@stewardhq/sdk 0.3.0 → 0.6.0

package/dist/testing.js

@@ -1,3684 +0,0 @@
-import { G as emailTemplateOf, K as emailTemplateSettings, S as AccountUpsertInputSchema, U as emailLocaleOf, W as emailRecipients, X as ActorRefSchema, Y as API_VERSION, a as EVENT_TYPES, d as ACCOUNT_INCLUDES, i as EVENT_DETAIL_SCHEMAS, ot as ExternalRefSchema, q as isEmailRelevant, r as BillingEventSchema, s as LEGACY_EVENT_TYPES, st as IdSchema, w as BillingProfileSchema } from "./_chunks/events.js";
-import { At as checkoutRedirectUrl, Ct as CheckoutSessionCreateInputSchema, E as WebhookEndpointRotateInputSchema, Ft as ProductSettingsPatchSchema, Ht as applySettingsPatch, It as ProductSettingsSchema, M as webhookEndpointUrlProblem, P as PlanSetInputSchema, Ut as isReturnUrlAllowed, X as HEADER_REQUEST_ID, Y as HEADER_IDEMPOTENCY_KEY, at as InvoiceVoidInputSchema, b as DEFAULT_ENDPOINT_EVENT_TYPES, dt as CancelSubscriptionInputSchema, ft as GrantCreateInputSchema, g as buildDoctorReport, lt as manualInvoiceTotals, q as HEADER_ACTOR_REF, qt as CatalogSyncInputSchema, st as ManualInvoiceInputSchema, tt as InvoiceIssueInputSchema, ut as splitInclusiveTax, vt as PortalSessionCreateInputSchema, w as WebhookEndpointCreateInputSchema, z as ERROR_CODES } from "./_chunks/src.js";
-import { i as LIVE_SUBSCRIPTION_STATUSES, r as isValidVkn, s as resolveEntitlements, t as isE164 } from "./_chunks/validators.js";
-import { t as createSteward } from "./_chunks/steward.js";
-import { n as signWebhook } from "./_chunks/webhook.js";
-import { createHash } from "node:crypto";
-//#region src/testing/world.ts
-const DAY_MS = 864e5;
-/** Servisin `DEFAULT_DUNNING_POLICY` kopyası (`domain/dunning-policy.ts`). */
-const DEFAULT_DUNNING_POLICY = {
-	steps: [
-		{
-			afterDays: 1,
-			action: "retry_payment"
-		},
-		{
-			afterDays: 3,
-			action: "retry_payment"
-		},
-		{
-			afterDays: 7,
-			action: "suspend"
-		},
-		{
-			afterDays: 30,
-			action: "terminate"
-		}
-	],
-	dryRun: true
-};
-function createWorld(options) {
-	let offset = 0;
-	const now = () => options.now().getTime() + offset;
-	const id = uuidv7Factory(now);
-	return {
-		productCode: options.productCode,
-		settings: options.settings,
-		permissiveReturnOrigins: options.permissiveReturnOrigins,
-		adminEndpoints: [],
-		dunningPolicy: options.dunningPolicy,
-		endpoint: options.endpointTypes === null ? null : {
-			id: id(),
-			types: new Set(options.endpointTypes)
-		},
-		features: [],
-		plans: /* @__PURE__ */ new Map(),
-		prices: [],
-		defaultPlanCode: null,
-		accounts: /* @__PURE__ */ new Map(),
-		subscriptions: [],
-		sessions: [],
-		portalSessions: [],
-		payments: [],
-		invoices: [],
-		grants: [],
-		events: [],
-		emails: [],
-		now,
-		setNow: (ms) => {
-			const current = now();
-			if (ms > current) offset += ms - current;
-		},
-		id
-	};
-}
-const iso = (ms) => new Date(ms).toISOString();
-const isoOrNull = (ms) => ms === null ? null : iso(ms);
-function sha256Hex(data) {
-	return createHash("sha256").update(data).digest("hex");
-}
-const compare = (a, b) => a < b ? -1 : a > b ? 1 : 0;
-/**
-* Dönem ekleme, UTC; ay sonu sabitlenir (31 Ocak + 1 ay = 28/29 Şubat) — servisin
-* `periods.ts` `addInterval`'ı (date-fns + UTCDate) ile aynı sonuç, süreç saat diliminden bağımsız.
-*/
-function addInterval(from, interval, count = 1) {
-	const d = new Date(from);
-	const months = d.getUTCMonth() + (interval === "year" ? 12 * count : count);
-	const lastDay = new Date(Date.UTC(d.getUTCFullYear(), months + 1, 0)).getUTCDate();
-	return Date.UTC(d.getUTCFullYear(), months, Math.min(d.getUTCDate(), lastDay), d.getUTCHours(), d.getUTCMinutes(), d.getUTCSeconds(), d.getUTCMilliseconds());
-}
-function sortDeep(value) {
-	if (Array.isArray(value)) return value.map(sortDeep);
-	if (value && typeof value === "object") return Object.fromEntries(Object.entries(value).sort(([a], [b]) => compare(a, b)).map(([k, v]) => [k, sortDeep(v)]));
-	return value;
-}
-/** Anahtar sırasından bağımsız metin. */
-const canonicalJson = (value) => JSON.stringify(sortDeep(value));
-/** RFC 9562 UUIDv7: 48 bit ms + 12 bit sayaç (aynı ms'de artar) + rastgele. */
-function uuidv7Factory(clock) {
-	let lastMs = 0;
-	let counter = 0;
-	return () => {
-		let ms = clock();
-		if (ms <= lastMs) {
-			ms = lastMs;
-			if (++counter > 4095) {
-				ms = lastMs + 1;
-				counter = 0;
-			}
-		} else counter = 0;
-		lastMs = ms;
-		const bytes = globalThis.crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(16));
-		for (let i = 0; i < 6; i++) bytes[i] = Math.floor(ms / 2 ** (8 * (5 - i))) & 255;
-		bytes[6] = 112 | counter >> 8 & 15;
-		bytes[7] = counter & 255;
-		bytes[8] = bytes[8] & 63 | 128;
-		const hex = Array.from(bytes, (b) => b.toString(16).padStart(2, "0")).join("");
-		return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
-	};
-}
-/** `GET /v1/catalog` gövdesi (servisin `getCatalog` sırası); senkron yoksa null. */
-function catalogOf(w) {
-	if (w.defaultPlanCode === null) return null;
-	const plans = [...w.plans.values()].filter((p) => p.active).sort((a, b) => a.rank - b.rank || compare(a.code, b.code));
-	const rank = new Map(plans.map((p) => [p.code, p.rank]));
-	const prices = w.prices.filter((p) => p.active && rank.has(p.planCode)).sort((a, b) => rank.get(a.planCode) - rank.get(b.planCode) || compare(a.interval, b.interval) || a.intervalCount - b.intervalCount || compare(a.currency, b.currency));
-	return {
-		product: w.productCode,
-		defaultPlanCode: w.defaultPlanCode,
-		features: [...w.features].sort((a, b) => compare(a.key, b.key)).map((f) => ({
-			key: f.key,
-			type: f.type,
-			...f.description !== void 0 ? { description: f.description } : {}
-		})),
-		plans: plans.map((p) => ({
-			code: p.code,
-			name: p.name,
-			rank: p.rank,
-			sellable: p.sellable,
-			entitlements: Object.fromEntries(Object.entries(p.entitlements).sort(([a], [b]) => compare(a, b)))
-		})),
-		prices: prices.map((p) => ({
-			id: p.id,
-			planCode: p.planCode,
-			interval: p.interval,
-			intervalCount: p.intervalCount,
-			currency: p.currency,
-			amountMinor: p.amountMinor,
-			taxInclusive: p.taxInclusive,
-			taxRateBps: p.taxRateBps,
-			active: p.active,
-			createdAt: iso(p.createdAt)
-		}))
-	};
-}
-/** `GET /v1/catalog` ETag'inin tırnaksız değeri ve `AccountState.catalogVersion`. */
-const catalogVersionOf = (catalog) => sha256Hex(JSON.stringify(catalog)).slice(0, 32);
-function priceOf(w, priceId) {
-	const price = w.prices.find((p) => p.id === priceId);
-	if (!price) throw new Error(`sahte steward: fiyat yok ${priceId}`);
-	return price;
-}
-const LIVE = LIVE_SUBSCRIPTION_STATUSES;
-const DUNNING = ["past_due", "suspended"];
-const isLive = (sub) => LIVE.includes(sub.status);
-const inDunning = (sub) => DUNNING.includes(sub.status);
-function liveSubscription(w, ref) {
-	return w.subscriptions.find((s) => s.accountRef === ref && isLive(s)) ?? null;
-}
-/** Servisin `dunningStateOf`'u: sıradaki aksiyon politikadan (başlangıç + gün). */
-function dunningStateOf(policy, sub) {
-	const next = policy.steps[sub.dunningStep];
-	return {
-		step: sub.dunningStep,
-		nextActionAt: next && sub.dunningStartedAt !== null ? iso(sub.dunningStartedAt + next.afterDays * DAY_MS) : null
-	};
-}
-function computeState(w, account, now) {
-	const catalog = catalogOf(w);
-	if (!catalog) throw new Error(`ürünün varsayılan planı yok (katalog senkronlanmadı): hesap ${account.ref}`);
-	const live = liveSubscription(w, account.ref);
-	const livePrice = live ? priceOf(w, live.priceId) : null;
-	const grants = w.grants.filter((g) => g.accountRef === account.ref && g.revokedAt === null && g.startsAt <= now && (g.endsAt === null || g.endsAt > now)).sort((a, b) => a.createdAt - b.createdAt || compare(a.id, b.id));
-	const listed = new Set(catalog.plans.map((p) => p.code));
-	const retired = [.../* @__PURE__ */ new Set([livePrice?.planCode, ...grants.map((g) => g.planCode)])].filter((code) => typeof code === "string" && !listed.has(code)).flatMap((code) => {
-		const plan = w.plans.get(code);
-		return plan ? [{
-			code: plan.code,
-			rank: plan.rank,
-			entitlements: plan.entitlements
-		}] : [];
-	});
-	const resolved = resolveEntitlements({
-		catalog: {
-			defaultPlanCode: catalog.defaultPlanCode,
-			features: catalog.features,
-			plans: [...catalog.plans, ...retired]
-		},
-		subscription: live && livePrice ? {
-			planCode: livePrice.planCode,
-			status: live.status
-		} : null,
-		grants: grants.map((g) => ({
-			planCode: g.planCode,
-			overrides: g.overrides
-		}))
-	});
-	const open = w.sessions.filter((s) => s.accountRef === account.ref && s.status === "open" && s.expiresAt > now).sort((a, b) => b.createdAt - a.createdAt || compare(b.id, a.id))[0];
-	const openPrice = open ? priceOf(w, open.priceId) : null;
-	const dunning = live !== null && inDunning(live);
-	return {
-		ref: account.ref,
-		displayName: account.displayName,
-		updatedAt: iso(now),
-		catalogVersion: catalogVersionOf(catalog),
-		...resolved,
-		subscription: live && livePrice ? {
-			id: live.id,
-			status: live.status,
-			planCode: livePrice.planCode,
-			interval: livePrice.interval,
-			amountMinor: livePrice.amountMinor,
-			currency: livePrice.currency,
-			currentPeriodEnd: isoOrNull(live.currentPeriodEnd),
-			cancelAt: isoOrNull(live.cancelAt),
-			cancelAtPeriodEnd: live.cancelAtPeriodEnd,
-			pastDueSince: dunning ? isoOrNull(live.pastDueSince ?? live.dunningStartedAt) : null,
-			currentPeriodStart: isoOrNull(live.currentPeriodStart),
-			dunning: dunning ? dunningStateOf(w.dunningPolicy, live) : null,
-			scheduledChange: null
-		} : null,
-		openCheckout: open && openPrice ? {
-			id: open.id,
-			planCode: openPrice.planCode,
-			interval: openPrice.interval,
-			intervalCount: openPrice.intervalCount,
-			currency: openPrice.currency,
-			amountMinor: openPrice.amountMinor,
-			expiresAt: iso(open.expiresAt)
-		} : null,
-		profile: {
-			present: account.profile !== null,
-			kind: account.profile?.kind ?? null
-		}
-	};
-}
-/** Durumun eski (0.1) snapshot izdüşümü. */
-function toSnapshot(state) {
-	const sub = state.subscription;
-	return {
-		version: state.version,
-		planCode: state.planCode,
-		accessState: state.accessState,
-		entitlements: state.entitlements,
-		subscription: sub ? {
-			id: sub.id,
-			status: sub.status,
-			planCode: sub.planCode,
-			interval: sub.interval,
-			amountMinor: sub.amountMinor,
-			currency: sub.currency,
-			currentPeriodEnd: sub.currentPeriodEnd,
-			cancelAt: sub.cancelAt
-		} : null
-	};
-}
-const NOT_COMPARED = /* @__PURE__ */ new Set([
-	"version",
-	"updatedAt",
-	"catalogVersion"
-]);
-const fingerprint = (state) => canonicalJson(Object.fromEntries(Object.entries(state).filter(([k]) => !NOT_COMPARED.has(k))));
-/** Sözleşmeye uyan zarf; uymuyorsa fırlatır (servis transaction'ı düşürür). */
-function envelope(w, ref, state, event, id, createdAt) {
-	const payload = {
-		id,
-		type: event.type,
-		apiVersion: API_VERSION,
-		createdAt: iso(createdAt),
-		product: w.productCode,
-		accountRef: ref,
-		data: {
-			account: state,
-			detail: event.detail
-		}
-	};
-	const parsed = BillingEventSchema.safeParse(payload);
-	if (!parsed.success) throw new Error(`sözleşmeye uymayan event (${event.type}): ${parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ")}`);
-	return payload;
-}
-function emitEvent(w, ref, state, event) {
-	const now = w.now();
-	const id = `evt_${w.id()}`;
-	const payload = envelope(w, ref, state, event, id, now);
-	const wanted = w.endpoint !== null && w.endpoint.types.has(event.type);
-	w.events.push({
-		id,
-		accountRef: ref,
-		type: event.type,
-		payload,
-		delivery: wanted ? {
-			status: "pending",
-			attempts: 0,
-			lastHttpStatus: null,
-			lastError: null,
-			nextAttemptAt: now,
-			deliveredAt: null
-		} : null
-	});
-	sendEmail(w, ref, state, event, id);
-	return id;
-}
-/** The service's email/sender.ts rules without transport (skipped emails are not recorded). */
-function sendEmail(w, ref, state, event, eventId) {
-	const template = emailTemplateOf(event.type);
-	const row = w.accounts.get(ref);
-	if (template === null || !row || row.deletedAt !== void 0) return;
-	if (!emailTemplateSettings(w.settings.emails, template).enabled) return;
-	const detail = event.detail;
-	if (!isEmailRelevant(template, {
-		state,
-		subscriptionId: detail.subscriptionId ?? null,
-		invoiceStatus: "issued"
-	})) return;
-	const to = emailRecipients(row.profile?.email, row.notificationEmails);
-	if (to.length === 0) return;
-	const lastSession = w.sessions.filter((s) => s.accountRef === ref).sort((a, b) => b.createdAt - a.createdAt)[0];
-	w.emails.push({
-		eventId,
-		template,
-		accountRef: ref,
-		to,
-		locale: emailLocaleOf(row.locale, lastSession?.locale, w.settings.defaultLocale),
-		sentAt: w.now()
-	});
-}
-const SNAPSHOT_KEYS = [
-	"planCode",
-	"accessState",
-	"entitlements",
-	"subscription"
-];
-function account(w, ref) {
-	const row = w.accounts.get(ref);
-	if (!row) throw new Error(`sahte steward: hesap yok ${ref}`);
-	return row;
-}
-/** Saklı durum (`readAccountState`); hesap henüz commit edilmediyse hesaplanır. */
-function storedState(w, ref) {
-	return account(w, ref).state ?? commitAccountChange(w, ref, "account.refreshed").state;
-}
-function commitAccountChange(w, ref, change) {
-	const row = account(w, ref);
-	const previous = row.state;
-	const next = computeState(w, row, w.now());
-	const changed = previous === null || fingerprint(previous) !== fingerprint(next);
-	const state = changed ? {
-		version: row.version + 1,
-		...next
-	} : previous;
-	if (changed) {
-		row.version = state.version;
-		row.state = state;
-		row.history.push(state);
-	}
-	const primary = typeof change === "string" ? null : change;
-	let eventId = null;
-	if (primary) eventId = emitEvent(w, ref, state, primary);
-	else if (changed && previous) {
-		const before = toSnapshot(previous);
-		const after = toSnapshot(state);
-		const keys = SNAPSHOT_KEYS.filter((k) => canonicalJson(before[k]) !== canonicalJson(after[k]));
-		if (keys.length > 0) eventId = emitEvent(w, ref, state, {
-			type: "account.updated",
-			detail: { changed: [...keys] }
-		});
-	}
-	let stateEventId = null;
-	if (changed && previous) stateEventId = emitEvent(w, ref, state, {
-		type: "account.state_changed",
-		detail: {
-			cause: primary?.type ?? change,
-			causeEventId: primary ? eventId : null
-		}
-	});
-	return {
-		state,
-		changed,
-		eventId,
-		stateEventId
-	};
-}
-/**
-* Servisin `republishState`'i (`domain/outbox.ts`): verilen (saklı) durumu
-* `account.state_changed` (`cause: "resync"`) olarak yazar; version artmaz, eski
-* tip yok, teslimat filtre kuralıyla. Event id'si döner.
-*/
-function republishState(w, ref, state) {
-	return emitEvent(w, ref, state, {
-		type: "account.state_changed",
-		detail: {
-			cause: "resync",
-			causeEventId: null
-		}
-	});
-}
-function toSubscription(w, row) {
-	const price = priceOf(w, row.priceId);
-	return {
-		id: row.id,
-		accountRef: row.accountRef,
-		status: row.status,
-		planCode: price.planCode,
-		priceId: row.priceId,
-		interval: price.interval,
-		amountMinor: price.amountMinor,
-		currency: price.currency,
-		provider: "fake",
-		providerSubscriptionRef: row.providerSubscriptionRef,
-		cancelAtPeriodEnd: row.cancelAtPeriodEnd,
-		cancelAt: isoOrNull(row.cancelAt),
-		cancelReason: row.cancelReason,
-		canceledAt: isoOrNull(row.canceledAt),
-		startedAt: iso(row.startedAt),
-		currentPeriodStart: isoOrNull(row.currentPeriodStart),
-		currentPeriodEnd: isoOrNull(row.currentPeriodEnd),
-		dunningStartedAt: isoOrNull(row.dunningStartedAt)
-	};
-}
-function toCheckoutSession(w, row) {
-	const price = priceOf(w, row.priceId);
-	return {
-		id: row.id,
-		accountRef: row.accountRef,
-		status: row.status,
-		planCode: price.planCode,
-		interval: price.interval,
-		amountMinor: price.amountMinor,
-		currency: price.currency,
-		provider: "fake",
-		locale: row.locale,
-		successUrl: row.successUrl,
-		cancelUrl: row.cancelUrl,
-		consents: row.consents,
-		actorRef: row.actorRef,
-		failureReason: row.failureReason,
-		subscriptionId: row.subscriptionId,
-		expiresAt: iso(row.expiresAt),
-		createdAt: iso(row.createdAt),
-		completedAt: isoOrNull(row.completedAt)
-	};
-}
-function toGrant(row) {
-	return {
-		id: row.id,
-		accountRef: row.accountRef,
-		planCode: row.planCode,
-		overrides: row.overrides,
-		reason: row.reason,
-		actorRef: row.actorRef,
-		startsAt: iso(row.startsAt),
-		endsAt: isoOrNull(row.endsAt),
-		revokedAt: isoOrNull(row.revokedAt),
-		createdAt: iso(row.createdAt)
-	};
-}
-function toInvoice(row) {
-	return {
-		id: row.id,
-		accountRef: row.accountRef,
-		subscriptionId: row.subscriptionId,
-		paymentId: row.paymentId,
-		status: row.status,
-		number: row.number,
-		currency: row.currency,
-		subtotalMinor: row.subtotalMinor,
-		taxMinor: row.taxMinor,
-		totalMinor: row.totalMinor,
-		taxRateBps: row.taxRateBps,
-		buyer: row.buyer,
-		lines: row.lines,
-		issuer: "manual",
-		externalRef: row.externalRef,
-		hasDocument: row.document !== null,
-		issuedAt: isoOrNull(row.issuedAt),
-		createdAt: iso(row.createdAt),
-		dueAt: isoOrNull(row.dueAt ?? null),
-		note: row.note ?? null,
-		voidedAt: isoOrNull(row.voidedAt ?? null),
-		voidReason: row.voidReason ?? null
-	};
-}
-//#endregion
-//#region src/testing/operations.ts
-const ok = (value) => ({
-	ok: true,
-	value
-});
-const fail = (code, message) => message === void 0 ? {
-	ok: false,
-	code
-} : {
-	ok: false,
-	code,
-	message
-};
-function matchesType(type, value) {
-	switch (type) {
-		case "limit": return value === null || typeof value === "number" && Number.isInteger(value) && value >= 0;
-		case "boolean": return typeof value === "boolean";
-		case "string": return typeof value === "string";
-	}
-}
-/** `syncCatalogWithProvider`: K4 tamlığı, farkın uygulanması, etkilenen hesapların yenilenmesi. */
-function syncCatalog(w, input) {
-	const missing = [];
-	const mismatched = [];
-	for (const p of input.plans) for (const f of input.features) {
-		const value = p.entitlements[f.key];
-		if (value === void 0) missing.push(`plan ${p.code}: ${f.key} için değer yok`);
-		else if (!matchesType(f.type, value)) mismatched.push(`plan ${p.code}: ${f.key} değeri ${f.type} tipine uymuyor`);
-	}
-	if (missing.length > 0) return fail("plan_missing_feature", missing.slice(0, 10).join("; "));
-	if (mismatched.length > 0) return fail("override_type_mismatch", mismatched.slice(0, 10).join("; "));
-	const now = w.now();
-	const keys = new Set(input.features.map((f) => f.key));
-	const removedFeatures = w.features.filter((f) => !keys.has(f.key)).map((f) => f.key);
-	w.features = input.features.map((f) => ({
-		key: f.key,
-		type: f.type,
-		...f.description !== void 0 ? { description: f.description } : {}
-	}));
-	const canonical = (entitlements) => canonicalJson(entitlements);
-	const changedPlans = [];
-	for (const p of input.plans) {
-		const before = w.plans.get(p.code);
-		const planChanged = !before || !before.active || before.name !== p.name || before.rank !== p.rank || before.sellable !== p.sellable;
-		const entitlementsChanged = !before || canonical(before.entitlements) !== canonical(p.entitlements);
-		w.plans.set(p.code, {
-			code: p.code,
-			name: p.name,
-			rank: p.rank,
-			sellable: p.sellable,
-			active: true,
-			entitlements: entitlementsChanged ? { ...p.entitlements } : before.entitlements
-		});
-		if (planChanged || entitlementsChanged) changedPlans.push(p.code);
-	}
-	const inputPlans = new Set(input.plans.map((p) => p.code));
-	const retiredPlans = [];
-	for (const plan of w.plans.values()) if (plan.active && !inputPlans.has(plan.code)) {
-		plan.active = false;
-		retiredPlans.push(plan.code);
-	}
-	const defaultPlanChanged = w.defaultPlanCode !== input.defaultPlanCode;
-	w.defaultPlanCode = input.defaultPlanCode;
-	const priceKey = (p) => `${p.planCode}/${p.interval}/${p.intervalCount}/${p.currency}`;
-	const active = new Map(w.prices.filter((p) => p.active).map((p) => [priceKey(p), p]));
-	const keep = /* @__PURE__ */ new Set();
-	const createdPrices = [];
-	const deactivatedPrices = [];
-	for (const p of input.prices) {
-		const current = active.get(priceKey(p));
-		if (current && current.amountMinor === p.amountMinor && current.taxInclusive === p.taxInclusive && current.taxRateBps === p.taxRateBps) {
-			keep.add(current.id);
-			continue;
-		}
-		if (current) {
-			current.active = false;
-			deactivatedPrices.push(current.id);
-		}
-		const id = w.id();
-		w.prices.push({
-			id,
-			...p,
-			active: true,
-			createdAt: now
-		});
-		createdPrices.push(id);
-		keep.add(id);
-	}
-	for (const price of active.values()) if (price.active && !keep.has(price.id)) {
-		price.active = false;
-		deactivatedPrices.push(price.id);
-	}
-	const unchanged = createdPrices.length === 0 && deactivatedPrices.length === 0 && changedPlans.length === 0 && retiredPlans.length === 0 && removedFeatures.length === 0 && !defaultPlanChanged;
-	if (changedPlans.length > 0 || retiredPlans.length > 0 || removedFeatures.length > 0 || defaultPlanChanged) for (const ref of liveAccountRefs(w)) commitAccountChange(w, ref, "catalog.synced");
-	return ok({
-		unchanged,
-		createdPrices,
-		deactivatedPrices,
-		changedPlans,
-		retiredPlans,
-		removedFeatures,
-		defaultPlanChanged,
-		providerErrors: []
-	});
-}
-/** Silinmemiş hesaplar: toplu yenileme silinmiş hesabı atlar (servisin `refreshProductAccounts`'u). */
-const liveAccountRefs = (w) => [...w.accounts.values()].filter((row) => row.deletedAt === void 0).map((row) => row.ref);
-/** `refreshAccounts` (`POST /v1/admin/accounts/refresh`). */
-function refreshAccounts(w) {
-	let changed = 0;
-	for (const ref of liveAccountRefs(w)) if (commitAccountChange(w, ref, "account.refreshed").changed) changed++;
-	return { changed };
-}
-function toAccount(row) {
-	return {
-		ref: row.ref,
-		displayName: row.displayName,
-		metadata: row.metadata,
-		createdAt: iso(row.createdAt),
-		snapshot: toSnapshot(stateOf(row)),
-		notificationEmails: [...row.notificationEmails],
-		locale: row.locale
-	};
-}
-function stateOf(row) {
-	if (!row.state) throw new Error(`sahte steward: hesap durumu yok ${row.ref}`);
-	return row.state;
-}
-function upsertAccount(w, ref, input) {
-	let row = w.accounts.get(ref);
-	const created = row === void 0;
-	if (!row) {
-		row = {
-			ref,
-			displayName: input.displayName,
-			metadata: input.metadata,
-			createdAt: w.now(),
-			version: 0,
-			state: null,
-			history: [],
-			profile: null,
-			notificationEmails: input.notificationEmails ?? [],
-			locale: input.locale ?? null
-		};
-		computeState(w, row, w.now());
-		w.accounts.set(ref, row);
-	} else {
-		row.displayName = input.displayName;
-		row.metadata = input.metadata;
-		if (input.notificationEmails !== void 0) row.notificationEmails = input.notificationEmails;
-		if (input.locale !== void 0) row.locale = input.locale;
-	}
-	const { state } = commitAccountChange(w, ref, "account.upserted");
-	return {
-		account: {
-			...toAccount(row),
-			account: state
-		},
-		created
-	};
-}
-/** `saveBillingProfile`: bireyselde kurumsal alanlar düşer. */
-function saveProfile(row, profile) {
-	const company = profile.kind === "company";
-	const saved = {
-		kind: profile.kind,
-		contactName: profile.contactName,
-		...company && profile.companyName !== void 0 ? { companyName: profile.companyName } : {},
-		...company && profile.taxOffice !== void 0 ? { taxOffice: profile.taxOffice } : {},
-		...company && profile.taxId !== void 0 ? { taxId: profile.taxId } : {},
-		email: profile.email,
-		phone: profile.phone,
-		address: profile.address,
-		city: profile.city,
-		country: profile.country
-	};
-	row.profile = saved;
-	return saved;
-}
-function accountDetail(w, ref, include) {
-	const row = w.accounts.get(ref);
-	if (!row) return null;
-	const detail = toAccount(row);
-	const want = new Set(include);
-	const newest = (rows) => [...rows].sort((a, b) => b.createdAt - a.createdAt || (a.id < b.id ? 1 : -1));
-	const subs = [...w.subscriptions.filter((s) => s.accountRef === ref)].sort((a, b) => b.startedAt - a.startedAt);
-	if (want.has("profile")) detail.profile = row.profile;
-	if (want.has("subscriptions")) detail.subscriptions = subs.map((s) => toSubscription(w, s));
-	if (want.has("payments")) {
-		const ids = new Set(subs.map((s) => s.id));
-		detail.payments = [...w.payments.filter((p) => ids.has(p.subscriptionId))].sort((a, b) => b.occurredAt - a.occurredAt).map((p) => ({
-			id: p.id,
-			subscriptionId: p.subscriptionId,
-			providerOrderRef: p.providerOrderRef,
-			status: p.status,
-			amountMinor: p.amountMinor,
-			currency: p.currency,
-			periodStart: isoOrNull(p.periodStart),
-			periodEnd: isoOrNull(p.periodEnd),
-			occurredAt: iso(p.occurredAt)
-		}));
-	}
-	if (want.has("checkouts")) detail.checkouts = newest(w.sessions.filter((s) => s.accountRef === ref)).slice(0, 20).map((s) => toCheckoutSession(w, s));
-	if (want.has("grants")) detail.grants = newest(w.grants.filter((g) => g.accountRef === ref)).map(toGrant);
-	if (want.has("invoices")) detail.invoices = newest(w.invoices.filter((i) => i.accountRef === ref)).map(toInvoice);
-	return detail;
-}
-/** Hosted checkout sayfası (servisin `hostedCheckoutUrl`); sahtede `hosted.ts` sunar. */
-const hostedPageUrl = (baseUrl, id, pageKey) => `${baseUrl}/public/v1/checkout/${id}?k=${pageKey}`;
-const PAGE_KEY_BYTES = 32;
-/** Servis: `appUrl`'in origin'i + `extraReturnOrigins` (sahte, ayarlanmadıysa her adresi kabul eder). */
-function returnUrlAllowed(w, url) {
-	const { settings } = w;
-	return !(!w.permissiveReturnOrigins || settings.appUrl !== void 0 || settings.extraReturnOrigins.length > 0) || isReturnUrlAllowed(settings, url);
-}
-/** Planın dönem + para biriminde aktif, satılabilir fiyatı (servis: `intervalCount = 1`). */
-function sellablePrice(w, planCode, interval, currency) {
-	return w.prices.find((p) => p.active && p.interval === interval && p.intervalCount === 1 && p.currency === currency && p.planCode === planCode && w.plans.get(p.planCode)?.active === true && w.plans.get(p.planCode)?.sellable === true);
-}
-function randomPageKey() {
-	const bytes = globalThis.crypto.getRandomValues(new Uint8Array(PAGE_KEY_BYTES));
-	return btoa(String.fromCharCode(...bytes)).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
-}
-/**
-* `createHostedCheckoutSession` (service): no provider call; validation order and codes match the
-* service (account, return origins, live subscription, sellable price). A missing account is
-* opened with `displayName`. `url` is the fake steward's hosted page (`hosted.ts`).
-*/
-function createCheckoutSession(w, baseUrl, ref, input, actorRef) {
-	const existing = w.accounts.get(ref);
-	if (!existing && input.displayName === void 0) return fail("account_not_found");
-	const { settings } = w;
-	if (!returnUrlAllowed(w, input.successUrl)) return fail("return_url_not_allowed");
-	if (input.cancelUrl !== void 0 && !returnUrlAllowed(w, input.cancelUrl)) return fail("return_url_not_allowed");
-	if (existing && liveSubscription(w, ref)) return fail("already_subscribed");
-	const price = sellablePrice(w, input.planCode, input.interval, input.currency ?? settings.defaultCurrency);
-	if (!price) return fail("plan_not_sellable");
-	if (!existing) upsertAccount(w, ref, {
-		displayName: input.displayName,
-		metadata: {}
-	});
-	const now = w.now();
-	const pageKey = randomPageKey();
-	const session = {
-		id: w.id(),
-		accountRef: ref,
-		priceId: price.id,
-		status: "open",
-		locale: input.locale ?? settings.defaultLocale,
-		successUrl: input.successUrl,
-		cancelUrl: input.cancelUrl ?? null,
-		consentDocs: (input.consents ?? []).map(({ document, version, url }) => ({
-			document,
-			version,
-			url
-		})),
-		prefill: input.prefill ?? null,
-		pageKey,
-		consents: [],
-		actorRef,
-		failureReason: null,
-		subscriptionId: null,
-		expiresAt: now + settings.checkoutTtlMinutes * 6e4,
-		createdAt: now,
-		completedAt: null
-	};
-	w.sessions.push(session);
-	const { state } = commitAccountChange(w, ref, "checkout.opened");
-	return ok({
-		...toCheckoutSession(w, session),
-		url: hostedPageUrl(baseUrl, session.id, pageKey),
-		account: state
-	});
-}
-function checkoutSessionResponse(w, id) {
-	const row = w.sessions.find((s) => s.id === id);
-	if (!row) return null;
-	const session = toCheckoutSession(w, row);
-	return row.status === "completed" ? {
-		...session,
-		account: storedState(w, row.accountRef)
-	} : session;
-}
-function sessionRow(w, id) {
-	const row = w.sessions.find((s) => s.id === id);
-	if (!row) throw new Error(`sahte steward: checkout oturumu yok ${id}`);
-	return row;
-}
-/** Kapanan oturumda sayfa anahtarı ve ön doldurma silinir (servis `CLOSED_SESSION_CLEANUP`). */
-const CLOSED_SESSION_CLEANUP = {
-	pageKey: null,
-	prefill: null
-};
-/** Hosted oturumun sayfası açık mı: anahtar bu oturumun, oturum açık ve süresi geçmemiş (servis `openSession`). */
-function openHostedSession(w, id, pageKey) {
-	const row = w.sessions.find((s) => s.id === id);
-	if (!row || row.pageKey === null || pageKey.length === 0 || row.pageKey !== pageKey) return null;
-	return row.status === "open" && row.expiresAt > w.now() ? row : null;
-}
-/** Sahte `details` gönderiminin profil değerleri (ürünün `prefill`i; geri kalanı sabit, geçerli test verisi). */
-function hostedProfile(row, prefill) {
-	const company = prefill?.kind === "company";
-	return {
-		kind: company ? "company" : "individual",
-		contactName: prefill?.name ?? row.displayName,
-		...company ? {
-			companyName: row.displayName,
-			taxOffice: "Sahte Vergi Dairesi",
-			taxId: "1234567890"
-		} : {},
-		email: prefill?.email ?? "musteri@example.com",
-		phone: "+905550000000",
-		address: "Sahte Mah. Örnek Sok. No: 1",
-		city: "İstanbul",
-		country: "TR"
-	};
-}
-/**
-* Hosted oturum (F2b): sahte sayfada `details` adımı yok. Ödeme sonucundan önce servisteki
-* gönderimin izi yazılır: hesabın profili yoksa ön doldurmadan sahte profil (varsa aynen
-* kalır: sayfa saklı profili ön doldurur), belgelerin onay izi, `billing_profile.updated`.
-* Hesap bu arada abone olduysa servis `details`'te oturumu kapatır;
-* çağıranlar o durumda bunu çağırmaz.
-*/
-function submitHostedDetails(w, session) {
-	const row = account(w, session.accountRef);
-	if (!row.profile) saveProfile(row, hostedProfile(row, session.prefill));
-	const acceptedAt = iso(w.now());
-	session.consents = session.consentDocs.map(({ document, version, url }) => ({
-		document,
-		version,
-		url,
-		acceptedAt
-	}));
-	commitAccountChange(w, session.accountRef, "billing_profile.updated");
-}
-/** `completeCheckoutReturn` başarısızlık yolu: yalnızca `open` oturum kapanır. */
-function failCheckout(w, session, reason) {
-	if (session.status !== "open") return;
-	if (!liveSubscription(w, session.accountRef)) submitHostedDetails(w, session);
-	Object.assign(session, {
-		status: "failed",
-		failureReason: reason,
-		completedAt: w.now(),
-		...CLOSED_SESSION_CLEANUP
-	});
-	commitAccountChange(w, session.accountRef, {
-		type: "checkout.failed",
-		detail: {
-			checkoutSessionId: session.id,
-			reason
-		}
-	});
-}
-/**
-* Hosted sayfada vazgeç (`HostedCheckoutPort.cancel`; sahte sayfada sağlayıcı formu olmadığından
-* her zaman kapanır): yalnızca açık oturum; `canceled`, iç neden `checkout.canceled`. Dönüş
-* adresi `cancelUrl ?? settings.appUrl` (yoksa null). Açık olmayan oturumda değişiklik yok.
-*/
-function cancelCheckout(w, session) {
-	const redirectUrl = session.cancelUrl ?? w.settings.appUrl ?? null;
-	if (session.status !== "open") return redirectUrl;
-	Object.assign(session, {
-		status: "canceled",
-		completedAt: w.now(),
-		...CLOSED_SESSION_CLEANUP
-	});
-	commitAccountChange(w, session.accountRef, "checkout.canceled");
-	return redirectUrl;
-}
-/** `completeCheckoutReturn` başarı yolu: abonelik, ilk tahsilat, event'ler, taslak fatura. */
-function completeCheckout(w, session) {
-	if (session.status !== "open") return;
-	const alreadySubscribed = liveSubscription(w, session.accountRef) !== null;
-	if (!alreadySubscribed) submitHostedDetails(w, session);
-	const now = w.now();
-	const price = priceOf(w, session.priceId);
-	Object.assign(session, {
-		status: "completed",
-		completedAt: now,
-		...CLOSED_SESSION_CLEANUP
-	});
-	if (alreadySubscribed) {
-		Object.assign(session, {
-			status: "failed",
-			failureReason: "already_subscribed"
-		});
-		commitAccountChange(w, session.accountRef, {
-			type: "checkout.failed",
-			detail: {
-				checkoutSessionId: session.id,
-				reason: "already_subscribed"
-			}
-		});
-		return;
-	}
-	const periodEnd = addInterval(now, price.interval, price.intervalCount);
-	const sub = {
-		id: w.id(),
-		accountRef: session.accountRef,
-		priceId: price.id,
-		providerSubscriptionRef: `fake_sub_${globalThis.crypto.randomUUID()}`,
-		status: "active",
-		cancelAtPeriodEnd: false,
-		cancelAt: null,
-		cancelReason: null,
-		canceledAt: null,
-		startedAt: now,
-		currentPeriodStart: now,
-		currentPeriodEnd: periodEnd,
-		dunningStartedAt: null,
-		pastDueSince: null,
-		dunningStep: 0,
-		nextDunningAt: null,
-		lastPaymentRetryAt: null
-	};
-	w.subscriptions.push(sub);
-	session.subscriptionId = sub.id;
-	const payment = insertPayment(w, sub, {
-		providerOrderRef: `checkout:${session.id}`,
-		status: "succeeded",
-		periodStart: now,
-		periodEnd
-	});
-	commitAccountChange(w, session.accountRef, {
-		type: "subscription.activated",
-		detail: {
-			subscriptionId: sub.id,
-			planCode: price.planCode,
-			interval: price.interval,
-			amountMinor: price.amountMinor,
-			currency: price.currency,
-			actorRef: session.actorRef
-		}
-	});
-	commitAccountChange(w, session.accountRef, {
-		type: "checkout.completed",
-		detail: {
-			checkoutSessionId: session.id,
-			subscriptionId: sub.id
-		}
-	});
-	createInvoiceForPayment(w, payment);
-}
-function insertPayment(w, sub, fields) {
-	const price = priceOf(w, sub.priceId);
-	const now = w.now();
-	const payment = {
-		id: w.id(),
-		subscriptionId: sub.id,
-		attempt: 1,
-		amountMinor: price.amountMinor,
-		currency: price.currency,
-		occurredAt: now,
-		createdAt: now,
-		...fields
-	};
-	w.payments.push(payment);
-	return payment;
-}
-const day$1 = (ms) => ms === null ? "?" : iso(ms).slice(0, 10);
-/** Başarılı tahsilat için taslak fatura (idempotent); profil yoksa fatura yok. */
-function createInvoiceForPayment(w, payment) {
-	const existing = w.invoices.find((i) => i.paymentId === payment.id);
-	if (existing) return existing.id;
-	if (payment.status !== "succeeded") return null;
-	const sub = w.subscriptions.find((s) => s.id === payment.subscriptionId);
-	const price = priceOf(w, sub.priceId);
-	const profile = w.accounts.get(sub.accountRef)?.profile;
-	if (!profile) return null;
-	const totals = price.taxInclusive ? {
-		...splitInclusiveTax(payment.amountMinor, price.taxRateBps),
-		totalMinor: payment.amountMinor
-	} : (() => {
-		const taxMinor = Math.round(payment.amountMinor * price.taxRateBps / 1e4);
-		return {
-			subtotalMinor: payment.amountMinor,
-			taxMinor,
-			totalMinor: payment.amountMinor + taxMinor
-		};
-	})();
-	const invoice = {
-		id: w.id(),
-		accountRef: sub.accountRef,
-		subscriptionId: sub.id,
-		paymentId: payment.id,
-		status: "draft",
-		number: null,
-		currency: payment.currency,
-		...totals,
-		taxRateBps: price.taxRateBps,
-		buyer: profile,
-		lines: [{
-			description: `${w.plans.get(price.planCode).name} (${day$1(payment.periodStart)} – ${day$1(payment.periodEnd)})`,
-			quantity: 1,
-			unitAmountMinor: totals.subtotalMinor,
-			amountMinor: totals.subtotalMinor
-		}],
-		externalRef: null,
-		issuedAt: null,
-		createdAt: w.now(),
-		document: null
-	};
-	w.invoices.push(invoice);
-	commitAccountChange(w, sub.accountRef, {
-		type: "invoice.created",
-		detail: {
-			invoiceId: invoice.id,
-			totalMinor: totals.totalMinor,
-			currency: payment.currency
-		}
-	});
-	return invoice.id;
-}
-const MAX_DOCUMENT_BYTES = 5242880;
-function issueInvoice(w, id, input) {
-	let document = null;
-	if (input.documentBase64 !== void 0) {
-		document = Uint8Array.from(atob(input.documentBase64), (c) => c.charCodeAt(0));
-		const signature = String.fromCharCode(...document.subarray(0, 5));
-		if (document.length === 0 || document.length > MAX_DOCUMENT_BYTES || signature !== "%PDF-") return fail("invalid_document");
-	}
-	const invoice = w.invoices.find((i) => i.id === id);
-	if (!invoice) return fail("invoice_not_found");
-	if (invoice.status !== "draft") return fail("already_issued");
-	if (w.invoices.some((i) => i.number === input.number)) return fail("number_taken");
-	Object.assign(invoice, {
-		status: "issued",
-		number: input.number,
-		issuedAt: input.issuedAt !== void 0 ? Date.parse(input.issuedAt) : w.now(),
-		externalRef: input.externalRef ?? null,
-		document: document && {
-			bytes: document,
-			sha256: sha256Hex(document)
-		}
-	});
-	const { state } = commitAccountChange(w, invoice.accountRef, {
-		type: "invoice.issued",
-		detail: {
-			invoiceId: id,
-			number: input.number,
-			totalMinor: invoice.totalMinor,
-			currency: invoice.currency
-		}
-	});
-	return ok({
-		...toInvoice(invoice),
-		account: state
-	});
-}
-function cancelSubscription(w, id, input, actorRef) {
-	const sub = w.subscriptions.find((s) => s.id === id);
-	if (!sub) return fail("subscription_not_found");
-	if (!isLive(sub)) return fail("already_canceled");
-	if (input.mode === "at_period_end" && sub.cancelAtPeriodEnd) return ok({
-		...toSubscription(w, sub),
-		account: storedState(w, sub.accountRef)
-	});
-	const now = w.now();
-	if (input.mode === "immediate") Object.assign(sub, {
-		status: "canceled",
-		cancelAt: now,
-		canceledAt: now,
-		pastDueSince: null,
-		dunningStartedAt: null,
-		dunningStep: 0,
-		nextDunningAt: null
-	});
-	else Object.assign(sub, {
-		cancelAtPeriodEnd: true,
-		cancelAt: sub.currentPeriodEnd !== null && sub.currentPeriodEnd > now ? sub.currentPeriodEnd : now,
-		canceledAt: now
-	});
-	sub.cancelReason = input.reason;
-	const { state } = commitAccountChange(w, sub.accountRef, input.mode === "immediate" ? {
-		type: "subscription.canceled",
-		detail: {
-			subscriptionId: sub.id,
-			reason: input.reason,
-			effectiveAt: iso(now),
-			actorRef
-		}
-	} : {
-		type: "subscription.cancel_scheduled",
-		detail: {
-			subscriptionId: sub.id,
-			cancelAt: iso(sub.cancelAt),
-			reason: input.reason,
-			actorRef
-		}
-	});
-	return ok({
-		...toSubscription(w, sub),
-		account: state
-	});
-}
-function createGrant(w, ref, input, actorRef) {
-	if (!w.accounts.has(ref)) return fail("account_not_found");
-	if (input.planCode !== void 0 && w.plans.get(input.planCode)?.active !== true) return fail("plan_not_found");
-	const mismatched = overrideTypeMismatches(w, input.overrides);
-	if (mismatched !== null) return fail("override_type_mismatch", mismatched);
-	const now = w.now();
-	const startsAt = input.startsAt !== void 0 ? Date.parse(input.startsAt) : null;
-	const endsAt = input.endsAt !== void 0 ? Date.parse(input.endsAt) : null;
-	if (endsAt !== null && endsAt <= (startsAt ?? now)) return fail("invalid_window");
-	const grant = {
-		id: w.id(),
-		accountRef: ref,
-		planCode: input.planCode ?? null,
-		overrides: input.overrides,
-		reason: input.reason,
-		actorRef,
-		startsAt: startsAt ?? now,
-		endsAt,
-		revokedAt: null,
-		createdAt: now,
-		startApplied: false,
-		endApplied: false
-	};
-	w.grants.push(grant);
-	const { state } = commitAccountChange(w, ref, "grant.created");
-	return ok({
-		...toGrant(grant),
-		account: state
-	});
-}
-/** Zaten iptal edilmiş grant: idempotent başarı. */
-function revokeGrant(w, id) {
-	const grant = w.grants.find((g) => g.id === id);
-	if (!grant) return false;
-	if (grant.revokedAt !== null) return true;
-	grant.revokedAt = w.now();
-	commitAccountChange(w, grant.accountRef, "grant.revoked");
-	return true;
-}
-/** `overrideTypeMismatches`: katalog feature tipine uymayan override'lar, uyumluysa null. */
-function overrideTypeMismatches(w, overrides) {
-	const types = new Map(w.features.map((f) => [f.key, f.type]));
-	const mismatched = Object.entries(overrides).filter(([key, value]) => types.has(key) && !matchesType(types.get(key), value)).map(([key]) => `${key}: ${types.get(key)} bekleniyor`).sort();
-	return mismatched.length > 0 ? mismatched.join(", ") : null;
-}
-/**
-* `setPlan` (K6): aktif plan grant'leri (henüz başlamamışlar dahil; override
-* grant'leri hariç) iptal + yeni plan grant'i + `commitAccountChange(grant.plan_set)`.
-* Tek aktif plan grant'i aynı plan/`endsAt`/`overrides` ise korunur. Canlı abonelik
-* planı hak kuralında hedefi geçiyorsa `strict` → `subscription_plan_higher` (yazım
-* yok), `ensure` → uyarı. Sahtede eşzamanlılık yok (servis advisory lock'la sıralar).
-*/
-function setPlan(w, ref, input, actorRef) {
-	if (!w.accounts.has(ref)) return fail("account_not_found");
-	const { planCode } = input;
-	if (planCode !== null && w.plans.get(planCode)?.active !== true) return fail("plan_not_found");
-	const mismatched = overrideTypeMismatches(w, input.overrides);
-	if (mismatched !== null) return fail("override_type_mismatch", mismatched);
-	const now = w.now();
-	const endsAt = input.endsAt !== void 0 ? Date.parse(input.endsAt) : null;
-	if (endsAt !== null && endsAt <= now) return fail("invalid_window");
-	const warnings = [];
-	const live = liveSubscription(w, ref);
-	if (live && w.defaultPlanCode !== null) {
-		const livePlanCode = priceOf(w, live.priceId).planCode;
-		const intended = planCode ?? w.defaultPlanCode;
-		const { planCode: effective } = resolveEntitlements({
-			catalog: {
-				defaultPlanCode: w.defaultPlanCode,
-				features: [],
-				plans: [...w.plans.values()].map((p) => ({
-					code: p.code,
-					rank: p.rank,
-					entitlements: {}
-				}))
-			},
-			subscription: {
-				planCode: livePlanCode,
-				status: live.status
-			},
-			grants: planCode !== null ? [{ planCode }] : []
-		});
-		if (effective !== intended && effective === livePlanCode) {
-			const message = `canlı abonelik planı (${livePlanCode}) hedeften (${intended}) yüksek; etkin plan ${livePlanCode}`;
-			if (input.mode === "strict") return fail("subscription_plan_higher", `${message}; hiçbir şey yazılmadı`);
-			warnings.push({
-				code: "subscription_plan_higher",
-				message
-			});
-		}
-	}
-	const active = w.grants.filter((g) => g.accountRef === ref && g.planCode !== null && g.revokedAt === null && (g.endsAt === null || g.endsAt > now)).sort((a, b) => a.createdAt - b.createdAt || (a.id < b.id ? -1 : 1));
-	const [only] = active;
-	const same = planCode !== null && active.length === 1 && only !== void 0 && only.startsAt <= now && only.planCode === planCode && only.endsAt === endsAt && canonicalJson(only.overrides) === canonicalJson(input.overrides);
-	let grant = same ? only : null;
-	if (!same) {
-		for (const g of active) g.revokedAt = now;
-		if (planCode !== null) {
-			grant = {
-				id: w.id(),
-				accountRef: ref,
-				planCode,
-				overrides: input.overrides,
-				reason: input.reason,
-				actorRef,
-				startsAt: now,
-				endsAt,
-				revokedAt: null,
-				createdAt: now,
-				startApplied: false,
-				endApplied: false
-			};
-			w.grants.push(grant);
-		}
-	}
-	const { state } = commitAccountChange(w, ref, "grant.plan_set");
-	return ok({
-		grant: grant ? toGrant(grant) : null,
-		account: state,
-		warnings
-	});
-}
-/** `resyncAccount`: saklı durum `account.state_changed` (`cause: "resync"`) olarak; version aynı. */
-function resyncAccount(w, ref) {
-	if (!w.accounts.has(ref)) return fail("account_not_found");
-	return ok({
-		queued: true,
-		eventId: republishState(w, ref, storedState(w, ref))
-	});
-}
-/**
-* `deleteAccount` (`domain/account-deletion.ts`, F4e): önkoşullar sırayla (hesap yok 404,
-* silinmiş 410, canlı abonelik) ve hiçbiri tutmazsa değişiklik yok. The service's
-* `checkout_in_progress` (open provider form) never happens here: the fake hosted page has no
-* provider form, so open sessions are formless and deletion closes them. Sonra anonimleştirme:
-* ad/metadata/profil, oturumların ön doldurması/anahtarı ve onay izinin `ipHash`/`userAgent`'ı,
-* portal oturumları, aktif grant'ler; eski event yüklerinde `displayName`. Faturalar kalır.
-*/
-function deleteAccount(w, ref, actorRef) {
-	const row = w.accounts.get(ref);
-	if (!row) return fail("account_not_found");
-	if (row.deletedAt !== void 0) return fail("account_deleted");
-	const live = liveSubscription(w, ref);
-	if (live) return fail("subscription_active", `abonelik ${live.id} canlı; önce hemen iptal edin (mode: immediate)`);
-	const now = w.now();
-	for (const session of w.sessions.filter((s) => s.accountRef === ref)) {
-		if (session.status === "open") Object.assign(session, {
-			status: "canceled",
-			failureReason: "account_deleted",
-			completedAt: now
-		});
-		Object.assign(session, CLOSED_SESSION_CLEANUP);
-		session.consents = session.consents.map((consent) => {
-			const { ipHash: _ip, userAgent: _ua, ...kept } = consent;
-			return kept;
-		});
-	}
-	w.portalSessions = w.portalSessions.filter((s) => s.accountRef !== ref);
-	for (const grant of w.grants) if (grant.accountRef === ref && grant.revokedAt === null) grant.revokedAt = now;
-	Object.assign(row, {
-		displayName: "",
-		metadata: {},
-		profile: null,
-		notificationEmails: [],
-		locale: null,
-		deletedAt: now
-	});
-	for (const event of w.events) {
-		const account = event.accountRef === ref ? event.payload.data.account : null;
-		if (account && typeof account.displayName === "string") account.displayName = "";
-	}
-	const deletedAt = iso(now);
-	const change = commitAccountChange(w, ref, {
-		type: "account.deleted",
-		detail: {
-			deletedAt,
-			actorRef
-		}
-	});
-	if (change.stateEventId === null) emitEvent(w, ref, change.state, {
-		type: "account.state_changed",
-		detail: {
-			cause: "account.deleted",
-			causeEventId: change.eventId
-		}
-	});
-	return ok({
-		ref,
-		deletedAt
-	});
-}
-function stats(w) {
-	const statuses = [
-		"active",
-		"past_due",
-		"suspended",
-		"canceled",
-		"expired"
-	];
-	const mrr = {};
-	for (const sub of w.subscriptions) {
-		if (!isLive(sub) || sub.cancelAtPeriodEnd) continue;
-		const price = priceOf(w, sub.priceId);
-		const months = (price.interval === "year" ? 12 : 1) * price.intervalCount;
-		mrr[price.currency] = (mrr[price.currency] ?? 0) + price.amountMinor / months;
-	}
-	return {
-		subscriptions: Object.fromEntries(statuses.map((s) => [s, w.subscriptions.filter((sub) => sub.status === s).length])),
-		mrrMinor: Object.fromEntries(Object.entries(mrr).map(([c, v]) => [c, Math.round(v)])),
-		accounts: w.accounts.size
-	};
-}
-/** Portal sayfası (servisin `hostedPortalUrl`); sahtede `portal.ts` sunar. */
-const hostedPortalUrl = (baseUrl, id, pageKey) => `${baseUrl}/public/v1/portal/${id}?k=${pageKey}`;
-const MAX_PAGE_KEY_LENGTH = 256;
-/** Portal aksiyonlarının aktörü (servisin `customerActorRef`). */
-const customerActorRef = (accountRef) => `customer:${accountRef}`;
-/**
-* `createPortalSession`: hesap yoksa `account_not_found` (checkout'taki gibi açılmaz), `returnUrl`
-* origin'i izinli değilse `return_url_not_allowed`; dil verilmezse `defaultLocale`, süre
-* `portalTtlMinutes`. Anahtar 32 bayt base64url. Durum değişmez, event yok.
-*/
-function createPortalSession(w, baseUrl, ref, input, actorRef) {
-	if (!w.accounts.has(ref)) return fail("account_not_found");
-	if (input.returnUrl !== void 0 && !returnUrlAllowed(w, input.returnUrl)) return fail("return_url_not_allowed");
-	const now = w.now();
-	const session = {
-		id: w.id(),
-		accountRef: ref,
-		pageKey: randomPageKey(),
-		locale: input.locale ?? w.settings.defaultLocale,
-		returnUrl: input.returnUrl ?? null,
-		actorRef,
-		expiresAt: now + w.settings.portalTtlMinutes * 6e4,
-		createdAt: now
-	};
-	w.portalSessions.push(session);
-	return ok({
-		id: session.id,
-		url: hostedPortalUrl(baseUrl, session.id, session.pageKey),
-		expiresAt: iso(session.expiresAt)
-	});
-}
-/** Süresi geçmemiş portal oturumu (anahtarsız; `simulate`). Yoksa null. */
-function livePortalSession(w, id) {
-	const row = w.portalSessions.find((s) => s.id === id);
-	return row && row.expiresAt > w.now() ? row : null;
-}
-/** Servisin `validSession`'ı: bilinmeyen id, yanlış anahtar ve süresi geçmiş oturum AYNI sonuç (null). */
-function openPortalSession(w, id, pageKey) {
-	if (pageKey.length === 0 || pageKey.length > MAX_PAGE_KEY_LENGTH) return null;
-	const row = livePortalSession(w, id);
-	return row && row.pageKey === pageKey ? row : null;
-}
-function lastFailedPayment(w, sub) {
-	return [...w.payments.filter((p) => p.subscriptionId === sub.id && p.status === "failed")].sort((a, b) => b.occurredAt - a.occurredAt)[0];
-}
-/** Servisin portal `load` görünümü (sayfa için). */
-function portalView(w, session) {
-	const row = account(w, session.accountRef);
-	const state = storedState(w, session.accountRef);
-	const live = liveSubscription(w, session.accountRef);
-	const price = live ? priceOf(w, live.priceId) : null;
-	return {
-		session,
-		account: row,
-		state,
-		planName: w.plans.get(state.planCode)?.name ?? state.planCode,
-		subscription: live && price ? {
-			row: live,
-			price,
-			planName: w.plans.get(price.planCode)?.name ?? price.planCode,
-			canCancel: !live.cancelAtPeriodEnd,
-			canRetryPayment: inDunning(live) && lastFailedPayment(w, live) !== void 0
-		} : null,
-		invoices: [...w.invoices.filter((i) => i.accountRef === session.accountRef && (i.paymentId !== null || i.status !== "draft"))].sort((a, b) => b.createdAt - a.createdAt || (a.id < b.id ? 1 : -1)).slice(0, 24),
-		returnUrl: session.returnUrl ?? w.settings.appUrl ?? null
-	};
-}
-/**
-* Portal iptali (`HostedPortalPort.cancelAtPeriodEnd`): canlı abonelik dönem sonunda
-* (`cancelSubscription`, neden `customer_portal`, aktör `customer:<ref>`; `/v1` iptaliyle aynı
-* kurallar ve event'ler). Zaten planlıysa `already_scheduled` (iz/event yok).
-*/
-function portalCancel(w, session) {
-	const sub = liveSubscription(w, session.accountRef);
-	if (!sub) return "no_subscription";
-	if (sub.cancelAtPeriodEnd) return "already_scheduled";
-	return cancelSubscription(w, sub.id, {
-		mode: "at_period_end",
-		reason: "customer_portal",
-		skipProvider: false
-	}, customerActorRef(session.accountRef)).ok ? "ok" : "no_subscription";
-}
-/**
-* Portal "ödemeyi yeniden dene" (`HostedPortalPort.retryPayment`): past_due/suspended abonelikte
-* son başarısız sipariş sahte sağlayıcıya gönderilmiş sayılır — DURUM DEĞİŞMEZ, event yok;
-* tahsilatın sonucu servisteki gibi sonradan gelir (`simulate.renewal(ref)` aynı siparişi
-* başarılı/`fail` sayar). Abonelik başına 10 dakikada bir (portal ya da dunning retry'ı).
-*/
-function portalRetryPayment(w, session) {
-	const sub = liveSubscription(w, session.accountRef);
-	if (!sub) return "no_subscription";
-	if (!inDunning(sub)) return "nothing_to_retry";
-	const now = w.now();
-	if (sub.lastPaymentRetryAt !== null && sub.lastPaymentRetryAt > now - 6e5) return "retry_too_soon";
-	if (!lastFailedPayment(w, sub)) return "no_failed_payment";
-	sub.lastPaymentRetryAt = now;
-	return "ok";
-}
-const PROFILE_REQUIRED = [
-	"kind",
-	"contactName",
-	"email",
-	"phone",
-	"address",
-	"city"
-];
-const PROFILE_COMPANY_REQUIRED = [
-	"companyName",
-	"taxOffice",
-	"taxId"
-];
-const PROFILE_TEXT = [
-	"contactName",
-	"address",
-	"city"
-];
-const PROFILE_COMPANY_TEXT = ["companyName", "taxOffice"];
-const isBlank = (value) => value === void 0 || value === null || typeof value === "string" && value.trim() === "";
-/**
-* Servisin `validateProfile`'ı (hosted-checkout.ts `checkProfile`): alan anahtarları
-* `profile.<alan>`, alan başına ilk kod; öncelik required > invalid_kind > invalid_characters >
-* şema kodları > VKN/E.164. Değer koda girmez.
-*/
-function validatePortalProfile(input) {
-	const fieldErrors = {};
-	const set = (field, code) => {
-		fieldErrors[`profile.${field}`] ??= code;
-	};
-	const company = input.kind === "company";
-	for (const field of company ? [...PROFILE_REQUIRED, ...PROFILE_COMPANY_REQUIRED] : PROFILE_REQUIRED) if (isBlank(input[field])) set(field, "required");
-	if (!isBlank(input.kind) && input.kind !== "individual" && !company) set("kind", "invalid_kind");
-	for (const field of company ? [...PROFILE_TEXT, ...PROFILE_COMPANY_TEXT] : PROFILE_TEXT) {
-		const value = input[field];
-		if (typeof value === "string" && /[<>]/.test(value)) set(field, "invalid_characters");
-	}
-	const parsed = BillingProfileSchema.safeParse(input);
-	if (!parsed.success) for (const issue of parsed.error.issues) {
-		const field = typeof issue.path[0] === "string" ? issue.path[0] : "";
-		if (field === "") continue;
-		if (isBlank(input[field])) set(field, "required");
-		else if (field === "kind") set(field, "invalid_kind");
-		else if (field === "email") set(field, "invalid_email");
-		else if (field === "phone") set(field, "invalid_phone");
-		else if (field === "taxId" && company) set(field, "invalid_vkn");
-		else if (issue.code === "too_small") set(field, "too_short");
-		else if (issue.code === "too_big") set(field, "too_long");
-		else set(field, "invalid");
-	}
-	if (company && !isBlank(input.taxId) && !isValidVkn(input.taxId)) set("taxId", "invalid_vkn");
-	if (!isBlank(input.phone) && !isE164(input.phone)) set("phone", "invalid_phone");
-	return parsed.success && Object.keys(fieldErrors).length === 0 ? {
-		ok: true,
-		profile: parsed.data
-	} : {
-		ok: false,
-		fieldErrors
-	};
-}
-/**
-* Portal profil güncellemesi (`HostedPortalPort.updateProfile`): ülke verilmezse saklı değer
-* korunur (yoksa TR); bireyselde kurumsal alanlar düşer. Durumda yalnızca profilin varlığı ve
-* türü olduğundan event yalnızca bunlar değişince (`billing_profile.updated`).
-*/
-function updatePortalProfile(w, session, input) {
-	const row = account(w, session.accountRef);
-	const raw = { ...input };
-	if (raw.country === void 0 && row.profile) raw.country = row.profile.country;
-	const checked = validatePortalProfile(raw);
-	if (!checked.ok) return checked;
-	saveProfile(row, checked.profile);
-	commitAccountChange(w, session.accountRef, "billing_profile.updated");
-	return { ok: true };
-}
-/** Portal belge indirme: yalnızca oturumun hesabının kesilmiş ve belgeli faturası; yoksa null. */
-function portalInvoiceDocument(w, session, invoiceId) {
-	const invoice = w.invoices.find((i) => i.id === invoiceId && i.accountRef === session.accountRef && i.status === "issued");
-	if (!invoice?.document || invoice.number === null) return null;
-	const safe = invoice.number.replace(/[^A-Za-z0-9._-]+/g, "_").replace(/^[._]+/, "").slice(0, 100);
-	return {
-		bytes: invoice.document.bytes,
-		filename: `${safe === "" ? "invoice" : safe}.pdf`
-	};
-}
-/** Requeues the event's delivery (dead or delivered included); `false` if there is no such event. */
-function redeliverEvent(w, id) {
-	const event = w.events.find((e) => e.id === id);
-	if (!event) return false;
-	if (event.delivery) Object.assign(event.delivery, {
-		status: "pending",
-		attempts: 0,
-		nextAttemptAt: w.now(),
-		lastError: null,
-		deliveredAt: null
-	});
-	return true;
-}
-/**
-* Tahsilat sonucu. Dunning'deki abonelikte AYNI başarısız siparişin yeniden
-* denemesidir (iyzico retry'ı; servisin `existingPayment` yolu), aksi halde
-* mevcut dönem sonundan başlayan yeni sipariş.
-*/
-function applyRenewalPayment(w, sub, outcome) {
-	const now = w.now();
-	const price = priceOf(w, sub.priceId);
-	const retried = inDunning(sub) ? [...w.payments.filter((p) => p.subscriptionId === sub.id && p.status === "failed")].sort((a, b) => b.occurredAt - a.occurredAt)[0] : void 0;
-	if (outcome === "failed") {
-		let payment = retried;
-		if (payment) Object.assign(payment, {
-			status: "failed",
-			attempt: payment.attempt + 1,
-			occurredAt: now
-		});
-		else {
-			const periodStart = sub.currentPeriodEnd;
-			payment = insertPayment(w, sub, {
-				providerOrderRef: `fake_ord_${globalThis.crypto.randomUUID()}`,
-				status: "failed",
-				periodStart,
-				periodEnd: addInterval(periodStart ?? now, price.interval, price.intervalCount)
-			});
-		}
-		const dunningStartedAt = sub.status === "active" ? now : sub.dunningStartedAt ?? now;
-		if (sub.status === "active") Object.assign(sub, {
-			status: "past_due",
-			pastDueSince: now,
-			dunningStartedAt: now,
-			dunningStep: 0,
-			nextDunningAt: now
-		});
-		const failures = w.payments.filter((p) => p.subscriptionId === sub.id && p.status === "failed" && p.createdAt >= dunningStartedAt).length;
-		commitAccountChange(w, sub.accountRef, {
-			type: "subscription.payment_failed",
-			detail: {
-				subscriptionId: sub.id,
-				paymentId: payment.id,
-				attempt: Math.max(1, failures),
-				nextRetryAt: null
-			}
-		});
-		return;
-	}
-	const periodStart = retried?.periodStart ?? sub.currentPeriodEnd ?? now;
-	const periodEnd = retried?.periodEnd ?? addInterval(periodStart, price.interval, price.intervalCount);
-	let payment = retried;
-	if (payment) Object.assign(payment, {
-		status: "succeeded",
-		attempt: payment.attempt + 1,
-		periodStart,
-		periodEnd,
-		occurredAt: now
-	});
-	else payment = insertPayment(w, sub, {
-		providerOrderRef: `fake_ord_${globalThis.crypto.randomUUID()}`,
-		status: "succeeded",
-		periodStart,
-		periodEnd
-	});
-	const invoiceId = createInvoiceForPayment(w, payment);
-	const recovering = inDunning(sub);
-	const advance = sub.currentPeriodEnd === null || periodEnd > sub.currentPeriodEnd;
-	Object.assign(sub, {
-		status: "active",
-		...recovering ? {
-			pastDueSince: null,
-			dunningStartedAt: null,
-			dunningStep: 0,
-			nextDunningAt: null
-		} : {},
-		...advance ? {
-			currentPeriodStart: periodStart,
-			currentPeriodEnd: periodEnd
-		} : {}
-	});
-	commitAccountChange(w, sub.accountRef, recovering ? {
-		type: "subscription.reactivated",
-		detail: {
-			subscriptionId: sub.id,
-			paymentId: payment.id
-		}
-	} : {
-		type: "subscription.renewed",
-		detail: {
-			subscriptionId: sub.id,
-			paymentId: payment.id,
-			periodStart: iso(periodStart),
-			periodEnd: iso(periodEnd),
-			invoiceId
-		}
-	});
-}
-/** `runDunning` + `processOne`, sahte sağlayıcıda: yeniden deneme tahsilatı değiştirmez (sonuç `renewal` ile gelir). */
-function runDunning(w) {
-	const now = w.now();
-	const policy = w.dunningPolicy;
-	const due = w.subscriptions.filter((s) => inDunning(s) && s.dunningStartedAt !== null && s.nextDunningAt !== null && s.nextDunningAt <= now).sort((a, b) => a.nextDunningAt - b.nextDunningAt);
-	let applied = 0;
-	for (const sub of due) {
-		const start = sub.dunningStartedAt;
-		const step = policy.steps[sub.dunningStep];
-		if (!step) {
-			sub.nextDunningAt = null;
-			continue;
-		}
-		const dueAt = start + step.afterDays * DAY_MS;
-		if (dueAt > now) {
-			sub.nextDunningAt = dueAt;
-			continue;
-		}
-		applied++;
-		const dunningDay = Math.floor((now - start) / DAY_MS);
-		const next = policy.steps[sub.dunningStep + 1];
-		const advance = () => {
-			sub.dunningStep += 1;
-			sub.nextDunningAt = next ? start + next.afterDays * DAY_MS : null;
-		};
-		if (policy.dryRun || step.action === "retry_payment" || step.action === "suspend" && sub.status === "suspended") {
-			if (!policy.dryRun && step.action === "retry_payment" && lastFailedPayment(w, sub)) sub.lastPaymentRetryAt = now;
-			advance();
-			commitAccountChange(w, sub.accountRef, "dunning.advanced");
-		} else if (step.action === "suspend") {
-			advance();
-			sub.status = "suspended";
-			commitAccountChange(w, sub.accountRef, {
-				type: "subscription.suspended",
-				detail: {
-					subscriptionId: sub.id,
-					dunningDay
-				}
-			});
-		} else {
-			advance();
-			Object.assign(sub, {
-				status: "canceled",
-				pastDueSince: null,
-				canceledAt: now,
-				cancelAt: now,
-				cancelReason: "nonpayment",
-				nextDunningAt: null
-			});
-			commitAccountChange(w, sub.accountRef, {
-				type: "subscription.terminated",
-				detail: {
-					subscriptionId: sub.id,
-					reason: "nonpayment",
-					dunningDay
-				}
-			});
-		}
-	}
-	return applied;
-}
-function expireScheduledCancellations(w) {
-	const now = w.now();
-	for (const sub of w.subscriptions) {
-		if (!isLive(sub) || !sub.cancelAtPeriodEnd || sub.cancelAt === null || sub.cancelAt > now) continue;
-		Object.assign(sub, {
-			status: "expired",
-			pastDueSince: null,
-			dunningStartedAt: null,
-			dunningStep: 0,
-			nextDunningAt: null
-		});
-		commitAccountChange(w, sub.accountRef, {
-			type: "subscription.expired",
-			detail: {
-				subscriptionId: sub.id,
-				effectiveAt: iso(sub.cancelAt)
-			}
-		});
-	}
-}
-/**
-* Expired open session (formless: the fake hosted page has no provider form, so `expired`).
-* Servis gibi kapanan oturumun `expiresAt`'i job kirasının sonu (o an + 5 dk) kalır.
-*/
-function expireCheckoutSessions(w) {
-	const now = w.now();
-	for (const session of w.sessions) {
-		if (session.status !== "open" || session.expiresAt > now) continue;
-		Object.assign(session, {
-			status: "expired",
-			failureReason: "expired",
-			completedAt: now,
-			expiresAt: now + 3e5,
-			...CLOSED_SESSION_CLEANUP
-		});
-		commitAccountChange(w, session.accountRef, {
-			type: "checkout.expired",
-			detail: { checkoutSessionId: session.id }
-		});
-	}
-}
-function applyGrantWindows(w) {
-	const now = w.now();
-	const refresh = /* @__PURE__ */ new Set();
-	for (const g of w.grants) {
-		if (g.revokedAt !== null) continue;
-		const start = !g.startApplied && g.startsAt <= now;
-		const end = !g.endApplied && g.endsAt !== null && g.endsAt <= now;
-		if (!start && !end) continue;
-		g.startApplied ||= g.startsAt <= now;
-		g.endApplied ||= g.endsAt !== null && g.endsAt <= now;
-		refresh.add(g.accountRef);
-	}
-	for (const ref of refresh) commitAccountChange(w, ref, "grant.window_applied");
-}
-/** `deleteExpiredPortalSessions` (K21): süresi geçen (sınır dahil) portal oturumları silinir; sayfa zaten reddeder. */
-function deleteExpiredPortalSessions(w) {
-	const now = w.now();
-	w.portalSessions = w.portalSessions.filter((s) => s.expiresAt > now);
-}
-/** Bir job turu (servis sırası: dunning, dönem sonu iptali, checkout süresi, grant penceresi, portal oturumu silme). */
-function runJobs(w) {
-	for (let i = 0; i < 100 && runDunning(w) > 0; i++);
-	expireScheduledCancellations(w);
-	expireCheckoutSessions(w);
-	applyGrantWindows(w);
-	deleteExpiredPortalSessions(w);
-}
-/** Bir sonraki zamanlanmış iş anı (`after` sonrası, `until` dahil). */
-function nextJobAt(w, after, until) {
-	const times = [
-		...w.subscriptions.flatMap((s) => [inDunning(s) ? s.nextDunningAt : null, isLive(s) && s.cancelAtPeriodEnd ? s.cancelAt : null]),
-		...w.sessions.map((s) => s.status === "open" ? s.expiresAt : null),
-		...w.grants.flatMap((g) => g.revokedAt !== null ? [] : [g.startApplied ? null : g.startsAt, g.endApplied ? null : g.endsAt])
-	];
-	let next = null;
-	for (const t of times) if (t !== null && t > after && t <= until && (next === null || t < next)) next = t;
-	return next;
-}
-/** Saati `target`a ilerletir; her zamanlanmış iş kendi anında koşar. */
-function advanceTo(w, target) {
-	runJobs(w);
-	for (let guard = 0; guard < 1e4; guard++) {
-		const next = nextJobAt(w, w.now(), target);
-		if (next === null) break;
-		w.setNow(next);
-		runJobs(w);
-	}
-	w.setNow(target);
-	runJobs(w);
-}
-//#endregion
-//#region src/testing/hosted.ts
-const HEADERS$1 = {
-	"cache-control": "no-store",
-	"referrer-policy": "no-referrer"
-};
-const escapeHtml = (value) => value.replace(/[&<>"']/g, (ch) => ({
-	"&": "&amp;",
-	"<": "&lt;",
-	">": "&gt;",
-	"\"": "&quot;",
-	"'": "&#39;"
-})[ch]);
-const html = (status, body) => new Response(`<!doctype html><html lang="tr"><meta charset="utf-8"><title>Sahte steward ödeme sayfası</title><body>${body}</body></html>`, {
-	status,
-	headers: {
-		...HEADERS$1,
-		"content-type": "text/html; charset=utf-8"
-	}
-});
-const notFound$2 = () => html(404, "<h1>Sayfa bulunamadı</h1><p>Bu ödeme bağlantısı geçersiz ya da süresi dolmuş.</p>");
-const redirect$1 = (location) => new Response(null, {
-	status: 303,
-	headers: {
-		...HEADERS$1,
-		location
-	}
-});
-const PATH$1 = /^\/public\/v1\/checkout\/([^/]+)(?:\/(pay|cancel))?$/;
-function page(w, session, k) {
-	const price = priceOf(w, session.priceId);
-	const action = (name) => `${encodeURIComponent(session.id)}/${name}`;
-	const key = `<input type="hidden" name="k" value="${escapeHtml(k)}">`;
-	const docs = session.consentDocs.map((d) => `<li><a href="${escapeHtml(d.url)}">${escapeHtml(d.document)}</a> (${escapeHtml(d.version)})</li>`).join("");
-	return html(200, `<h1>Sahte steward ödeme sayfası</h1>
-<p>Plan: <strong>${escapeHtml(price.planCode)}</strong> · ${escapeHtml(price.interval)} · ${price.amountMinor} ${escapeHtml(price.currency)} (kuruş)</p>
-<p>Hesap: ${escapeHtml(session.accountRef)} · dil: ${escapeHtml(session.locale)}</p>
-${docs ? `<p>Onaylanmış sayılan belgeler:</p><ul>${docs}</ul>` : ""}
-<form method="post" action="${action("pay")}">${key}<button name="outcome" value="succeeded">Tamamla</button> <button name="outcome" value="failed">Reddet</button></form>
-<form method="post" action="${action("cancel")}">${key}<button>Vazgeç</button></form>`);
-}
-/** `/public/*` istekleri (kimliksiz). Eşleşmeyen yol 404. */
-function handlePublic(w, req) {
-	const match = PATH$1.exec(req.url.pathname);
-	if (!match) return notFound$2();
-	let id;
-	try {
-		id = decodeURIComponent(match[1]);
-	} catch {
-		return notFound$2();
-	}
-	const action = match[2];
-	if (action === void 0) {
-		if (req.method !== "GET") return notFound$2();
-		const k = req.url.searchParams.get("k") ?? "";
-		const session = openHostedSession(w, id, k);
-		return session ? page(w, session, k) : notFound$2();
-	}
-	if (req.method !== "POST") return notFound$2();
-	const form = new URLSearchParams(req.body);
-	const k = form.get("k") ?? "";
-	const session = openHostedSession(w, id, k);
-	if (!session) return notFound$2();
-	if (action === "cancel") {
-		const target = cancelCheckout(w, session);
-		return target ? redirect$1(target) : html(200, "<h1>Ödeme iptal edildi</h1><p>Sizden ücret alınmadı.</p>");
-	}
-	if (form.get("outcome") === "failed") failCheckout(w, session, "fake:card_declined");
-	else completeCheckout(w, session);
-	const status = session.status === "completed" ? "success" : "failed";
-	return redirect$1(checkoutRedirectUrl(session, status));
-}
-//#endregion
-//#region src/testing/admin.ts
-/** Servis gövde şeması + üretim dışı adres politikası. */
-const CreateEndpointInputSchema = WebhookEndpointCreateInputSchema.superRefine((input, ctx) => {
-	const problem = webhookEndpointUrlProblem(input.url, { allowLoopback: true });
-	if (problem !== null) ctx.addIssue({
-		code: "custom",
-		path: ["url"],
-		message: problem
-	});
-});
-function settings(w) {
-	return w.settings;
-}
-function patchSettings(w, patch) {
-	w.settings = applySettingsPatch(w.settings, patch);
-	if (patch.appUrl !== void 0 || patch.extraReturnOrigins !== void 0) w.permissiveReturnOrigins = false;
-	return w.settings;
-}
-function toEndpoint(row) {
-	return {
-		id: row.id,
-		url: row.url,
-		status: row.status,
-		eventTypes: [...row.eventTypes],
-		description: row.description,
-		createdAt: iso(row.createdAt),
-		rotatedAt: isoOrNull(row.rotatedAt),
-		lastDelivery: null
-	};
-}
-function listEndpoints(w) {
-	return { items: w.adminEndpoints.map(toEndpoint) };
-}
-function createEndpoint(w, input) {
-	const row = {
-		id: w.id(),
-		url: new URL(input.url).toString(),
-		status: "active",
-		eventTypes: [...input.eventTypes ?? DEFAULT_ENDPOINT_EVENT_TYPES],
-		description: input.description ?? null,
-		createdAt: w.now(),
-		rotatedAt: null
-	};
-	w.adminEndpoints.push(row);
-	return toEndpoint(row);
-}
-const notFound$1 = {
-	ok: false,
-	code: "webhook_endpoint_not_found"
-};
-function rotateEndpoint(w, id, _input) {
-	const row = w.adminEndpoints.find((e) => e.id === id);
-	if (!row) return notFound$1;
-	row.rotatedAt = w.now();
-	return {
-		ok: true,
-		value: toEndpoint(row)
-	};
-}
-function deactivateEndpoint(w, id) {
-	const row = w.adminEndpoints.find((e) => e.id === id);
-	if (!row) return notFound$1;
-	row.status = "inactive";
-	return {
-		ok: true,
-		value: toEndpoint(row)
-	};
-}
-//#endregion
-//#region src/testing/doctor.ts
-function doctorReport(w) {
-	const catalog = catalogOf(w);
-	const unsellablePrices = [];
-	let sellablePrices = 0;
-	const prices = w.prices.filter((p) => p.active && w.plans.get(p.planCode)?.active === true && w.plans.get(p.planCode)?.sellable === true).sort((a, b) => {
-		const pa = w.plans.get(a.planCode);
-		const pb = w.plans.get(b.planCode);
-		return pa.rank - pb.rank || cmp(a.planCode, b.planCode) || cmp(a.interval, b.interval) || a.intervalCount - b.intervalCount || cmp(a.currency, b.currency);
-	});
-	for (const p of prices) if (p.intervalCount === 1) sellablePrices++;
-	else unsellablePrices.push({
-		priceId: p.id,
-		planCode: p.planCode,
-		interval: p.interval,
-		intervalCount: p.intervalCount,
-		currency: p.currency,
-		reason: "interval_count_unsupported"
-	});
-	return buildDoctorReport({
-		checkedAt: new Date(w.now()),
-		product: {
-			code: w.productCode,
-			name: w.productCode
-		},
-		catalog: {
-			synced: catalog !== null,
-			version: catalog ? catalogVersionOf(catalog) : null,
-			plans: catalog?.plans.length ?? 0,
-			sellablePrices,
-			unsellablePrices
-		},
-		provider: {
-			id: w.settings.provider,
-			configured: true,
-			environment: "fake",
-			merchantId: null,
-			healthy: true,
-			lastError: null
-		},
-		settings: w.settings,
-		endpoints: w.adminEndpoints.filter((e) => e.status !== "inactive").map((e) => ({
-			id: e.id,
-			url: e.url,
-			status: e.status,
-			eventTypes: [...e.eventTypes],
-			pending: 0,
-			dead: 0,
-			oldestPendingAt: null,
-			lastDelivery: null
-		})),
-		dunning: { dryRun: w.dunningPolicy.dryRun },
-		emailTransport: {
-			configured: true,
-			defaultFromConfigured: true
-		}
-	});
-}
-const cmp = (a, b) => a < b ? -1 : a > b ? 1 : 0;
-//#endregion
-//#region src/testing/invoices.ts
-function createManualInvoice(w, ref, input) {
-	const profile = w.accounts.get(ref)?.profile;
-	if (!w.accounts.has(ref)) return {
-		ok: false,
-		code: "account_not_found"
-	};
-	if (!profile) return {
-		ok: false,
-		code: "billing_profile_required"
-	};
-	const totals = manualInvoiceTotals(input);
-	const invoice = {
-		id: w.id(),
-		accountRef: ref,
-		subscriptionId: null,
-		paymentId: null,
-		status: "draft",
-		number: null,
-		currency: input.currency,
-		subtotalMinor: totals.subtotalMinor,
-		taxMinor: totals.taxMinor,
-		totalMinor: totals.totalMinor,
-		taxRateBps: input.taxRateBps,
-		buyer: profile,
-		lines: totals.lines,
-		externalRef: null,
-		issuedAt: null,
-		createdAt: w.now(),
-		document: null,
-		dueAt: input.dueAt !== void 0 ? Date.parse(input.dueAt) : null,
-		note: input.note ?? null,
-		voidedAt: null,
-		voidReason: null
-	};
-	w.invoices.push(invoice);
-	const { state } = commitAccountChange(w, ref, {
-		type: "invoice.created",
-		detail: {
-			invoiceId: invoice.id,
-			totalMinor: totals.totalMinor,
-			currency: input.currency
-		}
-	});
-	return {
-		ok: true,
-		value: {
-			...toInvoice(invoice),
-			account: state
-		}
-	};
-}
-function voidInvoice(w, id, input) {
-	const invoice = w.invoices.find((i) => i.id === id);
-	if (!invoice) return {
-		ok: false,
-		code: "invoice_not_found"
-	};
-	if (invoice.status === "void") return {
-		ok: false,
-		code: "invoice_not_voidable"
-	};
-	if (invoice.paymentId !== null) return {
-		ok: false,
-		code: "invoice_has_payment"
-	};
-	Object.assign(invoice, {
-		status: "void",
-		voidedAt: w.now(),
-		voidReason: input.reason
-	});
-	const { state } = commitAccountChange(w, invoice.accountRef, {
-		type: "invoice.voided",
-		detail: {
-			invoiceId: id,
-			number: invoice.number,
-			totalMinor: invoice.totalMinor,
-			currency: invoice.currency,
-			reason: input.reason
-		}
-	});
-	return {
-		ok: true,
-		value: {
-			...toInvoice(invoice),
-			account: state
-		}
-	};
-}
-//#endregion
-//#region src/testing/http.ts
-const MUTATING = /* @__PURE__ */ new Set([
-	"POST",
-	"PUT",
-	"PATCH",
-	"DELETE"
-]);
-const KEY_RE = /^[A-Za-z0-9_.:-]{8,200}$/;
-const json = (body, status = 200, headers = {}) => ({
-	status,
-	body: JSON.stringify(body),
-	headers: {
-		"content-type": "application/json",
-		...headers
-	}
-});
-const empty = (status, headers = {}) => ({
-	status,
-	body: null,
-	headers
-});
-/** `If-None-Match` (liste, zayıf ETag ve `*` dahil) verilen ETag'i karşılıyor mu. */
-function notModified(header, etag) {
-	if (!header) return false;
-	return header.split(",").some((tag) => {
-		const value = tag.trim();
-		return value === "*" || value.replace(/^W\//, "") === etag;
-	});
-}
-function parseBody(ctx, schema) {
-	let value;
-	try {
-		value = JSON.parse(ctx.body);
-	} catch {
-		return {
-			ok: false,
-			reply: ctx.error("invalid_json")
-		};
-	}
-	const parsed = schema.safeParse(value);
-	if (parsed.success) return {
-		ok: true,
-		data: parsed.data
-	};
-	const message = parsed.error.issues.slice(0, 10).map((i) => `${i.path.join(".") || "(kök)"}: ${i.message}`).join("; ");
-	return {
-		ok: false,
-		reply: ctx.error("invalid_request", message)
-	};
-}
-const failure = (ctx, result) => ctx.error(result.code, result.message);
-function routes(w, config) {
-	const route = (method, path, handle) => ({
-		method,
-		path: path.split("/").filter(Boolean),
-		handle
-	});
-	const ref = (ctx) => ExternalRefSchema.safeParse(ctx.params.ref).success ? ctx.params.ref : null;
-	const admin = (handle) => (ctx) => ctx.auth.scope === "admin" ? handle(ctx) : ctx.error("forbidden", "admin kapsamlı anahtar gerekli");
-	return [
-		route("GET", "me", (ctx) => json({
-			product: w.productCode,
-			keyName: ctx.auth.keyName,
-			scope: ctx.auth.scope
-		})),
-		route("GET", "catalog", (ctx) => {
-			const catalog = catalogOf(w);
-			if (!catalog) return ctx.error("catalog_not_configured", "ürün için henüz katalog senkronlanmadı");
-			const etag = `"${catalogVersionOf(catalog)}"`;
-			if (ctx.headers.get("if-none-match") === etag) return empty(304, { etag });
-			return json(catalog, 200, { etag });
-		}),
-		route("PUT", "admin/catalog", admin((ctx) => {
-			const parsed = parseBody(ctx, CatalogSyncInputSchema);
-			if (!parsed.ok) return parsed.reply;
-			const result = syncCatalog(w, parsed.data);
-			return result.ok ? json(result.value) : failure(ctx, result);
-		})),
-		route("POST", "admin/accounts/refresh", admin(() => json(refreshAccounts(w)))),
-		route("GET", "admin/settings", admin(() => json(settings(w)))),
-		route("PATCH", "admin/settings", admin((ctx) => {
-			const parsed = parseBody(ctx, ProductSettingsPatchSchema);
-			return parsed.ok ? json(patchSettings(w, parsed.data)) : parsed.reply;
-		})),
-		route("GET", "admin/webhook-endpoints", admin(() => json(listEndpoints(w)))),
-		route("POST", "admin/webhook-endpoints", admin((ctx) => {
-			const parsed = parseBody(ctx, CreateEndpointInputSchema);
-			return parsed.ok ? json(createEndpoint(w, parsed.data), 201) : parsed.reply;
-		})),
-		route("POST", "admin/webhook-endpoints/:id/rotate", admin((ctx) => {
-			if (!IdSchema.safeParse(ctx.params.id).success) return ctx.error("webhook_endpoint_not_found");
-			const parsed = parseBody(ctx, WebhookEndpointRotateInputSchema);
-			if (!parsed.ok) return parsed.reply;
-			const result = rotateEndpoint(w, ctx.params.id, parsed.data);
-			return result.ok ? json(result.value) : failure(ctx, result);
-		})),
-		route("POST", "admin/webhook-endpoints/:id/deactivate", admin((ctx) => {
-			if (!IdSchema.safeParse(ctx.params.id).success) return ctx.error("webhook_endpoint_not_found");
-			const result = deactivateEndpoint(w, ctx.params.id);
-			return result.ok ? json(result.value) : failure(ctx, result);
-		})),
-		route("PUT", "accounts/:ref", (ctx) => {
-			const accountRef = ref(ctx);
-			if (!accountRef) return ctx.error("invalid_account_ref");
-			const parsed = parseBody(ctx, AccountUpsertInputSchema);
-			if (!parsed.ok) return parsed.reply;
-			const { account, created } = upsertAccount(w, accountRef, parsed.data);
-			return json(account, created ? 201 : 200);
-		}),
-		route("DELETE", "accounts/:ref", (ctx) => {
-			const accountRef = ref(ctx);
-			if (!accountRef) return ctx.error("invalid_account_ref");
-			const result = deleteAccount(w, accountRef, ctx.actorRef);
-			return result.ok ? json(result.value) : failure(ctx, result);
-		}),
-		route("GET", "accounts/:ref", (ctx) => {
-			const accountRef = ref(ctx);
-			if (!accountRef) return ctx.error("invalid_account_ref");
-			const requested = (ctx.url.searchParams.get("include") ?? "").split(",").filter(Boolean);
-			const unknown = requested.filter((i) => !ACCOUNT_INCLUDES.includes(i));
-			if (unknown.length > 0) return ctx.error("invalid_include", unknown.join(","));
-			const detail = accountDetail(w, accountRef, requested);
-			return detail ? json(detail) : ctx.error("account_not_found");
-		}),
-		route("GET", "accounts/:ref/state", (ctx) => {
-			const accountRef = ref(ctx);
-			if (!accountRef) return ctx.error("invalid_account_ref");
-			if (!w.accounts.has(accountRef)) return ctx.error("account_not_found");
-			const state = storedState(w, accountRef);
-			const etag = `"${state.version}"`;
-			if (notModified(ctx.headers.get("if-none-match"), etag)) return empty(304, { etag });
-			return json(state, 200, { etag });
-		}),
-		route("PUT", "accounts/:ref/plan", (ctx) => {
-			const accountRef = ref(ctx);
-			if (!accountRef) return ctx.error("invalid_account_ref");
-			const parsed = parseBody(ctx, PlanSetInputSchema);
-			if (!parsed.ok) return parsed.reply;
-			const result = setPlan(w, accountRef, parsed.data, ctx.actorRef);
-			return result.ok ? json(result.value) : failure(ctx, result);
-		}),
-		route("POST", "accounts/:ref/resync", (ctx) => {
-			const accountRef = ref(ctx);
-			if (!accountRef) return ctx.error("invalid_account_ref");
-			const result = resyncAccount(w, accountRef);
-			return result.ok ? json(result.value, 202) : failure(ctx, result);
-		}),
-		route("POST", "accounts/:ref/checkout-sessions", (ctx) => {
-			const accountRef = ref(ctx);
-			if (!accountRef) return ctx.error("invalid_account_ref");
-			const parsed = parseBody(ctx, CheckoutSessionCreateInputSchema);
-			if (!parsed.ok) return parsed.reply;
-			const result = createCheckoutSession(w, config.baseUrl, accountRef, parsed.data, ctx.actorRef);
-			return result.ok ? json(result.value, 201) : failure(ctx, result);
-		}),
-		route("POST", "accounts/:ref/portal-sessions", (ctx) => {
-			const accountRef = ref(ctx);
-			if (!accountRef) return ctx.error("invalid_account_ref");
-			const parsed = ctx.body.trim() === "" ? {
-				ok: true,
-				data: {}
-			} : parseBody(ctx, PortalSessionCreateInputSchema);
-			if (!parsed.ok) return parsed.reply;
-			const result = createPortalSession(w, config.baseUrl, accountRef, parsed.data, ctx.actorRef);
-			return result.ok ? json(result.value, 201) : failure(ctx, result);
-		}),
-		route("GET", "checkout-sessions/:id", (ctx) => {
-			const session = IdSchema.safeParse(ctx.params.id).success ? checkoutSessionResponse(w, ctx.params.id) : null;
-			return session ? json(session) : ctx.error("checkout_session_not_found");
-		}),
-		route("POST", "subscriptions/:id/cancel", (ctx) => {
-			if (!IdSchema.safeParse(ctx.params.id).success) return ctx.error("subscription_not_found");
-			const parsed = parseBody(ctx, CancelSubscriptionInputSchema);
-			if (!parsed.ok) return parsed.reply;
-			const result = cancelSubscription(w, ctx.params.id, parsed.data, ctx.actorRef);
-			return result.ok ? json(result.value) : failure(ctx, result);
-		}),
-		route("POST", "accounts/:ref/grants", (ctx) => {
-			const accountRef = ref(ctx);
-			if (!accountRef) return ctx.error("invalid_account_ref");
-			const parsed = parseBody(ctx, GrantCreateInputSchema);
-			if (!parsed.ok) return parsed.reply;
-			const result = createGrant(w, accountRef, parsed.data, ctx.actorRef);
-			return result.ok ? json(result.value, 201) : failure(ctx, result);
-		}),
-		route("DELETE", "grants/:id", (ctx) => IdSchema.safeParse(ctx.params.id).success && revokeGrant(w, ctx.params.id) ? empty(204) : ctx.error("grant_not_found")),
-		route("GET", "stats", () => json(stats(w))),
-		route("GET", "doctor", () => json(doctorReport(w), 200, { "cache-control": "no-store" })),
-		route("POST", "invoices/:id/issue", (ctx) => {
-			if (!IdSchema.safeParse(ctx.params.id).success) return ctx.error("not_found");
-			const parsed = parseBody(ctx, InvoiceIssueInputSchema);
-			if (!parsed.ok) return parsed.reply;
-			const result = issueInvoice(w, ctx.params.id, parsed.data);
-			return result.ok ? json(result.value) : failure(ctx, result);
-		}),
-		route("POST", "accounts/:ref/invoices", (ctx) => {
-			const accountRef = ref(ctx);
-			if (!accountRef) return ctx.error("invalid_account_ref");
-			const parsed = parseBody(ctx, ManualInvoiceInputSchema);
-			if (!parsed.ok) return parsed.reply;
-			const result = createManualInvoice(w, accountRef, parsed.data);
-			return result.ok ? json(result.value, 201) : failure(ctx, result);
-		}),
-		route("POST", "invoices/:id/void", (ctx) => {
-			if (!IdSchema.safeParse(ctx.params.id).success) return ctx.error("not_found");
-			const parsed = parseBody(ctx, InvoiceVoidInputSchema);
-			if (!parsed.ok) return parsed.reply;
-			const result = voidInvoice(w, ctx.params.id, parsed.data);
-			return result.ok ? json(result.value) : failure(ctx, result);
-		}),
-		route("GET", "invoices/:id/document", (ctx) => {
-			const invoice = IdSchema.safeParse(ctx.params.id).success ? w.invoices.find((i) => i.id === ctx.params.id) : void 0;
-			if (!invoice?.document) return ctx.error("document_not_found");
-			const { bytes, sha256 } = invoice.document;
-			return {
-				status: 200,
-				body: bytes,
-				headers: {
-					"content-type": "application/pdf",
-					"content-length": String(bytes.length),
-					"cache-control": "private, no-store",
-					"x-content-sha256": sha256
-				}
-			};
-		})
-	];
-}
-function decode(segment) {
-	try {
-		return decodeURIComponent(segment);
-	} catch {
-		return segment;
-	}
-}
-function match(route, method, segments) {
-	if (route.method !== method || route.path.length !== segments.length) return null;
-	const params = {};
-	for (const [i, part] of route.path.entries()) {
-		const segment = segments[i];
-		if (part.startsWith(":")) {
-			if (segment === "") return null;
-			params[part.slice(1)] = decode(segment);
-		} else if (part !== segment) return null;
-	}
-	return params;
-}
-function createHttpHandler(w, config) {
-	const table = routes(w, config);
-	const idempotency = /* @__PURE__ */ new Map();
-	return (req) => {
-		const requestId = config.requestId();
-		const error = (code, message) => {
-			const spec = ERROR_CODES[code];
-			const body = {
-				error: code,
-				...message !== void 0 ? { message } : {},
-				category: spec.category,
-				retryable: spec.retryable,
-				requestId
-			};
-			return json(body, spec.httpStatus);
-		};
-		const reply = run(req, error);
-		const headers = new Headers(reply.headers);
-		headers.set(HEADER_REQUEST_ID, requestId);
-		return new Response(reply.body, {
-			status: reply.status,
-			headers
-		});
-	};
-	function run(req, error) {
-		const path = req.url.pathname;
-		if (path === "/health" && req.method === "GET") return json({ ok: true });
-		if (path !== "/v1" && !path.startsWith("/v1/")) return error("not_found");
-		const header = req.headers.get("authorization") ?? "";
-		const token = header.startsWith("Bearer ") ? header.slice(7).trim() : "";
-		const auth = token ? config.keys.get(token) : void 0;
-		if (!auth) return error("unauthorized");
-		const actorRef = req.headers.get(HEADER_ACTOR_REF);
-		if (actorRef !== null && !ActorRefSchema.safeParse(actorRef).success) return error("invalid_actor_ref", "biçim: tür[:kimlik], ör. user:42");
-		if (actorRef === null && MUTATING.has(req.method)) return error("actor_ref_required", `${HEADER_ACTOR_REF} başlığı zorunlu`);
-		const segments = path.slice(3).split("/").slice(1);
-		const dispatch = () => {
-			if (segments[0] === "accounts" && segments[1] && w.accounts.get(decode(segments[1]))?.deletedAt !== void 0) return error("account_deleted");
-			for (const route of table) {
-				const params = match(route, req.method, segments);
-				if (params) return route.handle({
-					...req,
-					params,
-					auth,
-					actorRef,
-					error
-				});
-			}
-			return error("not_found");
-		};
-		const guarded = () => {
-			try {
-				return dispatch();
-			} catch (cause) {
-				config.logger.error(`sahte steward ${req.method} ${path}: ${cause instanceof Error ? cause.message : String(cause)}`);
-				return error("internal_error");
-			}
-		};
-		if (!MUTATING.has(req.method)) return guarded();
-		const key = req.headers.get(HEADER_IDEMPOTENCY_KEY);
-		if (!key) return error("idempotency_key_required", `${HEADER_IDEMPOTENCY_KEY} başlığı zorunlu`);
-		if (!KEY_RE.test(key)) return error("invalid_idempotency_key");
-		const hash = `${req.method} ${path}${req.url.search}\n${req.body}`;
-		const existing = idempotency.get(key);
-		if (existing) {
-			if (existing.hash !== hash) return error("idempotency_key_reused", "bu anahtar farklı bir istekte kullanıldı");
-			if (existing.status === null) return error("request_in_progress");
-			const body = existing.status === 204 ? null : existing.body;
-			return {
-				status: existing.status,
-				body,
-				headers: {
-					"content-type": "application/json",
-					"idempotent-replayed": "true"
-				}
-			};
-		}
-		idempotency.set(key, {
-			hash,
-			status: null,
-			body: ""
-		});
-		const result = guarded();
-		if (result.status < 200 || result.status >= 300) idempotency.delete(key);
-		else {
-			const text = typeof result.body === "string" ? result.body : "";
-			idempotency.set(key, {
-				hash,
-				status: result.status,
-				body: text
-			});
-		}
-		if (req.method === "DELETE" && result.status === 200 && segments[0] === "accounts" && segments.length === 2) {
-			const deletedRef = decode(segments[1]);
-			for (const [stored, entry] of idempotency) if (stored !== key && entry.body.includes(`"ref":"${deletedRef}"`) || entry.body.includes(`"accountRef":"${deletedRef}"`)) idempotency.delete(stored);
-		}
-		return result;
-	}
-}
-//#endregion
-//#region src/testing/portal.ts
-const PORTAL_DONE = [
-	"canceled",
-	"retry_requested",
-	"profile_saved"
-];
-const PORTAL_ERRORS = [
-	"provider_error",
-	"cancel_not_allowed",
-	"retry_not_allowed",
-	"no_subscription",
-	"already_canceled",
-	"nothing_to_retry",
-	"retry_too_soon"
-];
-/** Domain nedeni → bildirim kodu (servisin `notAllowedError` eşlemesi). */
-const REASON_FLASH = {
-	no_subscription: "no_subscription",
-	already_scheduled: "already_canceled",
-	nothing_to_retry: "nothing_to_retry",
-	no_failed_payment: "nothing_to_retry",
-	retry_too_soon: "retry_too_soon"
-};
-const DONE_TEXT = {
-	canceled: "Aboneliğiniz dönem sonunda iptal edilecek.",
-	retry_requested: "Ödeme yeniden deneniyor; sonuç birazdan hesabınıza yansır.",
-	profile_saved: "Fatura bilgileriniz kaydedildi."
-};
-const ERROR_TEXT = {
-	provider_error: "Ödeme sağlayıcısına ulaşılamadı.",
-	cancel_not_allowed: "Abonelik şu anda iptal edilemiyor.",
-	retry_not_allowed: "Ödeme şu anda yeniden denenemiyor.",
-	no_subscription: "Aktif aboneliğiniz yok.",
-	already_canceled: "Aboneliğiniz zaten dönem sonunda iptal edilecek.",
-	nothing_to_retry: "Yeniden denenecek bir ödeme yok.",
-	retry_too_soon: "Ödeme az önce yeniden denendi; birkaç dakika sonra tekrar deneyin."
-};
-const HEADERS = {
-	"cache-control": "no-store",
-	"referrer-policy": "no-referrer"
-};
-const htmlResponse = (status, title, body) => new Response(`<!doctype html><html lang="tr"><meta charset="utf-8"><title>${escapeHtml(title)}</title><body>${body}</body></html>`, {
-	status,
-	headers: {
-		...HEADERS,
-		"content-type": "text/html; charset=utf-8"
-	}
-});
-const notFound = () => htmlResponse(404, "Sayfa bulunamadı", "<h1>Sayfa bulunamadı</h1><p>Bu portal bağlantısı geçersiz ya da süresi dolmuş.</p>");
-const redirect = (location) => new Response(null, {
-	status: 303,
-	headers: {
-		...HEADERS,
-		location
-	}
-});
-const PATH = /^\/public\/v1\/portal\/([^/]+)(?:\/(cancel|retry-payment|profile)|\/invoices\/([^/]+)\/document)?$/;
-const day = (ms) => ms === null ? "—" : iso(ms).slice(0, 10);
-const PROFILE_FIELDS = [
-	"kind",
-	"contactName",
-	"email",
-	"phone",
-	"address",
-	"city",
-	"companyName",
-	"taxId",
-	"taxOffice"
-];
-const FIELD_LABELS = {
-	contactName: "Ad soyad",
-	email: "E-posta",
-	phone: "Telefon",
-	address: "Adres",
-	city: "Şehir",
-	companyName: "Şirket unvanı",
-	taxId: "Vergi kimlik numarası",
-	taxOffice: "Vergi dairesi"
-};
-/** Servisin `normalizePhone`'u (form.ts): boşluk/parantez/tire atılır, TR yazımları E.164'e. */
-function normalizePhone(input) {
-	const compact = input.replace(/[\s().-]/g, "");
-	if (/^\+\d+$/.test(compact)) return compact;
-	if (/^00\d+$/.test(compact)) return `+${compact.slice(2)}`;
-	if (/^0\d{10}$/.test(compact)) return `+90${compact.slice(1)}`;
-	if (/^5\d{9}$/.test(compact)) return `+90${compact}`;
-	if (/^90\d{10}$/.test(compact)) return `+${compact}`;
-	return compact;
-}
-/**
-* Servisin `buildProfile`'ı (portal-form.ts): sayfa yalnızca türü ve serbest metinde `<`/`>`
-* denetler (bu hatalar domain'e gitmez); değerler kırpılır, telefon normalleşir, VKN'deki
-* boşluklar atılır. Asıl doğrulama `ops.updatePortalProfile`'da.
-*/
-function buildProfile(values) {
-	const fieldErrors = {};
-	const kind = values.kind === "individual" || values.kind === "company" ? values.kind : null;
-	if (!kind) fieldErrors["profile.kind"] = "invalid_kind";
-	const textFields = kind === "company" ? [
-		"contactName",
-		"address",
-		"city",
-		"companyName",
-		"taxOffice"
-	] : [
-		"contactName",
-		"address",
-		"city"
-	];
-	for (const field of textFields) if (/[<>]/.test(values[field])) fieldErrors[`profile.${field}`] = "invalid_characters";
-	if (!kind || Object.keys(fieldErrors).length > 0) return {
-		ok: false,
-		fieldErrors
-	};
-	return {
-		ok: true,
-		profile: {
-			kind,
-			contactName: values.contactName.trim(),
-			email: values.email.trim(),
-			phone: normalizePhone(values.phone),
-			address: values.address.trim(),
-			city: values.city.trim(),
-			...kind === "company" ? {
-				companyName: values.companyName.trim(),
-				taxId: values.taxId.replace(/\s/g, ""),
-				taxOffice: values.taxOffice.trim()
-			} : {}
-		}
-	};
-}
-function readProfileValues(form) {
-	return Object.fromEntries(PROFILE_FIELDS.map((field) => [field, (form.get(field) ?? "").slice(0, 1e3)]));
-}
-function storedValues(view) {
-	const p = view.account.profile;
-	return {
-		kind: p?.kind ?? "individual",
-		contactName: p?.contactName ?? "",
-		email: p?.email ?? "",
-		phone: p?.phone ?? "",
-		address: p?.address ?? "",
-		city: p?.city ?? "",
-		companyName: p?.companyName ?? "",
-		taxId: p?.taxId ?? "",
-		taxOffice: p?.taxOffice ?? ""
-	};
-}
-/** `/public/v1/portal/*` istekleri (kimliksiz). Eşleşmeyen yol ve yöntem 404. */
-function handlePortal(w, req, options) {
-	const match = PATH.exec(req.url.pathname);
-	if (!match) return notFound();
-	let id;
-	let invoiceId;
-	try {
-		id = decodeURIComponent(match[1]);
-		invoiceId = match[3] === void 0 ? void 0 : decodeURIComponent(match[3]);
-	} catch {
-		return notFound();
-	}
-	const action = match[2];
-	const path = `${options.baseUrl}/public/v1/portal/${encodeURIComponent(id)}`;
-	const pageUrl = (k, flash = {}) => `${path}?k=${encodeURIComponent(k)}${flash.done ? `&done=${flash.done}` : flash.error ? `&error=${flash.error}` : ""}`;
-	if (action === void 0) {
-		if (req.method !== "GET") return notFound();
-		const k = req.url.searchParams.get("k") ?? "";
-		const session = openPortalSession(w, id, k);
-		if (!session) return notFound();
-		if (invoiceId !== void 0) {
-			const document = portalInvoiceDocument(w, session, invoiceId);
-			if (!document) return notFound();
-			return new Response(new Uint8Array(document.bytes), {
-				status: 200,
-				headers: {
-					...HEADERS,
-					"content-type": "application/pdf",
-					"content-disposition": `attachment; filename="${document.filename}"`,
-					"content-length": String(document.bytes.byteLength),
-					"x-content-type-options": "nosniff"
-				}
-			});
-		}
-		const doneParam = req.url.searchParams.get("done") ?? void 0;
-		const done = PORTAL_DONE.includes(doneParam ?? "") ? doneParam : null;
-		const errorParam = req.url.searchParams.get("error") ?? void 0;
-		const error = !done && PORTAL_ERRORS.includes(errorParam ?? "") ? errorParam : null;
-		const view = portalView(w, session);
-		return portalPage(view, path, k, {
-			done,
-			error,
-			values: storedValues(view),
-			fieldErrors: {}
-		}, 200);
-	}
-	if (req.method !== "POST") return notFound();
-	const form = new URLSearchParams(req.body);
-	const k = (form.get("k") ?? "").slice(0, 1e3);
-	const session = openPortalSession(w, id, k);
-	if (!session) return notFound();
-	switch (action) {
-		case "cancel": {
-			if (form.get("confirm") !== "1") {
-				const sub = liveSubscription(w, session.accountRef);
-				if (!sub) return redirect(pageUrl(k, { error: "no_subscription" }));
-				if (sub.cancelAtPeriodEnd) return redirect(pageUrl(k, { error: "already_canceled" }));
-				return confirmPage(portalView(w, session), path, k);
-			}
-			const result = portalCancel(w, session);
-			return redirect(pageUrl(k, result === "ok" ? { done: "canceled" } : { error: REASON_FLASH[result] }));
-		}
-		case "retry-payment": {
-			const result = portalRetryPayment(w, session);
-			return redirect(pageUrl(k, result === "ok" ? { done: "retry_requested" } : { error: REASON_FLASH[result] }));
-		}
-		case "profile": {
-			const values = readProfileValues(form);
-			const built = buildProfile(values);
-			const result = built.ok ? updatePortalProfile(w, session, built.profile) : built;
-			if (result.ok) return redirect(pageUrl(k, { done: "profile_saved" }));
-			return portalPage(portalView(w, session), path, k, {
-				done: null,
-				error: null,
-				values,
-				fieldErrors: result.fieldErrors
-			}, 422);
-		}
-		default: return notFound();
-	}
-}
-function portalPage(view, path, k, state, status) {
-	const key = `<input type="hidden" name="k" value="${escapeHtml(k)}">`;
-	const { state: account, subscription: sub } = view;
-	const flash = state.done ? `<p role="status" data-done="${state.done}">${escapeHtml(DONE_TEXT[state.done])}</p>` : state.error ? `<p role="alert" data-error="${state.error}">${escapeHtml(ERROR_TEXT[state.error])}</p>` : "";
-	const subscription = sub ? `<p>Abonelik: <strong>${escapeHtml(sub.planName)}</strong> (${escapeHtml(sub.price.planCode)}) · ${escapeHtml(sub.price.interval)} · ${sub.price.amountMinor} ${escapeHtml(sub.price.currency)} (kuruş) · durum: ${escapeHtml(sub.row.status)}</p>
-<p>Dönem: ${day(sub.row.currentPeriodStart)} – ${day(sub.row.currentPeriodEnd)}</p>
-${sub.row.cancelAtPeriodEnd ? `<p>Dönem sonunda iptal edilecek: ${day(sub.row.cancelAt ?? sub.row.currentPeriodEnd)}</p>` : ""}
-${sub.canRetryPayment ? `<form method="post" action="${escapeHtml(path)}/retry-payment">${key}<button>Ödemeyi yeniden dene</button></form>` : ""}
-${sub.canCancel ? `<form method="post" action="${escapeHtml(path)}/cancel">${key}<button>Dönem sonunda iptal</button></form>` : ""}` : "<p>Aktif aboneliğiniz yok.</p>";
-	const invoices = view.invoices.length ? `<ul>${view.invoices.map((invoice) => {
-		const link = invoice.status === "issued" && invoice.document ? ` <a href="${escapeHtml(`${path}/invoices/${encodeURIComponent(invoice.id)}/document?k=${encodeURIComponent(k)}`)}" download>İndir</a>` : "";
-		return `<li>${escapeHtml(invoice.number ?? "(numarasız)")} · ${day(invoice.issuedAt ?? invoice.createdAt)} · ${invoice.totalMinor} ${escapeHtml(invoice.currency)} · ${escapeHtml(invoice.status)}${link}</li>`;
-	}).join("")}</ul>` : "<p>Fatura yok.</p>";
-	const errors = Object.entries(state.fieldErrors);
-	const fieldError = (field) => state.fieldErrors[`profile.${field}`] ? ` <small data-field-error="profile.${field}">${escapeHtml(state.fieldErrors[`profile.${field}`])}</small>` : "";
-	const input = (field) => `<label>${FIELD_LABELS[field]} <input name="${field}" value="${escapeHtml(state.values[field])}"></label>${fieldError(field)}<br>`;
-	const radio = (value, label) => `<label><input type="radio" name="kind" value="${value}"${state.values.kind === value ? " checked" : ""}> ${label}</label>`;
-	const profile = `<form method="post" action="${escapeHtml(path)}/profile">${key}
-${errors.length ? `<ul role="alert">${errors.map(([field, code]) => `<li data-field="${escapeHtml(field)}">${escapeHtml(field)}: ${escapeHtml(code)}</li>`).join("")}</ul>` : ""}
-<p>${radio("individual", "Bireysel")} ${radio("company", "Kurumsal")}${fieldError("kind")}</p>
-${[
-		"contactName",
-		"email",
-		"phone",
-		"address",
-		"city",
-		"companyName",
-		"taxId",
-		"taxOffice"
-	].map(input).join("\n")}
-<button>Kaydet</button></form>`;
-	const back = view.returnUrl && /^https?:\/\//.test(view.returnUrl) ? `<p><a href="${escapeHtml(view.returnUrl)}" rel="noreferrer">Ürüne dön</a></p>` : "";
-	return htmlResponse(status, "Sahte steward müşteri portalı", `${back}<h1>Sahte steward müşteri portalı</h1>
-${flash}
-<p>Hesap: ${escapeHtml(account.ref)} · ${escapeHtml(account.displayName)} · dil: ${escapeHtml(view.session.locale)}</p>
-<p>Plan: <strong>${escapeHtml(view.planName)}</strong> (${escapeHtml(account.planCode)}) · erişim: ${escapeHtml(account.accessState)}</p>
-<h2>Abonelik</h2>
-${subscription}
-<h2>Faturalar</h2>
-${invoices}
-<h2>Fatura bilgileri</h2>
-${profile}
-<p><small>Bağlantı ${iso(view.session.expiresAt)} tarihine kadar geçerli.</small></p>`);
-}
-/** İptalin ikinci adımı: `confirm=1` ile aynı rotaya gönderir. */
-function confirmPage(view, path, k) {
-	const sub = view.subscription;
-	return htmlResponse(200, "Aboneliği iptal et", `<h1>Aboneliği iptal et</h1>
-<p>${escapeHtml(sub?.planName ?? view.planName)} aboneliğiniz dönem sonunda (${day(sub?.row.currentPeriodEnd ?? null)}) sona erecek; o zamana kadar erişiminiz sürer.</p>
-<form method="post" action="${escapeHtml(path)}/cancel"><input type="hidden" name="k" value="${escapeHtml(k)}"><input type="hidden" name="confirm" value="1"><button>İptali onayla</button></form>
-<p><a href="${escapeHtml(`${path}?k=${encodeURIComponent(k)}`)}">Vazgeç</a></p>`);
-}
-//#endregion
-//#region src/testing/signed-event.ts
-const FIXTURES = {
-	"account.updated": {
-		id: "evt_0192f1a0-0000-7000-8000-000000000010",
-		type: "account.updated",
-		apiVersion: "2026-10-01",
-		createdAt: "2026-10-01T09:00:00Z",
-		product: "example",
-		accountRef: "acct_42",
-		data: {
-			"account": {
-				"version": 3,
-				"planCode": "team",
-				"accessState": "active",
-				"entitlements": {
-					"max_users": null,
-					"max_devices": 250,
-					"max_networks_per_account": 3,
-					"max_approved_routes": 10,
-					"max_exit_nodes": 1
-				},
-				"subscription": {
-					"id": "0192f1a0-0000-7000-8000-000000000001",
-					"status": "active",
-					"planCode": "team",
-					"interval": "month",
-					"amountMinor": 125e3,
-					"currency": "TRY",
-					"currentPeriodEnd": "2026-11-01T09:00:00Z",
-					"cancelAt": null
-				}
-			},
-			"detail": { "changed": ["entitlements"] }
-		}
-	},
-	"checkout.completed": {
-		id: "evt_0192f1a0-0000-7000-8000-000000000011",
-		type: "checkout.completed",
-		apiVersion: "2026-10-01",
-		createdAt: "2026-10-01T09:00:00Z",
-		product: "example",
-		accountRef: "acct_42",
-		data: {
-			"account": {
-				"version": 1,
-				"planCode": "team",
-				"accessState": "active",
-				"entitlements": {
-					"max_users": null,
-					"max_devices": 250,
-					"max_networks_per_account": 3,
-					"max_approved_routes": 10,
-					"max_exit_nodes": 1
-				},
-				"subscription": {
-					"id": "0192f1a0-0000-7000-8000-000000000001",
-					"status": "active",
-					"planCode": "team",
-					"interval": "month",
-					"amountMinor": 125e3,
-					"currency": "TRY",
-					"currentPeriodEnd": "2026-11-01T09:00:00Z",
-					"cancelAt": null
-				}
-			},
-			"detail": {
-				"checkoutSessionId": "0192f1a0-0000-7000-8000-000000000004",
-				"subscriptionId": "0192f1a0-0000-7000-8000-000000000001"
-			}
-		}
-	},
-	"checkout.failed": {
-		id: "evt_0192f1a0-0000-7000-8000-000000000012",
-		type: "checkout.failed",
-		apiVersion: "2026-10-01",
-		createdAt: "2026-10-01T09:00:00Z",
-		product: "example",
-		accountRef: "acct_42",
-		data: {
-			"account": {
-				"version": 0,
-				"planCode": "free",
-				"accessState": "active",
-				"entitlements": {
-					"max_users": 3,
-					"max_devices": 15,
-					"max_networks_per_account": 1,
-					"max_approved_routes": 1,
-					"max_exit_nodes": 0
-				},
-				"subscription": null
-			},
-			"detail": {
-				"checkoutSessionId": "0192f1a0-0000-7000-8000-000000000004",
-				"reason": "provider:card_declined"
-			}
-		}
-	},
-	"checkout.expired": {
-		id: "evt_0192f1a0-0000-7000-8000-000000000013",
-		type: "checkout.expired",
-		apiVersion: "2026-10-01",
-		createdAt: "2026-10-01T09:00:00Z",
-		product: "example",
-		accountRef: "acct_42",
-		data: {
-			"account": {
-				"version": 0,
-				"planCode": "free",
-				"accessState": "active",
-				"entitlements": {
-					"max_users": 3,
-					"max_devices": 15,
-					"max_networks_per_account": 1,
-					"max_approved_routes": 1,
-					"max_exit_nodes": 0
-				},
-				"subscription": null
-			},
-			"detail": { "checkoutSessionId": "0192f1a0-0000-7000-8000-000000000004" }
-		}
-	},
-	"subscription.activated": {
-		id: "evt_0192f1a0-0000-7000-8000-000000000014",
-		type: "subscription.activated",
-		apiVersion: "2026-10-01",
-		createdAt: "2026-10-01T09:00:00Z",
-		product: "example",
-		accountRef: "acct_42",
-		data: {
-			"account": {
-				"version": 1,
-				"planCode": "team",
-				"accessState": "active",
-				"entitlements": {
-					"max_users": null,
-					"max_devices": 250,
-					"max_networks_per_account": 3,
-					"max_approved_routes": 10,
-					"max_exit_nodes": 1
-				},
-				"subscription": {
-					"id": "0192f1a0-0000-7000-8000-000000000001",
-					"status": "active",
-					"planCode": "team",
-					"interval": "month",
-					"amountMinor": 125e3,
-					"currency": "TRY",
-					"currentPeriodEnd": "2026-11-01T09:00:00Z",
-					"cancelAt": null
-				}
-			},
-			"detail": {
-				"subscriptionId": "0192f1a0-0000-7000-8000-000000000001",
-				"planCode": "team",
-				"interval": "month",
-				"amountMinor": 125e3,
-				"currency": "TRY",
-				"actorRef": "user:42"
-			}
-		}
-	},
-	"subscription.renewed": {
-		id: "evt_0192f1a0-0000-7000-8000-000000000015",
-		type: "subscription.renewed",
-		apiVersion: "2026-10-01",
-		createdAt: "2026-10-01T09:00:00Z",
-		product: "example",
-		accountRef: "acct_42",
-		data: {
-			"account": {
-				"version": 2,
-				"planCode": "team",
-				"accessState": "active",
-				"entitlements": {
-					"max_users": null,
-					"max_devices": 250,
-					"max_networks_per_account": 3,
-					"max_approved_routes": 10,
-					"max_exit_nodes": 1
-				},
-				"subscription": {
-					"id": "0192f1a0-0000-7000-8000-000000000001",
-					"status": "active",
-					"planCode": "team",
-					"interval": "month",
-					"amountMinor": 125e3,
-					"currency": "TRY",
-					"currentPeriodEnd": "2026-12-01T09:00:00Z",
-					"cancelAt": null
-				}
-			},
-			"detail": {
-				"subscriptionId": "0192f1a0-0000-7000-8000-000000000001",
-				"paymentId": "0192f1a0-0000-7000-8000-000000000002",
-				"periodStart": "2026-11-01T09:00:00Z",
-				"periodEnd": "2026-12-01T09:00:00Z",
-				"invoiceId": "0192f1a0-0000-7000-8000-000000000003"
-			}
-		}
-	},
-	"subscription.payment_failed": {
-		id: "evt_0192f1a0-0000-7000-8000-000000000016",
-		type: "subscription.payment_failed",
-		apiVersion: "2026-10-01",
-		createdAt: "2026-10-01T09:00:00Z",
-		product: "example",
-		accountRef: "acct_42",
-		data: {
-			"account": {
-				"version": 2,
-				"planCode": "team",
-				"accessState": "active",
-				"entitlements": {
-					"max_users": null,
-					"max_devices": 250,
-					"max_networks_per_account": 3,
-					"max_approved_routes": 10,
-					"max_exit_nodes": 1
-				},
-				"subscription": {
-					"id": "0192f1a0-0000-7000-8000-000000000001",
-					"status": "past_due",
-					"planCode": "team",
-					"interval": "month",
-					"amountMinor": 125e3,
-					"currency": "TRY",
-					"currentPeriodEnd": "2026-11-01T09:00:00Z",
-					"cancelAt": null
-				}
-			},
-			"detail": {
-				"subscriptionId": "0192f1a0-0000-7000-8000-000000000001",
-				"paymentId": "0192f1a0-0000-7000-8000-000000000002",
-				"attempt": 1,
-				"nextRetryAt": "2026-11-02T09:00:00Z"
-			}
-		}
-	},
-	"subscription.suspended": {
-		id: "evt_0192f1a0-0000-7000-8000-000000000017",
-		type: "subscription.suspended",
-		apiVersion: "2026-10-01",
-		createdAt: "2026-10-01T09:00:00Z",
-		product: "example",
-		accountRef: "acct_42",
-		data: {
-			"account": {
-				"version": 3,
-				"planCode": "team",
-				"accessState": "suspended",
-				"entitlements": {
-					"max_users": null,
-					"max_devices": 250,
-					"max_networks_per_account": 3,
-					"max_approved_routes": 10,
-					"max_exit_nodes": 1
-				},
-				"subscription": {
-					"id": "0192f1a0-0000-7000-8000-000000000001",
-					"status": "suspended",
-					"planCode": "team",
-					"interval": "month",
-					"amountMinor": 125e3,
-					"currency": "TRY",
-					"currentPeriodEnd": "2026-11-01T09:00:00Z",
-					"cancelAt": null
-				}
-			},
-			"detail": {
-				"subscriptionId": "0192f1a0-0000-7000-8000-000000000001",
-				"dunningDay": 7
-			}
-		}
-	},
-	"subscription.reactivated": {
-		id: "evt_0192f1a0-0000-7000-8000-000000000018",
-		type: "subscription.reactivated",
-		apiVersion: "2026-10-01",
-		createdAt: "2026-10-01T09:00:00Z",
-		product: "example",
-		accountRef: "acct_42",
-		data: {
-			"account": {
-				"version": 4,
-				"planCode": "team",
-				"accessState": "active",
-				"entitlements": {
-					"max_users": null,
-					"max_devices": 250,
-					"max_networks_per_account": 3,
-					"max_approved_routes": 10,
-					"max_exit_nodes": 1
-				},
-				"subscription": {
-					"id": "0192f1a0-0000-7000-8000-000000000001",
-					"status": "active",
-					"planCode": "team",
-					"interval": "month",
-					"amountMinor": 125e3,
-					"currency": "TRY",
-					"currentPeriodEnd": "2026-11-01T09:00:00Z",
-					"cancelAt": null
-				}
-			},
-			"detail": {
-				"subscriptionId": "0192f1a0-0000-7000-8000-000000000001",
-				"paymentId": "0192f1a0-0000-7000-8000-000000000002"
-			}
-		}
-	},
-	"subscription.cancel_scheduled": {
-		id: "evt_0192f1a0-0000-7000-8000-000000000019",
-		type: "subscription.cancel_scheduled",
-		apiVersion: "2026-10-01",
-		createdAt: "2026-10-01T09:00:00Z",
-		product: "example",
-		accountRef: "acct_42",
-		data: {
-			"account": {
-				"version": 2,
-				"planCode": "team",
-				"accessState": "active",
-				"entitlements": {
-					"max_users": null,
-					"max_devices": 250,
-					"max_networks_per_account": 3,
-					"max_approved_routes": 10,
-					"max_exit_nodes": 1
-				},
-				"subscription": {
-					"id": "0192f1a0-0000-7000-8000-000000000001",
-					"status": "active",
-					"planCode": "team",
-					"interval": "month",
-					"amountMinor": 125e3,
-					"currency": "TRY",
-					"currentPeriodEnd": "2026-11-01T09:00:00Z",
-					"cancelAt": "2026-11-01T09:00:00Z"
-				}
-			},
-			"detail": {
-				"subscriptionId": "0192f1a0-0000-7000-8000-000000000001",
-				"cancelAt": "2026-11-01T09:00:00Z",
-				"reason": "müşteri talebi",
-				"actorRef": "staff:7"
-			}
-		}
-	},
-	"subscription.canceled": {
-		id: "evt_0192f1a0-0000-7000-8000-00000000001a",
-		type: "subscription.canceled",
-		apiVersion: "2026-10-01",
-		createdAt: "2026-10-01T09:00:00Z",
-		product: "example",
-		accountRef: "acct_42",
-		data: {
-			"account": {
-				"version": 2,
-				"planCode": "free",
-				"accessState": "active",
-				"entitlements": {
-					"max_users": 3,
-					"max_devices": 15,
-					"max_networks_per_account": 1,
-					"max_approved_routes": 1,
-					"max_exit_nodes": 0
-				},
-				"subscription": null
-			},
-			"detail": {
-				"subscriptionId": "0192f1a0-0000-7000-8000-000000000001",
-				"reason": "müşteri talebi",
-				"effectiveAt": "2026-10-15T12:00:00Z",
-				"actorRef": "staff:7"
-			}
-		}
-	},
-	"subscription.expired": {
-		id: "evt_0192f1a0-0000-7000-8000-00000000001b",
-		type: "subscription.expired",
-		apiVersion: "2026-10-01",
-		createdAt: "2026-10-01T09:00:00Z",
-		product: "example",
-		accountRef: "acct_42",
-		data: {
-			"account": {
-				"version": 3,
-				"planCode": "free",
-				"accessState": "active",
-				"entitlements": {
-					"max_users": 3,
-					"max_devices": 15,
-					"max_networks_per_account": 1,
-					"max_approved_routes": 1,
-					"max_exit_nodes": 0
-				},
-				"subscription": null
-			},
-			"detail": {
-				"subscriptionId": "0192f1a0-0000-7000-8000-000000000001",
-				"effectiveAt": "2026-11-01T09:00:00Z"
-			}
-		}
-	},
-	"subscription.terminated": {
-		id: "evt_0192f1a0-0000-7000-8000-00000000001c",
-		type: "subscription.terminated",
-		apiVersion: "2026-10-01",
-		createdAt: "2026-10-01T09:00:00Z",
-		product: "example",
-		accountRef: "acct_42",
-		data: {
-			"account": {
-				"version": 5,
-				"planCode": "free",
-				"accessState": "active",
-				"entitlements": {
-					"max_users": 3,
-					"max_devices": 15,
-					"max_networks_per_account": 1,
-					"max_approved_routes": 1,
-					"max_exit_nodes": 0
-				},
-				"subscription": null
-			},
-			"detail": {
-				"subscriptionId": "0192f1a0-0000-7000-8000-000000000001",
-				"reason": "nonpayment",
-				"dunningDay": 30
-			}
-		}
-	},
-	"invoice.created": {
-		id: "evt_0192f1a0-0000-7000-8000-00000000001d",
-		type: "invoice.created",
-		apiVersion: "2026-10-01",
-		createdAt: "2026-10-01T09:00:00Z",
-		product: "example",
-		accountRef: "acct_42",
-		data: {
-			"account": {
-				"version": 2,
-				"planCode": "team",
-				"accessState": "active",
-				"entitlements": {
-					"max_users": null,
-					"max_devices": 250,
-					"max_networks_per_account": 3,
-					"max_approved_routes": 10,
-					"max_exit_nodes": 1
-				},
-				"subscription": {
-					"id": "0192f1a0-0000-7000-8000-000000000001",
-					"status": "active",
-					"planCode": "team",
-					"interval": "month",
-					"amountMinor": 125e3,
-					"currency": "TRY",
-					"currentPeriodEnd": "2026-11-01T09:00:00Z",
-					"cancelAt": null
-				}
-			},
-			"detail": {
-				"invoiceId": "0192f1a0-0000-7000-8000-000000000003",
-				"totalMinor": 125e3,
-				"currency": "TRY"
-			}
-		}
-	},
-	"invoice.issued": {
-		id: "evt_0192f1a0-0000-7000-8000-00000000001e",
-		type: "invoice.issued",
-		apiVersion: "2026-10-01",
-		createdAt: "2026-10-01T09:00:00Z",
-		product: "example",
-		accountRef: "acct_42",
-		data: {
-			"account": {
-				"version": 2,
-				"planCode": "team",
-				"accessState": "active",
-				"entitlements": {
-					"max_users": null,
-					"max_devices": 250,
-					"max_networks_per_account": 3,
-					"max_approved_routes": 10,
-					"max_exit_nodes": 1
-				},
-				"subscription": {
-					"id": "0192f1a0-0000-7000-8000-000000000001",
-					"status": "active",
-					"planCode": "team",
-					"interval": "month",
-					"amountMinor": 125e3,
-					"currency": "TRY",
-					"currentPeriodEnd": "2026-11-01T09:00:00Z",
-					"cancelAt": null
-				}
-			},
-			"detail": {
-				"invoiceId": "0192f1a0-0000-7000-8000-000000000003",
-				"number": "NXS2026000000123",
-				"totalMinor": 125e3,
-				"currency": "TRY"
-			}
-		}
-	},
-	"invoice.voided": {
-		id: "evt_0192f1a0-0000-7000-8000-000000000f4f",
-		type: "invoice.voided",
-		apiVersion: "2026-10-01",
-		createdAt: "2026-10-01T09:00:00Z",
-		product: "example",
-		accountRef: "acct_42",
-		data: {
-			"account": {
-				"ref": "acct_42",
-				"displayName": "Örnek A.Ş.",
-				"version": 4,
-				"updatedAt": "2026-09-20T09:00:00Z",
-				"planCode": "enterprise",
-				"accessState": "active",
-				"entitlements": {
-					"max_users": null,
-					"max_devices": null,
-					"max_networks_per_account": 20,
-					"max_approved_routes": 100,
-					"max_exit_nodes": 10
-				},
-				"catalogVersion": "3f2a9c0e7b41d8a65c09e1f4b7d2a8c3",
-				"subscription": null,
-				"openCheckout": null,
-				"profile": {
-					"present": true,
-					"kind": "company"
-				}
-			},
-			"detail": {
-				"invoiceId": "0192f1a0-0000-7000-8000-000000000004",
-				"number": "NXS2026000000124",
-				"totalMinor": 6e6,
-				"currency": "TRY",
-				"reason": "sözleşme yeniden düzenlendi"
-			}
-		}
-	},
-	"account.state_changed": {
-		id: "evt_0192f1a0-0000-7000-8000-000000000020",
-		type: "account.state_changed",
-		apiVersion: "2026-10-01",
-		createdAt: "2026-10-01T09:00:00Z",
-		product: "example",
-		accountRef: "acct_42",
-		data: {
-			"account": {
-				"ref": "acct_42",
-				"displayName": "Örnek A.Ş.",
-				"version": 2,
-				"updatedAt": "2026-10-01T09:00:00Z",
-				"planCode": "team",
-				"accessState": "active",
-				"entitlements": {
-					"max_users": null,
-					"max_devices": 250,
-					"max_networks_per_account": 3,
-					"max_approved_routes": 10,
-					"max_exit_nodes": 1
-				},
-				"catalogVersion": "3f2a9c0e7b41d8a65c09e1f4b7d2a8c3",
-				"subscription": {
-					"id": "0192f1a0-0000-7000-8000-000000000001",
-					"status": "past_due",
-					"planCode": "team",
-					"interval": "month",
-					"amountMinor": 125e3,
-					"currency": "TRY",
-					"currentPeriodEnd": "2026-10-01T09:00:00Z",
-					"cancelAt": null,
-					"cancelAtPeriodEnd": false,
-					"pastDueSince": "2026-10-01T09:00:00Z",
-					"currentPeriodStart": "2026-09-01T09:00:00Z",
-					"dunning": {
-						"step": 0,
-						"nextActionAt": "2026-10-02T09:00:00Z"
-					},
-					"scheduledChange": null
-				},
-				"openCheckout": null,
-				"profile": {
-					"present": true,
-					"kind": "company"
-				}
-			},
-			"detail": {
-				"cause": "subscription.payment_failed",
-				"causeEventId": "evt_0192f1a0-0000-7000-8000-000000000016"
-			}
-		}
-	},
-	"account.deleted": {
-		id: "evt_0192f1a0-0000-7000-8000-000000000030",
-		type: "account.deleted",
-		apiVersion: "2026-10-01",
-		createdAt: "2026-10-05T09:00:00Z",
-		product: "example",
-		accountRef: "acct_42",
-		data: {
-			"account": {
-				"ref": "acct_42",
-				"displayName": "",
-				"version": 9,
-				"updatedAt": "2026-10-05T09:00:00Z",
-				"planCode": "free",
-				"accessState": "active",
-				"entitlements": {
-					"max_users": 3,
-					"max_devices": 15,
-					"max_networks_per_account": 1,
-					"max_approved_routes": 0,
-					"max_exit_nodes": 0
-				},
-				"catalogVersion": "3f2a9c0e7b41d8a65c09e1f4b7d2a8c3",
-				"subscription": null,
-				"openCheckout": null,
-				"profile": {
-					"present": false,
-					"kind": null
-				}
-			},
-			"detail": {
-				"deletedAt": "2026-10-05T09:00:00Z",
-				"actorRef": "user:7"
-			}
-		}
-	}
-};
-/** Tipin fixture'ının derin kopyası. */
-function eventFixture(type) {
-	if (!EVENT_TYPES.includes(type)) throw new Error(`bilinmeyen event tipi: ${String(type)}`);
-	return structuredClone(FIXTURES[type]);
-}
-const DEFAULT_WEBHOOK_URL = "http://product.test/steward/events";
-const secretsOf = (secret) => typeof secret === "string" ? [secret] : [...secret];
-/** Olayı steward'ın teslimat biçimiyle imzalar. */
-function signBody(event, secrets, timestamp = Math.floor(Date.now() / 1e3)) {
-	const body = JSON.stringify(event);
-	const headers = {
-		...signWebhook(secrets, event.id, body, timestamp),
-		"content-type": "application/json",
-		"user-agent": "steward/1"
-	};
-	return {
-		body,
-		headers,
-		request: (url = DEFAULT_WEBHOOK_URL) => new Request(url, {
-			method: "POST",
-			headers,
-			body
-		})
-	};
-}
-function signedEvent(type, overrides = {}, options = {}) {
-	const secret = options.secret ?? globalThis.process?.env?.STEWARD_WEBHOOK_SECRET;
-	const secrets = secret === void 0 ? [] : secretsOf(secret).map((s) => s.trim()).filter(Boolean);
-	if (secrets.length === 0) throw new Error("signedEvent: imza sırrı yok (options.secret ya da STEWARD_WEBHOOK_SECRET)");
-	const base = eventFixture(type);
-	const { data, ...envelope } = overrides;
-	const account = {
-		...base.data.account,
-		...data?.account
-	};
-	if (overrides.accountRef !== void 0 && "ref" in base.data.account && data?.account?.ref === void 0) account.ref = overrides.accountRef;
-	const event = {
-		...base,
-		id: `evt_${globalThis.crypto.randomUUID()}`,
-		...envelope,
-		data: {
-			account,
-			detail: {
-				...base.data.detail,
-				...data?.detail
-			}
-		}
-	};
-	return {
-		event,
-		...signBody(event, secrets, options.timestamp)
-	};
-}
-//#endregion
-//#region src/testing/fake-steward.ts
-const RETRY_SCHEDULE_SECONDS = [
-	30,
-	120,
-	600,
-	1800,
-	3600,
-	10800,
-	21600
-];
-/** Yönetim ucunun (`admin.endpoints.create`) yeni endpoint'e varsayılan filtresi. */
-const DEFAULT_EVENT_TYPES = ["account.state_changed"];
-function base64url(bytes) {
-	return btoa(String.fromCharCode(...bytes)).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "");
-}
-/** Servisin anahtar biçimi: `stw_<12 hex>_<43 base64url>`. */
-function generateApiKey() {
-	const bytes = globalThis.crypto.getRandomValues(/* @__PURE__ */ new Uint8Array(38));
-	return `stw_${Array.from(bytes.subarray(0, 6), (b) => b.toString(16).padStart(2, "0")).join("")}_${base64url(bytes.subarray(6))}`;
-}
-const networkError = (reason) => new TypeError("fetch failed", { cause: /* @__PURE__ */ new Error(`sahte steward: ${reason}`) });
-/** `settings` + kısayol seçenekleri (`returnOrigins`, `checkoutTtlMinutes`) → sahtenin ayarları. */
-function initialSettings(options) {
-	const patch = { ...options.settings };
-	const alias = (option, field) => {
-		if (options[option] === void 0) return;
-		if (patch[field] !== void 0) throw new Error(`createFakeSteward: ${option} ve settings.${field} birlikte verilemez`);
-		patch[field] = options[option];
-	};
-	alias("returnOrigins", "extraReturnOrigins");
-	alias("checkoutTtlMinutes", "checkoutTtlMinutes");
-	const parsed = ProductSettingsPatchSchema.safeParse(patch);
-	if (!parsed.success) throw new Error(`createFakeSteward: ayarlar geçersiz: ${parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ")}`);
-	return applySettingsPatch(ProductSettingsSchema.parse({ provider: "fake" }), parsed.data);
-}
-function createFakeSteward(options = {}) {
-	const base = new URL(options.baseUrl ?? "http://steward.test");
-	const basePath = base.pathname.replace(/\/$/, "");
-	const baseUrl = `${base.origin}${basePath}`;
-	const apiKey = options.apiKey ?? generateApiKey();
-	const adminApiKey = options.adminApiKey ?? generateApiKey();
-	if (apiKey === adminApiKey) throw new Error("createFakeSteward: apiKey ve adminApiKey farklı olmalı");
-	const webhook = options.webhook;
-	const w = createWorld({
-		productCode: options.productCode ?? "example",
-		settings: initialSettings(options),
-		permissiveReturnOrigins: options.returnOrigins === void 0 && options.settings?.appUrl == null && options.settings?.extraReturnOrigins === void 0,
-		dunningPolicy: options.dunningPolicy ?? DEFAULT_DUNNING_POLICY,
-		endpointTypes: webhook ? webhook.eventTypes === "legacy" ? LEGACY_EVENT_TYPES : webhook.eventTypes ?? DEFAULT_EVENT_TYPES : null,
-		now: options.now ?? (() => /* @__PURE__ */ new Date())
-	});
-	if (options.catalog !== void 0) {
-		const input = "toSyncInput" in options.catalog ? options.catalog.toSyncInput() : options.catalog;
-		const parsed = CatalogSyncInputSchema.safeParse(input);
-		if (!parsed.success) throw new Error(`createFakeSteward: katalog geçersiz: ${parsed.error.issues.map((i) => `${i.path.join(".")}: ${i.message}`).join("; ")}`);
-		const synced = syncCatalog(w, parsed.data);
-		if (!synced.ok) throw new Error(`createFakeSteward: katalog reddedildi (${synced.code}): ${synced.message ?? ""}`);
-	}
-	const handle = createHttpHandler(w, {
-		baseUrl,
-		keys: /* @__PURE__ */ new Map([[apiKey, {
-			keyName: "fake",
-			scope: "product"
-		}], [adminApiKey, {
-			keyName: "fake-admin",
-			scope: "admin"
-		}]]),
-		requestId: () => `req_${globalThis.crypto.randomUUID()}`,
-		logger: options.logger ?? console
-	});
-	const requests = [];
-	let outage = null;
-	const fakeFetch = (async (input, init) => {
-		const req = new Request(input, init);
-		if (req.signal.aborted) throw req.signal.reason;
-		const url = new URL(req.url);
-		const body = req.method === "GET" || req.method === "HEAD" ? null : await req.text();
-		const inBase = url.origin === base.origin && (url.pathname === basePath || url.pathname.startsWith(`${basePath}/`));
-		const path = `${inBase ? url.pathname.slice(basePath.length) : url.pathname}${url.search}`;
-		const record = {
-			method: req.method,
-			url: req.url,
-			path,
-			headers: Object.fromEntries(req.headers),
-			body,
-			status: 0
-		};
-		requests.push(record);
-		if (!inBase) throw networkError(`bilinmeyen adres ${url.origin}`);
-		if (outage === "network") throw networkError("kesinti");
-		let res;
-		const publicPath = url.pathname.slice(basePath.length);
-		if (outage === null && (publicPath === "/public" || publicPath.startsWith("/public/"))) {
-			const publicReq = {
-				method: req.method,
-				url: new URL(path, base.origin),
-				body: body ?? ""
-			};
-			res = publicPath.startsWith("/public/v1/portal/") ? handlePortal(w, publicReq, { baseUrl }) : handlePublic(w, publicReq);
-		} else if (outage === "503") {
-			const requestId = `req_${globalThis.crypto.randomUUID()}`;
-			const { category, retryable } = ERROR_CODES.database_unavailable;
-			res = Response.json({
-				error: "database_unavailable",
-				category,
-				retryable,
-				requestId
-			}, {
-				status: 503,
-				headers: { [HEADER_REQUEST_ID]: requestId }
-			});
-		} else res = handle({
-			method: req.method,
-			url: new URL(path, base.origin),
-			headers: req.headers,
-			body: body ?? ""
-		});
-		record.status = res.status;
-		return res;
-	});
-	const steward = createSteward({
-		actorRef: "system:test",
-		retries: { sleep: () => Promise.resolve() },
-		...options.steward,
-		env: {},
-		baseUrl,
-		apiKey,
-		adminBaseUrl: baseUrl,
-		adminApiKey,
-		fetch: fakeFetch
-	});
-	let handler = webhook?.handler ?? null;
-	function requireWebhook(name) {
-		if (!webhook) throw new Error(`simulate.${name}: createFakeSteward({webhook}) verilmedi`);
-		if (!handler) throw new Error(`simulate.${name}: webhook alıcısı bağlanmadı (webhook.handler ya da fake.connect(handler))`);
-		return {
-			options: webhook,
-			handler
-		};
-	}
-	async function send(hook, event) {
-		const signed = signBody(event, secretsOf(hook.options.secret));
-		const response = await hook.handler(signed.request(hook.options.url ?? "http://product.test/steward/events"));
-		return {
-			event,
-			body: signed.body,
-			headers: signed.headers,
-			response
-		};
-	}
-	async function flushOne(hook, row) {
-		const d = row.delivery;
-		d.attempts += 1;
-		const retryAt = () => w.now() + (RETRY_SCHEDULE_SECONDS[d.attempts - 1] ?? 43200) * 1e3;
-		let delivery;
-		try {
-			delivery = await send(hook, row.payload);
-		} catch (error) {
-			Object.assign(d, {
-				lastHttpStatus: null,
-				lastError: "network_error",
-				nextAttemptAt: retryAt()
-			});
-			throw error;
-		}
-		const status = delivery.response.status;
-		if (status >= 200 && status < 300) Object.assign(d, {
-			status: "delivered",
-			deliveredAt: w.now(),
-			lastHttpStatus: status,
-			lastError: null
-		});
-		else Object.assign(d, {
-			lastHttpStatus: status,
-			lastError: `http_${status}`,
-			nextAttemptAt: retryAt()
-		});
-		return delivery;
-	}
-	function portalSession(name, id) {
-		const session = livePortalSession(w, id);
-		if (!session) throw new Error(`simulate.${name}: portal oturumu yok ya da süresi dolmuş ${id}`);
-		return session;
-	}
-	/** Güncel durumla (fixture detayı hesaba uyarlanmış) sözleşmeye uyan event. */
-	function eventFor(type, ref, state, cause, createdAt) {
-		let detail;
-		if (type === "account.state_changed") detail = {
-			cause: cause ?? "account.refreshed",
-			causeEventId: null
-		};
-		else {
-			detail = { ...eventFixture(type).data.detail };
-			const sub = state.subscription;
-			const known = {
-				subscriptionId: sub?.id,
-				planCode: sub?.planCode ?? state.planCode,
-				interval: sub?.interval,
-				amountMinor: sub?.amountMinor,
-				currency: sub?.currency,
-				checkoutSessionId: state.openCheckout?.id
-			};
-			const shape = EVENT_DETAIL_SCHEMAS[type].shape;
-			for (const [key, value] of Object.entries(known)) if (key in shape && value !== void 0) detail[key] = value;
-		}
-		return envelope(w, ref, state, {
-			type,
-			detail
-		}, `evt_${w.id()}`, createdAt);
-	}
-	return {
-		baseUrl,
-		apiKey,
-		adminApiKey,
-		fetch: fakeFetch,
-		steward,
-		requests,
-		simulate: {
-			async checkoutCompleted(sessionId) {
-				completeCheckout(w, sessionRow(w, sessionId));
-				return checkoutSessionResponse(w, sessionId);
-			},
-			async checkoutFailed(sessionId, opts = {}) {
-				failCheckout(w, sessionRow(w, sessionId), opts.reason ?? "fake:card_declined");
-				return checkoutSessionResponse(w, sessionId);
-			},
-			async completeHostedCheckout(url, opts = {}) {
-				const outcome = opts.outcome ?? "succeeded";
-				const page = await fakeFetch(url);
-				await page.text();
-				if (page.status !== 200) throw new Error(`simulate.completeHostedCheckout: sayfa ${page.status} döndü (oturum açık değil ya da adres yanlış)`);
-				const pageUrl = new URL(url);
-				const id = decodeURIComponent(pageUrl.pathname.split("/").at(-1) ?? "");
-				const res = await fakeFetch(new URL(`${encodeURIComponent(id)}/pay`, pageUrl), {
-					method: "POST",
-					headers: { "content-type": "application/x-www-form-urlencoded" },
-					body: new URLSearchParams({
-						k: pageUrl.searchParams.get("k") ?? "",
-						outcome
-					})
-				});
-				const location = res.headers.get("location");
-				if (res.status !== 303 || location === null) throw new Error(`simulate.completeHostedCheckout: 303 bekleniyordu, ${res.status} geldi`);
-				return {
-					id,
-					redirectUrl: location,
-					session: checkoutSessionResponse(w, id)
-				};
-			},
-			async checkoutCanceled(sessionId) {
-				const row = sessionRow(w, sessionId);
-				cancelCheckout(w, row);
-				return checkoutSessionResponse(w, sessionId);
-			},
-			async renewal(ref, opts = {}) {
-				const sub = liveSubscription(w, ref);
-				if (!sub) throw new Error(`simulate.renewal: ${ref} için canlı abonelik yok`);
-				if (sub.cancelAtPeriodEnd) throw new Error(`simulate.renewal: ${ref} aboneliği dönem sonunda bitecek, yenilenmez (simulate.advance)`);
-				const now = w.now();
-				advanceTo(w, opts.advanceDays !== void 0 ? now + opts.advanceDays * DAY_MS : Math.max(now, sub.currentPeriodEnd ?? now));
-				const current = liveSubscription(w, ref);
-				if (!current) throw new Error(`simulate.renewal: ${ref} aboneliği saat ilerlerken sona erdi`);
-				applyRenewalPayment(w, current, opts.fail ? "failed" : "succeeded");
-				return storedState(w, ref);
-			},
-			async portalCancel(portalSessionId) {
-				const session = portalSession("portalCancel", portalSessionId);
-				return {
-					result: portalCancel(w, session),
-					account: storedState(w, session.accountRef)
-				};
-			},
-			async portalRetryPayment(portalSessionId) {
-				const session = portalSession("portalRetryPayment", portalSessionId);
-				return {
-					result: portalRetryPayment(w, session),
-					account: storedState(w, session.accountRef)
-				};
-			},
-			async advance(duration = {}) {
-				const ms = (duration.days ?? 0) * DAY_MS + (duration.hours ?? 0) * 36e5 + (duration.minutes ?? 0) * 6e4;
-				if (!(ms >= 0)) throw new Error("simulate.advance: süre negatif olamaz");
-				advanceTo(w, w.now() + ms);
-			},
-			outage(on, opts = {}) {
-				outage = on ? opts.mode ?? "network" : null;
-			},
-			async deliver(type, opts) {
-				const hook = requireWebhook("deliver");
-				const row = w.accounts.get(opts.ref);
-				if (!row?.state) throw new Error(`simulate.deliver: hesap yok ${opts.ref}`);
-				const current = eventFor(type, opts.ref, row.state, opts.cause, w.now());
-				const sequence = [current];
-				if (opts.duplicate) sequence.push(current);
-				if (opts.outOfOrder) {
-					const previous = row.history.at(-2);
-					if (!previous) throw new Error(`simulate.deliver: ${opts.ref} için önceki version yok (outOfOrder)`);
-					sequence.push(eventFor(type, opts.ref, previous, opts.cause, Date.parse(previous.updatedAt)));
-				}
-				const out = [];
-				for (const event of sequence) out.push(await send(hook, event));
-				return out;
-			},
-			async flush() {
-				const hook = requireWebhook("flush");
-				const blocked = /* @__PURE__ */ new Set();
-				const out = [];
-				for (let i = 0; i < w.events.length; i++) {
-					const row = w.events[i];
-					if (row.delivery?.status !== "pending" || blocked.has(row.accountRef)) continue;
-					const delivery = await flushOne(hook, row);
-					if (row.delivery.status === "pending") blocked.add(row.accountRef);
-					out.push(delivery);
-				}
-				return out;
-			},
-			redeliver(eventId) {
-				if (!redeliverEvent(w, eventId)) throw new Error(`simulate.redeliver: unknown event ${eventId}`);
-			}
-		},
-		connect(next) {
-			if (!webhook) throw new Error("fake.connect: createFakeSteward({webhook: {secret}}) verilmedi (sır ve filtre oluşturmada)");
-			if (typeof next !== "function") throw new Error("fake.connect: alıcı fonksiyon olmalı");
-			handler = next;
-		},
-		events: (ref) => w.events.filter((e) => ref === void 0 || e.accountRef === ref).map((e) => e.payload),
-		emails: (ref) => w.emails.filter((e) => ref === void 0 || e.accountRef === ref).map((e) => ({
-			eventId: e.eventId,
-			template: e.template,
-			accountRef: e.accountRef,
-			to: [...e.to],
-			locale: e.locale,
-			sentAt: new Date(e.sentAt).toISOString()
-		})),
-		now: () => new Date(w.now())
-	};
-}
-//#endregion
-export { DEFAULT_DUNNING_POLICY, createFakeSteward, signedEvent };