@voltro/plugin-billing 0.32.0 → 0.34.0

package/dist/index.js

@@ -1,114 +1,329 @@
-import { BillingError as e, BillingService as t, DEFAULT_PLAN as n, EntitlementExceeded as r } from "./types.js";
-import { billingRpcClientImports as i, changePlanDescriptor as a, changeSeatsDescriptor as o, invoicesDescriptor as s, portalUrlDescriptor as c, previewChangeDescriptor as l, reportUsageDescriptor as u, startCheckoutDescriptor as ee, subscriptionDescriptor as d } from "./rpc.js";
-import { Effect as f, Layer as p, Schedule as m, Schema as h } from "effect";
+import { BillingError as e, BillingService as t, DEFAULT_PLAN as n, EntitlementExceeded as r, SubscriptionLocked as i } from "./types.js";
+import { billingRpcClientImports as a, changePlanDescriptor as o, changeSeatsDescriptor as s, entitlementStatusDescriptor as c, invoicesDescriptor as l, portalUrlDescriptor as u, previewChangeDescriptor as d, reportUsageDescriptor as f, startCheckoutDescriptor as ee, subscriptionDescriptor as te } from "./rpc.js";
+import { Effect as p, Layer as m, Schedule as h, Schema as ne } from "effect";
 import { pluginEnv as g } from "@voltro/env";
-import { composeRpcInterceptors as te, definePlugin as ne } from "@voltro/protocol";
-import { and as _, eq as v, gte as re, id as y, integer as b, registerRetention as x, retentionTtlMsFromEnv as ie, table as S, text as C, timestamp as w } from "@voltro/database";
-import T from "stripe";
-import { defineIncomingWebhook as E, mountIncomingWebhook as D } from "@voltro/plugin-webhooks";
-import { stripeProvider as O } from "@voltro/plugin-webhooks/providers";
-import { createLogger as k } from "@voltro/logger";
+import { composeRpcInterceptors as re, definePlugin as ie, pluginInstanceName as ae } from "@voltro/protocol";
+import { and as _, eq as v, gte as y, id as b, integer as x, registerRetention as S, retentionTtlMsFromEnv as C, table as w, text as T, timestamp as E } from "@voltro/database";
+import { createLogger as D } from "@voltro/logger";
+import O from "stripe";
+import { defineIncomingWebhook as oe, mountIncomingWebhook as k } from "@voltro/plugin-webhooks";
+import { stripeProvider as A } from "@voltro/plugin-webhooks/providers";
 //#region src/entitlement.ts
-var A = (e, t, n, r) => ({
+var j = (e, t, n, r) => ({
 	allowed: !Number.isFinite(t) || r <= 0 || n + r <= t,
 	entitlement: e,
 	limit: t,
 	used: n,
 	cost: r
-}), j = (e) => e.tenantId, M = (e, n, i) => f.gen(function* () {
-	let a = j(e.request.subject);
-	if (a === null) return i <= 0 ? void 0 : yield* f.fail(new r({
+}), M = (e) => e.tenantId, se = (e, n, i) => p.gen(function* () {
+	let a = M(e.request.subject);
+	if (a === null) return i <= 0 ? void 0 : yield* p.fail(new r({
 		entitlement: n,
 		limit: 0,
 		used: 0,
 		cost: i
 	}));
 	yield* (yield* t).consumeEntitlement(a, n, i);
-}), N = (e, t) => (n, i) => {
+}), N = (e) => p.gen(function* () {
+	let n = M(e.request.subject);
+	if (n === null) return;
+	let r = yield* (yield* t).entitlementStatus(n);
+	if (!r.entitled) return yield* p.fail(new i({
+		tenantId: n,
+		status: r.status,
+		lockedSince: (r.lockedSince ?? /* @__PURE__ */ new Date()).toISOString(),
+		lockout: r.lockout
+	}));
+}), ce = (e, t) => (n, i) => {
 	let a = e[i.tag];
 	if (a === void 0) return n;
 	let o = a.cost ?? 1, s = i.subject.tenantId;
-	return s === null ? o <= 0 ? n : f.fail(new r({
+	return s === null ? o <= 0 ? n : p.fail(new r({
 		entitlement: a.entitlement,
 		limit: 0,
 		used: 0,
 		cost: o
-	})) : f.flatMap(t.consumeEntitlement(s, a.entitlement, o), () => n);
-}, P = "_voltro_billing_customers", F = "_voltro_billing_subscriptions", I = "_voltro_billing_invoices", L = "_voltro_billing_usage", ae = S(P, {
-	id: y({ prefix: "bcust" }),
-	tenantId: C(),
-	provider: C(),
-	providerCustomerId: C(),
-	createdAt: w(),
-	updatedAt: w()
-}).index("byBillingCustomerTenant", ["tenantId"]).index("byBillingProviderCustomer", ["providerCustomerId"]), oe = S(F, {
-	id: y({ prefix: "bsub" }),
-	tenantId: C(),
-	provider: C(),
-	providerSubscriptionId: C(),
-	plan: C(),
-	status: C(),
-	quantity: b().default(1),
-	currentPeriodStart: w().nullable(),
-	currentPeriodEnd: w().nullable(),
-	cancelAt: w().nullable(),
-	createdAt: w(),
-	updatedAt: w()
-}).index("byBillingSubscriptionTenant", ["tenantId"]).index("byBillingProviderSubscription", ["providerSubscriptionId"]), se = S(I, {
-	id: y({ prefix: "binv" }),
-	tenantId: C(),
-	provider: C(),
-	providerInvoiceId: C(),
-	amountMinor: b(),
-	currency: C(),
-	status: C(),
-	createdAt: w()
-}).index("byBillingInvoiceTenant", ["tenantId"]).index("byBillingProviderInvoice", ["providerInvoiceId"]), ce = S(L, {
-	id: y({ prefix: "buse" }),
-	tenantId: C().maxLength(191),
-	entitlementKey: C().maxLength(191),
-	period: C().maxLength(16),
-	used: b().default(0),
-	reportedToProvider: b().default(0),
-	updatedAt: w()
+	})) : p.flatMap(t.consumeEntitlement(s, a.entitlement, o), () => n);
+}, P = "_voltro_billing_customers", F = "_voltro_billing_subscriptions", I = "_voltro_billing_invoices", L = "_voltro_billing_usage", le = w(P, {
+	id: b({ prefix: "bcust" }),
+	tenantId: T(),
+	provider: T(),
+	providerCustomerId: T(),
+	createdAt: E(),
+	updatedAt: E()
+}).index("byBillingCustomerTenant", ["tenantId"]).index("byBillingProviderCustomer", ["providerCustomerId"]), ue = w(F, {
+	id: b({ prefix: "bsub" }),
+	tenantId: T(),
+	provider: T(),
+	providerSubscriptionId: T(),
+	plan: T(),
+	status: T(),
+	quantity: x().default(1),
+	currentPeriodStart: E().nullable(),
+	currentPeriodEnd: E().nullable(),
+	cancelAt: E().nullable(),
+	pastDueSince: E().nullable(),
+	statusEventAt: E().nullable(),
+	createdAt: E(),
+	updatedAt: E()
+}).index("byBillingSubscriptionTenant", ["tenantId"]).index("byBillingProviderSubscription", ["providerSubscriptionId"]).index("byBillingSubscriptionStatus", ["status"]), de = w(I, {
+	id: b({ prefix: "binv" }),
+	tenantId: T(),
+	provider: T(),
+	providerInvoiceId: T(),
+	amountMinor: x(),
+	currency: T(),
+	status: T(),
+	statusEventAt: E().nullable(),
+	createdAt: E()
+}).index("byBillingInvoiceTenant", ["tenantId"]).index("byBillingProviderInvoice", ["providerInvoiceId"]), fe = w(L, {
+	id: b({ prefix: "buse" }),
+	tenantId: T().maxLength(191),
+	entitlementKey: T().maxLength(191),
+	period: T().maxLength(16),
+	used: x().default(0),
+	reportedToProvider: x().default(0),
+	updatedAt: E()
 }).unique("byBillingUsageWindow", [
 	"tenantId",
 	"entitlementKey",
 	"period"
-]), le = () => [
-	ae,
-	oe,
-	se,
-	ce
-], R = (e) => `${e}_${Math.random().toString(36).slice(2)}${Date.now().toString(36)}`, z = (t, n) => f.tryPromise({
+]), pe = () => [
+	le,
+	ue,
+	de,
+	fe
+], R = "_voltro_billing_dunning_notices", me = w(R, {
+	id: b({ prefix: "bdun" }),
+	tenantId: T().maxLength(191),
+	episode: T().maxLength(32),
+	stepId: T().maxLength(64),
+	sentAt: E()
+}).unique("byBillingDunningNotice", [
+	"tenantId",
+	"episode",
+	"stepId"
+]), he = "locked", ge = [
+	{
+		id: "payment-failed",
+		afterHours: 0
+	},
+	{
+		id: "reminder",
+		afterHours: 72
+	},
+	{
+		id: "final-warning",
+		afterHours: 144
+	}
+], _e = 168, ve = "hard", ye = (e, t, n) => {
+	if (e === void 0 || e.trim() === "") return t;
+	let r = Number(e);
+	if (!Number.isFinite(r) || r < 0) throw Error(`billingPlugin: ${n} must be a non-negative number, got '${e}'`);
+	return r;
+}, be = (e, t) => {
+	let n = t.VOLTRO_BILLING_DUNNING;
+	if (n !== void 0 && n !== "" && n !== "on" && n !== "off") throw Error(`billingPlugin: VOLTRO_BILLING_DUNNING must be 'on' or 'off', got '${n}'`);
+	let r = n === "off" ? !1 : n === "on" ? !0 : e?.enabled ?? !0, i = t.VOLTRO_BILLING_LOCKOUT;
+	if (i !== void 0 && i !== "" && i !== "hard" && i !== "soft") throw Error(`billingPlugin: VOLTRO_BILLING_LOCKOUT must be 'hard' or 'soft', got '${i}'`);
+	let a = i === "hard" || i === "soft" ? i : e?.lockout ?? "hard", o = ye(t.VOLTRO_BILLING_GRACE_HOURS, e?.graceHours ?? 168, "VOLTRO_BILLING_GRACE_HOURS"), s = e?.steps ?? ge, c = t.VOLTRO_BILLING_DUNNING_STEP_HOURS, l = s;
+	if (c !== void 0 && c.trim() !== "") {
+		let e = c.split(",").map((e) => e.trim());
+		if (e.length !== s.length) throw Error(`billingPlugin: VOLTRO_BILLING_DUNNING_STEP_HOURS lists ${e.length} value(s) but the sequence declares ${s.length} step(s) (${s.map((e) => e.id).join(", ")})`);
+		l = s.map((t, n) => ({
+			id: t.id,
+			afterHours: ye(e[n], t.afterHours, "VOLTRO_BILLING_DUNNING_STEP_HOURS")
+		}));
+	}
+	let u = /* @__PURE__ */ new Set();
+	for (let e of l) {
+		if (e.id === "locked") throw Error(`billingPlugin: '${he}' is the reserved lockout step id`);
+		if (u.has(e.id)) throw Error(`billingPlugin: duplicate dunning step id '${e.id}'`);
+		u.add(e.id);
+	}
+	return {
+		enabled: r,
+		graceHours: o,
+		lockout: a,
+		steps: [...l].sort((e, t) => e.afterHours - t.afterHours),
+		...e?.notify === void 0 ? {} : { notify: e.notify },
+		...e?.resolveRecipient === void 0 ? {} : { resolveRecipient: e.resolveRecipient },
+		...e?.portalReturnUrl === void 0 ? {} : { portalReturnUrl: e.portalReturnUrl }
+	};
+}, xe = 36e5, Se = (e) => String(e.getTime()), Ce = (e, t) => new Date(e.getTime() + t * xe), we = (e, t, n) => {
+	let r = (n.getTime() - t.getTime()) / xe;
+	return e.filter((e) => r >= e.afterHours);
+}, z = (e, t, r, i) => {
+	let a = {
+		tenantId: e?.tenantId ?? i ?? "",
+		lockout: t.lockout
+	};
+	if (e === null) return {
+		...a,
+		plan: n,
+		billedPlan: n,
+		status: "none",
+		entitled: !0,
+		inGrace: !1,
+		graceEndsAt: null,
+		lockedSince: null
+	};
+	if (e.status === "active" || e.status === "trialing") return {
+		...a,
+		plan: e.plan,
+		billedPlan: e.plan,
+		status: e.status,
+		entitled: !0,
+		inGrace: !1,
+		graceEndsAt: null,
+		lockedSince: null
+	};
+	if (e.status === "pastDue") {
+		if (!t.enabled) return {
+			...a,
+			plan: n,
+			billedPlan: e.plan,
+			status: e.status,
+			entitled: !0,
+			inGrace: !1,
+			graceEndsAt: null,
+			lockedSince: null
+		};
+		if (e.pastDueSince === null) return {
+			...a,
+			plan: e.plan,
+			billedPlan: e.plan,
+			status: e.status,
+			entitled: !0,
+			inGrace: !0,
+			graceEndsAt: null,
+			lockedSince: null
+		};
+		let i = Ce(e.pastDueSince, t.graceHours), o = r.getTime() >= i.getTime();
+		return {
+			...a,
+			plan: o && t.lockout === "hard" ? n : e.plan,
+			billedPlan: e.plan,
+			status: e.status,
+			entitled: !o,
+			inGrace: !o,
+			graceEndsAt: i,
+			lockedSince: o ? i : null
+		};
+	}
+	return {
+		...a,
+		plan: n,
+		billedPlan: e.plan,
+		status: e.status,
+		entitled: !0,
+		inGrace: !1,
+		graceEndsAt: null,
+		lockedSince: null
+	};
+}, Te = (e) => e.toISOString().slice(0, 10), Ee = (e) => {
+	let t = e.portalUrl, n = t === null ? "<p>Please update your payment method in the billing settings.</p>" : `<p><a href="${t}">Update your payment method</a></p>`, r = t === null ? "Please update your payment method in the billing settings." : `Update your payment method: ${t}`;
+	if (e.locked) return {
+		subject: "Your subscription has been suspended",
+		html: `<p>We were unable to collect payment, and your subscription is now suspended.</p>${n}`,
+		text: `We were unable to collect payment, and your subscription is now suspended.\n\n${r}`
+	};
+	let i = Te(e.graceEndsAt), a = e.stepId === "payment-failed" ? "Your last payment could not be collected." : "Your payment is still outstanding.";
+	return {
+		subject: "Action needed: your payment could not be collected",
+		html: `<p>${a} Your subscription stays active until ${i}.</p>${n}`,
+		text: `${a} Your subscription stays active until ${i}.\n\n${r}`
+	};
+}, De = (e) => (t) => t.to === null ? p.void : e.send({
+	to: t.to,
+	subject: t.subject,
+	html: t.html,
+	text: t.text
+}).pipe(p.asVoid), Oe = (e, t, n) => `${e}\u0000${t}\u0000${n}`, ke = () => {
+	let e = /* @__PURE__ */ new Map();
+	return {
+		claim: (t, n, r, i) => p.sync(() => {
+			let a = Oe(t, n, r);
+			return e.has(a) ? !1 : (e.set(a, {
+				tenantId: t,
+				episode: n,
+				stepId: r,
+				sentAt: i
+			}), !0);
+		}),
+		sentSteps: (t, n) => p.sync(() => [...e.values()].filter((e) => e.tenantId === t && e.episode === n))
+	};
+}, Ae = () => `bdun_${Math.random().toString(36).slice(2)}${Date.now().toString(36)}`, je = (t) => ({
+	claim: (n, r, i, a) => p.tryPromise({
+		try: async () => {
+			let e = Ae(), o = await t.insertIgnore(R, {
+				id: e,
+				tenantId: n,
+				episode: r,
+				stepId: i,
+				sentAt: a
+			}, { conflictColumns: [
+				"tenantId",
+				"episode",
+				"stepId"
+			] });
+			return String(o.id) === e;
+		},
+		catch: (t) => new e({
+			source: "dunningNoticeStore",
+			message: String(t?.message ?? t),
+			transient: !0
+		})
+	}),
+	sentSteps: (n, r) => p.tryPromise({
+		try: async () => (await t.query({
+			table: R,
+			predicate: _(v("tenantId", n), v("episode", r)),
+			order: [],
+			take: void 0,
+			skip: void 0,
+			projection: void 0
+		})).map((e) => ({
+			tenantId: String(e.tenantId),
+			episode: String(e.episode),
+			stepId: String(e.stepId),
+			sentAt: e.sentAt == null ? null : new Date(e.sentAt)
+		})),
+		catch: (t) => new e({
+			source: "dunningNoticeStore",
+			message: String(t?.message ?? t),
+			transient: !0
+		})
+	})
+}), B = (e) => `${e}_${Math.random().toString(36).slice(2)}${Date.now().toString(36)}`, V = (t, n) => p.tryPromise({
 	try: t,
 	catch: (t) => new e({
 		source: n,
 		message: String(t?.message ?? t),
 		transient: !0
 	})
-}), B = (e) => ({
+}), H = (e) => ({
 	table: e.table,
 	predicate: e.predicate,
 	order: e.order ?? [],
 	take: e.take,
 	skip: void 0,
 	projection: void 0
-}), ue = () => {
+}), Me = () => {
 	let e = /* @__PURE__ */ new Map();
 	return {
-		upsert: (t) => f.sync(() => {
+		upsert: (t) => p.sync(() => {
 			e.set(t.tenantId, t);
 		}),
-		getByTenant: (t) => f.sync(() => e.get(t) ?? null)
+		getByTenant: (t) => p.sync(() => e.get(t) ?? null)
 	};
-}, de = (e) => ({
+}, Ne = (e) => ({
 	tenantId: String(e.tenantId),
 	provider: String(e.provider),
 	providerCustomerId: String(e.providerCustomerId)
-}), fe = (e) => ({
-	upsert: (t) => z(async () => {
-		let n = await e.query(B({
+}), Pe = (e) => ({
+	upsert: (t) => V(async () => {
+		let n = await e.query(H({
 			table: P,
 			predicate: v("tenantId", t.tenantId),
 			take: 1
@@ -118,48 +333,53 @@ var A = (e, t, n, r) => ({
 			providerCustomerId: t.providerCustomerId,
 			updatedAt: r
 		}) : await e.insert(P, {
-			id: R("bcust"),
+			id: B("bcust"),
 			...t,
 			createdAt: r,
 			updatedAt: r
 		});
 	}, "customerStore"),
-	getByTenant: (t) => z(async () => {
-		let n = await e.query(B({
+	getByTenant: (t) => V(async () => {
+		let n = await e.query(H({
 			table: P,
 			predicate: v("tenantId", t),
 			take: 1
 		}));
-		return n[0] ? de(n[0]) : null;
+		return n[0] ? Ne(n[0]) : null;
 	}, "customerStore")
-}), pe = () => {
+}), U = (e, t) => e === null ? !1 : t === null || t.getTime() < e.getTime(), Fe = () => {
 	let e = /* @__PURE__ */ new Map();
 	return {
-		upsert: (t) => f.sync(() => {
-			e.set(t.tenantId, t);
+		upsert: (t) => p.sync(() => {
+			let n = e.get(t.tenantId);
+			n && U(n.statusEventAt, t.statusEventAt) || e.set(t.tenantId, {
+				...t,
+				pastDueSince: n ? n.pastDueSince : t.pastDueSince
+			});
 		}),
-		getByTenant: (t) => f.sync(() => e.get(t) ?? null),
-		markCanceled: (t) => f.sync(() => {
+		getByTenant: (t) => p.sync(() => e.get(t) ?? null),
+		listByStatus: (t) => p.sync(() => [...e.values()].filter((e) => e.status === t)),
+		markCanceled: (t) => p.sync(() => {
 			for (let [n, r] of e) r.providerSubscriptionId === t && e.set(n, {
 				...r,
 				status: "canceled"
 			});
 		}),
-		patchByTenant: (t, n) => f.sync(() => {
+		patchByTenant: (t, n) => p.sync(() => {
 			let r = e.get(t);
 			r && e.set(t, {
 				...r,
 				...n
 			});
 		}),
-		setStatus: (t, n) => f.sync(() => {
+		setStatus: (t, n) => p.sync(() => {
 			for (let [r, i] of e) i.providerSubscriptionId === t && e.set(r, {
 				...i,
 				status: n
 			});
 		})
 	};
-}, me = (e) => ({
+}, Ie = (e) => ({
 	tenantId: String(e.tenantId),
 	provider: String(e.provider),
 	providerSubscriptionId: String(e.providerSubscriptionId),
@@ -168,26 +388,32 @@ var A = (e, t, n, r) => ({
 	quantity: e.quantity == null ? 1 : Number(e.quantity),
 	currentPeriodStart: e.currentPeriodStart == null ? null : new Date(e.currentPeriodStart),
 	currentPeriodEnd: e.currentPeriodEnd == null ? null : new Date(e.currentPeriodEnd),
-	cancelAt: e.cancelAt == null ? null : new Date(e.cancelAt)
-}), V = async (e, t) => (await e.query(B({
+	cancelAt: e.cancelAt == null ? null : new Date(e.cancelAt),
+	pastDueSince: e.pastDueSince == null ? null : new Date(e.pastDueSince),
+	statusEventAt: e.statusEventAt == null ? null : new Date(e.statusEventAt)
+}), Le = async (e, t) => (await e.query(H({
 	table: "_voltro_billing_subscriptions",
 	predicate: v("providerSubscriptionId", t),
 	take: 1
-})))[0] ?? null, he = (e) => ({
-	upsert: (t) => z(async () => {
-		let n = await V(e, t.providerSubscriptionId), r = /* @__PURE__ */ new Date();
-		n ? await e.update(F, String(n.id), {
-			tenantId: t.tenantId,
-			provider: t.provider,
-			plan: t.plan,
-			status: t.status,
-			quantity: t.quantity,
-			currentPeriodStart: t.currentPeriodStart,
-			currentPeriodEnd: t.currentPeriodEnd,
-			cancelAt: t.cancelAt,
-			updatedAt: r
-		}) : await e.insert(F, {
-			id: R("bsub"),
+})))[0] ?? null, Re = (e) => ({
+	upsert: (t) => V(async () => {
+		let n = await Le(e, t.providerSubscriptionId), r = /* @__PURE__ */ new Date();
+		if (n) {
+			if (U(n.statusEventAt == null ? null : new Date(n.statusEventAt), t.statusEventAt)) return;
+			await e.update(F, String(n.id), {
+				tenantId: t.tenantId,
+				provider: t.provider,
+				plan: t.plan,
+				status: t.status,
+				quantity: t.quantity,
+				currentPeriodStart: t.currentPeriodStart,
+				currentPeriodEnd: t.currentPeriodEnd,
+				cancelAt: t.cancelAt,
+				statusEventAt: t.statusEventAt,
+				updatedAt: r
+			});
+		} else await e.insert(F, {
+			id: B("bsub"),
 			tenantId: t.tenantId,
 			provider: t.provider,
 			providerSubscriptionId: t.providerSubscriptionId,
@@ -197,12 +423,14 @@ var A = (e, t, n, r) => ({
 			currentPeriodStart: t.currentPeriodStart,
 			currentPeriodEnd: t.currentPeriodEnd,
 			cancelAt: t.cancelAt,
+			pastDueSince: null,
+			statusEventAt: t.statusEventAt,
 			createdAt: r,
 			updatedAt: r
 		});
 	}, "subscriptionStore"),
-	getByTenant: (t) => z(async () => {
-		let n = await e.query(B({
+	getByTenant: (t) => V(async () => {
+		let n = await e.query(H({
 			table: F,
 			predicate: v("tenantId", t),
 			order: [{
@@ -211,17 +439,25 @@ var A = (e, t, n, r) => ({
 			}],
 			take: 1
 		}));
-		return n[0] ? me(n[0]) : null;
+		return n[0] ? Ie(n[0]) : null;
 	}, "subscriptionStore"),
-	markCanceled: (t) => z(async () => {
-		let n = await V(e, t);
+	listByStatus: (t) => V(async () => (await e.query(H({
+		table: F,
+		predicate: v("status", t),
+		order: [{
+			column: "updatedAt",
+			direction: "asc"
+		}]
+	}))).map(Ie), "subscriptionStore"),
+	markCanceled: (t) => V(async () => {
+		let n = await Le(e, t);
 		n && await e.update(F, String(n.id), {
 			status: "canceled",
 			updatedAt: /* @__PURE__ */ new Date()
 		});
 	}, "subscriptionStore"),
-	patchByTenant: (t, n) => z(async () => {
-		let r = (await e.query(B({
+	patchByTenant: (t, n) => V(async () => {
+		let r = (await e.query(H({
 			table: F,
 			predicate: v("tenantId", t),
 			order: [{
@@ -234,62 +470,72 @@ var A = (e, t, n, r) => ({
 			...n.plan === void 0 ? {} : { plan: n.plan },
 			...n.quantity === void 0 ? {} : { quantity: n.quantity },
 			...n.status === void 0 ? {} : { status: n.status },
+			...n.currentPeriodStart === void 0 ? {} : { currentPeriodStart: n.currentPeriodStart },
+			...n.currentPeriodEnd === void 0 ? {} : { currentPeriodEnd: n.currentPeriodEnd },
+			...n.pastDueSince === void 0 ? {} : { pastDueSince: n.pastDueSince },
+			...n.statusEventAt === void 0 ? {} : { statusEventAt: n.statusEventAt },
 			updatedAt: /* @__PURE__ */ new Date()
 		});
 	}, "subscriptionStore"),
-	setStatus: (t, n) => z(async () => {
-		let r = await V(e, t);
+	setStatus: (t, n) => V(async () => {
+		let r = await Le(e, t);
 		r && await e.update(F, String(r.id), {
 			status: n,
 			updatedAt: /* @__PURE__ */ new Date()
 		});
 	}, "subscriptionStore")
-}), ge = () => {
+}), ze = () => {
 	let e = /* @__PURE__ */ new Map();
 	return {
-		upsert: (t) => f.sync(() => {
-			e.set(t.providerInvoiceId, t);
+		upsert: (t) => p.sync(() => {
+			let n = e.get(t.providerInvoiceId);
+			n && U(n.statusEventAt, t.statusEventAt) || e.set(t.providerInvoiceId, t);
 		}),
-		listByTenant: (t) => f.sync(() => [...e.values()].filter((e) => e.tenantId === t))
+		listByTenant: (t) => p.sync(() => [...e.values()].filter((e) => e.tenantId === t))
 	};
-}, _e = (e) => ({
+}, Be = (e) => ({
 	tenantId: String(e.tenantId),
 	provider: String(e.provider),
 	providerInvoiceId: String(e.providerInvoiceId),
 	amountMinor: Number(e.amountMinor),
 	currency: String(e.currency),
-	status: String(e.status)
-}), ve = (e) => ({
-	upsert: (t) => z(async () => {
-		let n = await e.query(B({
+	status: String(e.status),
+	statusEventAt: e.statusEventAt == null ? null : new Date(e.statusEventAt)
+}), Ve = (e) => ({
+	upsert: (t) => V(async () => {
+		let n = (await e.query(H({
 			table: I,
 			predicate: v("providerInvoiceId", t.providerInvoiceId),
 			take: 1
-		}));
-		n[0] ? await e.update(I, String(n[0].id), {
-			amountMinor: t.amountMinor,
-			currency: t.currency,
-			status: t.status
-		}) : await e.insert(I, {
-			id: R("binv"),
+		})))[0];
+		if (n) {
+			if (U(n.statusEventAt == null ? null : new Date(n.statusEventAt), t.statusEventAt)) return;
+			await e.update(I, String(n.id), {
+				amountMinor: t.amountMinor,
+				currency: t.currency,
+				status: t.status,
+				statusEventAt: t.statusEventAt
+			});
+		} else await e.insert(I, {
+			id: B("binv"),
 			...t,
 			createdAt: /* @__PURE__ */ new Date()
 		});
 	}, "invoiceStore"),
-	listByTenant: (t) => z(async () => (await e.query(B({
+	listByTenant: (t) => V(async () => (await e.query(H({
 		table: I,
 		predicate: v("tenantId", t),
 		order: [{
 			column: "createdAt",
 			direction: "desc"
 		}]
-	}))).map(_e), "invoiceStore")
-}), H = (e, t, n) => `${e}\u0000${t}\u0000${n}`, ye = () => {
+	}))).map(Be), "invoiceStore")
+}), W = (e, t, n) => `${e}\u0000${t}\u0000${n}`, He = () => {
 	let e = /* @__PURE__ */ new Map();
 	return {
-		used: (t, n, r) => f.sync(() => e.get(H(t, n, r))?.used ?? 0),
-		consume: (t, n, r, i, a) => f.sync(() => {
-			let o = H(t, n, r), s = e.get(o), c = s?.used ?? 0, l = c + i <= a;
+		used: (t, n, r) => p.sync(() => e.get(W(t, n, r))?.used ?? 0),
+		consume: (t, n, r, i, a) => p.sync(() => {
+			let o = W(t, n, r), s = e.get(o), c = s?.used ?? 0, l = c + i <= a;
 			return l && e.set(o, {
 				tenantId: t,
 				entitlementKey: n,
@@ -304,8 +550,8 @@ var A = (e, t, n, r) => ({
 				cost: i
 			};
 		}),
-		increment: (t, n, r, i) => f.sync(() => {
-			let a = H(t, n, r), o = e.get(a), s = (o?.used ?? 0) + i;
+		increment: (t, n, r, i) => p.sync(() => {
+			let a = W(t, n, r), o = e.get(a), s = (o?.used ?? 0) + i;
 			return e.set(a, {
 				tenantId: t,
 				entitlementKey: n,
@@ -314,34 +560,34 @@ var A = (e, t, n, r) => ({
 				reportedToProvider: o?.reportedToProvider ?? 0
 			}), s;
 		}),
-		pending: () => f.sync(() => [...e.values()].filter((e) => e.used > e.reportedToProvider)),
-		markReported: (t, n, r, i) => f.sync(() => {
-			let a = H(t, n, r), o = e.get(a);
+		pending: () => p.sync(() => [...e.values()].filter((e) => e.used > e.reportedToProvider)),
+		markReported: (t, n, r, i) => p.sync(() => {
+			let a = W(t, n, r), o = e.get(a);
 			o && e.set(a, {
 				...o,
 				reportedToProvider: i
 			});
 		})
 	};
-}, be = (e) => ({
+}, Ue = (e) => ({
 	tenantId: String(e.tenantId),
 	entitlementKey: String(e.entitlementKey),
 	period: String(e.period),
 	used: Number(e.used ?? 0),
 	reportedToProvider: Number(e.reportedToProvider ?? 0)
-}), U = async (e, t, n, r) => (await e.query(B({
+}), G = async (e, t, n, r) => (await e.query(H({
 	table: "_voltro_billing_usage",
 	predicate: _(v("tenantId", t), v("entitlementKey", n), v("period", r)),
 	take: 1
-})))[0] ?? null, xe = (e) => ({
-	used: (t, n, r) => z(async () => {
-		let i = await U(e, t, n, r);
+})))[0] ?? null, We = (e) => ({
+	used: (t, n, r) => V(async () => {
+		let i = await G(e, t, n, r);
 		return i ? Number(i.used ?? 0) : 0;
 	}, "usageStore"),
-	consume: (t, n, r, i, a) => z(async () => {
+	consume: (t, n, r, i, a) => V(async () => {
 		for (let o = 0; o < 32; o++) {
 			o > 0 && await new Promise((e) => setTimeout(e, o));
-			let s = await U(e, t, n, r), c = s ? Number(s.used ?? 0) : 0;
+			let s = await G(e, t, n, r), c = s ? Number(s.used ?? 0) : 0;
 			if (c + i > a) return {
 				allowed: !1,
 				entitlement: n,
@@ -361,7 +607,7 @@ var A = (e, t, n, r) => ({
 					cost: i
 				};
 			} else {
-				let o = R("buse"), s = await e.insertIgnore(L, {
+				let o = B("buse"), s = await e.insertIgnore(L, {
 					id: o,
 					tenantId: t,
 					entitlementKey: n,
@@ -385,10 +631,10 @@ var A = (e, t, n, r) => ({
 		}
 		throw Error(`billing usage consume: contention on (${t}, ${n}, ${r}) exceeded 32 attempts`);
 	}, "usageStore"),
-	increment: (t, n, r, i) => z(async () => {
+	increment: (t, n, r, i) => V(async () => {
 		for (let a = 0; a < 32; a++) {
 			a > 0 && await new Promise((e) => setTimeout(e, a));
-			let o = await U(e, t, n, r);
+			let o = await G(e, t, n, r);
 			if (o) {
 				let t = Number(o.used ?? 0);
 				if (await e.updateMany("_voltro_billing_usage", {
@@ -396,7 +642,7 @@ var A = (e, t, n, r) => ({
 					updatedAt: /* @__PURE__ */ new Date()
 				}, { where: _(v("id", String(o.id)), v("used", t)) }) === 1) return t + i;
 			} else {
-				let a = R("buse"), o = await e.insertIgnore(L, {
+				let a = B("buse"), o = await e.insertIgnore(L, {
 					id: a,
 					tenantId: t,
 					entitlementKey: n,
@@ -414,149 +660,250 @@ var A = (e, t, n, r) => ({
 		}
 		throw Error(`billing usage increment: contention on (${t}, ${n}, ${r}) exceeded 32 attempts`);
 	}, "usageStore"),
-	pending: () => z(async () => (await e.query(B({ table: L }))).map(be).filter((e) => e.used > e.reportedToProvider), "usageStore"),
-	markReported: (t, n, r, i) => z(async () => {
-		let a = await U(e, t, n, r);
+	pending: () => V(async () => (await e.query(H({ table: L }))).map(Ue).filter((e) => e.used > e.reportedToProvider), "usageStore"),
+	markReported: (t, n, r, i) => V(async () => {
+		let a = await G(e, t, n, r);
 		a && await e.update(L, String(a.id), {
 			reportedToProvider: i,
 			updatedAt: /* @__PURE__ */ new Date()
 		});
 	}, "usageStore")
-}), Se = () => ({
-	customers: ue(),
-	subscriptions: pe(),
-	invoices: ge(),
-	usage: ye()
-}), W = (e) => ({
-	customers: fe(e),
-	subscriptions: he(e),
-	invoices: ve(e),
-	usage: xe(e)
-}), G = (e = /* @__PURE__ */ new Date()) => `${e.getUTCFullYear()}-${String(e.getUTCMonth() + 1).padStart(2, "0")}`, Ce = (e) => ({ stores: e ?? Se() }), K = (e, t) => e.pipe(f.retry({
-	schedule: m.recurs(Math.max(0, t - 1)),
+}), Ge = () => ({
+	customers: Me(),
+	subscriptions: Fe(),
+	invoices: ze(),
+	usage: He(),
+	dunningNotices: ke()
+}), Ke = (e) => ({
+	customers: Pe(e),
+	subscriptions: Re(e),
+	invoices: Ve(e),
+	usage: We(e),
+	dunningNotices: je(e)
+}), K = D({ scope: "@voltro/plugin-billing" }), q = (e = /* @__PURE__ */ new Date()) => `${e.getUTCFullYear()}-${String(e.getUTCMonth() + 1).padStart(2, "0")}`, qe = (e) => ({ stores: e ?? Ge() }), J = (e, t) => e.pipe(p.retry({
+	schedule: h.recurs(Math.max(0, t - 1)),
 	while: (e) => e.transient
-})), we = (t) => {
-	let { provider: i, plans: a } = t, o = t.attempts ?? 3, s = t.checkout, c = t.now ?? (() => /* @__PURE__ */ new Date()), l = Ce(t.stores), u = (e) => l.stores.subscriptions.getByTenant(e).pipe(f.map((e) => e !== null && (e.status === "active" || e.status === "trialing") ? e.plan : n)), ee = (e) => l.stores.subscriptions.getByTenant(e), d = (e, n) => f.gen(function* () {
+})), Je = (t) => {
+	let { provider: n, plans: i } = t, a = t.attempts ?? 3, o = t.checkout, s = t.now ?? (() => /* @__PURE__ */ new Date()), c = qe(t.stores), l = t.dunning ?? be(void 0, {}), u = (e) => c.stores.subscriptions.getByTenant(e).pipe(p.map((t) => z(t, l, s(), e))), d = (e) => u(e).pipe(p.map((e) => e.plan)), f = (e) => c.stores.subscriptions.getByTenant(e), ee = (e, n) => p.gen(function* () {
 		if (t.resolveEntitlementLimit !== void 0) {
 			let r = yield* t.resolveEntitlementLimit(e, n);
 			if (r !== null) return r;
 		}
-		let r = yield* u(e);
-		return a.entitlementLimit(r, n);
-	}), p = (e, t, n) => f.gen(function* () {
-		return A(t, yield* d(e, t), yield* l.stores.usage.used(e, t, G(c())), n);
-	}), m = (e, t, n) => f.gen(function* () {
-		let i = yield* d(e, t);
+		let r = yield* d(e);
+		return i.entitlementLimit(r, n);
+	}), te = (e, t, n) => p.gen(function* () {
+		return j(t, yield* ee(e, t), yield* c.stores.usage.used(e, t, q(s())), n);
+	}), m = (e, t, n) => p.gen(function* () {
+		let i = yield* ee(e, t);
 		if (!Number.isFinite(i) || n <= 0) return;
-		let a = G(c()), o = yield* l.stores.usage.consume(e, t, a, n, i);
-		if (!o.allowed) return yield* f.fail(new r({
+		let a = q(s()), o = yield* c.stores.usage.consume(e, t, a, n, i);
+		if (!o.allowed) return yield* p.fail(new r({
 			entitlement: t,
 			limit: o.limit,
 			used: o.used,
 			cost: n
 		}));
-	}), h = (e, t, n) => n <= 0 ? f.void : l.stores.usage.increment(e, t, G(c()), n).pipe(f.asVoid), g = () => f.gen(function* () {
-		if (!i.supportsMeteredUsage) return;
-		let e = yield* l.stores.usage.pending();
+	}), h = (e, t, n) => n <= 0 ? p.void : c.stores.usage.increment(e, t, q(s()), n).pipe(p.asVoid), ne = () => p.gen(function* () {
+		if (!n.supportsMeteredUsage) return;
+		let e = yield* c.stores.usage.pending();
 		for (let t of e) {
 			let e = t.used - t.reportedToProvider;
-			e <= 0 || (yield* K(i.reportUsage({
+			e <= 0 || (yield* J(n.reportUsage({
 				tenantId: t.tenantId,
 				entitlementKey: t.entitlementKey,
 				quantity: e
-			}), o), yield* l.stores.usage.markReported(t.tenantId, t.entitlementKey, t.period, t.used));
+			}), a), yield* c.stores.usage.markReported(t.tenantId, t.entitlementKey, t.period, t.used));
 		}
-	}), te = (t) => f.gen(function* () {
-		let n = a.priceIdFor(t.plan);
-		if (n === null) return yield* f.fail(new e({
+	}), g = (t) => p.gen(function* () {
+		let r = i.priceIdFor(t.plan);
+		if (r === null) return yield* p.fail(new e({
 			source: "billing",
 			message: `plan '${t.plan}' has no provider priceId — not a paid plan`,
 			transient: !1
 		}));
-		let r = yield* l.stores.customers.getByTenant(t.tenantId);
-		return yield* K(i.createCheckoutSession({
+		let s = yield* c.stores.customers.getByTenant(t.tenantId);
+		return yield* J(n.createCheckoutSession({
 			tenantId: t.tenantId,
-			priceId: n,
+			priceId: r,
 			successUrl: t.successUrl,
 			cancelUrl: t.cancelUrl,
-			...r === null ? {} : { providerCustomerId: r.providerCustomerId },
+			...s === null ? {} : { providerCustomerId: s.providerCustomerId },
 			...t.quantity === void 0 ? {} : { quantity: t.quantity },
-			...s?.adjustableQuantity === void 0 ? {} : { adjustableQuantity: s.adjustableQuantity },
-			...s?.trialDays === void 0 ? {} : { trialDays: s.trialDays }
-		}), o);
-	}), ne = (t, n) => f.gen(function* () {
-		let r = yield* l.stores.customers.getByTenant(t);
-		return r === null ? yield* f.fail(new e({
+			...o?.adjustableQuantity === void 0 ? {} : { adjustableQuantity: o.adjustableQuantity },
+			...o?.trialDays === void 0 ? {} : { trialDays: o.trialDays }
+		}), a);
+	}), re = (t, r) => p.gen(function* () {
+		let i = yield* c.stores.customers.getByTenant(t);
+		return i === null ? yield* p.fail(new e({
 			source: "billing",
 			message: `no provider customer linked for tenant '${t}'`,
 			transient: !1
-		})) : yield* K(i.createPortalSession({
+		})) : yield* J(n.createPortalSession({
 			tenantId: t,
-			providerCustomerId: r.providerCustomerId,
-			returnUrl: n
-		}), o);
-	}), _ = (e) => {
+			providerCustomerId: i.providerCustomerId,
+			returnUrl: r
+		}), a);
+	}), ie = (e) => p.gen(function* () {
+		if (l.resolveRecipient !== void 0) {
+			let t = yield* l.resolveRecipient(e);
+			if (t !== null) return t;
+		}
+		if (n.customerEmail === void 0) return null;
+		let t = yield* c.stores.customers.getByTenant(e);
+		return t === null ? null : yield* n.customerEmail(t.providerCustomerId);
+	}), ae = (e) => {
+		let t = l.portalReturnUrl;
+		return t === void 0 ? p.succeed(null) : re(e, t).pipe(p.map((e) => e.url), p.catchAll(() => p.succeed(null)));
+	}, _ = (e, t, n, r, i) => p.gen(function* () {
+		let a = yield* ie(e.tenantId).pipe(p.catchAll(() => p.succeed(null))), o = yield* ae(e.tenantId), s = t.lockedSince !== null, c = Ee({
+			stepId: n,
+			locked: s,
+			graceEndsAt: i,
+			portalUrl: o
+		}), u = {
+			stepId: n,
+			tenantId: e.tenantId,
+			to: a,
+			plan: e.plan,
+			status: e.status,
+			pastDueSince: r,
+			graceEndsAt: i,
+			locked: s,
+			lockout: l.lockout,
+			portalUrl: o,
+			...c
+		};
+		K.info("billing dunning notice", {
+			tenant: e.tenantId,
+			step: n,
+			locked: s,
+			graceEndsAt: i.toISOString(),
+			delivered: l.notify !== void 0 && a !== null
+		});
+		let d = l.notify;
+		d !== void 0 && (yield* d(u).pipe(p.catchAllCause((t) => p.sync(() => {
+			K.warn("billing dunning notify failed", {
+				tenant: e.tenantId,
+				step: n,
+				cause: String(t)
+			});
+		}))));
+	}), v = (e) => p.gen(function* () {
+		let t = yield* c.stores.subscriptions.getByTenant(e);
+		if (t === null) return z(null, l, s(), e);
+		let r = yield* n.fetchSubscription(t.providerSubscriptionId).pipe(p.catchAll((t) => p.sync(() => (K.warn("billing dunning reconcile: provider unreachable, not escalating", {
+			tenant: e,
+			source: t.source,
+			message: t.message
+		}), null)))), i = t;
+		if (r !== null) {
+			let n = s(), a = r.status === "pastDue" ? t.status === "pastDue" && t.pastDueSince !== null ? t.pastDueSince : n : null;
+			yield* c.stores.subscriptions.patchByTenant(e, {
+				status: r.status,
+				...r.plan === null ? {} : { plan: r.plan },
+				quantity: r.quantity,
+				currentPeriodStart: r.currentPeriodStart,
+				currentPeriodEnd: r.currentPeriodEnd,
+				pastDueSince: a,
+				statusEventAt: n
+			}), i = {
+				...t,
+				status: r.status,
+				plan: r.plan ?? t.plan,
+				quantity: r.quantity,
+				currentPeriodStart: r.currentPeriodStart,
+				currentPeriodEnd: r.currentPeriodEnd,
+				pastDueSince: a,
+				statusEventAt: n
+			};
+		}
+		let a = z(i, l, s(), e);
+		if (!l.enabled || i.status !== "pastDue" || i.pastDueSince === null) return a;
+		let o = i.pastDueSince, u = Se(o), d = a.graceEndsAt ?? o, f = we(l.steps, o, s()).map((e) => e.id);
+		a.lockedSince !== null && f.push(he);
+		for (let t of f) (yield* c.stores.dunningNotices.claim(e, u, t, s())) && (yield* _(i, a, t, o, d));
+		return a;
+	}), y = () => p.gen(function* () {
+		let e = yield* c.stores.subscriptions.listByStatus("pastDue"), t = 0;
+		for (let n of e) yield* v(n.tenantId).pipe(p.catchAll((e) => p.sync(() => {
+			K.warn("billing dunning sweep: tenant failed", {
+				tenant: n.tenantId,
+				message: e.message
+			});
+		}))), t += 1;
+		return t;
+	}), b = (e) => {
+		if (!l.enabled) return p.void;
+		if (e._tag === "invoicePaymentFailed") return v(e.tenantId).pipe(p.asVoid);
+		if (e._tag !== "invoicePaid" && e._tag !== "subscriptionUpserted") return p.void;
+		let t = e.tenantId;
+		return c.stores.subscriptions.getByTenant(t).pipe(p.flatMap((e) => e !== null && (e.status === "pastDue" || e.pastDueSince !== null) ? v(t).pipe(p.asVoid) : p.void));
+	}, x = (e) => {
 		switch (e._tag) {
-			case "subscriptionUpserted": return l.stores.subscriptions.upsert({
+			case "subscriptionUpserted": return c.stores.subscriptions.upsert({
 				tenantId: e.tenantId,
-				provider: i.name,
+				provider: n.name,
 				providerSubscriptionId: e.providerSubscriptionId,
 				plan: e.plan,
 				status: e.status,
 				quantity: e.quantity ?? 1,
 				currentPeriodStart: e.currentPeriodStart ?? null,
 				currentPeriodEnd: e.currentPeriodEnd,
-				cancelAt: e.cancelAt
+				cancelAt: e.cancelAt,
+				pastDueSince: null,
+				statusEventAt: e.occurredAt
 			});
-			case "subscriptionCanceled": return l.stores.subscriptions.markCanceled(e.providerSubscriptionId);
-			case "invoicePaid": return l.stores.invoices.upsert({
+			case "subscriptionCanceled": return c.stores.subscriptions.markCanceled(e.providerSubscriptionId);
+			case "invoicePaid": return c.stores.invoices.upsert({
 				tenantId: e.tenantId,
-				provider: i.name,
+				provider: n.name,
 				providerInvoiceId: e.providerInvoiceId,
 				amountMinor: e.amountMinor,
 				currency: e.currency,
-				status: "paid"
+				status: "paid",
+				statusEventAt: e.occurredAt
 			});
-			case "invoicePaymentFailed": return l.stores.invoices.upsert({
+			case "invoicePaymentFailed": return c.stores.invoices.upsert({
 				tenantId: e.tenantId,
-				provider: i.name,
+				provider: n.name,
 				providerInvoiceId: e.providerInvoiceId,
 				amountMinor: e.amountMinor,
 				currency: e.currency,
-				status: "open"
+				status: "open",
+				statusEventAt: e.occurredAt
 			});
-			case "customerLinked": return l.stores.customers.upsert({
+			case "customerLinked": return c.stores.customers.upsert({
 				tenantId: e.tenantId,
-				provider: i.name,
+				provider: n.name,
 				providerCustomerId: e.providerCustomerId
 			});
 		}
-	}, v = (t, n) => f.gen(function* () {
-		let r = yield* l.stores.subscriptions.getByTenant(t);
-		if (r === null) return yield* f.fail(new e({
+	}, S = (e) => x(e).pipe(p.zipRight(b(e))), C = (t, r) => p.gen(function* () {
+		let o = yield* c.stores.subscriptions.getByTenant(t);
+		if (o === null) return yield* p.fail(new e({
 			source: "billing",
 			message: `no subscription for tenant '${t}' to change`,
 			transient: !1
 		}));
-		let s = n.plan ?? r.plan, c = n.quantity ?? r.quantity;
-		if (n.plan !== void 0 && !a.has(s)) return yield* f.fail(new e({
+		let s = r.plan ?? o.plan, l = r.quantity ?? o.quantity;
+		if (r.plan !== void 0 && !i.has(s)) return yield* p.fail(new e({
 			source: "billing",
 			message: `unknown plan '${s}' — not in the plan registry`,
 			transient: !1
 		}));
-		if (!Number.isInteger(c) || c <= 0) return yield* f.fail(new e({
+		if (!Number.isInteger(l) || l <= 0) return yield* p.fail(new e({
 			source: "billing",
-			message: `seat quantity must be a positive integer, got ${c}`,
+			message: `seat quantity must be a positive integer, got ${l}`,
 			transient: !1
 		}));
-		let u = yield* K(i.updateSubscription({
-			providerSubscriptionId: r.providerSubscriptionId,
-			...n.plan === void 0 ? {} : { priceId: a.priceIdFor(s) ?? s },
-			...n.quantity === void 0 ? {} : { quantity: c },
+		let u = yield* J(n.updateSubscription({
+			providerSubscriptionId: o.providerSubscriptionId,
+			...r.plan === void 0 ? {} : { priceId: i.priceIdFor(s) ?? s },
+			...r.quantity === void 0 ? {} : { quantity: l },
 			proration: "prorate"
-		}), o);
-		return yield* l.stores.subscriptions.patchByTenant(t, {
-			...n.plan === void 0 ? {} : { plan: s },
+		}), a);
+		return yield* c.stores.subscriptions.patchByTenant(t, {
+			...r.plan === void 0 ? {} : { plan: s },
 			quantity: u.quantity,
 			...u.currentPeriodStart === null ? {} : { currentPeriodStart: u.currentPeriodStart },
 			...u.currentPeriodEnd === null ? {} : { currentPeriodEnd: u.currentPeriodEnd }
@@ -570,46 +917,49 @@ var A = (e, t, n, r) => ({
 	});
 	return {
 		service: {
-			subscription: ee,
-			plan: u,
-			checkEntitlement: p,
+			subscription: f,
+			plan: d,
+			entitlementStatus: u,
+			reconcileDunning: v,
+			dunningSweep: y,
+			checkEntitlement: te,
 			consumeEntitlement: m,
 			reportUsage: h,
-			flushUsage: g,
-			startCheckout: te,
-			portalUrl: ne,
-			applyEvent: _,
-			changePlan: (e, t) => v(e, { plan: t }),
-			changeSeats: (e, t) => v(e, { quantity: t }),
-			previewChange: (t, n) => f.gen(function* () {
-				let r = yield* l.stores.subscriptions.getByTenant(t);
-				if (r === null) return yield* f.fail(new e({
+			flushUsage: ne,
+			startCheckout: g,
+			portalUrl: re,
+			applyEvent: S,
+			changePlan: (e, t) => C(e, { plan: t }),
+			changeSeats: (e, t) => C(e, { quantity: t }),
+			previewChange: (t, r) => p.gen(function* () {
+				let o = yield* c.stores.subscriptions.getByTenant(t);
+				if (o === null) return yield* p.fail(new e({
 					source: "billing",
 					message: `no subscription for tenant '${t}' to preview`,
 					transient: !1
 				}));
-				let s = n.plan ?? r.plan, c = yield* K(i.previewSubscriptionChange({
-					providerSubscriptionId: r.providerSubscriptionId,
-					...n.plan === void 0 ? {} : { priceId: a.priceIdFor(s) ?? s },
-					...n.quantity === void 0 ? {} : { quantity: n.quantity },
+				let s = r.plan ?? o.plan, l = yield* J(n.previewSubscriptionChange({
+					providerSubscriptionId: o.providerSubscriptionId,
+					...r.plan === void 0 ? {} : { priceId: i.priceIdFor(s) ?? s },
+					...r.quantity === void 0 ? {} : { quantity: r.quantity },
 					proration: "prorate"
-				}), o);
+				}), a);
 				return {
 					tenantId: t,
 					plan: s,
-					quantity: c.quantity,
-					prorationMinor: c.prorationMinor,
-					currency: c.currency
+					quantity: l.quantity,
+					prorationMinor: l.prorationMinor,
+					currency: l.currency
 				};
 			}),
-			invoices: (e) => f.gen(function* () {
-				let t = yield* l.stores.customers.getByTenant(e);
-				return t === null ? [] : yield* K(i.listInvoices({ providerCustomerId: t.providerCustomerId }), o);
+			invoices: (e) => p.gen(function* () {
+				let t = yield* c.stores.customers.getByTenant(e);
+				return t === null ? [] : yield* J(n.listInvoices({ providerCustomerId: t.providerCustomerId }), a);
 			})
 		},
-		holder: l
+		holder: c
 	};
-}, Te = (e) => p.succeed(t, e), Ee = "_voltro_ai_usage", De = (e) => {
+}, Ye = (e) => m.succeed(t, e), Xe = "_voltro_ai_usage", Ze = (e) => {
 	for (let [t, n] of Object.entries(e)) {
 		if (t.length === 0) throw Error("billing metering: a meter key must be non-empty");
 		if (n.from === "rpc") {
@@ -618,29 +968,33 @@ var A = (e, t, n, r) => ({
 			if (typeof n.table != "string" || n.table.length === 0) throw Error(`billing metering: cdc meter '${t}' needs a 'table'`);
 		} else if (n.from !== "ai") throw Error(`billing metering: meter '${t}' has unknown source '${String(n.from)}'`);
 	}
-}, Oe = (e, t) => typeof e == "string" ? t === e : e.test(t), ke = (e, t, n) => Object.entries(e).filter(([, e]) => e.from === "rpc" && (e.kind === void 0 || e.kind === n) && Oe(e.match, t)).map(([e]) => e), Ae = (e, t, n) => Object.entries(e).filter(([, e]) => e.from === "cdc" && e.table === t && (e.op ?? "insert") === n).map(([e]) => e), je = (e) => Object.entries(e).filter(([, e]) => e.from === "ai").map(([e, t]) => [e, t.metric ?? "tokens"]), Me = (e) => e.tenantId, Ne = (e, t, n, r) => f.forEach(n, (n) => e.reportUsage(t, n, r).pipe(f.catchAll(() => f.void)), { discard: !0 }), Pe = (e, t) => (n, r) => {
-	let i = ke(t, r.tag, r.kind);
+}, Qe = /* @__PURE__ */ new WeakMap(), $e = (e) => {
+	if (!e.global && !e.sticky) return e;
+	let t = Qe.get(e);
+	return t === void 0 && (t = new RegExp(e.source, e.flags.replace(/[gy]/g, "")), Qe.set(e, t)), t;
+}, et = (e, t) => typeof e == "string" ? t === e : $e(e).test(t), tt = (e, t, n) => Object.entries(e).filter(([, e]) => e.from === "rpc" && (e.kind === void 0 || e.kind === n) && et(e.match, t)).map(([e]) => e), nt = (e, t, n) => Object.entries(e).filter(([, e]) => e.from === "cdc" && e.table === t && (e.op ?? "insert") === n).map(([e]) => e), rt = (e) => Object.entries(e).filter(([, e]) => e.from === "ai").map(([e, t]) => [e, t.metric ?? "tokens"]), it = (e) => e.tenantId, at = (e, t, n, r) => p.forEach(n, (n) => e.reportUsage(t, n, r).pipe(p.catchAll(() => p.void)), { discard: !0 }), ot = (e, t) => (n, r) => {
+	let i = tt(t, r.tag, r.kind);
 	if (i.length === 0) return n;
-	let a = Me(r.subject);
-	return a === null ? n : n.pipe(f.tap(() => Ne(e, a, i, 1)));
-}, Fe = (e, t) => (n) => {
-	let r = Ae(t, n.table, n.op);
-	if (r.length === 0) return f.void;
+	let a = it(r.subject);
+	return a === null ? n : n.pipe(p.tap(() => at(e, a, i, 1)));
+}, st = (e, t) => (n) => {
+	let r = nt(t, n.table, n.op);
+	if (r.length === 0) return p.void;
 	let i = n.new?.tenantId ?? n.old?.tenantId ?? null;
-	return i === null ? f.void : Ne(e, i, r, 1);
-}, Ie = (e) => new Date(Date.UTC(e.getUTCFullYear(), e.getUTCMonth(), 1, 0, 0, 0, 0)), Le = (e, t, n, r = () => /* @__PURE__ */ new Date()) => f.gen(function* () {
-	let i = je(n);
+	return i === null ? p.void : at(e, i, r, 1);
+}, ct = (e) => new Date(Date.UTC(e.getUTCFullYear(), e.getUTCMonth(), 1, 0, 0, 0, 0)), lt = (e, t, n, r = () => /* @__PURE__ */ new Date()) => p.gen(function* () {
+	let i = rt(n);
 	if (i.length === 0) return;
 	let a = r();
-	G(a);
+	q(a);
 	let o = {
-		table: Ee,
-		predicate: re("calledAt", Ie(a)),
+		table: Xe,
+		predicate: y("calledAt", ct(a)),
 		order: [],
 		take: void 0,
 		skip: void 0,
 		projection: void 0
-	}, s = yield* f.promise(() => Promise.resolve(t.query(o)).then((e) => e).catch(() => [])), c = /* @__PURE__ */ new Map();
+	}, s = yield* p.promise(() => Promise.resolve(t.query(o)).then((e) => e).catch(() => [])), c = /* @__PURE__ */ new Map();
 	for (let e of s) {
 		let t = e.tenantId ?? null;
 		if (t === null) continue;
@@ -653,17 +1007,17 @@ var A = (e, t, n, r) => ({
 	for (let [t, n] of i) for (let [r, i] of c) {
 		let a = n === "costMicroUsd" ? i.cost : i.tokens;
 		if (a <= 0) continue;
-		let o = a - (yield* e.checkEntitlement(r, t, 0).pipe(f.map((e) => e.used), f.catchAll(() => f.succeed(0))));
-		o > 0 && (yield* e.reportUsage(r, t, o).pipe(f.catchAll(() => f.void)));
+		let o = a - (yield* e.checkEntitlement(r, t, 0).pipe(p.map((e) => e.used), p.catchAll(() => p.succeed(0))));
+		o > 0 && (yield* e.reportUsage(r, t, o).pipe(p.catchAll(() => p.void)));
 	}
-}), Re = (e, t, n, r) => Le(e, t, n, r).pipe(f.andThen(e.flushUsage().pipe(f.catchAll(() => f.void)))), ze = (e) => Object.values(e).some((e) => e.from === "cdc"), Be = (e) => e === void 0 ? 0 : e === "unlimited" ? Infinity : e, q = (e) => {
+}), ut = (e, t, n, r) => lt(e, t, n, r).pipe(p.andThen(e.flushUsage().pipe(p.catchAll(() => p.void)))), dt = (e) => Object.values(e).some((e) => e.from === "cdc"), ft = (e) => e === void 0 ? 0 : e === "unlimited" ? Infinity : e, pt = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let [n, r] of Object.entries(e)) r.priceId !== void 0 && t.set(r.priceId, n);
 	return {
 		has: (t) => Object.prototype.hasOwnProperty.call(e, t),
 		entitlementLimit: (t, n) => {
 			let r = e[t];
-			return r === void 0 ? 0 : Be(r.entitlements[n]);
+			return r === void 0 ? 0 : ft(r.entitlements[n]);
 		},
 		planForPriceId: (e) => t.get(e) ?? null,
 		priceIdFor: (t) => e[t]?.priceId ?? null,
@@ -674,14 +1028,14 @@ var A = (e, t, n, r) => ({
 		currencyFor: (t) => (e[t]?.currency ?? "usd").toLowerCase(),
 		planIds: () => Object.keys(e)
 	};
-}, Ve = () => q({ [n]: { entitlements: {} } }), J = "_voltro_billing_flush_claims", He = S(J, {
-	id: y({ scheme: "numeric" }),
-	windowKey: C(),
-	claimedBy: C(),
-	claimedAt: w().default("now")
-}).unique("billingFlushClaimWindow", ["windowKey"]), Ue = (e, t) => `billing-flush:${Math.floor(e / Math.max(1, t))}`, We = async (e, t, n, r) => {
+}, mt = () => pt({ [n]: { entitlements: {} } }), Y = "_voltro_billing_flush_claims", ht = w(Y, {
+	id: b({ scheme: "numeric" }),
+	windowKey: T(),
+	claimedBy: T(),
+	claimedAt: E().default("now")
+}).unique("billingFlushClaimWindow", ["windowKey"]), gt = (e, t) => `billing-flush:${Math.floor(e / Math.max(1, t))}`, _t = async (e, t, n, r) => {
 	try {
-		return (await e.insertIgnore(J, {
+		return (await e.insertIgnore(Y, {
 			windowKey: t,
 			claimedBy: n,
 			claimedAt: new Date(r)
@@ -689,38 +1043,38 @@ var A = (e, t, n, r) => ({
 	} catch {
 		return !0;
 	}
-}, Ge = 3, Ke = 2e4, qe = (e) => e.client ?? new T(e.apiKey, {
-	maxNetworkRetries: Ge,
-	timeout: Ke,
+}, vt = 3, yt = 2e4, bt = (e) => e.client ?? new O(e.apiKey, {
+	maxNetworkRetries: vt,
+	timeout: yt,
 	appInfo: {
 		name: "voltro",
 		url: "https://voltro.dev"
 	}
-}), Je = (e) => e instanceof T.errors.StripeConnectionError || e instanceof T.errors.StripeAPIError || e instanceof T.errors.StripeRateLimitError, Ye = (e) => e instanceof T.errors.StripeError ? e.code ?? e.type : void 0, Y = (t, n) => f.tryPromise({
+}), xt = (e) => e instanceof O.errors.StripeConnectionError || e instanceof O.errors.StripeAPIError || e instanceof O.errors.StripeRateLimitError, St = (e) => e instanceof O.errors.StripeError ? e.code ?? e.type : void 0, X = (t, n) => p.tryPromise({
 	try: n,
 	catch: (n) => new e({
 		source: t,
-		message: Xe(n),
-		transient: Je(n)
+		message: Ct(n),
+		transient: xt(n)
 	})
-}), Xe = (e) => {
-	if (e instanceof T.errors.StripeError) {
-		let t = Ye(e);
+}), Ct = (e) => {
+	if (e instanceof O.errors.StripeError) {
+		let t = St(e);
 		return t === void 0 ? e.message : `${e.message} (${t})`;
 	}
 	return String(e?.message ?? e);
-}, Ze = (e) => {
+}, wt = (e) => {
 	let t = e.items?.data?.[0];
 	return {
-		start: X(t?.current_period_start),
-		end: X(t?.current_period_end)
+		start: Z(t?.current_period_start),
+		end: Z(t?.current_period_end)
 	};
-}, X = (e) => typeof e == "number" && Number.isFinite(e) ? /* @__PURE__ */ new Date(e * 1e3) : null, Qe = (e) => {
+}, Z = (e) => typeof e == "number" && Number.isFinite(e) ? /* @__PURE__ */ new Date(e * 1e3) : null, Tt = (e) => {
 	let t = e.items?.data ?? [];
 	if (t.length === 0) return 1;
 	let n = t.reduce((e, t) => e + (t.quantity ?? 0), 0);
 	return n > 0 ? n : 1;
-}, $e = {
+}, Et = {
 	active: "active",
 	trialing: "trialing",
 	past_due: "pastDue",
@@ -729,79 +1083,84 @@ var A = (e, t, n, r) => ({
 	incomplete: "incomplete",
 	incomplete_expired: "canceled",
 	paused: "pastDue"
-}, Z = (e) => {
+}, Q = (e) => {
 	let t = e.metadata?.tenantId;
 	if (typeof t == "string" && t.length > 0) return t;
 	let n = e.client_reference_id;
 	return typeof n == "string" && n.length > 0 ? n : null;
-}, et = (e) => {
+}, Dt = (e) => {
 	let t = e.items?.data?.[0]?.price;
 	return typeof t?.id == "string" ? t.id : null;
-}, tt = (e, t) => {
+}, Ot = (e, t) => {
 	let n = e.metadata?.plan;
 	if (typeof n == "string" && n.length > 0) return n;
-	let r = et(e);
+	let r = Dt(e);
 	return r !== null && t ? t(r) : null;
-}, nt = (e, t) => {
+}, kt = (e, t) => {
+	let n = Z(e.created);
 	switch (e.type) {
 		case "customer.subscription.created":
 		case "customer.subscription.updated":
 		case "customer.subscription.resumed":
 		case "customer.subscription.paused": {
-			let n = e.data.object, r = Z(n), i = tt(n, t), a = $e[n.status];
-			if (r === null || i === null || a === void 0) return null;
-			let o = Ze(n);
+			let r = e.data.object, i = Q(r), a = Ot(r, t), o = Et[r.status];
+			if (i === null || a === null || o === void 0) return null;
+			let s = wt(r);
 			return {
 				_tag: "subscriptionUpserted",
-				tenantId: r,
-				providerSubscriptionId: n.id,
-				plan: i,
-				status: a,
-				quantity: Qe(n),
-				currentPeriodStart: o.start,
-				currentPeriodEnd: o.end,
-				cancelAt: X(n.cancel_at)
+				tenantId: i,
+				providerSubscriptionId: r.id,
+				plan: a,
+				status: o,
+				quantity: Tt(r),
+				currentPeriodStart: s.start,
+				currentPeriodEnd: s.end,
+				cancelAt: Z(r.cancel_at),
+				occurredAt: n
 			};
 		}
 		case "customer.subscription.deleted": {
-			let t = e.data.object, n = Z(t);
-			return n === null ? null : {
+			let t = e.data.object, r = Q(t);
+			return r === null ? null : {
 				_tag: "subscriptionCanceled",
-				tenantId: n,
-				providerSubscriptionId: t.id
+				tenantId: r,
+				providerSubscriptionId: t.id,
+				occurredAt: n
 			};
 		}
 		case "invoice.paid":
 		case "invoice.payment_failed": {
-			let t = e.data.object, n = Z(t);
-			return n === null || typeof t.id != "string" ? null : {
+			let t = e.data.object, r = Q(t);
+			return r === null || typeof t.id != "string" ? null : {
 				_tag: e.type === "invoice.paid" ? "invoicePaid" : "invoicePaymentFailed",
-				tenantId: n,
+				tenantId: r,
 				providerInvoiceId: t.id,
 				amountMinor: t.amount_due,
-				currency: t.currency
+				currency: t.currency,
+				occurredAt: n
 			};
 		}
 		case "customer.created": {
-			let t = e.data.object, n = Z(t);
-			return n === null ? null : {
+			let t = e.data.object, r = Q(t);
+			return r === null ? null : {
 				_tag: "customerLinked",
-				tenantId: n,
-				providerCustomerId: t.id
+				tenantId: r,
+				providerCustomerId: t.id,
+				occurredAt: n
 			};
 		}
 		default: return null;
 	}
-}, rt = {
+}, At = {
 	prorate: "create_prorations",
 	none: "none",
 	always_invoice: "always_invoice"
-}, it = (t) => {
-	let n = qe(t), r = t.planForPriceId, i = (e) => n.subscriptions.retrieve(e, { expand: ["items.data.price"] }), a = (e, t) => {
-		let n = Ze(e), i = e.items?.data?.[0]?.price;
+}, jt = (t) => {
+	let n = bt(t), r = t.planForPriceId, i = (e) => n.subscriptions.retrieve(e, { expand: ["items.data.price"] }), a = (e, t) => {
+		let n = wt(e), i = e.items?.data?.[0]?.price;
 		return {
-			plan: tt(e, r) ?? "free",
-			quantity: Qe(e),
+			plan: Ot(e, r) ?? "free",
+			quantity: Tt(e),
 			prorationMinor: t,
 			currency: (i?.currency ?? "usd").toLowerCase(),
 			currentPeriodStart: n.start,
@@ -815,7 +1174,7 @@ var A = (e, t, n, r) => ({
 				...t.priceId === void 0 ? {} : { price: t.priceId },
 				...t.quantity === void 0 ? {} : { quantity: t.quantity }
 			}],
-			proration_behavior: rt[t.proration ?? "prorate"],
+			proration_behavior: At[t.proration ?? "prorate"],
 			...t.priceId !== void 0 && r ? { metadata: {
 				...e.metadata,
 				plan: r(t.priceId) ?? ""
@@ -825,7 +1184,7 @@ var A = (e, t, n, r) => ({
 	return {
 		name: "stripe",
 		supportsMeteredUsage: t.supportsMeteredUsage ?? !0,
-		createCheckoutSession: (e) => Y("stripe.checkout.sessions.create", async () => {
+		createCheckoutSession: (e) => X("stripe.checkout.sessions.create", async () => {
 			let t = await n.checkout.sessions.create({
 				mode: "subscription",
 				line_items: [{
@@ -857,11 +1216,11 @@ var A = (e, t, n, r) => ({
 			if (typeof t.url != "string") throw Error("checkout session has no url");
 			return { url: t.url };
 		}),
-		createPortalSession: (e) => Y("stripe.billingPortal.sessions.create", async () => ({ url: (await n.billingPortal.sessions.create({
+		createPortalSession: (e) => X("stripe.billingPortal.sessions.create", async () => ({ url: (await n.billingPortal.sessions.create({
 			customer: e.providerCustomerId,
 			return_url: e.returnUrl
 		})).url })),
-		reportUsage: (e) => Y("stripe.billing.meterEvents.create", async () => {
+		reportUsage: (e) => X("stripe.billing.meterEvents.create", async () => {
 			await n.billing.meterEvents.create({
 				event_name: e.entitlementKey,
 				identifier: `${e.tenantId}:${e.entitlementKey}:${e.periodEnd?.toISOString() ?? "current"}`,
@@ -871,11 +1230,11 @@ var A = (e, t, n, r) => ({
 				}
 			});
 		}),
-		updateSubscription: (e) => Y("stripe.subscriptions.update", async () => {
-			let t = await i(e.providerSubscriptionId), r = await n.subscriptions.update(e.providerSubscriptionId, o(t, e)), s = await ot(n, r);
+		updateSubscription: (e) => X("stripe.subscriptions.update", async () => {
+			let t = await i(e.providerSubscriptionId), r = await n.subscriptions.update(e.providerSubscriptionId, o(t, e)), s = await Nt(n, r);
 			return a(r, s);
 		}),
-		previewSubscriptionChange: (e) => Y("stripe.invoices.createPreview", async () => {
+		previewSubscriptionChange: (e) => X("stripe.invoices.createPreview", async () => {
 			let t = await i(e.providerSubscriptionId), s = o(t, e), c = (await n.invoices.createPreview({
 				subscription: e.providerSubscriptionId,
 				subscription_details: {
@@ -889,7 +1248,27 @@ var A = (e, t, n, r) => ({
 				...e.priceId !== void 0 && r ? { plan: r(e.priceId) ?? "free" } : {}
 			};
 		}),
-		listInvoices: (e) => Y("stripe.invoices.list", async () => (await n.invoices.list({
+		fetchSubscription: (e) => X("stripe.subscriptions.retrieve", async () => {
+			try {
+				let t = await i(e), n = wt(t);
+				return {
+					status: Et[t.status] ?? "incomplete",
+					plan: Ot(t, r),
+					quantity: Tt(t),
+					currentPeriodStart: n.start,
+					currentPeriodEnd: n.end,
+					cancelAt: Z(t.cancel_at)
+				};
+			} catch (e) {
+				if (e instanceof O.errors.StripeInvalidRequestError && e.statusCode === 404) return null;
+				throw e;
+			}
+		}),
+		customerEmail: (e) => X("stripe.customers.retrieve", async () => {
+			let t = await n.customers.retrieve(e);
+			return t.deleted === !0 ? null : typeof t.email == "string" && t.email.length > 0 ? t.email : null;
+		}),
+		listInvoices: (e) => X("stripe.invoices.list", async () => (await n.invoices.list({
 			customer: e.providerCustomerId,
 			limit: e.limit ?? 20
 		})).data.map((e) => ({
@@ -897,11 +1276,11 @@ var A = (e, t, n, r) => ({
 			amountMinor: e.amount_due,
 			currency: e.currency,
 			status: e.status ?? "unknown",
-			createdAt: X(e.created),
+			createdAt: Z(e.created),
 			hostedUrl: e.hosted_invoice_url ?? null,
 			pdfUrl: e.invoice_pdf ?? null
 		}))),
-		verifyWebhook: (t) => f.try({
+		verifyWebhook: (t) => p.try({
 			try: () => n.webhooks.constructEvent(Buffer.from(t.rawBody), t.signatureHeader, t.secret),
 			catch: (t) => new e({
 				source: "stripe.webhooks.constructEvent",
@@ -909,27 +1288,36 @@ var A = (e, t, n, r) => ({
 				transient: !1
 			})
 		}),
-		normalizeEvent: (e) => f.succeed(at(e) ? nt(e, r) : null)
+		normalizeEvent: (e) => p.succeed(Mt(e) ? kt(e, r) : null)
 	};
-}, at = (e) => typeof e == "object" && !!e && typeof e.type == "string" && typeof e.data == "object", ot = async (e, t) => {
+}, Mt = (e) => typeof e == "object" && !!e && typeof e.type == "string" && typeof e.data == "object", Nt = async (e, t) => {
 	try {
 		return (await e.invoices.createPreview({ subscription: t.id })).lines.data.filter((e) => e.parent?.subscription_item_details?.proration === !0).reduce((e, t) => e + t.amount, 0);
 	} catch {
 		return 0;
 	}
-}, st = (e) => {
-	let t = e?.baseUrl ?? "https://mock.billing.local", n = [], r = [], i = (e) => typeof e == "object" && !!e && typeof e._tag == "string";
+}, Pt = (e) => {
+	let t = e?.baseUrl ?? "https://mock.billing.local", n = [], r = [], i = [], a = /* @__PURE__ */ new Map(), o = /* @__PURE__ */ new Map(), s = (e) => typeof e == "object" && !!e && typeof e._tag == "string";
 	return {
 		name: "mock",
 		supportsMeteredUsage: e?.supportsMeteredUsage ?? !0,
 		pushed: n,
 		updates: r,
-		createCheckoutSession: (e) => f.succeed({ url: `${t}/checkout?tenant=${encodeURIComponent(e.tenantId)}&price=${encodeURIComponent(e.priceId)}` }),
-		createPortalSession: (e) => f.succeed({ url: `${t}/portal?customer=${encodeURIComponent(e.providerCustomerId)}` }),
-		reportUsage: (e) => f.sync(() => {
+		fetched: i,
+		setSubscription: (e, t) => {
+			t === null ? a.delete(e) : a.set(e, t);
+		},
+		setCustomerEmail: (e, t) => {
+			t === null ? o.delete(e) : o.set(e, t);
+		},
+		fetchSubscription: (e) => p.sync(() => (i.push(e), a.get(e) ?? null)),
+		customerEmail: (e) => p.sync(() => o.get(e) ?? null),
+		createCheckoutSession: (e) => p.succeed({ url: `${t}/checkout?tenant=${encodeURIComponent(e.tenantId)}&price=${encodeURIComponent(e.priceId)}` }),
+		createPortalSession: (e) => p.succeed({ url: `${t}/portal?customer=${encodeURIComponent(e.providerCustomerId)}` }),
+		reportUsage: (e) => p.sync(() => {
 			n.push(e);
 		}),
-		updateSubscription: (e) => f.sync(() => (r.push(e), {
+		updateSubscription: (e) => p.sync(() => (r.push(e), {
 			plan: e.priceId ?? "mock-plan",
 			quantity: e.quantity ?? 1,
 			prorationMinor: 0,
@@ -937,7 +1325,7 @@ var A = (e, t, n, r) => ({
 			currentPeriodStart: null,
 			currentPeriodEnd: null
 		})),
-		previewSubscriptionChange: (e) => f.succeed({
+		previewSubscriptionChange: (e) => p.succeed({
 			plan: e.priceId ?? "mock-plan",
 			quantity: e.quantity ?? 1,
 			prorationMinor: 0,
@@ -945,55 +1333,55 @@ var A = (e, t, n, r) => ({
 			currentPeriodStart: null,
 			currentPeriodEnd: null
 		}),
-		listInvoices: () => f.succeed([]),
-		normalizeEvent: (e) => f.succeed(i(e) ? e : null)
+		listInvoices: () => p.succeed([]),
+		normalizeEvent: (e) => p.succeed(s(e) ? e : null)
 	};
-}, ct = (e) => {
+}, Ft = (e) => {
 	let { provider: t, env: n } = e;
 	if (t !== void 0 && typeof t == "object") return t;
 	if ((t ?? (n.STRIPE_SECRET_KEY ? "stripe" : "mock")) === "stripe") {
 		let t = e.apiKey ?? n.STRIPE_SECRET_KEY;
 		if (!t) throw Error("billingPlugin: provider 'stripe' needs an apiKey (option or STRIPE_SECRET_KEY env)");
-		return it({
+		return jt({
 			apiKey: t,
 			...e.planForPriceId ? { planForPriceId: e.planForPriceId } : {}
 		});
 	}
-	return st();
-}, lt = k({ scope: "@voltro/plugin-billing" }), ut = "billing", Q = "/billing/webhook", dt = (e) => E({
-	id: ut,
-	path: Q,
-	provider: O(),
-	payload: h.Unknown,
+	return Pt();
+}, It = D({ scope: "@voltro/plugin-billing" }), Lt = "billing", $ = "/billing/webhook", Rt = (e) => oe({
+	id: Lt,
+	path: $,
+	provider: A(),
+	payload: ne.Unknown,
 	handler: async (t) => {
-		let n = e.provider.verifyWebhook !== void 0 && e.webhookSecret !== null && e.webhookSecret !== void 0 ? await f.runPromise(e.provider.verifyWebhook({
+		let n = e.provider.verifyWebhook !== void 0 && e.webhookSecret !== null && e.webhookSecret !== void 0 ? await p.runPromise(e.provider.verifyWebhook({
 			rawBody: t.rawBody,
 			signatureHeader: t.headers["stripe-signature"] ?? "",
 			secret: e.webhookSecret ?? ""
-		})) : t.body, r = await f.runPromise(e.provider.normalizeEvent(n));
+		})) : t.body, r = await p.runPromise(e.provider.normalizeEvent(n));
 		if (r === null) return;
-		await f.runPromise(e.service.applyEvent(r));
+		await p.runPromise(e.service.applyEvent(r));
 		let i = e.onEvent?.[r._tag];
-		i !== void 0 && await f.runPromise(i(r).pipe(f.catchAllCause((e) => f.sync(() => {
-			lt.warn("billing onEvent side effect failed", {
+		i !== void 0 && await p.runPromise(i(r).pipe(p.catchAllCause((e) => p.sync(() => {
+			It.warn("billing onEvent side effect failed", {
 				event: r._tag,
 				cause: String(e)
 			});
 		}))));
 	}
-}), ft = (e) => D(dt(e), {
+}), zt = (e) => k(Rt(e), {
 	resolveSecret: () => Promise.resolve(e.webhookSecret),
 	...e.idempotencyCache === void 0 ? {} : { idempotencyCache: e.idempotencyCache },
 	log: (e) => {
-		e.status >= 400 && lt.warn("billing webhook rejected", { ...e });
+		e.status >= 400 && It.warn("billing webhook rejected", { ...e });
 	}
-}), pt = (e) => e === null ? null : {
+}), Bt = (e) => e === null ? null : {
 	plan: e.plan,
 	status: e.status,
 	quantity: e.quantity,
 	currentPeriodEnd: e.currentPeriodEnd ? e.currentPeriodEnd.toISOString() : null,
 	cancelAt: e.cancelAt ? e.cancelAt.toISOString() : null
-}, $ = g([{
+}, Vt = g([{
 	name: "STRIPE_SECRET_KEY",
 	required: !1,
 	secret: !0,
@@ -1003,40 +1391,50 @@ var A = (e, t, n, r) => ({
 	required: !1,
 	secret: !0,
 	description: "Stripe webhook signing secret (whsec_…) for verifying webhook payloads."
-}]), mt = (t = {}) => {
-	let n = process.env, p = q(t.plans ?? {}), m = ct({
+}]), Ht = "@voltro/plugin-billing", Ut = (t = {}) => {
+	let n = process.env, m = pt(t.plans ?? {}), h = Ft({
 		...t.provider === void 0 ? {} : { provider: t.provider },
 		...t.apiKey === void 0 ? {} : { apiKey: t.apiKey },
-		planForPriceId: p.planForPriceId,
+		planForPriceId: m.planForPriceId,
 		env: n
-	}), h = t.webhookSecret ?? $.read("STRIPE_WEBHOOK_SECRET") ?? null;
-	x({
+	}), ne = t.webhookSecret ?? Vt.read("STRIPE_WEBHOOK_SECRET") ?? null, g = be(t.dunning, n);
+	S({
+		source: "plugin",
 		table: L,
 		timeColumn: "updatedAt",
-		ttlMs: ie(process.env.VOLTRO_BILLING_USAGE_TTL_HOURS, 24 * 400),
+		ttlMs: C(process.env.VOLTRO_BILLING_USAGE_TTL_HOURS, 24 * 400),
 		label: "billing usage counters"
-	}), x({
-		table: J,
+	}), S({
+		source: "plugin",
+		table: Y,
 		timeColumn: "claimedAt",
-		ttlMs: ie(process.env.VOLTRO_BILLING_FLUSH_CLAIM_TTL_HOURS, 1),
+		ttlMs: C(process.env.VOLTRO_BILLING_FLUSH_CLAIM_TTL_HOURS, 1),
 		label: "billing flush claims"
+	}), S({
+		source: "plugin",
+		table: R,
+		timeColumn: "sentAt",
+		ttlMs: C(process.env.VOLTRO_BILLING_DUNNING_TTL_HOURS, 24 * 400),
+		label: "billing dunning notices"
 	});
-	let { service: g, holder: _ } = we({
-		provider: m,
-		plans: p,
+	let { service: _, holder: v } = Je({
+		provider: h,
+		plans: m,
 		...t.attempts === void 0 ? {} : { attempts: t.attempts },
 		...t.checkout === void 0 ? {} : { checkout: t.checkout },
-		...t.resolveEntitlementLimit === void 0 ? {} : { resolveEntitlementLimit: t.resolveEntitlementLimit }
-	}), v = Te(g), re = ft({
-		provider: m,
-		service: g,
-		webhookSecret: h,
+		...t.resolveEntitlementLimit === void 0 ? {} : { resolveEntitlementLimit: t.resolveEntitlementLimit },
+		dunning: g
+	}), y = Ye(_), b = zt({
+		provider: h,
+		service: _,
+		webhookSecret: ne,
 		...t.onEvent === void 0 ? {} : { onEvent: t.onEvent }
-	}), y = {
+	}), x = {
 		method: "POST",
-		path: Q,
+		path: $,
+		originGuard: "exempt",
 		handle: async (e) => {
-			let t = await re({
+			let t = await b({
 				method: e.method,
 				path: e.path,
 				headers: e.headers,
@@ -1049,12 +1447,12 @@ var A = (e, t, n, r) => ({
 				...t.headers === void 0 ? {} : { headers: { ...t.headers } }
 			};
 		}
-	}, b = [
+	}, w = [
 		{
 			...ee,
 			execute: (e, t) => {
 				let n = e;
-				return g.startCheckout({
+				return _.startCheckout({
 					tenantId: t.request.subject.tenantId ?? "",
 					plan: n.plan,
 					successUrl: n.successUrl,
@@ -1064,24 +1462,37 @@ var A = (e, t, n, r) => ({
 			}
 		},
 		{
-			...c,
+			...u,
 			execute: (e, t) => {
 				let n = e;
-				return g.portalUrl(t.request.subject.tenantId ?? "", n.returnUrl);
+				return _.portalUrl(t.request.subject.tenantId ?? "", n.returnUrl);
 			}
 		},
 		{
-			...d,
-			execute: (e, t) => g.subscription(t.request.subject.tenantId ?? "").pipe(f.map((e) => ({ subscription: pt(e) })))
+			...te,
+			execute: (e, t) => _.subscription(t.request.subject.tenantId ?? "").pipe(p.map((e) => ({ subscription: Bt(e) })))
 		},
 		{
-			...l,
+			...c,
+			execute: (e, t) => _.entitlementStatus(t.request.subject.tenantId ?? "").pipe(p.map((e) => ({
+				plan: e.plan,
+				billedPlan: e.billedPlan,
+				status: e.status,
+				entitled: e.entitled,
+				inGrace: e.inGrace,
+				graceEndsAt: e.graceEndsAt ? e.graceEndsAt.toISOString() : null,
+				lockedSince: e.lockedSince ? e.lockedSince.toISOString() : null,
+				lockout: e.lockout
+			})))
+		},
+		{
+			...d,
 			execute: (e, t) => {
 				let n = e;
-				return g.previewChange(t.request.subject.tenantId ?? "", {
+				return _.previewChange(t.request.subject.tenantId ?? "", {
 					...n.plan === void 0 ? {} : { plan: n.plan },
 					...n.quantity === void 0 ? {} : { quantity: n.quantity }
-				}).pipe(f.map((e) => ({
+				}).pipe(p.map((e) => ({
 					plan: e.plan,
 					quantity: e.quantity,
 					prorationMinor: e.prorationMinor,
@@ -1090,24 +1501,24 @@ var A = (e, t, n, r) => ({
 			}
 		},
 		{
-			...s,
-			execute: (e, t) => g.invoices(t.request.subject.tenantId ?? "").pipe(f.map((e) => ({ invoices: e.map((e) => ({
+			...l,
+			execute: (e, t) => _.invoices(t.request.subject.tenantId ?? "").pipe(p.map((e) => ({ invoices: e.map((e) => ({
 				...e,
 				createdAt: e.createdAt?.toISOString() ?? null
 			})) })))
 		},
 		{
-			...u,
+			...f,
 			execute: (e, t) => {
 				let n = e;
-				return g.reportUsage(t.request.subject.tenantId ?? "", n.key, n.quantity).pipe(f.map(() => ({ ok: !0 })));
+				return _.reportUsage(t.request.subject.tenantId ?? "", n.key, n.quantity).pipe(p.map(() => ({ ok: !0 })));
 			}
 		},
 		{
-			...a,
+			...o,
 			execute: (e, t) => {
 				let n = e;
-				return g.changePlan(t.request.subject.tenantId ?? "", n.plan).pipe(f.map((e) => ({
+				return _.changePlan(t.request.subject.tenantId ?? "", n.plan).pipe(p.map((e) => ({
 					plan: e.plan,
 					quantity: e.quantity,
 					prorationMinor: e.prorationMinor,
@@ -1116,10 +1527,10 @@ var A = (e, t, n, r) => ({
 			}
 		},
 		{
-			...o,
+			...s,
 			execute: (e, t) => {
 				let n = e;
-				return g.changeSeats(t.request.subject.tenantId ?? "", n.quantity).pipe(f.map((e) => ({
+				return _.changeSeats(t.request.subject.tenantId ?? "", n.quantity).pipe(p.map((e) => ({
 					plan: e.plan,
 					quantity: e.quantity,
 					prorationMinor: e.prorationMinor,
@@ -1127,101 +1538,120 @@ var A = (e, t, n, r) => ({
 				})));
 			}
 		}
-	], S = (e, t) => ({
+	], T = (e, t) => ({
 		kind: "json",
 		status: e,
 		data: { error: t }
-	}), C = [{
+	}), E = [{
 		method: "GET",
 		path: "/stats",
 		description: "Billing config: provider, declared plans, enforced tags",
-		handler: () => f.succeed({
+		handler: () => p.succeed({
 			kind: "json",
 			data: {
-				provider: m.name,
-				supportsMeteredUsage: m.supportsMeteredUsage,
-				plans: p.planIds(),
+				provider: h.name,
+				supportsMeteredUsage: h.supportsMeteredUsage,
+				plans: m.planIds(),
 				enforce: t.enforce ? Object.keys(t.enforce) : [],
-				webhookPath: Q
+				webhookPath: $
 			}
 		})
 	}, {
 		method: "GET",
 		path: "/usage",
 		description: "Pending (un-flushed) metered usage counters",
-		handler: () => _.stores.usage.pending().pipe(f.map((e) => ({
+		handler: () => v.stores.usage.pending().pipe(p.map((e) => ({
 			kind: "json",
 			data: { usage: e }
-		})), f.catchAll((e) => f.succeed(S(500, e.message))))
-	}], w = [{
-		schema: e,
-		import: {
-			module: "@voltro/plugin-billing/errors",
-			name: "BillingError"
-		}
-	}, {
-		schema: r,
-		import: {
-			module: "@voltro/plugin-billing/errors",
-			name: "EntitlementExceeded"
+		})), p.catchAll((e) => p.succeed(T(500, e.message))))
+	}], D = [
+		{
+			schema: e,
+			import: {
+				module: "@voltro/plugin-billing/errors",
+				name: "BillingError"
+			}
+		},
+		{
+			schema: r,
+			import: {
+				module: "@voltro/plugin-billing/errors",
+				name: "EntitlementExceeded"
+			}
+		},
+		{
+			schema: i,
+			import: {
+				module: "@voltro/plugin-billing/errors",
+				name: "SubscriptionLocked"
+			}
 		}
-	}], T = t.enforce, E = T !== void 0 && Object.keys(T).length > 0 ? N(T, g) : void 0, D = t.metering;
-	D !== void 0 && De(D);
-	let O = D !== void 0 && Object.keys(D).length > 0 ? Pe(g, D) : void 0, k = D !== void 0 && ze(D), A = te([O, E].filter((e) => e !== void 0)), j, M, P = [
+	], O = t.enforce, oe = O !== void 0 && Object.keys(O).length > 0 ? ce(O, _) : void 0, k = t.metering;
+	k !== void 0 && Ze(k);
+	let A = k !== void 0 && Object.keys(k).length > 0 ? ot(_, k) : void 0, j = k !== void 0 && dt(k), M = re([A, oe].filter((e) => e !== void 0)), se, N, P = [
 		"store:write",
 		"inspect:read",
 		"inspect:write",
 		"network:outbound:*",
-		...A === void 0 ? [] : ["rpc:intercept:mutation", "rpc:intercept:action"],
-		...O === void 0 ? [] : ["rpc:intercept:query"],
-		...k ? ["store:changes:read"] : []
+		...M === void 0 ? [] : ["rpc:intercept:mutation", "rpc:intercept:action"],
+		...A === void 0 ? [] : ["rpc:intercept:query"],
+		...j ? ["store:changes:read"] : []
 	];
-	return ne({
-		name: t.name ? `@voltro/plugin-billing#${t.name}` : "@voltro/plugin-billing",
+	return ie({
+		name: ae({
+			base: Ht,
+			alias: t.alias,
+			instance: t.name
+		}),
+		baseName: Ht,
 		description: "Billing — subscriptions, plans, entitlements + usage metering over a pluggable BillingProvider (Stripe + mock). Ships the BillingService, the requireEntitlement() in-handler guard + the enforce-map interceptor, the /billing/webhook receiver (riding @voltro/plugin-webhooks for signature + idempotency), and the _voltro_billing_* tables. Money is integer minor units.",
 		permissions: P,
-		declaredEnv: $.declared,
-		services: v,
-		routes: b,
-		rpcClientDescriptors: i,
-		httpRoutes: [y],
-		inspectEndpoints: C,
-		extendSchema: { tables: [...le(), He] },
-		errorSchemas: w,
-		...A === void 0 ? {} : {
-			interceptMutation: A,
-			interceptAction: A
+		declaredEnv: Vt.declared,
+		services: y,
+		routes: w,
+		rpcClientDescriptors: a,
+		httpRoutes: [x],
+		inspectEndpoints: E,
+		extendSchema: { tables: [
+			...pe(),
+			ht,
+			me
+		] },
+		errorSchemas: D,
+		...M === void 0 ? {} : {
+			interceptMutation: M,
+			interceptAction: M
 		},
-		...O === void 0 ? {} : { interceptQuery: O },
-		...k ? { onChangeEvent: Fe(g, D) } : {},
+		...A === void 0 ? {} : { interceptQuery: A },
+		...j ? { onChangeEvent: st(_, k) } : {},
 		bindDataStore: (e) => {
-			_.stores = W(e), j = e;
+			v.stores = Ke(e), se = e;
 		},
-		onActivate: (e) => f.sync(() => {
+		onActivate: (e) => p.sync(() => {
 			e.logger.info("billing active", {
-				provider: m.name,
-				plans: p.planIds().length,
-				enforce: T ? Object.keys(T).length : 0,
-				metering: D ? Object.keys(D).length : 0,
-				webhook: Q
+				provider: h.name,
+				plans: m.planIds().length,
+				enforce: O ? Object.keys(O).length : 0,
+				metering: k ? Object.keys(k).length : 0,
+				webhook: $
 			});
-			let n = t.flushIntervalMs ?? 6e4, r = D, i = r !== void 0 && Object.keys(r).length > 0;
+			let n = t.flushIntervalMs ?? 6e4, r = k, i = r !== void 0 && Object.keys(r).length > 0;
 			if (n > 0) {
 				let e = process.env.HOSTNAME ?? `pid-${process.pid}`;
-				M = setInterval(() => {
-					let t = j;
+				N = setInterval(() => {
+					let t = se;
 					if (t === void 0) return;
 					let a = Date.now();
 					(async () => {
-						await We(t, Ue(a, n), e, a) && i && await f.runPromise(Re(g, t, r).pipe(f.catchAll(() => f.void)));
+						await _t(t, gt(a, n), e, a) && i && await p.runPromise(ut(_, t, r).pipe(p.catchAll(() => p.void)));
 					})();
-				}, n), M.unref?.();
+				}, n), N.unref?.();
 			}
 		}),
-		onDeactivate: () => f.sync(() => {
-			M !== void 0 && (clearInterval(M), M = void 0);
+		onDeactivate: () => p.sync(() => {
+			N !== void 0 && (clearInterval(N), N = void 0);
 		})
 	});
 };
 //#endregion
-export { P as BILLING_CUSTOMERS_TABLE, J as BILLING_FLUSH_CLAIMS_TABLE, I as BILLING_INVOICES_TABLE, F as BILLING_SUBSCRIPTIONS_TABLE, L as BILLING_USAGE_TABLE, ut as BILLING_WEBHOOK_ID, Q as BILLING_WEBHOOK_PATH, e as BillingError, t as BillingService, n as DEFAULT_PLAN, r as EntitlementExceeded, ae as billingCustomersTable, He as billingFlushClaimsTable, se as billingInvoicesTable, mt as billingPlugin, Te as billingServiceLayer, oe as billingSubscriptionsTable, le as billingTables, ce as billingUsageTable, dt as billingWebhookDescriptor, we as buildBillingService, N as buildEnforceInterceptor, q as buildPlanRegistry, We as claimFlushWindow, W as dataStoreStores, Ve as emptyPlanRegistry, A as evaluateEntitlement, Ue as flushWindowKey, Se as memoryStores, st as mockProvider, ft as mountBillingWebhook, nt as normalizeStripeEvent, G as periodKey, M as requireEntitlement, ct as resolveProvider, it as stripeProvider };
+export { P as BILLING_CUSTOMERS_TABLE, R as BILLING_DUNNING_NOTICES_TABLE, Y as BILLING_FLUSH_CLAIMS_TABLE, I as BILLING_INVOICES_TABLE, F as BILLING_SUBSCRIPTIONS_TABLE, L as BILLING_USAGE_TABLE, Lt as BILLING_WEBHOOK_ID, $ as BILLING_WEBHOOK_PATH, e as BillingError, t as BillingService, ge as DEFAULT_DUNNING_STEPS, _e as DEFAULT_GRACE_HOURS, ve as DEFAULT_LOCKOUT, n as DEFAULT_PLAN, he as DUNNING_LOCK_STEP_ID, r as EntitlementExceeded, i as SubscriptionLocked, le as billingCustomersTable, me as billingDunningNoticesTable, ht as billingFlushClaimsTable, de as billingInvoicesTable, Ut as billingPlugin, Ye as billingServiceLayer, ue as billingSubscriptionsTable, pe as billingTables, fe as billingUsageTable, Rt as billingWebhookDescriptor, Je as buildBillingService, ce as buildEnforceInterceptor, pt as buildPlanRegistry, _t as claimFlushWindow, je as dataStoreDunningNoticeStore, Ke as dataStoreStores, Ee as defaultDunningEmail, we as dueSteps, De as dunningMailNotifier, mt as emptyPlanRegistry, Se as episodeKeyOf, z as evaluateBillingEntitlement, j as evaluateEntitlement, gt as flushWindowKey, Ce as graceEndOf, U as isStaleStatusEvent, ke as memoryDunningNoticeStore, Ge as memoryStores, Pt as mockProvider, zt as mountBillingWebhook, kt as normalizeStripeEvent, q as periodKey, N as requireEntitled, se as requireEntitlement, be as resolveDunningConfig, Ft as resolveProvider, jt as stripeProvider };