@softure-ai/billing 0.0.0-stage → 0.1.6

package/dist/server/requests.js

@@ -0,0 +1,155 @@
+// Invoice requests in billing: stored before a provider hands a request over (the manual adapter),
+// listed in the admin page until the admin grants or dismisses them or they expire. One open
+// request per account and plan: asking again refreshes its details and price. The hand-over is
+// claimed on the row (`handover_claimed_at`) and recorded once it answered (`handed_over_at`), so
+// an open request reaches the owner once; a failed hand-over is released for the next ask, and a
+// claim left without an answer (the process stopped) is taken over after a minute. Closing a request clears its invoice details, which are
+// personal data the app no longer needs (the migration's CHECK holds closed rows empty).
+import { users } from "@softure-ai/auth";
+import { err, ok } from "@softure-ai/core";
+import { and, asc, eq, isNull, lt, lte, or, sql } from "drizzle-orm";
+import { paymentRequests } from "../schema.js";
+import { getBillingOptions } from "./options.js";
+import { isUuid } from "./user-id.js";
+const DAY_MS = 24 * 60 * 60 * 1000;
+/** How long a hand-over claim blocks other asks: a provider's mail call takes seconds. */
+const HANDOVER_CLAIM_TIMEOUT_MS = 60 * 1000;
+/** How many open requests the admin page lists by default. */
+export const OPEN_REQUESTS_LIMIT = 50;
+/** The columns that close a request: its status, when, and no invoice details any more. */
+export function getClosedRequestColumns(status, now) {
+    return { status, closedAt: now, invoiceName: null, invoiceTaxId: null, invoiceAddress: null };
+}
+/**
+ * Stores a request before it is handed over to the owner, or refreshes the account's open request
+ * for the same plan (its details, price and time; its hand-over and claim stay). Returns the
+ * request's id. Database errors propagate.
+ */
+export async function recordPaymentRequest(ctx, input) {
+    const now = ctx.clock.now();
+    const details = {
+        invoiceName: input.invoice?.name ?? null,
+        invoiceTaxId: input.invoice?.taxId ?? null,
+        invoiceAddress: input.invoice?.address ?? null,
+        amount: input.price.amount,
+        currency: input.price.currency,
+    };
+    const [row] = await ctx.db
+        .insert(paymentRequests)
+        .values({ userId: input.userId, planId: input.planId, ...details, status: "open", requestedAt: now })
+        .onConflictDoUpdate({
+        target: [paymentRequests.userId, paymentRequests.planId],
+        targetWhere: sql `status = 'open'`,
+        set: { ...details, requestedAt: now },
+    })
+        .returning();
+    // An insert or an update of the conflicting row always returns it.
+    if (row === undefined)
+        throw new Error("@softure-ai/billing: storing a payment request returned no row");
+    return row.id;
+}
+/**
+ * Claims the hand-over of an open request that was not handed over yet: the time it was claimed,
+ * or null when it was handed over already, is being handed over (a claim younger than
+ * `HANDOVER_CLAIM_TIMEOUT_MS`), or is no longer open. An older claim was left without an answer and
+ * is taken over. A conditional update, so two asks at once hand it over once. Database errors
+ * propagate.
+ */
+export async function claimHandOver(ctx, requestId) {
+    const now = ctx.clock.now();
+    const staleBefore = new Date(now.getTime() - HANDOVER_CLAIM_TIMEOUT_MS);
+    const [claimed] = await ctx.db
+        .update(paymentRequests)
+        .set({ handoverClaimedAt: now })
+        .where(and(eq(paymentRequests.id, requestId), eq(paymentRequests.status, "open"), isNull(paymentRequests.handedOverAt), or(isNull(paymentRequests.handoverClaimedAt), lte(paymentRequests.handoverClaimedAt, staleBefore))))
+        .returning();
+    return claimed === undefined ? null : now;
+}
+/**
+ * Records a hand-over that answered: the request is never handed over again, whichever ask holds
+ * the claim now. The first record wins. Database errors propagate.
+ */
+export async function confirmHandOver(ctx, requestId) {
+    await ctx.db
+        .update(paymentRequests)
+        .set({ handedOverAt: ctx.clock.now(), handoverClaimedAt: null })
+        .where(and(eq(paymentRequests.id, requestId), isNull(paymentRequests.handedOverAt)));
+}
+/**
+ * Gives back a claim whose hand-over failed, so the next ask tries again. Only the claim made at
+ * `claimedAt` is cleared, never a later one. Database errors propagate.
+ */
+export async function releaseHandOver(ctx, requestId, claimedAt) {
+    await ctx.db
+        .update(paymentRequests)
+        .set({ handoverClaimedAt: null })
+        .where(and(eq(paymentRequests.id, requestId), eq(paymentRequests.handoverClaimedAt, claimedAt)));
+}
+/** The open requests, oldest first, with each account's email. */
+export async function listOpenRequests(ctx, limit = OPEN_REQUESTS_LIMIT) {
+    const rows = await ctx.db
+        .select({
+        id: paymentRequests.id,
+        userId: paymentRequests.userId,
+        email: users.email,
+        planId: paymentRequests.planId,
+        invoiceName: paymentRequests.invoiceName,
+        invoiceTaxId: paymentRequests.invoiceTaxId,
+        invoiceAddress: paymentRequests.invoiceAddress,
+        amount: paymentRequests.amount,
+        currency: paymentRequests.currency,
+        requestedAt: paymentRequests.requestedAt,
+    })
+        .from(paymentRequests)
+        .innerJoin(users, eq(users.id, paymentRequests.userId))
+        .where(eq(paymentRequests.status, "open"))
+        .orderBy(asc(paymentRequests.requestedAt), asc(paymentRequests.id))
+        .limit(limit);
+    return rows.map(({ invoiceName, invoiceTaxId, invoiceAddress, amount, currency, ...row }) => ({
+        ...row,
+        invoice: invoiceName === null || invoiceAddress === null ? null : { name: invoiceName, taxId: invoiceTaxId, address: invoiceAddress },
+        price: readPrice(amount, currency),
+    }));
+}
+/** The open request with this id (its account and plan), or undefined. */
+export async function findOpenRequest(db, requestId) {
+    if (!isUuid(requestId))
+        return undefined;
+    const [row] = await db
+        .select({ userId: paymentRequests.userId, planId: paymentRequests.planId })
+        .from(paymentRequests)
+        .where(and(eq(paymentRequests.id, requestId), eq(paymentRequests.status, "open")));
+    return row;
+}
+/** Closes an open request without a grant and clears its details; `billing.request_closed` when it is not open. */
+export async function dismissPaymentRequest(ctx, requestId) {
+    if (!isUuid(requestId))
+        return err("billing.request_closed");
+    const [closed] = await ctx.db
+        .update(paymentRequests)
+        .set(getClosedRequestColumns("dismissed", ctx.clock.now()))
+        .where(and(eq(paymentRequests.id, requestId), eq(paymentRequests.status, "open")))
+        .returning();
+    return closed === undefined ? err("billing.request_closed") : ok();
+}
+/**
+ * Closes the open requests nobody asked again for in `requests.expireAfterDays` days as `expired`
+ * and clears their invoice details: personal data kept no longer than the request waits. Run it
+ * daily (a scheduler); a repeated run closes nothing new. Database errors propagate.
+ */
+export async function expireStaleRequests(ctx) {
+    const now = ctx.clock.now();
+    const { expireAfterDays } = getBillingOptions(ctx.config).requests;
+    const cutoff = new Date(now.getTime() - expireAfterDays * DAY_MS);
+    const expired = await ctx.db
+        .update(paymentRequests)
+        .set(getClosedRequestColumns("expired", now))
+        .where(and(eq(paymentRequests.status, "open"), lt(paymentRequests.requestedAt, cutoff)))
+        .returning();
+    return { expired: expired.length };
+}
+/** A stored price, or null when the row has none (a CHECK stores both or neither). */
+export function readPrice(amount, currency) {
+    return amount === null || currency === null ? null : { amount, currency };
+}
+//# sourceMappingURL=requests.js.map

package/dist/server/requests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"requests.js","sourceRoot":"","sources":["../../src/server/requests.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,6FAA6F;AAC7F,+FAA+F;AAC/F,kGAAkG;AAClG,iGAAiG;AACjG,2IAA2I;AAC3I,yFAAyF;AACzF,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,GAAG,EAAE,EAAE,EAAqB,MAAM,kBAAkB,CAAC;AAE9D,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAGrE,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEnC,0FAA0F;AAC1F,MAAM,yBAAyB,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5C,8DAA8D;AAC9D,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAuBtC,2FAA2F;AAC3F,MAAM,UAAU,uBAAuB,CAAC,MAA2C,EAAE,GAAS;IAC5F,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC;AAChG,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAyC,EAAE,KAAgC;IACpH,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG;QACd,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,IAAI,IAAI,IAAI;QACxC,YAAY,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI;QAC1C,cAAc,EAAE,KAAK,CAAC,OAAO,EAAE,OAAO,IAAI,IAAI;QAC9C,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM;QAC1B,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;KAC/B,CAAC;IACF,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE;SACvB,MAAM,CAAC,eAAe,CAAC;SACvB,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC;SACpG,kBAAkB,CAAC;QAClB,MAAM,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,eAAe,CAAC,MAAM,CAAC;QACxD,WAAW,EAAE,GAAG,CAAA,iBAAiB;QACjC,GAAG,EAAE,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE;KACtC,CAAC;SACD,SAAS,EAAE,CAAC;IACf,mEAAmE;IACnE,IAAI,GAAG,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACzG,OAAO,GAAG,CAAC,EAAE,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAyC,EAAE,SAAiB;IAC9F,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAC5B,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,yBAAyB,CAAC,CAAC;IACxE,MAAM,CAAC,OAAO,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE;SAC3B,MAAM,CAAC,eAAe,CAAC;SACvB,GAAG,CAAC,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC;SAC/B,KAAK,CACJ,GAAG,CACD,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,SAAS,CAAC,EACjC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,EAClC,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,EACpC,EAAE,CAAC,MAAM,CAAC,eAAe,CAAC,iBAAiB,CAAC,EAAE,GAAG,CAAC,eAAe,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC,CACnG,CACF;SACA,SAAS,EAAE,CAAC;IACf,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC;AAC5C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAAyC,EAAE,SAAiB;IAChG,MAAM,GAAG,CAAC,EAAE;SACT,MAAM,CAAC,eAAe,CAAC;SACvB,GAAG,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;SAC/D,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,MAAM,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;AACzF,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,GAA+B,EAAE,SAAiB,EAAE,SAAe;IACvG,MAAM,GAAG,CAAC,EAAE;SACT,MAAM,CAAC,eAAe,CAAC;SACvB,GAAG,CAAC,EAAE,iBAAiB,EAAE,IAAI,EAAE,CAAC;SAChC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,iBAAiB,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC;AACrG,CAAC;AAED,kEAAkE;AAClE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAA+B,EAAE,QAAgB,mBAAmB;IACzG,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE;SACtB,MAAM,CAAC;QACN,EAAE,EAAE,eAAe,CAAC,EAAE;QACtB,MAAM,EAAE,eAAe,CAAC,MAAM;QAC9B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,eAAe,CAAC,MAAM;QAC9B,WAAW,EAAE,eAAe,CAAC,WAAW;QACxC,YAAY,EAAE,eAAe,CAAC,YAAY;QAC1C,cAAc,EAAE,eAAe,CAAC,cAAc;QAC9C,MAAM,EAAE,eAAe,CAAC,MAAM;QAC9B,QAAQ,EAAE,eAAe,CAAC,QAAQ;QAClC,WAAW,EAAE,eAAe,CAAC,WAAW;KACzC,CAAC;SACD,IAAI,CAAC,eAAe,CAAC;SACrB,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;SACtD,KAAK,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;SACzC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC;SAClE,KAAK,CAAC,KAAK,CAAC,CAAC;IAChB,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5F,GAAG,GAAG;QACN,OAAO,EAAE,WAAW,KAAK,IAAI,IAAI,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,cAAc,EAAE;QACrI,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,QAAQ,CAAC;KACnC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,0EAA0E;AAC1E,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,EAAa,EAAE,SAAiB;IACpE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,EAAE;SACnB,MAAM,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,CAAC,MAAM,EAAE,CAAC;SAC1E,IAAI,CAAC,eAAe,CAAC;SACrB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACrF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,mHAAmH;AACnH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,GAAyC,EAAE,SAAiB;IACtG,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;QAAE,OAAO,GAAG,CAAC,wBAAwB,CAAC,CAAC;IAC7D,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE;SAC1B,MAAM,CAAC,eAAe,CAAC;SACvB,GAAG,CAAC,uBAAuB,CAAC,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;SAC1D,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;SACjF,SAAS,EAAE,CAAC;IACf,OAAO,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACrE,CAAC;AAOD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,GAAmB;IAC3D,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;IAC5B,MAAM,EAAE,eAAe,EAAE,GAAG,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC;IACnE,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,eAAe,GAAG,MAAM,CAAC,CAAC;IAClE,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,EAAE;SACzB,MAAM,CAAC,eAAe,CAAC;SACvB,GAAG,CAAC,uBAAuB,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;SAC5C,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,eAAe,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC;SACvF,SAAS,EAAE,CAAC;IACf,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC;AACrC,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,SAAS,CAAC,MAAqB,EAAE,QAAuB;IACtE,OAAO,MAAM,KAAK,IAAI,IAAI,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC5E,CAAC"}

package/dist/server/setup.d.ts

@@ -0,0 +1,9 @@
+import { type SoftureConfig } from "@softure-ai/core";
+export declare const PAYMENT_BUCKET = "billing-payment";
+export declare function assertPaymentSetup(config: SoftureConfig): void;
+/**
+ * Throws when `billing({ adminRole })` is not a role of `auth({ roles })`: a misspelt role would
+ * otherwise surface only when an admin opens the admin page.
+ */
+export declare function assertAdminRoleDeclared(config: SoftureConfig): void;
+//# sourceMappingURL=setup.d.ts.map

package/dist/server/setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../src/server/setup.ts"],"names":[],"mappings":"AAKA,OAAO,EAAa,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAGjE,eAAO,MAAM,cAAc,oBAAoB,CAAC;AAKhD,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAO9D;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAUnE"}

package/dist/server/setup.js

@@ -0,0 +1,34 @@
+// What billing needs from the app's other modules, checked once per config so a setup mistake fails
+// with one clear error instead of on each request: the rate limit bucket in `security({ buckets })`
+// (before the first payment), and an `adminRole` that `auth({ roles })` declares (at the first
+// billing request and in the readiness probe).
+import { getDeclaredRoles, isDeclaredRole } from "@softure-ai/auth/server";
+import { getModule } from "@softure-ai/core";
+import { getBillingOptions } from "./options.js";
+export const PAYMENT_BUCKET = "billing-payment";
+const checkedPaymentConfigs = new WeakSet();
+const checkedRoleConfigs = new WeakSet();
+export function assertPaymentSetup(config) {
+    if (checkedPaymentConfigs.has(config))
+        return;
+    const security = getModule(config, "security")?.options;
+    if (!Object.hasOwn(security?.buckets ?? {}, PAYMENT_BUCKET)) {
+        throw new Error(`@softure-ai/billing: security({ buckets }) lacks "${PAYMENT_BUCKET}"; spread BILLING_RATE_LIMIT_BUCKETS into it`);
+    }
+    checkedPaymentConfigs.add(config);
+}
+/**
+ * Throws when `billing({ adminRole })` is not a role of `auth({ roles })`: a misspelt role would
+ * otherwise surface only when an admin opens the admin page.
+ */
+export function assertAdminRoleDeclared(config) {
+    if (checkedRoleConfigs.has(config))
+        return;
+    const { adminRole } = getBillingOptions(config);
+    if (!isDeclaredRole(config, adminRole)) {
+        const declared = [...getDeclaredRoles(config)].join(", ");
+        throw new Error(`@softure-ai/billing: billing({ adminRole }) is "${adminRole}", which auth({ roles }) does not declare (declared: ${declared}); declare it there or fix the name`);
+    }
+    checkedRoleConfigs.add(config);
+}
+//# sourceMappingURL=setup.js.map

package/dist/server/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../src/server/setup.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,oGAAoG;AACpG,+FAA+F;AAC/F,+CAA+C;AAC/C,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC3E,OAAO,EAAE,SAAS,EAAsB,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAEjD,MAAM,CAAC,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAEhD,MAAM,qBAAqB,GAAG,IAAI,OAAO,EAAiB,CAAC;AAC3D,MAAM,kBAAkB,GAAG,IAAI,OAAO,EAAiB,CAAC;AAExD,MAAM,UAAU,kBAAkB,CAAC,MAAqB;IACtD,IAAI,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO;IAC9C,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,EAAE,UAAU,CAAC,EAAE,OAAsE,CAAC;IACvH,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,IAAI,EAAE,EAAE,cAAc,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,KAAK,CAAC,qDAAqD,cAAc,8CAA8C,CAAC,CAAC;IACrI,CAAC;IACD,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAqB;IAC3D,IAAI,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO;IAC3C,MAAM,EAAE,SAAS,EAAE,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;QACvC,MAAM,QAAQ,GAAG,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1D,MAAM,IAAI,KAAK,CACb,mDAAmD,SAAS,wDAAwD,QAAQ,qCAAqC,CAClK,CAAC;IACJ,CAAC;IACD,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACjC,CAAC"}

package/dist/server/take-back.d.ts

@@ -0,0 +1,80 @@
+import type { Queryable } from "@softure-ai/db";
+import type { Entitlement, PaymentGrant } from "../contract.js";
+import { type RefundShare } from "../refund.js";
+import { type BillingContext } from "./entitlements.js";
+/**
+ * Locks the account's entitlement row until the transaction ends (nothing when it has none yet:
+ * a check that must hold before the first change pins the row first, `pinEntitlementRow`).
+ * Taken before a refund's or a revoke's own row, so every take-back of the account queues here.
+ */
+export declare function lockEntitlementRow(tx: Queryable, userId: string): Promise<void>;
+/** Whether a paid payment of the account (other than `exceptId`) bought lifetime access. */
+export declare function hasPaidLifetimePayment(tx: Queryable, userId: string, exceptId?: string): Promise<boolean>;
+/** Whether an active manual grant of the account (other than `exceptId`) gave lifetime access. */
+export declare function hasActiveManualLifetime(tx: Queryable, userId: string, exceptId?: string): Promise<boolean>;
+export interface ShiftLaterPeriodsInput {
+    readonly userId: string;
+    /** Stored periods starting at or after this instant move (the end of the period taken back or given back). */
+    readonly after: Date;
+    readonly days: number;
+    /** `back` when days are taken back, `forward` when a failed refund gives them back. */
+    readonly direction: "back" | "forward";
+    readonly timezone: string;
+}
+/**
+ * Moves the stored periods that follow the one taken back or given back (paid provider payments and
+ * active manual grants starting at or after `after`) by the days, so a later refund or revoke of one
+ * of them takes back the right days. The caller holds the entitlement lock.
+ */
+export declare function shiftLaterPeriods(tx: Queryable, input: ShiftLaterPeriodsInput): Promise<void>;
+export interface TakeBackGrantInput {
+    readonly userId: string;
+    /** What the refunded payment or revoked grant added; null for a payment stored before grants were (revokes paid access). */
+    readonly grant: PaymentGrant | null;
+    readonly now: Date;
+    /** Whether something else still pays for lifetime access; asked under the entitlement lock. */
+    readonly hasOtherLifetime: () => Promise<boolean>;
+    /** The part of a payment a partial refund returns; omitted to take back the whole grant. */
+    readonly share?: RefundShare;
+}
+/** Where the account stands after a take-back, and the local days its period lost (0 when nothing moved). */
+export interface TakeBack {
+    readonly entitlement: Entitlement;
+    readonly days: number;
+}
+/**
+ * Takes back what one grant added (its share, for a partial refund), inside the caller's transaction
+ * (`ctx.db` is it), and returns where the account stands after and how many days its period lost.
+ * The caller locked the account and the entitlement (`lockEntitlementRow`) and flipped its row
+ * first: a lifetime granted at the same time is either committed and seen below, or waits for the
+ * entitlement lock and is applied after.
+ */
+export declare function takeBackGrant(ctx: BillingContext, input: TakeBackGrantInput): Promise<TakeBack>;
+export interface GiveBackDaysInput {
+    readonly userId: string;
+    /** The period the refunded payment stores now. */
+    readonly grant: Extract<PaymentGrant, {
+        kind: "period";
+    }>;
+    /** Whether the payment was still paid (refunded in part) before the failure. */
+    readonly isPaid: boolean;
+    readonly days: number;
+    readonly now: Date;
+}
+/** Where the account stands after days were given back, and the period the payment pays for now. */
+export interface GiveBack {
+    readonly entitlement: Entitlement;
+    readonly period: Extract<PaymentGrant, {
+        kind: "period";
+    }>;
+}
+/**
+ * Gives back `days` local days a failed refund had taken, inside the caller's transaction, under the
+ * same locks as `takeBackGrant`. While the payment is paid and its period still ahead, the days go
+ * back right after that period: dated access and every later stored period move forward by them
+ * (the take-back in reverse). Otherwise (refunded in full, or the period used up) they are a grant
+ * at the end, from the latest of the trial's end, dated access and now, and that is the period the
+ * payment pays for.
+ */
+export declare function giveBackDays(ctx: BillingContext, input: GiveBackDaysInput): Promise<GiveBack>;
+//# sourceMappingURL=take-back.d.ts.map

package/dist/server/take-back.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"take-back.d.ts","sourceRoot":"","sources":["../../src/server/take-back.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAEhD,OAAO,KAAK,EAAE,WAAW,EAAuC,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAErG,OAAO,EAAmG,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAEjJ,OAAO,EAA4C,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAGlG;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAErF;AAED,4FAA4F;AAC5F,wBAAsB,sBAAsB,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAK/G;AAED,kGAAkG;AAClG,wBAAsB,uBAAuB,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAKhH;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,8GAA8G;IAC9G,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,uFAAuF;IACvF,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAeD;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBnG;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,4HAA4H;IAC5H,QAAQ,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;IACnB,+FAA+F;IAC/F,QAAQ,CAAC,gBAAgB,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IAClD,4FAA4F;IAC5F,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC;CAC9B;AAED,6GAA6G;AAC7G,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAYD;;;;;;GAMG;AACH,wBAAsB,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAkBrG;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,kDAAkD;IAClD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,QAAQ,CAAA;KAAE,CAAC,CAAC;IAC1D,gFAAgF;IAChF,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC;CACpB;AAED,oGAAoG;AACpG,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,QAAQ,CAAA;KAAE,CAAC,CAAC;CAC5D;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,cAAc,EAAE,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAsBnG"}

package/dist/server/take-back.js

@@ -0,0 +1,138 @@
+import { and, eq, gte, ne } from "drizzle-orm";
+import { resolveEntitlement } from "../entitlement.js";
+import { getGrantStart, getRefundEvent, getTakenBackDays, isFullShare, moveBackByDays, moveForwardByDays } from "../refund.js";
+import { entitlements, manualGrants, payments } from "../schema.js";
+import { changeEntitlement, findEntitlementRecord } from "./entitlements.js";
+import { getEntitlementPolicy } from "./options.js";
+/**
+ * Locks the account's entitlement row until the transaction ends (nothing when it has none yet:
+ * a check that must hold before the first change pins the row first, `pinEntitlementRow`).
+ * Taken before a refund's or a revoke's own row, so every take-back of the account queues here.
+ */
+export async function lockEntitlementRow(tx, userId) {
+    await tx.select({ userId: entitlements.userId }).from(entitlements).where(eq(entitlements.userId, userId)).for("update");
+}
+/** Whether a paid payment of the account (other than `exceptId`) bought lifetime access. */
+export async function hasPaidLifetimePayment(tx, userId, exceptId) {
+    const conditions = [eq(payments.userId, userId), eq(payments.grantKind, "lifetime"), eq(payments.status, "paid")];
+    if (exceptId !== undefined)
+        conditions.push(ne(payments.id, exceptId));
+    const [other] = await tx.select({ id: payments.id }).from(payments).where(and(...conditions)).limit(1);
+    return other !== undefined;
+}
+/** Whether an active manual grant of the account (other than `exceptId`) gave lifetime access. */
+export async function hasActiveManualLifetime(tx, userId, exceptId) {
+    const conditions = [eq(manualGrants.userId, userId), eq(manualGrants.grantKind, "lifetime"), eq(manualGrants.status, "active")];
+    if (exceptId !== undefined)
+        conditions.push(ne(manualGrants.id, exceptId));
+    const [other] = await tx.select({ id: manualGrants.id }).from(manualGrants).where(and(...conditions)).limit(1);
+    return other !== undefined;
+}
+/** The stored period moved by `days` local days in the input's direction. */
+function getShiftedPeriod(row, input) {
+    if (row.grantedFrom === null || row.grantedUntil === null)
+        return null;
+    const days = input.direction === "back" ? input.days : -input.days;
+    return { grantedFrom: moveBackByDays(row.grantedFrom, days, input.timezone), grantedUntil: moveBackByDays(row.grantedUntil, days, input.timezone) };
+}
+/**
+ * Moves the stored periods that follow the one taken back or given back (paid provider payments and
+ * active manual grants starting at or after `after`) by the days, so a later refund or revoke of one
+ * of them takes back the right days. The caller holds the entitlement lock.
+ */
+export async function shiftLaterPeriods(tx, input) {
+    const laterPayments = await tx
+        .select({ id: payments.id, grantedFrom: payments.grantedFrom, grantedUntil: payments.grantedUntil })
+        .from(payments)
+        .where(and(eq(payments.userId, input.userId), eq(payments.grantKind, "period"), eq(payments.status, "paid"), gte(payments.grantedFrom, input.after)));
+    for (const row of laterPayments) {
+        const shifted = getShiftedPeriod(row, input);
+        if (shifted !== null)
+            await tx.update(payments).set(shifted).where(eq(payments.id, row.id));
+    }
+    const laterGrants = await tx
+        .select({ id: manualGrants.id, grantedFrom: manualGrants.grantedFrom, grantedUntil: manualGrants.grantedUntil })
+        .from(manualGrants)
+        .where(and(eq(manualGrants.userId, input.userId), eq(manualGrants.grantKind, "period"), eq(manualGrants.status, "active"), gte(manualGrants.grantedFrom, input.after)));
+    for (const row of laterGrants) {
+        const shifted = getShiftedPeriod(row, input);
+        if (shifted !== null)
+            await tx.update(manualGrants).set(shifted).where(eq(manualGrants.id, row.id));
+    }
+}
+/** The change taking back `grant` makes, decided under the entitlement lock, or null when it takes nothing back. */
+async function getTakeBackEvent(ctx, input, record) {
+    const { grant, share } = input;
+    // A partial refund of a payment without a recorded grant, or of a lifetime, takes nothing back.
+    if (!isFullShare(share) && grant?.kind !== "period")
+        return null;
+    if (grant === null)
+        return { type: "revoke" };
+    if (grant.kind === "lifetime" && (await input.hasOtherLifetime()))
+        return null;
+    return getRefundEvent(record, grant, { now: input.now, timezone: ctx.config.timezone, share });
+}
+/**
+ * Takes back what one grant added (its share, for a partial refund), inside the caller's transaction
+ * (`ctx.db` is it), and returns where the account stands after and how many days its period lost.
+ * The caller locked the account and the entitlement (`lockEntitlementRow`) and flipped its row
+ * first: a lifetime granted at the same time is either committed and seen below, or waits for the
+ * entitlement lock and is applied after.
+ */
+export async function takeBackGrant(ctx, input) {
+    const tx = ctx.db;
+    const record = await findEntitlementRecord(ctx, input.userId);
+    // The caller's row references the account, which its key share lock keeps.
+    if (record === null)
+        throw new Error("@softure-ai/billing: a grant to take back has no account");
+    const event = await getTakeBackEvent(ctx, input, record);
+    if (event === null)
+        return { entitlement: resolveEntitlement(record, input.now, getEntitlementPolicy(ctx.config)), days: 0 };
+    const { grant } = input;
+    const { timezone } = ctx.config;
+    let days = 0;
+    if (grant?.kind === "period") {
+        days = getTakenBackDays(grant, { now: input.now, timezone, share: input.share });
+        await shiftLaterPeriods(tx, { userId: input.userId, after: grant.until, days, direction: "back", timezone });
+    }
+    const changed = await changeEntitlement(ctx, input.userId, event);
+    // The account is locked and these events are never refused.
+    if (!changed.ok)
+        throw new Error(`@softure-ai/billing: taking back a grant failed with ${changed.error}`);
+    return { entitlement: changed.value, days };
+}
+/**
+ * Gives back `days` local days a failed refund had taken, inside the caller's transaction, under the
+ * same locks as `takeBackGrant`. While the payment is paid and its period still ahead, the days go
+ * back right after that period: dated access and every later stored period move forward by them
+ * (the take-back in reverse). Otherwise (refunded in full, or the period used up) they are a grant
+ * at the end, from the latest of the trial's end, dated access and now, and that is the period the
+ * payment pays for.
+ */
+export async function giveBackDays(ctx, input) {
+    const record = await findEntitlementRecord(ctx, input.userId);
+    // The caller's payment row references the account, which its key share lock keeps.
+    if (record === null)
+        throw new Error("@softure-ai/billing: days to give back have no account");
+    const { timezone } = ctx.config;
+    const { grant, days, now } = input;
+    const { paidUntil } = record;
+    let period;
+    let until;
+    if (input.isPaid && grant.until > now && paidUntil !== null && paidUntil >= grant.until) {
+        await shiftLaterPeriods(ctx.db, { userId: input.userId, after: grant.until, days, direction: "forward", timezone });
+        period = { kind: "period", from: grant.from, until: moveForwardByDays(grant.until, days, timezone) };
+        until = moveForwardByDays(paidUntil, days, timezone);
+    }
+    else {
+        const from = getGrantStart(record, now);
+        until = moveForwardByDays(from, days, timezone);
+        period = { kind: "period", from, until };
+    }
+    const changed = await changeEntitlement(ctx, input.userId, { type: "grant", until });
+    // The account is locked and the end lies at least a day past dated access and now.
+    if (!changed.ok)
+        throw new Error(`@softure-ai/billing: giving back refunded days failed with ${changed.error}`);
+    return { entitlement: changed.value, period };
+}
+//# sourceMappingURL=take-back.js.map

package/dist/server/take-back.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"take-back.js","sourceRoot":"","sources":["../../src/server/take-back.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE,EAAY,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAoB,MAAM,cAAc,CAAC;AACjJ,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAuB,MAAM,mBAAmB,CAAC;AAClG,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,EAAa,EAAE,MAAc;IACpE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AAC3H,CAAC;AAED,4FAA4F;AAC5F,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAAC,EAAa,EAAE,MAAc,EAAE,QAAiB;IAC3F,MAAM,UAAU,GAAU,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACzH,IAAI,QAAQ,KAAK,SAAS;QAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvE,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACvG,OAAO,KAAK,KAAK,SAAS,CAAC;AAC7B,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAAC,EAAa,EAAE,MAAc,EAAE,QAAiB;IAC5F,MAAM,UAAU,GAAU,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;IACvI,IAAI,QAAQ,KAAK,SAAS;QAAE,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC3E,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC/G,OAAO,KAAK,KAAK,SAAS,CAAC;AAC7B,CAAC;AAkBD,6EAA6E;AAC7E,SAAS,gBAAgB,CAAC,GAAiB,EAAE,KAA6B;IACxE,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACvE,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;IACnE,OAAO,EAAE,WAAW,EAAE,cAAc,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,cAAc,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;AACtJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,EAAa,EAAE,KAA6B;IAClF,MAAM,aAAa,GAAG,MAAM,EAAE;SAC3B,MAAM,CAAC,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,YAAY,EAAE,QAAQ,CAAC,YAAY,EAAE,CAAC;SACnG,IAAI,CAAC,QAAQ,CAAC;SACd,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxJ,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,IAAI;YAAE,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9F,CAAC;IACD,MAAM,WAAW,GAAG,MAAM,EAAE;SACzB,MAAM,CAAC,EAAE,EAAE,EAAE,YAAY,CAAC,EAAE,EAAE,WAAW,EAAE,YAAY,CAAC,WAAW,EAAE,YAAY,EAAE,YAAY,CAAC,YAAY,EAAE,CAAC;SAC/G,IAAI,CAAC,YAAY,CAAC;SAClB,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,GAAG,CAAC,YAAY,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1K,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,IAAI;YAAE,MAAM,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACtG,CAAC;AACH,CAAC;AAmBD,oHAAoH;AACpH,KAAK,UAAU,gBAAgB,CAAC,GAAmB,EAAE,KAAyB,EAAE,MAAyB;IACvG,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAC/B,gGAAgG;IAChG,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,EAAE,IAAI,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC9C,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,CAAC,MAAM,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,OAAO,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;AACjG,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAmB,EAAE,KAAyB;IAChF,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAC;IAClB,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9D,2EAA2E;IAC3E,IAAI,MAAM,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACjG,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACzD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,WAAW,EAAE,kBAAkB,CAAC,MAAM,EAAE,KAAK,CAAC,GAAG,EAAE,oBAAoB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IAC7H,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACxB,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,IAAI,GAAG,gBAAgB,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;QACjF,MAAM,iBAAiB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC/G,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAClE,4DAA4D;IAC5D,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAC1G,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;AAC9C,CAAC;AAkBD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAmB,EAAE,KAAwB;IAC9E,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9D,mFAAmF;IACnF,IAAI,MAAM,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC/F,MAAM,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC;IAChC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;IACnC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAC7B,IAAI,MAA0B,CAAC;IAC/B,IAAI,KAAW,CAAC;IAChB,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,KAAK,GAAG,GAAG,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QACxF,MAAM,iBAAiB,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;QACpH,MAAM,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;QACrG,KAAK,GAAG,iBAAiB,CAAC,SAAS,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACvD,CAAC;SAAM,CAAC;QACN,MAAM,IAAI,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACxC,KAAK,GAAG,iBAAiB,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAChD,MAAM,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;IAC3C,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,iBAAiB,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACrF,mFAAmF;IACnF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,8DAA8D,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAChH,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;AAChD,CAAC"}

package/dist/server/user-id.d.ts

@@ -0,0 +1,4 @@
+/** Whether `value` can be a row id (a uuid). */
+export declare function isUuid(value: string): boolean;
+export declare function isUserId(value: string): boolean;
+//# sourceMappingURL=user-id.d.ts.map

package/dist/server/user-id.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-id.d.ts","sourceRoot":"","sources":["../../src/server/user-id.ts"],"names":[],"mappings":"AAIA,gDAAgD;AAChD,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE7C;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAE/C"}

package/dist/server/user-id.js

@@ -0,0 +1,11 @@
+// Account ids are auth's uuids, and the module's own rows use uuids too; anything else names no row
+// and is answered without a query (Postgres would refuse to compare it with a uuid column).
+const UUID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+/** Whether `value` can be a row id (a uuid). */
+export function isUuid(value) {
+    return UUID.test(value);
+}
+export function isUserId(value) {
+    return isUuid(value);
+}
+//# sourceMappingURL=user-id.js.map

package/dist/server/user-id.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-id.js","sourceRoot":"","sources":["../../src/server/user-id.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,4FAA4F;AAC5F,MAAM,IAAI,GAAG,iEAAiE,CAAC;AAE/E,gDAAgD;AAChD,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAa;IACpC,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC"}

package/dist/stripe-currency.d.ts

@@ -0,0 +1,27 @@
+import type { PlanPrice } from "./contract.js";
+/**
+ * Charged without a minor unit. UGX is not here: Stripe still takes it as a two-decimal value whose
+ * decimals are always 00 (as ISK). The guide's text export omits the list; this is Stripe's
+ * long-standing list, which the guide's index matches.
+ */
+export declare const STRIPE_ZERO_DECIMAL_CURRENCIES: ReadonlySet<string>;
+/**
+ * Charged with three decimals, and the last one must be 0 (Stripe's earlier guide; the current
+ * text export omits the section).
+ */
+export declare const STRIPE_THREE_DECIMAL_CURRENCIES: ReadonlySet<string>;
+/** Digits of the unit Stripe takes for `currency` (ISO 4217, upper case): 0, 2 or 3. */
+export declare function getStripeMinorUnitDigits(currency: string): number;
+/**
+ * The price as Stripe's `unit_amount`, e.g. ISK 1,500 (`amount: 1500`) as 150000; null when Stripe
+ * cannot charge it exactly (a fraction of Stripe's unit, or a three-decimal amount not ending in 0).
+ */
+export declare function toStripeAmount(price: PlanPrice): number | null;
+/**
+ * An amount Stripe reports (a checkout's total, a charge's refunded total) in billing's unit,
+ * rounded down when it is not whole, so a refunded total is never over-counted.
+ */
+export declare function fromStripeAmount(amount: number, currency: string): number;
+/** Why Stripe cannot charge `price` exactly, for the config error; null when it can. */
+export declare function describeStripePriceProblem(price: PlanPrice): string | null;
+//# sourceMappingURL=stripe-currency.d.ts.map

package/dist/stripe-currency.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe-currency.d.ts","sourceRoot":"","sources":["../src/stripe-currency.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAG/C;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,EAAE,WAAW,CAAC,MAAM,CAE7D,CAAC;AAEH;;;GAGG;AACH,eAAO,MAAM,+BAA+B,EAAE,WAAW,CAAC,MAAM,CAAgD,CAAC;AAEjH,wFAAwF;AACxF,wBAAgB,wBAAwB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAIjE;AAOD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,GAAG,IAAI,CAM9D;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAGzE;AAED,wFAAwF;AACxF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,GAAG,IAAI,CAM1E"}

package/dist/stripe-currency.js

@@ -0,0 +1,57 @@
+import { getMinorUnitDigits } from "./price.js";
+/**
+ * Charged without a minor unit. UGX is not here: Stripe still takes it as a two-decimal value whose
+ * decimals are always 00 (as ISK). The guide's text export omits the list; this is Stripe's
+ * long-standing list, which the guide's index matches.
+ */
+export const STRIPE_ZERO_DECIMAL_CURRENCIES = new Set([
+    "BIF", "CLP", "DJF", "GNF", "JPY", "KMF", "KRW", "MGA", "PYG", "RWF", "VND", "VUV", "XAF", "XOF", "XPF",
+]);
+/**
+ * Charged with three decimals, and the last one must be 0 (Stripe's earlier guide; the current
+ * text export omits the section).
+ */
+export const STRIPE_THREE_DECIMAL_CURRENCIES = new Set(["BHD", "JOD", "KWD", "OMR", "TND"]);
+/** Digits of the unit Stripe takes for `currency` (ISO 4217, upper case): 0, 2 or 3. */
+export function getStripeMinorUnitDigits(currency) {
+    if (STRIPE_ZERO_DECIMAL_CURRENCIES.has(currency))
+        return 0;
+    if (STRIPE_THREE_DECIMAL_CURRENCIES.has(currency))
+        return 3;
+    return 2;
+}
+/** How many digits Stripe's unit has beyond billing's (negative when it has fewer). */
+function getDigitShift(currency) {
+    return getStripeMinorUnitDigits(currency) - getMinorUnitDigits(currency);
+}
+/**
+ * The price as Stripe's `unit_amount`, e.g. ISK 1,500 (`amount: 1500`) as 150000; null when Stripe
+ * cannot charge it exactly (a fraction of Stripe's unit, or a three-decimal amount not ending in 0).
+ */
+export function toStripeAmount(price) {
+    const shift = getDigitShift(price.currency);
+    const amount = shift >= 0 ? price.amount * 10 ** shift : price.amount / 10 ** -shift;
+    if (!Number.isInteger(amount))
+        return null;
+    if (STRIPE_THREE_DECIMAL_CURRENCIES.has(price.currency) && amount % 10 !== 0)
+        return null;
+    return amount;
+}
+/**
+ * An amount Stripe reports (a checkout's total, a charge's refunded total) in billing's unit,
+ * rounded down when it is not whole, so a refunded total is never over-counted.
+ */
+export function fromStripeAmount(amount, currency) {
+    const shift = getDigitShift(currency);
+    return shift >= 0 ? Math.floor(amount / 10 ** shift) : amount * 10 ** -shift;
+}
+/** Why Stripe cannot charge `price` exactly, for the config error; null when it can. */
+export function describeStripePriceProblem(price) {
+    if (toStripeAmount(price) !== null)
+        return null;
+    if (STRIPE_THREE_DECIMAL_CURRENCIES.has(price.currency)) {
+        return `stripe() charges ${price.currency} in multiples of 10 of its minor unit; round the amount to end in 0`;
+    }
+    return `stripe() charges ${price.currency} with ${String(getStripeMinorUnitDigits(price.currency))} decimals; the amount must be a whole number of them`;
+}
+//# sourceMappingURL=stripe-currency.js.map

package/dist/stripe-currency.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe-currency.js","sourceRoot":"","sources":["../src/stripe-currency.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAwB,IAAI,GAAG,CAAC;IACzE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;CACxG,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAwB,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC;AAEjH,wFAAwF;AACxF,MAAM,UAAU,wBAAwB,CAAC,QAAgB;IACvD,IAAI,8BAA8B,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,CAAC;IAC3D,IAAI,+BAA+B,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,CAAC;IAC5D,OAAO,CAAC,CAAC;AACX,CAAC;AAED,uFAAuF;AACvF,SAAS,aAAa,CAAC,QAAgB;IACrC,OAAO,wBAAwB,CAAC,QAAQ,CAAC,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,KAAgB;IAC7C,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC;IACrF,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,+BAA+B,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,MAAM,GAAG,EAAE,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1F,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc,EAAE,QAAgB;IAC/D,MAAM,KAAK,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;IACtC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC;AAC/E,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,0BAA0B,CAAC,KAAgB;IACzD,IAAI,cAAc,CAAC,KAAK,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,+BAA+B,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACxD,OAAO,oBAAoB,KAAK,CAAC,QAAQ,qEAAqE,CAAC;IACjH,CAAC;IACD,OAAO,oBAAoB,KAAK,CAAC,QAAQ,SAAS,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,sDAAsD,CAAC;AAC3J,CAAC"}