@softure-ai/billing 0.0.0-stage → 0.1.5

package/dist/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAQA,eAAO,MAAM,aAAa,mDAAsB,CAAC;AAEjD,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOvB,CAAC;AAEH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoBnB,CAAC;AAEH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAW1B,CAAC;AAEF,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAc1B,CAAC;AAEH,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAevB,CAAC"}

package/dist/schema.js

@@ -0,0 +1,77 @@
+// Drizzle view of the module's tables (migrations/0001_create_entitlements.sql,
+// 0002_create_payments.sql, 0003_record_payment_grants.sql, 0004_create_requests_and_grants.sql,
+// 0005_record_refunded_amounts.sql, 0006_record_request_handover_and_prices.sql,
+// 0007_record_failed_refunds.sql, 0008_record_request_handover_claims.sql and
+// 0009_record_pending_charge_states.sql).
+// The migrations are the source of truth; this file only types the queries.
+import { bigint, boolean, integer, pgSchema, primaryKey, text, timestamp, uuid } from "drizzle-orm/pg-core";
+export const billingSchema = pgSchema("billing");
+export const entitlements = billingSchema.table("entitlements", {
+    userId: uuid("user_id").primaryKey(),
+    trialEndsAt: timestamp("trial_ends_at", { withTimezone: true }).notNull(),
+    paidUntil: timestamp("paid_until", { withTimezone: true }),
+    isLifetime: boolean("is_lifetime").notNull().default(false),
+    createdAt: timestamp("created_at", { withTimezone: true }).notNull(),
+    updatedAt: timestamp("updated_at", { withTimezone: true }).notNull(),
+});
+export const payments = billingSchema.table("payments", {
+    id: uuid("id").primaryKey().defaultRandom(),
+    userId: uuid("user_id").notNull(),
+    provider: text("provider").notNull(),
+    checkoutId: text("checkout_id").notNull(),
+    paymentId: text("payment_id"),
+    planId: text("plan_id").notNull(),
+    amount: bigint("amount", { mode: "number" }).notNull(),
+    currency: text("currency").notNull(),
+    status: text("status", { enum: ["paid", "refunded"] }).notNull(),
+    paidAt: timestamp("paid_at", { withTimezone: true }).notNull(),
+    refundedAt: timestamp("refunded_at", { withTimezone: true }),
+    grantKind: text("grant_kind", { enum: ["period", "lifetime"] }),
+    grantedFrom: timestamp("granted_from", { withTimezone: true }),
+    grantedUntil: timestamp("granted_until", { withTimezone: true }),
+    refundedAmount: bigint("refunded_amount", { mode: "number" }).notNull().default(0),
+    takenBackDays: integer("taken_back_days").notNull().default(0),
+    refundsSeenAt: timestamp("refunds_seen_at", { withTimezone: true }),
+    pendingRefundedAmount: bigint("pending_refunded_amount", { mode: "number" }),
+    pendingRefundsSeenAt: timestamp("pending_refunds_seen_at", { withTimezone: true }),
+});
+export const refundFailures = billingSchema.table("refund_failures", {
+    paymentId: uuid("payment_id").notNull(),
+    refundId: text("refund_id").notNull(),
+    amount: bigint("amount", { mode: "number" }).notNull(),
+    refundCreatedAt: timestamp("refund_created_at", { withTimezone: true }).notNull(),
+    failedAt: timestamp("failed_at", { withTimezone: true }).notNull(),
+    recordedAt: timestamp("recorded_at", { withTimezone: true }).notNull(),
+}, (table) => [primaryKey({ columns: [table.paymentId, table.refundId] })]);
+export const paymentRequests = billingSchema.table("payment_requests", {
+    id: uuid("id").primaryKey().defaultRandom(),
+    userId: uuid("user_id").notNull(),
+    planId: text("plan_id").notNull(),
+    invoiceName: text("invoice_name"),
+    invoiceTaxId: text("invoice_tax_id"),
+    invoiceAddress: text("invoice_address"),
+    status: text("status", { enum: ["open", "granted", "dismissed", "expired"] }).notNull(),
+    requestedAt: timestamp("requested_at", { withTimezone: true }).notNull(),
+    closedAt: timestamp("closed_at", { withTimezone: true }),
+    handedOverAt: timestamp("handed_over_at", { withTimezone: true }),
+    handoverClaimedAt: timestamp("handover_claimed_at", { withTimezone: true }),
+    amount: bigint("amount", { mode: "number" }),
+    currency: text("currency"),
+});
+export const manualGrants = billingSchema.table("manual_grants", {
+    id: uuid("id").primaryKey().defaultRandom(),
+    userId: uuid("user_id").notNull(),
+    planId: text("plan_id").notNull(),
+    requestId: uuid("request_id"),
+    grantedBy: uuid("granted_by"),
+    grantedAt: timestamp("granted_at", { withTimezone: true }).notNull(),
+    grantKind: text("grant_kind", { enum: ["period", "lifetime"] }).notNull(),
+    grantedFrom: timestamp("granted_from", { withTimezone: true }),
+    grantedUntil: timestamp("granted_until", { withTimezone: true }),
+    status: text("status", { enum: ["active", "revoked"] }).notNull(),
+    revokedAt: timestamp("revoked_at", { withTimezone: true }),
+    revokedBy: uuid("revoked_by"),
+    amount: bigint("amount", { mode: "number" }),
+    currency: text("currency"),
+});
+//# sourceMappingURL=schema.js.map

package/dist/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,iGAAiG;AACjG,iFAAiF;AACjF,8EAA8E;AAC9E,0CAA0C;AAC1C,4EAA4E;AAC5E,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAE5G,MAAM,CAAC,MAAM,aAAa,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;AAEjD,MAAM,CAAC,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,cAAc,EAAE;IAC9D,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,EAAE;IACpC,WAAW,EAAE,SAAS,CAAC,eAAe,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;IACzE,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC1D,UAAU,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3D,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;IACpE,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;CACrE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE;IACtD,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IAC3C,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACpC,UAAU,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,EAAE;IACzC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACtD,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC,OAAO,EAAE;IACpC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE;IAChE,MAAM,EAAE,SAAS,CAAC,SAAS,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9D,UAAU,EAAE,SAAS,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC5D,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;IAC/D,WAAW,EAAE,SAAS,CAAC,cAAc,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC9D,YAAY,EAAE,SAAS,CAAC,eAAe,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAChE,cAAc,EAAE,MAAM,CAAC,iBAAiB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAClF,aAAa,EAAE,OAAO,CAAC,iBAAiB,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,aAAa,EAAE,SAAS,CAAC,iBAAiB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACnE,qBAAqB,EAAE,MAAM,CAAC,yBAAyB,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5E,oBAAoB,EAAE,SAAS,CAAC,yBAAyB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;CACnF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,aAAa,CAAC,KAAK,CAC/C,iBAAiB,EACjB;IACE,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE;IACvC,QAAQ,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,EAAE;IACrC,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE;IACtD,eAAe,EAAE,SAAS,CAAC,mBAAmB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;IACjF,QAAQ,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;IAClE,UAAU,EAAE,SAAS,CAAC,aAAa,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;CACvE,EACD,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CACxE,CAAC;AAEF,MAAM,CAAC,MAAM,eAAe,GAAG,aAAa,CAAC,KAAK,CAAC,kBAAkB,EAAE;IACrE,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IAC3C,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,WAAW,EAAE,IAAI,CAAC,cAAc,CAAC;IACjC,YAAY,EAAE,IAAI,CAAC,gBAAgB,CAAC;IACpC,cAAc,EAAE,IAAI,CAAC,iBAAiB,CAAC;IACvC,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE;IACvF,WAAW,EAAE,SAAS,CAAC,cAAc,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;IACxE,QAAQ,EAAE,SAAS,CAAC,WAAW,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACxD,YAAY,EAAE,SAAS,CAAC,gBAAgB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACjE,iBAAiB,EAAE,SAAS,CAAC,qBAAqB,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC3E,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5C,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC;CAC3B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAG,aAAa,CAAC,KAAK,CAAC,eAAe,EAAE;IAC/D,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC,aAAa,EAAE;IAC3C,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE;IACjC,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE;IACpE,SAAS,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE;IACzE,WAAW,EAAE,SAAS,CAAC,cAAc,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC9D,YAAY,EAAE,SAAS,CAAC,eAAe,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAChE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE;IACjE,SAAS,EAAE,SAAS,CAAC,YAAY,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC1D,SAAS,EAAE,IAAI,CAAC,YAAY,CAAC;IAC7B,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC5C,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC;CAC3B,CAAC,CAAC"}

package/dist/scripts/entitlement-scripts.d.ts

@@ -0,0 +1,17 @@
+import { type Clock, type SoftureConfig } from "@softure-ai/core";
+import { type OpsScript } from "@softure-ai/ops/scripts";
+export interface ImportEntitlementsScriptArgs {
+    readonly file: string;
+}
+export type PinTrialsScriptArgs = Record<string, never>;
+export interface EntitlementScriptOptions {
+    /** The time stored as the rows' `created_at` / `updated_at`; the system clock by default. */
+    readonly clock?: Clock;
+}
+/** The most rows one import file holds; split a larger one. */
+export declare const MAX_IMPORT_ROWS = 50000;
+/** `import-entitlements --file=…`: records trial ends, paid periods and lifetime access from a JSON file. */
+export declare function createImportEntitlementsScript(config: SoftureConfig, options?: EntitlementScriptOptions): OpsScript<ImportEntitlementsScriptArgs>;
+/** `pin-trials`: writes every derived trial into a row, so a config change moves none of them. */
+export declare function createPinTrialsScript(config: SoftureConfig, options?: EntitlementScriptOptions): OpsScript<PinTrialsScriptArgs>;
+//# sourceMappingURL=entitlement-scripts.d.ts.map

package/dist/scripts/entitlement-scripts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlement-scripts.d.ts","sourceRoot":"","sources":["../../src/scripts/entitlement-scripts.ts"],"names":[],"mappings":"AAQA,OAAO,EAAmB,KAAK,KAAK,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEnF,OAAO,EAAoC,KAAK,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAO3F,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,MAAM,mBAAmB,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAExD,MAAM,WAAW,wBAAwB;IACvC,6FAA6F;IAC7F,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;CACxB;AAED,+DAA+D;AAC/D,eAAO,MAAM,eAAe,QAAS,CAAC;AAgGtC,6GAA6G;AAC7G,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,GAAE,wBAA6B,GAAG,SAAS,CAAC,4BAA4B,CAAC,CAmCrJ;AAWD,kGAAkG;AAClG,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,GAAE,wBAA6B,GAAG,SAAS,CAAC,mBAAmB,CAAC,CAcnI"}

package/dist/scripts/entitlement-scripts.js

@@ -0,0 +1,167 @@
+// The operator's tools for turning billing on for accounts that already exist: safe ops scripts
+// (`@softure-ai/ops/scripts`), dry run by default, `--commit` writes. `import-entitlements` records
+// what another system knew (trial ends, paid periods, lifetime access) from a JSON file through
+// `importEntitlement`; `pin-trials` writes every derived trial into a row before a config change
+// would move it (`pinDerivedTrials`). Reports and refusals carry counts and row numbers, never an
+// email.
+import { readFile } from "node:fs/promises";
+import { users } from "@softure-ai/auth";
+import { ok, systemClock } from "@softure-ai/core";
+import { defineOpsScript, refuseOpsScript } from "@softure-ai/ops/scripts";
+import { count, eq, isNull } from "drizzle-orm";
+import { z } from "zod";
+import { entitlements } from "../schema.js";
+import { getEntitlement, importEntitlement, pinDerivedTrials } from "../server/entitlements.js";
+import { findAccountByEmail } from "../server/plans.js";
+/** The most rows one import file holds; split a larger one. */
+export const MAX_IMPORT_ROWS = 50_000;
+/** The most problems a refusal lists. */
+const MAX_LISTED = 10;
+const importArgs = z.strictObject({
+    file: z.string().min(1, "--file=<path to a JSON file> is required"),
+});
+const pinArgs = z.strictObject({});
+const instant = z.iso
+    .datetime({ offset: true, message: "must be an ISO 8601 date-time with an offset, e.g. 2026-11-01T00:00:00+01:00" })
+    .transform((text) => new Date(text));
+const importRow = z
+    .strictObject({
+    email: z.string().trim().min(1, "is required").max(320),
+    trialEndsAt: instant.nullable().optional(),
+    paidUntil: instant.nullable().optional(),
+    isLifetime: z.boolean().optional(),
+})
+    .refine((row) => (row.trialEndsAt ?? row.paidUntil ?? row.isLifetime) != null, "needs trialEndsAt, paidUntil or isLifetime");
+const importFile = z.array(importRow).min(1, "holds no rows").max(MAX_IMPORT_ROWS, `holds more than ${String(MAX_IMPORT_ROWS)} rows; split it`);
+/** "rows 3, 7 and 12" style, at most `MAX_LISTED` of them. */
+function describeRows(rows) {
+    const listed = rows.slice(0, MAX_LISTED).map(String);
+    const more = rows.length > MAX_LISTED ? ` and ${String(rows.length - MAX_LISTED)} more` : "";
+    return `${rows.length === 1 ? "row" : "rows"} ${listed.join(", ")}${more}`;
+}
+/** The file's rows, or why they cannot be imported. Row numbers count from 1. */
+async function readImportFile(path) {
+    let text;
+    try {
+        text = await readFile(path, "utf8");
+    }
+    catch (error) {
+        const code = error instanceof Error && "code" in error ? String(error.code) : "unknown error";
+        return { ok: false, reason: `cannot read the file "${path}" (${code})` };
+    }
+    let json;
+    try {
+        json = JSON.parse(text);
+    }
+    catch {
+        return { ok: false, reason: `the file "${path}" is not valid JSON` };
+    }
+    const parsed = importFile.safeParse(json);
+    if (!parsed.success) {
+        const problems = parsed.error.issues.slice(0, MAX_LISTED).map((issue) => {
+            const [index, ...field] = issue.path;
+            if (typeof index !== "number")
+                return `the file ${issue.message}`;
+            return `row ${String(index + 1)}${field.length > 0 ? ` ${field.join(".")}` : ""}: ${issue.message}`;
+        });
+        return { ok: false, reason: `the file must be a JSON array of { email, trialEndsAt?, paidUntil?, isLifetime? }: ${problems.join("; ")}` };
+    }
+    return { ok: true, rows: parsed.data };
+}
+/** Row numbers of emails seen earlier in the file (compared as auth stores emails). */
+function findRepeatedRows(rows) {
+    const seen = new Set();
+    const repeated = [];
+    rows.forEach((row, index) => {
+        const key = row.email.toLowerCase();
+        if (seen.has(key))
+            repeated.push(index + 1);
+        seen.add(key);
+    });
+    return repeated;
+}
+async function summarize(ctx, userIds) {
+    const summary = { accounts: userIds.length, trial: 0, paid: 0, lifetime: 0, readOnly: 0 };
+    for (const userId of userIds) {
+        const entitlement = await getEntitlement(ctx, userId);
+        // The accounts were found under the script's transaction; one erased meanwhile counts as none.
+        if (entitlement === null)
+            continue;
+        if (entitlement.status === "read_only")
+            summary.readOnly += 1;
+        else if (entitlement.status === "trial")
+            summary.trial += 1;
+        else if (entitlement.endsAt === null)
+            summary.lifetime += 1;
+        else
+            summary.paid += 1;
+    }
+    return summary;
+}
+/** `import-entitlements --file=…`: records trial ends, paid periods and lifetime access from a JSON file. */
+export function createImportEntitlementsScript(config, options = {}) {
+    const clock = options.clock ?? systemClock;
+    return defineOpsScript({
+        name: "import-entitlements",
+        description: "Records the trial ends, paid periods and lifetime access in a JSON file for the accounts it names by email; never shortens access.",
+        usage: ["--file=<path to a JSON array of { email, trialEndsAt?, paidUntil?, isLifetime? }>"],
+        args: importArgs,
+        run: async (tx, args) => {
+            const ctx = { db: tx, clock, config };
+            const file = await readImportFile(args.file);
+            if (!file.ok)
+                return refuseOpsScript(file.reason);
+            const repeated = findRepeatedRows(file.rows);
+            if (repeated.length > 0)
+                return refuseOpsScript(`${describeRows(repeated)} repeat an email named earlier in the file`);
+            const userIds = [];
+            const unknown = [];
+            for (const [index, row] of file.rows.entries()) {
+                const account = await findAccountByEmail(ctx, row.email);
+                if (account === null)
+                    unknown.push(index + 1);
+                else
+                    userIds.push(account.id);
+            }
+            if (unknown.length > 0)
+                return refuseOpsScript(`${describeRows(unknown)} name no account; nothing was imported`);
+            const before = await summarize(ctx, userIds);
+            for (const [index, row] of file.rows.entries()) {
+                const userId = userIds[index];
+                // One id per row: every row found an account above.
+                if (userId === undefined)
+                    throw new Error(`import-entitlements: row ${String(index + 1)} lost its account`);
+                const imported = await importEntitlement(ctx, { userId, trialEndsAt: row.trialEndsAt, paidUntil: row.paidUntil, isLifetime: row.isLifetime });
+                // Erased between the lookup and the change's lock.
+                if (!imported.ok)
+                    return refuseOpsScript(`${describeRows([index + 1])} names an account that was deleted meanwhile; nothing was imported`);
+            }
+            return ok({ before, after: await summarize(ctx, userIds) });
+        },
+    });
+}
+async function countAccountsWithoutRow(db) {
+    const [row] = await db
+        .select({ total: count() })
+        .from(users)
+        .leftJoin(entitlements, eq(entitlements.userId, users.id))
+        .where(isNull(entitlements.userId));
+    return row?.total ?? 0;
+}
+/** `pin-trials`: writes every derived trial into a row, so a config change moves none of them. */
+export function createPinTrialsScript(config, options = {}) {
+    const clock = options.clock ?? systemClock;
+    return defineOpsScript({
+        name: "pin-trials",
+        description: "Writes the trial every account without an entitlement row is on into a row, before trial.days, trial.startsAt or the time zone changes.",
+        usage: [],
+        args: pinArgs,
+        run: async (tx) => {
+            const ctx = { db: tx, clock, config };
+            const before = { accountsWithoutRow: await countAccountsWithoutRow(tx) };
+            const pinned = await pinDerivedTrials(ctx);
+            return ok({ before, after: { accountsWithoutRow: await countAccountsWithoutRow(tx), pinned } });
+        },
+    });
+}
+//# sourceMappingURL=entitlement-scripts.js.map

package/dist/scripts/entitlement-scripts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlement-scripts.js","sourceRoot":"","sources":["../../src/scripts/entitlement-scripts.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,oGAAoG;AACpG,gGAAgG;AAChG,iGAAiG;AACjG,kGAAkG;AAClG,SAAS;AACT,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,EAAE,EAAE,WAAW,EAAkC,MAAM,kBAAkB,CAAC;AAEnF,OAAO,EAAE,eAAe,EAAE,eAAe,EAAkB,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,gBAAgB,EAAuB,MAAM,2BAA2B,CAAC;AACrH,OAAO,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAaxD,+DAA+D;AAC/D,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AACtC,yCAAyC;AACzC,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB,MAAM,UAAU,GAAG,CAAC,CAAC,YAAY,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,0CAA0C,CAAC;CACpE,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;AAEnC,MAAM,OAAO,GAAG,CAAC,CAAC,GAAG;KAClB,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,8EAA8E,EAAE,CAAC;KACnH,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAEvC,MAAM,SAAS,GAAG,CAAC;KAChB,YAAY,CAAC;IACZ,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvD,WAAW,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC1C,SAAS,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACxC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,IAAI,EAAE,4CAA4C,CAAC,CAAC;AAE/H,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,GAAG,CAAC,eAAe,EAAE,mBAAmB,MAAM,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;AAahJ,8DAA8D;AAC9D,SAAS,YAAY,CAAC,IAAuB;IAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACrD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7F,OAAO,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC;AAC7E,CAAC;AAED,iFAAiF;AACjF,KAAK,UAAU,cAAc,CAAC,IAAY;IACxC,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC;QAC9F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,yBAAyB,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;IAC3E,CAAC;IACD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,IAAI,qBAAqB,EAAE,CAAC;IACvE,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;YACtE,MAAM,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC;YACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,YAAY,KAAK,CAAC,OAAO,EAAE,CAAC;YAClE,OAAO,OAAO,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;QACtG,CAAC,CAAC,CAAC;QACH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,sFAAsF,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IAC5I,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;AACzC,CAAC;AAED,uFAAuF;AACvF,SAAS,gBAAgB,CAAC,IAA0B;IAClD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;QAC1B,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QAC5C,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAChB,CAAC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,GAAmB,EAAE,OAA0B;IACtE,MAAM,OAAO,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;IAC1F,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACtD,+FAA+F;QAC/F,IAAI,WAAW,KAAK,IAAI;YAAE,SAAS;QACnC,IAAI,WAAW,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;aACzD,IAAI,WAAW,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO,CAAC,KAAK,IAAI,CAAC,CAAC;aACvD,IAAI,WAAW,CAAC,MAAM,KAAK,IAAI;YAAE,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC;;YACvD,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,8BAA8B,CAAC,MAAqB,EAAE,UAAoC,EAAE;IAC1G,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC;IAC3C,OAAO,eAAe,CAAC;QACrB,IAAI,EAAE,qBAAqB;QAC3B,WAAW,EAAE,oIAAoI;QACjJ,KAAK,EAAE,CAAC,mFAAmF,CAAC;QAC5F,IAAI,EAAE,UAAU;QAChB,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,GAAG,GAAmB,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACtD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,CAAC,IAAI,CAAC,EAAE;gBAAE,OAAO,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;YAClD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,eAAe,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,4CAA4C,CAAC,CAAC;YAEvH,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAa,EAAE,CAAC;YAC7B,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC/C,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;gBACzD,IAAI,OAAO,KAAK,IAAI;oBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;;oBACzC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAChC,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,eAAe,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,wCAAwC,CAAC,CAAC;YAEjH,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;YAC7C,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,CAAC;gBAC/C,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC9B,oDAAoD;gBACpD,IAAI,MAAM,KAAK,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,mBAAmB,CAAC,CAAC;gBAC5G,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC;gBAC9I,mDAAmD;gBACnD,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAAE,OAAO,eAAe,CAAC,GAAG,YAAY,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,oEAAoE,CAAC,CAAC;YAC7I,CAAC;YACD,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAC9D,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,uBAAuB,CAAC,EAAa;IAClD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC;SAC1B,IAAI,CAAC,KAAK,CAAC;SACX,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;SACzD,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC;IACtC,OAAO,GAAG,EAAE,KAAK,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,qBAAqB,CAAC,MAAqB,EAAE,UAAoC,EAAE;IACjG,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC;IAC3C,OAAO,eAAe,CAAC;QACrB,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,yIAAyI;QACtJ,KAAK,EAAE,EAAE;QACT,IAAI,EAAE,OAAO;QACb,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE;YAChB,MAAM,GAAG,GAAmB,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACtD,MAAM,MAAM,GAAG,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC,EAAE,CAAC,EAAE,CAAC;YACzE,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAC;YAC3C,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;QAClG,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/scripts/index.d.ts

@@ -0,0 +1,3 @@
+export { createImportEntitlementsScript, createPinTrialsScript, MAX_IMPORT_ROWS, type EntitlementScriptOptions, type ImportEntitlementsScriptArgs, type PinTrialsScriptArgs, } from "./entitlement-scripts.js";
+export { createGrantPlanScript, createRevokeGrantScript, type GrantPlanScriptArgs, type PlanScriptOptions, type RevokeGrantScriptArgs } from "./plan-scripts.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/scripts/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/scripts/index.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,8BAA8B,EAC9B,qBAAqB,EACrB,eAAe,EACf,KAAK,wBAAwB,EAC7B,KAAK,4BAA4B,EACjC,KAAK,mBAAmB,GACzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,KAAK,mBAAmB,EAAE,KAAK,iBAAiB,EAAE,KAAK,qBAAqB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/scripts/index.js

@@ -0,0 +1,5 @@
+// `@softure-ai/billing/scripts`: ops scripts that grant a plan, revoke a manual grant, import
+// entitlements and pin derived trials (see the README, "Scripts" and "Existing accounts").
+export { createImportEntitlementsScript, createPinTrialsScript, MAX_IMPORT_ROWS, } from "./entitlement-scripts.js";
+export { createGrantPlanScript, createRevokeGrantScript } from "./plan-scripts.js";
+//# sourceMappingURL=index.js.map

package/dist/scripts/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/scripts/index.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,2FAA2F;AAC3F,OAAO,EACL,8BAA8B,EAC9B,qBAAqB,EACrB,eAAe,GAIhB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,qBAAqB,EAAE,uBAAuB,EAAgF,MAAM,mBAAmB,CAAC"}

package/dist/scripts/plan-scripts.d.ts

@@ -0,0 +1,19 @@
+import { type Clock, type SoftureConfig } from "@softure-ai/core";
+import { type OpsScript } from "@softure-ai/ops/scripts";
+export interface GrantPlanScriptArgs {
+    readonly email: string;
+    readonly plan: string;
+}
+export interface RevokeGrantScriptArgs {
+    readonly email: string;
+    readonly grant: string;
+}
+export interface PlanScriptOptions {
+    /** The time stored as `granted_at` / `revoked_at`; the system clock by default. */
+    readonly clock?: Clock;
+}
+/** `grant-plan --email=… --plan=…`: grants one payment of a declared plan by hand and records it. */
+export declare function createGrantPlanScript(config: SoftureConfig, options?: PlanScriptOptions): OpsScript<GrantPlanScriptArgs>;
+/** `revoke-grant --email=… --grant=…`: revokes one active manual grant and takes back what it added. */
+export declare function createRevokeGrantScript(config: SoftureConfig, options?: PlanScriptOptions): OpsScript<RevokeGrantScriptArgs>;
+//# sourceMappingURL=plan-scripts.d.ts.map

package/dist/scripts/plan-scripts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-scripts.d.ts","sourceRoot":"","sources":["../../src/scripts/plan-scripts.ts"],"names":[],"mappings":"AAKA,OAAO,EAAmB,KAAK,KAAK,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEnF,OAAO,EAAoC,KAAK,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAW3F,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,iBAAiB;IAChC,mFAAmF;IACnF,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;CACxB;AAuDD,qGAAqG;AACrG,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,GAAE,iBAAsB,GAAG,SAAS,CAAC,mBAAmB,CAAC,CAgC5H;AAED,wGAAwG;AACxG,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,aAAa,EAAE,OAAO,GAAE,iBAAsB,GAAG,SAAS,CAAC,qBAAqB,CAAC,CAoBhI"}

package/dist/scripts/plan-scripts.js

@@ -0,0 +1,106 @@
+// The operator's way to grant a plan and revoke a manual grant without the admin page: safe ops
+// scripts (`@softure-ai/ops/scripts`), dry run by default, `--commit` writes. They write through
+// `grantPlanManually` and `revokeManualGrant`, so a script's grant is in the account's history like
+// the admin page's, and either side can revoke the other's. Reports carry the user id, the
+// entitlement and the active manual grants (with the ids `revoke-grant` takes), never the email.
+import { ok, systemClock } from "@softure-ai/core";
+import { defineOpsScript, refuseOpsScript } from "@softure-ai/ops/scripts";
+import { and, eq } from "drizzle-orm";
+import { z } from "zod";
+import { findPlan } from "../plans.js";
+import { manualGrants } from "../schema.js";
+import { getEntitlement } from "../server/entitlements.js";
+import { getAccountHistory, grantPlanManually, revokeManualGrant } from "../server/grants.js";
+import { findAccountByEmail, getBillingPlans } from "../server/plans.js";
+import { isUuid } from "../server/user-id.js";
+const EMAIL = z.string().min(1, "--email=<account email> is required");
+const grantPlanArgs = z.strictObject({
+    email: EMAIL,
+    plan: z.string().min(1, "--plan=<plan id> is required"),
+});
+const revokeGrantArgs = z.strictObject({
+    email: EMAIL,
+    grant: z.string().min(1, "--grant=<manual grant id> is required"),
+});
+const NO_ACCOUNT = "no account has this email";
+async function describeAccount(ctx, userId) {
+    const history = await getAccountHistory(ctx, userId);
+    const grants = history.flatMap((entry) => entry.source === "manual" && entry.status === "active" ? [{ id: entry.id, planId: entry.planId, grantedAt: entry.at, grant: entry.grant }] : []);
+    return { userId, access: await getEntitlement(ctx, userId), grants };
+}
+function describeDeclared(config) {
+    return getBillingPlans(config)
+        .map((plan) => plan.id)
+        .join(", ");
+}
+/** Whether `grantId` is an active manual grant of the account (its own select: the history is capped). */
+async function hasActiveGrant(db, userId, grantId) {
+    if (!isUuid(grantId))
+        return false;
+    const [row] = await db
+        .select({ id: manualGrants.id })
+        .from(manualGrants)
+        .where(and(eq(manualGrants.id, grantId), eq(manualGrants.userId, userId), eq(manualGrants.status, "active")));
+    return row !== undefined;
+}
+/** `grant-plan --email=… --plan=…`: grants one payment of a declared plan by hand and records it. */
+export function createGrantPlanScript(config, options = {}) {
+    const clock = options.clock ?? systemClock;
+    return defineOpsScript({
+        name: "grant-plan",
+        description: "Grants one payment of a plan to the account with the given email, recorded in its billing history.",
+        usage: ["--email=<account email>", "--plan=<plan id from billing({ plans })>"],
+        args: grantPlanArgs,
+        run: async (tx, args) => {
+            const ctx = { db: tx, clock, config };
+            if (findPlan(getBillingPlans(config), args.plan) === undefined) {
+                return refuseOpsScript(`plan "${args.plan}" is not declared (declared: ${describeDeclared(config)})`);
+            }
+            const account = await findAccountByEmail(ctx, args.email);
+            if (account === null)
+                return refuseOpsScript(NO_ACCOUNT);
+            const before = await describeAccount(ctx, account.id);
+            const granted = await grantPlanManually(ctx, { userId: account.id, planId: args.plan, adminId: null });
+            if (!granted.ok) {
+                switch (granted.error) {
+                    case "billing.lifetime_active":
+                        return refuseOpsScript("the account has lifetime access already");
+                    case "billing.account_unknown":
+                        // Deleted between the lookup and the grant's lock.
+                        return refuseOpsScript(NO_ACCOUNT);
+                    case "billing.plan_unknown":
+                    case "billing.request_closed":
+                        // The plan was checked above and no request is given.
+                        throw new Error(`grant-plan: granting plan "${args.plan}" failed with ${granted.error}`);
+                }
+            }
+            return ok({ before, after: await describeAccount(ctx, account.id) });
+        },
+    });
+}
+/** `revoke-grant --email=… --grant=…`: revokes one active manual grant and takes back what it added. */
+export function createRevokeGrantScript(config, options = {}) {
+    const clock = options.clock ?? systemClock;
+    return defineOpsScript({
+        name: "revoke-grant",
+        description: "Revokes a manual plan grant of the account with the given email and takes back what it added.",
+        usage: ["--email=<account email>", "--grant=<manual grant id, listed by a dry run of either script>"],
+        args: revokeGrantArgs,
+        run: async (tx, args) => {
+            const ctx = { db: tx, clock, config };
+            const account = await findAccountByEmail(ctx, args.email);
+            if (account === null)
+                return refuseOpsScript(NO_ACCOUNT);
+            const before = await describeAccount(ctx, account.id);
+            const noGrant = `the account has no active manual grant "${args.grant}"`;
+            if (!(await hasActiveGrant(tx, account.id, args.grant)))
+                return refuseOpsScript(noGrant);
+            const revoked = await revokeManualGrant(ctx, { grantId: args.grant, adminId: null });
+            // Revoked by the admin page between the check and the revoke's lock.
+            if (!revoked.ok)
+                return refuseOpsScript(noGrant);
+            return ok({ before, after: await describeAccount(ctx, account.id) });
+        },
+    });
+}
+//# sourceMappingURL=plan-scripts.js.map

package/dist/scripts/plan-scripts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plan-scripts.js","sourceRoot":"","sources":["../../src/scripts/plan-scripts.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,iGAAiG;AACjG,oGAAoG;AACpG,2FAA2F;AAC3F,iGAAiG;AACjG,OAAO,EAAE,EAAE,EAAE,WAAW,EAAkC,MAAM,kBAAkB,CAAC;AAEnF,OAAO,EAAE,eAAe,EAAE,eAAe,EAAkB,MAAM,yBAAyB,CAAC;AAC3F,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAuB,MAAM,2BAA2B,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC9F,OAAO,EAAE,kBAAkB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAiB9C,MAAM,KAAK,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,qCAAqC,CAAC,CAAC;AAEvE,MAAM,aAAa,GAAG,CAAC,CAAC,YAAY,CAAC;IACnC,KAAK,EAAE,KAAK;IACZ,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,8BAA8B,CAAC;CACxD,CAAC,CAAC;AAEH,MAAM,eAAe,GAAG,CAAC,CAAC,YAAY,CAAC;IACrC,KAAK,EAAE,KAAK;IACZ,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,uCAAuC,CAAC;CAClE,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,2BAA2B,CAAC;AAiB/C,KAAK,UAAU,eAAe,CAAC,GAAmB,EAAE,MAAc;IAChE,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CACvC,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAChJ,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,gBAAgB,CAAC,MAAqB;IAC7C,OAAO,eAAe,CAAC,MAAM,CAAC;SAC3B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;SACtB,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,0GAA0G;AAC1G,KAAK,UAAU,cAAc,CAAC,EAAa,EAAE,MAAc,EAAE,OAAe;IAC1E,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC;SAC/B,IAAI,CAAC,YAAY,CAAC;SAClB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;IAChH,OAAO,GAAG,KAAK,SAAS,CAAC;AAC3B,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,qBAAqB,CAAC,MAAqB,EAAE,UAA6B,EAAE;IAC1F,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC;IAC3C,OAAO,eAAe,CAAC;QACrB,IAAI,EAAE,YAAY;QAClB,WAAW,EAAE,oGAAoG;QACjH,KAAK,EAAE,CAAC,yBAAyB,EAAE,0CAA0C,CAAC;QAC9E,IAAI,EAAE,aAAa;QACnB,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,GAAG,GAAmB,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACtD,IAAI,QAAQ,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,SAAS,EAAE,CAAC;gBAC/D,OAAO,eAAe,CAAC,SAAS,IAAI,CAAC,IAAI,gCAAgC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxG,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1D,IAAI,OAAO,KAAK,IAAI;gBAAE,OAAO,eAAe,CAAC,UAAU,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACvG,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;gBAChB,QAAQ,OAAO,CAAC,KAAK,EAAE,CAAC;oBACtB,KAAK,yBAAyB;wBAC5B,OAAO,eAAe,CAAC,yCAAyC,CAAC,CAAC;oBACpE,KAAK,yBAAyB;wBAC5B,mDAAmD;wBACnD,OAAO,eAAe,CAAC,UAAU,CAAC,CAAC;oBACrC,KAAK,sBAAsB,CAAC;oBAC5B,KAAK,wBAAwB;wBAC3B,sDAAsD;wBACtD,MAAM,IAAI,KAAK,CAAC,8BAA8B,IAAI,CAAC,IAAI,iBAAiB,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC7F,CAAC;YACH,CAAC;YACD,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,uBAAuB,CAAC,MAAqB,EAAE,UAA6B,EAAE;IAC5F,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,WAAW,CAAC;IAC3C,OAAO,eAAe,CAAC;QACrB,IAAI,EAAE,cAAc;QACpB,WAAW,EAAE,+FAA+F;QAC5G,KAAK,EAAE,CAAC,yBAAyB,EAAE,iEAAiE,CAAC;QACrG,IAAI,EAAE,eAAe;QACrB,GAAG,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE;YACtB,MAAM,GAAG,GAAmB,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;YACtD,MAAM,OAAO,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;YAC1D,IAAI,OAAO,KAAK,IAAI;gBAAE,OAAO,eAAe,CAAC,UAAU,CAAC,CAAC;YACzD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,2CAA2C,IAAI,CAAC,KAAK,GAAG,CAAC;YACzE,IAAI,CAAC,CAAC,MAAM,cAAc,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;gBAAE,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;YACzF,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YACrF,qEAAqE;YACrE,IAAI,CAAC,OAAO,CAAC,EAAE;gBAAE,OAAO,eAAe,CAAC,OAAO,CAAC,CAAC;YACjD,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACvE,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/server/entitlements.d.ts

@@ -0,0 +1,69 @@
+import { type Err, type ModuleContext, type Ok } from "@softure-ai/core";
+import type { Queryable } from "@softure-ai/db";
+import type { BillingErrorCode, Entitlement, EntitlementEvent, EntitlementRecord } from "../contract.js";
+export type BillingContext = ModuleContext<Queryable>;
+/** The day number of `trial.startsAt`, or null without one. */
+export declare function getTrialFloorDay(ctx: Pick<BillingContext, "config">): number | null;
+/**
+ * The trial an account without a row is on: `trial.days` from the day it was created, or from
+ * `trial.startsAt` for an account created before that day.
+ */
+export declare function getDefaultRecord(ctx: Pick<BillingContext, "config">, accountCreatedAt: Date): EntitlementRecord;
+export interface PinEntitlementRowInput {
+    readonly userId: string;
+    /** The account's `auth.users.created_at`, which its derived trial starts from. */
+    readonly accountCreatedAt: Date;
+}
+/**
+ * Writes the account's derived trial into a row when it has none (exactly what reads derive), so a
+ * check made before the first change has a row to lock: a concurrent change that inserted first is
+ * waited for. Returns whether this call inserted the row. The caller holds the account (key share)
+ * and runs it in its transaction.
+ */
+export declare function pinEntitlementRow(ctx: Pick<BillingContext, "db" | "config" | "clock">, input: PinEntitlementRowInput): Promise<boolean>;
+/** The account's stored or derived record, or null when no account has this id. */
+export declare function findEntitlementRecord(ctx: Pick<BillingContext, "db" | "config">, userId: string): Promise<EntitlementRecord | null>;
+/** Where the account stands now, or null when no account has this id. Database errors propagate. */
+export declare function getEntitlement(ctx: BillingContext, userId: string): Promise<Entitlement | null>;
+/**
+ * The write guard without a framework: `Ok` with the entitlement when the account may write,
+ * `billing.read_only` when it may only read, `billing.account_unknown` without an account.
+ */
+export declare function checkWriteAccess(ctx: BillingContext, userId: string): Promise<Ok<Entitlement> | Err<"billing.read_only" | "billing.account_unknown">>;
+/** The event to apply, decided from the account's current record under its lock. */
+export type EntitlementEventResolver = (record: EntitlementRecord, now: Date) => EntitlementEvent;
+/**
+ * Applies `event` to the account's entitlement in one transaction and returns where it stands
+ * after; a refused event writes nothing. An account without a row gets one holding its derived
+ * trial with the event applied, so the trial end never moves when a row appears. A concurrent
+ * change that inserted first is waited for and applied on. Database errors propagate.
+ *
+ * `event` may be a function of the current record (a paid period that starts where access ends,
+ * `grantPlan`); it runs under the lock, so two changes at once both count.
+ */
+export declare function changeEntitlement(ctx: BillingContext, userId: string, event: EntitlementEvent | EntitlementEventResolver): Promise<Ok<Entitlement> | Err<BillingErrorCode>>;
+export interface ImportEntitlementInput {
+    readonly userId: string;
+    /** The trial end the other system knew; omitted or null keeps the account's own. */
+    readonly trialEndsAt?: Date | null;
+    /** The end of the paid period it knew; omitted or null adds none. */
+    readonly paidUntil?: Date | null;
+    /** Whether it had lifetime access. */
+    readonly isLifetime?: boolean;
+}
+/**
+ * Records what another system knew about an account (a trial end, a paid period, lifetime access)
+ * through `changeEntitlement`: merged onto the account's current record, each end only moving
+ * later, so an import never takes access away and a repeat changes nothing. Not a recorded grant:
+ * it is not in the account's history. Database errors propagate.
+ */
+export declare function importEntitlement(ctx: BillingContext, input: ImportEntitlementInput): Promise<Ok<Entitlement> | Err<"billing.account_unknown">>;
+/**
+ * Writes the derived trial of every account without a row into a row (exactly what reads derive,
+ * `trial.startsAt` included), so a later change of `trial.days`, `trial.startsAt` or the time zone
+ * moves no existing trial. A row written meanwhile by a change is kept. Returns how many rows it
+ * wrote. Run it in a transaction (the `pin-trials` script does) to pin all or nothing. Database
+ * errors propagate.
+ */
+export declare function pinDerivedTrials(ctx: BillingContext): Promise<number>;
+//# sourceMappingURL=entitlements.d.ts.map

package/dist/server/entitlements.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlements.d.ts","sourceRoot":"","sources":["../../src/server/entitlements.ts"],"names":[],"mappings":"AAKA,OAAO,EAAW,KAAK,GAAG,EAAE,KAAK,aAAa,EAAE,KAAK,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAClF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGhD,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAMzG,MAAM,MAAM,cAAc,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;AAYtD,+DAA+D;AAC/D,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,GAAG,MAAM,GAAG,IAAI,CAOnF;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,QAAQ,CAAC,EAAE,gBAAgB,EAAE,IAAI,GAAG,iBAAiB,CAG/G;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kFAAkF;IAClF,QAAQ,CAAC,gBAAgB,EAAE,IAAI,CAAC;CACjC;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,QAAQ,GAAG,OAAO,CAAC,EAAE,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,OAAO,CAAC,CAQ7I;AAED,mFAAmF;AACnF,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,QAAQ,CAAC,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAezI;AAED,oGAAoG;AACpG,wBAAsB,cAAc,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAGrG;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,mBAAmB,GAAG,yBAAyB,CAAC,CAAC,CAI3J;AAYD,oFAAoF;AACpF,MAAM,MAAM,wBAAwB,GAAG,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,IAAI,KAAK,gBAAgB,CAAC;AAElG;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,gBAAgB,GAAG,wBAAwB,GACjD,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAmClD;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,oFAAoF;IACpF,QAAQ,CAAC,WAAW,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACnC,qEAAqE;IACrE,QAAQ,CAAC,SAAS,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACjC,sCAAsC;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;CAC/B;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAWrJ;AAKD;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,CAAC,CAsB3E"}