@softure-ai/billing 0.0.0-stage → 0.1.6

package/dist/server/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../../src/server/options.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,OAAO,EAAE,SAAS,EAA6C,MAAM,kBAAkB,CAAC;AAKxF,MAAM,SAAS,GAAG,SAAS,CAAC;AAE5B,sGAAsG;AACtG,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC5C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,sGAAsG,CAAC,CAAC;IAC1H,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAqB;IACrD,qEAAqE;IACrE,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,OAAyB,CAAC;AAC5D,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,kBAAkB,CAAC,MAAqB;IACtD,+EAA+E;IAC/E,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAoB,CAAC;AAC7E,CAAC;AASD,4DAA4D;AAC5D,MAAM,UAAU,gBAAgB,CAAC,MAAqB;IACpD,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;IAC/C,MAAM,IAAI,GAAG,CAAC,IAAyB,EAAU,EAAE;QACjD,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,wFAAwF;QACxF,IAAI,IAAI,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,IAAI,uCAAuC,CAAC,CAAC;QACpH,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;AAC5D,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,oBAAoB,CAAC,MAAqB;IACxD,MAAM,OAAO,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,iBAAiB,EAAE,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,gBAAgB,EAAE,OAAO,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;AACnI,CAAC"}

package/dist/server/payments.d.ts

@@ -0,0 +1,140 @@
+import { type Err, type Ok } from "@softure-ai/core";
+import type { Entitlement, PaymentGrant } from "../contract.js";
+import { type FailedRefund, type PaidCheckout, type StripeWebhookError } from "../stripe-webhook.js";
+import { type BillingContext } from "./entitlements.js";
+/** The name of `stripe()`, under which its webhook stores payments. */
+export declare const STRIPE_PROVIDER = "stripe";
+export interface RecordPaymentInput extends PaidCheckout {
+    /** The adapter's name, e.g. `stripe`. */
+    readonly provider: string;
+}
+/** What a webhook delivery changed. */
+export type PaymentOutcome = 
+/** A new paid checkout: its plan was granted. */
+{
+    readonly status: "granted";
+    readonly entitlement: Entitlement;
+}
+/** A full refund of a recorded payment (or the partial one that completes it): what it granted was taken back. */
+ | {
+    readonly status: "refunded";
+    readonly entitlement: Entitlement;
+}
+/** A partial refund of a recorded payment: access changed by the `partialRefunds` policy. */
+ | {
+    readonly status: "partially_refunded";
+    readonly entitlement: Entitlement;
+}
+/** A refund of a recorded payment failed: what it took was given back (nothing when billing never counted it). */
+ | {
+    readonly status: "refund_failed";
+    readonly entitlement: Entitlement;
+}
+/** Recorded (or refunded) already: a repeated delivery, nothing changed. */
+ | {
+    readonly status: "duplicate";
+}
+/** A refund of a payment billing never recorded: nothing to take back. */
+ | {
+    readonly status: "unknown_payment";
+}
+/** An event billing does not act on. */
+ | {
+    readonly status: "ignored";
+    readonly reason: string;
+};
+export type RecordPaymentError = "billing.account_unknown" | "billing.plan_unknown";
+/**
+ * Records a paid checkout and grants one payment of its plan, in one transaction: `duplicate` when
+ * the checkout was recorded before. An account or plan that no longer exists stores nothing (the
+ * money is refunded in the provider's dashboard). Database errors propagate.
+ */
+export declare function recordPayment(ctx: BillingContext, input: RecordPaymentInput): Promise<Ok<PaymentOutcome> | Err<RecordPaymentError>>;
+export interface RefundPaymentInput {
+    readonly provider: string;
+    /** The provider's payment id the refund names (a Stripe PaymentIntent). */
+    readonly paymentId: string;
+    /**
+     * For a partial refund, the total refunded so far in the currency's minor unit (Stripe's
+     * `amount_refunded`); omitted when the payment is refunded in full. A total that reaches the
+     * payment's amount is a full refund.
+     */
+    readonly amountRefunded?: number;
+    /**
+     * When the provider took the charge's state the delivery reports (Stripe's event `created`); now
+     * when omitted. Refunds that failed after it and were created before it are not counted in it.
+     */
+    readonly observedAt?: Date;
+}
+export interface GrantColumns {
+    readonly grantKind: "period" | "lifetime" | null;
+    readonly grantedFrom: Date | null;
+    readonly grantedUntil: Date | null;
+}
+/** The payment row's columns for what its grant added. */
+export declare function getGrantColumns(grant: PaymentGrant): GrantColumns;
+/** The grant a payment row records, or null for a row stored before grants were. */
+export declare function readGrant(row: GrantColumns): PaymentGrant | null;
+/**
+ * Records a refund of a payment and takes back what it granted, in one transaction. A full refund
+ * marks it refunded: a period loses its unused days, a lifetime ends unless another paid lifetime
+ * payment or an active manual lifetime grant still gives it, and a payment stored before grants were
+ * recorded revokes paid access. A partial refund keeps it paid and follows
+ * `billing({ partialRefunds })`: `pro_rata` takes back the share of the unused days that the newly
+ * refunded money is of the money not refunded before (rounded down) and shortens the payment's
+ * stored period by them; `keep_access` takes nothing back. Partial refunds never end a lifetime
+ * nor revoke a payment without a recorded grant; the refund that completes the amount does what a
+ * full refund does. The reported total first loses the failed refunds it still counts (created by
+ * `observedAt`, failed after it). `duplicate` when the refund adds nothing to what was recorded (a
+ * repeated or stale delivery); a state newer than every one recorded is then kept for the failure
+ * that explains it (`failRefund`). `unknown_payment` when billing never recorded the payment. The
+ * days a refund takes are added to the payment's `taken_back_days`, for a failure to give back.
+ * Database errors propagate.
+ */
+export declare function refundPayment(ctx: BillingContext, input: RefundPaymentInput): Promise<Ok<PaymentOutcome>>;
+export interface FailRefundInput extends FailedRefund {
+    /** The adapter's name, e.g. `stripe`. */
+    readonly provider: string;
+}
+/**
+ * Records a refund of a payment that failed and gives back what it took, in one transaction, under
+ * the locks of `refundPayment`. Billing counted the refund when the newest charge snapshot it
+ * recorded was taken after the refund was created and before it failed; then the payment's
+ * refunded total drops by the refund's amount, a payment refunded in full is paid again (a lifetime
+ * comes back), and its period gets back the failed money's share of the days refunds took
+ * (`getRestoredDays`, by `partialRefunds`), with `giveBackDays`. A failure billing never counted is
+ * only recorded, so a later snapshot that still counts the refund is corrected by it. A payment
+ * stored before grants were recorded gets its total and status back but no access. Then the charge
+ * state `refundPayment` kept is applied when, corrected, it reports more than billing now counts: a
+ * new refund reported before this failure is taken back once. `duplicate` for a refund already
+ * recorded as failed, `unknown_payment` when billing never recorded the payment. Database errors
+ * propagate.
+ */
+export declare function failRefund(ctx: BillingContext, input: FailRefundInput): Promise<Ok<PaymentOutcome>>;
+export interface ReceiveStripeWebhookInput {
+    /** The raw request body, exactly as Stripe sent it. */
+    readonly payload: string;
+    /** The `Stripe-Signature` header, or null. */
+    readonly signature: string | null;
+    /** The endpoint's signing secret (`whsec_...`). */
+    readonly secret: string;
+}
+export interface StripeWebhookReceipt {
+    readonly eventId: string;
+    readonly outcome: PaymentOutcome
+    /** A paid checkout whose account or plan is gone: nothing stored, refund it in Stripe. */
+     | {
+        readonly status: "refused";
+        readonly error: RecordPaymentError;
+        readonly checkoutId: string;
+    };
+}
+/**
+ * One Stripe webhook delivery: the signature is checked before anything is parsed or read, then a
+ * paid checkout is recorded and granted, a refund takes back what its payment granted (a partial
+ * one by the `partialRefunds` policy), and a failed refund gives it back.
+ * `billing.webhook_invalid` for a delivery that is not Stripe's (or a replay past the tolerance).
+ * Database errors propagate (answer 500, Stripe retries).
+ */
+export declare function receiveStripeWebhook(ctx: BillingContext, input: ReceiveStripeWebhookInput): Promise<Ok<StripeWebhookReceipt> | Err<StripeWebhookError>>;
+//# sourceMappingURL=payments.d.ts.map

package/dist/server/payments.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payments.d.ts","sourceRoot":"","sources":["../../src/server/payments.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAW,KAAK,GAAG,EAAE,KAAK,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAG9D,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAKhE,OAAO,EAAqB,KAAK,YAAY,EAAE,KAAK,YAAY,EAAE,KAAK,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AACxH,OAAO,EAA4C,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAMlG,uEAAuE;AACvE,eAAO,MAAM,eAAe,WAAW,CAAC;AAExC,MAAM,WAAW,kBAAmB,SAAQ,YAAY;IACtD,yCAAyC;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,uCAAuC;AACvC,MAAM,MAAM,cAAc;AACxB,iDAAiD;AAC/C;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;CAAE;AACnE,kHAAkH;GAChH;IAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;CAAE;AACpE,6FAA6F;GAC3F;IAAE,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;CAAE;AAC9E,kHAAkH;GAChH;IAAE,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAA;CAAE;AACzE,4EAA4E;GAC1E;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;CAAE;AAClC,0EAA0E;GACxE;IAAE,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE;AACxC,wCAAwC;GACtC;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5D,MAAM,MAAM,kBAAkB,GAAG,yBAAyB,GAAG,sBAAsB,CAAC;AAEpF;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAC,CAqCzI;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,2EAA2E;IAC3E,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,IAAI,CAAC;CAC5B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,SAAS,EAAE,QAAQ,GAAG,UAAU,GAAG,IAAI,CAAC;IACjD,QAAQ,CAAC,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,IAAI,GAAG,IAAI,CAAC;CACpC;AAED,0DAA0D;AAC1D,wBAAgB,eAAe,CAAC,KAAK,EAAE,YAAY,GAAG,YAAY,CAGjE;AAED,oFAAoF;AACpF,wBAAgB,SAAS,CAAC,GAAG,EAAE,YAAY,GAAG,YAAY,GAAG,IAAI,CAIhE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAoB/G;AAqFD,MAAM,WAAW,eAAgB,SAAQ,YAAY;IACnD,yCAAyC;IACzC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,UAAU,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,eAAe,GAAG,OAAO,CAAC,EAAE,CAAC,cAAc,CAAC,CAAC,CAoCzG;AAoED,MAAM,WAAW,yBAAyB;IACxC,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,8CAA8C;IAC9C,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,mDAAmD;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EACZ,cAAc;IAChB,0FAA0F;OACxF;QAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CACrG;AAED;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,EAAE,CAAC,oBAAoB,CAAC,GAAG,GAAG,CAAC,kBAAkB,CAAC,CAAC,CA2B7J"}

package/dist/server/payments.js

@@ -0,0 +1,339 @@
+// Payments a provider reports through its webhook: a paid checkout grants its plan and a refund
+// takes back what that payment granted (a partial one by the `partialRefunds` policy), each exactly
+// once. `billing.payments` holds one row per paid checkout with the grant it caused (a period or
+// lifetime), written in the transaction of the grant, so a delivery Stripe repeats (or two events
+// for one checkout) finds the row and changes nothing.
+// A payment keeps the total refunded so far (`refunded_amount`, the provider's cumulative figure),
+// so a repeated or stale refund delivery finds nothing new and changes nothing. A refund that fails
+// later gives back what it took (`failRefund`), once per refund id (`billing.refund_failures`); a
+// charge snapshot taken before a failure is corrected by the failed refunds it still counts. A newer
+// snapshot that reports no more than billing counts (a new refund after a failure billing has not
+// heard of yet) is kept on the payment, and each failure applies it once it reports more.
+// Locks: the account first (key share), like `changeEntitlement` and the privacy erase; a refund
+// then takes the entitlement before its payment row (`lockEntitlementRow`), as a manual revoke does,
+// so a refund and a revoke of one account queue on the entitlement instead of deadlocking on the
+// rows each moves back.
+import { users } from "@softure-ai/auth";
+import { err, ok } from "@softure-ai/core";
+import { and, eq, gt, lte, sql } from "drizzle-orm";
+import { findPlan } from "../plans.js";
+import { resolveEntitlement } from "../entitlement.js";
+import { getRestoredDays, moveBackByDays } from "../refund.js";
+import { payments, refundFailures } from "../schema.js";
+import { readStripeWebhook } from "../stripe-webhook.js";
+import { changeEntitlement, findEntitlementRecord } from "./entitlements.js";
+import { getBillingOptions, getEntitlementPolicy } from "./options.js";
+import { applyPlan, getBillingPlans } from "./plans.js";
+import { giveBackDays, hasActiveManualLifetime, hasPaidLifetimePayment, lockEntitlementRow, takeBackGrant } from "./take-back.js";
+import { isUserId } from "./user-id.js";
+/** The name of `stripe()`, under which its webhook stores payments. */
+export const STRIPE_PROVIDER = "stripe";
+/**
+ * Records a paid checkout and grants one payment of its plan, in one transaction: `duplicate` when
+ * the checkout was recorded before. An account or plan that no longer exists stores nothing (the
+ * money is refunded in the provider's dashboard). Database errors propagate.
+ */
+export async function recordPayment(ctx, input) {
+    if (findPlan(getBillingPlans(ctx.config), input.planId) === undefined)
+        return err("billing.plan_unknown");
+    if (!isUserId(input.userId))
+        return err("billing.account_unknown");
+    return ctx.db.transaction(async (tx) => {
+        const now = ctx.clock.now();
+        // A shared lock: the account cannot be deleted before the grant below.
+        const [account] = await tx.select({ id: users.id }).from(users).where(eq(users.id, input.userId)).for("key share");
+        if (account === undefined)
+            return err("billing.account_unknown");
+        // A concurrent delivery of the same checkout waits here for this transaction, then conflicts.
+        const inserted = await tx
+            .insert(payments)
+            .values({
+            userId: input.userId,
+            provider: input.provider,
+            checkoutId: input.checkoutId,
+            paymentId: input.paymentId,
+            planId: input.planId,
+            amount: input.amount,
+            currency: input.currency,
+            status: "paid",
+            paidAt: now,
+        })
+            .onConflictDoNothing()
+            .returning();
+        if (inserted.length === 0)
+            return ok({ status: "duplicate" });
+        const applied = await applyPlan({ ...ctx, db: tx }, input.userId, input.planId);
+        // The plan and the locked account were checked above, and a plan grant always ends later.
+        if (!applied.ok)
+            throw new Error(`@softure-ai/billing: granting the paid plan "${input.planId}" failed with ${applied.error}`);
+        const [payment] = inserted;
+        const { grant } = applied.value;
+        // A plan grant always adds a period of at least a day, or lifetime access.
+        if (payment === undefined || grant === null)
+            throw new Error(`@softure-ai/billing: the paid plan "${input.planId}" was granted but its payment row or grant is missing`);
+        await tx.update(payments).set(getGrantColumns(grant)).where(eq(payments.id, payment.id));
+        return ok({ status: "granted", entitlement: applied.value.entitlement });
+    });
+}
+/** The payment row's columns for what its grant added. */
+export function getGrantColumns(grant) {
+    if (grant.kind === "lifetime")
+        return { grantKind: "lifetime", grantedFrom: null, grantedUntil: null };
+    return { grantKind: "period", grantedFrom: grant.from, grantedUntil: grant.until };
+}
+/** The grant a payment row records, or null for a row stored before grants were. */
+export function readGrant(row) {
+    if (row.grantKind === "lifetime")
+        return { kind: "lifetime" };
+    if (row.grantKind === "period" && row.grantedFrom !== null && row.grantedUntil !== null)
+        return { kind: "period", from: row.grantedFrom, until: row.grantedUntil };
+    return null;
+}
+/**
+ * Records a refund of a payment and takes back what it granted, in one transaction. A full refund
+ * marks it refunded: a period loses its unused days, a lifetime ends unless another paid lifetime
+ * payment or an active manual lifetime grant still gives it, and a payment stored before grants were
+ * recorded revokes paid access. A partial refund keeps it paid and follows
+ * `billing({ partialRefunds })`: `pro_rata` takes back the share of the unused days that the newly
+ * refunded money is of the money not refunded before (rounded down) and shortens the payment's
+ * stored period by them; `keep_access` takes nothing back. Partial refunds never end a lifetime
+ * nor revoke a payment without a recorded grant; the refund that completes the amount does what a
+ * full refund does. The reported total first loses the failed refunds it still counts (created by
+ * `observedAt`, failed after it). `duplicate` when the refund adds nothing to what was recorded (a
+ * repeated or stale delivery); a state newer than every one recorded is then kept for the failure
+ * that explains it (`failRefund`). `unknown_payment` when billing never recorded the payment. The
+ * days a refund takes are added to the payment's `taken_back_days`, for a failure to give back.
+ * Database errors propagate.
+ */
+export async function refundPayment(ctx, input) {
+    return ctx.db.transaction(async (tx) => {
+        const now = ctx.clock.now();
+        const match = and(eq(payments.provider, input.provider), eq(payments.paymentId, input.paymentId));
+        const [found] = await tx.select({ userId: payments.userId }).from(payments).where(match);
+        if (found === undefined)
+            return ok({ status: "unknown_payment" });
+        const { userId } = found;
+        // The account first (the lock order of every change), the entitlement, then the payment row.
+        await tx.select({ id: users.id }).from(users).where(eq(users.id, userId)).for("key share");
+        await lockEntitlementRow(tx, userId);
+        const [payment] = await tx.select().from(payments).where(match).for("update");
+        // Erased with the account in the meantime.
+        if (payment === undefined)
+            return ok({ status: "duplicate" });
+        const state = { reported: input.amountRefunded ?? payment.amount, observedAt: input.observedAt ?? now };
+        const applied = await applyChargeState({ ...ctx, db: tx }, { payment, state, now });
+        if (applied !== null)
+            return ok(applied);
+        await keepNewerChargeState(tx, payment, state);
+        return ok({ status: "duplicate" });
+    });
+}
+/**
+ * Applies a charge state to a payment the caller locked (the account, the entitlement, the row):
+ * the refunded total it reports, less the failed refunds it still counts, takes back what it adds
+ * to the recorded total (see `refundPayment`). Null when it adds nothing (the payment is refunded
+ * in full, or the total is not above the recorded one). A kept state at or before it is cleared.
+ */
+async function applyChargeState(ctx, { payment, state, now }) {
+    const total = Math.min(Math.max(state.reported - (await getFailedAmountCounted(ctx.db, payment.id, state.observedAt)), 0), payment.amount);
+    const isFull = total >= payment.amount;
+    if (payment.status !== "paid" || (!isFull && total <= payment.refundedAmount))
+        return null;
+    const { userId } = payment;
+    const refundsSeenAt = payment.refundsSeenAt !== null && payment.refundsSeenAt > state.observedAt ? payment.refundsSeenAt : state.observedAt;
+    const isPendingIncluded = payment.pendingRefundsSeenAt !== null && payment.pendingRefundsSeenAt <= state.observedAt;
+    await ctx.db
+        .update(payments)
+        .set({
+        ...(isFull ? { status: "refunded", refundedAt: now, refundedAmount: payment.amount } : { refundedAmount: total }),
+        refundsSeenAt,
+        ...(isPendingIncluded ? { pendingRefundedAmount: null, pendingRefundsSeenAt: null } : {}),
+    })
+        .where(eq(payments.id, payment.id));
+    const share = isFull ? undefined : getPartialShare(ctx, { refunded: total - payment.refundedAmount, outstanding: payment.amount - payment.refundedAmount });
+    const grant = readGrant(payment);
+    const { entitlement, days } = await takeBackGrant(ctx, {
+        userId,
+        grant,
+        now,
+        share,
+        hasOtherLifetime: async () => (await hasActiveManualLifetime(ctx.db, userId)) || (await hasPaidLifetimePayment(ctx.db, userId, payment.id)),
+    });
+    if (days > 0 && grant?.kind === "period") {
+        // A partially refunded payment stays paid: its stored period ends where the access it still pays for does.
+        const grantedUntil = isFull ? grant.until : moveBackByDays(grant.until, days, ctx.config.timezone);
+        await ctx.db
+            .update(payments)
+            .set({ grantedUntil, takenBackDays: payment.takenBackDays + days })
+            .where(eq(payments.id, payment.id));
+    }
+    return { status: isFull ? "refunded" : "partially_refunded", entitlement };
+}
+/**
+ * Keeps a charge state billing did not apply when it is newer than every state recorded (applied or
+ * kept): it may carry a new refund that a failure billing has not heard of yet hides.
+ */
+async function keepNewerChargeState(tx, payment, state) {
+    const isNewer = (seenAt) => seenAt === null || state.observedAt > seenAt;
+    if (!isNewer(payment.refundsSeenAt) || !isNewer(payment.pendingRefundsSeenAt))
+        return;
+    await tx
+        .update(payments)
+        .set({ pendingRefundedAmount: state.reported, pendingRefundsSeenAt: state.observedAt })
+        .where(eq(payments.id, payment.id));
+}
+/** The failed refunds of a payment a charge snapshot taken at `observedAt` still counts: created by then, failed after. */
+async function getFailedAmountCounted(tx, paymentId, observedAt) {
+    const [row] = await tx
+        .select({ amount: sql `coalesce(sum(${refundFailures.amount}), 0)` })
+        .from(refundFailures)
+        .where(and(eq(refundFailures.paymentId, paymentId), lte(refundFailures.refundCreatedAt, observedAt), gt(refundFailures.failedAt, observedAt)));
+    return Number(row?.amount ?? 0);
+}
+/**
+ * Records a refund of a payment that failed and gives back what it took, in one transaction, under
+ * the locks of `refundPayment`. Billing counted the refund when the newest charge snapshot it
+ * recorded was taken after the refund was created and before it failed; then the payment's
+ * refunded total drops by the refund's amount, a payment refunded in full is paid again (a lifetime
+ * comes back), and its period gets back the failed money's share of the days refunds took
+ * (`getRestoredDays`, by `partialRefunds`), with `giveBackDays`. A failure billing never counted is
+ * only recorded, so a later snapshot that still counts the refund is corrected by it. A payment
+ * stored before grants were recorded gets its total and status back but no access. Then the charge
+ * state `refundPayment` kept is applied when, corrected, it reports more than billing now counts: a
+ * new refund reported before this failure is taken back once. `duplicate` for a refund already
+ * recorded as failed, `unknown_payment` when billing never recorded the payment. Database errors
+ * propagate.
+ */
+export async function failRefund(ctx, input) {
+    return ctx.db.transaction(async (tx) => {
+        const now = ctx.clock.now();
+        const txCtx = { ...ctx, db: tx };
+        const match = and(eq(payments.provider, input.provider), eq(payments.paymentId, input.paymentId));
+        const [found] = await tx.select({ userId: payments.userId }).from(payments).where(match);
+        if (found === undefined)
+            return ok({ status: "unknown_payment" });
+        const { userId } = found;
+        // The lock order of `refundPayment`: the account, the entitlement, then the payment row.
+        await tx.select({ id: users.id }).from(users).where(eq(users.id, userId)).for("key share");
+        await lockEntitlementRow(tx, userId);
+        const [payment] = await tx.select().from(payments).where(match).for("update");
+        // Erased with the account in the meantime.
+        if (payment === undefined)
+            return ok({ status: "unknown_payment" });
+        const recorded = await tx
+            .insert(refundFailures)
+            .values({
+            paymentId: payment.id,
+            refundId: input.refundId,
+            amount: input.amount,
+            refundCreatedAt: input.refundCreatedAt,
+            failedAt: input.failedAt,
+            recordedAt: now,
+        })
+            .onConflictDoNothing()
+            .returning();
+        if (recorded.length === 0)
+            return ok({ status: "duplicate" });
+        const seenAt = payment.refundsSeenAt;
+        const isCounted = seenAt !== null && input.refundCreatedAt <= seenAt && seenAt < input.failedAt;
+        const restoredAmount = isCounted ? Math.min(input.amount, payment.refundedAmount) : 0;
+        const restored = restoredAmount === 0 ? null : await restoreRefund(txCtx, { payment, restoredAmount, now });
+        const kept = await applyKeptChargeState(txCtx, payment.id, now);
+        return ok({ status: "refund_failed", entitlement: kept?.entitlement ?? restored ?? (await readEntitlement(txCtx, userId, now)) });
+    });
+}
+/** Gives back what a failed refund billing counted took (see `failRefund`); the entitlement when access changed. */
+async function restoreRefund(ctx, { payment, restoredAmount, now }) {
+    const { userId } = payment;
+    const days = getRestoredDays({
+        takenBackDays: payment.takenBackDays,
+        refundedAmount: payment.refundedAmount,
+        restoredAmount,
+        policy: getBillingOptions(ctx.config).partialRefunds,
+    });
+    const isPaid = payment.status === "paid";
+    const grant = readGrant(payment);
+    let entitlement = null;
+    let period = null;
+    if (grant?.kind === "period" && days > 0) {
+        const given = await giveBackDays(ctx, { userId, grant, isPaid, days, now });
+        entitlement = given.entitlement;
+        period = getGrantColumns(given.period);
+    }
+    else if (grant?.kind === "lifetime" && !isPaid) {
+        const changed = await changeEntitlement(ctx, userId, { type: "grant_lifetime" });
+        // The account is locked and a lifetime grant is never refused.
+        if (!changed.ok)
+            throw new Error(`@softure-ai/billing: giving back a refunded lifetime failed with ${changed.error}`);
+        entitlement = changed.value;
+    }
+    // Below the amount again, so a payment refunded in full is paid again.
+    await ctx.db
+        .update(payments)
+        .set({
+        status: "paid",
+        refundedAt: null,
+        refundedAmount: payment.refundedAmount - restoredAmount,
+        takenBackDays: payment.takenBackDays - days,
+        ...(period === null ? {} : { grantedFrom: period.grantedFrom, grantedUntil: period.grantedUntil }),
+    })
+        .where(eq(payments.id, payment.id));
+    return entitlement;
+}
+/** Applies the charge state a payment kept (see `refundPayment`) when it now reports more than billing counts. */
+async function applyKeptChargeState(ctx, paymentId, now) {
+    // Read again: the restore may have changed the row. The caller holds its lock.
+    const [payment] = await ctx.db.select().from(payments).where(eq(payments.id, paymentId));
+    if (payment === undefined || payment.pendingRefundedAmount === null || payment.pendingRefundsSeenAt === null)
+        return null;
+    return applyChargeState(ctx, { payment, state: { reported: payment.pendingRefundedAmount, observedAt: payment.pendingRefundsSeenAt }, now });
+}
+/** Where the account stands at `now`, read inside the caller's transaction. */
+async function readEntitlement(ctx, userId, now) {
+    const record = await findEntitlementRecord(ctx, userId);
+    // The caller's payment row references the account, which its key share lock keeps.
+    if (record === null)
+        throw new Error("@softure-ai/billing: a refunded payment has no account");
+    return resolveEntitlement(record, now, getEntitlementPolicy(ctx.config));
+}
+/** The share a partial refund takes back under the app's policy: none under `keep_access`. */
+function getPartialShare(ctx, share) {
+    return getBillingOptions(ctx.config).partialRefunds === "keep_access" ? { ...share, refunded: 0 } : share;
+}
+/**
+ * One Stripe webhook delivery: the signature is checked before anything is parsed or read, then a
+ * paid checkout is recorded and granted, a refund takes back what its payment granted (a partial
+ * one by the `partialRefunds` policy), and a failed refund gives it back.
+ * `billing.webhook_invalid` for a delivery that is not Stripe's (or a replay past the tolerance).
+ * Database errors propagate (answer 500, Stripe retries).
+ */
+export async function receiveStripeWebhook(ctx, input) {
+    const event = readStripeWebhook({ payload: input.payload, header: input.signature, secret: input.secret, now: ctx.clock.now() });
+    if (!event.ok)
+        return event;
+    const { eventId } = event.value;
+    switch (event.value.type) {
+        case "ignored":
+            return ok({ eventId, outcome: { status: "ignored", reason: event.value.reason } });
+        case "checkout_paid": {
+            const { checkout } = event.value;
+            const recorded = await recordPayment(ctx, { provider: STRIPE_PROVIDER, ...checkout });
+            return ok({ eventId, outcome: recorded.ok ? recorded.value : { status: "refused", error: recorded.error, checkoutId: checkout.checkoutId } });
+        }
+        case "payment_refunded": {
+            const { paymentId, snapshotAt } = event.value;
+            const refunded = await refundPayment(ctx, { provider: STRIPE_PROVIDER, paymentId, observedAt: snapshotAt });
+            return ok({ eventId, outcome: refunded.value });
+        }
+        case "payment_partially_refunded": {
+            const { paymentId, amountRefunded, snapshotAt } = event.value;
+            const refunded = await refundPayment(ctx, { provider: STRIPE_PROVIDER, paymentId, amountRefunded, observedAt: snapshotAt });
+            return ok({ eventId, outcome: refunded.value });
+        }
+        case "refund_failed": {
+            const failed = await failRefund(ctx, { provider: STRIPE_PROVIDER, ...event.value.failure });
+            return ok({ eventId, outcome: failed.value });
+        }
+    }
+}
+//# sourceMappingURL=payments.js.map

package/dist/server/payments.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payments.js","sourceRoot":"","sources":["../../src/server/payments.ts"],"names":[],"mappings":"AAAA,gGAAgG;AAChG,oGAAoG;AACpG,iGAAiG;AACjG,kGAAkG;AAClG,uDAAuD;AACvD,mGAAmG;AACnG,oGAAoG;AACpG,kGAAkG;AAClG,qGAAqG;AACrG,kGAAkG;AAClG,0FAA0F;AAC1F,iGAAiG;AACjG,qGAAqG;AACrG,iGAAiG;AACjG,wBAAwB;AACxB,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAqB,MAAM,kBAAkB,CAAC;AAE9D,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAoB,MAAM,cAAc,CAAC;AACjF,OAAO,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EAAE,iBAAiB,EAAiE,MAAM,sBAAsB,CAAC;AACxH,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAuB,MAAM,mBAAmB,CAAC;AAClG,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAClI,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,uEAAuE;AACvE,MAAM,CAAC,MAAM,eAAe,GAAG,QAAQ,CAAC;AA0BxC;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAmB,EAAE,KAAyB;IAChF,IAAI,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC1G,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACnE,OAAO,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC5B,uEAAuE;QACvE,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACnH,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC,yBAAyB,CAAC,CAAC;QAEjE,8FAA8F;QAC9F,MAAM,QAAQ,GAAG,MAAM,EAAE;aACtB,MAAM,CAAC,QAAQ,CAAC;aAChB,MAAM,CAAC;YACN,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,KAAK,CAAC,UAAU;YAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,GAAG;SACZ,CAAC;aACD,mBAAmB,EAAE;aACrB,SAAS,EAAE,CAAC;QACf,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAE9D,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAChF,0FAA0F;QAC1F,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,KAAK,CAAC,MAAM,iBAAiB,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC/H,MAAM,CAAC,OAAO,CAAC,GAAG,QAAQ,CAAC;QAC3B,MAAM,EAAE,KAAK,EAAE,GAAG,OAAO,CAAC,KAAK,CAAC;QAChC,2EAA2E;QAC3E,IAAI,OAAO,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,KAAK,CAAC,MAAM,uDAAuD,CAAC,CAAC;QACzK,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;QACzF,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC;AAyBD,0DAA0D;AAC1D,MAAM,UAAU,eAAe,CAAC,KAAmB;IACjD,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IACvG,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,CAAC,IAAI,EAAE,YAAY,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;AACrF,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,SAAS,CAAC,GAAiB;IACzC,IAAI,GAAG,CAAC,SAAS,KAAK,UAAU;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC9D,IAAI,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC;IACnK,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAmB,EAAE,KAAyB;IAChF,OAAO,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAClG,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACzF,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAClE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QACzB,6FAA6F;QAC7F,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3F,MAAM,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9E,2CAA2C;QAC3C,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAE9D,MAAM,KAAK,GAAG,EAAE,QAAQ,EAAE,KAAK,CAAC,cAAc,IAAI,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,IAAI,GAAG,EAAE,CAAC;QACxG,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;QACpF,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC;QACzC,MAAM,oBAAoB,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/C,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC;AAoBD;;;;;GAKG;AACH,KAAK,UAAU,gBAAgB,CAAC,GAAmB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAyB;IACjG,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,sBAAsB,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAC3I,MAAM,MAAM,GAAG,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IACvC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,IAAI,OAAO,CAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3F,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC3B,MAAM,aAAa,GAAG,OAAO,CAAC,aAAa,KAAK,IAAI,IAAI,OAAO,CAAC,aAAa,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;IAC5I,MAAM,iBAAiB,GAAG,OAAO,CAAC,oBAAoB,KAAK,IAAI,IAAI,OAAO,CAAC,oBAAoB,IAAI,KAAK,CAAC,UAAU,CAAC;IACpH,MAAM,GAAG,CAAC,EAAE;SACT,MAAM,CAAC,QAAQ,CAAC;SAChB,GAAG,CAAC;QACH,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC;QACjH,aAAa;QACb,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1F,CAAC;SACD,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAEtC,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,KAAK,GAAG,OAAO,CAAC,cAAc,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAC5J,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE;QACrD,MAAM;QACN,KAAK;QACL,GAAG;QACH,KAAK;QACL,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,uBAAuB,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,sBAAsB,CAAC,GAAG,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;KAC5I,CAAC,CAAC;IACH,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QACzC,2GAA2G;QAC3G,MAAM,YAAY,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnG,MAAM,GAAG,CAAC,EAAE;aACT,MAAM,CAAC,QAAQ,CAAC;aAChB,GAAG,CAAC,EAAE,YAAY,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,GAAG,IAAI,EAAE,CAAC;aAClE,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,oBAAoB,EAAE,WAAW,EAAE,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,oBAAoB,CAAC,EAAa,EAAE,OAAmB,EAAE,KAAkB;IACxF,MAAM,OAAO,GAAG,CAAC,MAAmB,EAAE,EAAE,CAAC,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC;IACtF,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,oBAAoB,CAAC;QAAE,OAAO;IACtF,MAAM,EAAE;SACL,MAAM,CAAC,QAAQ,CAAC;SAChB,GAAG,CAAC,EAAE,qBAAqB,EAAE,KAAK,CAAC,QAAQ,EAAE,oBAAoB,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;SACtF,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,2HAA2H;AAC3H,KAAK,UAAU,sBAAsB,CAAC,EAAa,EAAE,SAAiB,EAAE,UAAgB;IACtF,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC,EAAE,MAAM,EAAE,GAAG,CAAQ,gBAAgB,cAAc,CAAC,MAAM,OAAO,EAAE,CAAC;SAC3E,IAAI,CAAC,cAAc,CAAC;SACpB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC,eAAe,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IACjJ,OAAO,MAAM,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;AAClC,CAAC;AAOD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAmB,EAAE,KAAsB;IAC1E,OAAO,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACrC,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAClG,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACzF,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAClE,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QACzB,yFAAyF;QACzF,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAC3F,MAAM,kBAAkB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACrC,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC9E,2CAA2C;QAC3C,IAAI,OAAO,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAEpE,MAAM,QAAQ,GAAG,MAAM,EAAE;aACtB,MAAM,CAAC,cAAc,CAAC;aACtB,MAAM,CAAC;YACN,SAAS,EAAE,OAAO,CAAC,EAAE;YACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,eAAe,EAAE,KAAK,CAAC,eAAe;YACtC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,UAAU,EAAE,GAAG;SAChB,CAAC;aACD,mBAAmB,EAAE;aACrB,SAAS,EAAE,CAAC;QACf,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAE9D,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;QACrC,MAAM,SAAS,GAAG,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,eAAe,IAAI,MAAM,IAAI,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC;QAChG,MAAM,cAAc,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,MAAM,QAAQ,GAAG,cAAc,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5G,MAAM,IAAI,GAAG,MAAM,oBAAoB,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QAChE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,IAAI,QAAQ,IAAI,CAAC,MAAM,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IACpI,CAAC,CAAC,CAAC;AACL,CAAC;AAUD,oHAAoH;AACpH,KAAK,UAAU,aAAa,CAAC,GAAmB,EAAE,EAAE,OAAO,EAAE,cAAc,EAAE,GAAG,EAAsB;IACpG,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAC3B,MAAM,IAAI,GAAG,eAAe,CAAC;QAC3B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,cAAc;QACd,MAAM,EAAE,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,cAAc;KACrD,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,KAAK,MAAM,CAAC;IACzC,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IACjC,IAAI,WAAW,GAAuB,IAAI,CAAC;IAC3C,IAAI,MAAM,GAAwB,IAAI,CAAC;IACvC,IAAI,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5E,WAAW,GAAG,KAAK,CAAC,WAAW,CAAC;QAChC,MAAM,GAAG,eAAe,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzC,CAAC;SAAM,IAAI,KAAK,EAAE,IAAI,KAAK,UAAU,IAAI,CAAC,MAAM,EAAE,CAAC;QACjD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,CAAC,CAAC;QACjF,+DAA+D;QAC/D,IAAI,CAAC,OAAO,CAAC,EAAE;YAAE,MAAM,IAAI,KAAK,CAAC,oEAAoE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QACtH,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC;IAC9B,CAAC;IACD,uEAAuE;IACvE,MAAM,GAAG,CAAC,EAAE;SACT,MAAM,CAAC,QAAQ,CAAC;SAChB,GAAG,CAAC;QACH,MAAM,EAAE,MAAM;QACd,UAAU,EAAE,IAAI;QAChB,cAAc,EAAE,OAAO,CAAC,cAAc,GAAG,cAAc;QACvD,aAAa,EAAE,OAAO,CAAC,aAAa,GAAG,IAAI;QAC3C,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;KACnG,CAAC;SACD,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IACtC,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,kHAAkH;AAClH,KAAK,UAAU,oBAAoB,CAAC,GAAmB,EAAE,SAAiB,EAAE,GAAS;IACnF,+EAA+E;IAC/E,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC;IACzF,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,qBAAqB,KAAK,IAAI,IAAI,OAAO,CAAC,oBAAoB,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC1H,OAAO,gBAAgB,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,qBAAqB,EAAE,UAAU,EAAE,OAAO,CAAC,oBAAoB,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;AAC/I,CAAC;AAED,+EAA+E;AAC/E,KAAK,UAAU,eAAe,CAAC,GAAmB,EAAE,MAAc,EAAE,GAAS;IAC3E,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACxD,mFAAmF;IACnF,IAAI,MAAM,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC/F,OAAO,kBAAkB,CAAC,MAAM,EAAE,GAAG,EAAE,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3E,CAAC;AAED,8FAA8F;AAC9F,SAAS,eAAe,CAAC,GAAmB,EAAE,KAAkB;IAC9D,OAAO,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,cAAc,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AAC5G,CAAC;AAmBD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAmB,EAAE,KAAgC;IAC9F,MAAM,KAAK,GAAG,iBAAiB,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACjI,IAAI,CAAC,KAAK,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC;IAChC,QAAQ,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;QACzB,KAAK,SAAS;YACZ,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACrF,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC;YACjC,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;YACtF,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;QAChJ,CAAC;QACD,KAAK,kBAAkB,CAAC,CAAC,CAAC;YACxB,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC;YAC9C,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;YAC5G,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,KAAK,4BAA4B,CAAC,CAAC,CAAC;YAClC,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC;YAC9D,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC;YAC5H,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5F,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/server/plans.d.ts

@@ -0,0 +1,50 @@
+import { type Err, type Ok, type SoftureConfig } from "@softure-ai/core";
+import type { BillingErrorCode, Entitlement, PaymentErrorCode, PaymentGrant, Plan } from "../contract.js";
+import { type InvoiceDetailsError, type InvoiceInput } from "../invoice.js";
+import type { PaymentAccount, PaymentProvider, PaymentStart } from "../payment.js";
+import { type BillingContext } from "./entitlements.js";
+/** The plans of `billing({ plans })`, in their order. */
+export declare function getBillingPlans(config: SoftureConfig): readonly Plan[];
+/** The provider of `billing({ payment })`. Throws when the app set none: a payment page without one is a bug. */
+export declare function getPaymentProvider(config: SoftureConfig): PaymentProvider;
+/** The account with this email (compared trimmed and lower-cased, as auth stores it), or null. */
+export declare function findAccountByEmail(ctx: Pick<BillingContext, "db">, email: string): Promise<PaymentAccount | null>;
+/** The account with this id, or null (also for an id that is not a uuid). */
+export declare function findAccountById(ctx: Pick<BillingContext, "db">, id: string): Promise<PaymentAccount | null>;
+/** Where the account stands after a plan grant, and what the grant added (null when it added nothing). */
+export interface AppliedPlan {
+    readonly entitlement: Entitlement;
+    readonly grant: PaymentGrant | null;
+}
+/**
+ * `grantPlan` that also says what the grant added, for the payment row that pays for it. The event
+ * is computed under the entitlement's lock and may be computed twice (a concurrent first change), so
+ * the grant is taken from the last computation, the one applied.
+ */
+export declare function applyPlan(ctx: BillingContext, userId: string, planId: string): Promise<Ok<AppliedPlan> | Err<BillingErrorCode | "billing.plan_unknown">>;
+/**
+ * Grants one payment of the plan: a paid period that starts when the account's current access ends,
+ * or lifetime access. Computed under the entitlement's lock, so two grants at once give two periods.
+ * It records nothing: a grant made here is not in the account's history and cannot be revoked; an
+ * admin's grant goes through `grantPlanManually`.
+ */
+export declare function grantPlan(ctx: BillingContext, userId: string, planId: string): Promise<Ok<Entitlement> | Err<BillingErrorCode | "billing.plan_unknown">>;
+export interface StartPaymentInput {
+    readonly account: PaymentAccount;
+    readonly planId: string;
+    /** What the form sent; ignored when the provider collects its own details. */
+    readonly invoice: InvoiceInput;
+}
+export type StartPaymentResult = Ok<PaymentStart> | Err<Exclude<PaymentErrorCode, "billing.invoice_details_invalid"> | "security.rate_limited"> | InvoiceDetailsError;
+/**
+ * Starts paying for a plan: counts `billing-payment` per account first, checks the plan, that the
+ * account has no lifetime access yet and, for a provider that needs them, the invoice details, then
+ * starts the provider. A provider that hands requests over (`handsOverRequests`, the manual adapter)
+ * gets the request stored first and is called once per open request: asking again refreshes the
+ * stored request and answers `requested` without a second hand-over, and a hand-over that failed
+ * (an `Err` or a throw) is released, so the next ask tries again; a claim left without an answer (the
+ * process stopped) is taken over by an ask a minute later. Database errors and provider
+ * throws propagate; a provider whose answer contradicts `handsOverRequests` throws.
+ */
+export declare function startPayment(ctx: BillingContext, input: StartPaymentInput): Promise<StartPaymentResult>;
+//# sourceMappingURL=plans.d.ts.map

package/dist/server/plans.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plans.d.ts","sourceRoot":"","sources":["../../src/server/plans.ts"],"names":[],"mappings":"AAGA,OAAO,EAAW,KAAK,GAAG,EAAE,KAAK,EAAE,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGlF,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAoB,gBAAgB,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAC;AAC5H,OAAO,EAAuB,KAAK,mBAAmB,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AACjG,OAAO,KAAK,EAAkB,cAAc,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAGnG,OAAO,EAA4C,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAMlG,yDAAyD;AACzD,wBAAgB,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,SAAS,IAAI,EAAE,CAEtE;AAED,iHAAiH;AACjH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,aAAa,GAAG,eAAe,CAIzE;AAED,kGAAkG;AAClG,wBAAsB,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAOvH;AAED,6EAA6E;AAC7E,wBAAsB,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC,CAIjH;AAED,0GAA0G;AAC1G,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;CACrC;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,gBAAgB,GAAG,sBAAsB,CAAC,CAAC,CAU9J;AAED;;;;;GAKG;AACH,wBAAsB,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,WAAW,CAAC,GAAG,GAAG,CAAC,gBAAgB,GAAG,sBAAsB,CAAC,CAAC,CAG9J;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;CAChC;AAED,MAAM,MAAM,kBAAkB,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,gBAAgB,EAAE,iCAAiC,CAAC,GAAG,uBAAuB,CAAC,GAAG,mBAAmB,CAAC;AAEtK;;;;;;;;;GASG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA2C7G"}