export interface Customer360Lookup {
+  query?: string; subjectId?: string; orderId?: string; subscriptionId?: string;
+  email?: string; pageSize: number; mode?: "search" | "snapshot";
+}
+/** The supplied search/snapshot DTOs preserve owner coverage and omitted enrichments. */
+export interface Customer360ReadPort<Search, Snapshot> {
+  searchCustomerJourney(request: Customer360Lookup): Promise<Search>;
+  getCustomerJourney(request: Customer360Lookup): Promise<Snapshot | null>;
+}
+
+export type Customer360LifecycleStage = "lead" | "waitlist" | "tester" | "customer" | "inactive";
+
+export interface Customer360Subject {
+  subjectId: string;
+  displayName: string | null;
+  email: string | null;
+  phone?: string | null;
+  lifecycleStage: Customer360LifecycleStage;
+  lifecycle: { stage: Customer360LifecycleStage; enteredAt: string | null; exitedAt: string | null }[];
+  firstSeenAt: string | null;
+  lastActivityAt: string | null;
+  authUserLinked?: boolean;
+  hasSignedIn?: boolean;
+}
+
+export interface Customer360Order {
+  orderId: string;
+  orderNumber: string | null;
+  status: string;
+  subscriptionId: string | null;
+  totalMinor: number | null;
+  currency: string | null;
+  createdAt: string | null
+}
+
+export interface Customer360Subscription {
+  subscriptionId: string;
+  status: string;
+  nextCycleAt: string | null;
+  latestOrderId: string | null;
+  templateVersion?: number;
+  shippingAddressId?: string | null;
+  paymentMethodKind?: string | null;
+  paymentMethodStatus?: string | null
+}
+
+export interface Customer360PaymentTruth {
+  orderId: string;
+  status: string;
+  recoverable: boolean;
+  amountMinor: number | null;
+  currency: string | null;
+  lastAttemptAt: string | null
+}
+
+export interface Customer360DunningCase {
+  caseId: string;
+  subscriptionId: string;
+  orderId: string | null;
+  status: string;
+  retryAttempt: number;
+  nextRetryAt: string | null;
+  notificationStatus: string | null;
+  recoveryAvailable: boolean
+}
+
+export interface Customer360Recovery {
+  caseId: string;
+  status: "available" | "unavailable";
+  actionAvailable: boolean;
+  lastIssuedAt: string | null;
+  lastDeliveryStatus: string | null
+}
+
+export interface Customer360ContactHealth {
+  lastTerminalStatus: "delivered" | "bounced" | "complained" | "failed" | null;
+  lastTerminalAt: string | null;
+  reachable: boolean
+}
+
+export interface Customer360Address {
+  addressId: string;
+  label: string | null;
+  recipientName: string | null;
+  line1: string;
+  line2: string | null;
+  postalCode: string;
+  city: string;
+  country: string;
+  contactPhone: string | null;
+  isDefault: boolean;
+  kind: "shipping" | "both"
+}
+
+export interface Customer360AuditEvent {
+  eventId: string;
+  occurredAt: string;
+  action: string;
+  outcome: string;
+  entity: { kind: "subject" | "order" | "subscription" | "dunning_case" | "recovery"; id: string }
+}
+
+export interface Customer360LookupResult {
+  query: string;
+  matchedBy: "subject_id" | "email" | "order_id" | "order_number" | "subscription_id" | "text";
+  confidence: "exact" | "high" | "medium";
+  warnings: string[]
+}
+
+export interface Customer360SearchResponse {
+  contractVersion: "support.customer_360.v2";
+  query: string;
+  candidates: {
+    subjectId: string;
+    displayName: string | null;
+    email: string | null;
+    lifecycleStage: Customer360LifecycleStage;
+    matchedBy: Customer360LookupResult["matchedBy"];
+    confidence: Customer360LookupResult["confidence"];
+    lastActivityAt: string | null;
+    snapshotLookup: { subjectId: string }
+  }[];
+  warnings: string[];
+}
+
+export interface Customer360Snapshot<Extension = unknown> {
+  contractVersion: "support.customer_360.v2";
+  lookup: Customer360LookupResult;
+  subject: Customer360Subject;
+  orders: Customer360Order[];
+  subscriptions: Customer360Subscription[];
+  payment: Customer360PaymentTruth[];
+  dunningCases: Customer360DunningCase[];
+  recovery: Customer360Recovery[];
+  auditTrail: Customer360AuditEvent[];
+  contactHealth?: Customer360ContactHealth;
+  addresses?: Customer360Address[];
+  extension?: Extension;
+}
+
+export interface Customer360SummaryReadPort<Request, Result> {
+  getPortableSummary(request: Request): Promise<Result>
+}
+
+export interface DiagnosticHistoryReadPort<Request, Result> {
+  history(request: Request): Promise<Result>
+}

package/src/account-support/contracts/index.ts

@@ -0,0 +1,141 @@
+export type {
+  CustomerContext,
+  AccountReadRefusal,
+  AccountReadPort,
+  AccountProfile,
+  AccountAddress,
+  AccountBillingProfile,
+  AccountPaymentPreference,
+  AccountPickupPoint,
+  AccountDeliverySelection,
+  AccountDeliveryPreference,
+  AccountEvent,
+  AccountSubscriptionLine,
+  AccountSubscription,
+  AccountTrackingReference,
+  AccountTrackingEvent,
+  AccountInvoiceSummary,
+  AccountInvoiceDocument,
+  AccountOrderSummary,
+  AccountOrderLine,
+  AccountFulfillmentSummary,
+  AccountOrderDetail,
+  AccountOrderList,
+  AccountOrderDetailResponse,
+  AccountActionRequired,
+  AccountActionMessage,
+  AccountSnapshot
+} from "./account.js";
+export type {
+  OperatorContext,
+  Customer360Lookup,
+  Customer360ReadPort,
+  Customer360LifecycleStage,
+  Customer360Subject,
+  Customer360Order,
+  Customer360Subscription,
+  Customer360PaymentTruth,
+  Customer360DunningCase,
+  Customer360Recovery,
+  Customer360ContactHealth,
+  Customer360Address,
+  Customer360AuditEvent,
+  Customer360LookupResult,
+  Customer360SearchResponse,
+  Customer360Snapshot,
+  Customer360SummaryReadPort,
+  DiagnosticHistoryReadPort
+} from "./customer360.js";
+export type {
+  SubscriptionCommandContext,
+  SubscriptionCommand,
+  SubscriptionBundleLine,
+  SubscriptionCommandReceipt,
+  SubscriptionCommandRefusal,
+  SubscriptionUnsupportedCode,
+  SubscriptionUnsupported,
+  SubscriptionCapabilities,
+  NativeSubscriptionCommand,
+  SelfServiceCommandFacade,
+  AccountSupportMoney,
+  SubscriptionPaymentMethodStatus,
+  SubscriptionRenewalBlockStatus,
+  EligibilityRefusal,
+  LegacySubscriptionPreviewResponse
+} from "./commands.js";
+export type {
+  OperatorSubscriptionAction,
+  OperatorNewShippingAddress,
+  OperatorShippingAddressPayload,
+  OperatorSubscriptionPayload,
+  OperatorSubscriptionRefusal,
+  RecoveryRefusal,
+  EmailCorrectionRefusal,
+  PhoneCorrectionRefusal,
+  LeadRefusal,
+  OperatorContactCommand,
+  OperatorLeadCommand,
+  OperatorRecoveryCommand,
+  OperatorRecoveryCommandEnvelope,
+  OperatorSubscriptionResult
+} from "./operator.js";
+export type {
+  InvoiceDocumentIdentity,
+  InvoiceUnsupported,
+  InvoiceClearanceState,
+  InvoiceAccessPort,
+  CustomerDocumentDeliveryStatus,
+  CustomerInvoiceDocumentRole,
+  CustomerInvoiceDownloadArtifact,
+  CustomerInvoiceDownloadRequest,
+  AccountInvoiceHistoryResult,
+  AccountInvoiceHistoryDocument
+} from "./invoice.js";
+export type { AccountSupportCapability, AccountSupportCapabilities } from "./capabilities.js";
+export type {
+  LegacySubscriptionRequest,
+  RawSubscriptionCommands,
+  NativeSubscriptionPreview,
+  NativePreviewProjection,
+  SubscriptionDriver,
+  MethodSetupInput,
+  MethodSetupResult,
+  MethodSetupPort,
+  NativeLegacySubscriptionParts,
+  LegacySubscriptionPort,
+  SelfServiceCommandFacadeInput
+} from "./commands.js";
+export type { AccountSupportLaneUnavailable } from "./capabilities.js";
+// R4's additive native result and graph-specific authority ports.
+export type {
+  OperatorOwnerReceipt,
+  NativeOperatorSubscriptionResult,
+  OperatorAuthorityUnavailable,
+  OperatorEmailCorrectionResult,
+  OperatorPhoneCorrectionResult,
+  CustomerRecoveryAuthorityResult,
+  LeadAbsorptionCarried,
+  OperatorLeadAbsorptionResult,
+  OperatorEmailCorrectionClaim,
+  OperatorIdentityMovePort,
+  OperatorEmailCorrectionAdmission,
+  OperatorEmailCorrectionPhase,
+  OperatorEmailCorrectionSettlement,
+  OperatorEmailCorrectionExecution,
+  OperatorAccountLinkRefusal,
+  OperatorAccountLinkResult,
+  OperatorAccountLinkRequest,
+  OperatorAccountLinkIdentityPort,
+  OperatorSubscriptionInput,
+  OperatorEmailInput,
+  OperatorPhoneInput,
+  OperatorLinkInput,
+  OperatorRecoveryInput,
+  OperatorAbsorptionInput,
+  ManagedOperatorAuthorityPort,
+  NativeOperatorAuthorityPort,
+  LinkThenSubscriptionResult
+} from "./operator.js";
+export type {
+  OperatorAuthorityCapabilities
+} from "./capabilities.js";

package/src/account-support/contracts/invoice.ts

@@ -0,0 +1,44 @@
+/** Exact browser-safe transcriptions of M09 account-history inputs and outcomes. */
+export interface InvoiceDocumentIdentity {
+  readonly providerRef: string;
+  readonly documentRef: string;
+  readonly providerDocumentRef: string | null;
+  readonly orderRef: string;
+  readonly invoiceRef: string;
+  readonly parentProviderDocumentRef: string | null;
+}
+export interface InvoiceUnsupported {
+  readonly kind: "unsupported";
+  readonly code: "host_binding_required" | "unsupported";
+  readonly retryable: false;
+  readonly effectMayHaveSucceeded: false;
+}
+export type InvoiceClearanceState = "accepted" | "not_submitted" | "pending" | "rejected" | "not_required" | "unsupported";
+export type InvoiceAccessPort = {
+    read(input: { readonly accountRef: string; readonly orderId: string }): Promise<
+      | { readonly kind: "found"; readonly accountRef: string; readonly orderId: string; readonly documents: readonly { readonly documentRef: string; readonly invoiceRef: string; readonly parentDocumentRef: string | null; readonly role: "original" | "correction" | "replacement"; readonly status: string; readonly issuedAt: string | null; readonly clearance: { readonly state: InvoiceClearanceState; readonly reference: string | null } | null; readonly documentKind: string | null; readonly artifact: "invoice" | "correction"; readonly providerDocumentNumber: string | null; readonly totalGrossMinor: number | null; readonly currency: string; readonly emailState: "not_requested" | "pending" | "provider_accepted" | "failed"; readonly isCurrent: boolean; readonly createdAt: string; readonly downloadAvailable: boolean }[] }
+      | { readonly kind: "denied" }
+      | { readonly kind: "unknown"; readonly code: "unknown" }
+      | InvoiceUnsupported
+    >;
+    resolveDownload(input: { readonly accountRef: string; readonly orderId: string; readonly documentRef: string }): Promise<{ readonly kind: "authorized"; readonly identity: InvoiceDocumentIdentity; readonly artifactRef: string; readonly fileName: string; readonly parentDocumentRef: string | null } | { readonly kind: "denied" } | { readonly kind: "unknown"; readonly code: "unknown" } | InvoiceUnsupported>;
+  };
+
+export type CustomerDocumentDeliveryStatus = "not_ready"
+  | "pdf_ready"
+  | "ksef_pending"
+  | "email_pending"
+  | "email_provider_accepted"
+  | "email_sent"
+  | "requires_correction"
+  | "delivery_failed";
+export type CustomerInvoiceDocumentRole = "original" | "correction" | "replacement";
+export type CustomerInvoiceDownloadArtifact = "invoice" | "correction";
+
+export interface CustomerInvoiceDownloadRequest {
+  invoiceId: string;
+  artifact: CustomerInvoiceDownloadArtifact
+}
+
+export type AccountInvoiceHistoryResult = Awaited<ReturnType<InvoiceAccessPort["read"]>>;
+export type AccountInvoiceHistoryDocument = Extract<AccountInvoiceHistoryResult, { kind: "found" }>["documents"][number];

package/src/account-support/contracts/operator.ts

@@ -0,0 +1,123 @@
+import type { OperatorContext } from "./customer360.js";
+export type OperatorSubscriptionAction = "pause" | "resume" | "slide_next_cycle" | "change_shipping_address";
+export interface OperatorNewShippingAddress {
+  recipientName: string; line1: string; line2?: string; postalCode: string;
+  city: string; country: string; contactPhone?: string;
+}
+export type OperatorShippingAddressPayload = { shippingAddressId: string; reason?: string }
+  | { newAddress: OperatorNewShippingAddress; reason?: string };
+export type OperatorSubscriptionPayload = {
+  pausePreset?: "2_weeks" | "1_month" | "indefinite"; reason?: string;
+  newNextCycleAt?: string; slideMinDays?: number; confirmedChargeTiming?: boolean;
+} | OperatorShippingAddressPayload;
+export type OperatorSubscriptionRefusal = "subscription_not_found" | "subject_not_found"
+  | "subject_account_unlinked" | "version_conflict" | "slide_target_invalid" | "slide_not_available"
+  | "slide_out_of_window" | "payment_blocked" | "invalid_transition" | "charge_timing_not_confirmed"
+  | "payment_method_not_chargeable" | "invalid_address";
+export type RecoveryRefusal = "subject_not_found" | "case_not_found" | "lifecycle_not_eligible"
+  | "dunning_authority_unavailable" | "case_not_open" | "recoverable_order_unavailable";
+export type EmailCorrectionRefusal = "subject_not_found" | "subject_account_linked" | "email_expectation_conflict" | "email_already_in_use";
+export type PhoneCorrectionRefusal = "subject_not_found" | "phone_expectation_conflict";
+export type LeadRefusal = "lead_not_found" | "customer_not_found" | "lead_email_expectation_conflict"
+  | "lead_has_identity" | "lead_has_commercial_footprint" | "unclassified_referencing_table";
+export type OperatorContactCommand =
+  | { action: "correct_email"; subjectId: string; expectedEmail: string; newEmail: string; idempotencyKey: string }
+  | { action: "correct_phone"; subjectId: string; expectedPhone: string; newPhone: string; idempotencyKey: string };
+export interface OperatorLeadCommand { action: "absorb_lead"; subjectId: string; leadId: string; expectedLeadEmail: string; idempotencyKey: string }
+export type OperatorRecoveryCommand =
+  | { action: "issue_recovery"; subjectId: string; caseId: string; idempotencyKey: string }
+  | { action: "apply_subscription_action"; subscriptionId: string; subscriptionAction: OperatorSubscriptionAction;
+      expectedVersion: number; idempotencyKey: string; payload?: OperatorSubscriptionPayload }
+  | OperatorContactCommand | OperatorLeadCommand;
+/** Carries trusted context and the original command; performs no authorization or writes.
+ * The host preserves the command key, optional reason and expected version.
+ */
+export interface OperatorRecoveryCommandEnvelope<Command = OperatorRecoveryCommand> {
+  actor: OperatorContext;
+  subject: { subjectId: string; subscriptionId?: string; orderId?: string; caseId?: string };
+  command: Command; reason: string | null; idempotencyKey: string; expectedVersion: number | null;
+  evidence: readonly { owner: string; resourceId: string; revision: string | null }[];
+}
+export type OperatorSubscriptionResult =
+  | { outcome: "applied" | "noop" | "replayed"; subscriptionStatus: string; nextCycleAt: string | null;
+      templateVersion: number; eventId: string | null; appliedBy: "operator_reschedule_band" | "customer_self_service_delegate" | null }
+  | { outcome: "refused" | "conflict"; refusalCode: OperatorSubscriptionRefusal };
+
+/** Actual M10 receipt evidence; support never manufactures an audit identifier. */
+export interface OperatorOwnerReceipt {
+  id: string; actorId: string; idempotencyKey: string; commandFingerprint: string;
+  result: Record<string, unknown>;
+}
+/** Additive native superset. The managed transcription above remains unchanged. */
+export type NativeOperatorSubscriptionResult =
+  | (OperatorSubscriptionResult & { ownerReceipt?: OperatorOwnerReceipt })
+  | { outcome: "refused"; refusalCode: "operator_subscription_authority_unavailable"; ownerReceipt?: OperatorOwnerReceipt };
+export type OperatorAuthorityUnavailable = { outcome: "refused"; refusalCode: "operator_subscription_authority_unavailable" };
+export type OperatorEmailCorrectionResult =
+  | { outcome: "applied" | "noop" | "replayed"; authUserLinked: boolean }
+  | { outcome: "refused" | "conflict"; refusalCode: EmailCorrectionRefusal };
+export type OperatorPhoneCorrectionResult = { outcome: "applied" | "noop" | "replayed" }
+  | { outcome: "refused" | "conflict"; refusalCode: PhoneCorrectionRefusal };
+export type CustomerRecoveryAuthorityResult =
+  | { outcome: "issued"; deliveryStatus: string; auditEventId: string }
+  | { outcome: "replayed"; deliveryStatus: string; auditEventId: string }
+  | { outcome: "refused"; refusalCode: RecoveryRefusal }
+  | { outcome: "conflict"; conflictCode: "idempotency_conflict" };
+export interface LeadAbsorptionCarried { personalization: number; consents: number; sourceLinks: number; deliveries: number }
+export type OperatorLeadAbsorptionResult =
+  | { outcome: "applied" | "noop" | "replayed"; leadId: string; customerId: string; carried: LeadAbsorptionCarried }
+  | { outcome: "refused" | "conflict"; leadId: string; refusalCode: LeadRefusal; blockingTables: string[] };
+export interface OperatorEmailCorrectionClaim { idempotencyKey: string; claimToken: string; sequence: string }
+export interface OperatorIdentityMovePort {
+  findClientHoldingEmail(email: string): Promise<{ clientId: string } | null>;
+  readIdentityEmail(authUserId: string): Promise<string>;
+  moveIdentityEmail(authUserId: string, email: string, claim: OperatorEmailCorrectionClaim): Promise<void>;
+}
+export type OperatorEmailCorrectionAdmission = OperatorEmailCorrectionResult | {
+  outcome: "admitted"; authUserId: string | null; originalEmail: string; newEmail: string;
+};
+export type OperatorEmailCorrectionPhase = "complete" | "release" | "fail";
+export type OperatorEmailCorrectionSettlement = OperatorEmailCorrectionResult | { outcome: "pending" } | { outcome: "failed" };
+export type OperatorEmailCorrectionExecution = OperatorEmailCorrectionSettlement | (OperatorEmailCorrectionClaim & {
+  outcome: "claimed"; authUserId: string | null; originalEmail: string; newEmail: string;
+});
+export type OperatorAccountLinkRefusal = "subject_not_found" | "subject_not_customer" | "subject_email_missing"
+  | "email_expectation_conflict" | "subject_account_linked" | "identity_not_linkable" | "identity_linked_elsewhere";
+export type OperatorAccountLinkResult = { outcome: "applied" | "noop" | "replayed" }
+  | { outcome: "refused" | "conflict"; refusalCode: OperatorAccountLinkRefusal };
+export interface OperatorAccountLinkRequest { action: "link_account"; subjectId: string; expectedEmail: string; idempotencyKey: string }
+export interface OperatorAccountLinkIdentityPort {
+  findSubject(clientId: string): Promise<{ identityKind: string | null; email: string | null; authUserId: string | null } | null>;
+  resolveIdentityForEmail(email: string): Promise<string>;
+}
+export interface OperatorSubscriptionInput {
+  subscriptionId: string; subscriptionAction: OperatorSubscriptionAction; expectedVersion: number;
+  payload: OperatorSubscriptionPayload; idempotencyKey: string; operatorId: string;
+}
+export interface OperatorEmailInput { subjectId: string; expectedEmail: string; newEmail: string; idempotencyKey: string; operatorId: string }
+export interface OperatorPhoneInput { subjectId: string; expectedPhone: string; newPhone: string; idempotencyKey: string; operatorId: string }
+export interface OperatorLinkInput { subjectId: string; expectedEmail: string; authUserId: string | null; idempotencyKey: string; operatorId: string }
+export interface OperatorRecoveryInput { subjectId: string; caseId: string; idempotencyKey: string; operatorId: string }
+export interface OperatorAbsorptionInput { customerId: string; leadId: string; expectedLeadEmail: string; idempotencyKey: string; operatorId: string }
+export interface ManagedOperatorAuthorityPort {
+  applySubscriptionAction(input: OperatorSubscriptionInput): Promise<OperatorSubscriptionResult>;
+  correctSubjectEmail(input: OperatorEmailInput): Promise<OperatorEmailCorrectionAdmission>;
+  claimSubjectEmail(input: { idempotencyKey: string }): Promise<OperatorEmailCorrectionExecution>;
+  settleSubjectEmail(input: { idempotencyKey: string; claimToken: string; phase: OperatorEmailCorrectionPhase }): Promise<OperatorEmailCorrectionSettlement>;
+  correctSubjectPhone(input: OperatorPhoneInput): Promise<OperatorPhoneCorrectionResult>;
+  linkSubjectAccount(input: OperatorLinkInput): Promise<OperatorAccountLinkResult>;
+  issueRecovery(input: OperatorRecoveryInput): Promise<CustomerRecoveryAuthorityResult>;
+  absorbLead(input: OperatorAbsorptionInput): Promise<OperatorLeadAbsorptionResult>;
+}
+export interface NativeOperatorAuthorityPort {
+  applySubscriptionAction(input: OperatorSubscriptionInput): Promise<NativeOperatorSubscriptionResult>;
+  correctSubjectEmail(input: OperatorEmailInput): Promise<OperatorAuthorityUnavailable>;
+  correctSubjectPhone(input: OperatorPhoneInput): Promise<OperatorAuthorityUnavailable>;
+  linkSubjectAccount(input: OperatorLinkInput): Promise<OperatorAuthorityUnavailable>;
+  issueRecovery(input: OperatorRecoveryInput): Promise<CustomerRecoveryAuthorityResult>;
+  absorbLead(input: OperatorAbsorptionInput): Promise<OperatorLeadAbsorptionResult>;
+}
+export type LinkThenSubscriptionResult =
+  | { outcome: "link_refused"; link: OperatorAccountLinkResult | OperatorAuthorityUnavailable }
+  | { outcome: "completed"; link: OperatorAccountLinkResult; subscription: NativeOperatorSubscriptionResult }
+  | { outcome: "partial"; link: OperatorAccountLinkResult; subscription: NativeOperatorSubscriptionResult | null };

package/src/account-support/contribution.ts

@@ -0,0 +1,35 @@
+import type { AccountSupportCapabilities } from "./contracts/index.js";
+import type { AccountSupportCallable, AccountSupportOperations } from "./bindings.js";
+
+export type AccountSupportBindingRefusal = { readonly kind: "refused"; readonly code: "disabled" | "schema_unknown" | "schema_unsatisfied" };
+export type AccountSupportReadiness = { readonly kind: "ready" } | AccountSupportBindingRefusal;
+export type GuardedAccountSupportOperation<F> = F extends AccountSupportCallable
+  ? (...args: Parameters<F>) => Promise<Awaited<ReturnType<F>> | AccountSupportBindingRefusal> : null;
+export type GuardedAccountSupportOperations<O extends AccountSupportOperations> = { readonly [K in keyof O]: GuardedAccountSupportOperation<O[K]> };
+
+/** One guard per callable identity, shared by service, port and route aliases. */
+export function createAccountSupportServices<O extends AccountSupportOperations>(input: {
+  enabled?: boolean;
+  capabilities: AccountSupportCapabilities;
+  operations: O;
+  readiness(): Promise<AccountSupportReadiness>;
+}) {
+  const enabled = input.enabled === true, observe = input.readiness;
+  async function readiness(): Promise<AccountSupportReadiness> {
+    return enabled ? observe() : { kind: "refused", code: "disabled" };
+  }
+  const guards = new Map<AccountSupportCallable, AccountSupportCallable>();
+  const operations = Object.fromEntries(Object.entries(input.operations).map(([key, operation]) => {
+    if (operation === null) return [key, null];
+    let guarded = guards.get(operation);
+    if (!guarded) {
+      guarded = async (...args: never[]) => {
+        const state = await readiness();
+        return state.kind === "ready" ? operation(...args) : state;
+      };
+      guards.set(operation, guarded);
+    }
+    return [key, guarded];
+  })) as GuardedAccountSupportOperations<O>;
+  return Object.freeze({ capabilities: input.capabilities, readiness, operations: Object.freeze(operations) });
+}