@softure-ai/billing 0.0.0-stage → 0.1.6

package/dist/calendar.d.ts

@@ -0,0 +1,26 @@
+/** The calendar day of an instant in a time zone, as a day count; two of them subtract to days. */
+export declare function getDayNumber(instant: Date, timezone: string): number;
+/**
+ * The instant a local day starts (00:00 there). Two passes settle the offset across a DST change.
+ * In a zone that skips midnight itself (America/Santiago, America/Havana) 00:00 does not exist and
+ * the passes land in the previous day, so the result moves on by hours to the first instant of
+ * the day: 01:00 after a one-hour gap.
+ */
+export declare function getStartOfDay(dayNumber: number, timezone: string): Date;
+/**
+ * The end of a trial of `days` days begun at `start`: the start of the local day `days` days after
+ * the start day. The start day counts as the first day, so a 14-day trial begun on 3 October ends
+ * when 17 October begins. Zero days ends it at the start of the start day: no trial.
+ */
+export declare function getTrialEnd(start: Date, days: number, timezone: string): Date;
+/**
+ * Local calendar days of access left before `end`, today included: 1 on the last day. Assumes
+ * `end` is after `now`.
+ */
+export declare function getDaysLeft(end: Date, now: Date, timezone: string): number;
+/**
+ * The day number (as `getDayNumber` counts) of a `YYYY-MM-DD` calendar day, or null when the text
+ * is not one (`2026-1-1`, `2026-02-30`).
+ */
+export declare function parseDay(day: string): number | null;
+//# sourceMappingURL=calendar.d.ts.map

package/dist/calendar.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendar.d.ts","sourceRoot":"","sources":["../src/calendar.ts"],"names":[],"mappings":"AAmCA,mGAAmG;AACnG,wBAAgB,YAAY,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAEpE;AAID;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAQvE;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAE7E;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE1E;AAID;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQnD"}

package/dist/calendar.js

@@ -0,0 +1,81 @@
+// Calendar days in the app's IANA time zone, without a date library: trials end at the start of a
+// local day and "days left" counts local days, as people do.
+const DAY_MS = 24 * 60 * 60 * 1000;
+const formatters = new Map();
+function getFormatter(timezone) {
+    let format = formatters.get(timezone);
+    if (format === undefined) {
+        format = new Intl.DateTimeFormat("en-CA", {
+            timeZone: timezone,
+            hourCycle: "h23",
+            year: "numeric",
+            month: "2-digit",
+            day: "2-digit",
+            hour: "2-digit",
+            minute: "2-digit",
+            second: "2-digit",
+        });
+        formatters.set(timezone, format);
+    }
+    return format;
+}
+/** The local wall-clock time of an instant, read as if it were UTC (milliseconds). */
+function getLocalWallTime(instant, timezone) {
+    const parts = Object.fromEntries(getFormatter(timezone)
+        .formatToParts(instant)
+        .map((part) => [part.type, part.value]));
+    return Date.UTC(Number(parts.year), Number(parts.month) - 1, Number(parts.day), Number(parts.hour), Number(parts.minute), Number(parts.second));
+}
+/** The calendar day of an instant in a time zone, as a day count; two of them subtract to days. */
+export function getDayNumber(instant, timezone) {
+    return Math.floor(getLocalWallTime(instant.getTime(), timezone) / DAY_MS);
+}
+const HOUR_MS = 60 * 60 * 1000;
+/**
+ * The instant a local day starts (00:00 there). Two passes settle the offset across a DST change.
+ * In a zone that skips midnight itself (America/Santiago, America/Havana) 00:00 does not exist and
+ * the passes land in the previous day, so the result moves on by hours to the first instant of
+ * the day: 01:00 after a one-hour gap.
+ */
+export function getStartOfDay(dayNumber, timezone) {
+    const wallTime = dayNumber * DAY_MS;
+    let instant = wallTime;
+    for (let pass = 0; pass < 2; pass += 1)
+        instant = wallTime - (getLocalWallTime(instant, timezone) - instant);
+    for (let step = 0; step < 3 && getDayNumber(new Date(instant), timezone) < dayNumber; step += 1) {
+        instant = Math.floor(instant / HOUR_MS) * HOUR_MS + HOUR_MS;
+    }
+    return new Date(instant);
+}
+/**
+ * The end of a trial of `days` days begun at `start`: the start of the local day `days` days after
+ * the start day. The start day counts as the first day, so a 14-day trial begun on 3 October ends
+ * when 17 October begins. Zero days ends it at the start of the start day: no trial.
+ */
+export function getTrialEnd(start, days, timezone) {
+    return getStartOfDay(getDayNumber(start, timezone) + days, timezone);
+}
+/**
+ * Local calendar days of access left before `end`, today included: 1 on the last day. Assumes
+ * `end` is after `now`.
+ */
+export function getDaysLeft(end, now, timezone) {
+    return getDayNumber(new Date(end.getTime() - 1), timezone) - getDayNumber(now, timezone) + 1;
+}
+const DAY_PATTERN = /^(\d{4})-(\d{2})-(\d{2})$/;
+/**
+ * The day number (as `getDayNumber` counts) of a `YYYY-MM-DD` calendar day, or null when the text
+ * is not one (`2026-1-1`, `2026-02-30`).
+ */
+export function parseDay(day) {
+    const match = DAY_PATTERN.exec(day);
+    if (match === null)
+        return null;
+    const [year, month, date] = [Number(match[1]), Number(match[2]), Number(match[3])];
+    const wallTime = Date.UTC(year, month - 1, date);
+    const parsed = new Date(wallTime);
+    if (parsed.getUTCFullYear() !== year || parsed.getUTCMonth() !== month - 1 || parsed.getUTCDate() !== date)
+        return null;
+    return wallTime / DAY_MS;
+}
+//# sourceMappingURL=calendar.js.map

package/dist/calendar.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"calendar.js","sourceRoot":"","sources":["../src/calendar.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAClG,6DAA6D;AAE7D,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEnC,MAAM,UAAU,GAAG,IAAI,GAAG,EAA+B,CAAC;AAE1D,SAAS,YAAY,CAAC,QAAgB;IACpC,IAAI,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,GAAG,IAAI,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE;YACxC,QAAQ,EAAE,QAAQ;YAClB,SAAS,EAAE,KAAK;YAChB,IAAI,EAAE,SAAS;YACf,KAAK,EAAE,SAAS;YAChB,GAAG,EAAE,SAAS;YACd,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;QACH,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACnC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,sFAAsF;AACtF,SAAS,gBAAgB,CAAC,OAAe,EAAE,QAAgB;IACzD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,CAC9B,YAAY,CAAC,QAAQ,CAAC;SACnB,aAAa,CAAC,OAAO,CAAC;SACtB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAC1C,CAAC;IACF,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;AAClJ,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,YAAY,CAAC,OAAa,EAAE,QAAgB;IAC1D,OAAO,IAAI,CAAC,KAAK,CAAC,gBAAgB,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,GAAG,MAAM,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,OAAO,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE/B;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,SAAiB,EAAE,QAAgB;IAC/D,MAAM,QAAQ,GAAG,SAAS,GAAG,MAAM,CAAC;IACpC,IAAI,OAAO,GAAG,QAAQ,CAAC;IACvB,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,IAAI,CAAC;QAAE,OAAO,GAAG,QAAQ,GAAG,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,CAAC,GAAG,OAAO,CAAC,CAAC;IAC7G,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,IAAI,YAAY,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,GAAG,SAAS,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC;QAChG,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,OAAO,GAAG,OAAO,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAW,EAAE,IAAY,EAAE,QAAgB;IACrE,OAAO,aAAa,CAAC,YAAY,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC,CAAC;AACvE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAAS,EAAE,GAAS,EAAE,QAAgB;IAChE,OAAO,YAAY,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,EAAE,QAAQ,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC/F,CAAC;AAED,MAAM,WAAW,GAAG,2BAA2B,CAAC;AAEhD;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACnF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IACjD,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,cAAc,EAAE,KAAK,IAAI,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,KAAK,GAAG,CAAC,IAAI,MAAM,CAAC,UAAU,EAAE,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACxH,OAAO,QAAQ,GAAG,MAAM,CAAC;AAC3B,CAAC"}

package/dist/contract.d.ts

@@ -0,0 +1,187 @@
+import type { CoreErrorCode, Locale } from "@softure-ai/core";
+import type { InvoiceFieldErrorCode } from "./invoice.js";
+export type BillingErrorCode = 
+/** The account may read but not write: its trial or its paid access ended. */
+"billing.read_only"
+/** No account has this id. */
+ | "billing.account_unknown"
+/** A grant or a trial extension that ends now or earlier. */
+ | "billing.end_not_in_future";
+/** Every code a guarded write can show: the guard's own and the generic ones. */
+export type BillingFormErrorCode = BillingErrorCode | CoreErrorCode;
+export declare const ENTITLEMENT_STATUSES: readonly ["trial", "paid", "read_only"];
+export type EntitlementStatus = (typeof ENTITLEMENT_STATUSES)[number];
+/** What is stored per account (or derived for an account without a row). */
+export interface EntitlementRecord {
+    /** The first instant the trial no longer covers. */
+    readonly trialEndsAt: Date;
+    /**
+     * The first instant dated paid access no longer covers; null when never paid or revoked. Kept
+     * under lifetime access, so a refunded lifetime falls back to the periods bought beside it.
+     */
+    readonly paidUntil: Date | null;
+    /** Paid access without an end; it wins over `paidUntil`. */
+    readonly isLifetime: boolean;
+}
+/** Where an account stands at one instant: the state machine's answer. */
+export type Entitlement = {
+    readonly status: "trial";
+    readonly endsAt: Date;
+    /** Calendar days of access left in the app's time zone, today included. */
+    readonly daysLeft: number;
+    /** Inside the trial reminder window: time to show the notice. */
+    readonly isEnding: boolean;
+} | {
+    readonly status: "paid";
+    /** Null for lifetime access. */
+    readonly endsAt: Date | null;
+    /** Null for lifetime access. */
+    readonly daysLeft: number | null;
+    /** Inside the paid reminder window; never for lifetime access. */
+    readonly isEnding: boolean;
+} | {
+    readonly status: "read_only";
+    /** When write access ended. */
+    readonly since: Date;
+    /** Which access ended last. */
+    readonly reason: "trial_ended" | "paid_ended";
+};
+/** A change to an account's entitlement, applied by `changeEntitlement`. */
+export type EntitlementEvent = 
+/** Paid access until `until`; never shortens a later end already granted. */
+{
+    readonly type: "grant";
+    readonly until: Date;
+}
+/** Paid access without an end; the dated end stays beside it. */
+ | {
+    readonly type: "grant_lifetime";
+}
+/** Removes all paid access (a mistaken grant), lifetime included; the trial stays as it was. */
+ | {
+    readonly type: "revoke";
+}
+/**
+ * Moves dated paid access back to end at `until` (a refunded period); never lengthens it. An end
+ * at or before the trial's end drops dated paid access: the account is back on its trial.
+ */
+ | {
+    readonly type: "shorten";
+    readonly until: Date;
+}
+/** Ends lifetime access (a refunded lifetime); dated paid access stays. */
+ | {
+    readonly type: "end_lifetime";
+}
+/** Moves the trial end to `until`; never shortens it. */
+ | {
+    readonly type: "extend_trial";
+    readonly until: Date;
+}
+/**
+ * Merges a record carried over from another system (`importEntitlement`): each end only moves
+ * later and lifetime only turns on, so an import never takes access away and a repeat changes
+ * nothing. Ends may lie in the past: an ended trial or period is recorded as it was. Null keeps
+ * what the account has.
+ */
+ | {
+    readonly type: "import";
+    readonly trialEndsAt: Date | null;
+    readonly paidUntil: Date | null;
+    readonly isLifetime: boolean;
+};
+/** What one payment of a plan added to an account, stored with the payment so a refund takes back only that. */
+export type PaymentGrant = 
+/** A paid period from where access ended (or the payment's instant) to the period's end. */
+{
+    readonly kind: "period";
+    readonly from: Date;
+    readonly until: Date;
+} | {
+    readonly kind: "lifetime";
+};
+/** Copy per locale; a locale without its own text falls back to `en`. */
+export type LocalizedText = Readonly<Partial<Record<Locale, string>>>;
+export declare const PERIOD_UNITS: readonly ["day", "week", "month", "year"];
+export type PeriodUnit = (typeof PERIOD_UNITS)[number];
+/** How long one payment of a plan gives access: `count` units, or for good. */
+export type PlanPeriod = {
+    readonly unit: PeriodUnit;
+    readonly count: number;
+} | {
+    readonly unit: "lifetime";
+};
+/** A price in the currency's minor unit (cents, grosze; whole yen for JPY), as payment providers take it. */
+export interface PlanPrice {
+    readonly amount: number;
+    /** ISO 4217, upper case, e.g. `PLN`, `EUR`. */
+    readonly currency: string;
+}
+/** A plan from `billing({ plans })`. */
+export interface Plan {
+    /** Kebab-case, unique; the payment page and the payment providers name the plan by it. */
+    readonly id: string;
+    readonly name: LocalizedText;
+    readonly description?: LocalizedText;
+    readonly price: PlanPrice;
+    readonly period: PlanPeriod;
+    /** What the plan includes, one line each, in the order the tile lists them. */
+    readonly features: readonly LocalizedText[];
+    /** Drawn as the recommended plan. */
+    readonly isFeatured: boolean;
+}
+/** Why a payment could not start. */
+export type PaymentErrorCode = 
+/** A plan id the config does not declare: a tampered or outdated form. */
+"billing.plan_unknown"
+/** An invoice field is missing, too long or has control characters; `fieldErrors` says which. */
+ | "billing.invoice_details_invalid"
+/** The payment provider refused or failed; nothing was charged or requested. */
+ | "billing.payment_failed"
+/** The account has lifetime access: there is nothing left to pay for or grant. */
+ | "billing.lifetime_active";
+/** Every code the payment form can show, the invoice fields' own included. */
+export type PaymentFormErrorCode = PaymentErrorCode | InvoiceFieldErrorCode | "security.rate_limited" | CoreErrorCode;
+/** Every code the admin grant form can show. */
+export type GrantFormErrorCode = "billing.plan_unknown" | "billing.account_unknown" | "billing.lifetime_active" | "auth.forbidden" | CoreErrorCode;
+/** Why an admin could not act on a request or a manual grant. */
+export type AdminErrorCode = 
+/** The request was granted or dismissed already, or never existed. */
+"billing.request_closed"
+/** The grant was revoked already, or never existed. */
+ | "billing.grant_revoked";
+/** Every code the admin page's buttons and account lookup can show. */
+export type AdminActionErrorCode = AdminErrorCode | GrantFormErrorCode;
+/** What the payment action returns to its form (`useActionState`). */
+export interface PaymentFormState {
+    readonly status: "idle" | "requested" | "error";
+    readonly error?: PaymentFormErrorCode;
+    /** Errors of single invoice fields, by field name. */
+    readonly fieldErrors?: Readonly<Record<string, PaymentFormErrorCode>>;
+    /** The invoice details as typed, to fill the fields again after an error. */
+    readonly values?: Readonly<Record<string, string>>;
+}
+export declare const INITIAL_PAYMENT_FORM_STATE: PaymentFormState;
+/** What the admin grant action returns to its form (`useActionState`). */
+export interface GrantFormState {
+    readonly status: "idle" | "granted" | "error";
+    readonly error?: GrantFormErrorCode;
+    /** After a grant: what the account has now, in the app's copy. */
+    readonly notice?: string;
+    /** The email and plan as sent, to fill the form again after an error. */
+    readonly email?: string;
+    readonly planId?: string;
+}
+export declare const INITIAL_GRANT_FORM_STATE: GrantFormState;
+/** What an admin button (grant or dismiss a request, revoke a grant, find an account) returns to its form. */
+export type AdminActionState = {
+    readonly status: "idle";
+} | {
+    readonly status: "done";
+} | {
+    readonly status: "error";
+    readonly error: AdminActionErrorCode;
+    readonly email?: string;
+};
+export declare const INITIAL_ADMIN_ACTION_STATE: AdminActionState;
+//# sourceMappingURL=contract.d.ts.map

package/dist/contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.d.ts","sourceRoot":"","sources":["../src/contract.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAE1D,MAAM,MAAM,gBAAgB;AAC1B,8EAA8E;AAC5E,mBAAmB;AACrB,8BAA8B;GAC5B,yBAAyB;AAC3B,6DAA6D;GAC3D,2BAA2B,CAAC;AAEhC,iFAAiF;AACjF,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAEpE,eAAO,MAAM,oBAAoB,yCAA0C,CAAC;AAE5E,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEtE,4EAA4E;AAC5E,MAAM,WAAW,iBAAiB;IAChC,oDAAoD;IACpD,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IAChC,4DAA4D;IAC5D,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B;AAED,0EAA0E;AAC1E,MAAM,MAAM,WAAW,GACnB;IACE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IACtB,2EAA2E;IAC3E,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,gCAAgC;IAChC,QAAQ,CAAC,MAAM,EAAE,IAAI,GAAG,IAAI,CAAC;IAC7B,gCAAgC;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,kEAAkE;IAClE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,+BAA+B;IAC/B,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IACrB,+BAA+B;IAC/B,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,YAAY,CAAC;CAC/C,CAAC;AAEN,4EAA4E;AAC5E,MAAM,MAAM,gBAAgB;AAC1B,6EAA6E;AAC3E;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;CAAE;AAClD,iEAAiE;GAC/D;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE;AACrC,gGAAgG;GAC9F;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;CAAE;AAC7B;;;GAGG;GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;CAAE;AACpD,2EAA2E;GACzE;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAA;CAAE;AACnC,yDAAyD;GACvD;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;CAAE;AACzD;;;;;GAKG;GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,GAAG,IAAI,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAA;CAAE,CAAC;AAElI,gHAAgH;AAChH,MAAM,MAAM,YAAY;AACtB,4FAA4F;AAC1F;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAA;CAAE,GACtE;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC;AAElC,yEAAyE;AACzE,MAAM,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AAEtE,eAAO,MAAM,YAAY,2CAA4C,CAAC;AAEtE,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,+EAA+E;AAC/E,MAAM,MAAM,UAAU,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC;AAE/G,6GAA6G;AAC7G,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,+CAA+C;IAC/C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,wCAAwC;AACxC,MAAM,WAAW,IAAI;IACnB,0FAA0F;IAC1F,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;IAC5C,qCAAqC;IACrC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B;AAED,qCAAqC;AACrC,MAAM,MAAM,gBAAgB;AAC1B,0EAA0E;AACxE,sBAAsB;AACxB,iGAAiG;GAC/F,iCAAiC;AACnC,gFAAgF;GAC9E,wBAAwB;AAC1B,kFAAkF;GAChF,yBAAyB,CAAC;AAE9B,8EAA8E;AAC9E,MAAM,MAAM,oBAAoB,GAAG,gBAAgB,GAAG,qBAAqB,GAAG,uBAAuB,GAAG,aAAa,CAAC;AAEtH,gDAAgD;AAChD,MAAM,MAAM,kBAAkB,GAAG,sBAAsB,GAAG,yBAAyB,GAAG,yBAAyB,GAAG,gBAAgB,GAAG,aAAa,CAAC;AAEnJ,iEAAiE;AACjE,MAAM,MAAM,cAAc;AACxB,sEAAsE;AACpE,wBAAwB;AAC1B,uDAAuD;GACrD,uBAAuB,CAAC;AAE5B,uEAAuE;AACvE,MAAM,MAAM,oBAAoB,GAAG,cAAc,GAAG,kBAAkB,CAAC;AAEvE,sEAAsE;AACtE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,OAAO,CAAC;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,oBAAoB,CAAC;IACtC,sDAAsD;IACtD,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACtE,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACpD;AAED,eAAO,MAAM,0BAA0B,EAAE,gBAAqC,CAAC;AAE/E,0EAA0E;AAC1E,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IAC9C,QAAQ,CAAC,KAAK,CAAC,EAAE,kBAAkB,CAAC;IACpC,kEAAkE;IAClE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,yEAAyE;IACzE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,eAAO,MAAM,wBAAwB,EAAE,cAAmC,CAAC;AAE3E,8GAA8G;AAC9G,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3B;IAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhG,eAAO,MAAM,0BAA0B,EAAE,gBAAqC,CAAC"}

package/dist/contract.js

@@ -0,0 +1,6 @@
+export const ENTITLEMENT_STATUSES = ["trial", "paid", "read_only"];
+export const PERIOD_UNITS = ["day", "week", "month", "year"];
+export const INITIAL_PAYMENT_FORM_STATE = { status: "idle" };
+export const INITIAL_GRANT_FORM_STATE = { status: "idle" };
+export const INITIAL_ADMIN_ACTION_STATE = { status: "idle" };
+//# sourceMappingURL=contract.js.map

package/dist/contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contract.js","sourceRoot":"","sources":["../src/contract.ts"],"names":[],"mappings":"AAgBA,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAU,CAAC;AA8E5E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAU,CAAC;AAiEtE,MAAM,CAAC,MAAM,0BAA0B,GAAqB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAa/E,MAAM,CAAC,MAAM,wBAAwB,GAAmB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAQ3E,MAAM,CAAC,MAAM,0BAA0B,GAAqB,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC"}

package/dist/currency-digits.d.ts

@@ -0,0 +1,3 @@
+/** Digits of the minor unit per currency code billing accepts, e.g. `PLN: 2`, `JPY: 0`, `KWD: 3`. */
+export declare const CURRENCY_MINOR_UNIT_DIGITS: Readonly<Record<string, number>>;
+//# sourceMappingURL=currency-digits.d.ts.map

package/dist/currency-digits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"currency-digits.d.ts","sourceRoot":"","sources":["../src/currency-digits.ts"],"names":[],"mappings":"AA+BA,qGAAqG;AACrG,eAAO,MAAM,0BAA0B,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAIvE,CAAC"}

package/dist/currency-digits.js

@@ -0,0 +1,32 @@
+// The minor unit billing pins for each currency it accepts: a plan's `price.amount` counts these
+// units on every runtime, whatever the runtime's `Intl` (CLDR) says. Source: ISO 4217 List One,
+// published 2024-06-25, without fund codes, `N.A.` units (metals, XDR, XTS, XXX ...) and UYW (a wage
+// index unit), plus the two choices below. CLDR differs from ISO on AFN, ALL, IRR, KPW, LAK, LBP,
+// MMK, RSD, SOS, SYP and YER (0 instead of 2) and IQD (0 instead of 3), and its HUF and TWD digits
+// have changed between Node builds; billing follows ISO, as Stripe does for all but MGA.
+/** ISO 4217 codes by the digits of their minor unit. */
+const CODES_BY_DIGITS = {
+    0: [
+        "BIF", "CLP", "DJF", "GNF", "ISK", "JPY", "KMF", "KRW", "PYG", "RWF", "UGX", "VND", "VUV", "XAF", "XOF", "XPF",
+        // Override: ISO writes 2, but one ariary is five iraimbilanja (not a decimal subunit), and CLDR
+        // and Stripe both count it without a minor unit.
+        "MGA",
+    ],
+    2: [
+        "AED", "AFN", "ALL", "AMD", "ANG", "AOA", "ARS", "AUD", "AWG", "AZN", "BAM", "BBD", "BDT", "BGN", "BMD", "BND",
+        "BOB", "BRL", "BSD", "BTN", "BWP", "BYN", "BZD", "CAD", "CDF", "CHF", "CNY", "COP", "CRC", "CUC", "CUP", "CVE",
+        "CZK", "DKK", "DOP", "DZD", "EGP", "ERN", "ETB", "EUR", "FJD", "FKP", "GBP", "GEL", "GHS", "GIP", "GMD", "GTQ",
+        "GYD", "HKD", "HNL", "HTG", "HUF", "IDR", "ILS", "INR", "IRR", "JMD", "KES", "KGS", "KHR", "KPW", "KYD", "KZT",
+        "LAK", "LBP", "LKR", "LRD", "LSL", "MAD", "MDL", "MKD", "MMK", "MNT", "MOP", "MRU", "MUR", "MVR", "MWK", "MXN",
+        "MYR", "MZN", "NAD", "NGN", "NIO", "NOK", "NPR", "NZD", "PAB", "PEN", "PGK", "PHP", "PKR", "PLN", "QAR", "RON",
+        "RSD", "RUB", "SAR", "SBD", "SCR", "SDG", "SEK", "SGD", "SHP", "SLE", "SOS", "SRD", "SSP", "STN", "SVC", "SYP",
+        "SZL", "THB", "TJS", "TMT", "TOP", "TRY", "TTD", "TWD", "TZS", "UAH", "USD", "UYU", "UZS", "VED", "VES", "WST",
+        "XCD", "YER", "ZAR", "ZMW", "ZWG",
+        // Addition: the Caribbean guilder, which replaced ANG on 2025-03-31, after the pinned list.
+        "XCG",
+    ],
+    3: ["BHD", "IQD", "JOD", "KWD", "LYD", "OMR", "TND"],
+};
+/** Digits of the minor unit per currency code billing accepts, e.g. `PLN: 2`, `JPY: 0`, `KWD: 3`. */
+export const CURRENCY_MINOR_UNIT_DIGITS = Object.freeze(Object.fromEntries(Object.entries(CODES_BY_DIGITS).flatMap(([digits, codes]) => codes.map((code) => [code, Number(digits)]))));
+//# sourceMappingURL=currency-digits.js.map

package/dist/currency-digits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"currency-digits.js","sourceRoot":"","sources":["../src/currency-digits.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,gGAAgG;AAChG,qGAAqG;AACrG,kGAAkG;AAClG,mGAAmG;AACnG,yFAAyF;AAEzF,wDAAwD;AACxD,MAAM,eAAe,GAAmD;IACtE,CAAC,EAAE;QACD,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;QAC9G,gGAAgG;QAChG,iDAAiD;QACjD,KAAK;KACN;IACD,CAAC,EAAE;QACD,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;QAC9G,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;QAC9G,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;QAC9G,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;QAC9G,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;QAC9G,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;QAC9G,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;QAC9G,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;QAC9G,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;QACjC,4FAA4F;QAC5F,KAAK;KACN;IACD,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC;CACrD,CAAC;AAEF,qGAAqG;AACrG,MAAM,CAAC,MAAM,0BAA0B,GAAqC,MAAM,CAAC,MAAM,CACvF,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAU,CAAC,CAAC,CACnH,CACF,CAAC"}

package/dist/entitlement.d.ts

@@ -0,0 +1,25 @@
+import { type Err, type Ok } from "@softure-ai/core";
+import type { BillingErrorCode, Entitlement, EntitlementEvent, EntitlementRecord } from "./contract.js";
+export interface EntitlementPolicy {
+    /** The app's IANA time zone: days left are counted there. */
+    readonly timezone: string;
+    /** From how many days left a trial counts as ending; 0 never. */
+    readonly trialReminderDays: number;
+    /** From how many days left paid access counts as ending; 0 never. */
+    readonly paidReminderDays: number;
+}
+/**
+ * The status of `record` at `now`. Paid access wins over the trial; access covers instants before
+ * its end, so at the end itself the account is read-only.
+ */
+export declare function resolveEntitlement(record: EntitlementRecord, now: Date, policy: EntitlementPolicy): Entitlement;
+/** Whether an account in this state may write. */
+export declare function hasWriteAccess(entitlement: Entitlement): boolean;
+/**
+ * The record after `event` at `now`. Grants and trial extensions must end after `now` and never
+ * shorten what the account already has; an import never shortens either, but may record past ends;
+ * a revoke ends paid access, lifetime included. The dated end lives on under lifetime access: a
+ * grant still extends it, and ending lifetime falls back to it.
+ */
+export declare function applyEntitlementEvent(record: EntitlementRecord, event: EntitlementEvent, now: Date): Ok<EntitlementRecord> | Err<BillingErrorCode>;
+//# sourceMappingURL=entitlement.d.ts.map

package/dist/entitlement.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlement.d.ts","sourceRoot":"","sources":["../src/entitlement.ts"],"names":[],"mappings":"AAEA,OAAO,EAAW,KAAK,GAAG,EAAE,KAAK,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAE9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAExG,MAAM,WAAW,iBAAiB;IAChC,6DAA6D;IAC7D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,qEAAqE;IACrE,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,iBAAiB,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,iBAAiB,GAAG,WAAW,CAY/G;AAED,kDAAkD;AAClD,wBAAgB,cAAc,CAAC,WAAW,EAAE,WAAW,GAAG,OAAO,CAEhE;AAYD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,iBAAiB,EAAE,KAAK,EAAE,gBAAgB,EAAE,GAAG,EAAE,IAAI,GAAG,EAAE,CAAC,iBAAiB,CAAC,GAAG,GAAG,CAAC,gBAAgB,CAAC,CA6BlJ"}

package/dist/entitlement.js

@@ -0,0 +1,75 @@
+// The entitlement state machine, pure: a record and an instant give the status, and an event gives
+// the next record. No database and no clock here, so every transition is a plain unit test.
+import { err, ok } from "@softure-ai/core";
+import { getDaysLeft } from "./calendar.js";
+/**
+ * The status of `record` at `now`. Paid access wins over the trial; access covers instants before
+ * its end, so at the end itself the account is read-only.
+ */
+export function resolveEntitlement(record, now, policy) {
+    if (record.isLifetime)
+        return { status: "paid", endsAt: null, daysLeft: null, isEnding: false };
+    if (record.paidUntil !== null && now < record.paidUntil) {
+        const daysLeft = getDaysLeft(record.paidUntil, now, policy.timezone);
+        return { status: "paid", endsAt: record.paidUntil, daysLeft, isEnding: daysLeft <= policy.paidReminderDays };
+    }
+    if (now < record.trialEndsAt) {
+        const daysLeft = getDaysLeft(record.trialEndsAt, now, policy.timezone);
+        return { status: "trial", endsAt: record.trialEndsAt, daysLeft, isEnding: daysLeft <= policy.trialReminderDays };
+    }
+    if (record.paidUntil !== null && record.paidUntil > record.trialEndsAt)
+        return { status: "read_only", since: record.paidUntil, reason: "paid_ended" };
+    return { status: "read_only", since: record.trialEndsAt, reason: "trial_ended" };
+}
+/** Whether an account in this state may write. */
+export function hasWriteAccess(entitlement) {
+    return entitlement.status !== "read_only";
+}
+/** The later of two instants. */
+function getLater(first, second) {
+    return first > second ? first : second;
+}
+/** The earlier of two instants. */
+function getEarlier(first, second) {
+    return first < second ? first : second;
+}
+/**
+ * The record after `event` at `now`. Grants and trial extensions must end after `now` and never
+ * shorten what the account already has; an import never shortens either, but may record past ends;
+ * a revoke ends paid access, lifetime included. The dated end lives on under lifetime access: a
+ * grant still extends it, and ending lifetime falls back to it.
+ */
+export function applyEntitlementEvent(record, event, now) {
+    switch (event.type) {
+        case "grant": {
+            if (event.until <= now)
+                return err("billing.end_not_in_future");
+            const paidUntil = record.paidUntil === null ? event.until : getLater(record.paidUntil, event.until);
+            return ok({ ...record, paidUntil });
+        }
+        case "grant_lifetime":
+            return ok({ ...record, isLifetime: true });
+        case "revoke":
+            return ok({ ...record, paidUntil: null, isLifetime: false });
+        case "shorten": {
+            if (record.paidUntil === null)
+                return ok(record);
+            const paidUntil = getEarlier(record.paidUntil, event.until);
+            // Paid access that would end inside the trial adds nothing: the account is back on its trial.
+            return ok({ ...record, paidUntil: paidUntil > record.trialEndsAt ? paidUntil : null });
+        }
+        case "end_lifetime":
+            return ok({ ...record, isLifetime: false });
+        case "extend_trial":
+            if (event.until <= now)
+                return err("billing.end_not_in_future");
+            return ok({ ...record, trialEndsAt: getLater(record.trialEndsAt, event.until) });
+        case "import":
+            return ok({
+                trialEndsAt: event.trialEndsAt === null ? record.trialEndsAt : getLater(record.trialEndsAt, event.trialEndsAt),
+                paidUntil: event.paidUntil === null || (record.paidUntil !== null && record.paidUntil >= event.paidUntil) ? record.paidUntil : event.paidUntil,
+                isLifetime: record.isLifetime || event.isLifetime,
+            });
+    }
+}
+//# sourceMappingURL=entitlement.js.map

package/dist/entitlement.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"entitlement.js","sourceRoot":"","sources":["../src/entitlement.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,4FAA4F;AAC5F,OAAO,EAAE,GAAG,EAAE,EAAE,EAAqB,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAY5C;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAyB,EAAE,GAAS,EAAE,MAAyB;IAChG,IAAI,MAAM,CAAC,UAAU;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAChG,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,IAAI,GAAG,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACrE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC;IAC/G,CAAC;IACD,IAAI,GAAG,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,WAAW,EAAE,GAAG,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC;QACvE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;IACnH,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,GAAG,MAAM,CAAC,WAAW;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACtJ,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;AACnF,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,cAAc,CAAC,WAAwB;IACrD,OAAO,WAAW,CAAC,MAAM,KAAK,WAAW,CAAC;AAC5C,CAAC;AAED,iCAAiC;AACjC,SAAS,QAAQ,CAAC,KAAW,EAAE,MAAY;IACzC,OAAO,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;AACzC,CAAC;AAED,mCAAmC;AACnC,SAAS,UAAU,CAAC,KAAW,EAAE,MAAY;IAC3C,OAAO,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAyB,EAAE,KAAuB,EAAE,GAAS;IACjG,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,KAAK,CAAC,KAAK,IAAI,GAAG;gBAAE,OAAO,GAAG,CAAC,2BAA2B,CAAC,CAAC;YAChE,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACpG,OAAO,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,gBAAgB;YACnB,OAAO,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;QAC7C,KAAK,QAAQ;YACX,OAAO,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/D,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,IAAI,MAAM,CAAC,SAAS,KAAK,IAAI;gBAAE,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;YACjD,MAAM,SAAS,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5D,8FAA8F;YAC9F,OAAO,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,KAAK,cAAc;YACjB,OAAO,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9C,KAAK,cAAc;YACjB,IAAI,KAAK,CAAC,KAAK,IAAI,GAAG;gBAAE,OAAO,GAAG,CAAC,2BAA2B,CAAC,CAAC;YAChE,OAAO,EAAE,CAAC,EAAE,GAAG,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACnF,KAAK,QAAQ;YACX,OAAO,EAAE,CAAC;gBACR,WAAW,EAAE,KAAK,CAAC,WAAW,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,WAAW,CAAC;gBAC9G,SAAS,EAAE,KAAK,CAAC,SAAS,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI,IAAI,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS;gBAC9I,UAAU,EAAE,MAAM,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU;aAClD,CAAC,CAAC;IACP,CAAC;AACH,CAAC"}

package/dist/fields.d.ts

@@ -0,0 +1,25 @@
+export declare const PLAN_FIELD = "plan";
+export declare const EMAIL_FIELD = "email";
+export declare const INVOICE_FIELDS: {
+    readonly name: "invoiceName";
+    readonly taxId: "invoiceTaxId";
+    readonly address: "invoiceAddress";
+};
+export type InvoiceField = (typeof INVOICE_FIELDS)[keyof typeof INVOICE_FIELDS];
+export declare const INVOICE_LIMITS: {
+    readonly name: 200;
+    readonly taxId: 32;
+    readonly address: 500;
+};
+/** The limit of the invoice field with this form name, for the too-long message. */
+export declare function getInvoiceFieldLimit(field: string): number | undefined;
+/** The payment page's parameter a hosted checkout returns with: `?checkout=success` or `?checkout=cancelled`. */
+export declare const CHECKOUT_PARAM = "checkout";
+export declare const CHECKOUT_RESULTS: readonly ["success", "cancelled"];
+export type CheckoutResult = (typeof CHECKOUT_RESULTS)[number];
+/** The admin page's hidden fields: the request a button grants or dismisses, the grant one revokes. */
+export declare const REQUEST_FIELD = "request";
+export declare const GRANT_FIELD = "grant";
+/** The admin page's parameter that names the account whose history it shows (its id, never its email). */
+export declare const ACCOUNT_PARAM = "account";
+//# sourceMappingURL=fields.d.ts.map

package/dist/fields.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fields.d.ts","sourceRoot":"","sources":["../src/fields.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,UAAU,SAAS,CAAC;AACjC,eAAO,MAAM,WAAW,UAAU,CAAC;AAEnC,eAAO,MAAM,cAAc;;;;CAIjB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,OAAO,cAAc,CAAC,CAAC;AAEhF,eAAO,MAAM,cAAc;;;;CAIjB,CAAC;AAEX,oFAAoF;AACpF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGtE;AAED,iHAAiH;AACjH,eAAO,MAAM,cAAc,aAAa,CAAC;AAEzC,eAAO,MAAM,gBAAgB,mCAAoC,CAAC;AAElE,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAE/D,uGAAuG;AACvG,eAAO,MAAM,aAAa,YAAY,CAAC;AACvC,eAAO,MAAM,WAAW,UAAU,CAAC;AAEnC,0GAA0G;AAC1G,eAAO,MAAM,aAAa,YAAY,CAAC"}

package/dist/fields.js

@@ -0,0 +1,27 @@
+// Form field names shared by the forms (`/ui`) and the actions that read them (`/next`).
+export const PLAN_FIELD = "plan";
+export const EMAIL_FIELD = "email";
+export const INVOICE_FIELDS = {
+    name: "invoiceName",
+    taxId: "invoiceTaxId",
+    address: "invoiceAddress",
+};
+export const INVOICE_LIMITS = {
+    name: 200,
+    taxId: 32,
+    address: 500,
+};
+/** The limit of the invoice field with this form name, for the too-long message. */
+export function getInvoiceFieldLimit(field) {
+    const key = Object.keys(INVOICE_FIELDS).find((name) => INVOICE_FIELDS[name] === field);
+    return key === undefined ? undefined : INVOICE_LIMITS[key];
+}
+/** The payment page's parameter a hosted checkout returns with: `?checkout=success` or `?checkout=cancelled`. */
+export const CHECKOUT_PARAM = "checkout";
+export const CHECKOUT_RESULTS = ["success", "cancelled"];
+/** The admin page's hidden fields: the request a button grants or dismisses, the grant one revokes. */
+export const REQUEST_FIELD = "request";
+export const GRANT_FIELD = "grant";
+/** The admin page's parameter that names the account whose history it shows (its id, never its email). */
+export const ACCOUNT_PARAM = "account";
+//# sourceMappingURL=fields.js.map

package/dist/fields.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fields.js","sourceRoot":"","sources":["../src/fields.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC;AACjC,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC;AAEnC,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,aAAa;IACnB,KAAK,EAAE,cAAc;IACrB,OAAO,EAAE,gBAAgB;CACjB,CAAC;AAIX,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,IAAI,EAAE,GAAG;IACT,KAAK,EAAE,EAAE;IACT,OAAO,EAAE,GAAG;CACJ,CAAC;AAEX,oFAAoF;AACpF,MAAM,UAAU,oBAAoB,CAAC,KAAa;IAChD,MAAM,GAAG,GAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAqC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC;IAC5H,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;AAC7D,CAAC;AAED,iHAAiH;AACjH,MAAM,CAAC,MAAM,cAAc,GAAG,UAAU,CAAC;AAEzC,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,WAAW,CAAU,CAAC;AAIlE,uGAAuG;AACvG,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC;AACvC,MAAM,CAAC,MAAM,WAAW,GAAG,OAAO,CAAC;AAEnC,0GAA0G;AAC1G,MAAM,CAAC,MAAM,aAAa,GAAG,SAAS,CAAC"}