@voltro/plugin-billing 0.80.0 → 0.82.0

package/dist/index.js

@@ -1,35 +1,38 @@
 import { BillingError as e, BillingService as t, DEFAULT_PLAN as n, EntitlementExceeded as r, SubscriptionLocked as i } from "./types.js";
-import { billingRpcClientImports as a, changePlanDescriptor as o, changeSeatsDescriptor as s, entitlementStatusDescriptor as c, invoicesDescriptor as l, portalUrlDescriptor as u, previewChangeDescriptor as d, reportUsageDescriptor as f, startCheckoutDescriptor as ee, subscriptionDescriptor as te } from "./rpc.js";
-import { Effect as p, Layer as m, Schedule as h, Schema as ne } from "effect";
-import { pluginEnv as re } from "@voltro/env";
-import { composeRpcInterceptors as ie, definePlugin as ae, pluginInstanceName as oe } from "@voltro/protocol";
-import { OccurrenceCounter as g, and as _, changeDigest as se, composeChangeKey as ce, eq as v, gte as le, id as y, integer as b, occurrenceWindowMs as ue, registerRetention as x, retentionTtlMsFromEnv as S, table as C, text as w, timestamp as T } from "@voltro/database";
-import { replicaId as de } from "@voltro/protocol/identity";
-import { createLogger as E } from "@voltro/logger";
-import D from "stripe";
-import { defineIncomingWebhook as fe, mountIncomingWebhook as pe } from "@voltro/plugin-webhooks";
-import { stripeProvider as O } from "@voltro/plugin-webhooks/providers";
+import { billingRpcClientImports as a, cancelSubscriptionDescriptor as o, changePlanDescriptor as s, changeSeatsDescriptor as c, entitlementStatusDescriptor as l, invoicesDescriptor as u, portalUrlDescriptor as d, previewChangeDescriptor as f, reportUsageDescriptor as p, resumeSubscriptionDescriptor as m, startCheckoutDescriptor as h, subscriptionDescriptor as g, syncDescriptor as _ } from "./rpc.js";
+import { Effect as v, Layer as y, Schedule as b, Schema as x } from "effect";
+import { pluginEnv as S } from "@voltro/env";
+import { composeRpcInterceptors as C, definePlugin as ee, pluginInstanceName as w } from "@voltro/protocol";
+import { OccurrenceCounter as T, and as E, changeDigest as te, composeChangeKey as D, eq as O, gte as ne, id as k, integer as A, occurrenceWindowMs as re, registerRetention as ie, retentionTtlMsFromEnv as ae, table as j, text as M, timestamp as N } from "@voltro/database";
+import { replicaId as oe } from "@voltro/protocol/identity";
+import { createLogger as P } from "@voltro/logger";
+import F from "stripe";
+import { defineIncomingWebhook as I, mountIncomingWebhook as L } from "@voltro/plugin-webhooks";
+import { stripeProvider as se } from "@voltro/plugin-webhooks/providers";
+import { execFileSync as R } from "node:child_process";
+import { chmodSync as z, existsSync as B, readFileSync as ce, realpathSync as le, writeFileSync as ue } from "node:fs";
+import { dirname as de, resolve as V } from "node:path";
 //#region src/entitlement.ts
-var k = (e, t, n, r) => ({
+var fe = (e, t, n, r) => ({
 	allowed: !Number.isFinite(t) || r <= 0 || n + r <= t,
 	entitlement: e,
 	limit: t,
 	used: n,
 	cost: r
-}), A = (e) => e.tenantId, me = (e, n, i) => p.gen(function* () {
-	let a = A(e.request.subject);
-	if (a === null) return i <= 0 ? void 0 : yield* p.fail(new r({
+}), pe = (e) => e.tenantId, me = (e, n, i) => v.gen(function* () {
+	let a = pe(e.request.subject);
+	if (a === null) return i <= 0 ? void 0 : yield* v.fail(new r({
 		entitlement: n,
 		limit: 0,
 		used: 0,
 		cost: i
 	}));
 	yield* (yield* t).consumeEntitlement(a, n, i);
-}), he = (e) => p.gen(function* () {
-	let n = A(e.request.subject);
+}), he = (e) => v.gen(function* () {
+	let n = pe(e.request.subject);
 	if (n === null) return;
 	let r = yield* (yield* t).entitlementStatus(n);
-	if (!r.entitled) return yield* p.fail(new i({
+	if (!r.entitled) return yield* v.fail(new i({
 		tenantId: n,
 		status: r.status,
 		lockedSince: (r.lockedSince ?? /* @__PURE__ */ new Date()).toISOString(),
@@ -39,52 +42,52 @@ var k = (e, t, n, r) => ({
 	let a = e[i.tag];
 	if (a === void 0) return n;
 	let o = a.cost ?? 1, s = i.subject.tenantId;
-	return s === null ? o <= 0 ? n : p.fail(new r({
+	return s === null ? o <= 0 ? n : v.fail(new r({
 		entitlement: a.entitlement,
 		limit: 0,
 		used: 0,
 		cost: o
-	})) : p.flatMap(t.consumeEntitlement(s, a.entitlement, o), () => n);
-}, j = "_voltro_billing_customers", M = "_voltro_billing_subscriptions", N = "_voltro_billing_invoices", P = "_voltro_billing_usage", _e = C(j, {
-	id: y({ prefix: "bcust" }),
-	tenantId: w(),
-	provider: w(),
-	providerCustomerId: w(),
-	createdAt: T(),
-	updatedAt: T()
-}).index("byBillingCustomerTenant", ["tenantId"]).index("byBillingProviderCustomer", ["providerCustomerId"]), ve = C(M, {
-	id: y({ prefix: "bsub" }),
-	tenantId: w(),
-	provider: w(),
-	providerSubscriptionId: w(),
-	plan: w(),
-	status: w(),
-	quantity: b().default(1),
-	currentPeriodStart: T().nullable(),
-	currentPeriodEnd: T().nullable(),
-	cancelAt: T().nullable(),
-	pastDueSince: T().nullable(),
-	statusEventAt: T().nullable(),
-	createdAt: T(),
-	updatedAt: T()
-}).index("byBillingSubscriptionTenant", ["tenantId"]).index("byBillingProviderSubscription", ["providerSubscriptionId"]).index("byBillingSubscriptionStatus", ["status"]), ye = C(N, {
-	id: y({ prefix: "binv" }),
-	tenantId: w(),
-	provider: w(),
-	providerInvoiceId: w(),
-	amountMinor: b(),
-	currency: w(),
-	status: w(),
-	statusEventAt: T().nullable(),
-	createdAt: T()
-}).index("byBillingInvoiceTenant", ["tenantId"]).index("byBillingProviderInvoice", ["providerInvoiceId"]), be = C(P, {
-	id: y({ prefix: "buse" }),
-	tenantId: w().maxLength(191),
-	entitlementKey: w().maxLength(191),
-	period: w().maxLength(16),
-	used: b().default(0),
-	reportedToProvider: b().default(0),
-	updatedAt: T()
+	})) : v.flatMap(t.consumeEntitlement(s, a.entitlement, o), () => n);
+}, H = "_voltro_billing_customers", U = "_voltro_billing_subscriptions", W = "_voltro_billing_invoices", G = "_voltro_billing_usage", _e = j(H, {
+	id: k({ prefix: "bcust" }),
+	tenantId: M(),
+	provider: M(),
+	providerCustomerId: M(),
+	createdAt: N(),
+	updatedAt: N()
+}).index("byBillingCustomerTenant", ["tenantId"]).index("byBillingProviderCustomer", ["providerCustomerId"]), ve = j(U, {
+	id: k({ prefix: "bsub" }),
+	tenantId: M(),
+	provider: M(),
+	providerSubscriptionId: M(),
+	plan: M(),
+	status: M(),
+	quantity: A().default(1),
+	currentPeriodStart: N().nullable(),
+	currentPeriodEnd: N().nullable(),
+	cancelAt: N().nullable(),
+	pastDueSince: N().nullable(),
+	statusEventAt: N().nullable(),
+	createdAt: N(),
+	updatedAt: N()
+}).index("byBillingSubscriptionTenant", ["tenantId"]).index("byBillingProviderSubscription", ["providerSubscriptionId"]).index("byBillingSubscriptionStatus", ["status"]), ye = j(W, {
+	id: k({ prefix: "binv" }),
+	tenantId: M(),
+	provider: M(),
+	providerInvoiceId: M(),
+	amountMinor: A(),
+	currency: M(),
+	status: M(),
+	statusEventAt: N().nullable(),
+	createdAt: N()
+}).index("byBillingInvoiceTenant", ["tenantId"]).index("byBillingProviderInvoice", ["providerInvoiceId"]), be = j(G, {
+	id: k({ prefix: "buse" }),
+	tenantId: M().maxLength(191),
+	entitlementKey: M().maxLength(191),
+	period: M().maxLength(16),
+	used: A().default(0),
+	reportedToProvider: A().default(0),
+	updatedAt: N()
 }).unique("byBillingUsageWindow", [
 	"tenantId",
 	"entitlementKey",
@@ -94,17 +97,17 @@ var k = (e, t, n, r) => ({
 	ve,
 	ye,
 	be
-], F = "_voltro_billing_dunning_notices", Se = C(F, {
-	id: y({ prefix: "bdun" }),
-	tenantId: w().maxLength(191),
-	episode: w().maxLength(32),
-	stepId: w().maxLength(64),
-	sentAt: T()
+], Se = "_voltro_billing_dunning_notices", Ce = j(Se, {
+	id: k({ prefix: "bdun" }),
+	tenantId: M().maxLength(191),
+	episode: M().maxLength(32),
+	stepId: M().maxLength(64),
+	sentAt: N()
 }).unique("byBillingDunningNotice", [
 	"tenantId",
 	"episode",
 	"stepId"
-]), I = "locked", Ce = [
+]), we = "locked", Te = [
 	{
 		id: "payment-failed",
 		afterHours: 0
@@ -117,28 +120,28 @@ var k = (e, t, n, r) => ({
 		id: "final-warning",
 		afterHours: 144
 	}
-], we = 168, Te = "hard", Ee = (e, t, n) => {
+], Ee = 168, De = "hard", Oe = (e, t, n) => {
 	if (e === void 0 || e.trim() === "") return t;
 	let r = Number(e);
 	if (!Number.isFinite(r) || r < 0) throw Error(`billingPlugin: ${n} must be a non-negative number, got '${e}'`);
 	return r;
-}, L = (e, t) => {
+}, ke = (e, t) => {
 	let n = t.VOLTRO_BILLING_DUNNING;
 	if (n !== void 0 && n !== "" && n !== "on" && n !== "off") throw Error(`billingPlugin: VOLTRO_BILLING_DUNNING must be 'on' or 'off', got '${n}'`);
 	let r = n === "off" ? !1 : n === "on" ? !0 : e?.enabled ?? !0, i = t.VOLTRO_BILLING_LOCKOUT;
 	if (i !== void 0 && i !== "" && i !== "hard" && i !== "soft") throw Error(`billingPlugin: VOLTRO_BILLING_LOCKOUT must be 'hard' or 'soft', got '${i}'`);
-	let a = i === "hard" || i === "soft" ? i : e?.lockout ?? "hard", o = Ee(t.VOLTRO_BILLING_GRACE_HOURS, e?.graceHours ?? 168, "VOLTRO_BILLING_GRACE_HOURS"), s = e?.steps ?? Ce, c = t.VOLTRO_BILLING_DUNNING_STEP_HOURS, l = s;
+	let a = i === "hard" || i === "soft" ? i : e?.lockout ?? "hard", o = Oe(t.VOLTRO_BILLING_GRACE_HOURS, e?.graceHours ?? 168, "VOLTRO_BILLING_GRACE_HOURS"), s = e?.steps ?? Te, c = t.VOLTRO_BILLING_DUNNING_STEP_HOURS, l = s;
 	if (c !== void 0 && c.trim() !== "") {
 		let e = c.split(",").map((e) => e.trim());
 		if (e.length !== s.length) throw Error(`billingPlugin: VOLTRO_BILLING_DUNNING_STEP_HOURS lists ${e.length} value(s) but the sequence declares ${s.length} step(s) (${s.map((e) => e.id).join(", ")})`);
 		l = s.map((t, n) => ({
 			id: t.id,
-			afterHours: Ee(e[n], t.afterHours, "VOLTRO_BILLING_DUNNING_STEP_HOURS")
+			afterHours: Oe(e[n], t.afterHours, "VOLTRO_BILLING_DUNNING_STEP_HOURS")
 		}));
 	}
 	let u = /* @__PURE__ */ new Set();
 	for (let e of l) {
-		if (e.id === "locked") throw Error(`billingPlugin: '${I}' is the reserved lockout step id`);
+		if (e.id === "locked") throw Error(`billingPlugin: '${we}' is the reserved lockout step id`);
 		if (u.has(e.id)) throw Error(`billingPlugin: duplicate dunning step id '${e.id}'`);
 		u.add(e.id);
 	}
@@ -151,10 +154,10 @@ var k = (e, t, n, r) => ({
 		...e?.resolveRecipient === void 0 ? {} : { resolveRecipient: e.resolveRecipient },
 		...e?.portalReturnUrl === void 0 ? {} : { portalReturnUrl: e.portalReturnUrl }
 	};
-}, De = 36e5, Oe = (e) => String(e.getTime()), ke = (e, t) => new Date(e.getTime() + t * De), Ae = (e, t, n) => {
-	let r = (n.getTime() - t.getTime()) / De;
+}, Ae = 36e5, je = (e) => String(e.getTime()), Me = (e, t) => new Date(e.getTime() + t * Ae), Ne = (e, t, n) => {
+	let r = (n.getTime() - t.getTime()) / Ae;
 	return e.filter((e) => r >= e.afterHours);
-}, R = (e, t, r, i) => {
+}, Pe = (e, t, r, i) => {
 	let a = {
 		tenantId: e?.tenantId ?? i ?? "",
 		lockout: t.lockout
@@ -200,7 +203,7 @@ var k = (e, t, n, r) => ({
 			graceEndsAt: null,
 			lockedSince: null
 		};
-		let i = ke(e.pastDueSince, t.graceHours), o = r.getTime() >= i.getTime();
+		let i = Me(e.pastDueSince, t.graceHours), o = r.getTime() >= i.getTime();
 		return {
 			...a,
 			plan: o && t.lockout === "hard" ? n : e.plan,
@@ -222,29 +225,29 @@ var k = (e, t, n, r) => ({
 		graceEndsAt: null,
 		lockedSince: null
 	};
-}, je = (e) => e.toISOString().slice(0, 10), Me = (e) => {
+}, Fe = (e) => e.toISOString().slice(0, 10), Ie = (e) => {
 	let t = e.portalUrl, n = t === null ? "<p>Please update your payment method in the billing settings.</p>" : `<p><a href="${t}">Update your payment method</a></p>`, r = t === null ? "Please update your payment method in the billing settings." : `Update your payment method: ${t}`;
 	if (e.locked) return {
 		subject: "Your subscription has been suspended",
 		html: `<p>We were unable to collect payment, and your subscription is now suspended.</p>${n}`,
 		text: `We were unable to collect payment, and your subscription is now suspended.\n\n${r}`
 	};
-	let i = je(e.graceEndsAt), a = e.stepId === "payment-failed" ? "Your last payment could not be collected." : "Your payment is still outstanding.";
+	let i = Fe(e.graceEndsAt), a = e.stepId === "payment-failed" ? "Your last payment could not be collected." : "Your payment is still outstanding.";
 	return {
 		subject: "Action needed: your payment could not be collected",
 		html: `<p>${a} Your subscription stays active until ${i}.</p>${n}`,
 		text: `${a} Your subscription stays active until ${i}.\n\n${r}`
 	};
-}, Ne = (e) => (t) => t.to === null ? p.void : e.send({
+}, Le = (e) => (t) => t.to === null ? v.void : e.send({
 	to: t.to,
 	subject: t.subject,
 	html: t.html,
 	text: t.text
-}).pipe(p.asVoid), Pe = (e, t, n) => `${e}\u0000${t}\u0000${n}`, Fe = () => {
+}).pipe(v.asVoid), Re = (e, t, n) => `${e}\u0000${t}\u0000${n}`, ze = () => {
 	let e = /* @__PURE__ */ new Map();
 	return {
-		claim: (t, n, r, i) => p.sync(() => {
-			let a = Pe(t, n, r);
+		claim: (t, n, r, i) => v.sync(() => {
+			let a = Re(t, n, r);
 			return !e.has(a) && (e.set(a, {
 				tenantId: t,
 				episode: n,
@@ -252,12 +255,12 @@ var k = (e, t, n, r) => ({
 				sentAt: i
 			}), !0);
 		}),
-		sentSteps: (t, n) => p.sync(() => [...e.values()].filter((e) => e.tenantId === t && e.episode === n))
+		sentSteps: (t, n) => v.sync(() => [...e.values()].filter((e) => e.tenantId === t && e.episode === n))
 	};
-}, Ie = () => `bdun_${Math.random().toString(36).slice(2)}${Date.now().toString(36)}`, Le = (t) => ({
-	claim: (n, r, i, a) => p.tryPromise({
+}, Be = () => `bdun_${Math.random().toString(36).slice(2)}${Date.now().toString(36)}`, Ve = (t) => ({
+	claim: (n, r, i, a) => v.tryPromise({
 		try: async () => {
-			let e = Ie(), o = await t.insertIgnore(F, {
+			let e = Be(), o = await t.insertIgnore(Se, {
 				id: e,
 				tenantId: n,
 				episode: r,
@@ -276,10 +279,10 @@ var k = (e, t, n, r) => ({
 			transient: !0
 		})
 	}),
-	sentSteps: (n, r) => p.tryPromise({
+	sentSteps: (n, r) => v.tryPromise({
 		try: async () => (await t.query({
-			table: F,
-			predicate: _(v("tenantId", n), v("episode", r)),
+			table: Se,
+			predicate: E(O("tenantId", n), O("episode", r)),
 			order: [],
 			take: void 0,
 			skip: void 0,
@@ -296,91 +299,132 @@ var k = (e, t, n, r) => ({
 			transient: !0
 		})
 	})
-}), z = (e) => `${e}_${Math.random().toString(36).slice(2)}${Date.now().toString(36)}`, B = (t, n) => p.tryPromise({
+}), He = (e) => `${e}_${Math.random().toString(36).slice(2)}${Date.now().toString(36)}`, Ue = P({ scope: "@voltro/plugin-billing" }), K = (t, n) => v.tryPromise({
 	try: t,
-	catch: (t) => new e({
+	catch: (t) => (Ue.warn("billing store operation failed", {
 		source: n,
-		message: String(t?.message ?? t),
+		detail: String(t?.message ?? t)
+	}), new e({
+		source: n,
+		message: `${n} failed`,
 		transient: !0
-	})
-}), V = (e) => ({
+	}))
+}), q = (e) => ({
 	table: e.table,
 	predicate: e.predicate,
 	order: e.order ?? [],
 	take: e.take,
 	skip: void 0,
 	projection: void 0
-}), Re = () => {
+}), We = () => {
 	let e = /* @__PURE__ */ new Map();
 	return {
-		upsert: (t) => p.sync(() => {
+		upsert: (t) => v.sync(() => {
 			e.set(t.tenantId, t);
 		}),
-		getByTenant: (t) => p.sync(() => e.get(t) ?? null)
+		getByTenant: (t) => v.sync(() => e.get(t) ?? null),
+		getByProviderCustomerId: (t) => v.sync(() => [...e.values()].find((e) => e.providerCustomerId === t) ?? null),
+		list: () => v.sync(() => [...e.values()]),
+		removeByProviderCustomerId: (t) => v.sync(() => {
+			for (let [n, r] of e) if (r.providerCustomerId === t) return e.delete(n), n;
+			return null;
+		})
 	};
-}, ze = (e) => ({
+}, Ge = (e) => ({
 	tenantId: String(e.tenantId),
 	provider: String(e.provider),
 	providerCustomerId: String(e.providerCustomerId)
-}), Be = (e) => ({
-	upsert: (t) => B(async () => {
-		let n = await e.query(V({
-			table: j,
-			predicate: v("tenantId", t.tenantId),
+}), Ke = (e) => ({
+	upsert: (t) => K(async () => {
+		let n = await e.query(q({
+			table: H,
+			predicate: O("tenantId", t.tenantId),
 			take: 1
 		})), r = /* @__PURE__ */ new Date();
-		n[0] ? await e.update(j, String(n[0].id), {
+		n[0] ? await e.update(H, String(n[0].id), {
 			provider: t.provider,
 			providerCustomerId: t.providerCustomerId,
 			updatedAt: r
-		}) : await e.insert(j, {
-			id: z("bcust"),
+		}) : await e.insert(H, {
+			id: He("bcust"),
 			...t,
 			createdAt: r,
 			updatedAt: r
 		});
 	}, "customerStore"),
-	getByTenant: (t) => B(async () => {
-		let n = await e.query(V({
-			table: j,
-			predicate: v("tenantId", t),
+	getByTenant: (t) => K(async () => {
+		let n = await e.query(q({
+			table: H,
+			predicate: O("tenantId", t),
 			take: 1
 		}));
-		return n[0] ? ze(n[0]) : null;
+		return n[0] ? Ge(n[0]) : null;
+	}, "customerStore"),
+	getByProviderCustomerId: (t) => K(async () => {
+		let n = await e.query(q({
+			table: H,
+			predicate: O("providerCustomerId", t),
+			take: 1
+		}));
+		return n[0] ? Ge(n[0]) : null;
+	}, "customerStore"),
+	list: () => K(async () => (await e.query(q({ table: H }))).map(Ge), "customerStore"),
+	removeByProviderCustomerId: (t) => K(async () => {
+		let n = await e.query(q({
+			table: H,
+			predicate: O("providerCustomerId", t)
+		})), r = null;
+		for (let t of n) r = String(t.tenantId), await e.delete(H, String(t.id));
+		return r;
 	}, "customerStore")
-}), H = (e, t) => e === null ? !1 : t === null || t.getTime() < e.getTime(), Ve = () => {
-	let e = /* @__PURE__ */ new Map();
+}), qe = (e) => e === "canceled", Je = /* @__PURE__ */ new Set([
+	"active",
+	"trialing",
+	"pastDue",
+	"incomplete"
+]), Ye = (e) => Je.has(e), Xe = (e) => e.find((e) => Ye(e.status)) ?? e[0] ?? null, Ze = (e, t) => e === null ? !1 : t === null || t.getTime() < e.getTime(), Qe = () => {
+	let e = /* @__PURE__ */ new Map(), t = 0, n = (t) => [...e.values()].filter((e) => e.tenantId === t).sort((e, t) => t.touched - e.touched), r = ({ touched: e, ...t }) => t;
 	return {
-		upsert: (t) => p.sync(() => {
-			let n = e.get(t.tenantId);
-			n && H(n.statusEventAt, t.statusEventAt) || e.set(t.tenantId, {
-				...t,
-				pastDueSince: n ? n.pastDueSince : t.pastDueSince
+		upsert: (n) => v.sync(() => {
+			let r = e.get(n.providerSubscriptionId);
+			r && Ze(r.statusEventAt, n.statusEventAt) || r && qe(r.status) && !qe(n.status) || e.set(n.providerSubscriptionId, {
+				...n,
+				pastDueSince: r ? r.pastDueSince : n.pastDueSince,
+				touched: ++t
 			});
 		}),
-		getByTenant: (t) => p.sync(() => e.get(t) ?? null),
-		listByStatus: (t) => p.sync(() => [...e.values()].filter((e) => e.status === t)),
-		markCanceled: (t) => p.sync(() => {
-			for (let [n, r] of e) r.providerSubscriptionId === t && e.set(n, {
+		getByTenant: (e) => v.sync(() => {
+			let t = Xe(n(e));
+			return t ? r(t) : null;
+		}),
+		listByTenant: (e) => v.sync(() => n(e).map(r)),
+		listByStatus: (t) => v.sync(() => [...e.values()].filter((e) => e.status === t).map(r)),
+		markCanceled: (n) => v.sync(() => {
+			let r = e.get(n);
+			r && e.set(n, {
 				...r,
-				status: "canceled"
+				status: "canceled",
+				touched: ++t
 			});
 		}),
-		patchByTenant: (t, n) => p.sync(() => {
-			let r = e.get(t);
-			r && e.set(t, {
-				...r,
-				...n
+		patchByTenant: (r, i) => v.sync(() => {
+			let a = Xe(n(r));
+			a && e.set(a.providerSubscriptionId, {
+				...a,
+				...i,
+				touched: ++t
 			});
 		}),
-		setStatus: (t, n) => p.sync(() => {
-			for (let [r, i] of e) i.providerSubscriptionId === t && e.set(r, {
+		setStatus: (n, r) => v.sync(() => {
+			let i = e.get(n);
+			i && e.set(n, {
 				...i,
-				status: n
+				status: r,
+				touched: ++t
 			});
 		})
 	};
-}, He = (e) => ({
+}, $e = (e) => ({
 	tenantId: String(e.tenantId),
 	provider: String(e.provider),
 	providerSubscriptionId: String(e.providerSubscriptionId),
@@ -392,16 +436,23 @@ var k = (e, t, n, r) => ({
 	cancelAt: e.cancelAt == null ? null : new Date(e.cancelAt),
 	pastDueSince: e.pastDueSince == null ? null : new Date(e.pastDueSince),
 	statusEventAt: e.statusEventAt == null ? null : new Date(e.statusEventAt)
-}), Ue = async (e, t) => (await e.query(V({
+}), et = async (e, t) => (await e.query(q({
 	table: "_voltro_billing_subscriptions",
-	predicate: v("providerSubscriptionId", t),
+	predicate: O("providerSubscriptionId", t),
 	take: 1
-})))[0] ?? null, We = (e) => ({
-	upsert: (t) => B(async () => {
-		let n = await Ue(e, t.providerSubscriptionId), r = /* @__PURE__ */ new Date();
+})))[0] ?? null, tt = async (e, t) => (await e.query(q({
+	table: U,
+	predicate: O("tenantId", t),
+	order: [{
+		column: "updatedAt",
+		direction: "desc"
+	}]
+}))).map($e), nt = (e) => ({
+	upsert: (t) => K(async () => {
+		let n = await et(e, t.providerSubscriptionId), r = /* @__PURE__ */ new Date();
 		if (n) {
-			if (H(n.statusEventAt == null ? null : new Date(n.statusEventAt), t.statusEventAt)) return;
-			await e.update(M, String(n.id), {
+			if (Ze(n.statusEventAt == null ? null : new Date(n.statusEventAt), t.statusEventAt) || qe(String(n.status)) && !qe(t.status)) return;
+			await e.update(U, String(n.id), {
 				tenantId: t.tenantId,
 				provider: t.provider,
 				plan: t.plan,
@@ -413,8 +464,8 @@ var k = (e, t, n, r) => ({
 				statusEventAt: t.statusEventAt,
 				updatedAt: r
 			});
-		} else await e.insert(M, {
-			id: z("bsub"),
+		} else await e.insert(U, {
+			id: He("bsub"),
 			tenantId: t.tenantId,
 			provider: t.provider,
 			providerSubscriptionId: t.providerSubscriptionId,
@@ -430,44 +481,26 @@ var k = (e, t, n, r) => ({
 			updatedAt: r
 		});
 	}, "subscriptionStore"),
-	getByTenant: (t) => B(async () => {
-		let n = await e.query(V({
-			table: M,
-			predicate: v("tenantId", t),
-			order: [{
-				column: "updatedAt",
-				direction: "desc"
-			}],
-			take: 1
-		}));
-		return n[0] ? He(n[0]) : null;
-	}, "subscriptionStore"),
-	listByStatus: (t) => B(async () => (await e.query(V({
-		table: M,
-		predicate: v("status", t),
+	getByTenant: (t) => K(async () => Xe(await tt(e, t)), "subscriptionStore"),
+	listByTenant: (t) => K(() => tt(e, t), "subscriptionStore"),
+	listByStatus: (t) => K(async () => (await e.query(q({
+		table: U,
+		predicate: O("status", t),
 		order: [{
 			column: "updatedAt",
 			direction: "asc"
 		}]
-	}))).map(He), "subscriptionStore"),
-	markCanceled: (t) => B(async () => {
-		let n = await Ue(e, t);
-		n && await e.update(M, String(n.id), {
+	}))).map($e), "subscriptionStore"),
+	markCanceled: (t) => K(async () => {
+		let n = await et(e, t);
+		n && await e.update(U, String(n.id), {
 			status: "canceled",
 			updatedAt: /* @__PURE__ */ new Date()
 		});
 	}, "subscriptionStore"),
-	patchByTenant: (t, n) => B(async () => {
-		let r = (await e.query(V({
-			table: M,
-			predicate: v("tenantId", t),
-			order: [{
-				column: "updatedAt",
-				direction: "desc"
-			}],
-			take: 1
-		})))[0];
-		r && await e.update(M, String(r.id), {
+	patchByTenant: (t, n) => K(async () => {
+		let r = Xe(await tt(e, t)), i = r === null ? null : await et(e, r.providerSubscriptionId);
+		i && await e.update(U, String(i.id), {
 			...n.plan === void 0 ? {} : { plan: n.plan },
 			...n.quantity === void 0 ? {} : { quantity: n.quantity },
 			...n.status === void 0 ? {} : { status: n.status },
@@ -478,23 +511,23 @@ var k = (e, t, n, r) => ({
 			updatedAt: /* @__PURE__ */ new Date()
 		});
 	}, "subscriptionStore"),
-	setStatus: (t, n) => B(async () => {
-		let r = await Ue(e, t);
-		r && await e.update(M, String(r.id), {
+	setStatus: (t, n) => K(async () => {
+		let r = await et(e, t);
+		r && await e.update(U, String(r.id), {
 			status: n,
 			updatedAt: /* @__PURE__ */ new Date()
 		});
 	}, "subscriptionStore")
-}), Ge = () => {
+}), rt = () => {
 	let e = /* @__PURE__ */ new Map();
 	return {
-		upsert: (t) => p.sync(() => {
+		upsert: (t) => v.sync(() => {
 			let n = e.get(t.providerInvoiceId);
-			n && H(n.statusEventAt, t.statusEventAt) || e.set(t.providerInvoiceId, t);
+			n && Ze(n.statusEventAt, t.statusEventAt) || e.set(t.providerInvoiceId, t);
 		}),
-		listByTenant: (t) => p.sync(() => [...e.values()].filter((e) => e.tenantId === t))
+		listByTenant: (t) => v.sync(() => [...e.values()].filter((e) => e.tenantId === t))
 	};
-}, Ke = (e) => ({
+}, it = (e) => ({
 	tenantId: String(e.tenantId),
 	provider: String(e.provider),
 	providerInvoiceId: String(e.providerInvoiceId),
@@ -502,41 +535,41 @@ var k = (e, t, n, r) => ({
 	currency: String(e.currency),
 	status: String(e.status),
 	statusEventAt: e.statusEventAt == null ? null : new Date(e.statusEventAt)
-}), qe = (e) => ({
-	upsert: (t) => B(async () => {
-		let n = (await e.query(V({
-			table: N,
-			predicate: v("providerInvoiceId", t.providerInvoiceId),
+}), at = (e) => ({
+	upsert: (t) => K(async () => {
+		let n = (await e.query(q({
+			table: W,
+			predicate: O("providerInvoiceId", t.providerInvoiceId),
 			take: 1
 		})))[0];
 		if (n) {
-			if (H(n.statusEventAt == null ? null : new Date(n.statusEventAt), t.statusEventAt)) return;
-			await e.update(N, String(n.id), {
+			if (Ze(n.statusEventAt == null ? null : new Date(n.statusEventAt), t.statusEventAt)) return;
+			await e.update(W, String(n.id), {
 				amountMinor: t.amountMinor,
 				currency: t.currency,
 				status: t.status,
 				statusEventAt: t.statusEventAt
 			});
-		} else await e.insert(N, {
-			id: z("binv"),
+		} else await e.insert(W, {
+			id: He("binv"),
 			...t,
 			createdAt: /* @__PURE__ */ new Date()
 		});
 	}, "invoiceStore"),
-	listByTenant: (t) => B(async () => (await e.query(V({
-		table: N,
-		predicate: v("tenantId", t),
+	listByTenant: (t) => K(async () => (await e.query(q({
+		table: W,
+		predicate: O("tenantId", t),
 		order: [{
 			column: "createdAt",
 			direction: "desc"
 		}]
-	}))).map(Ke), "invoiceStore")
-}), U = (e, t, n) => `${e}\u0000${t}\u0000${n}`, Je = () => {
+	}))).map(it), "invoiceStore")
+}), ot = (e, t, n) => `${e}\u0000${t}\u0000${n}`, st = () => {
 	let e = /* @__PURE__ */ new Map();
 	return {
-		used: (t, n, r) => p.sync(() => e.get(U(t, n, r))?.used ?? 0),
-		consume: (t, n, r, i, a) => p.sync(() => {
-			let o = U(t, n, r), s = e.get(o), c = s?.used ?? 0, l = c + i <= a;
+		used: (t, n, r) => v.sync(() => e.get(ot(t, n, r))?.used ?? 0),
+		consume: (t, n, r, i, a) => v.sync(() => {
+			let o = ot(t, n, r), s = e.get(o), c = s?.used ?? 0, l = c + i <= a;
 			return l && e.set(o, {
 				tenantId: t,
 				entitlementKey: n,
@@ -551,8 +584,8 @@ var k = (e, t, n, r) => ({
 				cost: i
 			};
 		}),
-		increment: (t, n, r, i) => p.sync(() => {
-			let a = U(t, n, r), o = e.get(a), s = (o?.used ?? 0) + i;
+		increment: (t, n, r, i) => v.sync(() => {
+			let a = ot(t, n, r), o = e.get(a), s = (o?.used ?? 0) + i;
 			return e.set(a, {
 				tenantId: t,
 				entitlementKey: n,
@@ -561,34 +594,34 @@ var k = (e, t, n, r) => ({
 				reportedToProvider: o?.reportedToProvider ?? 0
 			}), s;
 		}),
-		pending: () => p.sync(() => [...e.values()].filter((e) => e.used > e.reportedToProvider)),
-		markReported: (t, n, r, i) => p.sync(() => {
-			let a = U(t, n, r), o = e.get(a);
+		pending: () => v.sync(() => [...e.values()].filter((e) => e.used > e.reportedToProvider)),
+		markReported: (t, n, r, i) => v.sync(() => {
+			let a = ot(t, n, r), o = e.get(a);
 			o && e.set(a, {
 				...o,
 				reportedToProvider: i
 			});
 		})
 	};
-}, Ye = (e) => ({
+}, ct = (e) => ({
 	tenantId: String(e.tenantId),
 	entitlementKey: String(e.entitlementKey),
 	period: String(e.period),
 	used: Number(e.used ?? 0),
 	reportedToProvider: Number(e.reportedToProvider ?? 0)
-}), W = async (e, t, n, r) => (await e.query(V({
+}), lt = async (e, t, n, r) => (await e.query(q({
 	table: "_voltro_billing_usage",
-	predicate: _(v("tenantId", t), v("entitlementKey", n), v("period", r)),
+	predicate: E(O("tenantId", t), O("entitlementKey", n), O("period", r)),
 	take: 1
-})))[0] ?? null, Xe = (e) => ({
-	used: (t, n, r) => B(async () => {
-		let i = await W(e, t, n, r);
+})))[0] ?? null, ut = (e) => ({
+	used: (t, n, r) => K(async () => {
+		let i = await lt(e, t, n, r);
 		return i ? Number(i.used ?? 0) : 0;
 	}, "usageStore"),
-	consume: (t, n, r, i, a) => B(async () => {
+	consume: (t, n, r, i, a) => K(async () => {
 		for (let o = 0; o < 32; o++) {
 			o > 0 && await new Promise((e) => setTimeout(e, o));
-			let s = await W(e, t, n, r), c = s ? Number(s.used ?? 0) : 0;
+			let s = await lt(e, t, n, r), c = s ? Number(s.used ?? 0) : 0;
 			if (c + i > a) return {
 				allowed: !1,
 				entitlement: n,
@@ -600,7 +633,7 @@ var k = (e, t, n, r) => ({
 				if (await e.updateMany("_voltro_billing_usage", {
 					used: c + i,
 					updatedAt: /* @__PURE__ */ new Date()
-				}, { where: _(v("id", String(s.id)), v("used", c)) }) === 1) return {
+				}, { where: E(O("id", String(s.id)), O("used", c)) }) === 1) return {
 					allowed: !0,
 					entitlement: n,
 					limit: a,
@@ -608,7 +641,7 @@ var k = (e, t, n, r) => ({
 					cost: i
 				};
 			} else {
-				let o = z("buse"), s = await e.insertIgnore(P, {
+				let o = He("buse"), s = await e.insertIgnore(G, {
 					id: o,
 					tenantId: t,
 					entitlementKey: n,
@@ -632,18 +665,18 @@ var k = (e, t, n, r) => ({
 		}
 		throw Error(`billing usage consume: contention on (${t}, ${n}, ${r}) exceeded 32 attempts`);
 	}, "usageStore"),
-	increment: (t, n, r, i) => B(async () => {
+	increment: (t, n, r, i) => K(async () => {
 		for (let a = 0; a < 32; a++) {
 			a > 0 && await new Promise((e) => setTimeout(e, a));
-			let o = await W(e, t, n, r);
+			let o = await lt(e, t, n, r);
 			if (o) {
 				let t = Number(o.used ?? 0);
 				if (await e.updateMany("_voltro_billing_usage", {
 					used: t + i,
 					updatedAt: /* @__PURE__ */ new Date()
-				}, { where: _(v("id", String(o.id)), v("used", t)) }) === 1) return t + i;
+				}, { where: E(O("id", String(o.id)), O("used", t)) }) === 1) return t + i;
 			} else {
-				let a = z("buse"), o = await e.insertIgnore(P, {
+				let a = He("buse"), o = await e.insertIgnore(G, {
 					id: a,
 					tenantId: t,
 					entitlementKey: n,
@@ -661,107 +694,183 @@ var k = (e, t, n, r) => ({
 		}
 		throw Error(`billing usage increment: contention on (${t}, ${n}, ${r}) exceeded 32 attempts`);
 	}, "usageStore"),
-	pending: () => B(async () => (await e.query(V({ table: P }))).map(Ye).filter((e) => e.used > e.reportedToProvider), "usageStore"),
-	markReported: (t, n, r, i) => B(async () => {
-		let a = await W(e, t, n, r);
-		a && await e.update(P, String(a.id), {
+	pending: () => K(async () => (await e.query(q({ table: G }))).map(ct).filter((e) => e.used > e.reportedToProvider), "usageStore"),
+	markReported: (t, n, r, i) => K(async () => {
+		let a = await lt(e, t, n, r);
+		a && await e.update(G, String(a.id), {
 			reportedToProvider: i,
 			updatedAt: /* @__PURE__ */ new Date()
 		});
 	}, "usageStore")
-}), Ze = () => ({
-	customers: Re(),
-	subscriptions: Ve(),
-	invoices: Ge(),
-	usage: Je(),
-	dunningNotices: Fe()
-}), Qe = (e) => ({
-	customers: Be(e),
-	subscriptions: We(e),
-	invoices: qe(e),
-	usage: Xe(e),
-	dunningNotices: Le(e)
-}), G = E({ scope: "@voltro/plugin-billing" }), K = (e = /* @__PURE__ */ new Date()) => `${e.getUTCFullYear()}-${String(e.getUTCMonth() + 1).padStart(2, "0")}`, $e = (e) => ({ stores: e ?? Ze() }), q = (e, t) => e.pipe(p.retry({
-	schedule: h.recurs(Math.max(0, t - 1)),
+}), dt = () => ({
+	customers: We(),
+	subscriptions: Qe(),
+	invoices: rt(),
+	usage: st(),
+	dunningNotices: ze()
+}), ft = (e) => ({
+	customers: Ke(e),
+	subscriptions: nt(e),
+	invoices: at(e),
+	usage: ut(e),
+	dunningNotices: Ve(e)
+}), J = P({ scope: "@voltro/plugin-billing" }), pt = 3, Y = /* @__PURE__ */ new Set([
+	"active",
+	"trialing",
+	"pastDue"
+]), mt = (e = /* @__PURE__ */ new Date()) => `${e.getUTCFullYear()}-${String(e.getUTCMonth() + 1).padStart(2, "0")}`, ht = (e) => ({ stores: e ?? dt() }), X = (e, t) => e.pipe(v.retry({
+	schedule: b.recurs(Math.max(0, t - 1)),
 	while: (e) => e.transient
-})), et = (t) => {
-	let { provider: n, plans: i } = t, a = t.attempts ?? 3, o = t.checkout, s = t.now ?? (() => /* @__PURE__ */ new Date()), c = $e(t.stores), l = t.dunning ?? L(void 0, {}), u = (e) => c.stores.subscriptions.getByTenant(e).pipe(p.map((t) => R(t, l, s(), e))), d = (e) => u(e).pipe(p.map((e) => e.plan)), f = (e) => c.stores.subscriptions.getByTenant(e), ee = (e, n) => p.gen(function* () {
+})), gt = /^[A-Za-z0-9][A-Za-z0-9_.:-]{0,99}$/, _t = "usage key must be 1–100 characters of A–Z, a–z, 0–9, \"_\", \".\", \":\" or \"-\", starting with a letter or digit", vt = (t) => {
+	let { provider: n, plans: i } = t, a = t.attempts ?? 3, o = t.checkout, s = t.now ?? (() => /* @__PURE__ */ new Date()), c = (n, r) => n.length === 0 ? v.fail(new e({
+		source: "billing",
+		message: "no tenant on this call",
+		transient: !1
+	})) : t.admit === void 0 ? v.void : t.admit(n, r), l = t.redirectOrigins?.map((e) => new URL(e).origin), u = (t, n) => {
+		let r = (t) => v.fail(new e({
+			source: "billing",
+			message: `${n} ${t}`,
+			transient: !1
+		})), i;
+		try {
+			i = new URL(t);
+		} catch {
+			return r("is not an absolute URL");
+		}
+		return i.protocol !== "https:" && i.protocol !== "http:" ? r("must be an http(s) URL") : l !== void 0 && !l.includes(i.origin) ? r(`must point at one of the configured redirect origins, not ${i.origin}`) : v.void;
+	}, d = ht(t.stores), f = t.dunning ?? ke(void 0, {}), p = (e) => d.stores.subscriptions.getByTenant(e).pipe(v.map((t) => Pe(t, f, s(), e))), m = (e) => p(e).pipe(v.map((e) => e.plan)), h = (e) => d.stores.subscriptions.getByTenant(e), g = (e, n) => v.gen(function* () {
 		if (t.resolveEntitlementLimit !== void 0) {
 			let r = yield* t.resolveEntitlementLimit(e, n);
 			if (r !== null) return r;
 		}
-		let r = yield* d(e);
+		let r = yield* m(e);
 		return i.entitlementLimit(r, n);
-	}), te = (e, t, n) => p.gen(function* () {
-		return k(t, yield* ee(e, t), yield* c.stores.usage.used(e, t, K(s())), n);
-	}), m = (e, t, n) => p.gen(function* () {
-		let i = yield* ee(e, t);
+	}), _ = (e, t, n) => v.gen(function* () {
+		return fe(t, yield* g(e, t), yield* d.stores.usage.used(e, t, mt(s())), n);
+	}), y = (e, t, n) => v.gen(function* () {
+		let i = yield* g(e, t);
 		if (!Number.isFinite(i) || n <= 0) return;
-		let a = K(s()), o = yield* c.stores.usage.consume(e, t, a, n, i);
-		if (!o.allowed) return yield* p.fail(new r({
+		let a = mt(s()), o = yield* d.stores.usage.consume(e, t, a, n, i);
+		if (!o.allowed) return yield* v.fail(new r({
 			entitlement: t,
 			limit: o.limit,
 			used: o.used,
 			cost: n
 		}));
-	}), h = (e, t, n) => n <= 0 ? p.void : c.stores.usage.increment(e, t, K(s()), n).pipe(p.asVoid), ne = () => p.gen(function* () {
+	}), b = (t, n, r) => gt.test(n) ? Number.isFinite(r) ? r <= 0 ? v.void : d.stores.usage.increment(t, n, mt(s()), r).pipe(v.asVoid) : v.fail(new e({
+		source: "billing",
+		message: `usage quantity must be a finite number, got ${r}`,
+		transient: !1
+	})) : v.fail(new e({
+		source: "billing",
+		message: _t,
+		transient: !1
+	})), x = () => v.gen(function* () {
 		if (!n.supportsMeteredUsage) return;
-		let e = yield* c.stores.usage.pending();
+		let e = yield* d.stores.usage.pending();
 		for (let t of e) {
 			let e = t.used - t.reportedToProvider;
-			e <= 0 || (yield* q(n.reportUsage({
+			if (e <= 0) continue;
+			let r = yield* d.stores.customers.getByTenant(t.tenantId);
+			if (r === null && n.usageRequiresCustomer === !0) {
+				yield* v.logWarning("billing usage not flushed: no provider customer linked").pipe(v.annotateLogs({
+					tenantId: t.tenantId,
+					key: t.entitlementKey,
+					pending: e
+				}));
+				continue;
+			}
+			yield* X(n.reportUsage({
 				tenantId: t.tenantId,
 				entitlementKey: t.entitlementKey,
-				quantity: e
-			}), a), yield* c.stores.usage.markReported(t.tenantId, t.entitlementKey, t.period, t.used));
+				quantity: e,
+				idempotencyKey: `${t.tenantId}:${t.entitlementKey}:${t.period}:${t.used}`,
+				...r === null ? {} : { providerCustomerId: r.providerCustomerId }
+			}), a), yield* d.stores.usage.markReported(t.tenantId, t.entitlementKey, t.period, t.used);
 		}
-	}), re = (t) => p.gen(function* () {
+	}), S = (t) => v.fail(new e({
+		source: "billing",
+		message: `tenant '${t}' already has a paying subscription — change its plan instead of checking out again`,
+		transient: !1
+	})), C = (e, t, r) => t.status === "canceled" ? d.stores.subscriptions.markCanceled(t.providerSubscriptionId) : d.stores.subscriptions.upsert({
+		tenantId: e,
+		provider: n.name,
+		providerSubscriptionId: t.providerSubscriptionId,
+		plan: t.plan ?? "free",
+		status: t.status,
+		quantity: t.quantity,
+		currentPeriodStart: t.currentPeriodStart,
+		currentPeriodEnd: t.currentPeriodEnd,
+		cancelAt: t.cancelAt,
+		pastDueSince: null,
+		statusEventAt: r
+	}), ee = (t) => v.gen(function* () {
 		let r = i.priceIdFor(t.plan);
-		if (r === null) return yield* p.fail(new e({
+		if (r === null) return yield* v.fail(new e({
 			source: "billing",
 			message: `plan '${t.plan}' has no provider priceId — not a paid plan`,
 			transient: !1
 		}));
-		let s = yield* c.stores.customers.getByTenant(t.tenantId);
-		return yield* q(n.createCheckoutSession({
+		if (yield* c(t.tenantId, "checkout"), t.quantity !== void 0 && (!Number.isSafeInteger(t.quantity) || t.quantity <= 0)) return yield* v.fail(new e({
+			source: "billing",
+			message: `seat quantity must be a positive integer, got ${t.quantity}`,
+			transient: !1
+		}));
+		yield* u(t.successUrl, "successUrl"), yield* u(t.cancelUrl, "cancelUrl");
+		let l = yield* d.stores.subscriptions.getByTenant(t.tenantId);
+		if (l !== null && Y.has(l.status)) return yield* S(t.tenantId);
+		let f = yield* d.stores.customers.getByTenant(t.tenantId), p = f?.providerCustomerId ?? (yield* X(n.ensureCustomer({ tenantId: t.tenantId }), a));
+		f === null && (yield* d.stores.customers.upsert({
+			tenantId: t.tenantId,
+			provider: n.name,
+			providerCustomerId: p
+		}));
+		let m = (yield* X(n.listSubscriptions({ providerCustomerId: p }), a)).filter((e) => Y.has(e.status));
+		if (m.length > 0) {
+			for (let e of m) yield* C(t.tenantId, e, s());
+			return yield* S(t.tenantId);
+		}
+		return yield* X(n.expireOpenCheckouts({ providerCustomerId: p }), a), yield* X(n.createCheckoutSession({
 			tenantId: t.tenantId,
 			priceId: r,
+			meteredPriceIds: i.meteredPriceIdsFor(t.plan),
 			successUrl: t.successUrl,
 			cancelUrl: t.cancelUrl,
-			...s === null ? {} : { providerCustomerId: s.providerCustomerId },
+			providerCustomerId: p,
 			...t.quantity === void 0 ? {} : { quantity: t.quantity },
 			...o?.adjustableQuantity === void 0 ? {} : { adjustableQuantity: o.adjustableQuantity },
 			...o?.trialDays === void 0 ? {} : { trialDays: o.trialDays }
 		}), a);
-	}), ie = (t, r) => p.gen(function* () {
-		let i = yield* c.stores.customers.getByTenant(t);
-		return i === null ? yield* p.fail(new e({
+	}), w = (t, r) => v.gen(function* () {
+		yield* c(t, "portal"), yield* u(r, "returnUrl");
+		let i = yield* d.stores.customers.getByTenant(t);
+		return i === null ? yield* v.fail(new e({
 			source: "billing",
 			message: `no provider customer linked for tenant '${t}'`,
 			transient: !1
-		})) : yield* q(n.createPortalSession({
+		})) : yield* X(n.createPortalSession({
 			tenantId: t,
 			providerCustomerId: i.providerCustomerId,
 			returnUrl: r
 		}), a);
-	}), ae = (e) => p.gen(function* () {
-		if (l.resolveRecipient !== void 0) {
-			let t = yield* l.resolveRecipient(e);
+	}), T = (e) => v.gen(function* () {
+		if (f.resolveRecipient !== void 0) {
+			let t = yield* f.resolveRecipient(e);
 			if (t !== null) return t;
 		}
 		if (n.customerEmail === void 0) return null;
-		let t = yield* c.stores.customers.getByTenant(e);
+		let t = yield* d.stores.customers.getByTenant(e);
 		return t === null ? null : yield* n.customerEmail(t.providerCustomerId);
-	}), oe = (e) => {
-		let t = l.portalReturnUrl;
-		return t === void 0 ? p.succeed(null) : ie(e, t).pipe(p.map((e) => e.url), p.catchAll(() => p.succeed(null)));
-	}, g = (e, t, n, r, i) => p.gen(function* () {
-		let a = yield* ae(e.tenantId).pipe(p.catchAll(() => p.succeed(null))), o = yield* oe(e.tenantId), s = t.lockedSince !== null, c = Me({
+	}), E = (e) => {
+		let t = f.portalReturnUrl;
+		return t === void 0 ? v.succeed(null) : w(e, t).pipe(v.map((e) => e.url), v.catchAll(() => v.succeed(null)));
+	}, te = (e, t, n, r, i) => v.gen(function* () {
+		let a = yield* T(e.tenantId).pipe(v.catchAll(() => v.succeed(null))), o = yield* E(e.tenantId), s = t.lockedSince !== null, c = Ie({
 			stepId: n,
 			locked: s,
 			graceEndsAt: i,
 			portalUrl: o
-		}), u = {
+		}), l = {
 			stepId: n,
 			tenantId: e.tenantId,
 			to: a,
@@ -770,36 +879,36 @@ var k = (e, t, n, r) => ({
 			pastDueSince: r,
 			graceEndsAt: i,
 			locked: s,
-			lockout: l.lockout,
+			lockout: f.lockout,
 			portalUrl: o,
 			...c
 		};
-		G.info("billing dunning notice", {
+		J.info("billing dunning notice", {
 			tenant: e.tenantId,
 			step: n,
 			locked: s,
 			graceEndsAt: i.toISOString(),
-			delivered: l.notify !== void 0 && a !== null
+			delivered: f.notify !== void 0 && a !== null
 		});
-		let d = l.notify;
-		d !== void 0 && (yield* d(u).pipe(p.catchAllCause((t) => p.sync(() => {
-			G.warn("billing dunning notify failed", {
+		let u = f.notify;
+		u !== void 0 && (yield* u(l).pipe(v.catchAllCause((t) => v.sync(() => {
+			J.warn("billing dunning notify failed", {
 				tenant: e.tenantId,
 				step: n,
 				cause: String(t)
 			});
 		}))));
-	}), _ = (e) => p.gen(function* () {
-		let t = yield* c.stores.subscriptions.getByTenant(e);
-		if (t === null) return R(null, l, s(), e);
-		let r = yield* n.fetchSubscription(t.providerSubscriptionId).pipe(p.catchAll((t) => p.sync(() => (G.warn("billing dunning reconcile: provider unreachable, not escalating", {
+	}), D = (e) => v.gen(function* () {
+		let t = yield* d.stores.subscriptions.getByTenant(e);
+		if (t === null) return Pe(null, f, s(), e);
+		let r = yield* n.fetchSubscription(t.providerSubscriptionId).pipe(v.catchAll((t) => v.sync(() => (J.warn("billing dunning reconcile: provider unreachable, not escalating", {
 			tenant: e,
 			source: t.source,
 			message: t.message
 		}), null)))), i = t;
 		if (r !== null) {
 			let n = s(), a = r.status === "pastDue" ? t.status === "pastDue" && t.pastDueSince !== null ? t.pastDueSince : n : null;
-			yield* c.stores.subscriptions.patchByTenant(e, {
+			yield* d.stores.subscriptions.patchByTenant(e, {
 				status: r.status,
 				...r.plan === null ? {} : { plan: r.plan },
 				quantity: r.quantity,
@@ -818,30 +927,30 @@ var k = (e, t, n, r) => ({
 				statusEventAt: n
 			};
 		}
-		let a = R(i, l, s(), e);
-		if (!l.enabled || i.status !== "pastDue" || i.pastDueSince === null) return a;
-		let o = i.pastDueSince, u = Oe(o), d = a.graceEndsAt ?? o, f = Ae(l.steps, o, s()).map((e) => e.id);
-		a.lockedSince !== null && f.push(I);
-		for (let t of f) (yield* c.stores.dunningNotices.claim(e, u, t, s())) && (yield* g(i, a, t, o, d));
+		let a = Pe(i, f, s(), e);
+		if (!f.enabled || i.status !== "pastDue" || i.pastDueSince === null) return a;
+		let o = i.pastDueSince, c = je(o), l = a.graceEndsAt ?? o, u = Ne(f.steps, o, s()).map((e) => e.id);
+		a.lockedSince !== null && u.push(we);
+		for (let t of u) (yield* d.stores.dunningNotices.claim(e, c, t, s())) && (yield* te(i, a, t, o, l));
 		return a;
-	}), se = () => p.gen(function* () {
-		let e = yield* c.stores.subscriptions.listByStatus("pastDue"), t = 0;
-		for (let n of e) yield* _(n.tenantId).pipe(p.catchAll((e) => p.sync(() => {
-			G.warn("billing dunning sweep: tenant failed", {
+	}), O = () => v.gen(function* () {
+		let e = yield* d.stores.subscriptions.listByStatus("pastDue"), t = 0;
+		for (let n of e) yield* D(n.tenantId).pipe(v.catchAll((e) => v.sync(() => {
+			J.warn("billing dunning sweep: tenant failed", {
 				tenant: n.tenantId,
 				message: e.message
 			});
 		}))), t += 1;
 		return t;
-	}), ce = (e) => {
-		if (!l.enabled) return p.void;
-		if (e._tag === "invoicePaymentFailed") return _(e.tenantId).pipe(p.asVoid);
-		if (e._tag !== "invoicePaid" && e._tag !== "subscriptionUpserted") return p.void;
+	}), ne = (e) => {
+		if (!f.enabled) return v.void;
+		if (e._tag === "invoicePaymentFailed") return D(e.tenantId).pipe(v.asVoid);
+		if (e._tag !== "invoicePaid" && e._tag !== "subscriptionUpserted") return v.void;
 		let t = e.tenantId;
-		return c.stores.subscriptions.getByTenant(t).pipe(p.flatMap((e) => e !== null && (e.status === "pastDue" || e.pastDueSince !== null) ? _(t).pipe(p.asVoid) : p.void));
-	}, v = (e) => {
+		return d.stores.subscriptions.getByTenant(t).pipe(v.flatMap((e) => e !== null && (e.status === "pastDue" || e.pastDueSince !== null) ? D(t).pipe(v.asVoid) : v.void));
+	}, k = (e) => {
 		switch (e._tag) {
-			case "subscriptionUpserted": return c.stores.subscriptions.upsert({
+			case "subscriptionUpserted": return d.stores.subscriptions.upsert({
 				tenantId: e.tenantId,
 				provider: n.name,
 				providerSubscriptionId: e.providerSubscriptionId,
@@ -854,8 +963,8 @@ var k = (e, t, n, r) => ({
 				pastDueSince: null,
 				statusEventAt: e.occurredAt
 			});
-			case "subscriptionCanceled": return c.stores.subscriptions.markCanceled(e.providerSubscriptionId);
-			case "invoicePaid": return c.stores.invoices.upsert({
+			case "subscriptionCanceled": return d.stores.subscriptions.markCanceled(e.providerSubscriptionId);
+			case "invoicePaid": return d.stores.invoices.upsert({
 				tenantId: e.tenantId,
 				provider: n.name,
 				providerInvoiceId: e.providerInvoiceId,
@@ -864,7 +973,7 @@ var k = (e, t, n, r) => ({
 				status: "paid",
 				statusEventAt: e.occurredAt
 			});
-			case "invoicePaymentFailed": return c.stores.invoices.upsert({
+			case "invoicePaymentFailed": return d.stores.invoices.upsert({
 				tenantId: e.tenantId,
 				provider: n.name,
 				providerInvoiceId: e.providerInvoiceId,
@@ -873,37 +982,39 @@ var k = (e, t, n, r) => ({
 				status: "open",
 				statusEventAt: e.occurredAt
 			});
-			case "customerLinked": return c.stores.customers.upsert({
+			case "customerLinked": return d.stores.customers.upsert({
 				tenantId: e.tenantId,
 				provider: n.name,
 				providerCustomerId: e.providerCustomerId
 			});
+			case "customerUnlinked": return d.stores.customers.removeByProviderCustomerId(e.providerCustomerId).pipe(v.asVoid);
 		}
-	}, le = (e) => v(e).pipe(p.zipRight(ce(e))), y = (t, r) => p.gen(function* () {
-		let o = yield* c.stores.subscriptions.getByTenant(t);
-		if (o === null) return yield* p.fail(new e({
+	}, A = (e) => k(e).pipe(v.zipRight(ne(e))), re = (t, r) => v.gen(function* () {
+		yield* c(t, "change"), yield* R(t);
+		let o = yield* d.stores.subscriptions.getByTenant(t);
+		if (o === null) return yield* v.fail(new e({
 			source: "billing",
 			message: `no subscription for tenant '${t}' to change`,
 			transient: !1
 		}));
 		let s = r.plan ?? o.plan, l = r.quantity ?? o.quantity;
-		if (r.plan !== void 0 && !i.has(s)) return yield* p.fail(new e({
+		if (r.plan !== void 0 && !i.has(s)) return yield* v.fail(new e({
 			source: "billing",
 			message: `unknown plan '${s}' — not in the plan registry`,
 			transient: !1
 		}));
-		if (!Number.isInteger(l) || l <= 0) return yield* p.fail(new e({
+		if (!Number.isInteger(l) || l <= 0) return yield* v.fail(new e({
 			source: "billing",
 			message: `seat quantity must be a positive integer, got ${l}`,
 			transient: !1
 		}));
-		let u = yield* q(n.updateSubscription({
+		let u = yield* X(n.updateSubscription({
 			providerSubscriptionId: o.providerSubscriptionId,
 			...r.plan === void 0 ? {} : { priceId: i.priceIdFor(s) ?? s },
 			...r.quantity === void 0 ? {} : { quantity: l },
 			proration: "prorate"
 		}), a);
-		return yield* c.stores.subscriptions.patchByTenant(t, {
+		return yield* d.stores.subscriptions.patchByTenant(t, {
 			...r.plan === void 0 ? {} : { plan: s },
 			quantity: u.quantity,
 			...u.currentPeriodStart === null ? {} : { currentPeriodStart: u.currentPeriodStart },
@@ -915,52 +1026,303 @@ var k = (e, t, n, r) => ({
 			prorationMinor: u.prorationMinor,
 			currency: u.currency
 		};
-	});
+	}), ie = (t, r) => v.gen(function* () {
+		let o = yield* d.stores.subscriptions.getByTenant(t);
+		if (o === null) return yield* v.fail(new e({
+			source: "billing",
+			message: `no subscription for tenant '${t}' to preview`,
+			transient: !1
+		}));
+		let s = r.plan ?? o.plan, c = yield* X(n.previewSubscriptionChange({
+			providerSubscriptionId: o.providerSubscriptionId,
+			...r.plan === void 0 ? {} : { priceId: i.priceIdFor(s) ?? s },
+			...r.quantity === void 0 ? {} : { quantity: r.quantity },
+			proration: "prorate"
+		}), a);
+		return {
+			tenantId: t,
+			plan: s,
+			quantity: c.quantity,
+			prorationMinor: c.prorationMinor,
+			currency: c.currency
+		};
+	}), ae = (e) => v.gen(function* () {
+		let t = yield* d.stores.customers.getByTenant(e);
+		return t === null ? [] : yield* X(n.listInvoices({ providerCustomerId: t.providerCustomerId }), a);
+	}), j = (t, n) => v.gen(function* () {
+		if (n === "free") {
+			let e = yield* oe(t);
+			return {
+				tenantId: t,
+				plan: e.plan,
+				quantity: e.quantity,
+				prorationMinor: 0,
+				currency: i.currencyFor(e.plan)
+			};
+		}
+		return i.has(n) && i.priceIdFor(n) === null ? yield* v.fail(new e({
+			source: "billing",
+			message: `plan '${n}' has no provider price — it is not a self-serve plan`,
+			transient: !1
+		})) : yield* re(t, { plan: n });
+	}), M = (t, n) => d.stores.subscriptions.getByTenant(t).pipe(v.flatMap((r) => r !== null && Ye(r.status) ? v.succeed(r) : v.fail(new e({
+		source: "billing",
+		message: `no live subscription for tenant '${t}' to ${n}`,
+		transient: !1
+	})))), N = (e, t) => v.gen(function* () {
+		let n = s();
+		return yield* C(e.tenantId, {
+			...t,
+			providerSubscriptionId: e.providerSubscriptionId
+		}, n), {
+			...e,
+			...t,
+			plan: t.plan ?? e.plan,
+			statusEventAt: n
+		};
+	}), oe = (e) => v.gen(function* () {
+		yield* c(e, "cancel"), yield* R(e);
+		let t = yield* M(e, "cancel"), r = yield* X(n.cancelSubscription({
+			providerSubscriptionId: t.providerSubscriptionId,
+			mode: "periodEnd"
+		}), a);
+		return yield* N(t, r);
+	}), P = (e) => v.gen(function* () {
+		yield* c(e, "resume"), yield* R(e);
+		let t = yield* M(e, "resume"), r = yield* X(n.resumeSubscription(t.providerSubscriptionId), a);
+		return yield* N(t, r);
+	}), F = (e) => v.gen(function* () {
+		yield* x();
+		let t = yield* d.stores.customers.getByTenant(e), r = yield* d.stores.subscriptions.listByTenant(e), i = new Set(r.filter((e) => Ye(e.status)).map((e) => e.providerSubscriptionId));
+		if (t !== null) {
+			let e = yield* X(n.listSubscriptions({ providerCustomerId: t.providerCustomerId }), a);
+			for (let t of e) i.add(t.providerSubscriptionId);
+		}
+		let o = [];
+		for (let t of i) {
+			let r = yield* X(n.cancelSubscription({
+				providerSubscriptionId: t,
+				mode: "close"
+			}), a);
+			yield* C(e, {
+				...r,
+				providerSubscriptionId: t
+			}, s()), o.push(t);
+		}
+		return J.info("billing account closed", {
+			tenant: e,
+			canceled: o.length
+		}), {
+			tenantId: e,
+			canceled: o
+		};
+	}), I = (e) => {
+		let n = t.isTenantClosed;
+		return n === void 0 ? v.succeed(!1) : n(e).pipe(v.catchAll((t) => v.sync(() => (J.warn("billing: could not tell whether a tenant is closed — leaving it", {
+			tenant: e,
+			message: t.message
+		}), !1))));
+	}, L = (e, t) => v.gen(function* () {
+		let r = s(), o = yield* X(n.listSubscriptions({ providerCustomerId: e }), a), c = yield* d.stores.customers.getByProviderCustomerId(e), l = c?.tenantId ?? t ?? o.find((e) => e.tenantId !== null)?.tenantId ?? null;
+		if (l === null) return J.warn("billing sync: customer names no tenant — nothing to attribute it to", { customer: e }), {
+			tenantId: null,
+			events: []
+		};
+		let u = [];
+		c === null && (yield* d.stores.customers.upsert({
+			tenantId: l,
+			provider: n.name,
+			providerCustomerId: e
+		}), u.push({
+			_tag: "customerLinked",
+			tenantId: l,
+			providerCustomerId: e,
+			occurredAt: r
+		})), o.some((e) => Y.has(e.status) && e.cancelAt === null) && (yield* I(l)) && (J.error("billing sync: a closed tenant still has a paying subscription — closing it", { tenant: l }), yield* F(l), o = yield* X(n.listSubscriptions({ providerCustomerId: e }), a));
+		for (let e of o) if (yield* C(l, e, r), u.push(B(l, e, r)), e.plan !== null && Y.has(e.status)) {
+			let t = i.meteredPriceIdsFor(e.plan).filter((t) => !e.priceIds.includes(t));
+			t.length > 0 && (yield* X(n.addSubscriptionPrices({
+				providerSubscriptionId: e.providerSubscriptionId,
+				priceIds: t
+			}), a));
+		}
+		let f = new Set(o.map((e) => e.providerSubscriptionId));
+		for (let e of yield* d.stores.subscriptions.listByTenant(l)) {
+			if (!Ye(e.status) || f.has(e.providerSubscriptionId)) continue;
+			let t = yield* X(n.fetchSubscription(e.providerSubscriptionId), a), i = t === null ? {
+				...e,
+				status: "canceled",
+				providerSubscriptionId: e.providerSubscriptionId
+			} : {
+				...t,
+				providerSubscriptionId: e.providerSubscriptionId
+			};
+			yield* C(l, i, r), u.push(B(l, i, r));
+		}
+		for (let e of u) yield* ne(e);
+		return {
+			tenantId: l,
+			events: u
+		};
+	}), se = (e) => v.forEach(e, (e) => {
+		let n = t.onEvent?.[e._tag];
+		return n === void 0 ? v.void : n(e).pipe(v.catchAllCause((t) => v.sync(() => {
+			J.error("billing: onEvent failed for a correction — the next sync of this tenant retries it", {
+				event: e._tag,
+				cause: String(t)
+			});
+		})));
+	}, { discard: !0 }), R = (e) => v.gen(function* () {
+		let t = yield* d.stores.customers.getByTenant(e);
+		if (t !== null) {
+			let n = yield* L(t.providerCustomerId, e);
+			yield* se(n.events);
+		}
+		return yield* d.stores.subscriptions.getByTenant(e);
+	}), z = (e, t) => e !== void 0 && e.status === t.status && e.plan === (t.plan ?? "free") && e.quantity === t.quantity && (e.cancelAt?.getTime() ?? null) === (t.cancelAt?.getTime() ?? null), B = (e, t, n) => t.status === "canceled" ? {
+		_tag: "subscriptionCanceled",
+		tenantId: e,
+		providerSubscriptionId: t.providerSubscriptionId,
+		occurredAt: n
+	} : {
+		_tag: "subscriptionUpserted",
+		tenantId: e,
+		providerSubscriptionId: t.providerSubscriptionId,
+		plan: t.plan ?? "free",
+		status: t.status,
+		quantity: t.quantity,
+		currentPeriodStart: t.currentPeriodStart,
+		currentPeriodEnd: t.currentPeriodEnd,
+		cancelAt: t.cancelAt,
+		occurredAt: n
+	};
 	return {
 		service: {
-			subscription: f,
-			plan: d,
-			entitlementStatus: u,
-			reconcileDunning: _,
-			dunningSweep: se,
-			checkEntitlement: te,
-			consumeEntitlement: m,
-			reportUsage: h,
-			flushUsage: ne,
-			startCheckout: re,
-			portalUrl: ie,
-			applyEvent: le,
-			changePlan: (e, t) => y(e, { plan: t }),
-			changeSeats: (e, t) => y(e, { quantity: t }),
-			previewChange: (t, r) => p.gen(function* () {
-				let o = yield* c.stores.subscriptions.getByTenant(t);
-				if (o === null) return yield* p.fail(new e({
-					source: "billing",
-					message: `no subscription for tenant '${t}' to preview`,
-					transient: !1
-				}));
-				let s = r.plan ?? o.plan, l = yield* q(n.previewSubscriptionChange({
-					providerSubscriptionId: o.providerSubscriptionId,
-					...r.plan === void 0 ? {} : { priceId: i.priceIdFor(s) ?? s },
-					...r.quantity === void 0 ? {} : { quantity: r.quantity },
-					proration: "prorate"
-				}), a);
-				return {
-					tenantId: t,
-					plan: s,
-					quantity: l.quantity,
-					prorationMinor: l.prorationMinor,
-					currency: l.currency
+			subscription: h,
+			plan: m,
+			entitlementStatus: p,
+			reconcileDunning: D,
+			dunningSweep: O,
+			checkEntitlement: _,
+			consumeEntitlement: y,
+			reportUsage: b,
+			flushUsage: x,
+			startCheckout: ee,
+			portalUrl: w,
+			applyEvent: A,
+			changePlan: j,
+			changeSeats: (e, t) => re(e, { quantity: t }),
+			previewChange: ie,
+			invoices: ae,
+			cancelSubscription: oe,
+			resumeSubscription: P,
+			closeAccount: F,
+			reconcileFromProvider: () => v.gen(function* () {
+				let e = s(), t = yield* X(n.listSubscriptions({}), a), r = yield* d.stores.customers.list(), o = new Map(r.map((e) => [e.providerCustomerId, e.tenantId])), c = /* @__PURE__ */ new Set(), l = /* @__PURE__ */ new Map(), u = /* @__PURE__ */ new Set(), f = [], p = /* @__PURE__ */ new Set(), m = /* @__PURE__ */ new Map(), h = 0, g = 0, _ = (e) => {
+					let t = m.get(e);
+					return t === void 0 ? I(e).pipe(v.tap((t) => v.sync(() => {
+						m.set(e, t);
+					}))) : v.succeed(t);
+				};
+				for (let r of t) {
+					u.add(r.providerSubscriptionId);
+					let t = r.tenantId ?? (r.providerCustomerId === null ? null : o.get(r.providerCustomerId) ?? null);
+					if (t === null) {
+						h += 1, J.warn("billing reconcile: provider subscription names no tenant", { subscription: r.providerSubscriptionId });
+						continue;
+					}
+					if (Y.has(r.status) && r.cancelAt === null && !p.has(t) && (yield* _(t))) {
+						J.error("billing reconcile: a closed tenant still has a paying subscription — closing it", {
+							tenant: t,
+							subscription: r.providerSubscriptionId
+						}), (yield* F(t).pipe(v.map(() => !0), v.catchAll((e) => v.sync(() => (J.error("billing reconcile: closing a closed tenant failed — retried next run", {
+							tenant: t,
+							message: e.message
+						}), !1))))) && p.add(t), c.add(t);
+						continue;
+					}
+					if (p.has(t)) continue;
+					Y.has(r.status) && l.set(t, (l.get(t) ?? 0) + 1);
+					let s = yield* d.stores.subscriptions.listByTenant(t);
+					z(s.find((e) => e.providerSubscriptionId === r.providerSubscriptionId), r) || (yield* C(t, r, e), f.push(B(t, r, e)), c.add(t)), r.providerCustomerId !== null && o.get(r.providerCustomerId) !== t && (yield* d.stores.customers.upsert({
+						tenantId: t,
+						provider: n.name,
+						providerCustomerId: r.providerCustomerId
+					}), o.set(r.providerCustomerId, t), f.push({
+						_tag: "customerLinked",
+						tenantId: t,
+						providerCustomerId: r.providerCustomerId,
+						occurredAt: e
+					}), c.add(t));
+					let m = r.plan;
+					if (m !== null && Y.has(r.status)) {
+						let e = i.meteredPriceIdsFor(m).filter((e) => !r.priceIds.includes(e));
+						e.length > 0 && (yield* X(n.addSubscriptionPrices({
+							providerSubscriptionId: r.providerSubscriptionId,
+							priceIds: e
+						}), a), g += 1);
+					}
+				}
+				let y = 0, b = [];
+				for (let e of [
+					"active",
+					"trialing",
+					"pastDue",
+					"incomplete"
+				]) b.push(...yield* d.stores.subscriptions.listByStatus(e));
+				let x = [];
+				for (let t of b) {
+					if (u.has(t.providerSubscriptionId)) continue;
+					y += 1;
+					let r = yield* X(n.fetchSubscription(t.providerSubscriptionId), a);
+					if (r === null) {
+						x.push(t);
+						continue;
+					}
+					let i = {
+						...r,
+						providerSubscriptionId: t.providerSubscriptionId
+					};
+					yield* C(t.tenantId, i, e), f.push(B(t.tenantId, i, e)), c.add(t.tenantId);
+				}
+				let S = x.length >= pt && x.length * 2 >= b.length;
+				if (S) J.error("billing reconcile: the provider knows none of these live subscriptions — wrong account or provider? Nothing was canceled", {
+					unknown: x.length,
+					live: b.length,
+					provider: n.name
+				});
+				else for (let t of x) yield* d.stores.subscriptions.markCanceled(t.providerSubscriptionId), f.push(B(t.tenantId, {
+					...t,
+					status: "canceled",
+					providerSubscriptionId: t.providerSubscriptionId
+				}, e)), c.add(t.tenantId);
+				let ee = [...l].filter(([, e]) => e > 1).map(([e]) => e);
+				for (let e of ee) J.error("billing reconcile: tenant has more than one paying subscription — billed twice, resolve by hand", { tenant: e });
+				let w = {
+					checked: t.length + y,
+					corrected: [...c],
+					duplicates: ee,
+					unattributed: h,
+					meteredItemsRestored: g,
+					closedTenants: [...p],
+					refusedUnknown: S ? x.length : 0,
+					events: f
 				};
+				return J.info("billing reconcile from provider", {
+					checked: w.checked,
+					corrected: w.corrected.length,
+					duplicates: ee.length,
+					unattributed: h,
+					meteredItemsRestored: g,
+					closedTenants: w.closedTenants.length
+				}), yield* se(f), w;
 			}),
-			invoices: (e) => p.gen(function* () {
-				let t = yield* c.stores.customers.getByTenant(e);
-				return t === null ? [] : yield* q(n.listInvoices({ providerCustomerId: t.providerCustomerId }), a);
-			})
+			syncCustomer: L,
+			syncTenant: R
 		},
-		holder: c
+		holder: d
 	};
-}, tt = (e) => m.succeed(t, e), nt = "_voltro_ai_usage", rt = (e) => {
+}, yt = (e) => y.succeed(t, e), bt = "_voltro_ai_usage", xt = (e) => {
 	for (let [t, n] of Object.entries(e)) {
 		if (t.length === 0) throw Error("billing metering: a meter key must be non-empty");
 		if (n.from === "rpc") {
@@ -969,49 +1331,49 @@ var k = (e, t, n, r) => ({
 			if (typeof n.table != "string" || n.table.length === 0) throw Error(`billing metering: cdc meter '${t}' needs a 'table'`);
 		} else if (n.from !== "ai") throw Error(`billing metering: meter '${t}' has unknown source '${String(n.from)}'`);
 	}
-}, it = /* @__PURE__ */ new WeakMap(), at = (e) => {
+}, St = /* @__PURE__ */ new WeakMap(), Ct = (e) => {
 	if (!e.global && !e.sticky) return e;
-	let t = it.get(e);
-	return t === void 0 && (t = new RegExp(e.source, e.flags.replace(/[gy]/g, "")), it.set(e, t)), t;
-}, ot = (e, t) => typeof e == "string" ? t === e : at(e).test(t), st = (e, t, n) => Object.entries(e).filter(([, e]) => e.from === "rpc" && (e.kind === void 0 || e.kind === n) && ot(e.match, t)).map(([e]) => e), ct = (e, t, n) => Object.entries(e).filter(([, e]) => e.from === "cdc" && e.table === t && (e.op ?? "insert") === n).map(([e]) => e), lt = (e) => Object.entries(e).filter(([, e]) => e.from === "ai").map(([e, t]) => [e, t.metric ?? "tokens"]), ut = (e) => e.tenantId, dt = (e, t, n, r) => p.forEach(n, (n) => e.reportUsage(t, n, r).pipe(p.catchAll(() => p.void)), { discard: !0 }), ft = (e, t) => (n, r) => {
-	let i = st(t, r.tag, r.kind);
+	let t = St.get(e);
+	return t === void 0 && (t = new RegExp(e.source, e.flags.replace(/[gy]/g, "")), St.set(e, t)), t;
+}, wt = (e, t) => typeof e == "string" ? t === e : Ct(e).test(t), Tt = (e, t, n) => Object.entries(e).filter(([, e]) => e.from === "rpc" && (e.kind === void 0 || e.kind === n) && wt(e.match, t)).map(([e]) => e), Et = (e, t, n) => Object.entries(e).filter(([, e]) => e.from === "cdc" && e.table === t && (e.op ?? "insert") === n).map(([e]) => e), Dt = (e) => Object.entries(e).filter(([, e]) => e.from === "ai").map(([e, t]) => [e, t.metric ?? "tokens"]), Ot = (e) => e.tenantId, kt = (e, t, n, r) => v.forEach(n, (n) => e.reportUsage(t, n, r).pipe(v.catchAll(() => v.void)), { discard: !0 }), At = (e, t) => (n, r) => {
+	let i = Tt(t, r.tag, r.kind);
 	if (i.length === 0) return n;
-	let a = ut(r.subject);
-	return a === null ? n : n.pipe(p.tap(() => dt(e, a, i, 1)));
-}, pt = "billing-meter", mt = 5e4, ht = (e, t, n = {}) => {
-	let r = new g({
-		windowMs: ue(),
-		maxEntries: mt
+	let a = Ot(r.subject);
+	return a === null ? n : n.pipe(v.tap(() => kt(e, a, i, 1)));
+}, jt = "billing-meter", Mt = 5e4, Nt = (e, t, n = {}) => {
+	let r = new T({
+		windowMs: re(),
+		maxEntries: Mt
 	}), i = n.now ?? (() => Date.now()), a = !1;
 	return (o) => {
-		let s = ct(t, o.table, o.op);
-		if (s.length === 0) return p.void;
+		let s = Et(t, o.table, o.op);
+		if (s.length === 0) return v.void;
 		let c = o.new?.tenantId ?? o.old?.tenantId ?? null;
-		if (c === null) return p.void;
+		if (c === null) return v.void;
 		let l = n.claimChange?.();
-		if (l === void 0) return a || (a = !0, n.onUngated?.()), dt(e, c, s, 1);
-		let u = String(o.new?.id ?? o.old?.id ?? ""), d = se({
-			pipe: pt,
+		if (l === void 0) return a || (a = !0, n.onUngated?.()), kt(e, c, s, 1);
+		let u = String(o.new?.id ?? o.old?.id ?? ""), d = te({
+			pipe: jt,
 			op: o.op,
 			key: u,
 			next: o.new ?? null,
 			prev: o.old ?? null
-		}), f = ce(d, r.next(d, i()));
-		return p.promise(() => l(pt, f)).pipe(p.flatMap((t) => t ? dt(e, c, s, 1) : p.void));
+		}), f = D(d, r.next(d, i()));
+		return v.promise(() => l(jt, f)).pipe(v.flatMap((t) => t ? kt(e, c, s, 1) : v.void));
 	};
-}, gt = (e) => new Date(Date.UTC(e.getUTCFullYear(), e.getUTCMonth(), 1, 0, 0, 0, 0)), _t = (e, t, n, r = () => /* @__PURE__ */ new Date()) => p.gen(function* () {
-	let i = lt(n);
+}, Pt = (e) => new Date(Date.UTC(e.getUTCFullYear(), e.getUTCMonth(), 1, 0, 0, 0, 0)), Ft = (e, t, n, r = () => /* @__PURE__ */ new Date()) => v.gen(function* () {
+	let i = Dt(n);
 	if (i.length === 0) return;
 	let a = r();
-	K(a);
+	mt(a);
 	let o = {
-		table: nt,
-		predicate: le("calledAt", gt(a)),
+		table: bt,
+		predicate: ne("calledAt", Pt(a)),
 		order: [],
 		take: void 0,
 		skip: void 0,
 		projection: void 0
-	}, s = yield* p.promise(() => Promise.resolve(t.query(o)).then((e) => e).catch(() => [])), c = /* @__PURE__ */ new Map();
+	}, s = yield* v.promise(() => Promise.resolve(t.query(o)).then((e) => e).catch(() => [])), c = /* @__PURE__ */ new Map();
 	for (let e of s) {
 		let t = e.tenantId ?? null;
 		if (t === null) continue;
@@ -1024,20 +1386,21 @@ var k = (e, t, n, r) => ({
 	for (let [t, n] of i) for (let [r, i] of c) {
 		let a = n === "costMicroUsd" ? i.cost : i.tokens;
 		if (a <= 0) continue;
-		let o = a - (yield* e.checkEntitlement(r, t, 0).pipe(p.map((e) => e.used), p.catchAll(() => p.succeed(0))));
-		o > 0 && (yield* e.reportUsage(r, t, o).pipe(p.catchAll(() => p.void)));
+		let o = a - (yield* e.checkEntitlement(r, t, 0).pipe(v.map((e) => e.used), v.catchAll(() => v.succeed(0))));
+		o > 0 && (yield* e.reportUsage(r, t, o).pipe(v.catchAll(() => v.void)));
 	}
-}), vt = (e, t, n, r) => _t(e, t, n, r).pipe(p.andThen(e.flushUsage().pipe(p.catchAll(() => p.void)))), yt = (e) => Object.values(e).some((e) => e.from === "cdc"), bt = (e) => e === void 0 ? 0 : e === "unlimited" ? Infinity : e, xt = (e) => {
+}), It = (e, t, n, r) => Ft(e, t, n, r).pipe(v.andThen(e.flushUsage().pipe(v.catchAll(() => v.void)))), Lt = (e) => Object.values(e).some((e) => e.from === "cdc"), Rt = (e) => e === void 0 ? 0 : e === "unlimited" ? Infinity : e, zt = (e) => {
 	let t = /* @__PURE__ */ new Map();
 	for (let [n, r] of Object.entries(e)) r.priceId !== void 0 && t.set(r.priceId, n);
 	return {
 		has: (t) => Object.prototype.hasOwnProperty.call(e, t),
 		entitlementLimit: (t, n) => {
 			let r = e[t];
-			return r === void 0 ? 0 : bt(r.entitlements[n]);
+			return r === void 0 ? 0 : Rt(r.entitlements[n]);
 		},
 		planForPriceId: (e) => t.get(e) ?? null,
 		priceIdFor: (t) => e[t]?.priceId ?? null,
+		meteredPriceIdsFor: (t) => e[t]?.meteredPriceIds ?? [],
 		unitAmountFor: (t) => {
 			let n = e[t]?.unitAmountMinor;
 			return n !== void 0 && Number.isFinite(n) ? n : 0;
@@ -1045,14 +1408,14 @@ var k = (e, t, n, r) => ({
 		currencyFor: (t) => (e[t]?.currency ?? "usd").toLowerCase(),
 		planIds: () => Object.keys(e)
 	};
-}, St = () => xt({ [n]: { entitlements: {} } }), J = "_voltro_billing_flush_claims", Ct = C(J, {
-	id: y({ scheme: "numeric" }),
-	windowKey: w(),
-	claimedBy: w(),
-	claimedAt: T().default("now")
-}).unique("billingFlushClaimWindow", ["windowKey"]), wt = (e, t) => `billing-flush:${Math.floor(e / Math.max(1, t))}`, Tt = async (e, t, n, r) => {
+}, Bt = () => zt({ [n]: { entitlements: {} } }), Vt = "_voltro_billing_flush_claims", Ht = j(Vt, {
+	id: k({ scheme: "numeric" }),
+	windowKey: M(),
+	claimedBy: M(),
+	claimedAt: N().default("now")
+}).unique("billingFlushClaimWindow", ["windowKey"]), Ut = (e, t) => `billing-flush:${Math.floor(e / Math.max(1, t))}`, Wt = async (e, t, n, r) => {
 	try {
-		return (await e.insertIgnore(J, {
+		return (await e.insertIgnore(Vt, {
 			windowKey: t,
 			claimedBy: n,
 			claimedAt: new Date(r)
@@ -1060,38 +1423,572 @@ var k = (e, t, n, r) => ({
 	} catch {
 		return !0;
 	}
-}, Et = 3, Dt = 2e4, Ot = (e) => e.client ?? new D(e.apiKey, {
-	maxNetworkRetries: Et,
-	timeout: Dt,
+}, Gt = F.API_VERSION, Kt = [
+	"Checkout → \"Limit customers to one subscription\" (with the customer portal login link enabled) — Stripe's own refusal of a second subscription",
+	"Smart Retries + failed-payment emails (Billing → Revenue recovery)",
+	"invoice branding and email settings",
+	"a restricted key (rk_) for the app, separate from the provisioning key"
+], qt = (e) => typeof e.tax_code == "string" ? e.tax_code : e.tax_code?.id ?? null, Jt = (e) => ({
+	name: e.name,
+	description: e.description,
+	unit_label: e.unitLabel,
+	tax_code: e.taxCode,
+	metadata: {
+		...e.metadata,
+		voltro_key: e.key
+	}
+}), Yt = (e, t) => {
+	let n = [];
+	t.active || n.push("active"), t.name !== e.name && n.push("name"), (t.description ?? "") !== e.description && n.push("description"), (t.unit_label ?? "") !== e.unitLabel && n.push("unit_label"), qt(t) !== e.taxCode && n.push("tax_code");
+	for (let [r, i] of Object.entries({
+		...e.metadata,
+		voltro_key: e.key
+	})) t.metadata[r] !== i && n.push(`metadata.${r}`);
+	return n;
+}, Xt = (e, t) => {
+	let n = `product ${e.key}`, r = t.filter((t) => t.metadata.voltro_key === e.key);
+	if (r.length > 1) return {
+		finding: {
+			kind: "manual",
+			object: n,
+			detail: `${r.length} products carry this key — archive the extra ones`
+		},
+		id: null
+	};
+	let i = r[0];
+	if (i !== void 0) {
+		let t = Yt(e, i);
+		return t.length === 0 ? {
+			finding: {
+				kind: "ok",
+				object: n
+			},
+			id: i.id
+		} : {
+			finding: {
+				kind: "update",
+				object: n,
+				detail: t.join(", "),
+				apply: {
+					method: "POST",
+					path: `/v1/products/${i.id}`,
+					params: {
+						...Jt(e),
+						active: !0
+					}
+				}
+			},
+			id: i.id
+		};
+	}
+	let a = t.filter((t) => t.active && t.metadata.voltro_key === void 0 && Object.keys(e.metadata).length > 0 && Object.entries(e.metadata).every(([e, n]) => t.metadata[e] === n));
+	if (a.length === 1) {
+		let t = a[0];
+		return {
+			finding: {
+				kind: "adopt",
+				object: n,
+				detail: "existing product gets the catalog key",
+				apply: {
+					method: "POST",
+					path: `/v1/products/${t.id}`,
+					params: Jt(e)
+				}
+			},
+			id: t.id
+		};
+	}
+	return a.length > 1 ? {
+		finding: {
+			kind: "manual",
+			object: n,
+			detail: `${a.length} products could be this one — archive all but one`
+		},
+		id: null
+	} : {
+		finding: {
+			kind: "create",
+			object: n,
+			detail: e.name,
+			apply: {
+				method: "POST",
+				path: "/v1/products",
+				params: Jt(e)
+			}
+		},
+		id: null
+	};
+}, Zt = (e, t, n, r) => {
+	let i = [];
+	return r.product !== t && i.push("product"), r.currency !== e.currency && i.push("currency"), r.unit_amount !== e.unitAmount && i.push("unit_amount"), r.recurring?.interval !== e.interval && i.push("interval"), r.recurring?.usage_type !== e.usageType && i.push("usage_type"), e.usageType === "metered" && r.recurring?.meter !== n && i.push("meter"), r.tax_behavior !== e.taxBehavior && i.push("tax_behavior"), i;
+}, Qt = (e, t, n, r) => ({
+	product: t,
+	currency: e.currency,
+	unit_amount: e.unitAmount,
+	recurring: {
+		interval: e.interval,
+		usage_type: e.usageType,
+		...e.usageType === "metered" && n !== null ? { meter: n } : {}
+	},
+	tax_behavior: e.taxBehavior,
+	lookup_key: e.lookupKey,
+	...r ? { transfer_lookup_key: !0 } : {},
+	metadata: { voltro_key: e.lookupKey }
+}), $t = (e, t, n, r, i, a) => {
+	let o = `price ${e.lookupKey}`;
+	if (t === null) return {
+		finding: {
+			kind: "manual",
+			object: o,
+			detail: "its product is unresolved"
+		},
+		id: null
+	};
+	if (e.usageType === "metered" && n === null) return {
+		finding: {
+			kind: "manual",
+			object: o,
+			detail: "its meter is unresolved"
+		},
+		id: null
+	};
+	if (r !== null) {
+		let i = Zt(e, t, n, r);
+		if (i.length > 0) {
+			let s = {
+				method: "POST",
+				path: "/v1/prices",
+				params: Qt(e, t, n, !0)
+			};
+			return a ? {
+				finding: {
+					kind: "drift",
+					object: o,
+					detail: `replaced (${i.join(", ")}); existing subscriptions keep the old price`,
+					apply: s
+				},
+				id: null
+			} : {
+				finding: {
+					kind: "drift",
+					object: o,
+					detail: `${i.join(", ")} differ — a price change; rerun with --allow-price-change to replace it`
+				},
+				id: r.id
+			};
+		}
+		return r.active ? {
+			finding: {
+				kind: "ok",
+				object: o
+			},
+			id: r.id
+		} : {
+			finding: {
+				kind: "update",
+				object: o,
+				detail: "inactive",
+				apply: {
+					method: "POST",
+					path: `/v1/prices/${r.id}`,
+					params: { active: !0 }
+				}
+			},
+			id: r.id
+		};
+	}
+	let s = i.filter((r) => r.active && r.lookup_key === null && Zt(e, t, n, r).length === 0)[0];
+	return s === void 0 ? {
+		finding: {
+			kind: "create",
+			object: o,
+			detail: `${e.unitAmount} ${e.currency} / ${e.interval}`,
+			apply: {
+				method: "POST",
+				path: "/v1/prices",
+				params: Qt(e, t, n, !1)
+			}
+		},
+		id: null
+	} : {
+		finding: {
+			kind: "adopt",
+			object: o,
+			detail: "existing price gets the lookup key",
+			apply: {
+				method: "POST",
+				path: `/v1/prices/${s.id}`,
+				params: {
+					lookup_key: e.lookupKey,
+					metadata: { voltro_key: e.lookupKey }
+				}
+			}
+		},
+		id: s.id
+	};
+}, en = (e, t) => {
+	let n = `meter ${e.eventName}`, r = t.find((t) => t.event_name === e.eventName);
+	if (r === void 0) return {
+		finding: {
+			kind: "create",
+			object: n,
+			detail: e.displayName,
+			apply: {
+				method: "POST",
+				path: "/v1/billing/meters",
+				params: {
+					display_name: e.displayName,
+					event_name: e.eventName,
+					default_aggregation: { formula: e.formula },
+					customer_mapping: {
+						type: "by_id",
+						event_payload_key: e.customerPayloadKey
+					},
+					value_settings: { event_payload_key: e.valuePayloadKey }
+				}
+			}
+		},
+		id: null
+	};
+	let i = [];
+	return r.default_aggregation.formula !== e.formula && i.push("aggregation"), (r.customer_mapping.type !== "by_id" || r.customer_mapping.event_payload_key !== e.customerPayloadKey) && i.push("customer mapping"), r.value_settings.event_payload_key !== e.valuePayloadKey && i.push("value key"), i.length > 0 ? {
+		finding: {
+			kind: "drift",
+			object: n,
+			detail: `${i.join(", ")} differ and cannot be edited — a new meter needs a new event name`
+		},
+		id: r.id
+	} : r.status === "active" ? r.display_name === e.displayName ? {
+		finding: {
+			kind: "ok",
+			object: n
+		},
+		id: r.id
+	} : {
+		finding: {
+			kind: "update",
+			object: n,
+			detail: "display name",
+			apply: {
+				method: "POST",
+				path: `/v1/billing/meters/${r.id}`,
+				params: { display_name: e.displayName }
+			}
+		},
+		id: r.id
+	} : {
+		finding: {
+			kind: "update",
+			object: n,
+			detail: "inactive",
+			apply: {
+				method: "POST",
+				path: `/v1/billing/meters/${r.id}/reactivate`,
+				params: {}
+			}
+		},
+		id: r.id
+	};
+}, tn = (e, t) => {
+	let n = "tax settings", r = t.head_office?.address ?? {}, i = [];
+	for (let [t, n] of Object.entries(e.headOffice)) r[t] !== n && i.push(`head_office.${t}`);
+	return t.defaults.tax_code !== e.defaultTaxCode && i.push("defaults.tax_code"), t.defaults.tax_behavior !== e.defaultTaxBehavior && i.push("defaults.tax_behavior"), i.length === 0 ? t.status === "active" ? {
+		kind: "ok",
+		object: n
+	} : {
+		kind: "manual",
+		object: n,
+		detail: `status ${t.status}`
+	} : {
+		kind: "update",
+		object: n,
+		detail: i.join(", "),
+		apply: {
+			method: "POST",
+			path: "/v1/tax/settings",
+			params: {
+				head_office: { address: e.headOffice },
+				defaults: {
+					tax_code: e.defaultTaxCode,
+					tax_behavior: e.defaultTaxBehavior
+				}
+			}
+		}
+	};
+}, nn = (e, t, n) => ({
+	business_profile: {
+		headline: e.headline,
+		privacy_policy_url: e.privacyPolicyUrl,
+		terms_of_service_url: e.termsOfServiceUrl
+	},
+	default_return_url: t.portalReturnUrl,
+	features: {
+		customer_update: {
+			enabled: !0,
+			allowed_updates: [
+				"email",
+				"address",
+				"tax_id",
+				"name"
+			]
+		},
+		invoice_history: { enabled: !0 },
+		payment_method_update: { enabled: !0 },
+		subscription_cancel: {
+			enabled: !0,
+			mode: "at_period_end"
+		},
+		subscription_update: {
+			enabled: !0,
+			default_allowed_updates: ["price", "quantity"],
+			proration_behavior: "create_prorations",
+			products: n.map((e) => ({
+				product: e.productId,
+				prices: [e.priceId]
+			}))
+		}
+	},
+	metadata: { voltro_key: e.key }
+}), rn = (e) => JSON.stringify([...e ?? []].sort()), an = (e, t) => {
+	let n = [], r = t.features, i = e.features;
+	t.default_return_url !== e.default_return_url && n.push("default_return_url");
+	let a = e.business_profile;
+	for (let e of Object.keys(a)) t.business_profile[e] !== a[e] && n.push(`business_profile.${e}`);
+	for (let e of [
+		"customer_update",
+		"invoice_history",
+		"payment_method_update",
+		"subscription_cancel"
+	]) r[e]?.enabled !== !0 && n.push(`${e}.enabled`);
+	rn(r.customer_update?.allowed_updates) !== rn(i.customer_update.allowed_updates) && n.push("customer_update.allowed_updates"), r.subscription_cancel?.mode !== "at_period_end" && n.push("subscription_cancel.mode");
+	let o = r.subscription_update ?? {}, s = i.subscription_update;
+	o.enabled !== !0 && n.push("subscription_update.enabled"), o.proration_behavior !== s.proration_behavior && n.push("subscription_update.proration_behavior");
+	let c = (e) => JSON.stringify((e ?? []).map((e) => `${e.product}:${[...e.prices].sort().join("|")}`).sort());
+	return c(o.products) !== c(s.products) && n.push("subscription_update.products"), rn(o.default_allowed_updates) !== rn(s.default_allowed_updates) && n.push("subscription_update.default_allowed_updates"), n;
+}, on = (e, t, n, r) => {
+	let i = "customer portal";
+	if (n === null) return [{
+		kind: "manual",
+		object: i,
+		detail: "its plan prices are unresolved"
+	}];
+	let a = nn(e, t, n), o = r.find((t) => t.metadata.voltro_key === e.key) ?? r.find((t) => t.active && t.name === e.name);
+	if (o === void 0) return [{
+		kind: "create",
+		object: i,
+		detail: "self-service configuration",
+		apply: {
+			method: "POST",
+			path: "/v1/billing_portal/configurations",
+			params: {
+				...a,
+				name: e.name
+			}
+		}
+	}, ...r.some((e) => e.is_default) ? [{
+		kind: "manual",
+		object: i,
+		detail: "another configuration is the default — make this one the default in the Dashboard"
+	}] : []];
+	let s = [], c = an(a, o), l = o.metadata.voltro_key !== e.key;
+	return c.length > 0 || l || !o.active ? s.push({
+		kind: l ? "adopt" : "update",
+		object: i,
+		detail: [...c, ...o.active ? [] : ["active"]].join(", ") || "catalog key",
+		apply: {
+			method: "POST",
+			path: `/v1/billing_portal/configurations/${o.id}`,
+			params: {
+				...a,
+				active: !0
+			}
+		}
+	}) : s.push({
+		kind: "ok",
+		object: i
+	}), o.is_default || s.push({
+		kind: "manual",
+		object: i,
+		detail: "not the account default — portal sessions would use another configuration"
+	}), s;
+}, sn = (e, t) => {
+	if (e.webhookUrl === null) return {
+		kind: "ok",
+		object: "webhook endpoint (none: stripe listen forwards locally)"
+	};
+	let n = `webhook endpoint ${e.webhookUrl}`, r = t.filter((t) => t.url === e.webhookUrl);
+	if (r.length > 1) return {
+		kind: "manual",
+		object: n,
+		detail: `${r.length} endpoints for this url — delete all but one`
+	};
+	let i = r[0], a = [...On].sort();
+	return i === void 0 ? {
+		kind: "create",
+		object: n,
+		detail: `${a.length} events`,
+		apply: {
+			method: "POST",
+			path: "/v1/webhook_endpoints",
+			params: {
+				url: e.webhookUrl,
+				enabled_events: a,
+				api_version: Gt,
+				description: "Voltro billing"
+			}
+		}
+	} : i.api_version !== null && i.api_version !== Gt ? {
+		kind: "drift",
+		object: n,
+		detail: `api version ${i.api_version} — payloads would not match the SDK; recreate it (and rotate STRIPE_WEBHOOK_SECRET)`
+	} : JSON.stringify([...i.enabled_events].sort()) !== JSON.stringify(a) || i.status !== "enabled" ? {
+		kind: "update",
+		object: n,
+		detail: i.status === "enabled" ? "events" : "disabled",
+		apply: {
+			method: "POST",
+			path: `/v1/webhook_endpoints/${i.id}`,
+			params: {
+				enabled_events: a,
+				disabled: !1
+			}
+		}
+	} : {
+		kind: "ok",
+		object: n
+	};
+}, cn = (e) => {
+	let t = [];
+	for (let n of e.catalog.tax.registrationCountries) e.activeRegistrations.includes(n) || t.push({
+		kind: "manual",
+		object: `tax registration ${n}`,
+		detail: "none active — automatic tax collects nothing until it is registered (Dashboard → Tax → Registrations)"
+	});
+	if (!e.env.requireSellingReadiness) return t;
+	e.chargesEnabled === !1 && t.push({
+		kind: "manual",
+		object: "account",
+		detail: "charges not enabled — finish activation (business details, bank account) in the Dashboard"
+	}), e.chargesEnabled === null && t.push({
+		kind: "manual",
+		object: "account",
+		detail: "activation not readable with this key — check it in the Dashboard"
+	}), e.accountTaxIds === 0 && t.push({
+		kind: "manual",
+		object: "account tax id",
+		detail: "no VAT id on the account — invoices lack the issuer id"
+	}), e.accountTaxIds === null && t.push({
+		kind: "manual",
+		object: "account tax id",
+		detail: "not readable with this key — check Dashboard → Settings → Tax ids"
+	});
+	for (let n of e.catalog.dashboardReminders ?? Kt) t.push({
+		kind: "manual",
+		object: "dashboard",
+		detail: `${n} — not checkable through the API`
+	});
+	return t;
+}, ln = (e) => {
+	let t = [], n = (e, r) => {
+		if (r !== void 0) {
+			if (r === null) {
+				t.push(`${encodeURIComponent(e)}=`);
+				return;
+			}
+			if (Array.isArray(r)) {
+				r.forEach((t, r) => n(`${e}[${r}]`, t));
+				return;
+			}
+			if (typeof r == "object") {
+				for (let [t, i] of Object.entries(r)) n(`${e}[${t}]`, i);
+				return;
+			}
+			t.push(`${encodeURIComponent(e)}=${encodeURIComponent(String(r))}`);
+		}
+	};
+	for (let [t, r] of Object.entries(e)) n(t, r);
+	return t.join("&");
+}, un = (e) => e.replace(/\b(sk|rk|rkcs|pk)_(test|live)_[A-Za-z0-9*]+/g, "$1_$2_[REDACTED]").replace(/\bwhsec_[A-Za-z0-9]+/g, "whsec_[REDACTED]"), dn = class extends Error {
+	status;
+	constructor(e, t) {
+		super(t), this.status = e;
+	}
+}, fn = (e, t = fetch) => {
+	let n = async (n, r, i = {}) => {
+		if (!/^\/v[12]\/[A-Za-z0-9_/.-]+$/.test(r)) throw new dn(0, `refusing request path ${JSON.stringify(r)}`);
+		let a = ln(i), o = await t(`https://api.stripe.com${r}${n === "GET" && a.length > 0 ? `?${a}` : ""}`, {
+			method: n,
+			headers: {
+				authorization: `Bearer ${e}`,
+				"stripe-version": Gt,
+				...n === "POST" ? { "content-type": "application/x-www-form-urlencoded" } : {}
+			},
+			...n === "POST" ? { body: a } : {}
+		}), s = await o.json();
+		if (!o.ok) throw new dn(o.status, un(s.error?.message ?? `HTTP ${o.status}`));
+		return s;
+	};
+	return {
+		get: (e, t) => n("GET", e, t),
+		post: (e, t) => n("POST", e, t),
+		list: async (e, t = {}) => {
+			let r = [], i;
+			for (;;) {
+				let a = await n("GET", e, {
+					limit: 100,
+					...t,
+					...i === void 0 ? {} : { starting_after: i }
+				});
+				if (r.push(...a.data), !a.has_more || a.data.length === 0) return r;
+				i = a.data[a.data.length - 1].id;
+			}
+		}
+	};
+}, pn = P({ scope: "@voltro/plugin-billing" }), mn = 3, hn = 2e4, gn = (e) => e.client ?? new F(e.apiKey, {
+	maxNetworkRetries: mn,
+	timeout: hn,
 	appInfo: {
 		name: "voltro",
 		url: "https://voltro.dev"
 	}
-}), kt = (e) => e instanceof D.errors.StripeConnectionError || e instanceof D.errors.StripeAPIError || e instanceof D.errors.StripeRateLimitError, At = (e) => e instanceof D.errors.StripeError ? e.code ?? e.type : void 0, Y = (t, n) => p.tryPromise({
+}), _n = (e) => e instanceof F.errors.StripeConnectionError || e instanceof F.errors.StripeAPIError || e instanceof F.errors.StripeRateLimitError, vn = (e) => e instanceof F.errors.StripeError ? e.code ?? e.type : void 0, Z = (t, n) => v.tryPromise({
 	try: n,
-	catch: (n) => new e({
-		source: t,
-		message: jt(n),
-		transient: kt(n)
-	})
-}), jt = (e) => {
-	if (e instanceof D.errors.StripeError) {
-		let t = At(e);
+	catch: (n) => {
+		let r = _n(n);
+		return pn.warn("stripe call failed", {
+			source: t,
+			transient: r,
+			detail: un(yn(n))
+		}), new e({
+			source: t,
+			message: bn(n),
+			transient: r
+		});
+	}
+}), yn = (e) => {
+	if (e instanceof F.errors.StripeError) {
+		let t = vn(e);
 		return t === void 0 ? e.message : `${e.message} (${t})`;
 	}
 	return String(e?.message ?? e);
-}, Mt = (e) => {
+}, bn = (e) => {
+	if (e instanceof F.errors.StripeError) {
+		let t = [e.code, e.decline_code].filter((e) => typeof e == "string" && e.length > 0);
+		return t.length > 0 ? `${e.type} (${t.join(", ")})` : e.type;
+	}
+	return "provider call failed";
+}, xn = (e) => {
 	let t = e.items?.data?.[0];
 	return {
-		start: X(t?.current_period_start),
-		end: X(t?.current_period_end)
+		start: Q(t?.current_period_start),
+		end: Q(t?.current_period_end)
 	};
-}, X = (e) => typeof e == "number" && Number.isFinite(e) ? /* @__PURE__ */ new Date(e * 1e3) : null, Nt = (e) => {
+}, Q = (e) => typeof e == "number" && Number.isFinite(e) ? /* @__PURE__ */ new Date(e * 1e3) : null, Sn = (e) => {
 	let t = e.items?.data ?? [];
 	if (t.length === 0) return 1;
 	let n = t.reduce((e, t) => e + (t.quantity ?? 0), 0);
 	return n > 0 ? n : 1;
-}, Pt = {
+}, Cn = {
 	active: "active",
 	trialing: "trialing",
 	past_due: "pastDue",
@@ -1100,44 +1997,58 @@ var k = (e, t, n, r) => ({
 	incomplete: "incomplete",
 	incomplete_expired: "canceled",
 	paused: "pastDue"
-}, Z = (e) => {
+}, $ = (e) => {
 	let t = e.metadata?.tenantId;
 	if (typeof t == "string" && t.length > 0) return t;
 	let n = e.client_reference_id;
 	return typeof n == "string" && n.length > 0 ? n : null;
-}, Ft = (e) => {
-	let t = e.items?.data?.[0]?.price;
+}, wn = (e) => {
+	let t = e.items?.data ?? [];
+	return t.find((e) => e.price?.recurring?.usage_type !== "metered") ?? t[0];
+}, Tn = (e) => {
+	let t = wn(e)?.price;
 	return typeof t?.id == "string" ? t.id : null;
-}, Q = (e, t) => {
-	let n = e.metadata?.plan;
-	if (typeof n == "string" && n.length > 0) return n;
-	let r = Ft(e);
-	return r !== null && t ? t(r) : null;
-}, It = (e, t) => {
-	let n = X(e.created);
+}, En = (e) => typeof e == "string" ? e : typeof e?.id == "string" ? e.id : null, Dn = (e, t) => {
+	let n = Tn(e), r = n !== null && t ? t(n) : null;
+	if (r !== null) return r;
+	let i = e.metadata?.plan;
+	return typeof i == "string" && i.length > 0 ? i : null;
+}, On = [
+	"checkout.session.completed",
+	"customer.created",
+	"customer.deleted",
+	"customer.subscription.created",
+	"customer.subscription.deleted",
+	"customer.subscription.paused",
+	"customer.subscription.resumed",
+	"customer.subscription.updated",
+	"invoice.paid",
+	"invoice.payment_failed"
+], kn = (e, t) => {
+	let n = Q(e.created);
 	switch (e.type) {
 		case "customer.subscription.created":
 		case "customer.subscription.updated":
 		case "customer.subscription.resumed":
 		case "customer.subscription.paused": {
-			let r = e.data.object, i = Z(r), a = Q(r, t), o = Pt[r.status];
+			let r = e.data.object, i = $(r), a = Dn(r, t), o = Cn[r.status];
 			if (i === null || a === null || o === void 0) return null;
-			let s = Mt(r);
+			let s = xn(r);
 			return {
 				_tag: "subscriptionUpserted",
 				tenantId: i,
 				providerSubscriptionId: r.id,
 				plan: a,
 				status: o,
-				quantity: Nt(r),
+				quantity: Sn(r),
 				currentPeriodStart: s.start,
 				currentPeriodEnd: s.end,
-				cancelAt: X(r.cancel_at),
+				cancelAt: Q(r.cancel_at),
 				occurredAt: n
 			};
 		}
 		case "customer.subscription.deleted": {
-			let t = e.data.object, r = Z(t);
+			let t = e.data.object, r = $(t);
 			return r === null ? null : {
 				_tag: "subscriptionCanceled",
 				tenantId: r,
@@ -1147,7 +2058,7 @@ var k = (e, t, n, r) => ({
 		}
 		case "invoice.paid":
 		case "invoice.payment_failed": {
-			let t = e.data.object, r = Z(t);
+			let t = e.data.object, r = $(t) ?? $({ metadata: t.parent?.subscription_details?.metadata ?? null });
 			return r === null || typeof t.id != "string" ? null : {
 				_tag: e.type === "invoice.paid" ? "invoicePaid" : "invoicePaymentFailed",
 				tenantId: r,
@@ -1157,8 +2068,26 @@ var k = (e, t, n, r) => ({
 				occurredAt: n
 			};
 		}
+		case "checkout.session.completed": {
+			let t = e.data.object, r = $(t), i = En(t.customer);
+			return r === null || i === null ? null : {
+				_tag: "customerLinked",
+				tenantId: r,
+				providerCustomerId: i,
+				occurredAt: n
+			};
+		}
+		case "customer.deleted": {
+			let t = e.data.object;
+			return {
+				_tag: "customerUnlinked",
+				tenantId: $(t),
+				providerCustomerId: t.id,
+				occurredAt: n
+			};
+		}
 		case "customer.created": {
-			let t = e.data.object, r = Z(t);
+			let t = e.data.object, r = $(t);
 			return r === null ? null : {
 				_tag: "customerLinked",
 				tenantId: r,
@@ -1168,30 +2097,56 @@ var k = (e, t, n, r) => ({
 		}
 		default: return null;
 	}
-}, Lt = {
+}, An = {
 	prorate: "create_prorations",
 	none: "none",
 	always_invoice: "always_invoice"
-}, Rt = (t) => {
-	let n = Ot(t), r = t.planForPriceId, i = (e) => n.subscriptions.retrieve(e, { expand: ["items.data.price"] }), a = (e, t) => {
-		let n = Mt(e), i = e.items?.data?.[0]?.price;
+}, jn = (t) => {
+	let n = gn(t), r = t.planForPriceId, i = (e) => {
+		let t = xn(e);
 		return {
-			plan: Q(e, r) ?? "free",
-			quantity: Nt(e),
+			status: Cn[e.status] ?? "incomplete",
+			plan: Dn(e, r),
+			quantity: Sn(e),
+			currentPeriodStart: t.start,
+			currentPeriodEnd: t.end,
+			cancelAt: Q(e.cancel_at)
+		};
+	}, a = (e) => ({
+		...i(e),
+		providerSubscriptionId: e.id,
+		providerCustomerId: En(e.customer),
+		tenantId: $(e),
+		priceIds: (e.items?.data ?? []).map((e) => e.price?.id).filter((e) => typeof e == "string")
+	}), o = t.closeSettleSeconds ?? 600, s = {
+		periodEnd: (e) => n.subscriptions.update(e, {
+			cancel_at_period_end: !0,
+			expand: ["items.data.price"]
+		}),
+		close: (e) => n.subscriptions.update(e, {
+			cancel_at: Math.ceil(Date.now() / 1e3) + o,
+			proration_behavior: "create_prorations",
+			expand: ["items.data.price"]
+		})
+	}, c = (e) => n.subscriptions.retrieve(e, { expand: ["items.data.price"] }), l = (e, t) => {
+		let n = xn(e), i = wn(e)?.price;
+		return {
+			plan: Dn(e, r) ?? "free",
+			quantity: Sn(e),
 			prorationMinor: t,
 			currency: (i?.currency ?? "usd").toLowerCase(),
 			currentPeriodStart: n.start,
 			currentPeriodEnd: n.end
 		};
-	}, o = (e, t) => {
-		let n = e.items.data[0]?.id;
+	}, u = (e, t) => {
+		let n = wn(e)?.id;
 		return {
 			items: [{
 				...n === void 0 ? {} : { id: n },
 				...t.priceId === void 0 ? {} : { price: t.priceId },
 				...t.quantity === void 0 ? {} : { quantity: t.quantity }
 			}],
-			proration_behavior: Lt[t.proration ?? "prorate"],
+			proration_behavior: An[t.proration ?? "prorate"],
 			...t.priceId !== void 0 && r ? { metadata: {
 				...e.metadata,
 				plan: r(t.priceId) ?? ""
@@ -1201,7 +2156,8 @@ var k = (e, t, n, r) => ({
 	return {
 		name: "stripe",
 		supportsMeteredUsage: t.supportsMeteredUsage ?? !0,
-		createCheckoutSession: (e) => Y("stripe.checkout.sessions.create", async () => {
+		usageRequiresCustomer: !0,
+		createCheckoutSession: (e) => Z("stripe.checkout.sessions.create", async () => {
 			let t = await n.checkout.sessions.create({
 				mode: "subscription",
 				line_items: [{
@@ -1212,7 +2168,7 @@ var k = (e, t, n, r) => ({
 						minimum: e.adjustableQuantity.min,
 						maximum: e.adjustableQuantity.max
 					} } : {}
-				}],
+				}, ...(e.meteredPriceIds ?? []).map((e) => ({ price: e }))],
 				success_url: e.successUrl,
 				cancel_url: e.cancelUrl,
 				client_reference_id: e.tenantId,
@@ -1233,59 +2189,100 @@ var k = (e, t, n, r) => ({
 			if (typeof t.url != "string") throw Error("checkout session has no url");
 			return { url: t.url };
 		}),
-		createPortalSession: (e) => Y("stripe.billingPortal.sessions.create", async () => ({ url: (await n.billingPortal.sessions.create({
+		createPortalSession: (e) => Z("stripe.billingPortal.sessions.create", async () => ({ url: (await n.billingPortal.sessions.create({
 			customer: e.providerCustomerId,
 			return_url: e.returnUrl
 		})).url })),
-		reportUsage: (e) => Y("stripe.billing.meterEvents.create", async () => {
-			await n.billing.meterEvents.create({
-				event_name: e.entitlementKey,
-				identifier: `${e.tenantId}:${e.entitlementKey}:${e.periodEnd?.toISOString() ?? "current"}`,
-				payload: {
-					value: String(e.quantity),
-					stripe_customer_id: e.tenantId
+		reportUsage: (t) => {
+			let r = t.providerCustomerId;
+			return r === void 0 ? v.fail(new e({
+				source: "stripe.billing.meterEvents.create",
+				message: `no Stripe customer linked for tenant '${t.tenantId}'`,
+				transient: !1
+			})) : Z("stripe.billing.meterEvents.create", async () => {
+				try {
+					await n.billing.meterEvents.create({
+						event_name: t.entitlementKey,
+						identifier: t.idempotencyKey ?? `${t.tenantId}:${t.entitlementKey}:${t.periodEnd?.toISOString() ?? "current"}`,
+						payload: {
+							value: String(t.quantity),
+							stripe_customer_id: r
+						}
+					});
+				} catch (e) {
+					if (Mn(e)) return;
+					throw e;
 				}
 			});
+		},
+		updateSubscription: (e) => Z("stripe.subscriptions.update", async () => {
+			let t = await c(e.providerSubscriptionId), r = await n.subscriptions.update(e.providerSubscriptionId, u(t, e)), i = await Fn(n, r);
+			return l(r, i);
 		}),
-		updateSubscription: (e) => Y("stripe.subscriptions.update", async () => {
-			let t = await i(e.providerSubscriptionId), r = await n.subscriptions.update(e.providerSubscriptionId, o(t, e)), s = await Bt(n, r);
-			return a(r, s);
-		}),
-		previewSubscriptionChange: (e) => Y("stripe.invoices.createPreview", async () => {
-			let t = await i(e.providerSubscriptionId), s = o(t, e), c = (await n.invoices.createPreview({
+		previewSubscriptionChange: (e) => Z("stripe.invoices.createPreview", async () => {
+			let t = await c(e.providerSubscriptionId), i = u(t, e), a = (await n.invoices.createPreview({
 				subscription: e.providerSubscriptionId,
 				subscription_details: {
-					items: s.items,
-					...s.proration_behavior === void 0 ? {} : { proration_behavior: s.proration_behavior }
+					items: i.items,
+					...i.proration_behavior === void 0 ? {} : { proration_behavior: i.proration_behavior }
 				}
 			})).lines.data.filter((e) => e.parent?.subscription_item_details?.proration === !0).reduce((e, t) => e + t.amount, 0);
 			return {
-				...a(t, c),
+				...l(t, a),
 				...e.quantity === void 0 ? {} : { quantity: e.quantity },
 				...e.priceId !== void 0 && r ? { plan: r(e.priceId) ?? "free" } : {}
 			};
 		}),
-		fetchSubscription: (e) => Y("stripe.subscriptions.retrieve", async () => {
+		fetchSubscription: (e) => Z("stripe.subscriptions.retrieve", async () => {
 			try {
-				let t = await i(e), n = Mt(t);
-				return {
-					status: Pt[t.status] ?? "incomplete",
-					plan: Q(t, r),
-					quantity: Nt(t),
-					currentPeriodStart: n.start,
-					currentPeriodEnd: n.end,
-					cancelAt: X(t.cancel_at)
-				};
+				return i(await c(e));
 			} catch (e) {
-				if (e instanceof D.errors.StripeInvalidRequestError && e.statusCode === 404) return null;
+				if (e instanceof F.errors.StripeInvalidRequestError && e.statusCode === 404) return null;
 				throw e;
 			}
 		}),
-		customerEmail: (e) => Y("stripe.customers.retrieve", async () => {
+		listSubscriptions: (e) => Z("stripe.subscriptions.list", async () => {
+			let t = [];
+			for await (let r of n.subscriptions.list({
+				limit: 100,
+				expand: ["data.items.data.price"],
+				...e.providerCustomerId === void 0 ? {} : { customer: e.providerCustomerId }
+			})) t.push(a(r));
+			return t;
+		}),
+		cancelSubscription: (e) => Z("stripe.subscriptions.cancel", async () => i(await s[e.mode](e.providerSubscriptionId))),
+		resumeSubscription: (e) => Z("stripe.subscriptions.update", async () => i(await n.subscriptions.update(e, {
+			cancel_at_period_end: !1,
+			expand: ["items.data.price"]
+		}))),
+		ensureCustomer: (e) => Z("stripe.customers.create", async () => {
+			let t = (await n.customers.search({
+				query: `metadata['tenantId']:'${e.tenantId.replace(/['\\]/g, "")}'`,
+				limit: 2
+			})).data.find((t) => t.metadata?.tenantId === e.tenantId);
+			return t === void 0 ? (await n.customers.create({ metadata: { tenantId: e.tenantId } }, { idempotencyKey: `voltro-billing-customer:${e.tenantId}` })).id : t.id;
+		}),
+		expireOpenCheckouts: (e) => Z("stripe.checkout.sessions.expire", async () => {
+			let t = 0;
+			for await (let r of n.checkout.sessions.list({
+				customer: e.providerCustomerId,
+				status: "open",
+				limit: 100
+			})) await n.checkout.sessions.expire(r.id), t += 1;
+			return t;
+		}),
+		addSubscriptionPrices: (e) => Z("stripe.subscriptionItems.create", async () => {
+			for (let t of e.priceIds) await n.subscriptionItems.create({
+				subscription: e.providerSubscriptionId,
+				price: t,
+				proration_behavior: "none"
+			});
+		}),
+		customerEmail: (e) => Z("stripe.customers.retrieve", async () => {
 			let t = await n.customers.retrieve(e);
 			return t.deleted === !0 ? null : typeof t.email == "string" && t.email.length > 0 ? t.email : null;
 		}),
-		listInvoices: (e) => Y("stripe.invoices.list", async () => (await n.invoices.list({
+		listInvoices: (e) => Z("stripe.invoices.list", async () => (await n.invoices.list({
 			customer: e.providerCustomerId,
 			limit: e.limit ?? 20
 		})).data.map((e) => ({
@@ -1293,11 +2290,11 @@ var k = (e, t, n, r) => ({
 			amountMinor: e.amount_due,
 			currency: e.currency,
 			status: e.status ?? "unknown",
-			createdAt: X(e.created),
+			createdAt: Q(e.created),
 			hostedUrl: e.hosted_invoice_url ?? null,
 			pdfUrl: e.invoice_pdf ?? null
 		}))),
-		verifyWebhook: (t) => p.try({
+		verifyWebhook: (t) => v.try({
 			try: () => n.webhooks.constructEvent(Buffer.from(t.rawBody), t.signatureHeader, t.secret),
 			catch: (t) => new e({
 				source: "stripe.webhooks.constructEvent",
@@ -1305,36 +2302,116 @@ var k = (e, t, n, r) => ({
 				transient: !1
 			})
 		}),
-		normalizeEvent: (e) => p.succeed(zt(e) ? It(e, r) : null)
+		eventContext: (e) => Pn(e) ? {
+			providerCustomerId: Nn(e.data.object),
+			createdAt: Q(e.created)
+		} : {
+			providerCustomerId: null,
+			createdAt: null
+		},
+		listUndeliveredEvents: () => Z("stripe.events.list", async () => {
+			let e = [];
+			for await (let t of n.events.list({
+				delivery_success: !1,
+				types: [...On],
+				limit: 100
+			})) e.push({
+				id: t.id,
+				providerCustomerId: Nn(t.data.object),
+				createdAt: Q(t.created)
+			});
+			return e;
+		}),
+		normalizeEvent: (e) => v.succeed(Pn(e) ? kn(e, r) : null)
 	};
-}, zt = (e) => typeof e == "object" && !!e && typeof e.type == "string" && typeof e.data == "object", Bt = async (e, t) => {
+}, Mn = (e) => e instanceof F.errors.StripeInvalidRequestError && typeof e.message == "string" && e.message.startsWith("An event already exists with identifier"), Nn = (e) => {
+	let t = e;
+	return t.object === "customer" ? typeof t.id == "string" ? t.id : null : En(t.customer ?? null);
+}, Pn = (e) => typeof e == "object" && !!e && typeof e.type == "string" && typeof e.data == "object", Fn = async (e, t) => {
 	try {
 		return (await e.invoices.createPreview({ subscription: t.id })).lines.data.filter((e) => e.parent?.subscription_item_details?.proration === !0).reduce((e, t) => e + t.amount, 0);
 	} catch {
 		return 0;
 	}
-}, Vt = (e) => {
-	let t = e?.baseUrl ?? "https://mock.billing.local", n = [], r = [], i = [], a = /* @__PURE__ */ new Map(), o = /* @__PURE__ */ new Map(), s = (e) => typeof e == "object" && !!e && typeof e._tag == "string";
+}, In = (e) => {
+	let t = e?.baseUrl ?? "https://mock.billing.local", n = [], r = [], i = [], a = /* @__PURE__ */ new Map(), o = /* @__PURE__ */ new Map(), s = /* @__PURE__ */ new Map(), c = [], l = [], u = [], d = [], f = [], p = [], m = /* @__PURE__ */ new Map(), h = [], g = 0, _ = (e, t) => {
+		let n = {
+			...a.get(e) ?? {
+				status: "active",
+				plan: null,
+				quantity: 1,
+				currentPeriodStart: null,
+				currentPeriodEnd: null,
+				cancelAt: null
+			},
+			...t
+		};
+		a.set(e, n);
+		let r = o.get(e);
+		return r !== void 0 && o.set(e, {
+			...r,
+			...t
+		}), n;
+	}, y = (e) => typeof e == "object" && !!e && typeof e._tag == "string";
 	return {
 		name: "mock",
 		supportsMeteredUsage: e?.supportsMeteredUsage ?? !0,
 		pushed: n,
 		updates: r,
 		fetched: i,
+		cancels: c,
+		resumes: l,
+		priceAdds: u,
+		checkouts: d,
+		customersCreated: f,
+		expiredFor: p,
+		setUndelivered: (e) => {
+			h = e;
+		},
+		undeliveredReads: () => g,
+		listUndeliveredEvents: () => v.sync(() => (g += 1, h)),
+		ensureCustomer: (e) => v.sync(() => {
+			let t = m.get(e.tenantId);
+			if (t !== void 0) return t;
+			let n = `mock_cus_${e.tenantId}`;
+			return m.set(e.tenantId, n), f.push(e.tenantId), n;
+		}),
+		expireOpenCheckouts: (e) => v.sync(() => (p.push(e.providerCustomerId), 0)),
+		listSubscription: (e) => {
+			o.set(e.providerSubscriptionId, e), a.set(e.providerSubscriptionId, e);
+		},
 		setSubscription: (e, t) => {
 			t === null ? a.delete(e) : a.set(e, t);
 		},
 		setCustomerEmail: (e, t) => {
-			t === null ? o.delete(e) : o.set(e, t);
+			t === null ? s.delete(e) : s.set(e, t);
 		},
-		fetchSubscription: (e) => p.sync(() => (i.push(e), a.get(e) ?? null)),
-		customerEmail: (e) => p.sync(() => o.get(e) ?? null),
-		createCheckoutSession: (e) => p.succeed({ url: `${t}/checkout?tenant=${encodeURIComponent(e.tenantId)}&price=${encodeURIComponent(e.priceId)}` }),
-		createPortalSession: (e) => p.succeed({ url: `${t}/portal?customer=${encodeURIComponent(e.providerCustomerId)}` }),
-		reportUsage: (e) => p.sync(() => {
+		fetchSubscription: (e) => v.sync(() => (i.push(e), a.get(e) ?? null)),
+		listSubscriptions: (e) => v.sync(() => [...o.values()].filter((t) => t.status !== "canceled" && (e.providerCustomerId === void 0 || t.providerCustomerId === e.providerCustomerId))),
+		cancelSubscription: (e) => v.sync(() => {
+			c.push({
+				providerSubscriptionId: e.providerSubscriptionId,
+				mode: e.mode
+			});
+			let t = a.get(e.providerSubscriptionId);
+			return e.mode === "close" ? _(e.providerSubscriptionId, { cancelAt: new Date(Date.now() + 6e5) }) : _(e.providerSubscriptionId, { cancelAt: t?.currentPeriodEnd ?? /* @__PURE__ */ new Date(0) });
+		}),
+		resumeSubscription: (e) => v.sync(() => (l.push(e), _(e, { cancelAt: null }))),
+		addSubscriptionPrices: (e) => v.sync(() => {
+			u.push({
+				providerSubscriptionId: e.providerSubscriptionId,
+				priceIds: e.priceIds
+			});
+			let t = o.get(e.providerSubscriptionId);
+			t !== void 0 && _(e.providerSubscriptionId, { priceIds: [...t.priceIds, ...e.priceIds] });
+		}),
+		customerEmail: (e) => v.sync(() => s.get(e) ?? null),
+		createCheckoutSession: (e) => v.sync(() => (d.push(e), { url: `${t}/checkout?tenant=${encodeURIComponent(e.tenantId)}&price=${encodeURIComponent(e.priceId)}` })),
+		createPortalSession: (e) => v.succeed({ url: `${t}/portal?customer=${encodeURIComponent(e.providerCustomerId)}` }),
+		reportUsage: (e) => v.sync(() => {
 			n.push(e);
 		}),
-		updateSubscription: (e) => p.sync(() => (r.push(e), {
+		updateSubscription: (e) => v.sync(() => (r.push(e), {
 			plan: e.priceId ?? "mock-plan",
 			quantity: e.quantity ?? 1,
 			prorationMinor: 0,
@@ -1342,7 +2419,7 @@ var k = (e, t, n, r) => ({
 			currentPeriodStart: null,
 			currentPeriodEnd: null
 		})),
-		previewSubscriptionChange: (e) => p.succeed({
+		previewSubscriptionChange: (e) => v.succeed({
 			plan: e.priceId ?? "mock-plan",
 			quantity: e.quantity ?? 1,
 			prorationMinor: 0,
@@ -1350,56 +2427,227 @@ var k = (e, t, n, r) => ({
 			currentPeriodStart: null,
 			currentPeriodEnd: null
 		}),
-		listInvoices: () => p.succeed([]),
-		normalizeEvent: (e) => p.succeed(s(e) ? e : null)
+		listInvoices: () => v.succeed([]),
+		normalizeEvent: (e) => v.succeed(y(e) ? e : null)
 	};
-}, Ht = (e) => {
+}, Ln = /* @__PURE__ */ new Set([
+	"",
+	"development",
+	"dev",
+	"test"
+]), Rn = (e) => !Ln.has((e ?? "").trim().toLowerCase()), zn = (e) => {
+	if (Rn(e.env.NODE_ENV)) {
+		if (e.resolvedName === "mock" && e.providerOption === void 0) throw Error("billingPlugin: no STRIPE_SECRET_KEY in a production boot — refusing to run the MOCK billing provider, which answers every charge and subscription call successfully and reaches nobody. Set STRIPE_SECRET_KEY, or declare `billingPlugin({ provider: 'mock' })` if this deployment does not sell.");
+		if (e.resolvedName === "stripe") {
+			if (e.webhookSecret === null || e.webhookSecret.trim() === "") throw Error("billingPlugin: Stripe in a production boot needs STRIPE_WEBHOOK_SECRET — without it no provider event can be verified, so subscriptions, cancellations and payments would never reach this app.");
+			if (e.redirectOrigins === void 0 || e.redirectOrigins.length === 0) throw Error("billingPlugin: Stripe in a production boot needs `redirectOrigins` — the origins checkout and the customer portal may send a customer back to. Without it any URL a caller names is accepted.");
+		}
+	}
+}, Bn = (e) => {
 	let { provider: t, env: n } = e;
 	if (t !== void 0 && typeof t == "object") return t;
-	let r = t ?? (n.STRIPE_SECRET_KEY ? "stripe" : "mock");
-	if (r === "mock" && t === void 0 && n.NODE_ENV === "production" && e.log?.warn("billing: no STRIPE_SECRET_KEY and no explicit `provider` — running the MOCK billing provider. Every charge, subscription and invoice call will SUCCEED and reach nobody. Set STRIPE_SECRET_KEY, or declare `billingPlugin({ provider: 'mock' })` to say this is deliberate."), r === "stripe") {
+	if ((t ?? (n.STRIPE_SECRET_KEY ? "stripe" : "mock")) === "stripe") {
 		let t = e.apiKey ?? n.STRIPE_SECRET_KEY;
 		if (!t) throw Error("billingPlugin: provider 'stripe' needs an apiKey (option or STRIPE_SECRET_KEY env)");
-		return Rt({
+		return jn({
 			apiKey: t,
 			...e.planForPriceId ? { planForPriceId: e.planForPriceId } : {}
 		});
 	}
-	return Vt();
-}, Ut = E({ scope: "@voltro/plugin-billing" }), Wt = "billing", $ = "/billing/webhook", Gt = (e) => fe({
-	id: Wt,
-	path: $,
-	provider: O(),
-	payload: ne.Unknown,
+	return In();
+}, Vn = (e) => e.name === "mock" ? [] : [{
+	destination: e.name === "stripe" ? "api.stripe.com" : `runtime:the '${e.name}' billing provider`,
+	purpose: "customers, subscriptions, checkout and metered usage",
+	data: ["personal", "metadata"],
+	disable: "without STRIPE_SECRET_KEY the mock provider answers, and nothing leaves (production refuses to boot on it)"
+}], Hn = P({ scope: "@voltro/plugin-billing" }), Un = "billing", Wn = "/billing/webhook", Gn = (e) => I({
+	id: Un,
+	path: Wn,
+	provider: se(),
+	payload: x.Unknown,
 	handler: async (t) => {
-		let n = e.provider.verifyWebhook !== void 0 && e.webhookSecret !== null && e.webhookSecret !== void 0 ? await p.runPromise(e.provider.verifyWebhook({
+		let n = e.provider.verifyWebhook !== void 0 && e.webhookSecret !== null && e.webhookSecret !== void 0 ? await v.runPromise(e.provider.verifyWebhook({
 			rawBody: t.rawBody,
 			signatureHeader: t.headers["stripe-signature"] ?? "",
 			secret: e.webhookSecret ?? ""
-		})) : t.body, r = await p.runPromise(e.provider.normalizeEvent(n));
-		if (r === null) return;
-		await p.runPromise(e.service.applyEvent(r));
-		let i = e.onEvent?.[r._tag];
-		i !== void 0 && await p.runPromise(i(r).pipe(p.catchAllCause((e) => p.sync(() => {
-			Ut.warn("billing onEvent side effect failed", {
-				event: r._tag,
-				cause: String(e)
-			});
-		}))));
+		})) : t.body, r = await v.runPromise(e.provider.normalizeEvent(n)), i = e.provider.eventContext?.(n) ?? {
+			providerCustomerId: null,
+			createdAt: null
+		};
+		if (r === null && i.providerCustomerId === null) return;
+		let a = r?._tag === "subscriptionUpserted" || r?._tag === "subscriptionCanceled", o = i.providerCustomerId !== null && r?._tag !== "customerUnlinked", s = [];
+		if (r !== null && !(a && o) && (await v.runPromise(e.service.applyEvent(r)), s.push(r)), o) {
+			let t = await v.runPromise(e.service.syncCustomer(i.providerCustomerId, r !== null && "tenantId" in r && typeof r.tenantId == "string" ? r.tenantId : void 0));
+			s.push(...t.events);
+		}
+		i.createdAt !== null && Date.now() - i.createdAt.getTime() > 3e5 && e.onLateDelivery?.();
+		for (let t of s) {
+			let n = e.onEvent?.[t._tag];
+			n !== void 0 && await v.runPromise(n(t).pipe(v.tapErrorCause((e) => v.sync(() => {
+				Hn.error("billing onEvent side effect failed — answering 500 so the provider redelivers", {
+					event: t._tag,
+					cause: String(e)
+				});
+			}))));
+		}
 	}
-}), Kt = (e) => pe(Gt(e), {
+}), Kn = (e) => L(Gn(e), {
 	resolveSecret: () => Promise.resolve(e.webhookSecret),
 	...e.idempotencyCache === void 0 ? {} : { idempotencyCache: e.idempotencyCache },
 	log: (e) => {
-		e.status >= 400 && Ut.warn("billing webhook rejected", { ...e });
+		e.status >= 400 && Hn.warn("billing webhook rejected", { ...e });
+	}
+}), qn = (e) => e.filter((e) => e.applied !== !0 && (e.kind === "create" || e.kind === "update" || e.kind === "adopt" || e.kind === "drift")), Jn = async (e, t, n) => {
+	let r = t.environments[n.env], i = await e.get("/v1/tax/settings"), a = n.env === "live";
+	if (i.livemode !== a) throw Error(`the key reaches a ${i.livemode ? "LIVE" : "test"} account, not ${n.env}`);
+	let o = [], s = {}, c = async (t, r) => {
+		let i = "apply" in t ? t.apply : void 0;
+		if (n.apply && i !== void 0) {
+			let n = await e.post(i.path, i.params);
+			r?.(n), o.push({
+				...t,
+				applied: !0
+			});
+		} else o.push(t);
+	}, l = await e.list("/v1/billing/meters"), u = /* @__PURE__ */ new Map();
+	for (let e of t.meters) {
+		let t = en(e, l);
+		u.set(e.eventName, t.id), await c(t.finding, (t) => {
+			u.set(e.eventName, t.id);
+		});
+	}
+	let d = await e.list("/v1/products"), f = [];
+	for (let e of t.products) {
+		let t = Xt(e, d), n = {
+			inPortal: e.inPortal,
+			productId: t.id,
+			priceId: null
+		};
+		await c(t.finding, (e) => {
+			n.productId = e.id;
+		}), f.push(n);
+	}
+	for (let [r, i] of t.products.entries()) {
+		let t = f[r], a = i.price.meter;
+		if (i.price.usageType === "metered" && (a === void 0 || !u.has(a))) {
+			o.push({
+				kind: "manual",
+				object: `price ${i.price.lookupKey}`,
+				detail: `metered, but names no catalog meter (${a ?? "none"})`
+			});
+			continue;
+		}
+		let l = a === void 0 ? null : u.get(a) ?? null, d = t.productId ?? (n.apply ? null : `pending:${i.key}`), p = l ?? (n.apply || i.price.usageType !== "metered" ? l : `pending:${a}`), m = (await e.list("/v1/prices", { lookup_keys: [i.price.lookupKey] }))[0] ?? null, h = t.productId === null ? [] : await e.list("/v1/prices", { product: t.productId }), g = $t(i.price, d, p, m, h, n.allowPriceChange);
+		t.priceId = g.id, await c(g.finding, (e) => {
+			t.priceId = e.id;
+		}), t.priceId !== null && (s[i.price.envName] = t.priceId);
+	}
+	await c(tn(t.tax, i));
+	let p = f.filter((e) => e.inPortal), m = p.every((e) => e.productId !== null && e.priceId !== null) ? p.map((e) => ({
+		productId: e.productId,
+		priceId: e.priceId
+	})) : null, h = await e.list("/v1/billing_portal/configurations", { expand: ["data.features.subscription_update.products"] });
+	for (let e of on(t.portal, r, m, h)) await c(e);
+	let g = sn(r, await e.list("/v1/webhook_endpoints"));
+	g.kind === "create" && n.apply && n.envOut === null ? o.push({
+		kind: "manual",
+		object: g.object,
+		detail: "not created: pass --env-out so its signing secret is captured (Stripe shows it once)"
+	}) : await c(g, (e) => {
+		typeof e.secret == "string" && (s.STRIPE_WEBHOOK_SECRET = e.secret);
+	});
+	let _ = await e.get("/v1/account").catch(() => null), v = await e.list("/v1/tax_ids", { owner: { type: "account" } }).catch(() => null), y = await e.list("/v1/tax/registrations", { status: "active" }).catch(() => []);
+	return o.push(...cn({
+		catalog: t,
+		env: r,
+		chargesEnabled: _ === null ? null : _.charges_enabled === !0,
+		accountTaxIds: v === null ? null : v.length,
+		activeRegistrations: y.map((e) => e.country)
+	})), {
+		livemode: i.livemode,
+		findings: o,
+		envOut: s
+	};
+}, Yn = (e, t) => {
+	let n = new Set(Object.keys(t)), r = e.split("\n").filter((e) => !n.has(e.split("=")[0] ?? ""));
+	for (; r.length > 0 && r[r.length - 1] === "";) r.pop();
+	return [
+		...r,
+		...Object.entries(t).map(([e, t]) => `${e}=${t}`),
+		""
+	].join("\n");
+}, Xn = (e, t) => {
+	try {
+		return R("git", [...e], {
+			cwd: t,
+			stdio: "ignore"
+		}), !0;
+	} catch {
+		return !1;
+	}
+}, Zn = (e, t = Xn, n = (e) => B(e) ? le(e) : e) => {
+	for (let r of /* @__PURE__ */ new Set([V(e), V(n(V(e)))])) {
+		let n = de(r);
+		if (t(["rev-parse", "--is-inside-work-tree"], n) && !t([
+			"check-ignore",
+			"-q",
+			r
+		], n)) return `${e} is inside a git work tree and not ignored — write it to a gitignored file or outside the repo`;
+	}
+	return null;
+}, Qn = (e) => {
+	let t = (t) => {
+		let n = e.indexOf(t);
+		return n < 0 ? null : e[n + 1];
+	}, n = t("--env");
+	if (n !== "sandbox" && n !== "live") return "--env sandbox|live is required";
+	let r = t("--env-out");
+	if (r === void 0 || r?.startsWith("--")) return "--env-out needs a file path";
+	let i = {
+		env: n,
+		apply: e.includes("--apply"),
+		allowPriceChange: e.includes("--allow-price-change"),
+		confirmLive: e.includes("--confirm-live"),
+		strict: e.includes("--strict"),
+		envOut: r
+	};
+	return i.env === "live" && i.apply && !i.confirmLive ? "writing to LIVE needs --confirm-live (run without --apply first to see the plan)" : i;
+}, $n = (e, t, n) => {
+	let r = t.STRIPE_PROVISION_KEY?.trim() || (e === "sandbox" ? n?.trim() : void 0);
+	return r === void 0 || r.length === 0 ? { refusal: "set STRIPE_PROVISION_KEY (a sandbox run also reads STRIPE_SECRET_KEY from the dotenv file)" } : e === "live" && !/^(sk|rk)_live_/.test(r) ? { refusal: "--env live needs a live key (sk_live_/rk_live_)" } : e === "sandbox" && !/^(sk|rk)_test_/.test(r) ? { refusal: "--env sandbox needs a test key (sk_test_/rk_test_)" } : { key: r };
+}, er = (e, t) => B(e) ? ce(e, "utf8").split("\n").find((e) => e.startsWith(`${t}=`))?.slice(t.length + 1).trim() : void 0, tr = async (e, t, n = {}) => {
+	let r = n.vars ?? process.env, i = (e) => (console.error(`stripe provision: ${e}`), 2), a = Qn(t);
+	if (typeof a == "string") return i(a);
+	if (a.envOut !== null) {
+		let e = Zn(a.envOut);
+		if (e !== null) return i(e);
+	}
+	let o = $n(a.env, r, n.dotenv === void 0 ? void 0 : er(n.dotenv, "STRIPE_SECRET_KEY"));
+	if ("refusal" in o) return i(o.refusal);
+	let s;
+	try {
+		s = await Jn((n.rest ?? fn)(o.key), e, a);
+	} catch (e) {
+		return console.error(`stripe provision: ${un(e instanceof Error ? e.message : String(e))}`), 1;
+	}
+	console.log(`Stripe ${a.env} (${s.livemode ? "LIVE" : "test mode"}) — ${a.apply ? "apply" : "check"}`);
+	for (let e of s.findings) {
+		let t = e.applied === !0 ? `${e.kind} ✓` : e.kind;
+		console.log(`  ${t.padEnd(10)} ${e.object}${"detail" in e ? ` — ${e.detail}` : ""}`);
 	}
-}), qt = (e) => e === null ? null : {
+	if (a.envOut !== null) {
+		let e = a.envOut;
+		ue(e, Yn(B(e) ? ce(e, "utf8") : "", s.envOut), { mode: 384 }), z(e, 384), console.log(`  wrote ${Object.keys(s.envOut).sort().join(", ")} to ${e}`);
+	}
+	let c = qn(s.findings), l = s.findings.filter((e) => e.kind === "manual");
+	return console.log(`  ${c.length} open, ${l.length} manual`), c.length > 0 || a.strict && l.length > 0 ? 1 : 0;
+}, nr = (e) => e === null ? null : {
 	plan: e.plan,
 	status: e.status,
 	quantity: e.quantity,
 	currentPeriodEnd: e.currentPeriodEnd ? e.currentPeriodEnd.toISOString() : null,
 	cancelAt: e.cancelAt ? e.cancelAt.toISOString() : null
-}, Jt = re([{
+}, rr = S([{
 	name: "STRIPE_SECRET_KEY",
 	required: !1,
 	secret: !0,
@@ -1409,53 +2657,65 @@ var k = (e, t, n, r) => ({
 	required: !1,
 	secret: !0,
 	description: "Stripe webhook signing secret (whsec_…) for verifying webhook payloads."
-}]), Yt = "@voltro/plugin-billing", Xt = (t = {}) => {
-	let n = process.env, m = xt(t.plans ?? {}), h = Ht({
+}]), ir = "@voltro/plugin-billing", ar = (t = {}) => {
+	let n = process.env, y = zt(t.plans ?? {}), b = Bn({
 		...t.provider === void 0 ? {} : { provider: t.provider },
 		...t.apiKey === void 0 ? {} : { apiKey: t.apiKey },
-		planForPriceId: m.planForPriceId,
-		log: { warn: (e) => {
-			console.warn(e);
-		} },
+		planForPriceId: y.planForPriceId,
 		env: n
-	}), ne = t.webhookSecret ?? Jt.read("STRIPE_WEBHOOK_SECRET") ?? null, re = L(t.dunning, n);
-	x({
+	}), x = t.webhookSecret ?? rr.read("STRIPE_WEBHOOK_SECRET") ?? null;
+	zn({
+		env: n,
+		providerOption: t.provider,
+		resolvedName: b.name,
+		webhookSecret: x,
+		redirectOrigins: t.redirectOrigins
+	});
+	let S = ke(t.dunning, n);
+	ie({
 		source: "plugin",
-		table: P,
+		table: G,
 		timeColumn: "updatedAt",
-		ttlMs: S(process.env.VOLTRO_BILLING_USAGE_TTL_HOURS, 9600),
+		ttlMs: ae(process.env.VOLTRO_BILLING_USAGE_TTL_HOURS, 9600),
 		label: "billing usage counters"
-	}), x({
+	}), ie({
 		source: "plugin",
-		table: J,
+		table: Vt,
 		timeColumn: "claimedAt",
-		ttlMs: S(process.env.VOLTRO_BILLING_FLUSH_CLAIM_TTL_HOURS, 1),
+		ttlMs: ae(process.env.VOLTRO_BILLING_FLUSH_CLAIM_TTL_HOURS, 1),
 		label: "billing flush claims"
-	}), x({
+	}), ie({
 		source: "plugin",
-		table: F,
+		table: Se,
 		timeColumn: "sentAt",
-		ttlMs: S(process.env.VOLTRO_BILLING_DUNNING_TTL_HOURS, 9600),
+		ttlMs: ae(process.env.VOLTRO_BILLING_DUNNING_TTL_HOURS, 9600),
 		label: "billing dunning notices"
 	});
-	let { service: g, holder: _ } = et({
-		provider: h,
-		plans: m,
+	let { service: T, holder: E } = vt({
+		provider: b,
+		plans: y,
 		...t.attempts === void 0 ? {} : { attempts: t.attempts },
 		...t.checkout === void 0 ? {} : { checkout: t.checkout },
+		...t.admit === void 0 ? {} : { admit: t.admit },
+		...t.redirectOrigins === void 0 ? {} : { redirectOrigins: t.redirectOrigins },
+		...t.isTenantClosed === void 0 ? {} : { isTenantClosed: t.isTenantClosed },
+		...t.onEvent === void 0 ? {} : { onEvent: t.onEvent },
 		...t.resolveEntitlementLimit === void 0 ? {} : { resolveEntitlementLimit: t.resolveEntitlementLimit },
-		dunning: re
-	}), se = tt(g), ce = Kt({
-		provider: h,
-		service: g,
-		webhookSecret: ne,
-		...t.onEvent === void 0 ? {} : { onEvent: t.onEvent }
-	}), v = {
+		dunning: S
+	}), te = yt(T), D = Kn({
+		provider: b,
+		service: T,
+		webhookSecret: x,
+		...t.onEvent === void 0 ? {} : { onEvent: t.onEvent },
+		onLateDelivery: () => {
+			fe();
+		}
+	}), O = {
 		method: "POST",
-		path: $,
+		path: Wn,
 		originGuard: "exempt",
 		handle: async (e) => {
-			let t = await ce({
+			let t = await D({
 				method: e.method,
 				path: e.path,
 				headers: e.headers,
@@ -1468,12 +2728,22 @@ var k = (e, t, n, r) => ({
 				...t.headers === void 0 ? {} : { headers: { ...t.headers } }
 			};
 		}
-	}, le = [
+	}, ne = (t) => ({
+		...t,
+		execute: (n, r) => {
+			let i = r.request.subject;
+			return i.type === "anonymous" || typeof i.tenantId != "string" || i.tenantId === "" ? v.fail(new e({
+				source: "billing",
+				message: "billing routes answer only a signed-in caller that belongs to a tenant",
+				transient: !1
+			})) : t.execute(n, r);
+		}
+	}), k = [
 		{
-			...ee,
+			...h,
 			execute: (e, t) => {
 				let n = e;
-				return g.startCheckout({
+				return T.startCheckout({
 					tenantId: t.request.subject.tenantId ?? "",
 					plan: n.plan,
 					successUrl: n.successUrl,
@@ -1483,19 +2753,19 @@ var k = (e, t, n, r) => ({
 			}
 		},
 		{
-			...u,
+			...d,
 			execute: (e, t) => {
 				let n = e;
-				return g.portalUrl(t.request.subject.tenantId ?? "", n.returnUrl);
+				return T.portalUrl(t.request.subject.tenantId ?? "", n.returnUrl);
 			}
 		},
 		{
-			...te,
-			execute: (e, t) => g.subscription(t.request.subject.tenantId ?? "").pipe(p.map((e) => ({ subscription: qt(e) })))
+			...g,
+			execute: (e, t) => T.subscription(t.request.subject.tenantId ?? "").pipe(v.map((e) => ({ subscription: nr(e) })))
 		},
 		{
-			...c,
-			execute: (e, t) => g.entitlementStatus(t.request.subject.tenantId ?? "").pipe(p.map((e) => ({
+			...l,
+			execute: (e, t) => T.entitlementStatus(t.request.subject.tenantId ?? "").pipe(v.map((e) => ({
 				plan: e.plan,
 				billedPlan: e.billedPlan,
 				status: e.status,
@@ -1507,13 +2777,13 @@ var k = (e, t, n, r) => ({
 			})))
 		},
 		{
-			...d,
+			...f,
 			execute: (e, t) => {
 				let n = e;
-				return g.previewChange(t.request.subject.tenantId ?? "", {
+				return T.previewChange(t.request.subject.tenantId ?? "", {
 					...n.plan === void 0 ? {} : { plan: n.plan },
 					...n.quantity === void 0 ? {} : { quantity: n.quantity }
-				}).pipe(p.map((e) => ({
+				}).pipe(v.map((e) => ({
 					plan: e.plan,
 					quantity: e.quantity,
 					prorationMinor: e.prorationMinor,
@@ -1522,24 +2792,24 @@ var k = (e, t, n, r) => ({
 			}
 		},
 		{
-			...l,
-			execute: (e, t) => g.invoices(t.request.subject.tenantId ?? "").pipe(p.map((e) => ({ invoices: e.map((e) => ({
+			...u,
+			execute: (e, t) => T.invoices(t.request.subject.tenantId ?? "").pipe(v.map((e) => ({ invoices: e.map((e) => ({
 				...e,
 				createdAt: e.createdAt?.toISOString() ?? null
 			})) })))
 		},
 		{
-			...f,
+			...p,
 			execute: (e, t) => {
 				let n = e;
-				return g.reportUsage(t.request.subject.tenantId ?? "", n.key, n.quantity).pipe(p.map(() => ({ ok: !0 })));
+				return T.reportUsage(t.request.subject.tenantId ?? "", n.key, n.quantity).pipe(v.map(() => ({ ok: !0 })));
 			}
 		},
 		{
-			...o,
+			...s,
 			execute: (e, t) => {
 				let n = e;
-				return g.changePlan(t.request.subject.tenantId ?? "", n.plan).pipe(p.map((e) => ({
+				return T.changePlan(t.request.subject.tenantId ?? "", n.plan).pipe(v.map((e) => ({
 					plan: e.plan,
 					quantity: e.quantity,
 					prorationMinor: e.prorationMinor,
@@ -1548,34 +2818,46 @@ var k = (e, t, n, r) => ({
 			}
 		},
 		{
-			...s,
+			...c,
 			execute: (e, t) => {
 				let n = e;
-				return g.changeSeats(t.request.subject.tenantId ?? "", n.quantity).pipe(p.map((e) => ({
+				return T.changeSeats(t.request.subject.tenantId ?? "", n.quantity).pipe(v.map((e) => ({
 					plan: e.plan,
 					quantity: e.quantity,
 					prorationMinor: e.prorationMinor,
 					currency: e.currency
 				})));
 			}
+		},
+		{
+			...o,
+			execute: (e, t) => T.cancelSubscription(t.request.subject.tenantId ?? "").pipe(v.map((e) => ({ subscription: nr(e) })))
+		},
+		{
+			..._,
+			execute: (e, t) => T.syncTenant(t.request.subject.tenantId ?? "").pipe(v.map((e) => ({ subscription: e === null ? null : nr(e) })))
+		},
+		{
+			...m,
+			execute: (e, t) => T.resumeSubscription(t.request.subject.tenantId ?? "").pipe(v.map((e) => ({ subscription: nr(e) })))
 		}
-	], y = (e, t) => ({
+	].map(ne), A = (e, t) => ({
 		kind: "json",
 		status: e,
 		data: { error: t }
-	}), b = [{
+	}), re = [{
 		method: "GET",
 		path: "/stats",
 		scope: "declaration",
 		description: "Billing config: provider, declared plans, enforced tags",
-		handler: () => p.succeed({
+		handler: () => v.succeed({
 			kind: "json",
 			data: {
-				provider: h.name,
-				supportsMeteredUsage: h.supportsMeteredUsage,
-				plans: m.planIds(),
+				provider: b.name,
+				supportsMeteredUsage: b.supportsMeteredUsage,
+				plans: y.planIds(),
 				enforce: t.enforce ? Object.keys(t.enforce) : [],
-				webhookPath: $
+				webhookPath: Wn
 			}
 		})
 	}, {
@@ -1583,11 +2865,11 @@ var k = (e, t, n, r) => ({
 		path: "/usage",
 		scope: "process",
 		description: "Pending (un-flushed) metered usage counters",
-		handler: () => _.stores.usage.pending().pipe(p.map((e) => ({
+		handler: () => E.stores.usage.pending().pipe(v.map((e) => ({
 			kind: "json",
 			data: { usage: e }
-		})), p.catchAll((e) => p.succeed(y(500, e.message))))
-	}], ue = [
+		})), v.catchAll((e) => v.succeed(A(500, `${e.source} failed`))))
+	}], j = [
 		{
 			schema: e,
 			import: {
@@ -1609,82 +2891,126 @@ var k = (e, t, n, r) => ({
 				name: "SubscriptionLocked"
 			}
 		}
-	], C = t.enforce, w = C !== void 0 && Object.keys(C).length > 0 ? ge(C, g) : void 0, T = t.metering;
-	T !== void 0 && rt(T);
-	let E = T !== void 0 && Object.keys(T).length > 0 ? ft(g, T) : void 0, D = T !== void 0 && yt(T), fe = { claim: void 0 }, pe = T === void 0 ? void 0 : ht(g, T, {
-		claimChange: () => fe.claim,
+	], M = t.enforce, N = M !== void 0 && Object.keys(M).length > 0 ? ge(M, T) : void 0, P = t.metering;
+	P !== void 0 && xt(P);
+	let F = P !== void 0 && Object.keys(P).length > 0 ? At(T, P) : void 0, I = P !== void 0 && Lt(P), L = { claim: void 0 }, se = P === void 0 ? void 0 : Nt(T, P, {
+		claimChange: () => L.claim,
 		onUngated: () => {
-			p.runSync(p.logWarning("metering: CDC meters are accruing PER PROCESS — with N replicas a tenant is billed N times. The framework did not hand this plugin a change claimer (expected on the memory store; on a SQL store this is a bug worth reporting).").pipe(p.annotateLogs({ scope: "voltro:billing" })));
+			v.runSync(v.logWarning("metering: CDC meters are accruing PER PROCESS — with N replicas a tenant is billed N times. The framework did not hand this plugin a change claimer (expected on the memory store; on a SQL store this is a bug worth reporting).").pipe(v.annotateLogs({ scope: "voltro:billing" })));
 		}
-	}), O = ie([E, w].filter((e) => e !== void 0)), k, A, me = [
+	}), R = C([F, N].filter((e) => e !== void 0)), z, B, ce = !1, le = !1, ue = !1, de = 0, V = {
+		info: (e, t) => {
+			console.info(e, t ?? {});
+		},
+		error: (e, t) => {
+			console.error(e, t ?? {});
+		}
+	}, fe = async () => {
+		let e = z, n = b.listUndeliveredEvents;
+		if (!(e === void 0 || n === void 0 || ue) && !(Date.now() - de < 6e4)) {
+			ue = !0;
+			try {
+				let r = await v.runPromise(n()), i = oe(), a = /* @__PURE__ */ new Set();
+				for (let t of r) t.providerCustomerId !== null && await Wt(e, `event:${t.id}`, i, Date.now()) && a.add(t.providerCustomerId);
+				let o = 0;
+				for (let e of a) await v.runPromise(T.syncCustomer(e).pipe(v.flatMap((e) => v.forEach(e.events, (e) => {
+					let n = t.onEvent?.[e._tag];
+					return n === void 0 ? v.void : n(e).pipe(v.catchAllCause((t) => v.sync(() => {
+						V.error("billing catch-up: onEvent failed for a correction", {
+							event: e._tag,
+							cause: String(t)
+						});
+					})));
+				}, { discard: !0 })), v.tap(() => v.sync(() => {
+					o += 1;
+				})), v.catchAll((e) => v.sync(() => {
+					V.error("billing catch-up: syncing a customer failed — the provider redelivers its events", { message: e.message });
+				}))));
+				V.info("billing catch-up", {
+					undelivered: r.length,
+					customers: a.size,
+					synced: o
+				});
+			} catch (e) {
+				V.error("billing catch-up failed — the next late delivery or restart retries it", { message: String(e?.message ?? e) });
+			} finally {
+				de = Date.now(), ue = !1;
+			}
+		}
+	}, pe = (e) => {
+		e !== void 0 && (V = e), !le && ce && z !== void 0 && (le = !0, fe());
+	}, me = [
 		"store:write",
 		"inspect:read",
 		"inspect:write",
 		"network:outbound:*",
-		...O === void 0 ? [] : [
+		...R === void 0 ? [] : [
 			"rpc:intercept:mutation",
 			"rpc:intercept:action",
 			"rpc:intercept:workflow"
 		],
-		...E === void 0 ? [] : ["rpc:intercept:query"],
-		...D ? ["store:changes:read"] : []
+		...F === void 0 ? [] : ["rpc:intercept:query"],
+		...I ? ["store:changes:read"] : []
 	];
-	return ae({
-		name: oe({
-			base: Yt,
+	return ee({
+		name: w({
+			base: ir,
 			alias: t.alias,
 			instance: t.name
 		}),
-		baseName: Yt,
+		baseName: ir,
 		description: "Billing — subscriptions, plans, entitlements + usage metering over a pluggable BillingProvider (Stripe + mock). Ships the BillingService, the requireEntitlement() in-handler guard + the enforce-map interceptor, the /billing/webhook receiver (riding @voltro/plugin-webhooks for signature + idempotency), and the _voltro_billing_* tables. Money is integer minor units.",
 		permissions: me,
-		declaredEnv: Jt.declared,
-		services: se,
-		routes: le,
+		declaredEnv: rr.declared,
+		egress: Vn(b),
+		services: te,
+		routes: k,
 		rpcClientDescriptors: a,
-		httpRoutes: [v],
-		inspectEndpoints: b,
+		httpRoutes: [O],
+		inspectEndpoints: re,
 		extendSchema: { tables: [
 			...xe(),
-			Ct,
-			Se
+			Ht,
+			Ce
 		] },
-		errorSchemas: ue,
-		...O === void 0 ? {} : {
-			interceptMutation: O,
-			interceptAction: O,
-			interceptWorkflow: O
+		errorSchemas: j,
+		...R === void 0 ? {} : {
+			interceptMutation: R,
+			interceptAction: R,
+			interceptWorkflow: R
 		},
-		...E === void 0 ? {} : { interceptQuery: E },
-		...D ? { onChangeEvent: pe } : {},
+		...F === void 0 ? {} : { interceptQuery: F },
+		...I ? { onChangeEvent: se } : {},
 		bindDataStore: (e, t) => {
-			_.stores = Qe(e), k = e, fe.claim = t?.claimChange;
+			E.stores = ft(e), z = e, pe(), L.claim = t?.claimChange;
 		},
-		onActivate: (e) => p.sync(() => {
+		onActivate: (e) => v.sync(() => {
 			e.logger.info("billing active", {
-				provider: h.name,
-				plans: m.planIds().length,
-				enforce: C ? Object.keys(C).length : 0,
-				metering: T ? Object.keys(T).length : 0,
-				webhook: $
-			});
-			let n = t.flushIntervalMs ?? 6e4, r = T, i = r !== void 0 && Object.keys(r).length > 0;
+				provider: b.name,
+				plans: y.planIds().length,
+				enforce: M ? Object.keys(M).length : 0,
+				metering: P ? Object.keys(P).length : 0,
+				webhook: Wn,
+				redirectOrigins: t.redirectOrigins?.length ?? "any"
+			}), b.name === "stripe" && t.redirectOrigins === void 0 && e.logger.warn("billing: no redirectOrigins — checkout and portal accept any return URL; set billingPlugin({ redirectOrigins })", {});
+			let n = t.flushIntervalMs ?? 6e4, r = P, i = r !== void 0 && Object.keys(r).length > 0;
 			if (n > 0) {
-				let e = de();
-				A = setInterval(() => {
-					let t = k;
+				let e = oe();
+				B = setInterval(() => {
+					let t = z;
 					if (t === void 0) return;
 					let a = Date.now();
 					(async () => {
-						await Tt(t, wt(a, n), e, a) && i && await p.runPromise(vt(g, t, r).pipe(p.catchAll(() => p.void)));
+						await Wt(t, Ut(a, n), e, a) && await v.runPromise((i ? It(T, t, r) : T.flushUsage()).pipe(v.catchAll(() => v.void)));
 					})();
-				}, n), A.unref?.();
+				}, n), B.unref?.();
 			}
+			ce = !0, pe(e.logger);
 		}),
-		onDeactivate: () => p.sync(() => {
-			A !== void 0 && (clearInterval(A), A = void 0);
+		onDeactivate: () => v.sync(() => {
+			B !== void 0 && (clearInterval(B), B = void 0);
 		})
 	});
 };
 //#endregion
-export { j as BILLING_CUSTOMERS_TABLE, F as BILLING_DUNNING_NOTICES_TABLE, J as BILLING_FLUSH_CLAIMS_TABLE, N as BILLING_INVOICES_TABLE, M as BILLING_SUBSCRIPTIONS_TABLE, P as BILLING_USAGE_TABLE, Wt as BILLING_WEBHOOK_ID, $ as BILLING_WEBHOOK_PATH, e as BillingError, t as BillingService, Ce as DEFAULT_DUNNING_STEPS, we as DEFAULT_GRACE_HOURS, Te as DEFAULT_LOCKOUT, n as DEFAULT_PLAN, I as DUNNING_LOCK_STEP_ID, r as EntitlementExceeded, i as SubscriptionLocked, _e as billingCustomersTable, Se as billingDunningNoticesTable, Ct as billingFlushClaimsTable, ye as billingInvoicesTable, Xt as billingPlugin, tt as billingServiceLayer, ve as billingSubscriptionsTable, xe as billingTables, be as billingUsageTable, Gt as billingWebhookDescriptor, et as buildBillingService, ge as buildEnforceInterceptor, xt as buildPlanRegistry, Tt as claimFlushWindow, Le as dataStoreDunningNoticeStore, Qe as dataStoreStores, Me as defaultDunningEmail, Ae as dueSteps, Ne as dunningMailNotifier, St as emptyPlanRegistry, Oe as episodeKeyOf, R as evaluateBillingEntitlement, k as evaluateEntitlement, wt as flushWindowKey, ke as graceEndOf, H as isStaleStatusEvent, Fe as memoryDunningNoticeStore, Ze as memoryStores, Vt as mockProvider, Kt as mountBillingWebhook, It as normalizeStripeEvent, K as periodKey, he as requireEntitled, me as requireEntitlement, L as resolveDunningConfig, Ht as resolveProvider, Rt as stripeProvider };
+export { H as BILLING_CUSTOMERS_TABLE, Se as BILLING_DUNNING_NOTICES_TABLE, Vt as BILLING_FLUSH_CLAIMS_TABLE, W as BILLING_INVOICES_TABLE, U as BILLING_SUBSCRIPTIONS_TABLE, G as BILLING_USAGE_TABLE, Un as BILLING_WEBHOOK_ID, Wn as BILLING_WEBHOOK_PATH, e as BillingError, t as BillingService, Te as DEFAULT_DUNNING_STEPS, Ee as DEFAULT_GRACE_HOURS, De as DEFAULT_LOCKOUT, n as DEFAULT_PLAN, we as DUNNING_LOCK_STEP_ID, r as EntitlementExceeded, Gt as STRIPE_API_VERSION, Kt as STRIPE_DASHBOARD_REMINDERS, On as STRIPE_WEBHOOK_EVENTS, dn as StripeRestError, i as SubscriptionLocked, zn as assertBillingProductionReady, _e as billingCustomersTable, Ce as billingDunningNoticesTable, Vn as billingEgressOf, Ht as billingFlushClaimsTable, ye as billingInvoicesTable, ar as billingPlugin, yt as billingServiceLayer, ve as billingSubscriptionsTable, xe as billingTables, be as billingUsageTable, Gn as billingWebhookDescriptor, vt as buildBillingService, ge as buildEnforceInterceptor, zt as buildPlanRegistry, Wt as claimFlushWindow, Ve as dataStoreDunningNoticeStore, ft as dataStoreStores, Ie as defaultDunningEmail, en as diffMeter, on as diffPortal, $t as diffPrice, Xt as diffProduct, tn as diffTaxSettings, sn as diffWebhook, Ne as dueSteps, Le as dunningMailNotifier, Bt as emptyPlanRegistry, Zn as envOutRefusal, je as episodeKeyOf, Pe as evaluateBillingEntitlement, fe as evaluateEntitlement, Ut as flushWindowKey, ln as formEncode, Me as graceEndOf, Rn as isProductionBoot, Ze as isStaleStatusEvent, ze as memoryDunningNoticeStore, dt as memoryStores, Yn as mergeEnvFile, In as mockProvider, Kn as mountBillingWebhook, kn as normalizeStripeEvent, qn as openFindings, Qn as parseProvisionArgs, mt as periodKey, nn as portalParams, Jn as provisionStripeCatalog, un as redactStripeKeys, he as requireEntitled, me as requireEntitlement, ke as resolveDunningConfig, Bn as resolveProvider, $n as resolveProvisionKey, tr as runStripeProvision, cn as sellingReadiness, jn as stripeProvider, fn as stripeRest };