@softure-ai/billing 0.0.0-stage → 0.1.6

package/dist/server/plans.js

@@ -0,0 +1,129 @@
+// Plans on the server: the configured list, granting a plan to an account (the one path the
+// manual admin page and a provider's webhook take) and starting a payment through the provider.
+import { users } from "@softure-ai/auth";
+import { err, ok } from "@softure-ai/core";
+import { consumeRateLimit, subjectKey } from "@softure-ai/security/server";
+import { eq } from "drizzle-orm";
+import { parseInvoiceDetails } from "../invoice.js";
+import { findPlan, getPlanGrant } from "../plans.js";
+import { getPaymentGrant } from "../refund.js";
+import { changeEntitlement, findEntitlementRecord } from "./entitlements.js";
+import { getBillingOptions, getBillingRoutes } from "./options.js";
+import { claimHandOver, confirmHandOver, recordPaymentRequest, releaseHandOver } from "./requests.js";
+import { isUserId } from "./user-id.js";
+import { assertPaymentSetup, PAYMENT_BUCKET } from "./setup.js";
+/** The plans of `billing({ plans })`, in their order. */
+export function getBillingPlans(config) {
+    return getBillingOptions(config).plans;
+}
+/** The provider of `billing({ payment })`. Throws when the app set none: a payment page without one is a bug. */
+export function getPaymentProvider(config) {
+    const provider = getBillingOptions(config).payment;
+    if (provider === undefined)
+        throw new Error("@softure-ai/billing: billing({ payment }) is not set; the payment page needs a provider such as manual()");
+    return provider;
+}
+/** The account with this email (compared trimmed and lower-cased, as auth stores it), or null. */
+export async function findAccountByEmail(ctx, email) {
+    const [row] = await ctx.db
+        .select({ id: users.id, email: users.email })
+        .from(users)
+        .where(eq(users.email, email.trim().toLowerCase()))
+        .limit(1);
+    return row ?? null;
+}
+/** The account with this id, or null (also for an id that is not a uuid). */
+export async function findAccountById(ctx, id) {
+    if (!isUserId(id))
+        return null;
+    const [row] = await ctx.db.select({ id: users.id, email: users.email }).from(users).where(eq(users.id, id));
+    return row ?? null;
+}
+/**
+ * `grantPlan` that also says what the grant added, for the payment row that pays for it. The event
+ * is computed under the entitlement's lock and may be computed twice (a concurrent first change), so
+ * the grant is taken from the last computation, the one applied.
+ */
+export async function applyPlan(ctx, userId, planId) {
+    const plan = findPlan(getBillingPlans(ctx.config), planId);
+    if (plan === undefined)
+        return err("billing.plan_unknown");
+    let grant = null;
+    const changed = await changeEntitlement(ctx, userId, (record, now) => {
+        const event = getPlanGrant(record, plan, now, ctx.config.timezone);
+        grant = getPaymentGrant(record, event, now);
+        return event;
+    });
+    return changed.ok ? ok({ entitlement: changed.value, grant }) : changed;
+}
+/**
+ * Grants one payment of the plan: a paid period that starts when the account's current access ends,
+ * or lifetime access. Computed under the entitlement's lock, so two grants at once give two periods.
+ * It records nothing: a grant made here is not in the account's history and cannot be revoked; an
+ * admin's grant goes through `grantPlanManually`.
+ */
+export async function grantPlan(ctx, userId, planId) {
+    const applied = await applyPlan(ctx, userId, planId);
+    return applied.ok ? ok(applied.value.entitlement) : applied;
+}
+/**
+ * Starts paying for a plan: counts `billing-payment` per account first, checks the plan, that the
+ * account has no lifetime access yet and, for a provider that needs them, the invoice details, then
+ * starts the provider. A provider that hands requests over (`handsOverRequests`, the manual adapter)
+ * gets the request stored first and is called once per open request: asking again refreshes the
+ * stored request and answers `requested` without a second hand-over, and a hand-over that failed
+ * (an `Err` or a throw) is released, so the next ask tries again; a claim left without an answer (the
+ * process stopped) is taken over by an ask a minute later. Database errors and provider
+ * throws propagate; a provider whose answer contradicts `handsOverRequests` throws.
+ */
+export async function startPayment(ctx, input) {
+    assertPaymentSetup(ctx.config);
+    const provider = getPaymentProvider(ctx.config);
+    const limited = await consumeRateLimit(ctx, { bucket: PAYMENT_BUCKET, key: subjectKey(`account:${input.account.id}`) });
+    if (!limited.ok)
+        return err("security.rate_limited");
+    const plan = findPlan(getBillingPlans(ctx.config), input.planId);
+    if (plan === undefined)
+        return err("billing.plan_unknown");
+    const record = await findEntitlementRecord(ctx, input.account.id);
+    if (record?.isLifetime === true)
+        return err("billing.lifetime_active");
+    let invoice = null;
+    if (provider.collectsInvoiceDetails) {
+        const parsed = parseInvoiceDetails(input.invoice);
+        if (!parsed.ok)
+            return parsed;
+        invoice = parsed.value;
+    }
+    const returnUrl = new URL(getBillingRoutes(ctx.config).payment, ctx.config.appOrigin).toString();
+    const request = { plan, account: input.account, invoice, returnUrl };
+    if (!provider.handsOverRequests) {
+        const started = await provider.startPayment(ctx, request);
+        if (started.ok && started.value.type === "requested")
+            throw new Error(`@softure-ai/billing: provider "${provider.name}" answered requested but does not set handsOverRequests`);
+        return started;
+    }
+    const requestId = await recordPaymentRequest(ctx, { userId: input.account.id, planId: plan.id, invoice, price: plan.price });
+    const claimedAt = await claimHandOver(ctx, requestId);
+    // Handed over before (asking again refreshed its details), or being handed over by a concurrent ask
+    // whose claim is younger than a minute.
+    if (claimedAt === null)
+        return ok({ type: "requested" });
+    let started;
+    try {
+        started = await provider.startPayment(ctx, request);
+    }
+    catch (error) {
+        await releaseHandOver(ctx, requestId, claimedAt);
+        throw error;
+    }
+    if (!started.ok) {
+        await releaseHandOver(ctx, requestId, claimedAt);
+        return started;
+    }
+    if (started.value.type !== "requested")
+        throw new Error(`@softure-ai/billing: provider "${provider.name}" sets handsOverRequests but answered ${started.value.type}`);
+    await confirmHandOver(ctx, requestId);
+    return started;
+}
+//# sourceMappingURL=plans.js.map

package/dist/server/plans.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plans.js","sourceRoot":"","sources":["../../src/server/plans.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,gGAAgG;AAChG,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAyC,MAAM,kBAAkB,CAAC;AAClF,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAC3E,OAAO,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAA+C,MAAM,eAAe,CAAC;AAEjG,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAuB,MAAM,mBAAmB,CAAC;AAClG,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACnE,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACtG,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAEhE,yDAAyD;AACzD,MAAM,UAAU,eAAe,CAAC,MAAqB;IACnD,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC;AACzC,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,kBAAkB,CAAC,MAAqB;IACtD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;IACnD,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,0GAA0G,CAAC,CAAC;IACxJ,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAA+B,EAAE,KAAa;IACrF,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE;SACvB,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;SAC5C,IAAI,CAAC,KAAK,CAAC;SACX,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;SAClD,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAED,6EAA6E;AAC7E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAA+B,EAAE,EAAU;IAC/E,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;IAC5G,OAAO,GAAG,IAAI,IAAI,CAAC;AACrB,CAAC;AAQD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAmB,EAAE,MAAc,EAAE,MAAc;IACjF,MAAM,IAAI,GAAG,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC3D,IAAI,KAAK,GAAG,IAA2B,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,MAAM,EAAE,GAAG,EAAoB,EAAE;QACrF,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACnE,KAAK,GAAG,eAAe,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;QAC5C,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC1E,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,GAAmB,EAAE,MAAc,EAAE,MAAc;IACjF,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACrD,OAAO,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9D,CAAC;AAWD;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAmB,EAAE,KAAwB;IAC9E,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,cAAc,EAAE,GAAG,EAAE,UAAU,CAAC,WAAW,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC;IACxH,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC,uBAAuB,CAAC,CAAC;IAErD,MAAM,IAAI,GAAG,QAAQ,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IACjE,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,GAAG,CAAC,sBAAsB,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAClE,IAAI,MAAM,EAAE,UAAU,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC,yBAAyB,CAAC,CAAC;IACvE,IAAI,OAAO,GAA0B,IAAI,CAAC;IAC1C,IAAI,QAAQ,CAAC,sBAAsB,EAAE,CAAC;QACpC,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,MAAM,CAAC;QAC9B,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC;IACzB,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,CAAC;IACjG,MAAM,OAAO,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IACrE,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1D,IAAI,OAAO,CAAC,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW;YAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,CAAC,IAAI,yDAAyD,CAAC,CAAC;QAChL,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,oBAAoB,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC;IAC7H,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACtD,oGAAoG;IACpG,wCAAwC;IACxC,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IACzD,IAAI,OAA6D,CAAC;IAClE,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACjD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAChB,MAAM,eAAe,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,QAAQ,CAAC,IAAI,yCAAyC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACtK,MAAM,eAAe,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACtC,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/server/privacy.d.ts

@@ -0,0 +1,77 @@
+import { type ModuleContext, type Ok, type PrivacyContributor } from "@softure-ai/core";
+/** One provider payment, as it appears in an export. */
+export interface BillingPaymentData {
+    readonly provider: string;
+    readonly checkoutId: string;
+    readonly paymentId: string | null;
+    readonly planId: string;
+    readonly amount: number;
+    readonly currency: string;
+    readonly status: "paid" | "refunded";
+    readonly paidAt: Date;
+    readonly refundedAt: Date | null;
+    /** The total refunded so far, in the currency's minor unit. */
+    readonly refundedAmount: number;
+    /** What the payment granted: `period` (from, until) or `lifetime`; null when recorded before grants were. */
+    readonly grantKind: "period" | "lifetime" | null;
+    readonly grantedFrom: Date | null;
+    readonly grantedUntil: Date | null;
+}
+/** One provider refund that failed, as it appears in an export. */
+export interface BillingRefundFailureData {
+    /** The provider's payment id of the refunded payment (`BillingPaymentData.paymentId`). */
+    readonly paymentId: string | null;
+    readonly refundId: string;
+    /** What the refund was for, in the currency's minor unit. */
+    readonly amount: number;
+    readonly refundCreatedAt: Date;
+    readonly failedAt: Date;
+}
+/** One invoice request, as it appears in an export; the details are gone once it was closed. */
+export interface BillingPaymentRequestData {
+    readonly planId: string;
+    readonly invoiceName: string | null;
+    readonly invoiceTaxId: string | null;
+    readonly invoiceAddress: string | null;
+    /** The plan's price the request quoted, in the currency's minor unit; null before prices were recorded. */
+    readonly amount: number | null;
+    readonly currency: string | null;
+    readonly status: "open" | "granted" | "dismissed" | "expired";
+    readonly requestedAt: Date;
+    readonly closedAt: Date | null;
+}
+/** One plan granted by hand, as it appears in an export. */
+export interface BillingManualGrantData {
+    readonly planId: string;
+    readonly grantedAt: Date;
+    readonly grantKind: "period" | "lifetime";
+    readonly grantedFrom: Date | null;
+    readonly grantedUntil: Date | null;
+    readonly status: "active" | "revoked";
+    readonly revokedAt: Date | null;
+    /** What it was granted for, in the currency's minor unit; null before prices were recorded. */
+    readonly amount: number | null;
+    readonly currency: string | null;
+}
+/** What billing holds about one user, as it appears in their export. */
+export interface BillingUserData {
+    readonly entitlement: {
+        readonly trialEndsAt: Date;
+        readonly paidUntil: Date | null;
+        readonly isLifetime: boolean;
+        readonly createdAt: Date;
+        readonly updatedAt: Date;
+    } | null;
+    /** Oldest first. */
+    readonly payments: readonly BillingPaymentData[];
+    /** Oldest first. */
+    readonly refundFailures: readonly BillingRefundFailureData[];
+    /** Oldest first. */
+    readonly paymentRequests: readonly BillingPaymentRequestData[];
+    /** Oldest first. */
+    readonly manualGrants: readonly BillingManualGrantData[];
+}
+export declare function exportBillingUserData(context: ModuleContext, userId: string): Promise<Ok<BillingUserData>>;
+export declare function deleteBillingUserData(context: ModuleContext, userId: string): Promise<Ok<undefined>>;
+export declare const billingPrivacyContributor: PrivacyContributor;
+//# sourceMappingURL=privacy.d.ts.map

package/dist/server/privacy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.d.ts","sourceRoot":"","sources":["../../src/server/privacy.ts"],"names":[],"mappings":"AAOA,OAAO,EAAM,KAAK,aAAa,EAAE,KAAK,EAAE,EAAE,KAAK,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAM5F,wDAAwD;AACxD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,IAAI,GAAG,IAAI,CAAC;IACjC,+DAA+D;IAC/D,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,6GAA6G;IAC7G,QAAQ,CAAC,SAAS,EAAE,QAAQ,GAAG,UAAU,GAAG,IAAI,CAAC;IACjD,QAAQ,CAAC,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,IAAI,GAAG,IAAI,CAAC;CACpC;AAED,mEAAmE;AACnE,MAAM,WAAW,wBAAwB;IACvC,0FAA0F;IAC1F,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,EAAE,IAAI,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;CACzB;AAED,gGAAgG;AAChG,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IACvC,2GAA2G;IAC3G,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,GAAG,SAAS,CAAC;IAC9D,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC;CAChC;AAED,4DAA4D;AAC5D,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,QAAQ,GAAG,UAAU,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,IAAI,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,QAAQ,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IAChC,+FAA+F;IAC/F,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,wEAAwE;AACxE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,WAAW,EAAE;QACpB,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;QAC3B,QAAQ,CAAC,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;QAChC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;QAC7B,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;QACzB,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC;KAC1B,GAAG,IAAI,CAAC;IACT,oBAAoB;IACpB,QAAQ,CAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACjD,oBAAoB;IACpB,QAAQ,CAAC,cAAc,EAAE,SAAS,wBAAwB,EAAE,CAAC;IAC7D,oBAAoB;IACpB,QAAQ,CAAC,eAAe,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC/D,oBAAoB;IACpB,QAAQ,CAAC,YAAY,EAAE,SAAS,sBAAsB,EAAE,CAAC;CAC1D;AAID,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CA4EhH;AAED,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAa1G;AAED,eAAO,MAAM,yBAAyB,EAAE,kBAGvC,CAAC"}

package/dist/server/privacy.js

@@ -0,0 +1,110 @@
+// The billing part of a GDPR export and deletion (`@softure-ai/privacy`): the account's entitlement
+// row, its provider payments and their failed refunds, its invoice requests and the plans granted
+// to it by hand. An account
+// without an entitlement row has no stored entitlement (its trial is derived from the account). The
+// provider keeps its own records of the payments. Which admin granted or revoked a plan is the
+// admin's data, not the account's, and is left out of the export.
+import { users } from "@softure-ai/auth";
+import { ok } from "@softure-ai/core";
+import { asc, eq } from "drizzle-orm";
+import { entitlements, manualGrants, paymentRequests, payments, refundFailures } from "../schema.js";
+import { isUserId } from "./user-id.js";
+const EMPTY_USER_DATA = { entitlement: null, payments: [], refundFailures: [], paymentRequests: [], manualGrants: [] };
+export async function exportBillingUserData(context, userId) {
+    if (!isUserId(userId))
+        return ok(EMPTY_USER_DATA);
+    // Core types `db` as unknown; privacy passes the @softure-ai/db handle or its transaction.
+    const db = context.db;
+    const [row] = await db
+        .select({
+        trialEndsAt: entitlements.trialEndsAt,
+        paidUntil: entitlements.paidUntil,
+        isLifetime: entitlements.isLifetime,
+        createdAt: entitlements.createdAt,
+        updatedAt: entitlements.updatedAt,
+    })
+        .from(entitlements)
+        .where(eq(entitlements.userId, userId));
+    const paymentRows = await db
+        .select({
+        provider: payments.provider,
+        checkoutId: payments.checkoutId,
+        paymentId: payments.paymentId,
+        planId: payments.planId,
+        amount: payments.amount,
+        currency: payments.currency,
+        status: payments.status,
+        paidAt: payments.paidAt,
+        refundedAt: payments.refundedAt,
+        refundedAmount: payments.refundedAmount,
+        grantKind: payments.grantKind,
+        grantedFrom: payments.grantedFrom,
+        grantedUntil: payments.grantedUntil,
+    })
+        .from(payments)
+        .where(eq(payments.userId, userId))
+        .orderBy(asc(payments.paidAt), asc(payments.id));
+    const failureRows = await db
+        .select({
+        paymentId: payments.paymentId,
+        refundId: refundFailures.refundId,
+        amount: refundFailures.amount,
+        refundCreatedAt: refundFailures.refundCreatedAt,
+        failedAt: refundFailures.failedAt,
+    })
+        .from(refundFailures)
+        .innerJoin(payments, eq(payments.id, refundFailures.paymentId))
+        .where(eq(payments.userId, userId))
+        .orderBy(asc(refundFailures.failedAt), asc(refundFailures.refundId));
+    const requestRows = await db
+        .select({
+        planId: paymentRequests.planId,
+        invoiceName: paymentRequests.invoiceName,
+        invoiceTaxId: paymentRequests.invoiceTaxId,
+        invoiceAddress: paymentRequests.invoiceAddress,
+        amount: paymentRequests.amount,
+        currency: paymentRequests.currency,
+        status: paymentRequests.status,
+        requestedAt: paymentRequests.requestedAt,
+        closedAt: paymentRequests.closedAt,
+    })
+        .from(paymentRequests)
+        .where(eq(paymentRequests.userId, userId))
+        .orderBy(asc(paymentRequests.requestedAt), asc(paymentRequests.id));
+    const grantRows = await db
+        .select({
+        planId: manualGrants.planId,
+        grantedAt: manualGrants.grantedAt,
+        grantKind: manualGrants.grantKind,
+        grantedFrom: manualGrants.grantedFrom,
+        grantedUntil: manualGrants.grantedUntil,
+        status: manualGrants.status,
+        revokedAt: manualGrants.revokedAt,
+        amount: manualGrants.amount,
+        currency: manualGrants.currency,
+    })
+        .from(manualGrants)
+        .where(eq(manualGrants.userId, userId))
+        .orderBy(asc(manualGrants.grantedAt), asc(manualGrants.id));
+    return ok({ entitlement: row ?? null, payments: paymentRows, refundFailures: failureRows, paymentRequests: requestRows, manualGrants: grantRows });
+}
+export async function deleteBillingUserData(context, userId) {
+    if (!isUserId(userId))
+        return ok();
+    const db = context.db;
+    // Lock the account first, in the order `changeEntitlement` takes its locks (account, then
+    // entitlement): a change running at the same time then waits instead of deadlocking the erase.
+    await db.select({ id: users.id }).from(users).where(eq(users.id, userId)).for("update");
+    await db.delete(entitlements).where(eq(entitlements.userId, userId));
+    // Their failed refunds go with them (ON DELETE CASCADE).
+    await db.delete(payments).where(eq(payments.userId, userId));
+    // Grants first: they reference the requests they answered.
+    await db.delete(manualGrants).where(eq(manualGrants.userId, userId));
+    await db.delete(paymentRequests).where(eq(paymentRequests.userId, userId));
+    return ok();
+}
+export const billingPrivacyContributor = {
+    exportUserData: exportBillingUserData,
+    deleteUserData: deleteBillingUserData,
+};
+//# sourceMappingURL=privacy.js.map

package/dist/server/privacy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privacy.js","sourceRoot":"","sources":["../../src/server/privacy.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,kGAAkG;AAClG,4BAA4B;AAC5B,oGAAoG;AACpG,+FAA+F;AAC/F,kEAAkE;AAClE,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,EAAE,EAAwD,MAAM,kBAAkB,CAAC;AAE5F,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AACrG,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AA+ExC,MAAM,eAAe,GAAoB,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,cAAc,EAAE,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;AAExI,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAsB,EAAE,MAAc;IAChF,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,CAAC,eAAe,CAAC,CAAC;IAClD,2FAA2F;IAC3F,MAAM,EAAE,GAAG,OAAO,CAAC,EAAe,CAAC;IACnC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC;QACN,WAAW,EAAE,YAAY,CAAC,WAAW;QACrC,SAAS,EAAE,YAAY,CAAC,SAAS;QACjC,UAAU,EAAE,YAAY,CAAC,UAAU;QACnC,SAAS,EAAE,YAAY,CAAC,SAAS;QACjC,SAAS,EAAE,YAAY,CAAC,SAAS;KAClC,CAAC;SACD,IAAI,CAAC,YAAY,CAAC;SAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1C,MAAM,WAAW,GAAG,MAAM,EAAE;SACzB,MAAM,CAAC;QACN,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,cAAc,EAAE,QAAQ,CAAC,cAAc;QACvC,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,YAAY,EAAE,QAAQ,CAAC,YAAY;KACpC,CAAC;SACD,IAAI,CAAC,QAAQ,CAAC;SACd,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAClC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,MAAM,EAAE;SACzB,MAAM,CAAC;QACN,SAAS,EAAE,QAAQ,CAAC,SAAS;QAC7B,QAAQ,EAAE,cAAc,CAAC,QAAQ;QACjC,MAAM,EAAE,cAAc,CAAC,MAAM;QAC7B,eAAe,EAAE,cAAc,CAAC,eAAe;QAC/C,QAAQ,EAAE,cAAc,CAAC,QAAQ;KAClC,CAAC;SACD,IAAI,CAAC,cAAc,CAAC;SACpB,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,cAAc,CAAC,SAAS,CAAC,CAAC;SAC9D,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SAClC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvE,MAAM,WAAW,GAAG,MAAM,EAAE;SACzB,MAAM,CAAC;QACN,MAAM,EAAE,eAAe,CAAC,MAAM;QAC9B,WAAW,EAAE,eAAe,CAAC,WAAW;QACxC,YAAY,EAAE,eAAe,CAAC,YAAY;QAC1C,cAAc,EAAE,eAAe,CAAC,cAAc;QAC9C,MAAM,EAAE,eAAe,CAAC,MAAM;QAC9B,QAAQ,EAAE,eAAe,CAAC,QAAQ;QAClC,MAAM,EAAE,eAAe,CAAC,MAAM;QAC9B,WAAW,EAAE,eAAe,CAAC,WAAW;QACxC,QAAQ,EAAE,eAAe,CAAC,QAAQ;KACnC,CAAC;SACD,IAAI,CAAC,eAAe,CAAC;SACrB,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SACzC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC;IACtE,MAAM,SAAS,GAAG,MAAM,EAAE;SACvB,MAAM,CAAC;QACN,MAAM,EAAE,YAAY,CAAC,MAAM;QAC3B,SAAS,EAAE,YAAY,CAAC,SAAS;QACjC,SAAS,EAAE,YAAY,CAAC,SAAS;QACjC,WAAW,EAAE,YAAY,CAAC,WAAW;QACrC,YAAY,EAAE,YAAY,CAAC,YAAY;QACvC,MAAM,EAAE,YAAY,CAAC,MAAM;QAC3B,SAAS,EAAE,YAAY,CAAC,SAAS;QACjC,MAAM,EAAE,YAAY,CAAC,MAAM;QAC3B,QAAQ,EAAE,YAAY,CAAC,QAAQ;KAChC,CAAC;SACD,IAAI,CAAC,YAAY,CAAC;SAClB,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SACtC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,OAAO,EAAE,CAAC,EAAE,WAAW,EAAE,GAAG,IAAI,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,WAAW,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;AACrJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAsB,EAAE,MAAc;IAChF,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,EAAE,EAAE,CAAC;IACnC,MAAM,EAAE,GAAG,OAAO,CAAC,EAAe,CAAC;IACnC,0FAA0F;IAC1F,+FAA+F;IAC/F,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxF,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACrE,yDAAyD;IACzD,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7D,2DAA2D;IAC3D,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACrE,MAAM,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC3E,OAAO,EAAE,EAAE,CAAC;AACd,CAAC;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAuB;IAC3D,cAAc,EAAE,qBAAqB;IACrC,cAAc,EAAE,qBAAqB;CACtC,CAAC"}

package/dist/server/reminders.d.ts

@@ -0,0 +1,20 @@
+import { type AccessReminderKind } from "../reminder.js";
+import { type BillingContext } from "./entitlements.js";
+export interface FindAccessRemindersOptions {
+    /** An ended mail is due from the day access ended through this many local days after it. Default 3. */
+    readonly catchUpDays?: number;
+}
+export interface AccessReminderDue {
+    readonly userId: string;
+    readonly email: string;
+    readonly kind: AccessReminderKind;
+    /** The first instant without the access the mail is about. */
+    readonly endsAt: Date;
+}
+/**
+ * Every account due a reminder at the clock's now, ordered by end, then account. Reads only.
+ * Throws for a `catchUpDays` that is not an integer from 0 to 365 (a caller bug); database errors
+ * propagate.
+ */
+export declare function findAccessReminders(ctx: BillingContext, options?: FindAccessRemindersOptions): Promise<AccessReminderDue[]>;
+//# sourceMappingURL=reminders.d.ts.map

package/dist/server/reminders.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reminders.d.ts","sourceRoot":"","sources":["../../src/server/reminders.ts"],"names":[],"mappings":"AAUA,OAAO,EAA+D,KAAK,kBAAkB,EAAE,MAAM,gBAAgB,CAAC;AAEtH,OAAO,EAAsC,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAG5F,MAAM,WAAW,0BAA0B;IACzC,uGAAuG;IACvG,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;CACvB;AASD;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,GAAE,0BAA+B,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAerI"}

package/dist/server/reminders.js

@@ -0,0 +1,85 @@
+// The accounts due a reminder mail now. Two bounded range queries find the candidates: stored rows
+// whose trial or dated paid access ends inside the widest window, and accounts without a row whose
+// derived trial does (its end day is the creation day plus `trial.days`, so the window is a range
+// on `auth.users.created_at`, indexed by auth, plus every account under `trial.startsAt` when the
+// floor's trial ends in it). The pure rule then decides each candidate exactly,
+// so the ranges only need to be wide enough, never exact.
+import { users } from "@softure-ai/auth";
+import { and, asc, eq, gte, isNull, lt, or } from "drizzle-orm";
+import { getDayNumber, getStartOfDay } from "../calendar.js";
+import { DEFAULT_CATCH_UP_DAYS, getAccessReminder, MAX_CATCH_UP_DAYS } from "../reminder.js";
+import { entitlements } from "../schema.js";
+import { getDefaultRecord, getTrialFloorDay } from "./entitlements.js";
+import { getBillingOptions, getEntitlementPolicy } from "./options.js";
+/**
+ * Every account due a reminder at the clock's now, ordered by end, then account. Reads only.
+ * Throws for a `catchUpDays` that is not an integer from 0 to 365 (a caller bug); database errors
+ * propagate.
+ */
+export async function findAccessReminders(ctx, options = {}) {
+    const catchUpDays = options.catchUpDays ?? DEFAULT_CATCH_UP_DAYS;
+    if (!Number.isInteger(catchUpDays) || catchUpDays < 0 || catchUpDays > MAX_CATCH_UP_DAYS) {
+        throw new Error(`@softure-ai/billing: catchUpDays must be an integer from 0 to ${String(MAX_CATCH_UP_DAYS)}, got ${String(catchUpDays)}`);
+    }
+    const now = ctx.clock.now();
+    const policy = getEntitlementPolicy(ctx.config);
+    const candidates = [...(await findStoredCandidates(ctx, now, catchUpDays)), ...(await findDerivedCandidates(ctx, now, catchUpDays))];
+    const due = [];
+    for (const candidate of candidates) {
+        const reminder = getAccessReminder({ record: candidate.record, accountCreatedAt: candidate.createdAt, now, policy, catchUpDays });
+        if (reminder !== null)
+            due.push({ userId: candidate.userId, email: candidate.email, ...reminder });
+    }
+    return due.sort((first, second) => first.endsAt.getTime() - second.endsAt.getTime() || first.userId.localeCompare(second.userId));
+}
+/** Stored rows without lifetime whose trial or paid end lies from the catch-up start to past the widest reminder window. */
+async function findStoredCandidates(ctx, now, catchUpDays) {
+    const { timezone } = ctx.config;
+    const { trial, paid } = getBillingOptions(ctx.config);
+    const today = getDayNumber(now, timezone);
+    const from = getStartOfDay(today - catchUpDays, timezone);
+    const to = getStartOfDay(today + Math.max(trial.reminderDays, paid.reminderDays) + 1, timezone);
+    const rows = await ctx.db
+        .select({
+        userId: users.id,
+        email: users.email,
+        createdAt: users.createdAt,
+        trialEndsAt: entitlements.trialEndsAt,
+        paidUntil: entitlements.paidUntil,
+        isLifetime: entitlements.isLifetime,
+    })
+        .from(entitlements)
+        .innerJoin(users, eq(users.id, entitlements.userId))
+        .where(and(eq(entitlements.isLifetime, false), or(and(gte(entitlements.trialEndsAt, from), lt(entitlements.trialEndsAt, to)), and(gte(entitlements.paidUntil, from), lt(entitlements.paidUntil, to)))))
+        .orderBy(asc(users.id));
+    return rows.map(({ trialEndsAt, paidUntil, isLifetime, ...account }) => ({ ...account, record: { trialEndsAt, paidUntil, isLifetime } }));
+}
+/**
+ * Accounts without a row whose derived trial ends in the same span: a trial ends at the start of
+ * the creation day plus `trial.days`, so the span moves back by `trial.days` onto `created_at`.
+ * Under `trial.startsAt` every account created before the floor day shares one trial end; when that
+ * end lies in the span, they are all candidates.
+ */
+async function findDerivedCandidates(ctx, now, catchUpDays) {
+    const { timezone } = ctx.config;
+    const { trial } = getBillingOptions(ctx.config);
+    const today = getDayNumber(now, timezone);
+    const from = getStartOfDay(today - catchUpDays - trial.days, timezone);
+    const to = getStartOfDay(today + trial.reminderDays + 1 - trial.days, timezone);
+    let createdInSpan = and(gte(users.createdAt, from), lt(users.createdAt, to));
+    const floorDay = getTrialFloorDay(ctx);
+    if (floorDay !== null) {
+        const floorEndDay = floorDay + trial.days;
+        if (floorEndDay >= today - catchUpDays && floorEndDay <= today + trial.reminderDays) {
+            createdInSpan = or(createdInSpan, lt(users.createdAt, getStartOfDay(floorDay, timezone)));
+        }
+    }
+    const rows = await ctx.db
+        .select({ userId: users.id, email: users.email, createdAt: users.createdAt })
+        .from(users)
+        .leftJoin(entitlements, eq(entitlements.userId, users.id))
+        .where(and(isNull(entitlements.userId), createdInSpan))
+        .orderBy(asc(users.id));
+    return rows.map((account) => ({ ...account, record: getDefaultRecord(ctx, account.createdAt) }));
+}
+//# sourceMappingURL=reminders.js.map

package/dist/server/reminders.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reminders.js","sourceRoot":"","sources":["../../src/server/reminders.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,mGAAmG;AACnG,kGAAkG;AAClG,kGAAkG;AAClG,gFAAgF;AAChF,0DAA0D;AAC1D,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAY,MAAM,aAAa,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAC;AAE7D,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,iBAAiB,EAA2B,MAAM,gBAAgB,CAAC;AACtH,OAAO,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAuB,MAAM,mBAAmB,CAAC;AAC5F,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAsBvE;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAmB,EAAE,UAAsC,EAAE;IACrG,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,qBAAqB,CAAC;IACjE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,WAAW,GAAG,iBAAiB,EAAE,CAAC;QACzF,MAAM,IAAI,KAAK,CAAC,iEAAiE,MAAM,CAAC,iBAAiB,CAAC,SAAS,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;IAC5I,CAAC;IACD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAC5B,MAAM,MAAM,GAAG,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,MAAM,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,qBAAqB,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAErI,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,gBAAgB,EAAE,SAAS,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;QAClI,IAAI,QAAQ,KAAK,IAAI;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,KAAK,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;AACpI,CAAC;AAED,4HAA4H;AAC5H,KAAK,UAAU,oBAAoB,CAAC,GAAmB,EAAE,GAAS,EAAE,WAAmB;IACrF,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAChC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,GAAG,WAAW,EAAE,QAAQ,CAAC,CAAC;IAC1D,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,EAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,EAAE,QAAQ,CAAC,CAAC;IAChG,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE;SACtB,MAAM,CAAC;QACN,MAAM,EAAE,KAAK,CAAC,EAAE;QAChB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,SAAS,EAAE,KAAK,CAAC,SAAS;QAC1B,WAAW,EAAE,YAAY,CAAC,WAAW;QACrC,SAAS,EAAE,YAAY,CAAC,SAAS;QACjC,UAAU,EAAE,YAAY,CAAC,UAAU;KACpC,CAAC;SACD,IAAI,CAAC,YAAY,CAAC;SAClB,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC;SACnD,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,EAClC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CACvJ,CACF;SACA,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;AAC5I,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,qBAAqB,CAAC,GAAmB,EAAE,GAAS,EAAE,WAAmB;IACtF,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAChC,MAAM,EAAE,KAAK,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,GAAG,WAAW,GAAG,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvE,MAAM,EAAE,GAAG,aAAa,CAAC,KAAK,GAAG,KAAK,CAAC,YAAY,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAChF,IAAI,aAAa,GAAoB,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9F,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACvC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,MAAM,WAAW,GAAG,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC;QAC1C,IAAI,WAAW,IAAI,KAAK,GAAG,WAAW,IAAI,WAAW,IAAI,KAAK,GAAG,KAAK,CAAC,YAAY,EAAE,CAAC;YACpF,aAAa,GAAG,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,aAAa,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5F,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE;SACtB,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC;SAC5E,IAAI,CAAC,KAAK,CAAC;SACX,QAAQ,CAAC,YAAY,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;SACzD,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,aAAa,CAAC,CAAC;SACtD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;AACnG,CAAC"}

package/dist/server/requests.d.ts

@@ -0,0 +1,80 @@
+import { type Err, type Ok } from "@softure-ai/core";
+import type { Queryable } from "@softure-ai/db";
+import type { PlanPrice } from "../contract.js";
+import type { InvoiceDetails } from "../payment.js";
+import type { BillingContext } from "./entitlements.js";
+/** How many open requests the admin page lists by default. */
+export declare const OPEN_REQUESTS_LIMIT = 50;
+export interface RecordPaymentRequestInput {
+    readonly userId: string;
+    readonly planId: string;
+    /** Null when the provider collects its own details. */
+    readonly invoice: InvoiceDetails | null;
+    /** The plan's price now: what the request quotes. */
+    readonly price: PlanPrice;
+}
+/** An open request, as the admin page lists it. */
+export interface OpenPaymentRequest {
+    readonly id: string;
+    readonly userId: string;
+    readonly email: string;
+    readonly planId: string;
+    readonly invoice: InvoiceDetails | null;
+    /** The plan's price when it was asked for; null for a request stored before prices were. */
+    readonly price: PlanPrice | null;
+    readonly requestedAt: Date;
+}
+/** The columns that close a request: its status, when, and no invoice details any more. */
+export declare function getClosedRequestColumns(status: "granted" | "dismissed" | "expired", now: Date): {
+    status: "granted" | "dismissed" | "expired";
+    closedAt: Date;
+    invoiceName: null;
+    invoiceTaxId: null;
+    invoiceAddress: null;
+};
+/**
+ * Stores a request before it is handed over to the owner, or refreshes the account's open request
+ * for the same plan (its details, price and time; its hand-over and claim stay). Returns the
+ * request's id. Database errors propagate.
+ */
+export declare function recordPaymentRequest(ctx: Pick<BillingContext, "db" | "clock">, input: RecordPaymentRequestInput): Promise<string>;
+/**
+ * Claims the hand-over of an open request that was not handed over yet: the time it was claimed,
+ * or null when it was handed over already, is being handed over (a claim younger than
+ * `HANDOVER_CLAIM_TIMEOUT_MS`), or is no longer open. An older claim was left without an answer and
+ * is taken over. A conditional update, so two asks at once hand it over once. Database errors
+ * propagate.
+ */
+export declare function claimHandOver(ctx: Pick<BillingContext, "db" | "clock">, requestId: string): Promise<Date | null>;
+/**
+ * Records a hand-over that answered: the request is never handed over again, whichever ask holds
+ * the claim now. The first record wins. Database errors propagate.
+ */
+export declare function confirmHandOver(ctx: Pick<BillingContext, "db" | "clock">, requestId: string): Promise<void>;
+/**
+ * Gives back a claim whose hand-over failed, so the next ask tries again. Only the claim made at
+ * `claimedAt` is cleared, never a later one. Database errors propagate.
+ */
+export declare function releaseHandOver(ctx: Pick<BillingContext, "db">, requestId: string, claimedAt: Date): Promise<void>;
+/** The open requests, oldest first, with each account's email. */
+export declare function listOpenRequests(ctx: Pick<BillingContext, "db">, limit?: number): Promise<readonly OpenPaymentRequest[]>;
+/** The open request with this id (its account and plan), or undefined. */
+export declare function findOpenRequest(db: Queryable, requestId: string): Promise<{
+    readonly userId: string;
+    readonly planId: string;
+} | undefined>;
+/** Closes an open request without a grant and clears its details; `billing.request_closed` when it is not open. */
+export declare function dismissPaymentRequest(ctx: Pick<BillingContext, "db" | "clock">, requestId: string): Promise<Ok<undefined> | Err<"billing.request_closed">>;
+export interface ExpiredRequestsSummary {
+    /** Open requests closed as `expired` by this run. */
+    readonly expired: number;
+}
+/**
+ * Closes the open requests nobody asked again for in `requests.expireAfterDays` days as `expired`
+ * and clears their invoice details: personal data kept no longer than the request waits. Run it
+ * daily (a scheduler); a repeated run closes nothing new. Database errors propagate.
+ */
+export declare function expireStaleRequests(ctx: BillingContext): Promise<ExpiredRequestsSummary>;
+/** A stored price, or null when the row has none (a CHECK stores both or neither). */
+export declare function readPrice(amount: number | null, currency: string | null): PlanPrice | null;
+//# sourceMappingURL=requests.d.ts.map

package/dist/server/requests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"requests.d.ts","sourceRoot":"","sources":["../../src/server/requests.ts"],"names":[],"mappings":"AAQA,OAAO,EAAW,KAAK,GAAG,EAAE,KAAK,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAEpD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AASxD,8DAA8D;AAC9D,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAEtC,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,QAAQ,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC;IACxC,qDAAqD;IACrD,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;CAC3B;AAED,mDAAmD;AACnD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI,CAAC;IACxC,4FAA4F;IAC5F,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;CAC5B;AAED,2FAA2F;AAC3F,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,SAAS,EAAE,GAAG,EAAE,IAAI;;;;;;EAE7F;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,OAAO,CAAC,EAAE,KAAK,EAAE,yBAAyB,GAAG,OAAO,CAAC,MAAM,CAAC,CAqBvI;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,GAAG,IAAI,CAAC,CAgBtH;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAKjH;AAED;;;GAGG;AACH,wBAAsB,eAAe,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAKxH;AAED,kEAAkE;AAClE,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,EAAE,KAAK,GAAE,MAA4B,GAAG,OAAO,CAAC,SAAS,kBAAkB,EAAE,CAAC,CAwBnJ;AAED,0EAA0E;AAC1E,wBAAsB,eAAe,CAAC,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAAC,CAOjJ;AAED,mHAAmH;AACnH,wBAAsB,qBAAqB,CAAC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,IAAI,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAQhK;AAED,MAAM,WAAW,sBAAsB;IACrC,qDAAqD;IACrD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAU9F;AAED,sFAAsF;AACtF,wBAAgB,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,IAAI,CAE1F"}