@voltro/plugin-billing 0.84.0 → 0.86.0

package/dist/metering.js

@@ -0,0 +1,74 @@
+import { periodKey as e } from "./service.js";
+import { Effect as t } from "effect";
+import { OccurrenceCounter as n, changeDigest as r, composeChangeKey as i, gte as a, occurrenceWindowMs as o } from "@voltro/database";
+//#region src/metering.ts
+var s = "_voltro_ai_usage", c = (e) => {
+	for (let [t, n] of Object.entries(e)) {
+		if (t.length === 0) throw Error("billing metering: a meter key must be non-empty");
+		if (n.from === "rpc") {
+			if (n.match === void 0 || typeof n.match == "string" && n.match.length === 0) throw Error(`billing metering: rpc meter '${t}' needs a non-empty 'match'`);
+		} else if (n.from === "cdc") {
+			if (typeof n.table != "string" || n.table.length === 0) throw Error(`billing metering: cdc meter '${t}' needs a 'table'`);
+		} else if (n.from !== "ai") throw Error(`billing metering: meter '${t}' has unknown source '${String(n.from)}'`);
+	}
+}, l = /* @__PURE__ */ new WeakMap(), u = (e) => {
+	if (!e.global && !e.sticky) return e;
+	let t = l.get(e);
+	return t === void 0 && (t = new RegExp(e.source, e.flags.replace(/[gy]/g, "")), l.set(e, t)), t;
+}, d = (e, t) => typeof e == "string" ? t === e : u(e).test(t), f = (e, t, n) => Object.entries(e).filter(([, e]) => e.from === "rpc" && (e.kind === void 0 || e.kind === n) && d(e.match, t)).map(([e]) => e), p = (e, t, n) => Object.entries(e).filter(([, e]) => e.from === "cdc" && e.table === t && (e.op ?? "insert") === n).map(([e]) => e), m = (e) => Object.entries(e).filter(([, e]) => e.from === "ai").map(([e, t]) => [e, t.metric ?? "tokens"]), h = (e) => e.tenantId, g = (e, n, r, i) => t.forEach(r, (r) => e.reportUsage(n, r, i).pipe(t.catch(() => t.void)), { discard: !0 }), _ = (e, n) => (r, i) => {
+	let a = f(n, i.tag, i.kind);
+	if (a.length === 0) return r;
+	let o = h(i.subject);
+	return o === null ? r : r.pipe(t.tap(() => g(e, o, a, 1)));
+}, v = "billing-meter", y = 5e4, b = (e, a, s = {}) => {
+	let c = new n({
+		windowMs: o(),
+		maxEntries: y
+	}), l = s.now ?? (() => Date.now()), u = !1;
+	return (n) => {
+		let o = p(a, n.table, n.op);
+		if (o.length === 0) return t.void;
+		let d = n.new?.tenantId ?? n.old?.tenantId ?? null;
+		if (d === null) return t.void;
+		let f = s.claimChange?.();
+		if (f === void 0) return u || (u = !0, s.onUngated?.()), g(e, d, o, 1);
+		let m = String(n.new?.id ?? n.old?.id ?? ""), h = r({
+			pipe: v,
+			op: n.op,
+			key: m,
+			next: n.new ?? null,
+			prev: n.old ?? null
+		}), _ = i(h, c.next(h, l()));
+		return t.promise(() => f(v, _)).pipe(t.flatMap((n) => n ? g(e, d, o, 1) : t.void));
+	};
+}, x = (e) => new Date(Date.UTC(e.getUTCFullYear(), e.getUTCMonth(), 1, 0, 0, 0, 0)), S = (n, r, i, o = () => /* @__PURE__ */ new Date()) => t.gen(function* () {
+	let c = m(i);
+	if (c.length === 0) return;
+	let l = o();
+	e(l);
+	let u = {
+		table: s,
+		predicate: a("calledAt", x(l)),
+		order: [],
+		take: void 0,
+		skip: void 0,
+		projection: void 0
+	}, d = yield* t.promise(() => Promise.resolve(r.query(u)).then((e) => e).catch(() => [])), f = /* @__PURE__ */ new Map();
+	for (let e of d) {
+		let t = e.tenantId ?? null;
+		if (t === null) continue;
+		let n = f.get(t) ?? {
+			tokens: 0,
+			cost: 0
+		};
+		n.tokens += (Number(e.inputTokens) || 0) + (Number(e.outputTokens) || 0), n.cost += Number(e.costMicroUsd) || 0, f.set(t, n);
+	}
+	for (let [e, r] of c) for (let [i, a] of f) {
+		let o = r === "costMicroUsd" ? a.cost : a.tokens;
+		if (o <= 0) continue;
+		let s = o - (yield* n.checkEntitlement(i, e, 0).pipe(t.map((e) => e.used), t.catch(() => t.succeed(0))));
+		s > 0 && (yield* n.reportUsage(i, e, s).pipe(t.catch(() => t.void)));
+	}
+}), C = (e, n, r, i) => S(e, n, r, i).pipe(t.andThen(e.flushUsage().pipe(t.catch(() => t.void)))), w = (e) => Object.values(e).some((e) => e.from === "cdc");
+//#endregion
+export { v as METERING_CLAIM_SCOPE, b as buildMeteringChangeTap, _ as buildMeteringInterceptor, p as cdcMetersFor, w as hasCdcMeters, S as reconcileAiMeters, f as rpcMetersFor, C as runAutopilotFlush, c as validateMeteringConfig };

package/dist/plans.js

@@ -0,0 +1,24 @@
+import { DEFAULT_PLAN as e } from "./types.js";
+//#region src/plans.ts
+var t = (e) => e === void 0 ? 0 : e === "unlimited" ? Infinity : e, n = (e) => {
+	let n = /* @__PURE__ */ new Map();
+	for (let [t, r] of Object.entries(e)) r.priceId !== void 0 && n.set(r.priceId, t);
+	return {
+		has: (t) => Object.prototype.hasOwnProperty.call(e, t),
+		entitlementLimit: (n, r) => {
+			let i = e[n];
+			return i === void 0 ? 0 : t(i.entitlements[r]);
+		},
+		planForPriceId: (e) => n.get(e) ?? null,
+		priceIdFor: (t) => e[t]?.priceId ?? null,
+		meteredPriceIdsFor: (t) => e[t]?.meteredPriceIds ?? [],
+		unitAmountFor: (t) => {
+			let n = e[t]?.unitAmountMinor;
+			return n !== void 0 && Number.isFinite(n) ? n : 0;
+		},
+		currencyFor: (t) => (e[t]?.currency ?? "usd").toLowerCase(),
+		planIds: () => Object.keys(e)
+	};
+}, r = () => n({ [e]: { entitlements: {} } });
+//#endregion
+export { n as buildPlanRegistry, r as emptyPlanRegistry };

package/dist/providers.js

@@ -0,0 +1,133 @@
+import { STRIPE_WEBHOOK_EVENTS as e, normalizeStripeEvent as t, stripeProvider as n } from "./stripeProvider.js";
+import { Effect as r } from "effect";
+//#region src/providers.ts
+var i = (e) => {
+	let t = e?.baseUrl ?? "https://mock.billing.local", n = [], i = [], a = [], o = /* @__PURE__ */ new Map(), s = /* @__PURE__ */ new Map(), c = /* @__PURE__ */ new Map(), l = [], u = [], d = [], f = [], p = [], m = [], h = /* @__PURE__ */ new Map(), g = [], _ = 0, v = (e, t) => {
+		let n = {
+			...o.get(e) ?? {
+				status: "active",
+				plan: null,
+				quantity: 1,
+				currentPeriodStart: null,
+				currentPeriodEnd: null,
+				cancelAt: null
+			},
+			...t
+		};
+		o.set(e, n);
+		let r = s.get(e);
+		return r !== void 0 && s.set(e, {
+			...r,
+			...t
+		}), n;
+	}, y = (e) => typeof e == "object" && !!e && typeof e._tag == "string";
+	return {
+		name: "mock",
+		supportsMeteredUsage: e?.supportsMeteredUsage ?? !0,
+		pushed: n,
+		updates: i,
+		fetched: a,
+		cancels: l,
+		resumes: u,
+		priceAdds: d,
+		checkouts: f,
+		customersCreated: p,
+		expiredFor: m,
+		setUndelivered: (e) => {
+			g = e;
+		},
+		undeliveredReads: () => _,
+		listUndeliveredEvents: () => r.sync(() => (_ += 1, g)),
+		ensureCustomer: (e) => r.sync(() => {
+			let t = h.get(e.tenantId);
+			if (t !== void 0) return t;
+			let n = `mock_cus_${e.tenantId}`;
+			return h.set(e.tenantId, n), p.push(e.tenantId), n;
+		}),
+		expireOpenCheckouts: (e) => r.sync(() => (m.push(e.providerCustomerId), 0)),
+		listSubscription: (e) => {
+			s.set(e.providerSubscriptionId, e), o.set(e.providerSubscriptionId, e);
+		},
+		setSubscription: (e, t) => {
+			t === null ? o.delete(e) : o.set(e, t);
+		},
+		setCustomerEmail: (e, t) => {
+			t === null ? c.delete(e) : c.set(e, t);
+		},
+		fetchSubscription: (e) => r.sync(() => (a.push(e), o.get(e) ?? null)),
+		listSubscriptions: (e) => r.sync(() => [...s.values()].filter((t) => t.status !== "canceled" && (e.providerCustomerId === void 0 || t.providerCustomerId === e.providerCustomerId))),
+		cancelSubscription: (e) => r.sync(() => {
+			l.push({
+				providerSubscriptionId: e.providerSubscriptionId,
+				mode: e.mode
+			});
+			let t = o.get(e.providerSubscriptionId);
+			return e.mode === "close" ? v(e.providerSubscriptionId, { cancelAt: new Date(Date.now() + 6e5) }) : v(e.providerSubscriptionId, { cancelAt: t?.currentPeriodEnd ?? /* @__PURE__ */ new Date(0) });
+		}),
+		resumeSubscription: (e) => r.sync(() => (u.push(e), v(e, { cancelAt: null }))),
+		addSubscriptionPrices: (e) => r.sync(() => {
+			d.push({
+				providerSubscriptionId: e.providerSubscriptionId,
+				priceIds: e.priceIds
+			});
+			let t = s.get(e.providerSubscriptionId);
+			t !== void 0 && v(e.providerSubscriptionId, { priceIds: [...t.priceIds, ...e.priceIds] });
+		}),
+		customerEmail: (e) => r.sync(() => c.get(e) ?? null),
+		createCheckoutSession: (e) => r.sync(() => (f.push(e), { url: `${t}/checkout?tenant=${encodeURIComponent(e.tenantId)}&price=${encodeURIComponent(e.priceId)}` })),
+		createPortalSession: (e) => r.succeed({ url: `${t}/portal?customer=${encodeURIComponent(e.providerCustomerId)}` }),
+		reportUsage: (e) => r.sync(() => {
+			n.push(e);
+		}),
+		updateSubscription: (e) => r.sync(() => (i.push(e), {
+			plan: e.priceId ?? "mock-plan",
+			quantity: e.quantity ?? 1,
+			prorationMinor: 0,
+			currency: "usd",
+			currentPeriodStart: null,
+			currentPeriodEnd: null
+		})),
+		previewSubscriptionChange: (e) => r.succeed({
+			plan: e.priceId ?? "mock-plan",
+			quantity: e.quantity ?? 1,
+			prorationMinor: 0,
+			currency: "usd",
+			currentPeriodStart: null,
+			currentPeriodEnd: null
+		}),
+		listInvoices: () => r.succeed([]),
+		normalizeEvent: (e) => r.succeed(y(e) ? e : null)
+	};
+}, a = /* @__PURE__ */ new Set([
+	"",
+	"development",
+	"dev",
+	"test"
+]), o = (e) => !a.has((e ?? "").trim().toLowerCase()), s = (e) => {
+	if (o(e.env.NODE_ENV)) {
+		if (e.resolvedName === "mock" && e.providerOption === void 0) throw Error("billingPlugin: no STRIPE_SECRET_KEY in a production boot — refusing to run the MOCK billing provider, which answers every charge and subscription call successfully and reaches nobody. Set STRIPE_SECRET_KEY, or declare `billingPlugin({ provider: 'mock' })` if this deployment does not sell.");
+		if (e.resolvedName === "stripe") {
+			if (e.webhookSecret === null || e.webhookSecret.trim() === "") throw Error("billingPlugin: Stripe in a production boot needs STRIPE_WEBHOOK_SECRET — without it no provider event can be verified, so subscriptions, cancellations and payments would never reach this app.");
+			if (e.redirectOrigins === void 0 || e.redirectOrigins.length === 0) throw Error("billingPlugin: Stripe in a production boot needs `redirectOrigins` — the origins checkout and the customer portal may send a customer back to. Without it any URL a caller names is accepted.");
+		}
+	}
+}, c = (e) => {
+	let { provider: t, env: r } = e;
+	if (t !== void 0 && typeof t == "object") return t;
+	if ((t ?? (r.STRIPE_SECRET_KEY ? "stripe" : "mock")) === "stripe") {
+		let t = e.apiKey ?? r.STRIPE_SECRET_KEY;
+		if (!t) throw Error("billingPlugin: provider 'stripe' needs an apiKey (option or STRIPE_SECRET_KEY env)");
+		return n({
+			apiKey: t,
+			...e.planForPriceId ? { planForPriceId: e.planForPriceId } : {}
+		});
+	}
+	return i();
+}, l = (e) => e.name === "mock" ? [] : [{
+	destination: e.name === "stripe" ? "api.stripe.com" : `runtime:the '${e.name}' billing provider`,
+	purpose: "customers, subscriptions, checkout and metered usage",
+	data: ["personal", "metadata"],
+	disable: "without STRIPE_SECRET_KEY the mock provider answers, and nothing leaves (production refuses to boot on it)"
+}];
+//#endregion
+export { e as STRIPE_WEBHOOK_EVENTS, s as assertBillingProductionReady, l as billingEgressOf, o as isProductionBoot, i as mockProvider, t as normalizeStripeEvent, c as resolveProvider, n as stripeProvider };

package/dist/provision.js

@@ -0,0 +1,153 @@
+import { diffMeter as e, diffPortal as t, diffPrice as n, diffProduct as r, diffTaxSettings as i, diffWebhook as a, sellingReadiness as o } from "./catalog.js";
+import { redactStripeKeys as s, stripeRest as c } from "./stripeRest.js";
+import { execFileSync as l } from "node:child_process";
+import { chmodSync as u, existsSync as d, readFileSync as f, realpathSync as p, writeFileSync as m } from "node:fs";
+import { dirname as h, resolve as g } from "node:path";
+//#region src/provision.ts
+var _ = (e) => e.filter((e) => e.applied !== !0 && (e.kind === "create" || e.kind === "update" || e.kind === "adopt" || e.kind === "drift")), v = async (s, c, l) => {
+	let u = c.environments[l.env], d = await s.get("/v1/tax/settings"), f = l.env === "live";
+	if (d.livemode !== f) throw Error(`the key reaches a ${d.livemode ? "LIVE" : "test"} account, not ${l.env}`);
+	let p = [], m = {}, h = async (e, t) => {
+		let n = "apply" in e ? e.apply : void 0;
+		if (l.apply && n !== void 0) {
+			let r = await s.post(n.path, n.params);
+			t?.(r), p.push({
+				...e,
+				applied: !0
+			});
+		} else p.push(e);
+	}, g = await s.list("/v1/billing/meters"), _ = /* @__PURE__ */ new Map();
+	for (let t of c.meters) {
+		let n = e(t, g);
+		_.set(t.eventName, n.id), await h(n.finding, (e) => {
+			_.set(t.eventName, e.id);
+		});
+	}
+	let v = await s.list("/v1/products"), y = [];
+	for (let e of c.products) {
+		let t = r(e, v), n = {
+			inPortal: e.inPortal,
+			productId: t.id,
+			priceId: null
+		};
+		await h(t.finding, (e) => {
+			n.productId = e.id;
+		}), y.push(n);
+	}
+	for (let [e, t] of c.products.entries()) {
+		let r = y[e], i = t.price.meter;
+		if (t.price.usageType === "metered" && (i === void 0 || !_.has(i))) {
+			p.push({
+				kind: "manual",
+				object: `price ${t.price.lookupKey}`,
+				detail: `metered, but names no catalog meter (${i ?? "none"})`
+			});
+			continue;
+		}
+		let a = i === void 0 ? null : _.get(i) ?? null, o = r.productId ?? (l.apply ? null : `pending:${t.key}`), c = a ?? (l.apply || t.price.usageType !== "metered" ? a : `pending:${i}`), u = (await s.list("/v1/prices", { lookup_keys: [t.price.lookupKey] }))[0] ?? null, d = r.productId === null ? [] : await s.list("/v1/prices", { product: r.productId }), f = n(t.price, o, c, u, d, l.allowPriceChange);
+		r.priceId = f.id, await h(f.finding, (e) => {
+			r.priceId = e.id;
+		}), r.priceId !== null && (m[t.price.envName] = r.priceId);
+	}
+	await h(i(c.tax, d));
+	let b = y.filter((e) => e.inPortal), x = b.every((e) => e.productId !== null && e.priceId !== null) ? b.map((e) => ({
+		productId: e.productId,
+		priceId: e.priceId
+	})) : null, S = await s.list("/v1/billing_portal/configurations", { expand: ["data.features.subscription_update.products"] });
+	for (let e of t(c.portal, u, x, S)) await h(e);
+	let C = a(u, await s.list("/v1/webhook_endpoints"));
+	C.kind === "create" && l.apply && l.envOut === null ? p.push({
+		kind: "manual",
+		object: C.object,
+		detail: "not created: pass --env-out so its signing secret is captured (Stripe shows it once)"
+	}) : await h(C, (e) => {
+		typeof e.secret == "string" && (m.STRIPE_WEBHOOK_SECRET = e.secret);
+	});
+	let w = await s.get("/v1/account").catch(() => null), T = await s.list("/v1/tax_ids", { owner: { type: "account" } }).catch(() => null), E = await s.list("/v1/tax/registrations", { status: "active" }).catch(() => []);
+	return p.push(...o({
+		catalog: c,
+		env: u,
+		chargesEnabled: w === null ? null : w.charges_enabled === !0,
+		accountTaxIds: T === null ? null : T.length,
+		activeRegistrations: E.map((e) => e.country)
+	})), {
+		livemode: d.livemode,
+		findings: p,
+		envOut: m
+	};
+}, y = (e, t) => {
+	let n = new Set(Object.keys(t)), r = e.split("\n").filter((e) => !n.has(e.split("=")[0] ?? ""));
+	for (; r.length > 0 && r[r.length - 1] === "";) r.pop();
+	return [
+		...r,
+		...Object.entries(t).map(([e, t]) => `${e}=${t}`),
+		""
+	].join("\n");
+}, b = (e, t) => {
+	try {
+		return l("git", [...e], {
+			cwd: t,
+			stdio: "ignore"
+		}), !0;
+	} catch {
+		return !1;
+	}
+}, x = (e, t = b, n = (e) => d(e) ? p(e) : e) => {
+	for (let r of /* @__PURE__ */ new Set([g(e), g(n(g(e)))])) {
+		let n = h(r);
+		if (t(["rev-parse", "--is-inside-work-tree"], n) && !t([
+			"check-ignore",
+			"-q",
+			r
+		], n)) return `${e} is inside a git work tree and not ignored — write it to a gitignored file or outside the repo`;
+	}
+	return null;
+}, S = (e) => {
+	let t = (t) => {
+		let n = e.indexOf(t);
+		return n < 0 ? null : e[n + 1];
+	}, n = t("--env");
+	if (n !== "sandbox" && n !== "live") return "--env sandbox|live is required";
+	let r = t("--env-out");
+	if (r === void 0 || r?.startsWith("--")) return "--env-out needs a file path";
+	let i = {
+		env: n,
+		apply: e.includes("--apply"),
+		allowPriceChange: e.includes("--allow-price-change"),
+		confirmLive: e.includes("--confirm-live"),
+		strict: e.includes("--strict"),
+		envOut: r
+	};
+	return i.env === "live" && i.apply && !i.confirmLive ? "writing to LIVE needs --confirm-live (run without --apply first to see the plan)" : i;
+}, C = (e, t, n) => {
+	let r = t.STRIPE_PROVISION_KEY?.trim() || (e === "sandbox" ? n?.trim() : void 0);
+	return r === void 0 || r.length === 0 ? { refusal: "set STRIPE_PROVISION_KEY (a sandbox run also reads STRIPE_SECRET_KEY from the dotenv file)" } : e === "live" && !/^(sk|rk)_live_/.test(r) ? { refusal: "--env live needs a live key (sk_live_/rk_live_)" } : e === "sandbox" && !/^(sk|rk)_test_/.test(r) ? { refusal: "--env sandbox needs a test key (sk_test_/rk_test_)" } : { key: r };
+}, w = (e, t) => d(e) ? f(e, "utf8").split("\n").find((e) => e.startsWith(`${t}=`))?.slice(t.length + 1).trim() : void 0, T = async (e, t, n = {}) => {
+	let r = n.vars ?? process.env, i = (e) => (console.error(`stripe provision: ${e}`), 2), a = S(t);
+	if (typeof a == "string") return i(a);
+	if (a.envOut !== null) {
+		let e = x(a.envOut);
+		if (e !== null) return i(e);
+	}
+	let o = C(a.env, r, n.dotenv === void 0 ? void 0 : w(n.dotenv, "STRIPE_SECRET_KEY"));
+	if ("refusal" in o) return i(o.refusal);
+	let l;
+	try {
+		l = await v((n.rest ?? c)(o.key), e, a);
+	} catch (e) {
+		return console.error(`stripe provision: ${s(e instanceof Error ? e.message : String(e))}`), 1;
+	}
+	console.log(`Stripe ${a.env} (${l.livemode ? "LIVE" : "test mode"}) — ${a.apply ? "apply" : "check"}`);
+	for (let e of l.findings) {
+		let t = e.applied === !0 ? `${e.kind} ✓` : e.kind;
+		console.log(`  ${t.padEnd(10)} ${e.object}${"detail" in e ? ` — ${e.detail}` : ""}`);
+	}
+	if (a.envOut !== null) {
+		let e = a.envOut;
+		m(e, y(d(e) ? f(e, "utf8") : "", l.envOut), { mode: 384 }), u(e, 384), console.log(`  wrote ${Object.keys(l.envOut).sort().join(", ")} to ${e}`);
+	}
+	let p = _(l.findings), h = l.findings.filter((e) => e.kind === "manual");
+	return console.log(`  ${p.length} open, ${h.length} manual`), p.length > 0 || a.strict && h.length > 0 ? 1 : 0;
+};
+//#endregion
+export { x as envOutRefusal, y as mergeEnvFile, _ as openFindings, S as parseProvisionArgs, v as provisionStripeCatalog, C as resolveProvisionKey, T as runStripeProvision };

package/dist/rpc.d.ts

@@ -2,6 +2,7 @@ import { ActionProcedureDescriptor } from '@voltro/protocol';
 import { PluginRpcClientDescriptor } from '@voltro/protocol';
 import { QueryProcedureDescriptor } from '@voltro/protocol';
 import { Schema } from 'effect';
+import { YieldableError } from 'effect/Cause';
 
 /**
  * A billing failure. `transient: true` marks failures the service retries
@@ -13,15 +14,13 @@ import { Schema } from 'effect';
 declare class BillingError extends BillingError_base {
 }
 
-declare const BillingError_base: Schema.TaggedErrorClass<BillingError, "BillingError", {
-    readonly _tag: Schema.tag<"BillingError">;
-} & {
+declare const BillingError_base: Schema.Class<BillingError, Schema.TaggedStruct<"BillingError", {
     /** Where the failure originated — provider name or an internal stage. */
-    source: typeof Schema.String;
-    message: typeof Schema.String;
+    readonly source: Schema.String;
+    readonly message: Schema.String;
     /** Retryable? The service retries `transient` failures on a Schedule. */
-    transient: typeof Schema.Boolean;
-}>;
+    readonly transient: Schema.Boolean;
+}>, YieldableError>;
 
 /** Declared for the codegen (`VoltroPlugin.rpcClientDescriptors`) so each tag is
  *  emitted into the generated client group. Kept in lockstep with the exports. */
@@ -30,33 +29,33 @@ export declare const billingRpcClientImports: ReadonlyArray<PluginRpcClientDescr
 /** The customer's own cancellation: active until the paid period ends, then
  *  ended. `cancelAt` on the answer is when. */
 export declare const cancelSubscriptionDescriptor: ActionProcedureDescriptor<"billing.cancel", Schema.Struct<{}>, Schema.Struct<{
-    subscription: Schema.Struct<{
-        plan: typeof Schema.String;
-        status: typeof Schema.String;
-        quantity: typeof Schema.Number;
-        currentPeriodEnd: Schema.NullOr<typeof Schema.String>;
-        cancelAt: Schema.NullOr<typeof Schema.String>;
+    readonly subscription: Schema.Struct<{
+        readonly plan: Schema.String;
+        readonly status: Schema.String;
+        readonly quantity: Schema.Number;
+        readonly currentPeriodEnd: Schema.NullOr<Schema.String>;
+        readonly cancelAt: Schema.NullOr<Schema.String>;
     }>;
 }>, typeof BillingError>;
 
 export declare const changePlanDescriptor: ActionProcedureDescriptor<"billing.changePlan", Schema.Struct<{
-    plan: typeof Schema.String;
+    readonly plan: Schema.String;
 }>, Schema.Struct<{
-    plan: typeof Schema.String;
-    quantity: typeof Schema.Number;
+    readonly plan: Schema.String;
+    readonly quantity: Schema.Number;
     /** Integer minor-unit settlement: > 0 charge, < 0 credit, 0 at boundary. */
-    prorationMinor: typeof Schema.Number;
-    currency: typeof Schema.String;
+    readonly prorationMinor: Schema.Number;
+    readonly currency: Schema.String;
 }>, typeof BillingError>;
 
 export declare const changeSeatsDescriptor: ActionProcedureDescriptor<"billing.changeSeats", Schema.Struct<{
-    quantity: typeof Schema.Number;
+    readonly quantity: Schema.Number;
 }>, Schema.Struct<{
-    plan: typeof Schema.String;
-    quantity: typeof Schema.Number;
+    readonly plan: Schema.String;
+    readonly quantity: Schema.Number;
     /** Integer minor-unit settlement: > 0 charge, < 0 credit, 0 at boundary. */
-    prorationMinor: typeof Schema.Number;
-    currency: typeof Schema.String;
+    readonly prorationMinor: Schema.Number;
+    readonly currency: Schema.String;
 }>, typeof BillingError>;
 
 /**
@@ -67,85 +66,85 @@ export declare const changeSeatsDescriptor: ActionProcedureDescriptor<"billing.c
  * would fail encode at the boundary).
  */
 export declare const entitlementStatusDescriptor: QueryProcedureDescriptor<"billing.entitlementStatus", Schema.Struct<{}>, Schema.Struct<{
-    plan: typeof Schema.String;
-    billedPlan: typeof Schema.String;
-    status: typeof Schema.String;
-    entitled: typeof Schema.Boolean;
-    inGrace: typeof Schema.Boolean;
-    graceEndsAt: Schema.NullOr<typeof Schema.String>;
-    lockedSince: Schema.NullOr<typeof Schema.String>;
-    lockout: typeof Schema.String;
+    readonly plan: Schema.String;
+    readonly billedPlan: Schema.String;
+    readonly status: Schema.String;
+    readonly entitled: Schema.Boolean;
+    readonly inGrace: Schema.Boolean;
+    readonly graceEndsAt: Schema.NullOr<Schema.String>;
+    readonly lockedSince: Schema.NullOr<Schema.String>;
+    readonly lockout: Schema.String;
 }>, typeof BillingError>;
 
 /** The provider's invoice history. `hostedUrl` / `pdfUrl` are the provider's
  *  own pages — we never render an invoice ourselves. */
 export declare const invoicesDescriptor: QueryProcedureDescriptor<"billing.invoices", Schema.Struct<{}>, Schema.Struct<{
-    invoices: Schema.Array$<Schema.Struct<{
-        providerInvoiceId: typeof Schema.String;
-        amountMinor: typeof Schema.Number;
-        currency: typeof Schema.String;
-        status: typeof Schema.String;
-        createdAt: Schema.NullOr<typeof Schema.String>;
-        hostedUrl: Schema.NullOr<typeof Schema.String>;
-        pdfUrl: Schema.NullOr<typeof Schema.String>;
+    readonly invoices: Schema.$Array<Schema.Struct<{
+        readonly providerInvoiceId: Schema.String;
+        readonly amountMinor: Schema.Number;
+        readonly currency: Schema.String;
+        readonly status: Schema.String;
+        readonly createdAt: Schema.NullOr<Schema.String>;
+        readonly hostedUrl: Schema.NullOr<Schema.String>;
+        readonly pdfUrl: Schema.NullOr<Schema.String>;
     }>>;
 }>, typeof BillingError>;
 
 export declare const portalUrlDescriptor: ActionProcedureDescriptor<"billing.portalUrl", Schema.Struct<{
-    returnUrl: typeof Schema.String;
+    readonly returnUrl: Schema.String;
 }>, Schema.Struct<{
-    url: typeof Schema.String;
+    readonly url: Schema.String;
 }>, typeof BillingError>;
 
 /** What a plan/seat change would cost, from the provider's invoice preview.
  *  Quote THIS in a confirmation dialog — a locally-estimated figure differs
  *  from the charge by the provider's rounding, tax and credit balance. */
 export declare const previewChangeDescriptor: ActionProcedureDescriptor<"billing.previewChange", Schema.Struct<{
-    plan: Schema.optional<typeof Schema.String>;
-    quantity: Schema.optional<typeof Schema.Number>;
+    readonly plan: Schema.optional<Schema.String>;
+    readonly quantity: Schema.optional<Schema.Number>;
 }>, Schema.Struct<{
-    plan: typeof Schema.String;
-    quantity: typeof Schema.Number;
+    readonly plan: Schema.String;
+    readonly quantity: Schema.Number;
     /** Integer minor-unit settlement: > 0 charge, < 0 credit, 0 at boundary. */
-    prorationMinor: typeof Schema.Number;
-    currency: typeof Schema.String;
+    readonly prorationMinor: Schema.Number;
+    readonly currency: Schema.String;
 }>, typeof BillingError>;
 
 export declare const reportUsageDescriptor: ActionProcedureDescriptor<"billing.reportUsage", Schema.Struct<{
-    key: typeof Schema.String;
-    quantity: typeof Schema.Number;
+    readonly key: Schema.String;
+    readonly quantity: Schema.Number;
 }>, Schema.Struct<{
-    ok: typeof Schema.Boolean;
+    readonly ok: Schema.Boolean;
 }>, typeof BillingError>;
 
 /** Take back a cancellation before the period ends. */
 export declare const resumeSubscriptionDescriptor: ActionProcedureDescriptor<"billing.resume", Schema.Struct<{}>, Schema.Struct<{
-    subscription: Schema.Struct<{
-        plan: typeof Schema.String;
-        status: typeof Schema.String;
-        quantity: typeof Schema.Number;
-        currentPeriodEnd: Schema.NullOr<typeof Schema.String>;
-        cancelAt: Schema.NullOr<typeof Schema.String>;
+    readonly subscription: Schema.Struct<{
+        readonly plan: Schema.String;
+        readonly status: Schema.String;
+        readonly quantity: Schema.Number;
+        readonly currentPeriodEnd: Schema.NullOr<Schema.String>;
+        readonly cancelAt: Schema.NullOr<Schema.String>;
     }>;
 }>, typeof BillingError>;
 
 export declare const startCheckoutDescriptor: ActionProcedureDescriptor<"billing.startCheckout", Schema.Struct<{
-    plan: typeof Schema.String;
-    successUrl: typeof Schema.String;
-    cancelUrl: typeof Schema.String;
+    readonly plan: Schema.String;
+    readonly successUrl: Schema.String;
+    readonly cancelUrl: Schema.String;
     /** Seats to buy up front. Omit for 1. */
-    quantity: Schema.optional<typeof Schema.Number>;
+    readonly quantity: Schema.optional<Schema.Number>;
 }>, Schema.Struct<{
-    url: typeof Schema.String;
+    readonly url: Schema.String;
 }>, typeof BillingError>;
 
 export declare const subscriptionDescriptor: QueryProcedureDescriptor<"billing.subscription", Schema.Struct<{}>, Schema.Struct<{
-    subscription: Schema.NullOr<Schema.Struct<{
-        plan: typeof Schema.String;
-        status: typeof Schema.String;
-        quantity: typeof Schema.Number;
-        currentPeriodEnd: Schema.NullOr<typeof Schema.String>;
-        cancelAt: Schema.NullOr<typeof Schema.String>;
+    readonly subscription: Schema.NullOr<Schema.Struct<{
+        readonly plan: Schema.String;
+        readonly status: Schema.String;
+        readonly quantity: Schema.Number;
+        readonly currentPeriodEnd: Schema.NullOr<Schema.String>;
+        readonly cancelAt: Schema.NullOr<Schema.String>;
     }>>;
 }>, typeof BillingError>;
 
@@ -153,12 +152,12 @@ export declare const subscriptionDescriptor: QueryProcedureDescriptor<"billing.s
  *  its current subscription. Call it on the return from checkout or the
  *  portal, and when a billing page loads. */
 export declare const syncDescriptor: ActionProcedureDescriptor<"billing.sync", Schema.Struct<{}>, Schema.Struct<{
-    subscription: Schema.NullOr<Schema.Struct<{
-        plan: typeof Schema.String;
-        status: typeof Schema.String;
-        quantity: typeof Schema.Number;
-        currentPeriodEnd: Schema.NullOr<typeof Schema.String>;
-        cancelAt: Schema.NullOr<typeof Schema.String>;
+    readonly subscription: Schema.NullOr<Schema.Struct<{
+        readonly plan: Schema.String;
+        readonly status: Schema.String;
+        readonly quantity: Schema.Number;
+        readonly currentPeriodEnd: Schema.NullOr<Schema.String>;
+        readonly cancelAt: Schema.NullOr<Schema.String>;
     }>>;
 }>, typeof BillingError>;