@voltro/plugin-billing 0.85.0 → 0.86.0

package/dist/index.js

@@ -1,2653 +1,32 @@
 import { BillingError as e, BillingService as t, DEFAULT_PLAN as n, EntitlementExceeded as r, SubscriptionLocked as i } from "./types.js";
-import { billingRpcClientImports as a, cancelSubscriptionDescriptor as o, changePlanDescriptor as s, changeSeatsDescriptor as c, entitlementStatusDescriptor as l, invoicesDescriptor as u, portalUrlDescriptor as d, previewChangeDescriptor as f, reportUsageDescriptor as p, resumeSubscriptionDescriptor as m, startCheckoutDescriptor as h, subscriptionDescriptor as g, syncDescriptor as _ } from "./rpc.js";
-import { Effect as v, Layer as y, Schedule as b, Schema as x } from "effect";
-import { pluginEnv as S } from "@voltro/env";
-import { composeRpcInterceptors as C, definePlugin as ee, pluginInstanceName as w } from "@voltro/protocol";
-import { OccurrenceCounter as T, and as E, changeDigest as te, composeChangeKey as D, eq as O, gte as ne, id as k, integer as A, occurrenceWindowMs as re, registerRetention as ie, retentionTtlMsFromEnv as ae, table as j, text as M, timestamp as N } from "@voltro/database";
-import { replicaId as oe } from "@voltro/protocol/identity";
-import { createLogger as P } from "@voltro/logger";
-import F from "stripe";
-import { defineIncomingWebhook as I, mountIncomingWebhook as L } from "@voltro/plugin-webhooks";
-import { stripeProvider as se } from "@voltro/plugin-webhooks/providers";
-import { execFileSync as R } from "node:child_process";
-import { chmodSync as z, existsSync as B, readFileSync as ce, realpathSync as le, writeFileSync as ue } from "node:fs";
-import { dirname as de, resolve as V } from "node:path";
-//#region src/entitlement.ts
-var fe = (e, t, n, r) => ({
-	allowed: !Number.isFinite(t) || r <= 0 || n + r <= t,
-	entitlement: e,
-	limit: t,
-	used: n,
-	cost: r
-}), pe = (e) => e.tenantId, me = (e, n, i) => v.gen(function* () {
-	let a = pe(e.request.subject);
-	if (a === null) return i <= 0 ? void 0 : yield* v.fail(new r({
-		entitlement: n,
-		limit: 0,
-		used: 0,
-		cost: i
-	}));
-	yield* (yield* t).consumeEntitlement(a, n, i);
-}), he = (e) => v.gen(function* () {
-	let n = pe(e.request.subject);
-	if (n === null) return;
-	let r = yield* (yield* t).entitlementStatus(n);
-	if (!r.entitled) return yield* v.fail(new i({
-		tenantId: n,
-		status: r.status,
-		lockedSince: (r.lockedSince ?? /* @__PURE__ */ new Date()).toISOString(),
-		lockout: r.lockout
-	}));
-}), ge = (e, t) => (n, i) => {
-	let a = e[i.tag];
-	if (a === void 0) return n;
-	let o = a.cost ?? 1, s = i.subject.tenantId;
-	return s === null ? o <= 0 ? n : v.fail(new r({
-		entitlement: a.entitlement,
-		limit: 0,
-		used: 0,
-		cost: o
-	})) : v.flatMap(t.consumeEntitlement(s, a.entitlement, o), () => n);
-}, H = "_voltro_billing_customers", U = "_voltro_billing_subscriptions", W = "_voltro_billing_invoices", G = "_voltro_billing_usage", _e = j(H, {
-	id: k({ prefix: "bcust" }),
-	tenantId: M(),
-	provider: M(),
-	providerCustomerId: M(),
-	createdAt: N(),
-	updatedAt: N()
-}).index("byBillingCustomerTenant", ["tenantId"]).index("byBillingProviderCustomer", ["providerCustomerId"]), ve = j(U, {
-	id: k({ prefix: "bsub" }),
-	tenantId: M(),
-	provider: M(),
-	providerSubscriptionId: M(),
-	plan: M(),
-	status: M(),
-	quantity: A().default(1),
-	currentPeriodStart: N().nullable(),
-	currentPeriodEnd: N().nullable(),
-	cancelAt: N().nullable(),
-	pastDueSince: N().nullable(),
-	statusEventAt: N().nullable(),
-	createdAt: N(),
-	updatedAt: N()
-}).index("byBillingSubscriptionTenant", ["tenantId"]).index("byBillingProviderSubscription", ["providerSubscriptionId"]).index("byBillingSubscriptionStatus", ["status"]), ye = j(W, {
-	id: k({ prefix: "binv" }),
-	tenantId: M(),
-	provider: M(),
-	providerInvoiceId: M(),
-	amountMinor: A(),
-	currency: M(),
-	status: M(),
-	statusEventAt: N().nullable(),
-	createdAt: N()
-}).index("byBillingInvoiceTenant", ["tenantId"]).index("byBillingProviderInvoice", ["providerInvoiceId"]), be = j(G, {
-	id: k({ prefix: "buse" }),
-	tenantId: M().maxLength(191),
-	entitlementKey: M().maxLength(191),
-	period: M().maxLength(16),
-	used: A().default(0),
-	reportedToProvider: A().default(0),
-	updatedAt: N()
-}).unique("byBillingUsageWindow", [
-	"tenantId",
-	"entitlementKey",
-	"period"
-]), xe = () => [
-	_e,
-	ve,
-	ye,
-	be
-], Se = "_voltro_billing_dunning_notices", Ce = j(Se, {
-	id: k({ prefix: "bdun" }),
-	tenantId: M().maxLength(191),
-	episode: M().maxLength(32),
-	stepId: M().maxLength(64),
-	sentAt: N()
-}).unique("byBillingDunningNotice", [
-	"tenantId",
-	"episode",
-	"stepId"
-]), we = "locked", Te = [
-	{
-		id: "payment-failed",
-		afterHours: 0
-	},
-	{
-		id: "reminder",
-		afterHours: 72
-	},
-	{
-		id: "final-warning",
-		afterHours: 144
-	}
-], Ee = 168, De = "hard", Oe = (e, t, n) => {
-	if (e === void 0 || e.trim() === "") return t;
-	let r = Number(e);
-	if (!Number.isFinite(r) || r < 0) throw Error(`billingPlugin: ${n} must be a non-negative number, got '${e}'`);
-	return r;
-}, ke = (e, t) => {
-	let n = t.VOLTRO_BILLING_DUNNING;
-	if (n !== void 0 && n !== "" && n !== "on" && n !== "off") throw Error(`billingPlugin: VOLTRO_BILLING_DUNNING must be 'on' or 'off', got '${n}'`);
-	let r = n === "off" ? !1 : n === "on" ? !0 : e?.enabled ?? !0, i = t.VOLTRO_BILLING_LOCKOUT;
-	if (i !== void 0 && i !== "" && i !== "hard" && i !== "soft") throw Error(`billingPlugin: VOLTRO_BILLING_LOCKOUT must be 'hard' or 'soft', got '${i}'`);
-	let a = i === "hard" || i === "soft" ? i : e?.lockout ?? "hard", o = Oe(t.VOLTRO_BILLING_GRACE_HOURS, e?.graceHours ?? 168, "VOLTRO_BILLING_GRACE_HOURS"), s = e?.steps ?? Te, c = t.VOLTRO_BILLING_DUNNING_STEP_HOURS, l = s;
-	if (c !== void 0 && c.trim() !== "") {
-		let e = c.split(",").map((e) => e.trim());
-		if (e.length !== s.length) throw Error(`billingPlugin: VOLTRO_BILLING_DUNNING_STEP_HOURS lists ${e.length} value(s) but the sequence declares ${s.length} step(s) (${s.map((e) => e.id).join(", ")})`);
-		l = s.map((t, n) => ({
-			id: t.id,
-			afterHours: Oe(e[n], t.afterHours, "VOLTRO_BILLING_DUNNING_STEP_HOURS")
-		}));
-	}
-	let u = /* @__PURE__ */ new Set();
-	for (let e of l) {
-		if (e.id === "locked") throw Error(`billingPlugin: '${we}' is the reserved lockout step id`);
-		if (u.has(e.id)) throw Error(`billingPlugin: duplicate dunning step id '${e.id}'`);
-		u.add(e.id);
-	}
-	return {
-		enabled: r,
-		graceHours: o,
-		lockout: a,
-		steps: [...l].sort((e, t) => e.afterHours - t.afterHours),
-		...e?.notify === void 0 ? {} : { notify: e.notify },
-		...e?.resolveRecipient === void 0 ? {} : { resolveRecipient: e.resolveRecipient },
-		...e?.portalReturnUrl === void 0 ? {} : { portalReturnUrl: e.portalReturnUrl }
-	};
-}, Ae = 36e5, je = (e) => String(e.getTime()), Me = (e, t) => new Date(e.getTime() + t * Ae), Ne = (e, t, n) => {
-	let r = (n.getTime() - t.getTime()) / Ae;
-	return e.filter((e) => r >= e.afterHours);
-}, Pe = (e, t, r, i) => {
-	let a = {
-		tenantId: e?.tenantId ?? i ?? "",
-		lockout: t.lockout
-	};
-	if (e === null) return {
-		...a,
-		plan: n,
-		billedPlan: n,
-		status: "none",
-		entitled: !0,
-		inGrace: !1,
-		graceEndsAt: null,
-		lockedSince: null
-	};
-	if (e.status === "active" || e.status === "trialing") return {
-		...a,
-		plan: e.plan,
-		billedPlan: e.plan,
-		status: e.status,
-		entitled: !0,
-		inGrace: !1,
-		graceEndsAt: null,
-		lockedSince: null
-	};
-	if (e.status === "pastDue") {
-		if (!t.enabled) return {
-			...a,
-			plan: n,
-			billedPlan: e.plan,
-			status: e.status,
-			entitled: !0,
-			inGrace: !1,
-			graceEndsAt: null,
-			lockedSince: null
-		};
-		if (e.pastDueSince === null) return {
-			...a,
-			plan: e.plan,
-			billedPlan: e.plan,
-			status: e.status,
-			entitled: !0,
-			inGrace: !0,
-			graceEndsAt: null,
-			lockedSince: null
-		};
-		let i = Me(e.pastDueSince, t.graceHours), o = r.getTime() >= i.getTime();
-		return {
-			...a,
-			plan: o && t.lockout === "hard" ? n : e.plan,
-			billedPlan: e.plan,
-			status: e.status,
-			entitled: !o,
-			inGrace: !o,
-			graceEndsAt: i,
-			lockedSince: o ? i : null
-		};
-	}
-	return {
-		...a,
-		plan: n,
-		billedPlan: e.plan,
-		status: e.status,
-		entitled: !0,
-		inGrace: !1,
-		graceEndsAt: null,
-		lockedSince: null
-	};
-}, Fe = (e) => e.toISOString().slice(0, 10), Ie = (e) => {
-	let t = e.portalUrl, n = t === null ? "<p>Please update your payment method in the billing settings.</p>" : `<p><a href="${t}">Update your payment method</a></p>`, r = t === null ? "Please update your payment method in the billing settings." : `Update your payment method: ${t}`;
-	if (e.locked) return {
-		subject: "Your subscription has been suspended",
-		html: `<p>We were unable to collect payment, and your subscription is now suspended.</p>${n}`,
-		text: `We were unable to collect payment, and your subscription is now suspended.\n\n${r}`
-	};
-	let i = Fe(e.graceEndsAt), a = e.stepId === "payment-failed" ? "Your last payment could not be collected." : "Your payment is still outstanding.";
-	return {
-		subject: "Action needed: your payment could not be collected",
-		html: `<p>${a} Your subscription stays active until ${i}.</p>${n}`,
-		text: `${a} Your subscription stays active until ${i}.\n\n${r}`
-	};
-}, Le = (e) => (t) => t.to === null ? v.void : e.send({
-	to: t.to,
-	subject: t.subject,
-	html: t.html,
-	text: t.text
-}).pipe(v.asVoid), Re = (e, t, n) => `${e}\u0000${t}\u0000${n}`, ze = () => {
-	let e = /* @__PURE__ */ new Map();
-	return {
-		claim: (t, n, r, i) => v.sync(() => {
-			let a = Re(t, n, r);
-			return !e.has(a) && (e.set(a, {
-				tenantId: t,
-				episode: n,
-				stepId: r,
-				sentAt: i
-			}), !0);
-		}),
-		sentSteps: (t, n) => v.sync(() => [...e.values()].filter((e) => e.tenantId === t && e.episode === n))
-	};
-}, Be = () => `bdun_${Math.random().toString(36).slice(2)}${Date.now().toString(36)}`, Ve = (t) => ({
-	claim: (n, r, i, a) => v.tryPromise({
-		try: async () => {
-			let e = Be(), o = await t.insertIgnore(Se, {
-				id: e,
-				tenantId: n,
-				episode: r,
-				stepId: i,
-				sentAt: a
-			}, { conflictColumns: [
-				"tenantId",
-				"episode",
-				"stepId"
-			] });
-			return String(o.id) === e;
-		},
-		catch: (t) => new e({
-			source: "dunningNoticeStore",
-			message: String(t?.message ?? t),
-			transient: !0
-		})
-	}),
-	sentSteps: (n, r) => v.tryPromise({
-		try: async () => (await t.query({
-			table: Se,
-			predicate: E(O("tenantId", n), O("episode", r)),
-			order: [],
-			take: void 0,
-			skip: void 0,
-			projection: void 0
-		})).map((e) => ({
-			tenantId: String(e.tenantId),
-			episode: String(e.episode),
-			stepId: String(e.stepId),
-			sentAt: e.sentAt == null ? null : new Date(e.sentAt)
-		})),
-		catch: (t) => new e({
-			source: "dunningNoticeStore",
-			message: String(t?.message ?? t),
-			transient: !0
-		})
-	})
-}), He = (e) => `${e}_${Math.random().toString(36).slice(2)}${Date.now().toString(36)}`, Ue = P({ scope: "@voltro/plugin-billing" }), K = (t, n) => v.tryPromise({
-	try: t,
-	catch: (t) => (Ue.warn("billing store operation failed", {
-		source: n,
-		detail: String(t?.message ?? t)
-	}), new e({
-		source: n,
-		message: `${n} failed`,
-		transient: !0
-	}))
-}), q = (e) => ({
-	table: e.table,
-	predicate: e.predicate,
-	order: e.order ?? [],
-	take: e.take,
-	skip: void 0,
-	projection: void 0
-}), We = () => {
-	let e = /* @__PURE__ */ new Map();
-	return {
-		upsert: (t) => v.sync(() => {
-			e.set(t.tenantId, t);
-		}),
-		getByTenant: (t) => v.sync(() => e.get(t) ?? null),
-		getByProviderCustomerId: (t) => v.sync(() => [...e.values()].find((e) => e.providerCustomerId === t) ?? null),
-		list: () => v.sync(() => [...e.values()]),
-		removeByProviderCustomerId: (t) => v.sync(() => {
-			for (let [n, r] of e) if (r.providerCustomerId === t) return e.delete(n), n;
-			return null;
-		})
-	};
-}, Ge = (e) => ({
-	tenantId: String(e.tenantId),
-	provider: String(e.provider),
-	providerCustomerId: String(e.providerCustomerId)
-}), Ke = (e) => ({
-	upsert: (t) => K(async () => {
-		let n = await e.query(q({
-			table: H,
-			predicate: O("tenantId", t.tenantId),
-			take: 1
-		})), r = /* @__PURE__ */ new Date();
-		n[0] ? await e.update(H, String(n[0].id), {
-			provider: t.provider,
-			providerCustomerId: t.providerCustomerId,
-			updatedAt: r
-		}) : await e.insert(H, {
-			id: He("bcust"),
-			...t,
-			createdAt: r,
-			updatedAt: r
-		});
-	}, "customerStore"),
-	getByTenant: (t) => K(async () => {
-		let n = await e.query(q({
-			table: H,
-			predicate: O("tenantId", t),
-			take: 1
-		}));
-		return n[0] ? Ge(n[0]) : null;
-	}, "customerStore"),
-	getByProviderCustomerId: (t) => K(async () => {
-		let n = await e.query(q({
-			table: H,
-			predicate: O("providerCustomerId", t),
-			take: 1
-		}));
-		return n[0] ? Ge(n[0]) : null;
-	}, "customerStore"),
-	list: () => K(async () => (await e.query(q({ table: H }))).map(Ge), "customerStore"),
-	removeByProviderCustomerId: (t) => K(async () => {
-		let n = await e.query(q({
-			table: H,
-			predicate: O("providerCustomerId", t)
-		})), r = null;
-		for (let t of n) r = String(t.tenantId), await e.delete(H, String(t.id));
-		return r;
-	}, "customerStore")
-}), qe = (e) => e === "canceled", Je = /* @__PURE__ */ new Set([
-	"active",
-	"trialing",
-	"pastDue",
-	"incomplete"
-]), Ye = (e) => Je.has(e), Xe = (e) => e.find((e) => Ye(e.status)) ?? e[0] ?? null, Ze = (e, t) => e === null ? !1 : t === null || t.getTime() < e.getTime(), Qe = () => {
-	let e = /* @__PURE__ */ new Map(), t = 0, n = (t) => [...e.values()].filter((e) => e.tenantId === t).sort((e, t) => t.touched - e.touched), r = ({ touched: e, ...t }) => t;
-	return {
-		upsert: (n) => v.sync(() => {
-			let r = e.get(n.providerSubscriptionId);
-			r && Ze(r.statusEventAt, n.statusEventAt) || r && qe(r.status) && !qe(n.status) || e.set(n.providerSubscriptionId, {
-				...n,
-				pastDueSince: r ? r.pastDueSince : n.pastDueSince,
-				touched: ++t
-			});
-		}),
-		getByTenant: (e) => v.sync(() => {
-			let t = Xe(n(e));
-			return t ? r(t) : null;
-		}),
-		listByTenant: (e) => v.sync(() => n(e).map(r)),
-		listByStatus: (t) => v.sync(() => [...e.values()].filter((e) => e.status === t).map(r)),
-		markCanceled: (n) => v.sync(() => {
-			let r = e.get(n);
-			r && e.set(n, {
-				...r,
-				status: "canceled",
-				touched: ++t
-			});
-		}),
-		patchByTenant: (r, i) => v.sync(() => {
-			let a = Xe(n(r));
-			a && e.set(a.providerSubscriptionId, {
-				...a,
-				...i,
-				touched: ++t
-			});
-		}),
-		setStatus: (n, r) => v.sync(() => {
-			let i = e.get(n);
-			i && e.set(n, {
-				...i,
-				status: r,
-				touched: ++t
-			});
-		})
-	};
-}, $e = (e) => ({
-	tenantId: String(e.tenantId),
-	provider: String(e.provider),
-	providerSubscriptionId: String(e.providerSubscriptionId),
-	plan: String(e.plan),
-	status: String(e.status),
-	quantity: e.quantity == null ? 1 : Number(e.quantity),
-	currentPeriodStart: e.currentPeriodStart == null ? null : new Date(e.currentPeriodStart),
-	currentPeriodEnd: e.currentPeriodEnd == null ? null : new Date(e.currentPeriodEnd),
-	cancelAt: e.cancelAt == null ? null : new Date(e.cancelAt),
-	pastDueSince: e.pastDueSince == null ? null : new Date(e.pastDueSince),
-	statusEventAt: e.statusEventAt == null ? null : new Date(e.statusEventAt)
-}), et = async (e, t) => (await e.query(q({
-	table: "_voltro_billing_subscriptions",
-	predicate: O("providerSubscriptionId", t),
-	take: 1
-})))[0] ?? null, tt = async (e, t) => (await e.query(q({
-	table: U,
-	predicate: O("tenantId", t),
-	order: [{
-		column: "updatedAt",
-		direction: "desc"
-	}]
-}))).map($e), nt = (e) => ({
-	upsert: (t) => K(async () => {
-		let n = await et(e, t.providerSubscriptionId), r = /* @__PURE__ */ new Date();
-		if (n) {
-			if (Ze(n.statusEventAt == null ? null : new Date(n.statusEventAt), t.statusEventAt) || qe(String(n.status)) && !qe(t.status)) return;
-			await e.update(U, String(n.id), {
-				tenantId: t.tenantId,
-				provider: t.provider,
-				plan: t.plan,
-				status: t.status,
-				quantity: t.quantity,
-				currentPeriodStart: t.currentPeriodStart,
-				currentPeriodEnd: t.currentPeriodEnd,
-				cancelAt: t.cancelAt,
-				statusEventAt: t.statusEventAt,
-				updatedAt: r
-			});
-		} else await e.insert(U, {
-			id: He("bsub"),
-			tenantId: t.tenantId,
-			provider: t.provider,
-			providerSubscriptionId: t.providerSubscriptionId,
-			plan: t.plan,
-			status: t.status,
-			quantity: t.quantity,
-			currentPeriodStart: t.currentPeriodStart,
-			currentPeriodEnd: t.currentPeriodEnd,
-			cancelAt: t.cancelAt,
-			pastDueSince: null,
-			statusEventAt: t.statusEventAt,
-			createdAt: r,
-			updatedAt: r
-		});
-	}, "subscriptionStore"),
-	getByTenant: (t) => K(async () => Xe(await tt(e, t)), "subscriptionStore"),
-	listByTenant: (t) => K(() => tt(e, t), "subscriptionStore"),
-	listByStatus: (t) => K(async () => (await e.query(q({
-		table: U,
-		predicate: O("status", t),
-		order: [{
-			column: "updatedAt",
-			direction: "asc"
-		}]
-	}))).map($e), "subscriptionStore"),
-	markCanceled: (t) => K(async () => {
-		let n = await et(e, t);
-		n && await e.update(U, String(n.id), {
-			status: "canceled",
-			updatedAt: /* @__PURE__ */ new Date()
-		});
-	}, "subscriptionStore"),
-	patchByTenant: (t, n) => K(async () => {
-		let r = Xe(await tt(e, t)), i = r === null ? null : await et(e, r.providerSubscriptionId);
-		i && await e.update(U, String(i.id), {
-			...n.plan === void 0 ? {} : { plan: n.plan },
-			...n.quantity === void 0 ? {} : { quantity: n.quantity },
-			...n.status === void 0 ? {} : { status: n.status },
-			...n.currentPeriodStart === void 0 ? {} : { currentPeriodStart: n.currentPeriodStart },
-			...n.currentPeriodEnd === void 0 ? {} : { currentPeriodEnd: n.currentPeriodEnd },
-			...n.pastDueSince === void 0 ? {} : { pastDueSince: n.pastDueSince },
-			...n.statusEventAt === void 0 ? {} : { statusEventAt: n.statusEventAt },
-			updatedAt: /* @__PURE__ */ new Date()
-		});
-	}, "subscriptionStore"),
-	setStatus: (t, n) => K(async () => {
-		let r = await et(e, t);
-		r && await e.update(U, String(r.id), {
-			status: n,
-			updatedAt: /* @__PURE__ */ new Date()
-		});
-	}, "subscriptionStore")
-}), rt = () => {
-	let e = /* @__PURE__ */ new Map();
-	return {
-		upsert: (t) => v.sync(() => {
-			let n = e.get(t.providerInvoiceId);
-			n && Ze(n.statusEventAt, t.statusEventAt) || e.set(t.providerInvoiceId, t);
-		}),
-		listByTenant: (t) => v.sync(() => [...e.values()].filter((e) => e.tenantId === t))
-	};
-}, it = (e) => ({
-	tenantId: String(e.tenantId),
-	provider: String(e.provider),
-	providerInvoiceId: String(e.providerInvoiceId),
-	amountMinor: Number(e.amountMinor),
-	currency: String(e.currency),
-	status: String(e.status),
-	statusEventAt: e.statusEventAt == null ? null : new Date(e.statusEventAt)
-}), at = (e) => ({
-	upsert: (t) => K(async () => {
-		let n = (await e.query(q({
-			table: W,
-			predicate: O("providerInvoiceId", t.providerInvoiceId),
-			take: 1
-		})))[0];
-		if (n) {
-			if (Ze(n.statusEventAt == null ? null : new Date(n.statusEventAt), t.statusEventAt)) return;
-			await e.update(W, String(n.id), {
-				amountMinor: t.amountMinor,
-				currency: t.currency,
-				status: t.status,
-				statusEventAt: t.statusEventAt
-			});
-		} else await e.insert(W, {
-			id: He("binv"),
-			...t,
-			createdAt: /* @__PURE__ */ new Date()
-		});
-	}, "invoiceStore"),
-	listByTenant: (t) => K(async () => (await e.query(q({
-		table: W,
-		predicate: O("tenantId", t),
-		order: [{
-			column: "createdAt",
-			direction: "desc"
-		}]
-	}))).map(it), "invoiceStore")
-}), ot = (e, t, n) => `${e}\u0000${t}\u0000${n}`, st = () => {
-	let e = /* @__PURE__ */ new Map();
-	return {
-		used: (t, n, r) => v.sync(() => e.get(ot(t, n, r))?.used ?? 0),
-		consume: (t, n, r, i, a) => v.sync(() => {
-			let o = ot(t, n, r), s = e.get(o), c = s?.used ?? 0, l = c + i <= a;
-			return l && e.set(o, {
-				tenantId: t,
-				entitlementKey: n,
-				period: r,
-				used: c + i,
-				reportedToProvider: s?.reportedToProvider ?? 0
-			}), {
-				allowed: l,
-				entitlement: n,
-				limit: a,
-				used: c,
-				cost: i
-			};
-		}),
-		increment: (t, n, r, i) => v.sync(() => {
-			let a = ot(t, n, r), o = e.get(a), s = (o?.used ?? 0) + i;
-			return e.set(a, {
-				tenantId: t,
-				entitlementKey: n,
-				period: r,
-				used: s,
-				reportedToProvider: o?.reportedToProvider ?? 0
-			}), s;
-		}),
-		pending: () => v.sync(() => [...e.values()].filter((e) => e.used > e.reportedToProvider)),
-		markReported: (t, n, r, i) => v.sync(() => {
-			let a = ot(t, n, r), o = e.get(a);
-			o && e.set(a, {
-				...o,
-				reportedToProvider: i
-			});
-		})
-	};
-}, ct = (e) => ({
-	tenantId: String(e.tenantId),
-	entitlementKey: String(e.entitlementKey),
-	period: String(e.period),
-	used: Number(e.used ?? 0),
-	reportedToProvider: Number(e.reportedToProvider ?? 0)
-}), lt = async (e, t, n, r) => (await e.query(q({
-	table: "_voltro_billing_usage",
-	predicate: E(O("tenantId", t), O("entitlementKey", n), O("period", r)),
-	take: 1
-})))[0] ?? null, ut = (e) => ({
-	used: (t, n, r) => K(async () => {
-		let i = await lt(e, t, n, r);
-		return i ? Number(i.used ?? 0) : 0;
-	}, "usageStore"),
-	consume: (t, n, r, i, a) => K(async () => {
-		for (let o = 0; o < 32; o++) {
-			o > 0 && await new Promise((e) => setTimeout(e, o));
-			let s = await lt(e, t, n, r), c = s ? Number(s.used ?? 0) : 0;
-			if (c + i > a) return {
-				allowed: !1,
-				entitlement: n,
-				limit: a,
-				used: c,
-				cost: i
-			};
-			if (s) {
-				if (await e.updateMany("_voltro_billing_usage", {
-					used: c + i,
-					updatedAt: /* @__PURE__ */ new Date()
-				}, { where: E(O("id", String(s.id)), O("used", c)) }) === 1) return {
-					allowed: !0,
-					entitlement: n,
-					limit: a,
-					used: c,
-					cost: i
-				};
-			} else {
-				let o = He("buse"), s = await e.insertIgnore(G, {
-					id: o,
-					tenantId: t,
-					entitlementKey: n,
-					period: r,
-					used: i,
-					reportedToProvider: 0,
-					updatedAt: /* @__PURE__ */ new Date()
-				}, { conflictColumns: [
-					"tenantId",
-					"entitlementKey",
-					"period"
-				] });
-				if (String(s.id) === o) return {
-					allowed: !0,
-					entitlement: n,
-					limit: a,
-					used: 0,
-					cost: i
-				};
-			}
-		}
-		throw Error(`billing usage consume: contention on (${t}, ${n}, ${r}) exceeded 32 attempts`);
-	}, "usageStore"),
-	increment: (t, n, r, i) => K(async () => {
-		for (let a = 0; a < 32; a++) {
-			a > 0 && await new Promise((e) => setTimeout(e, a));
-			let o = await lt(e, t, n, r);
-			if (o) {
-				let t = Number(o.used ?? 0);
-				if (await e.updateMany("_voltro_billing_usage", {
-					used: t + i,
-					updatedAt: /* @__PURE__ */ new Date()
-				}, { where: E(O("id", String(o.id)), O("used", t)) }) === 1) return t + i;
-			} else {
-				let a = He("buse"), o = await e.insertIgnore(G, {
-					id: a,
-					tenantId: t,
-					entitlementKey: n,
-					period: r,
-					used: i,
-					reportedToProvider: 0,
-					updatedAt: /* @__PURE__ */ new Date()
-				}, { conflictColumns: [
-					"tenantId",
-					"entitlementKey",
-					"period"
-				] });
-				if (String(o.id) === a) return i;
-			}
-		}
-		throw Error(`billing usage increment: contention on (${t}, ${n}, ${r}) exceeded 32 attempts`);
-	}, "usageStore"),
-	pending: () => K(async () => (await e.query(q({ table: G }))).map(ct).filter((e) => e.used > e.reportedToProvider), "usageStore"),
-	markReported: (t, n, r, i) => K(async () => {
-		let a = await lt(e, t, n, r);
-		a && await e.update(G, String(a.id), {
-			reportedToProvider: i,
-			updatedAt: /* @__PURE__ */ new Date()
-		});
-	}, "usageStore")
-}), dt = () => ({
-	customers: We(),
-	subscriptions: Qe(),
-	invoices: rt(),
-	usage: st(),
-	dunningNotices: ze()
-}), ft = (e) => ({
-	customers: Ke(e),
-	subscriptions: nt(e),
-	invoices: at(e),
-	usage: ut(e),
-	dunningNotices: Ve(e)
-}), J = P({ scope: "@voltro/plugin-billing" }), pt = 3, Y = /* @__PURE__ */ new Set([
-	"active",
-	"trialing",
-	"pastDue"
-]), mt = (e = /* @__PURE__ */ new Date()) => `${e.getUTCFullYear()}-${String(e.getUTCMonth() + 1).padStart(2, "0")}`, ht = (e) => ({ stores: e ?? dt() }), X = (e, t) => e.pipe(v.retry({
-	schedule: b.recurs(Math.max(0, t - 1)),
-	while: (e) => e.transient
-})), gt = /^[A-Za-z0-9][A-Za-z0-9_.:-]{0,99}$/, _t = "usage key must be 1–100 characters of A–Z, a–z, 0–9, \"_\", \".\", \":\" or \"-\", starting with a letter or digit", vt = (t) => {
-	let { provider: n, plans: i } = t, a = t.attempts ?? 3, o = t.checkout, s = t.now ?? (() => /* @__PURE__ */ new Date()), c = (n, r) => n.length === 0 ? v.fail(new e({
-		source: "billing",
-		message: "no tenant on this call",
-		transient: !1
-	})) : t.admit === void 0 ? v.void : t.admit(n, r), l = t.redirectOrigins?.map((e) => new URL(e).origin), u = (t, n) => {
-		let r = (t) => v.fail(new e({
-			source: "billing",
-			message: `${n} ${t}`,
-			transient: !1
-		})), i;
-		try {
-			i = new URL(t);
-		} catch {
-			return r("is not an absolute URL");
-		}
-		return i.protocol !== "https:" && i.protocol !== "http:" ? r("must be an http(s) URL") : l !== void 0 && !l.includes(i.origin) ? r(`must point at one of the configured redirect origins, not ${i.origin}`) : v.void;
-	}, d = ht(t.stores), f = t.dunning ?? ke(void 0, {}), p = (e) => d.stores.subscriptions.getByTenant(e).pipe(v.map((t) => Pe(t, f, s(), e))), m = (e) => p(e).pipe(v.map((e) => e.plan)), h = (e) => d.stores.subscriptions.getByTenant(e), g = (e, n) => v.gen(function* () {
-		if (t.resolveEntitlementLimit !== void 0) {
-			let r = yield* t.resolveEntitlementLimit(e, n);
-			if (r !== null) return r;
-		}
-		let r = yield* m(e);
-		return i.entitlementLimit(r, n);
-	}), _ = (e, t, n) => v.gen(function* () {
-		return fe(t, yield* g(e, t), yield* d.stores.usage.used(e, t, mt(s())), n);
-	}), y = (e, t, n) => v.gen(function* () {
-		let i = yield* g(e, t);
-		if (!Number.isFinite(i) || n <= 0) return;
-		let a = mt(s()), o = yield* d.stores.usage.consume(e, t, a, n, i);
-		if (!o.allowed) return yield* v.fail(new r({
-			entitlement: t,
-			limit: o.limit,
-			used: o.used,
-			cost: n
-		}));
-	}), b = (t, n, r) => gt.test(n) ? Number.isFinite(r) ? r <= 0 ? v.void : d.stores.usage.increment(t, n, mt(s()), r).pipe(v.asVoid) : v.fail(new e({
-		source: "billing",
-		message: `usage quantity must be a finite number, got ${r}`,
-		transient: !1
-	})) : v.fail(new e({
-		source: "billing",
-		message: _t,
-		transient: !1
-	})), x = () => v.gen(function* () {
-		if (!n.supportsMeteredUsage) return;
-		let e = yield* d.stores.usage.pending();
-		for (let t of e) {
-			let e = t.used - t.reportedToProvider;
-			if (e <= 0) continue;
-			let r = yield* d.stores.customers.getByTenant(t.tenantId);
-			if (r === null && n.usageRequiresCustomer === !0) {
-				yield* v.logWarning("billing usage not flushed: no provider customer linked").pipe(v.annotateLogs({
-					tenantId: t.tenantId,
-					key: t.entitlementKey,
-					pending: e
-				}));
-				continue;
-			}
-			yield* X(n.reportUsage({
-				tenantId: t.tenantId,
-				entitlementKey: t.entitlementKey,
-				quantity: e,
-				idempotencyKey: `${t.tenantId}:${t.entitlementKey}:${t.period}:${t.used}`,
-				...r === null ? {} : { providerCustomerId: r.providerCustomerId }
-			}), a), yield* d.stores.usage.markReported(t.tenantId, t.entitlementKey, t.period, t.used);
-		}
-	}), S = (t) => v.fail(new e({
-		source: "billing",
-		message: `tenant '${t}' already has a paying subscription — change its plan instead of checking out again`,
-		transient: !1
-	})), C = (e, t, r) => t.status === "canceled" ? d.stores.subscriptions.markCanceled(t.providerSubscriptionId) : d.stores.subscriptions.upsert({
-		tenantId: e,
-		provider: n.name,
-		providerSubscriptionId: t.providerSubscriptionId,
-		plan: t.plan ?? "free",
-		status: t.status,
-		quantity: t.quantity,
-		currentPeriodStart: t.currentPeriodStart,
-		currentPeriodEnd: t.currentPeriodEnd,
-		cancelAt: t.cancelAt,
-		pastDueSince: null,
-		statusEventAt: r
-	}), ee = (t) => v.gen(function* () {
-		let r = i.priceIdFor(t.plan);
-		if (r === null) return yield* v.fail(new e({
-			source: "billing",
-			message: `plan '${t.plan}' has no provider priceId — not a paid plan`,
-			transient: !1
-		}));
-		if (yield* c(t.tenantId, "checkout"), t.quantity !== void 0 && (!Number.isSafeInteger(t.quantity) || t.quantity <= 0)) return yield* v.fail(new e({
-			source: "billing",
-			message: `seat quantity must be a positive integer, got ${t.quantity}`,
-			transient: !1
-		}));
-		yield* u(t.successUrl, "successUrl"), yield* u(t.cancelUrl, "cancelUrl");
-		let l = yield* d.stores.subscriptions.getByTenant(t.tenantId);
-		if (l !== null && Y.has(l.status)) return yield* S(t.tenantId);
-		let f = yield* d.stores.customers.getByTenant(t.tenantId), p = f?.providerCustomerId ?? (yield* X(n.ensureCustomer({ tenantId: t.tenantId }), a));
-		f === null && (yield* d.stores.customers.upsert({
-			tenantId: t.tenantId,
-			provider: n.name,
-			providerCustomerId: p
-		}));
-		let m = (yield* X(n.listSubscriptions({ providerCustomerId: p }), a)).filter((e) => Y.has(e.status));
-		if (m.length > 0) {
-			for (let e of m) yield* C(t.tenantId, e, s());
-			return yield* S(t.tenantId);
-		}
-		return yield* X(n.expireOpenCheckouts({ providerCustomerId: p }), a), yield* X(n.createCheckoutSession({
-			tenantId: t.tenantId,
-			priceId: r,
-			meteredPriceIds: i.meteredPriceIdsFor(t.plan),
-			successUrl: t.successUrl,
-			cancelUrl: t.cancelUrl,
-			providerCustomerId: p,
-			...t.quantity === void 0 ? {} : { quantity: t.quantity },
-			...o?.adjustableQuantity === void 0 ? {} : { adjustableQuantity: o.adjustableQuantity },
-			...o?.trialDays === void 0 ? {} : { trialDays: o.trialDays }
-		}), a);
-	}), w = (t, r) => v.gen(function* () {
-		yield* c(t, "portal"), yield* u(r, "returnUrl");
-		let i = yield* d.stores.customers.getByTenant(t);
-		return i === null ? yield* v.fail(new e({
-			source: "billing",
-			message: `no provider customer linked for tenant '${t}'`,
-			transient: !1
-		})) : yield* X(n.createPortalSession({
-			tenantId: t,
-			providerCustomerId: i.providerCustomerId,
-			returnUrl: r
-		}), a);
-	}), T = (e) => v.gen(function* () {
-		if (f.resolveRecipient !== void 0) {
-			let t = yield* f.resolveRecipient(e);
-			if (t !== null) return t;
-		}
-		if (n.customerEmail === void 0) return null;
-		let t = yield* d.stores.customers.getByTenant(e);
-		return t === null ? null : yield* n.customerEmail(t.providerCustomerId);
-	}), E = (e) => {
-		let t = f.portalReturnUrl;
-		return t === void 0 ? v.succeed(null) : w(e, t).pipe(v.map((e) => e.url), v.catch(() => v.succeed(null)));
-	}, te = (e, t, n, r, i) => v.gen(function* () {
-		let a = yield* T(e.tenantId).pipe(v.catch(() => v.succeed(null))), o = yield* E(e.tenantId), s = t.lockedSince !== null, c = Ie({
-			stepId: n,
-			locked: s,
-			graceEndsAt: i,
-			portalUrl: o
-		}), l = {
-			stepId: n,
-			tenantId: e.tenantId,
-			to: a,
-			plan: e.plan,
-			status: e.status,
-			pastDueSince: r,
-			graceEndsAt: i,
-			locked: s,
-			lockout: f.lockout,
-			portalUrl: o,
-			...c
-		};
-		J.info("billing dunning notice", {
-			tenant: e.tenantId,
-			step: n,
-			locked: s,
-			graceEndsAt: i.toISOString(),
-			delivered: f.notify !== void 0 && a !== null
-		});
-		let u = f.notify;
-		u !== void 0 && (yield* u(l).pipe(v.catchCause((t) => v.sync(() => {
-			J.warn("billing dunning notify failed", {
-				tenant: e.tenantId,
-				step: n,
-				cause: String(t)
-			});
-		}))));
-	}), D = (e) => v.gen(function* () {
-		let t = yield* d.stores.subscriptions.getByTenant(e);
-		if (t === null) return Pe(null, f, s(), e);
-		let r = yield* n.fetchSubscription(t.providerSubscriptionId).pipe(v.catch((t) => v.sync(() => (J.warn("billing dunning reconcile: provider unreachable, not escalating", {
-			tenant: e,
-			source: t.source,
-			message: t.message
-		}), null)))), i = t;
-		if (r !== null) {
-			let n = s(), a = r.status === "pastDue" ? t.status === "pastDue" && t.pastDueSince !== null ? t.pastDueSince : n : null;
-			yield* d.stores.subscriptions.patchByTenant(e, {
-				status: r.status,
-				...r.plan === null ? {} : { plan: r.plan },
-				quantity: r.quantity,
-				currentPeriodStart: r.currentPeriodStart,
-				currentPeriodEnd: r.currentPeriodEnd,
-				pastDueSince: a,
-				statusEventAt: n
-			}), i = {
-				...t,
-				status: r.status,
-				plan: r.plan ?? t.plan,
-				quantity: r.quantity,
-				currentPeriodStart: r.currentPeriodStart,
-				currentPeriodEnd: r.currentPeriodEnd,
-				pastDueSince: a,
-				statusEventAt: n
-			};
-		}
-		let a = Pe(i, f, s(), e);
-		if (!f.enabled || i.status !== "pastDue" || i.pastDueSince === null) return a;
-		let o = i.pastDueSince, c = je(o), l = a.graceEndsAt ?? o, u = Ne(f.steps, o, s()).map((e) => e.id);
-		a.lockedSince !== null && u.push(we);
-		for (let t of u) (yield* d.stores.dunningNotices.claim(e, c, t, s())) && (yield* te(i, a, t, o, l));
-		return a;
-	}), O = () => v.gen(function* () {
-		let e = yield* d.stores.subscriptions.listByStatus("pastDue"), t = 0;
-		for (let n of e) yield* D(n.tenantId).pipe(v.catch((e) => v.sync(() => {
-			J.warn("billing dunning sweep: tenant failed", {
-				tenant: n.tenantId,
-				message: e.message
-			});
-		}))), t += 1;
-		return t;
-	}), ne = (e) => {
-		if (!f.enabled) return v.void;
-		if (e._tag === "invoicePaymentFailed") return D(e.tenantId).pipe(v.asVoid);
-		if (e._tag !== "invoicePaid" && e._tag !== "subscriptionUpserted") return v.void;
-		let t = e.tenantId;
-		return d.stores.subscriptions.getByTenant(t).pipe(v.flatMap((e) => e !== null && (e.status === "pastDue" || e.pastDueSince !== null) ? D(t).pipe(v.asVoid) : v.void));
-	}, k = (e) => {
-		switch (e._tag) {
-			case "subscriptionUpserted": return d.stores.subscriptions.upsert({
-				tenantId: e.tenantId,
-				provider: n.name,
-				providerSubscriptionId: e.providerSubscriptionId,
-				plan: e.plan,
-				status: e.status,
-				quantity: e.quantity ?? 1,
-				currentPeriodStart: e.currentPeriodStart ?? null,
-				currentPeriodEnd: e.currentPeriodEnd,
-				cancelAt: e.cancelAt,
-				pastDueSince: null,
-				statusEventAt: e.occurredAt
-			});
-			case "subscriptionCanceled": return d.stores.subscriptions.markCanceled(e.providerSubscriptionId);
-			case "invoicePaid": return d.stores.invoices.upsert({
-				tenantId: e.tenantId,
-				provider: n.name,
-				providerInvoiceId: e.providerInvoiceId,
-				amountMinor: e.amountMinor,
-				currency: e.currency,
-				status: "paid",
-				statusEventAt: e.occurredAt
-			});
-			case "invoicePaymentFailed": return d.stores.invoices.upsert({
-				tenantId: e.tenantId,
-				provider: n.name,
-				providerInvoiceId: e.providerInvoiceId,
-				amountMinor: e.amountMinor,
-				currency: e.currency,
-				status: "open",
-				statusEventAt: e.occurredAt
-			});
-			case "customerLinked": return d.stores.customers.upsert({
-				tenantId: e.tenantId,
-				provider: n.name,
-				providerCustomerId: e.providerCustomerId
-			});
-			case "customerUnlinked": return d.stores.customers.removeByProviderCustomerId(e.providerCustomerId).pipe(v.asVoid);
-		}
-	}, A = (e) => k(e).pipe(v.andThen(ne(e))), re = (t, r) => v.gen(function* () {
-		yield* c(t, "change"), yield* R(t);
-		let o = yield* d.stores.subscriptions.getByTenant(t);
-		if (o === null) return yield* v.fail(new e({
-			source: "billing",
-			message: `no subscription for tenant '${t}' to change`,
-			transient: !1
-		}));
-		let s = r.plan ?? o.plan, l = r.quantity ?? o.quantity;
-		if (r.plan !== void 0 && !i.has(s)) return yield* v.fail(new e({
-			source: "billing",
-			message: `unknown plan '${s}' — not in the plan registry`,
-			transient: !1
-		}));
-		if (!Number.isInteger(l) || l <= 0) return yield* v.fail(new e({
-			source: "billing",
-			message: `seat quantity must be a positive integer, got ${l}`,
-			transient: !1
-		}));
-		let u = yield* X(n.updateSubscription({
-			providerSubscriptionId: o.providerSubscriptionId,
-			...r.plan === void 0 ? {} : { priceId: i.priceIdFor(s) ?? s },
-			...r.quantity === void 0 ? {} : { quantity: l },
-			proration: "prorate"
-		}), a);
-		return yield* d.stores.subscriptions.patchByTenant(t, {
-			...r.plan === void 0 ? {} : { plan: s },
-			quantity: u.quantity,
-			...u.currentPeriodStart === null ? {} : { currentPeriodStart: u.currentPeriodStart },
-			...u.currentPeriodEnd === null ? {} : { currentPeriodEnd: u.currentPeriodEnd }
-		}), {
-			tenantId: t,
-			plan: s,
-			quantity: u.quantity,
-			prorationMinor: u.prorationMinor,
-			currency: u.currency
-		};
-	}), ie = (t, r) => v.gen(function* () {
-		let o = yield* d.stores.subscriptions.getByTenant(t);
-		if (o === null) return yield* v.fail(new e({
-			source: "billing",
-			message: `no subscription for tenant '${t}' to preview`,
-			transient: !1
-		}));
-		let s = r.plan ?? o.plan, c = yield* X(n.previewSubscriptionChange({
-			providerSubscriptionId: o.providerSubscriptionId,
-			...r.plan === void 0 ? {} : { priceId: i.priceIdFor(s) ?? s },
-			...r.quantity === void 0 ? {} : { quantity: r.quantity },
-			proration: "prorate"
-		}), a);
-		return {
-			tenantId: t,
-			plan: s,
-			quantity: c.quantity,
-			prorationMinor: c.prorationMinor,
-			currency: c.currency
-		};
-	}), ae = (e) => v.gen(function* () {
-		let t = yield* d.stores.customers.getByTenant(e);
-		return t === null ? [] : yield* X(n.listInvoices({ providerCustomerId: t.providerCustomerId }), a);
-	}), j = (t, n) => v.gen(function* () {
-		if (n === "free") {
-			let e = yield* oe(t);
-			return {
-				tenantId: t,
-				plan: e.plan,
-				quantity: e.quantity,
-				prorationMinor: 0,
-				currency: i.currencyFor(e.plan)
-			};
-		}
-		return i.has(n) && i.priceIdFor(n) === null ? yield* v.fail(new e({
-			source: "billing",
-			message: `plan '${n}' has no provider price — it is not a self-serve plan`,
-			transient: !1
-		})) : yield* re(t, { plan: n });
-	}), M = (t, n) => d.stores.subscriptions.getByTenant(t).pipe(v.flatMap((r) => r !== null && Ye(r.status) ? v.succeed(r) : v.fail(new e({
-		source: "billing",
-		message: `no live subscription for tenant '${t}' to ${n}`,
-		transient: !1
-	})))), N = (e, t) => v.gen(function* () {
-		let n = s();
-		return yield* C(e.tenantId, {
-			...t,
-			providerSubscriptionId: e.providerSubscriptionId
-		}, n), {
-			...e,
-			...t,
-			plan: t.plan ?? e.plan,
-			statusEventAt: n
-		};
-	}), oe = (e) => v.gen(function* () {
-		yield* c(e, "cancel"), yield* R(e);
-		let t = yield* M(e, "cancel"), r = yield* X(n.cancelSubscription({
-			providerSubscriptionId: t.providerSubscriptionId,
-			mode: "periodEnd"
-		}), a);
-		return yield* N(t, r);
-	}), P = (e) => v.gen(function* () {
-		yield* c(e, "resume"), yield* R(e);
-		let t = yield* M(e, "resume"), r = yield* X(n.resumeSubscription(t.providerSubscriptionId), a);
-		return yield* N(t, r);
-	}), F = (e) => v.gen(function* () {
-		yield* x();
-		let t = yield* d.stores.customers.getByTenant(e), r = yield* d.stores.subscriptions.listByTenant(e), i = new Set(r.filter((e) => Ye(e.status)).map((e) => e.providerSubscriptionId));
-		if (t !== null) {
-			let e = yield* X(n.listSubscriptions({ providerCustomerId: t.providerCustomerId }), a);
-			for (let t of e) i.add(t.providerSubscriptionId);
-		}
-		let o = [];
-		for (let t of i) {
-			let r = yield* X(n.cancelSubscription({
-				providerSubscriptionId: t,
-				mode: "close"
-			}), a);
-			yield* C(e, {
-				...r,
-				providerSubscriptionId: t
-			}, s()), o.push(t);
-		}
-		return J.info("billing account closed", {
-			tenant: e,
-			canceled: o.length
-		}), {
-			tenantId: e,
-			canceled: o
-		};
-	}), I = (e) => {
-		let n = t.isTenantClosed;
-		return n === void 0 ? v.succeed(!1) : n(e).pipe(v.catch((t) => v.sync(() => (J.warn("billing: could not tell whether a tenant is closed — leaving it", {
-			tenant: e,
-			message: t.message
-		}), !1))));
-	}, L = (e, t) => v.gen(function* () {
-		let r = s(), o = yield* X(n.listSubscriptions({ providerCustomerId: e }), a), c = yield* d.stores.customers.getByProviderCustomerId(e), l = c?.tenantId ?? t ?? o.find((e) => e.tenantId !== null)?.tenantId ?? null;
-		if (l === null) return J.warn("billing sync: customer names no tenant — nothing to attribute it to", { customer: e }), {
-			tenantId: null,
-			events: []
-		};
-		let u = [];
-		c === null && (yield* d.stores.customers.upsert({
-			tenantId: l,
-			provider: n.name,
-			providerCustomerId: e
-		}), u.push({
-			_tag: "customerLinked",
-			tenantId: l,
-			providerCustomerId: e,
-			occurredAt: r
-		})), o.some((e) => Y.has(e.status) && e.cancelAt === null) && (yield* I(l)) && (J.error("billing sync: a closed tenant still has a paying subscription — closing it", { tenant: l }), yield* F(l), o = yield* X(n.listSubscriptions({ providerCustomerId: e }), a));
-		for (let e of o) if (yield* C(l, e, r), u.push(B(l, e, r)), e.plan !== null && Y.has(e.status)) {
-			let t = i.meteredPriceIdsFor(e.plan).filter((t) => !e.priceIds.includes(t));
-			t.length > 0 && (yield* X(n.addSubscriptionPrices({
-				providerSubscriptionId: e.providerSubscriptionId,
-				priceIds: t
-			}), a));
-		}
-		let f = new Set(o.map((e) => e.providerSubscriptionId));
-		for (let e of yield* d.stores.subscriptions.listByTenant(l)) {
-			if (!Ye(e.status) || f.has(e.providerSubscriptionId)) continue;
-			let t = yield* X(n.fetchSubscription(e.providerSubscriptionId), a), i = t === null ? {
-				...e,
-				status: "canceled",
-				providerSubscriptionId: e.providerSubscriptionId
-			} : {
-				...t,
-				providerSubscriptionId: e.providerSubscriptionId
-			};
-			yield* C(l, i, r), u.push(B(l, i, r));
-		}
-		for (let e of u) yield* ne(e);
-		return {
-			tenantId: l,
-			events: u
-		};
-	}), se = (e) => v.forEach(e, (e) => {
-		let n = t.onEvent?.[e._tag];
-		return n === void 0 ? v.void : n(e).pipe(v.catchCause((t) => v.sync(() => {
-			J.error("billing: onEvent failed for a correction — the next sync of this tenant retries it", {
-				event: e._tag,
-				cause: String(t)
-			});
-		})));
-	}, { discard: !0 }), R = (e) => v.gen(function* () {
-		let t = yield* d.stores.customers.getByTenant(e);
-		if (t !== null) {
-			let n = yield* L(t.providerCustomerId, e);
-			yield* se(n.events);
-		}
-		return yield* d.stores.subscriptions.getByTenant(e);
-	}), z = (e, t) => e !== void 0 && e.status === t.status && e.plan === (t.plan ?? "free") && e.quantity === t.quantity && (e.cancelAt?.getTime() ?? null) === (t.cancelAt?.getTime() ?? null), B = (e, t, n) => t.status === "canceled" ? {
-		_tag: "subscriptionCanceled",
-		tenantId: e,
-		providerSubscriptionId: t.providerSubscriptionId,
-		occurredAt: n
-	} : {
-		_tag: "subscriptionUpserted",
-		tenantId: e,
-		providerSubscriptionId: t.providerSubscriptionId,
-		plan: t.plan ?? "free",
-		status: t.status,
-		quantity: t.quantity,
-		currentPeriodStart: t.currentPeriodStart,
-		currentPeriodEnd: t.currentPeriodEnd,
-		cancelAt: t.cancelAt,
-		occurredAt: n
-	};
-	return {
-		service: {
-			subscription: h,
-			plan: m,
-			entitlementStatus: p,
-			reconcileDunning: D,
-			dunningSweep: O,
-			checkEntitlement: _,
-			consumeEntitlement: y,
-			reportUsage: b,
-			flushUsage: x,
-			startCheckout: ee,
-			portalUrl: w,
-			applyEvent: A,
-			changePlan: j,
-			changeSeats: (e, t) => re(e, { quantity: t }),
-			previewChange: ie,
-			invoices: ae,
-			cancelSubscription: oe,
-			resumeSubscription: P,
-			closeAccount: F,
-			reconcileFromProvider: () => v.gen(function* () {
-				let e = s(), t = yield* X(n.listSubscriptions({}), a), r = yield* d.stores.customers.list(), o = new Map(r.map((e) => [e.providerCustomerId, e.tenantId])), c = /* @__PURE__ */ new Set(), l = /* @__PURE__ */ new Map(), u = /* @__PURE__ */ new Set(), f = [], p = /* @__PURE__ */ new Set(), m = /* @__PURE__ */ new Map(), h = 0, g = 0, _ = (e) => {
-					let t = m.get(e);
-					return t === void 0 ? I(e).pipe(v.tap((t) => v.sync(() => {
-						m.set(e, t);
-					}))) : v.succeed(t);
-				};
-				for (let r of t) {
-					u.add(r.providerSubscriptionId);
-					let t = r.tenantId ?? (r.providerCustomerId === null ? null : o.get(r.providerCustomerId) ?? null);
-					if (t === null) {
-						h += 1, J.warn("billing reconcile: provider subscription names no tenant", { subscription: r.providerSubscriptionId });
-						continue;
-					}
-					if (Y.has(r.status) && r.cancelAt === null && !p.has(t) && (yield* _(t))) {
-						J.error("billing reconcile: a closed tenant still has a paying subscription — closing it", {
-							tenant: t,
-							subscription: r.providerSubscriptionId
-						}), (yield* F(t).pipe(v.map(() => !0), v.catch((e) => v.sync(() => (J.error("billing reconcile: closing a closed tenant failed — retried next run", {
-							tenant: t,
-							message: e.message
-						}), !1))))) && p.add(t), c.add(t);
-						continue;
-					}
-					if (p.has(t)) continue;
-					Y.has(r.status) && l.set(t, (l.get(t) ?? 0) + 1);
-					let s = yield* d.stores.subscriptions.listByTenant(t);
-					z(s.find((e) => e.providerSubscriptionId === r.providerSubscriptionId), r) || (yield* C(t, r, e), f.push(B(t, r, e)), c.add(t)), r.providerCustomerId !== null && o.get(r.providerCustomerId) !== t && (yield* d.stores.customers.upsert({
-						tenantId: t,
-						provider: n.name,
-						providerCustomerId: r.providerCustomerId
-					}), o.set(r.providerCustomerId, t), f.push({
-						_tag: "customerLinked",
-						tenantId: t,
-						providerCustomerId: r.providerCustomerId,
-						occurredAt: e
-					}), c.add(t));
-					let m = r.plan;
-					if (m !== null && Y.has(r.status)) {
-						let e = i.meteredPriceIdsFor(m).filter((e) => !r.priceIds.includes(e));
-						e.length > 0 && (yield* X(n.addSubscriptionPrices({
-							providerSubscriptionId: r.providerSubscriptionId,
-							priceIds: e
-						}), a), g += 1);
-					}
-				}
-				let y = 0, b = [];
-				for (let e of [
-					"active",
-					"trialing",
-					"pastDue",
-					"incomplete"
-				]) b.push(...yield* d.stores.subscriptions.listByStatus(e));
-				let x = [];
-				for (let t of b) {
-					if (u.has(t.providerSubscriptionId)) continue;
-					y += 1;
-					let r = yield* X(n.fetchSubscription(t.providerSubscriptionId), a);
-					if (r === null) {
-						x.push(t);
-						continue;
-					}
-					let i = {
-						...r,
-						providerSubscriptionId: t.providerSubscriptionId
-					};
-					yield* C(t.tenantId, i, e), f.push(B(t.tenantId, i, e)), c.add(t.tenantId);
-				}
-				let S = x.length >= pt && x.length * 2 >= b.length;
-				if (S) J.error("billing reconcile: the provider knows none of these live subscriptions — wrong account or provider? Nothing was canceled", {
-					unknown: x.length,
-					live: b.length,
-					provider: n.name
-				});
-				else for (let t of x) yield* d.stores.subscriptions.markCanceled(t.providerSubscriptionId), f.push(B(t.tenantId, {
-					...t,
-					status: "canceled",
-					providerSubscriptionId: t.providerSubscriptionId
-				}, e)), c.add(t.tenantId);
-				let ee = [...l].filter(([, e]) => e > 1).map(([e]) => e);
-				for (let e of ee) J.error("billing reconcile: tenant has more than one paying subscription — billed twice, resolve by hand", { tenant: e });
-				let w = {
-					checked: t.length + y,
-					corrected: [...c],
-					duplicates: ee,
-					unattributed: h,
-					meteredItemsRestored: g,
-					closedTenants: [...p],
-					refusedUnknown: S ? x.length : 0,
-					events: f
-				};
-				return J.info("billing reconcile from provider", {
-					checked: w.checked,
-					corrected: w.corrected.length,
-					duplicates: ee.length,
-					unattributed: h,
-					meteredItemsRestored: g,
-					closedTenants: w.closedTenants.length
-				}), yield* se(f), w;
-			}),
-			syncCustomer: L,
-			syncTenant: R
-		},
-		holder: d
-	};
-}, yt = (e) => y.succeed(t, e), bt = "_voltro_ai_usage", xt = (e) => {
-	for (let [t, n] of Object.entries(e)) {
-		if (t.length === 0) throw Error("billing metering: a meter key must be non-empty");
-		if (n.from === "rpc") {
-			if (n.match === void 0 || typeof n.match == "string" && n.match.length === 0) throw Error(`billing metering: rpc meter '${t}' needs a non-empty 'match'`);
-		} else if (n.from === "cdc") {
-			if (typeof n.table != "string" || n.table.length === 0) throw Error(`billing metering: cdc meter '${t}' needs a 'table'`);
-		} else if (n.from !== "ai") throw Error(`billing metering: meter '${t}' has unknown source '${String(n.from)}'`);
-	}
-}, St = /* @__PURE__ */ new WeakMap(), Ct = (e) => {
-	if (!e.global && !e.sticky) return e;
-	let t = St.get(e);
-	return t === void 0 && (t = new RegExp(e.source, e.flags.replace(/[gy]/g, "")), St.set(e, t)), t;
-}, wt = (e, t) => typeof e == "string" ? t === e : Ct(e).test(t), Tt = (e, t, n) => Object.entries(e).filter(([, e]) => e.from === "rpc" && (e.kind === void 0 || e.kind === n) && wt(e.match, t)).map(([e]) => e), Et = (e, t, n) => Object.entries(e).filter(([, e]) => e.from === "cdc" && e.table === t && (e.op ?? "insert") === n).map(([e]) => e), Dt = (e) => Object.entries(e).filter(([, e]) => e.from === "ai").map(([e, t]) => [e, t.metric ?? "tokens"]), Ot = (e) => e.tenantId, kt = (e, t, n, r) => v.forEach(n, (n) => e.reportUsage(t, n, r).pipe(v.catch(() => v.void)), { discard: !0 }), At = (e, t) => (n, r) => {
-	let i = Tt(t, r.tag, r.kind);
-	if (i.length === 0) return n;
-	let a = Ot(r.subject);
-	return a === null ? n : n.pipe(v.tap(() => kt(e, a, i, 1)));
-}, jt = "billing-meter", Mt = 5e4, Nt = (e, t, n = {}) => {
-	let r = new T({
-		windowMs: re(),
-		maxEntries: Mt
-	}), i = n.now ?? (() => Date.now()), a = !1;
-	return (o) => {
-		let s = Et(t, o.table, o.op);
-		if (s.length === 0) return v.void;
-		let c = o.new?.tenantId ?? o.old?.tenantId ?? null;
-		if (c === null) return v.void;
-		let l = n.claimChange?.();
-		if (l === void 0) return a || (a = !0, n.onUngated?.()), kt(e, c, s, 1);
-		let u = String(o.new?.id ?? o.old?.id ?? ""), d = te({
-			pipe: jt,
-			op: o.op,
-			key: u,
-			next: o.new ?? null,
-			prev: o.old ?? null
-		}), f = D(d, r.next(d, i()));
-		return v.promise(() => l(jt, f)).pipe(v.flatMap((t) => t ? kt(e, c, s, 1) : v.void));
-	};
-}, Pt = (e) => new Date(Date.UTC(e.getUTCFullYear(), e.getUTCMonth(), 1, 0, 0, 0, 0)), Ft = (e, t, n, r = () => /* @__PURE__ */ new Date()) => v.gen(function* () {
-	let i = Dt(n);
-	if (i.length === 0) return;
-	let a = r();
-	mt(a);
-	let o = {
-		table: bt,
-		predicate: ne("calledAt", Pt(a)),
-		order: [],
-		take: void 0,
-		skip: void 0,
-		projection: void 0
-	}, s = yield* v.promise(() => Promise.resolve(t.query(o)).then((e) => e).catch(() => [])), c = /* @__PURE__ */ new Map();
-	for (let e of s) {
-		let t = e.tenantId ?? null;
-		if (t === null) continue;
-		let n = c.get(t) ?? {
-			tokens: 0,
-			cost: 0
-		};
-		n.tokens += (Number(e.inputTokens) || 0) + (Number(e.outputTokens) || 0), n.cost += Number(e.costMicroUsd) || 0, c.set(t, n);
-	}
-	for (let [t, n] of i) for (let [r, i] of c) {
-		let a = n === "costMicroUsd" ? i.cost : i.tokens;
-		if (a <= 0) continue;
-		let o = a - (yield* e.checkEntitlement(r, t, 0).pipe(v.map((e) => e.used), v.catch(() => v.succeed(0))));
-		o > 0 && (yield* e.reportUsage(r, t, o).pipe(v.catch(() => v.void)));
-	}
-}), It = (e, t, n, r) => Ft(e, t, n, r).pipe(v.andThen(e.flushUsage().pipe(v.catch(() => v.void)))), Lt = (e) => Object.values(e).some((e) => e.from === "cdc"), Rt = (e) => e === void 0 ? 0 : e === "unlimited" ? Infinity : e, zt = (e) => {
-	let t = /* @__PURE__ */ new Map();
-	for (let [n, r] of Object.entries(e)) r.priceId !== void 0 && t.set(r.priceId, n);
-	return {
-		has: (t) => Object.prototype.hasOwnProperty.call(e, t),
-		entitlementLimit: (t, n) => {
-			let r = e[t];
-			return r === void 0 ? 0 : Rt(r.entitlements[n]);
-		},
-		planForPriceId: (e) => t.get(e) ?? null,
-		priceIdFor: (t) => e[t]?.priceId ?? null,
-		meteredPriceIdsFor: (t) => e[t]?.meteredPriceIds ?? [],
-		unitAmountFor: (t) => {
-			let n = e[t]?.unitAmountMinor;
-			return n !== void 0 && Number.isFinite(n) ? n : 0;
-		},
-		currencyFor: (t) => (e[t]?.currency ?? "usd").toLowerCase(),
-		planIds: () => Object.keys(e)
-	};
-}, Bt = () => zt({ [n]: { entitlements: {} } }), Vt = "_voltro_billing_flush_claims", Ht = j(Vt, {
-	id: k({ scheme: "numeric" }),
-	windowKey: M(),
-	claimedBy: M(),
-	claimedAt: N().default("now")
-}).unique("billingFlushClaimWindow", ["windowKey"]), Ut = (e, t) => `billing-flush:${Math.floor(e / Math.max(1, t))}`, Wt = async (e, t, n, r) => {
-	try {
-		return (await e.insertIgnore(Vt, {
-			windowKey: t,
-			claimedBy: n,
-			claimedAt: new Date(r)
-		}, { conflictColumns: ["windowKey"] })).claimedBy === n;
-	} catch {
-		return !0;
-	}
-}, Gt = F.API_VERSION, Kt = [
-	"Checkout → \"Limit customers to one subscription\" (with the customer portal login link enabled) — Stripe's own refusal of a second subscription",
-	"Smart Retries + failed-payment emails (Billing → Revenue recovery)",
-	"invoice branding and email settings",
-	"a restricted key (rk_) for the app, separate from the provisioning key"
-], qt = (e) => typeof e.tax_code == "string" ? e.tax_code : e.tax_code?.id ?? null, Jt = (e) => ({
-	name: e.name,
-	description: e.description,
-	unit_label: e.unitLabel,
-	tax_code: e.taxCode,
-	metadata: {
-		...e.metadata,
-		voltro_key: e.key
-	}
-}), Yt = (e, t) => {
-	let n = [];
-	t.active || n.push("active"), t.name !== e.name && n.push("name"), (t.description ?? "") !== e.description && n.push("description"), (t.unit_label ?? "") !== e.unitLabel && n.push("unit_label"), qt(t) !== e.taxCode && n.push("tax_code");
-	for (let [r, i] of Object.entries({
-		...e.metadata,
-		voltro_key: e.key
-	})) t.metadata[r] !== i && n.push(`metadata.${r}`);
-	return n;
-}, Xt = (e, t) => {
-	let n = `product ${e.key}`, r = t.filter((t) => t.metadata.voltro_key === e.key);
-	if (r.length > 1) return {
-		finding: {
-			kind: "manual",
-			object: n,
-			detail: `${r.length} products carry this key — archive the extra ones`
-		},
-		id: null
-	};
-	let i = r[0];
-	if (i !== void 0) {
-		let t = Yt(e, i);
-		return t.length === 0 ? {
-			finding: {
-				kind: "ok",
-				object: n
-			},
-			id: i.id
-		} : {
-			finding: {
-				kind: "update",
-				object: n,
-				detail: t.join(", "),
-				apply: {
-					method: "POST",
-					path: `/v1/products/${i.id}`,
-					params: {
-						...Jt(e),
-						active: !0
-					}
-				}
-			},
-			id: i.id
-		};
-	}
-	let a = t.filter((t) => t.active && t.metadata.voltro_key === void 0 && Object.keys(e.metadata).length > 0 && Object.entries(e.metadata).every(([e, n]) => t.metadata[e] === n));
-	if (a.length === 1) {
-		let t = a[0];
-		return {
-			finding: {
-				kind: "adopt",
-				object: n,
-				detail: "existing product gets the catalog key",
-				apply: {
-					method: "POST",
-					path: `/v1/products/${t.id}`,
-					params: Jt(e)
-				}
-			},
-			id: t.id
-		};
-	}
-	return a.length > 1 ? {
-		finding: {
-			kind: "manual",
-			object: n,
-			detail: `${a.length} products could be this one — archive all but one`
-		},
-		id: null
-	} : {
-		finding: {
-			kind: "create",
-			object: n,
-			detail: e.name,
-			apply: {
-				method: "POST",
-				path: "/v1/products",
-				params: Jt(e)
-			}
-		},
-		id: null
-	};
-}, Zt = (e, t, n, r) => {
-	let i = [];
-	return r.product !== t && i.push("product"), r.currency !== e.currency && i.push("currency"), r.unit_amount !== e.unitAmount && i.push("unit_amount"), r.recurring?.interval !== e.interval && i.push("interval"), r.recurring?.usage_type !== e.usageType && i.push("usage_type"), e.usageType === "metered" && r.recurring?.meter !== n && i.push("meter"), r.tax_behavior !== e.taxBehavior && i.push("tax_behavior"), i;
-}, Qt = (e, t, n, r) => ({
-	product: t,
-	currency: e.currency,
-	unit_amount: e.unitAmount,
-	recurring: {
-		interval: e.interval,
-		usage_type: e.usageType,
-		...e.usageType === "metered" && n !== null ? { meter: n } : {}
-	},
-	tax_behavior: e.taxBehavior,
-	lookup_key: e.lookupKey,
-	...r ? { transfer_lookup_key: !0 } : {},
-	metadata: { voltro_key: e.lookupKey }
-}), $t = (e, t, n, r, i, a) => {
-	let o = `price ${e.lookupKey}`;
-	if (t === null) return {
-		finding: {
-			kind: "manual",
-			object: o,
-			detail: "its product is unresolved"
-		},
-		id: null
-	};
-	if (e.usageType === "metered" && n === null) return {
-		finding: {
-			kind: "manual",
-			object: o,
-			detail: "its meter is unresolved"
-		},
-		id: null
-	};
-	if (r !== null) {
-		let i = Zt(e, t, n, r);
-		if (i.length > 0) {
-			let s = {
-				method: "POST",
-				path: "/v1/prices",
-				params: Qt(e, t, n, !0)
-			};
-			return a ? {
-				finding: {
-					kind: "drift",
-					object: o,
-					detail: `replaced (${i.join(", ")}); existing subscriptions keep the old price`,
-					apply: s
-				},
-				id: null
-			} : {
-				finding: {
-					kind: "drift",
-					object: o,
-					detail: `${i.join(", ")} differ — a price change; rerun with --allow-price-change to replace it`
-				},
-				id: r.id
-			};
-		}
-		return r.active ? {
-			finding: {
-				kind: "ok",
-				object: o
-			},
-			id: r.id
-		} : {
-			finding: {
-				kind: "update",
-				object: o,
-				detail: "inactive",
-				apply: {
-					method: "POST",
-					path: `/v1/prices/${r.id}`,
-					params: { active: !0 }
-				}
-			},
-			id: r.id
-		};
-	}
-	let s = i.filter((r) => r.active && r.lookup_key === null && Zt(e, t, n, r).length === 0)[0];
-	return s === void 0 ? {
-		finding: {
-			kind: "create",
-			object: o,
-			detail: `${e.unitAmount} ${e.currency} / ${e.interval}`,
-			apply: {
-				method: "POST",
-				path: "/v1/prices",
-				params: Qt(e, t, n, !1)
-			}
-		},
-		id: null
-	} : {
-		finding: {
-			kind: "adopt",
-			object: o,
-			detail: "existing price gets the lookup key",
-			apply: {
-				method: "POST",
-				path: `/v1/prices/${s.id}`,
-				params: {
-					lookup_key: e.lookupKey,
-					metadata: { voltro_key: e.lookupKey }
-				}
-			}
-		},
-		id: s.id
-	};
-}, en = (e, t) => {
-	let n = `meter ${e.eventName}`, r = t.find((t) => t.event_name === e.eventName);
-	if (r === void 0) return {
-		finding: {
-			kind: "create",
-			object: n,
-			detail: e.displayName,
-			apply: {
-				method: "POST",
-				path: "/v1/billing/meters",
-				params: {
-					display_name: e.displayName,
-					event_name: e.eventName,
-					default_aggregation: { formula: e.formula },
-					customer_mapping: {
-						type: "by_id",
-						event_payload_key: e.customerPayloadKey
-					},
-					value_settings: { event_payload_key: e.valuePayloadKey }
-				}
-			}
-		},
-		id: null
-	};
-	let i = [];
-	return r.default_aggregation.formula !== e.formula && i.push("aggregation"), (r.customer_mapping.type !== "by_id" || r.customer_mapping.event_payload_key !== e.customerPayloadKey) && i.push("customer mapping"), r.value_settings.event_payload_key !== e.valuePayloadKey && i.push("value key"), i.length > 0 ? {
-		finding: {
-			kind: "drift",
-			object: n,
-			detail: `${i.join(", ")} differ and cannot be edited — a new meter needs a new event name`
-		},
-		id: r.id
-	} : r.status === "active" ? r.display_name === e.displayName ? {
-		finding: {
-			kind: "ok",
-			object: n
-		},
-		id: r.id
-	} : {
-		finding: {
-			kind: "update",
-			object: n,
-			detail: "display name",
-			apply: {
-				method: "POST",
-				path: `/v1/billing/meters/${r.id}`,
-				params: { display_name: e.displayName }
-			}
-		},
-		id: r.id
-	} : {
-		finding: {
-			kind: "update",
-			object: n,
-			detail: "inactive",
-			apply: {
-				method: "POST",
-				path: `/v1/billing/meters/${r.id}/reactivate`,
-				params: {}
-			}
-		},
-		id: r.id
-	};
-}, tn = (e, t) => {
-	let n = "tax settings", r = t.head_office?.address ?? {}, i = [];
-	for (let [t, n] of Object.entries(e.headOffice)) r[t] !== n && i.push(`head_office.${t}`);
-	return t.defaults.tax_code !== e.defaultTaxCode && i.push("defaults.tax_code"), t.defaults.tax_behavior !== e.defaultTaxBehavior && i.push("defaults.tax_behavior"), i.length === 0 ? t.status === "active" ? {
-		kind: "ok",
-		object: n
-	} : {
-		kind: "manual",
-		object: n,
-		detail: `status ${t.status}`
-	} : {
-		kind: "update",
-		object: n,
-		detail: i.join(", "),
-		apply: {
-			method: "POST",
-			path: "/v1/tax/settings",
-			params: {
-				head_office: { address: e.headOffice },
-				defaults: {
-					tax_code: e.defaultTaxCode,
-					tax_behavior: e.defaultTaxBehavior
-				}
-			}
-		}
-	};
-}, nn = (e, t, n) => ({
-	business_profile: {
-		headline: e.headline,
-		privacy_policy_url: e.privacyPolicyUrl,
-		terms_of_service_url: e.termsOfServiceUrl
-	},
-	default_return_url: t.portalReturnUrl,
-	features: {
-		customer_update: {
-			enabled: !0,
-			allowed_updates: [
-				"email",
-				"address",
-				"tax_id",
-				"name"
-			]
-		},
-		invoice_history: { enabled: !0 },
-		payment_method_update: { enabled: !0 },
-		subscription_cancel: {
-			enabled: !0,
-			mode: "at_period_end"
-		},
-		subscription_update: {
-			enabled: !0,
-			default_allowed_updates: ["price", "quantity"],
-			proration_behavior: "create_prorations",
-			products: n.map((e) => ({
-				product: e.productId,
-				prices: [e.priceId]
-			}))
-		}
-	},
-	metadata: { voltro_key: e.key }
-}), rn = (e) => JSON.stringify([...e ?? []].sort()), an = (e, t) => {
-	let n = [], r = t.features, i = e.features;
-	t.default_return_url !== e.default_return_url && n.push("default_return_url");
-	let a = e.business_profile;
-	for (let e of Object.keys(a)) t.business_profile[e] !== a[e] && n.push(`business_profile.${e}`);
-	for (let e of [
-		"customer_update",
-		"invoice_history",
-		"payment_method_update",
-		"subscription_cancel"
-	]) r[e]?.enabled !== !0 && n.push(`${e}.enabled`);
-	rn(r.customer_update?.allowed_updates) !== rn(i.customer_update.allowed_updates) && n.push("customer_update.allowed_updates"), r.subscription_cancel?.mode !== "at_period_end" && n.push("subscription_cancel.mode");
-	let o = r.subscription_update ?? {}, s = i.subscription_update;
-	o.enabled !== !0 && n.push("subscription_update.enabled"), o.proration_behavior !== s.proration_behavior && n.push("subscription_update.proration_behavior");
-	let c = (e) => JSON.stringify((e ?? []).map((e) => `${e.product}:${[...e.prices].sort().join("|")}`).sort());
-	return c(o.products) !== c(s.products) && n.push("subscription_update.products"), rn(o.default_allowed_updates) !== rn(s.default_allowed_updates) && n.push("subscription_update.default_allowed_updates"), n;
-}, on = (e, t, n, r) => {
-	let i = "customer portal";
-	if (n === null) return [{
-		kind: "manual",
-		object: i,
-		detail: "its plan prices are unresolved"
-	}];
-	let a = nn(e, t, n), o = r.find((t) => t.metadata.voltro_key === e.key) ?? r.find((t) => t.active && t.name === e.name);
-	if (o === void 0) return [{
-		kind: "create",
-		object: i,
-		detail: "self-service configuration",
-		apply: {
-			method: "POST",
-			path: "/v1/billing_portal/configurations",
-			params: {
-				...a,
-				name: e.name
-			}
-		}
-	}, ...r.some((e) => e.is_default) ? [{
-		kind: "manual",
-		object: i,
-		detail: "another configuration is the default — make this one the default in the Dashboard"
-	}] : []];
-	let s = [], c = an(a, o), l = o.metadata.voltro_key !== e.key;
-	return c.length > 0 || l || !o.active ? s.push({
-		kind: l ? "adopt" : "update",
-		object: i,
-		detail: [...c, ...o.active ? [] : ["active"]].join(", ") || "catalog key",
-		apply: {
-			method: "POST",
-			path: `/v1/billing_portal/configurations/${o.id}`,
-			params: {
-				...a,
-				active: !0
-			}
-		}
-	}) : s.push({
-		kind: "ok",
-		object: i
-	}), o.is_default || s.push({
-		kind: "manual",
-		object: i,
-		detail: "not the account default — portal sessions would use another configuration"
-	}), s;
-}, sn = (e, t) => {
-	if (e.webhookUrl === null) return {
-		kind: "ok",
-		object: "webhook endpoint (none: stripe listen forwards locally)"
-	};
-	let n = `webhook endpoint ${e.webhookUrl}`, r = t.filter((t) => t.url === e.webhookUrl);
-	if (r.length > 1) return {
-		kind: "manual",
-		object: n,
-		detail: `${r.length} endpoints for this url — delete all but one`
-	};
-	let i = r[0], a = [...On].sort();
-	return i === void 0 ? {
-		kind: "create",
-		object: n,
-		detail: `${a.length} events`,
-		apply: {
-			method: "POST",
-			path: "/v1/webhook_endpoints",
-			params: {
-				url: e.webhookUrl,
-				enabled_events: a,
-				api_version: Gt,
-				description: "Voltro billing"
-			}
-		}
-	} : i.api_version !== null && i.api_version !== Gt ? {
-		kind: "drift",
-		object: n,
-		detail: `api version ${i.api_version} — payloads would not match the SDK; recreate it (and rotate STRIPE_WEBHOOK_SECRET)`
-	} : JSON.stringify([...i.enabled_events].sort()) !== JSON.stringify(a) || i.status !== "enabled" ? {
-		kind: "update",
-		object: n,
-		detail: i.status === "enabled" ? "events" : "disabled",
-		apply: {
-			method: "POST",
-			path: `/v1/webhook_endpoints/${i.id}`,
-			params: {
-				enabled_events: a,
-				disabled: !1
-			}
-		}
-	} : {
-		kind: "ok",
-		object: n
-	};
-}, cn = (e) => {
-	let t = [];
-	for (let n of e.catalog.tax.registrationCountries) e.activeRegistrations.includes(n) || t.push({
-		kind: "manual",
-		object: `tax registration ${n}`,
-		detail: "none active — automatic tax collects nothing until it is registered (Dashboard → Tax → Registrations)"
-	});
-	if (!e.env.requireSellingReadiness) return t;
-	e.chargesEnabled === !1 && t.push({
-		kind: "manual",
-		object: "account",
-		detail: "charges not enabled — finish activation (business details, bank account) in the Dashboard"
-	}), e.chargesEnabled === null && t.push({
-		kind: "manual",
-		object: "account",
-		detail: "activation not readable with this key — check it in the Dashboard"
-	}), e.accountTaxIds === 0 && t.push({
-		kind: "manual",
-		object: "account tax id",
-		detail: "no VAT id on the account — invoices lack the issuer id"
-	}), e.accountTaxIds === null && t.push({
-		kind: "manual",
-		object: "account tax id",
-		detail: "not readable with this key — check Dashboard → Settings → Tax ids"
-	});
-	for (let n of e.catalog.dashboardReminders ?? Kt) t.push({
-		kind: "manual",
-		object: "dashboard",
-		detail: `${n} — not checkable through the API`
-	});
-	return t;
-}, ln = (e) => {
-	let t = [], n = (e, r) => {
-		if (r !== void 0) {
-			if (r === null) {
-				t.push(`${encodeURIComponent(e)}=`);
-				return;
-			}
-			if (Array.isArray(r)) {
-				r.forEach((t, r) => n(`${e}[${r}]`, t));
-				return;
-			}
-			if (typeof r == "object") {
-				for (let [t, i] of Object.entries(r)) n(`${e}[${t}]`, i);
-				return;
-			}
-			t.push(`${encodeURIComponent(e)}=${encodeURIComponent(String(r))}`);
-		}
-	};
-	for (let [t, r] of Object.entries(e)) n(t, r);
-	return t.join("&");
-}, un = (e) => e.replace(/\b(sk|rk|rkcs|pk)_(test|live)_[A-Za-z0-9*]+/g, "$1_$2_[REDACTED]").replace(/\bwhsec_[A-Za-z0-9]+/g, "whsec_[REDACTED]"), dn = class extends Error {
-	status;
-	constructor(e, t) {
-		super(t), this.status = e;
-	}
-}, fn = (e, t = fetch) => {
-	let n = async (n, r, i = {}) => {
-		if (!/^\/v[12]\/[A-Za-z0-9_/.-]+$/.test(r)) throw new dn(0, `refusing request path ${JSON.stringify(r)}`);
-		let a = ln(i), o = await t(`https://api.stripe.com${r}${n === "GET" && a.length > 0 ? `?${a}` : ""}`, {
-			method: n,
-			headers: {
-				authorization: `Bearer ${e}`,
-				"stripe-version": Gt,
-				...n === "POST" ? { "content-type": "application/x-www-form-urlencoded" } : {}
-			},
-			...n === "POST" ? { body: a } : {}
-		}), s = await o.json();
-		if (!o.ok) throw new dn(o.status, un(s.error?.message ?? `HTTP ${o.status}`));
-		return s;
-	};
-	return {
-		get: (e, t) => n("GET", e, t),
-		post: (e, t) => n("POST", e, t),
-		list: async (e, t = {}) => {
-			let r = [], i;
-			for (;;) {
-				let a = await n("GET", e, {
-					limit: 100,
-					...t,
-					...i === void 0 ? {} : { starting_after: i }
-				});
-				if (r.push(...a.data), !a.has_more || a.data.length === 0) return r;
-				i = a.data[a.data.length - 1].id;
-			}
-		}
-	};
-}, pn = P({ scope: "@voltro/plugin-billing" }), mn = 3, hn = 2e4, gn = (e) => e.client ?? new F(e.apiKey, {
-	maxNetworkRetries: mn,
-	timeout: hn,
-	appInfo: {
-		name: "voltro",
-		url: "https://voltro.dev"
-	}
-}), _n = (e) => e instanceof F.errors.StripeConnectionError || e instanceof F.errors.StripeAPIError || e instanceof F.errors.StripeRateLimitError, vn = (e) => e instanceof F.errors.StripeError ? e.code ?? e.type : void 0, Z = (t, n) => v.tryPromise({
-	try: n,
-	catch: (n) => {
-		let r = _n(n);
-		return pn.warn("stripe call failed", {
-			source: t,
-			transient: r,
-			detail: un(yn(n))
-		}), new e({
-			source: t,
-			message: bn(n),
-			transient: r
-		});
-	}
-}), yn = (e) => {
-	if (e instanceof F.errors.StripeError) {
-		let t = vn(e);
-		return t === void 0 ? e.message : `${e.message} (${t})`;
-	}
-	return String(e?.message ?? e);
-}, bn = (e) => {
-	if (e instanceof F.errors.StripeError) {
-		let t = [e.code, e.decline_code].filter((e) => typeof e == "string" && e.length > 0);
-		return t.length > 0 ? `${e.type} (${t.join(", ")})` : e.type;
-	}
-	return "provider call failed";
-}, xn = (e) => {
-	let t = e.items?.data?.[0];
-	return {
-		start: Q(t?.current_period_start),
-		end: Q(t?.current_period_end)
-	};
-}, Q = (e) => typeof e == "number" && Number.isFinite(e) ? /* @__PURE__ */ new Date(e * 1e3) : null, Sn = (e) => {
-	let t = e.items?.data ?? [];
-	if (t.length === 0) return 1;
-	let n = t.reduce((e, t) => e + (t.quantity ?? 0), 0);
-	return n > 0 ? n : 1;
-}, Cn = {
-	active: "active",
-	trialing: "trialing",
-	past_due: "pastDue",
-	unpaid: "pastDue",
-	canceled: "canceled",
-	incomplete: "incomplete",
-	incomplete_expired: "canceled",
-	paused: "pastDue"
-}, $ = (e) => {
-	let t = e.metadata?.tenantId;
-	if (typeof t == "string" && t.length > 0) return t;
-	let n = e.client_reference_id;
-	return typeof n == "string" && n.length > 0 ? n : null;
-}, wn = (e) => {
-	let t = e.items?.data ?? [];
-	return t.find((e) => e.price?.recurring?.usage_type !== "metered") ?? t[0];
-}, Tn = (e) => {
-	let t = wn(e)?.price;
-	return typeof t?.id == "string" ? t.id : null;
-}, En = (e) => typeof e == "string" ? e : typeof e?.id == "string" ? e.id : null, Dn = (e, t) => {
-	let n = Tn(e), r = n !== null && t ? t(n) : null;
-	if (r !== null) return r;
-	let i = e.metadata?.plan;
-	return typeof i == "string" && i.length > 0 ? i : null;
-}, On = [
-	"checkout.session.completed",
-	"customer.created",
-	"customer.deleted",
-	"customer.subscription.created",
-	"customer.subscription.deleted",
-	"customer.subscription.paused",
-	"customer.subscription.resumed",
-	"customer.subscription.updated",
-	"invoice.paid",
-	"invoice.payment_failed"
-], kn = (e, t) => {
-	let n = Q(e.created);
-	switch (e.type) {
-		case "customer.subscription.created":
-		case "customer.subscription.updated":
-		case "customer.subscription.resumed":
-		case "customer.subscription.paused": {
-			let r = e.data.object, i = $(r), a = Dn(r, t), o = Cn[r.status];
-			if (i === null || a === null || o === void 0) return null;
-			let s = xn(r);
-			return {
-				_tag: "subscriptionUpserted",
-				tenantId: i,
-				providerSubscriptionId: r.id,
-				plan: a,
-				status: o,
-				quantity: Sn(r),
-				currentPeriodStart: s.start,
-				currentPeriodEnd: s.end,
-				cancelAt: Q(r.cancel_at),
-				occurredAt: n
-			};
-		}
-		case "customer.subscription.deleted": {
-			let t = e.data.object, r = $(t);
-			return r === null ? null : {
-				_tag: "subscriptionCanceled",
-				tenantId: r,
-				providerSubscriptionId: t.id,
-				occurredAt: n
-			};
-		}
-		case "invoice.paid":
-		case "invoice.payment_failed": {
-			let t = e.data.object, r = $(t) ?? $({ metadata: t.parent?.subscription_details?.metadata ?? null });
-			return r === null || typeof t.id != "string" ? null : {
-				_tag: e.type === "invoice.paid" ? "invoicePaid" : "invoicePaymentFailed",
-				tenantId: r,
-				providerInvoiceId: t.id,
-				amountMinor: t.amount_due,
-				currency: t.currency,
-				occurredAt: n
-			};
-		}
-		case "checkout.session.completed": {
-			let t = e.data.object, r = $(t), i = En(t.customer);
-			return r === null || i === null ? null : {
-				_tag: "customerLinked",
-				tenantId: r,
-				providerCustomerId: i,
-				occurredAt: n
-			};
-		}
-		case "customer.deleted": {
-			let t = e.data.object;
-			return {
-				_tag: "customerUnlinked",
-				tenantId: $(t),
-				providerCustomerId: t.id,
-				occurredAt: n
-			};
-		}
-		case "customer.created": {
-			let t = e.data.object, r = $(t);
-			return r === null ? null : {
-				_tag: "customerLinked",
-				tenantId: r,
-				providerCustomerId: t.id,
-				occurredAt: n
-			};
-		}
-		default: return null;
-	}
-}, An = {
-	prorate: "create_prorations",
-	none: "none",
-	always_invoice: "always_invoice"
-}, jn = (t) => {
-	let n = gn(t), r = t.planForPriceId, i = (e) => {
-		let t = xn(e);
-		return {
-			status: Cn[e.status] ?? "incomplete",
-			plan: Dn(e, r),
-			quantity: Sn(e),
-			currentPeriodStart: t.start,
-			currentPeriodEnd: t.end,
-			cancelAt: Q(e.cancel_at)
-		};
-	}, a = (e) => ({
-		...i(e),
-		providerSubscriptionId: e.id,
-		providerCustomerId: En(e.customer),
-		tenantId: $(e),
-		priceIds: (e.items?.data ?? []).map((e) => e.price?.id).filter((e) => typeof e == "string")
-	}), o = t.closeSettleSeconds ?? 600, s = {
-		periodEnd: (e) => n.subscriptions.update(e, {
-			cancel_at_period_end: !0,
-			expand: ["items.data.price"]
-		}),
-		close: (e) => n.subscriptions.update(e, {
-			cancel_at: Math.ceil(Date.now() / 1e3) + o,
-			proration_behavior: "create_prorations",
-			expand: ["items.data.price"]
-		})
-	}, c = (e) => n.subscriptions.retrieve(e, { expand: ["items.data.price"] }), l = (e, t) => {
-		let n = xn(e), i = wn(e)?.price;
-		return {
-			plan: Dn(e, r) ?? "free",
-			quantity: Sn(e),
-			prorationMinor: t,
-			currency: (i?.currency ?? "usd").toLowerCase(),
-			currentPeriodStart: n.start,
-			currentPeriodEnd: n.end
-		};
-	}, u = (e, t) => {
-		let n = wn(e)?.id;
-		return {
-			items: [{
-				...n === void 0 ? {} : { id: n },
-				...t.priceId === void 0 ? {} : { price: t.priceId },
-				...t.quantity === void 0 ? {} : { quantity: t.quantity }
-			}],
-			proration_behavior: An[t.proration ?? "prorate"],
-			...t.priceId !== void 0 && r ? { metadata: {
-				...e.metadata,
-				plan: r(t.priceId) ?? ""
-			} } : {}
-		};
-	};
-	return {
-		name: "stripe",
-		supportsMeteredUsage: t.supportsMeteredUsage ?? !0,
-		usageRequiresCustomer: !0,
-		createCheckoutSession: (e) => Z("stripe.checkout.sessions.create", async () => {
-			let t = await n.checkout.sessions.create({
-				mode: "subscription",
-				line_items: [{
-					price: e.priceId,
-					quantity: e.quantity ?? 1,
-					...e.adjustableQuantity ? { adjustable_quantity: {
-						enabled: !0,
-						minimum: e.adjustableQuantity.min,
-						maximum: e.adjustableQuantity.max
-					} } : {}
-				}, ...(e.meteredPriceIds ?? []).map((e) => ({ price: e }))],
-				success_url: e.successUrl,
-				cancel_url: e.cancelUrl,
-				client_reference_id: e.tenantId,
-				metadata: { tenantId: e.tenantId },
-				subscription_data: {
-					metadata: { tenantId: e.tenantId },
-					...e.trialDays === void 0 ? {} : { trial_period_days: e.trialDays }
-				},
-				...e.providerCustomerId === void 0 ? {} : { customer: e.providerCustomerId },
-				automatic_tax: { enabled: !0 },
-				tax_id_collection: { enabled: !0 },
-				...e.providerCustomerId === void 0 ? {} : { customer_update: {
-					name: "auto",
-					address: "auto"
-				} },
-				allow_promotion_codes: !0
-			});
-			if (typeof t.url != "string") throw Error("checkout session has no url");
-			return { url: t.url };
-		}),
-		createPortalSession: (e) => Z("stripe.billingPortal.sessions.create", async () => ({ url: (await n.billingPortal.sessions.create({
-			customer: e.providerCustomerId,
-			return_url: e.returnUrl
-		})).url })),
-		reportUsage: (t) => {
-			let r = t.providerCustomerId;
-			return r === void 0 ? v.fail(new e({
-				source: "stripe.billing.meterEvents.create",
-				message: `no Stripe customer linked for tenant '${t.tenantId}'`,
-				transient: !1
-			})) : Z("stripe.billing.meterEvents.create", async () => {
-				try {
-					await n.billing.meterEvents.create({
-						event_name: t.entitlementKey,
-						identifier: t.idempotencyKey ?? `${t.tenantId}:${t.entitlementKey}:${t.periodEnd?.toISOString() ?? "current"}`,
-						payload: {
-							value: String(t.quantity),
-							stripe_customer_id: r
-						}
-					});
-				} catch (e) {
-					if (Mn(e)) return;
-					throw e;
-				}
-			});
-		},
-		updateSubscription: (e) => Z("stripe.subscriptions.update", async () => {
-			let t = await c(e.providerSubscriptionId), r = await n.subscriptions.update(e.providerSubscriptionId, u(t, e)), i = await Fn(n, r);
-			return l(r, i);
-		}),
-		previewSubscriptionChange: (e) => Z("stripe.invoices.createPreview", async () => {
-			let t = await c(e.providerSubscriptionId), i = u(t, e), a = (await n.invoices.createPreview({
-				subscription: e.providerSubscriptionId,
-				subscription_details: {
-					items: i.items,
-					...i.proration_behavior === void 0 ? {} : { proration_behavior: i.proration_behavior }
-				}
-			})).lines.data.filter((e) => e.parent?.subscription_item_details?.proration === !0).reduce((e, t) => e + t.amount, 0);
-			return {
-				...l(t, a),
-				...e.quantity === void 0 ? {} : { quantity: e.quantity },
-				...e.priceId !== void 0 && r ? { plan: r(e.priceId) ?? "free" } : {}
-			};
-		}),
-		fetchSubscription: (e) => Z("stripe.subscriptions.retrieve", async () => {
-			try {
-				return i(await c(e));
-			} catch (e) {
-				if (e instanceof F.errors.StripeInvalidRequestError && e.statusCode === 404) return null;
-				throw e;
-			}
-		}),
-		listSubscriptions: (e) => Z("stripe.subscriptions.list", async () => {
-			let t = [];
-			for await (let r of n.subscriptions.list({
-				limit: 100,
-				expand: ["data.items.data.price"],
-				...e.providerCustomerId === void 0 ? {} : { customer: e.providerCustomerId }
-			})) t.push(a(r));
-			return t;
-		}),
-		cancelSubscription: (e) => Z("stripe.subscriptions.cancel", async () => i(await s[e.mode](e.providerSubscriptionId))),
-		resumeSubscription: (e) => Z("stripe.subscriptions.update", async () => i(await n.subscriptions.update(e, {
-			cancel_at_period_end: !1,
-			expand: ["items.data.price"]
-		}))),
-		ensureCustomer: (e) => Z("stripe.customers.create", async () => {
-			let t = (await n.customers.search({
-				query: `metadata['tenantId']:'${e.tenantId.replace(/['\\]/g, "")}'`,
-				limit: 2
-			})).data.find((t) => t.metadata?.tenantId === e.tenantId);
-			return t === void 0 ? (await n.customers.create({ metadata: { tenantId: e.tenantId } }, { idempotencyKey: `voltro-billing-customer:${e.tenantId}` })).id : t.id;
-		}),
-		expireOpenCheckouts: (e) => Z("stripe.checkout.sessions.expire", async () => {
-			let t = 0;
-			for await (let r of n.checkout.sessions.list({
-				customer: e.providerCustomerId,
-				status: "open",
-				limit: 100
-			})) await n.checkout.sessions.expire(r.id), t += 1;
-			return t;
-		}),
-		addSubscriptionPrices: (e) => Z("stripe.subscriptionItems.create", async () => {
-			for (let t of e.priceIds) await n.subscriptionItems.create({
-				subscription: e.providerSubscriptionId,
-				price: t,
-				proration_behavior: "none"
-			});
-		}),
-		customerEmail: (e) => Z("stripe.customers.retrieve", async () => {
-			let t = await n.customers.retrieve(e);
-			return t.deleted === !0 ? null : typeof t.email == "string" && t.email.length > 0 ? t.email : null;
-		}),
-		listInvoices: (e) => Z("stripe.invoices.list", async () => (await n.invoices.list({
-			customer: e.providerCustomerId,
-			limit: e.limit ?? 20
-		})).data.map((e) => ({
-			providerInvoiceId: e.id ?? "",
-			amountMinor: e.amount_due,
-			currency: e.currency,
-			status: e.status ?? "unknown",
-			createdAt: Q(e.created),
-			hostedUrl: e.hosted_invoice_url ?? null,
-			pdfUrl: e.invoice_pdf ?? null
-		}))),
-		verifyWebhook: (t) => v.try({
-			try: () => n.webhooks.constructEvent(Buffer.from(t.rawBody), t.signatureHeader, t.secret),
-			catch: (t) => new e({
-				source: "stripe.webhooks.constructEvent",
-				message: String(t?.message ?? t),
-				transient: !1
-			})
-		}),
-		eventContext: (e) => Pn(e) ? {
-			providerCustomerId: Nn(e.data.object),
-			createdAt: Q(e.created)
-		} : {
-			providerCustomerId: null,
-			createdAt: null
-		},
-		listUndeliveredEvents: () => Z("stripe.events.list", async () => {
-			let e = [];
-			for await (let t of n.events.list({
-				delivery_success: !1,
-				types: [...On],
-				limit: 100
-			})) e.push({
-				id: t.id,
-				providerCustomerId: Nn(t.data.object),
-				createdAt: Q(t.created)
-			});
-			return e;
-		}),
-		normalizeEvent: (e) => v.succeed(Pn(e) ? kn(e, r) : null)
-	};
-}, Mn = (e) => e instanceof F.errors.StripeInvalidRequestError && typeof e.message == "string" && e.message.startsWith("An event already exists with identifier"), Nn = (e) => {
-	let t = e;
-	return t.object === "customer" ? typeof t.id == "string" ? t.id : null : En(t.customer ?? null);
-}, Pn = (e) => typeof e == "object" && !!e && typeof e.type == "string" && typeof e.data == "object", Fn = async (e, t) => {
-	try {
-		return (await e.invoices.createPreview({ subscription: t.id })).lines.data.filter((e) => e.parent?.subscription_item_details?.proration === !0).reduce((e, t) => e + t.amount, 0);
-	} catch {
-		return 0;
-	}
-}, In = (e) => {
-	let t = e?.baseUrl ?? "https://mock.billing.local", n = [], r = [], i = [], a = /* @__PURE__ */ new Map(), o = /* @__PURE__ */ new Map(), s = /* @__PURE__ */ new Map(), c = [], l = [], u = [], d = [], f = [], p = [], m = /* @__PURE__ */ new Map(), h = [], g = 0, _ = (e, t) => {
-		let n = {
-			...a.get(e) ?? {
-				status: "active",
-				plan: null,
-				quantity: 1,
-				currentPeriodStart: null,
-				currentPeriodEnd: null,
-				cancelAt: null
-			},
-			...t
-		};
-		a.set(e, n);
-		let r = o.get(e);
-		return r !== void 0 && o.set(e, {
-			...r,
-			...t
-		}), n;
-	}, y = (e) => typeof e == "object" && !!e && typeof e._tag == "string";
-	return {
-		name: "mock",
-		supportsMeteredUsage: e?.supportsMeteredUsage ?? !0,
-		pushed: n,
-		updates: r,
-		fetched: i,
-		cancels: c,
-		resumes: l,
-		priceAdds: u,
-		checkouts: d,
-		customersCreated: f,
-		expiredFor: p,
-		setUndelivered: (e) => {
-			h = e;
-		},
-		undeliveredReads: () => g,
-		listUndeliveredEvents: () => v.sync(() => (g += 1, h)),
-		ensureCustomer: (e) => v.sync(() => {
-			let t = m.get(e.tenantId);
-			if (t !== void 0) return t;
-			let n = `mock_cus_${e.tenantId}`;
-			return m.set(e.tenantId, n), f.push(e.tenantId), n;
-		}),
-		expireOpenCheckouts: (e) => v.sync(() => (p.push(e.providerCustomerId), 0)),
-		listSubscription: (e) => {
-			o.set(e.providerSubscriptionId, e), a.set(e.providerSubscriptionId, e);
-		},
-		setSubscription: (e, t) => {
-			t === null ? a.delete(e) : a.set(e, t);
-		},
-		setCustomerEmail: (e, t) => {
-			t === null ? s.delete(e) : s.set(e, t);
-		},
-		fetchSubscription: (e) => v.sync(() => (i.push(e), a.get(e) ?? null)),
-		listSubscriptions: (e) => v.sync(() => [...o.values()].filter((t) => t.status !== "canceled" && (e.providerCustomerId === void 0 || t.providerCustomerId === e.providerCustomerId))),
-		cancelSubscription: (e) => v.sync(() => {
-			c.push({
-				providerSubscriptionId: e.providerSubscriptionId,
-				mode: e.mode
-			});
-			let t = a.get(e.providerSubscriptionId);
-			return e.mode === "close" ? _(e.providerSubscriptionId, { cancelAt: new Date(Date.now() + 6e5) }) : _(e.providerSubscriptionId, { cancelAt: t?.currentPeriodEnd ?? /* @__PURE__ */ new Date(0) });
-		}),
-		resumeSubscription: (e) => v.sync(() => (l.push(e), _(e, { cancelAt: null }))),
-		addSubscriptionPrices: (e) => v.sync(() => {
-			u.push({
-				providerSubscriptionId: e.providerSubscriptionId,
-				priceIds: e.priceIds
-			});
-			let t = o.get(e.providerSubscriptionId);
-			t !== void 0 && _(e.providerSubscriptionId, { priceIds: [...t.priceIds, ...e.priceIds] });
-		}),
-		customerEmail: (e) => v.sync(() => s.get(e) ?? null),
-		createCheckoutSession: (e) => v.sync(() => (d.push(e), { url: `${t}/checkout?tenant=${encodeURIComponent(e.tenantId)}&price=${encodeURIComponent(e.priceId)}` })),
-		createPortalSession: (e) => v.succeed({ url: `${t}/portal?customer=${encodeURIComponent(e.providerCustomerId)}` }),
-		reportUsage: (e) => v.sync(() => {
-			n.push(e);
-		}),
-		updateSubscription: (e) => v.sync(() => (r.push(e), {
-			plan: e.priceId ?? "mock-plan",
-			quantity: e.quantity ?? 1,
-			prorationMinor: 0,
-			currency: "usd",
-			currentPeriodStart: null,
-			currentPeriodEnd: null
-		})),
-		previewSubscriptionChange: (e) => v.succeed({
-			plan: e.priceId ?? "mock-plan",
-			quantity: e.quantity ?? 1,
-			prorationMinor: 0,
-			currency: "usd",
-			currentPeriodStart: null,
-			currentPeriodEnd: null
-		}),
-		listInvoices: () => v.succeed([]),
-		normalizeEvent: (e) => v.succeed(y(e) ? e : null)
-	};
-}, Ln = /* @__PURE__ */ new Set([
-	"",
-	"development",
-	"dev",
-	"test"
-]), Rn = (e) => !Ln.has((e ?? "").trim().toLowerCase()), zn = (e) => {
-	if (Rn(e.env.NODE_ENV)) {
-		if (e.resolvedName === "mock" && e.providerOption === void 0) throw Error("billingPlugin: no STRIPE_SECRET_KEY in a production boot — refusing to run the MOCK billing provider, which answers every charge and subscription call successfully and reaches nobody. Set STRIPE_SECRET_KEY, or declare `billingPlugin({ provider: 'mock' })` if this deployment does not sell.");
-		if (e.resolvedName === "stripe") {
-			if (e.webhookSecret === null || e.webhookSecret.trim() === "") throw Error("billingPlugin: Stripe in a production boot needs STRIPE_WEBHOOK_SECRET — without it no provider event can be verified, so subscriptions, cancellations and payments would never reach this app.");
-			if (e.redirectOrigins === void 0 || e.redirectOrigins.length === 0) throw Error("billingPlugin: Stripe in a production boot needs `redirectOrigins` — the origins checkout and the customer portal may send a customer back to. Without it any URL a caller names is accepted.");
-		}
-	}
-}, Bn = (e) => {
-	let { provider: t, env: n } = e;
-	if (t !== void 0 && typeof t == "object") return t;
-	if ((t ?? (n.STRIPE_SECRET_KEY ? "stripe" : "mock")) === "stripe") {
-		let t = e.apiKey ?? n.STRIPE_SECRET_KEY;
-		if (!t) throw Error("billingPlugin: provider 'stripe' needs an apiKey (option or STRIPE_SECRET_KEY env)");
-		return jn({
-			apiKey: t,
-			...e.planForPriceId ? { planForPriceId: e.planForPriceId } : {}
-		});
-	}
-	return In();
-}, Vn = (e) => e.name === "mock" ? [] : [{
-	destination: e.name === "stripe" ? "api.stripe.com" : `runtime:the '${e.name}' billing provider`,
-	purpose: "customers, subscriptions, checkout and metered usage",
-	data: ["personal", "metadata"],
-	disable: "without STRIPE_SECRET_KEY the mock provider answers, and nothing leaves (production refuses to boot on it)"
-}], Hn = P({ scope: "@voltro/plugin-billing" }), Un = "billing", Wn = "/billing/webhook", Gn = (e) => I({
-	id: Un,
-	path: Wn,
-	provider: se(),
-	payload: x.Unknown,
-	handler: async (t) => {
-		let n = e.provider.verifyWebhook !== void 0 && e.webhookSecret !== null && e.webhookSecret !== void 0 ? await v.runPromise(e.provider.verifyWebhook({
-			rawBody: t.rawBody,
-			signatureHeader: t.headers["stripe-signature"] ?? "",
-			secret: e.webhookSecret ?? ""
-		})) : t.body, r = await v.runPromise(e.provider.normalizeEvent(n)), i = e.provider.eventContext?.(n) ?? {
-			providerCustomerId: null,
-			createdAt: null
-		};
-		if (r === null && i.providerCustomerId === null) return;
-		let a = r?._tag === "subscriptionUpserted" || r?._tag === "subscriptionCanceled", o = i.providerCustomerId !== null && r?._tag !== "customerUnlinked", s = [];
-		if (r !== null && !(a && o) && (await v.runPromise(e.service.applyEvent(r)), s.push(r)), o) {
-			let t = await v.runPromise(e.service.syncCustomer(i.providerCustomerId, r !== null && "tenantId" in r && typeof r.tenantId == "string" ? r.tenantId : void 0));
-			s.push(...t.events);
-		}
-		i.createdAt !== null && Date.now() - i.createdAt.getTime() > 3e5 && e.onLateDelivery?.();
-		for (let t of s) {
-			let n = e.onEvent?.[t._tag];
-			n !== void 0 && await v.runPromise(n(t).pipe(v.tapCause((e) => v.sync(() => {
-				Hn.error("billing onEvent side effect failed — answering 500 so the provider redelivers", {
-					event: t._tag,
-					cause: String(e)
-				});
-			}))));
-		}
-	}
-}), Kn = (e) => L(Gn(e), {
-	resolveSecret: () => Promise.resolve(e.webhookSecret),
-	...e.idempotencyCache === void 0 ? {} : { idempotencyCache: e.idempotencyCache },
-	log: (e) => {
-		e.status >= 400 && Hn.warn("billing webhook rejected", { ...e });
-	}
-}), qn = (e) => e.filter((e) => e.applied !== !0 && (e.kind === "create" || e.kind === "update" || e.kind === "adopt" || e.kind === "drift")), Jn = async (e, t, n) => {
-	let r = t.environments[n.env], i = await e.get("/v1/tax/settings"), a = n.env === "live";
-	if (i.livemode !== a) throw Error(`the key reaches a ${i.livemode ? "LIVE" : "test"} account, not ${n.env}`);
-	let o = [], s = {}, c = async (t, r) => {
-		let i = "apply" in t ? t.apply : void 0;
-		if (n.apply && i !== void 0) {
-			let n = await e.post(i.path, i.params);
-			r?.(n), o.push({
-				...t,
-				applied: !0
-			});
-		} else o.push(t);
-	}, l = await e.list("/v1/billing/meters"), u = /* @__PURE__ */ new Map();
-	for (let e of t.meters) {
-		let t = en(e, l);
-		u.set(e.eventName, t.id), await c(t.finding, (t) => {
-			u.set(e.eventName, t.id);
-		});
-	}
-	let d = await e.list("/v1/products"), f = [];
-	for (let e of t.products) {
-		let t = Xt(e, d), n = {
-			inPortal: e.inPortal,
-			productId: t.id,
-			priceId: null
-		};
-		await c(t.finding, (e) => {
-			n.productId = e.id;
-		}), f.push(n);
-	}
-	for (let [r, i] of t.products.entries()) {
-		let t = f[r], a = i.price.meter;
-		if (i.price.usageType === "metered" && (a === void 0 || !u.has(a))) {
-			o.push({
-				kind: "manual",
-				object: `price ${i.price.lookupKey}`,
-				detail: `metered, but names no catalog meter (${a ?? "none"})`
-			});
-			continue;
-		}
-		let l = a === void 0 ? null : u.get(a) ?? null, d = t.productId ?? (n.apply ? null : `pending:${i.key}`), p = l ?? (n.apply || i.price.usageType !== "metered" ? l : `pending:${a}`), m = (await e.list("/v1/prices", { lookup_keys: [i.price.lookupKey] }))[0] ?? null, h = t.productId === null ? [] : await e.list("/v1/prices", { product: t.productId }), g = $t(i.price, d, p, m, h, n.allowPriceChange);
-		t.priceId = g.id, await c(g.finding, (e) => {
-			t.priceId = e.id;
-		}), t.priceId !== null && (s[i.price.envName] = t.priceId);
-	}
-	await c(tn(t.tax, i));
-	let p = f.filter((e) => e.inPortal), m = p.every((e) => e.productId !== null && e.priceId !== null) ? p.map((e) => ({
-		productId: e.productId,
-		priceId: e.priceId
-	})) : null, h = await e.list("/v1/billing_portal/configurations", { expand: ["data.features.subscription_update.products"] });
-	for (let e of on(t.portal, r, m, h)) await c(e);
-	let g = sn(r, await e.list("/v1/webhook_endpoints"));
-	g.kind === "create" && n.apply && n.envOut === null ? o.push({
-		kind: "manual",
-		object: g.object,
-		detail: "not created: pass --env-out so its signing secret is captured (Stripe shows it once)"
-	}) : await c(g, (e) => {
-		typeof e.secret == "string" && (s.STRIPE_WEBHOOK_SECRET = e.secret);
-	});
-	let _ = await e.get("/v1/account").catch(() => null), v = await e.list("/v1/tax_ids", { owner: { type: "account" } }).catch(() => null), y = await e.list("/v1/tax/registrations", { status: "active" }).catch(() => []);
-	return o.push(...cn({
-		catalog: t,
-		env: r,
-		chargesEnabled: _ === null ? null : _.charges_enabled === !0,
-		accountTaxIds: v === null ? null : v.length,
-		activeRegistrations: y.map((e) => e.country)
-	})), {
-		livemode: i.livemode,
-		findings: o,
-		envOut: s
-	};
-}, Yn = (e, t) => {
-	let n = new Set(Object.keys(t)), r = e.split("\n").filter((e) => !n.has(e.split("=")[0] ?? ""));
-	for (; r.length > 0 && r[r.length - 1] === "";) r.pop();
-	return [
-		...r,
-		...Object.entries(t).map(([e, t]) => `${e}=${t}`),
-		""
-	].join("\n");
-}, Xn = (e, t) => {
-	try {
-		return R("git", [...e], {
-			cwd: t,
-			stdio: "ignore"
-		}), !0;
-	} catch {
-		return !1;
-	}
-}, Zn = (e, t = Xn, n = (e) => B(e) ? le(e) : e) => {
-	for (let r of /* @__PURE__ */ new Set([V(e), V(n(V(e)))])) {
-		let n = de(r);
-		if (t(["rev-parse", "--is-inside-work-tree"], n) && !t([
-			"check-ignore",
-			"-q",
-			r
-		], n)) return `${e} is inside a git work tree and not ignored — write it to a gitignored file or outside the repo`;
-	}
-	return null;
-}, Qn = (e) => {
-	let t = (t) => {
-		let n = e.indexOf(t);
-		return n < 0 ? null : e[n + 1];
-	}, n = t("--env");
-	if (n !== "sandbox" && n !== "live") return "--env sandbox|live is required";
-	let r = t("--env-out");
-	if (r === void 0 || r?.startsWith("--")) return "--env-out needs a file path";
-	let i = {
-		env: n,
-		apply: e.includes("--apply"),
-		allowPriceChange: e.includes("--allow-price-change"),
-		confirmLive: e.includes("--confirm-live"),
-		strict: e.includes("--strict"),
-		envOut: r
-	};
-	return i.env === "live" && i.apply && !i.confirmLive ? "writing to LIVE needs --confirm-live (run without --apply first to see the plan)" : i;
-}, $n = (e, t, n) => {
-	let r = t.STRIPE_PROVISION_KEY?.trim() || (e === "sandbox" ? n?.trim() : void 0);
-	return r === void 0 || r.length === 0 ? { refusal: "set STRIPE_PROVISION_KEY (a sandbox run also reads STRIPE_SECRET_KEY from the dotenv file)" } : e === "live" && !/^(sk|rk)_live_/.test(r) ? { refusal: "--env live needs a live key (sk_live_/rk_live_)" } : e === "sandbox" && !/^(sk|rk)_test_/.test(r) ? { refusal: "--env sandbox needs a test key (sk_test_/rk_test_)" } : { key: r };
-}, er = (e, t) => B(e) ? ce(e, "utf8").split("\n").find((e) => e.startsWith(`${t}=`))?.slice(t.length + 1).trim() : void 0, tr = async (e, t, n = {}) => {
-	let r = n.vars ?? process.env, i = (e) => (console.error(`stripe provision: ${e}`), 2), a = Qn(t);
-	if (typeof a == "string") return i(a);
-	if (a.envOut !== null) {
-		let e = Zn(a.envOut);
-		if (e !== null) return i(e);
-	}
-	let o = $n(a.env, r, n.dotenv === void 0 ? void 0 : er(n.dotenv, "STRIPE_SECRET_KEY"));
-	if ("refusal" in o) return i(o.refusal);
-	let s;
-	try {
-		s = await Jn((n.rest ?? fn)(o.key), e, a);
-	} catch (e) {
-		return console.error(`stripe provision: ${un(e instanceof Error ? e.message : String(e))}`), 1;
-	}
-	console.log(`Stripe ${a.env} (${s.livemode ? "LIVE" : "test mode"}) — ${a.apply ? "apply" : "check"}`);
-	for (let e of s.findings) {
-		let t = e.applied === !0 ? `${e.kind} ✓` : e.kind;
-		console.log(`  ${t.padEnd(10)} ${e.object}${"detail" in e ? ` — ${e.detail}` : ""}`);
-	}
-	if (a.envOut !== null) {
-		let e = a.envOut;
-		ue(e, Yn(B(e) ? ce(e, "utf8") : "", s.envOut), { mode: 384 }), z(e, 384), console.log(`  wrote ${Object.keys(s.envOut).sort().join(", ")} to ${e}`);
-	}
-	let c = qn(s.findings), l = s.findings.filter((e) => e.kind === "manual");
-	return console.log(`  ${c.length} open, ${l.length} manual`), c.length > 0 || a.strict && l.length > 0 ? 1 : 0;
-}, nr = (e) => e === null ? null : {
+import { buildEnforceInterceptor as a, evaluateEntitlement as o, requireEntitled as s, requireEntitlement as c } from "./entitlement.js";
+import { BILLING_CUSTOMERS_TABLE as l, BILLING_INVOICES_TABLE as u, BILLING_SUBSCRIPTIONS_TABLE as d, BILLING_USAGE_TABLE as f, billingCustomersTable as p, billingInvoicesTable as m, billingSubscriptionsTable as h, billingTables as g, billingUsageTable as _ } from "./table.js";
+import { BILLING_DUNNING_NOTICES_TABLE as ee, DEFAULT_DUNNING_STEPS as te, DEFAULT_GRACE_HOURS as ne, DEFAULT_LOCKOUT as re, DUNNING_LOCK_STEP_ID as v, billingDunningNoticesTable as y, dataStoreDunningNoticeStore as ie, defaultDunningEmail as b, dueSteps as x, dunningMailNotifier as S, episodeKeyOf as C, evaluateBillingEntitlement as w, graceEndOf as T, memoryDunningNoticeStore as E, resolveDunningConfig as D } from "./dunning.js";
+import { dataStoreStores as ae, isStaleStatusEvent as O, memoryStores as k } from "./stores.js";
+import { billingServiceLayer as A, buildBillingService as j, periodKey as M } from "./service.js";
+import { buildMeteringChangeTap as oe, buildMeteringInterceptor as se, hasCdcMeters as ce, runAutopilotFlush as le, validateMeteringConfig as ue } from "./metering.js";
+import { buildPlanRegistry as N, emptyPlanRegistry as P } from "./plans.js";
+import { BILLING_FLUSH_CLAIMS_TABLE as F, billingFlushClaimsTable as I, claimFlushWindow as L, flushWindowKey as R } from "./flushClaim.js";
+import { STRIPE_API_VERSION as z, STRIPE_DASHBOARD_REMINDERS as B, diffMeter as V, diffPortal as H, diffPrice as U, diffProduct as W, diffTaxSettings as G, diffWebhook as K, portalParams as q, sellingReadiness as J } from "./catalog.js";
+import { StripeRestError as de, formEncode as fe, redactStripeKeys as pe, stripeRest as me } from "./stripeRest.js";
+import { STRIPE_WEBHOOK_EVENTS as he, normalizeStripeEvent as ge, stripeProvider as _e } from "./stripeProvider.js";
+import { assertBillingProductionReady as ve, billingEgressOf as ye, isProductionBoot as be, mockProvider as xe, resolveProvider as Se } from "./providers.js";
+import { BILLING_WEBHOOK_ID as Ce, BILLING_WEBHOOK_PATH as Y, billingWebhookDescriptor as we, mountBillingWebhook as Te } from "./webhook.js";
+import { billingRpcClientImports as Ee, cancelSubscriptionDescriptor as De, changePlanDescriptor as Oe, changeSeatsDescriptor as ke, entitlementStatusDescriptor as Ae, invoicesDescriptor as je, portalUrlDescriptor as Me, previewChangeDescriptor as Ne, reportUsageDescriptor as Pe, resumeSubscriptionDescriptor as Fe, startCheckoutDescriptor as Ie, subscriptionDescriptor as Le, syncDescriptor as Re } from "./rpc.js";
+import { envOutRefusal as ze, mergeEnvFile as Be, openFindings as Ve, parseProvisionArgs as He, provisionStripeCatalog as Ue, resolveProvisionKey as We, runStripeProvision as Ge } from "./provision.js";
+import { Effect as X } from "effect";
+import { pluginEnv as Ke } from "@voltro/env";
+import { composeRpcInterceptors as qe, definePlugin as Je, pluginInstanceName as Ye, recheckGuardsEffect as Xe } from "@voltro/protocol";
+import { registerRetention as Z, retentionTtlMsFromEnv as Q } from "@voltro/database";
+import { replicaId as Ze } from "@voltro/protocol/identity";
+//#region src/index.ts
+var $ = (e) => e === null ? null : {
 	plan: e.plan,
 	status: e.status,
 	quantity: e.quantity,
 	currentPeriodEnd: e.currentPeriodEnd ? e.currentPeriodEnd.toISOString() : null,
 	cancelAt: e.cancelAt ? e.cancelAt.toISOString() : null
-}, rr = S([{
+}, Qe = Ke([{
 	name: "STRIPE_SECRET_KEY",
 	required: !1,
 	secret: !0,
@@ -2657,43 +36,43 @@ var fe = (e, t, n, r) => ({
 	required: !1,
 	secret: !0,
 	description: "Stripe webhook signing secret (whsec_…) for verifying webhook payloads."
-}]), ir = "@voltro/plugin-billing", ar = (t = {}) => {
-	let n = process.env, y = zt(t.plans ?? {}), b = Bn({
+}]), $e = "@voltro/plugin-billing", et = (t = {}) => {
+	let n = process.env, o = N(t.plans ?? {}), s = Se({
 		...t.provider === void 0 ? {} : { provider: t.provider },
 		...t.apiKey === void 0 ? {} : { apiKey: t.apiKey },
-		planForPriceId: y.planForPriceId,
+		planForPriceId: o.planForPriceId,
 		env: n
-	}), x = t.webhookSecret ?? rr.read("STRIPE_WEBHOOK_SECRET") ?? null;
-	zn({
+	}), c = t.webhookSecret ?? Qe.read("STRIPE_WEBHOOK_SECRET") ?? null;
+	ve({
 		env: n,
 		providerOption: t.provider,
-		resolvedName: b.name,
-		webhookSecret: x,
+		resolvedName: s.name,
+		webhookSecret: c,
 		redirectOrigins: t.redirectOrigins
 	});
-	let S = ke(t.dunning, n);
-	ie({
+	let p = D(t.dunning, n);
+	Z({
 		source: "plugin",
-		table: G,
+		table: f,
 		timeColumn: "updatedAt",
-		ttlMs: ae(process.env.VOLTRO_BILLING_USAGE_TTL_HOURS, 9600),
+		ttlMs: Q(process.env.VOLTRO_BILLING_USAGE_TTL_HOURS, 9600),
 		label: "billing usage counters"
-	}), ie({
+	}), Z({
 		source: "plugin",
-		table: Vt,
+		table: F,
 		timeColumn: "claimedAt",
-		ttlMs: ae(process.env.VOLTRO_BILLING_FLUSH_CLAIM_TTL_HOURS, 1),
+		ttlMs: Q(process.env.VOLTRO_BILLING_FLUSH_CLAIM_TTL_HOURS, 1),
 		label: "billing flush claims"
-	}), ie({
+	}), Z({
 		source: "plugin",
-		table: Se,
+		table: ee,
 		timeColumn: "sentAt",
-		ttlMs: ae(process.env.VOLTRO_BILLING_DUNNING_TTL_HOURS, 9600),
+		ttlMs: Q(process.env.VOLTRO_BILLING_DUNNING_TTL_HOURS, 9600),
 		label: "billing dunning notices"
 	});
-	let { service: T, holder: E } = vt({
-		provider: b,
-		plans: y,
+	let { service: m, holder: h } = j({
+		provider: s,
+		plans: o,
 		...t.attempts === void 0 ? {} : { attempts: t.attempts },
 		...t.checkout === void 0 ? {} : { checkout: t.checkout },
 		...t.admit === void 0 ? {} : { admit: t.admit },
@@ -2701,21 +80,21 @@ var fe = (e, t, n, r) => ({
 		...t.isTenantClosed === void 0 ? {} : { isTenantClosed: t.isTenantClosed },
 		...t.onEvent === void 0 ? {} : { onEvent: t.onEvent },
 		...t.resolveEntitlementLimit === void 0 ? {} : { resolveEntitlementLimit: t.resolveEntitlementLimit },
-		dunning: S
-	}), te = yt(T), D = Kn({
-		provider: b,
-		service: T,
-		webhookSecret: x,
+		dunning: p
+	}), _ = A(m), te = Te({
+		provider: s,
+		service: m,
+		webhookSecret: c,
 		...t.onEvent === void 0 ? {} : { onEvent: t.onEvent },
 		onLateDelivery: () => {
-			fe();
+			K();
 		}
-	}), O = {
+	}), ne = {
 		method: "POST",
-		path: Wn,
+		path: Y,
 		originGuard: "exempt",
 		handle: async (e) => {
-			let t = await D({
+			let t = await te({
 				method: e.method,
 				path: e.path,
 				headers: e.headers,
@@ -2728,44 +107,46 @@ var fe = (e, t, n, r) => ({
 				...t.headers === void 0 ? {} : { headers: { ...t.headers } }
 			};
 		}
-	}, ne = (t) => ({
+	}, re = (t) => ({
 		...t,
 		execute: (n, r) => {
 			let i = r.request.subject;
-			return i.type === "anonymous" || typeof i.tenantId != "string" || i.tenantId === "" ? v.fail(new e({
+			return i.type === "anonymous" || typeof i.tenantId != "string" || i.tenantId === "" ? X.fail(new e({
 				source: "billing",
 				message: "billing routes answer only a signed-in caller that belongs to a tenant",
 				transient: !1
 			})) : t.execute(n, r);
 		}
-	}), k = [
+	}), v = (e, t, n, r) => e.pipe(X.flatMap((e) => Xe(r.request.subject, t.guards, n).pipe(X.flatMap((t) => t === null ? X.succeed(e) : X.fail(t))))), ie = [
 		{
-			...h,
+			...Ie,
 			execute: (e, t) => {
 				let n = e;
-				return T.startCheckout({
+				return v(m.startCheckout({
 					tenantId: t.request.subject.tenantId ?? "",
 					plan: n.plan,
 					successUrl: n.successUrl,
 					cancelUrl: n.cancelUrl,
 					...n.quantity === void 0 ? {} : { quantity: n.quantity }
-				});
+				}), Ie, e, t);
 			}
 		},
 		{
-			...d,
+			...Me,
 			execute: (e, t) => {
 				let n = e;
-				return T.portalUrl(t.request.subject.tenantId ?? "", n.returnUrl);
+				return v(m.portalUrl(t.request.subject.tenantId ?? "", n.returnUrl), Me, e, t);
 			}
 		},
 		{
-			...g,
-			execute: (e, t) => T.subscription(t.request.subject.tenantId ?? "").pipe(v.map((e) => ({ subscription: nr(e) })))
+			...Le,
+			source: d,
+			execute: (e, t) => m.subscription(t.request.subject.tenantId ?? "").pipe(X.map((e) => ({ subscription: $(e) })))
 		},
 		{
-			...l,
-			execute: (e, t) => T.entitlementStatus(t.request.subject.tenantId ?? "").pipe(v.map((e) => ({
+			...Ae,
+			source: d,
+			execute: (e, t) => m.entitlementStatus(t.request.subject.tenantId ?? "").pipe(X.map((e) => ({
 				plan: e.plan,
 				billedPlan: e.billedPlan,
 				status: e.status,
@@ -2777,13 +158,13 @@ var fe = (e, t, n, r) => ({
 			})))
 		},
 		{
-			...f,
+			...Ne,
 			execute: (e, t) => {
 				let n = e;
-				return T.previewChange(t.request.subject.tenantId ?? "", {
+				return m.previewChange(t.request.subject.tenantId ?? "", {
 					...n.plan === void 0 ? {} : { plan: n.plan },
 					...n.quantity === void 0 ? {} : { quantity: n.quantity }
-				}).pipe(v.map((e) => ({
+				}).pipe(X.map((e) => ({
 					plan: e.plan,
 					quantity: e.quantity,
 					prorationMinor: e.prorationMinor,
@@ -2792,24 +173,25 @@ var fe = (e, t, n, r) => ({
 			}
 		},
 		{
-			...u,
-			execute: (e, t) => T.invoices(t.request.subject.tenantId ?? "").pipe(v.map((e) => ({ invoices: e.map((e) => ({
+			...je,
+			source: [u, l],
+			execute: (e, t) => m.invoices(t.request.subject.tenantId ?? "").pipe(X.map((e) => ({ invoices: e.map((e) => ({
 				...e,
 				createdAt: e.createdAt?.toISOString() ?? null
 			})) })))
 		},
 		{
-			...p,
+			...Pe,
 			execute: (e, t) => {
 				let n = e;
-				return T.reportUsage(t.request.subject.tenantId ?? "", n.key, n.quantity).pipe(v.map(() => ({ ok: !0 })));
+				return m.reportUsage(t.request.subject.tenantId ?? "", n.key, n.quantity).pipe(X.map(() => ({ ok: !0 })));
 			}
 		},
 		{
-			...s,
+			...Oe,
 			execute: (e, t) => {
 				let n = e;
-				return T.changePlan(t.request.subject.tenantId ?? "", n.plan).pipe(v.map((e) => ({
+				return m.changePlan(t.request.subject.tenantId ?? "", n.plan).pipe(X.map((e) => ({
 					plan: e.plan,
 					quantity: e.quantity,
 					prorationMinor: e.prorationMinor,
@@ -2818,10 +200,10 @@ var fe = (e, t, n, r) => ({
 			}
 		},
 		{
-			...c,
+			...ke,
 			execute: (e, t) => {
 				let n = e;
-				return T.changeSeats(t.request.subject.tenantId ?? "", n.quantity).pipe(v.map((e) => ({
+				return m.changeSeats(t.request.subject.tenantId ?? "", n.quantity).pipe(X.map((e) => ({
 					plan: e.plan,
 					quantity: e.quantity,
 					prorationMinor: e.prorationMinor,
@@ -2830,34 +212,34 @@ var fe = (e, t, n, r) => ({
 			}
 		},
 		{
-			...o,
-			execute: (e, t) => T.cancelSubscription(t.request.subject.tenantId ?? "").pipe(v.map((e) => ({ subscription: nr(e) })))
+			...De,
+			execute: (e, t) => m.cancelSubscription(t.request.subject.tenantId ?? "").pipe(X.map((e) => ({ subscription: $(e) })))
 		},
 		{
-			..._,
-			execute: (e, t) => T.syncTenant(t.request.subject.tenantId ?? "").pipe(v.map((e) => ({ subscription: e === null ? null : nr(e) })))
+			...Re,
+			execute: (e, t) => m.syncTenant(t.request.subject.tenantId ?? "").pipe(X.map((e) => ({ subscription: e === null ? null : $(e) })))
 		},
 		{
-			...m,
-			execute: (e, t) => T.resumeSubscription(t.request.subject.tenantId ?? "").pipe(v.map((e) => ({ subscription: nr(e) })))
+			...Fe,
+			execute: (e, t) => m.resumeSubscription(t.request.subject.tenantId ?? "").pipe(X.map((e) => ({ subscription: $(e) })))
 		}
-	].map(ne), A = (e, t) => ({
+	].map(re), b = (e, t) => ({
 		kind: "json",
 		status: e,
 		data: { error: t }
-	}), re = [{
+	}), x = [{
 		method: "GET",
 		path: "/stats",
 		scope: "declaration",
 		description: "Billing config: provider, declared plans, enforced tags",
-		handler: () => v.succeed({
+		handler: () => X.succeed({
 			kind: "json",
 			data: {
-				provider: b.name,
-				supportsMeteredUsage: b.supportsMeteredUsage,
-				plans: y.planIds(),
+				provider: s.name,
+				supportsMeteredUsage: s.supportsMeteredUsage,
+				plans: o.planIds(),
 				enforce: t.enforce ? Object.keys(t.enforce) : [],
-				webhookPath: Wn
+				webhookPath: Y
 			}
 		})
 	}, {
@@ -2865,11 +247,11 @@ var fe = (e, t, n, r) => ({
 		path: "/usage",
 		scope: "process",
 		description: "Pending (un-flushed) metered usage counters",
-		handler: () => E.stores.usage.pending().pipe(v.map((e) => ({
+		handler: () => h.stores.usage.pending().pipe(X.map((e) => ({
 			kind: "json",
 			data: { usage: e }
-		})), v.catch((e) => v.succeed(A(500, `${e.source} failed`))))
-	}], j = [
+		})), X.catch((e) => X.succeed(b(500, `${e.source} failed`))))
+	}], S = [
 		{
 			schema: e,
 			import: {
@@ -2891,126 +273,126 @@ var fe = (e, t, n, r) => ({
 				name: "SubscriptionLocked"
 			}
 		}
-	], M = t.enforce, N = M !== void 0 && Object.keys(M).length > 0 ? ge(M, T) : void 0, P = t.metering;
-	P !== void 0 && xt(P);
-	let F = P !== void 0 && Object.keys(P).length > 0 ? At(T, P) : void 0, I = P !== void 0 && Lt(P), L = { claim: void 0 }, se = P === void 0 ? void 0 : Nt(T, P, {
-		claimChange: () => L.claim,
+	], C = t.enforce, w = C !== void 0 && Object.keys(C).length > 0 ? a(C, m) : void 0, T = t.metering;
+	T !== void 0 && ue(T);
+	let E = T !== void 0 && Object.keys(T).length > 0 ? se(m, T) : void 0, O = T !== void 0 && ce(T), k = { claim: void 0 }, M = T === void 0 ? void 0 : oe(m, T, {
+		claimChange: () => k.claim,
 		onUngated: () => {
-			v.runSync(v.logWarning("metering: CDC meters are accruing PER PROCESS — with N replicas a tenant is billed N times. The framework did not hand this plugin a change claimer (expected on the memory store; on a SQL store this is a bug worth reporting).").pipe(v.annotateLogs({ scope: "voltro:billing" })));
+			X.runSync(X.logWarning("metering: CDC meters are accruing PER PROCESS — with N replicas a tenant is billed N times. The framework did not hand this plugin a change claimer (expected on the memory store; on a SQL store this is a bug worth reporting).").pipe(X.annotateLogs({ scope: "voltro:billing" })));
 		}
-	}), R = C([F, N].filter((e) => e !== void 0)), z, B, ce = !1, le = !1, ue = !1, de = 0, V = {
+	}), P = qe([E, w].filter((e) => e !== void 0)), z, B, V = !1, H = !1, U = !1, W = 0, G = {
 		info: (e, t) => {
 			console.info(e, t ?? {});
 		},
 		error: (e, t) => {
 			console.error(e, t ?? {});
 		}
-	}, fe = async () => {
-		let e = z, n = b.listUndeliveredEvents;
-		if (!(e === void 0 || n === void 0 || ue) && !(Date.now() - de < 6e4)) {
-			ue = !0;
+	}, K = async () => {
+		let e = z, n = s.listUndeliveredEvents;
+		if (!(e === void 0 || n === void 0 || U) && !(Date.now() - W < 6e4)) {
+			U = !0;
 			try {
-				let r = await v.runPromise(n()), i = oe(), a = /* @__PURE__ */ new Set();
-				for (let t of r) t.providerCustomerId !== null && await Wt(e, `event:${t.id}`, i, Date.now()) && a.add(t.providerCustomerId);
+				let r = await X.runPromise(n()), i = Ze(), a = /* @__PURE__ */ new Set();
+				for (let t of r) t.providerCustomerId !== null && await L(e, `event:${t.id}`, i, Date.now()) && a.add(t.providerCustomerId);
 				let o = 0;
-				for (let e of a) await v.runPromise(T.syncCustomer(e).pipe(v.flatMap((e) => v.forEach(e.events, (e) => {
+				for (let e of a) await X.runPromise(m.syncCustomer(e).pipe(X.flatMap((e) => X.forEach(e.events, (e) => {
 					let n = t.onEvent?.[e._tag];
-					return n === void 0 ? v.void : n(e).pipe(v.catchCause((t) => v.sync(() => {
-						V.error("billing catch-up: onEvent failed for a correction", {
+					return n === void 0 ? X.void : n(e).pipe(X.catchCause((t) => X.sync(() => {
+						G.error("billing catch-up: onEvent failed for a correction", {
 							event: e._tag,
 							cause: String(t)
 						});
 					})));
-				}, { discard: !0 })), v.tap(() => v.sync(() => {
+				}, { discard: !0 })), X.tap(() => X.sync(() => {
 					o += 1;
-				})), v.catch((e) => v.sync(() => {
-					V.error("billing catch-up: syncing a customer failed — the provider redelivers its events", { message: e.message });
+				})), X.catch((e) => X.sync(() => {
+					G.error("billing catch-up: syncing a customer failed — the provider redelivers its events", { message: e.message });
 				}))));
-				V.info("billing catch-up", {
+				G.info("billing catch-up", {
 					undelivered: r.length,
 					customers: a.size,
 					synced: o
 				});
 			} catch (e) {
-				V.error("billing catch-up failed — the next late delivery or restart retries it", { message: String(e?.message ?? e) });
+				G.error("billing catch-up failed — the next late delivery or restart retries it", { message: String(e?.message ?? e) });
 			} finally {
-				de = Date.now(), ue = !1;
+				W = Date.now(), U = !1;
 			}
 		}
-	}, pe = (e) => {
-		e !== void 0 && (V = e), !le && ce && z !== void 0 && (le = !0, fe());
-	}, me = [
+	}, q = (e) => {
+		e !== void 0 && (G = e), !H && V && z !== void 0 && (H = !0, K());
+	}, J = [
 		"store:write",
 		"inspect:read",
 		"inspect:write",
 		"network:outbound:*",
-		...R === void 0 ? [] : [
+		...P === void 0 ? [] : [
 			"rpc:intercept:mutation",
 			"rpc:intercept:action",
 			"rpc:intercept:workflow"
 		],
-		...F === void 0 ? [] : ["rpc:intercept:query"],
-		...I ? ["store:changes:read"] : []
+		...E === void 0 ? [] : ["rpc:intercept:query"],
+		...O ? ["store:changes:read"] : []
 	];
-	return ee({
-		name: w({
-			base: ir,
+	return Je({
+		name: Ye({
+			base: $e,
 			alias: t.alias,
 			instance: t.name
 		}),
-		baseName: ir,
+		baseName: $e,
 		description: "Billing — subscriptions, plans, entitlements + usage metering over a pluggable BillingProvider (Stripe + mock). Ships the BillingService, the requireEntitlement() in-handler guard + the enforce-map interceptor, the /billing/webhook receiver (riding @voltro/plugin-webhooks for signature + idempotency), and the _voltro_billing_* tables. Money is integer minor units.",
-		permissions: me,
-		declaredEnv: rr.declared,
-		egress: Vn(b),
-		services: te,
-		routes: k,
-		rpcClientDescriptors: a,
-		httpRoutes: [O],
-		inspectEndpoints: re,
+		permissions: J,
+		declaredEnv: Qe.declared,
+		egress: ye(s),
+		services: _,
+		routes: ie,
+		rpcClientDescriptors: Ee,
+		httpRoutes: [ne],
+		inspectEndpoints: x,
 		extendSchema: { tables: [
-			...xe(),
-			Ht,
-			Ce
+			...g(),
+			I,
+			y
 		] },
-		errorSchemas: j,
-		...R === void 0 ? {} : {
-			interceptMutation: R,
-			interceptAction: R,
-			interceptWorkflow: R
-		},
-		...F === void 0 ? {} : { interceptQuery: F },
-		...I ? { onChangeEvent: se } : {},
+		errorSchemas: S,
+		...P === void 0 ? {} : {
+			interceptMutation: P,
+			interceptAction: P,
+			interceptWorkflow: P
+		},
+		...E === void 0 ? {} : { interceptQuery: E },
+		...O ? { onChangeEvent: M } : {},
 		bindDataStore: (e, t) => {
-			E.stores = ft(e), z = e, pe(), L.claim = t?.claimChange;
+			h.stores = ae(e), z = e, q(), k.claim = t?.claimChange;
 		},
-		onActivate: (e) => v.sync(() => {
+		onActivate: (e) => X.sync(() => {
 			e.logger.info("billing active", {
-				provider: b.name,
-				plans: y.planIds().length,
-				enforce: M ? Object.keys(M).length : 0,
-				metering: P ? Object.keys(P).length : 0,
-				webhook: Wn,
+				provider: s.name,
+				plans: o.planIds().length,
+				enforce: C ? Object.keys(C).length : 0,
+				metering: T ? Object.keys(T).length : 0,
+				webhook: Y,
 				redirectOrigins: t.redirectOrigins?.length ?? "any"
-			}), b.name === "stripe" && t.redirectOrigins === void 0 && e.logger.warn("billing: no redirectOrigins — checkout and portal accept any return URL; set billingPlugin({ redirectOrigins })", {});
-			let n = t.flushIntervalMs ?? 6e4, r = P, i = r !== void 0 && Object.keys(r).length > 0;
+			}), s.name === "stripe" && t.redirectOrigins === void 0 && e.logger.warn("billing: no redirectOrigins — checkout and portal accept any return URL; set billingPlugin({ redirectOrigins })", {});
+			let n = t.flushIntervalMs ?? 6e4, r = T, i = r !== void 0 && Object.keys(r).length > 0;
 			if (n > 0) {
-				let e = oe();
+				let e = Ze();
 				B = setInterval(() => {
 					let t = z;
 					if (t === void 0) return;
 					let a = Date.now();
 					(async () => {
-						await Wt(t, Ut(a, n), e, a) && await v.runPromise((i ? It(T, t, r) : T.flushUsage()).pipe(v.catch(() => v.void)));
+						await L(t, R(a, n), e, a) && await X.runPromise((i ? le(m, t, r) : m.flushUsage()).pipe(X.catch(() => X.void)));
 					})();
 				}, n), B.unref?.();
 			}
-			ce = !0, pe(e.logger);
+			V = !0, q(e.logger);
 		}),
-		onDeactivate: () => v.sync(() => {
+		onDeactivate: () => X.sync(() => {
 			B !== void 0 && (clearInterval(B), B = void 0);
 		})
 	});
 };
 //#endregion
-export { H as BILLING_CUSTOMERS_TABLE, Se as BILLING_DUNNING_NOTICES_TABLE, Vt as BILLING_FLUSH_CLAIMS_TABLE, W as BILLING_INVOICES_TABLE, U as BILLING_SUBSCRIPTIONS_TABLE, G as BILLING_USAGE_TABLE, Un as BILLING_WEBHOOK_ID, Wn as BILLING_WEBHOOK_PATH, e as BillingError, t as BillingService, Te as DEFAULT_DUNNING_STEPS, Ee as DEFAULT_GRACE_HOURS, De as DEFAULT_LOCKOUT, n as DEFAULT_PLAN, we as DUNNING_LOCK_STEP_ID, r as EntitlementExceeded, Gt as STRIPE_API_VERSION, Kt as STRIPE_DASHBOARD_REMINDERS, On as STRIPE_WEBHOOK_EVENTS, dn as StripeRestError, i as SubscriptionLocked, zn as assertBillingProductionReady, _e as billingCustomersTable, Ce as billingDunningNoticesTable, Vn as billingEgressOf, Ht as billingFlushClaimsTable, ye as billingInvoicesTable, ar as billingPlugin, yt as billingServiceLayer, ve as billingSubscriptionsTable, xe as billingTables, be as billingUsageTable, Gn as billingWebhookDescriptor, vt as buildBillingService, ge as buildEnforceInterceptor, zt as buildPlanRegistry, Wt as claimFlushWindow, Ve as dataStoreDunningNoticeStore, ft as dataStoreStores, Ie as defaultDunningEmail, en as diffMeter, on as diffPortal, $t as diffPrice, Xt as diffProduct, tn as diffTaxSettings, sn as diffWebhook, Ne as dueSteps, Le as dunningMailNotifier, Bt as emptyPlanRegistry, Zn as envOutRefusal, je as episodeKeyOf, Pe as evaluateBillingEntitlement, fe as evaluateEntitlement, Ut as flushWindowKey, ln as formEncode, Me as graceEndOf, Rn as isProductionBoot, Ze as isStaleStatusEvent, ze as memoryDunningNoticeStore, dt as memoryStores, Yn as mergeEnvFile, In as mockProvider, Kn as mountBillingWebhook, kn as normalizeStripeEvent, qn as openFindings, Qn as parseProvisionArgs, mt as periodKey, nn as portalParams, Jn as provisionStripeCatalog, un as redactStripeKeys, he as requireEntitled, me as requireEntitlement, ke as resolveDunningConfig, Bn as resolveProvider, $n as resolveProvisionKey, tr as runStripeProvision, cn as sellingReadiness, jn as stripeProvider, fn as stripeRest };
+export { l as BILLING_CUSTOMERS_TABLE, ee as BILLING_DUNNING_NOTICES_TABLE, F as BILLING_FLUSH_CLAIMS_TABLE, u as BILLING_INVOICES_TABLE, d as BILLING_SUBSCRIPTIONS_TABLE, f as BILLING_USAGE_TABLE, Ce as BILLING_WEBHOOK_ID, Y as BILLING_WEBHOOK_PATH, e as BillingError, t as BillingService, te as DEFAULT_DUNNING_STEPS, ne as DEFAULT_GRACE_HOURS, re as DEFAULT_LOCKOUT, n as DEFAULT_PLAN, v as DUNNING_LOCK_STEP_ID, r as EntitlementExceeded, z as STRIPE_API_VERSION, B as STRIPE_DASHBOARD_REMINDERS, he as STRIPE_WEBHOOK_EVENTS, de as StripeRestError, i as SubscriptionLocked, ve as assertBillingProductionReady, p as billingCustomersTable, y as billingDunningNoticesTable, ye as billingEgressOf, I as billingFlushClaimsTable, m as billingInvoicesTable, et as billingPlugin, A as billingServiceLayer, h as billingSubscriptionsTable, g as billingTables, _ as billingUsageTable, we as billingWebhookDescriptor, j as buildBillingService, a as buildEnforceInterceptor, N as buildPlanRegistry, L as claimFlushWindow, ie as dataStoreDunningNoticeStore, ae as dataStoreStores, b as defaultDunningEmail, V as diffMeter, H as diffPortal, U as diffPrice, W as diffProduct, G as diffTaxSettings, K as diffWebhook, x as dueSteps, S as dunningMailNotifier, P as emptyPlanRegistry, ze as envOutRefusal, C as episodeKeyOf, w as evaluateBillingEntitlement, o as evaluateEntitlement, R as flushWindowKey, fe as formEncode, T as graceEndOf, be as isProductionBoot, O as isStaleStatusEvent, E as memoryDunningNoticeStore, k as memoryStores, Be as mergeEnvFile, xe as mockProvider, Te as mountBillingWebhook, ge as normalizeStripeEvent, Ve as openFindings, He as parseProvisionArgs, M as periodKey, q as portalParams, Ue as provisionStripeCatalog, pe as redactStripeKeys, s as requireEntitled, c as requireEntitlement, D as resolveDunningConfig, Se as resolveProvider, We as resolveProvisionKey, Ge as runStripeProvision, J as sellingReadiness, _e as stripeProvider, me as stripeRest };