@voltro/plugin-billing 0.85.0 → 0.87.0

package/dist/closeStore.js

@@ -0,0 +1,125 @@
+import { BillingError as e } from "./types.js";
+import { Effect as t } from "effect";
+import { and as n, eq as r, id as i, integer as a, table as o, text as s, timestamp as c } from "@voltro/database";
+//#region src/closeStore.ts
+var l = "_voltro_billing_close_operations", u = o(l, {
+	id: i({ prefix: "bclose" }),
+	tenantId: s().maxLength(191),
+	provider: s().maxLength(64),
+	scope: s().maxLength(64),
+	providerSubscriptionId: s().nullable(),
+	cancelAt: c().nullable(),
+	createdAt: c(),
+	usageSealed: a().default(0)
+}).unique("byBillingCloseTenantScope", ["tenantId", "scope"]), d = () => new e({
+	source: "closeStore",
+	message: "Billing closure coordination requires reconciliation.",
+	transient: !0
+}), f = (e) => {
+	let t = e instanceof Date ? new Date(e) : new Date(typeof e == "string" || typeof e == "number" ? e : NaN);
+	if (!Number.isFinite(t.getTime())) throw d();
+	return t;
+}, p = (e) => {
+	for (let t of [
+		"id",
+		"tenantId",
+		"provider",
+		"scope"
+	]) if (typeof e[t] != "string" || e[t] === "") throw d();
+	if (String(e.tenantId).length > 191 || String(e.provider).length > 64 || e.scope !== "account" && !/^[a-f0-9]{64}$/.test(String(e.scope))) throw d();
+	let t = e.scope === "account";
+	if (e.usageSealed !== 0 && e.usageSealed !== 1 || (t ? e.providerSubscriptionId !== null || e.cancelAt !== null : typeof e.providerSubscriptionId != "string" || e.providerSubscriptionId === "" || e.cancelAt === null)) throw d();
+	return {
+		id: String(e.id),
+		tenantId: String(e.tenantId),
+		provider: String(e.provider),
+		scope: String(e.scope),
+		providerSubscriptionId: t ? null : String(e.providerSubscriptionId),
+		cancelAt: t ? null : f(e.cancelAt),
+		createdAt: f(e.createdAt),
+		usageSealed: Number(e.usageSealed)
+	};
+}, m = async (e) => {
+	if (e.length === 0) throw d();
+	let t = await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(e));
+	return [...new Uint8Array(t)].map((e) => e.toString(16).padStart(2, "0")).join("");
+}, h = (e, n, r) => {
+	let i = async (t) => {
+		let r = p({
+			...t,
+			id: "bclose_" + globalThis.crypto.randomUUID()
+		});
+		for (let i = 0; i < 8; i++) {
+			let i = await e(t.tenantId, t.scope);
+			if (i !== null) {
+				if (i.provider !== t.provider || i.providerSubscriptionId !== t.providerSubscriptionId) throw d();
+				return i;
+			}
+			await n(r);
+		}
+		throw d();
+	}, a = (e) => t.tryPromise({
+		try: e,
+		catch: d
+	});
+	return {
+		getAccount: (t) => a(() => e(t, "account")),
+		sealUsage: (t) => a(async () => {
+			let n = await e(t, "account");
+			if (n === null) throw d();
+			if (n.usageSealed === 1) return n;
+			await r(n);
+			let i = await e(t, "account");
+			if (i?.usageSealed !== 1) throw d();
+			return i;
+		}),
+		reserveAccount: (e, t, n) => a(() => i({
+			tenantId: e,
+			provider: t,
+			scope: "account",
+			providerSubscriptionId: null,
+			cancelAt: null,
+			createdAt: n,
+			usageSealed: 0
+		})),
+		getSubscription: (t, n) => a(async () => e(t, await m(n))),
+		reserveSubscription: (e) => a(async () => i({
+			...e,
+			scope: await m(e.providerSubscriptionId),
+			usageSealed: 0
+		}))
+	};
+}, g = () => {
+	let e = /* @__PURE__ */ new Map(), t = (e, t) => JSON.stringify([e, t]);
+	return h(async (n, r) => {
+		let i = e.get(t(n, r));
+		return i ? p({ ...i }) : null;
+	}, async (n) => {
+		let r = t(n.tenantId, n.scope);
+		e.has(r) || e.set(r, p({ ...n }));
+	}, async (n) => {
+		let r = t(n.tenantId, "account"), i = e.get(r);
+		if (!i || i.id !== n.id) throw d();
+		e.set(r, p({
+			...i,
+			usageSealed: 1
+		}));
+	});
+}, _ = (e) => h(async (t, i) => {
+	let a = {
+		table: l,
+		predicate: n(r("tenantId", t), r("scope", i)),
+		order: [],
+		take: 2,
+		skip: void 0,
+		projection: void 0
+	}, o = await e.query(a);
+	if (o.length > 1) throw d();
+	return o[0] ? p(o[0]) : null;
+}, async (t) => {
+	await e.insertIgnore(l, { ...t }, { conflictColumns: ["tenantId", "scope"] });
+}, async (t) => {
+	await e.updateMany(l, { usageSealed: 1 }, { where: n(r("id", t.id), r("tenantId", t.tenantId), r("scope", "account"), r("usageSealed", 0)) });
+});
+//#endregion
+export { l as BILLING_CLOSE_OPERATIONS_TABLE, u as billingCloseOperationsTable, _ as dataStoreBillingCloseStore, g as memoryBillingCloseStore };

package/dist/custodyInventory.js

@@ -0,0 +1,155 @@
+import { BillingError as e } from "./types.js";
+import { exactProviderIdentifier as t } from "./providerIdentity.js";
+import { Effect as n } from "effect";
+import { canonicalJson as r } from "@voltro/protocol";
+import { and as i, eq as a, gt as o } from "@voltro/database";
+import { createHash as s } from "node:crypto";
+//#region src/custodyInventory.ts
+var c = Object.freeze([
+	"_voltro_billing_customer_accounts",
+	"_voltro_billing_customer_custody",
+	"_voltro_billing_account_invoices",
+	"_voltro_billing_invoice_history_walks",
+	"_voltro_billing_invoice_history_pages",
+	"_voltro_billing_invoice_history_references",
+	"_voltro_billing_invoice_history_work",
+	"_voltro_billing_invoice_history_dispatch",
+	"_voltro_billing_customers",
+	"_voltro_billing_subscriptions",
+	"_voltro_billing_invoices",
+	"_voltro_billing_invoice_observations",
+	"_voltro_billing_usage",
+	"_voltro_billing_usage_events",
+	"_voltro_billing_checkout_operations",
+	"_voltro_billing_close_operations",
+	"_voltro_billing_dunning_notices"
+]), l = (r, i) => n.tryPromise({
+	try: async () => {
+		let e = i.tenantId, n = i.pageSize ?? 200, a = i.maxRowsPerTable ?? 5e3;
+		if (!t(e) || e.length > 191 || !e.isWellFormed() || !Number.isSafeInteger(n) || n < 1 || n > 500 || !Number.isSafeInteger(a) || a < 1 || a > 5e4) throw v("Inventory tenant and bounds must be valid.", !1);
+		if (r.integrityQuery === void 0) throw v("Complete native integrity reads are required.", !1);
+		let o = {
+			format: "voltro.billing-custody-inventory.v1",
+			tenantId: e,
+			tables: await r.transactional(async (t) => {
+				if (t.integrityQuery === void 0) throw v("Transactional native integrity reads are required.", !1);
+				let r = await u(t, e, n, a), i = await u(t, e, n, a);
+				if (g(r) !== g(i)) throw v("Billing state changed during inventory. Quiesce writers and retry.", !0);
+				return i;
+			})
+		};
+		return Object.freeze({
+			...o,
+			digest: g(o),
+			observedAt: /* @__PURE__ */ new Date(),
+			purpose: "review-only"
+		});
+	},
+	catch: (t) => t instanceof e ? t : v("The native billing inventory could not be completed.", !0)
+}), u = async (e, n, s, l) => {
+	let u = e.integrityQuery;
+	if (u === void 0) throw v("Complete native integrity reads are required.", !1);
+	let y = [], b = 0;
+	for (let x of c) {
+		let c = [], S = /* @__PURE__ */ new Set(), C;
+		for (;;) {
+			let g = Math.min(s, l - c.length + 1), y = {
+				table: x,
+				predicate: C === void 0 ? a("tenantId", n) : i(a("tenantId", n), o("id", C)),
+				crossTenant: !0,
+				includeDeleted: !0,
+				includeExpired: !0,
+				order: [{
+					column: "id",
+					direction: "asc"
+				}],
+				take: g,
+				skip: void 0,
+				projection: void 0
+			}, w = await u.call(e, y);
+			if (!Array.isArray(w) || w.length > g) throw v(`Invalid inventory page for ${x}.`, !1);
+			for (let e of w) {
+				let i = h(e);
+				if (!m(i)) throw v(`Invalid inventory row for ${x}.`, !1);
+				let a = i.id;
+				if (!t(a) || i.tenantId !== n || S.has(a)) throw v(`Invalid inventory identity for ${x}.`, !1);
+				if (c.length === l) throw v(`Inventory bound exceeded for ${x}; no partial inventory is returned.`, !1);
+				S.add(a);
+				let o = {};
+				for (let e of d) {
+					let n = i[e];
+					if (n != null) {
+						if (!t(n)) throw v(`Invalid inventory reference for ${x}.`, !1);
+						o[e] = n;
+					}
+				}
+				let s = r(i), u = Buffer.byteLength(s, "utf8");
+				if (b += u, u > f || b > p) throw v("Native billing inventory byte bound exceeded; no partial inventory is returned.", !1);
+				c.push(Object.freeze({
+					id: a,
+					digest: _(s),
+					references: Object.freeze(o)
+				})), C = a;
+			}
+			if (w.length < g) break;
+		}
+		c.sort((e, t) => e.id < t.id ? -1 : +(e.id > t.id)), y.push(Object.freeze({
+			tableName: x,
+			rowCount: c.length,
+			digest: g(c),
+			rows: Object.freeze(c)
+		}));
+	}
+	return Object.freeze(y);
+}, d = [
+	"provider",
+	"providerAccountId",
+	"providerCustomerId",
+	"providerSubscriptionId",
+	"providerInvoiceId"
+], f = 4194304, p = 67108864, m = (e) => typeof e == "object" && !!e && !Array.isArray(e), h = (e, t = /* @__PURE__ */ new Set(), n = 0) => {
+	if (n > 64) throw v("Native inventory value exceeds supported depth.", !1);
+	if (e === null || typeof e == "boolean") return e;
+	if (typeof e == "string") {
+		if (!e.isWellFormed()) throw v("Native inventory contains malformed text.", !1);
+		return e;
+	}
+	if (typeof e == "number") {
+		if (!Number.isFinite(e) || !Number.isSafeInteger(e) && Math.abs(e) > 2 ** 53 - 1 || Object.is(e, -0)) throw v("Native inventory numeric evidence cannot be encoded exactly.", !1);
+		return e;
+	}
+	if (e instanceof Date) {
+		if (!Number.isFinite(e.getTime())) throw v("Native inventory contains an invalid date.", !1);
+		return e.toISOString();
+	}
+	if (typeof e != "object" || t.has(e)) throw v("Native inventory contains a non-JSON value.", !1);
+	let r = Object.getPrototypeOf(e);
+	if (!Array.isArray(e) && r !== Object.prototype && r !== null) throw v("Native inventory value has an unsupported prototype.", !1);
+	if (Object.getOwnPropertySymbols(e).length !== 0) throw v("Native inventory contains unsupported symbol fields.", !1);
+	t.add(e);
+	try {
+		if (Array.isArray(e)) {
+			if (Object.keys(e).length !== e.length || Object.getOwnPropertyNames(e).length !== e.length + 1) throw v("Native inventory contains a sparse or extended array.", !1);
+			return Array.from({ length: e.length }, (r, i) => {
+				let a = Object.getOwnPropertyDescriptor(e, String(i));
+				if (a === void 0 || !("value" in a)) throw v("Native inventory contains a sparse or accessor array.", !1);
+				return h(a.value, t, n + 1);
+			});
+		}
+		if (Object.getOwnPropertyNames(e).length !== Object.keys(e).length) throw v("Native inventory contains non-enumerable fields.", !1);
+		return Object.fromEntries(Object.keys(e).map((r) => {
+			if (!r.isWellFormed()) throw v("Native inventory contains a malformed field.", !1);
+			let i = Object.getOwnPropertyDescriptor(e, r);
+			if (i === void 0 || !("value" in i)) throw v("Native inventory contains an accessor field.", !1);
+			return [r, h(i.value, t, n + 1)];
+		}));
+	} finally {
+		t.delete(e);
+	}
+}, g = (e) => _(r(e)), _ = (e) => s("sha256").update(e, "utf8").digest("hex"), v = (t, n) => new e({
+	source: "billingCustodyInventory",
+	message: t,
+	transient: n
+});
+//#endregion
+export { c as BILLING_CUSTODY_INVENTORY_TABLES, l as inspectBillingCustody };

package/dist/customerStore.js

@@ -0,0 +1,259 @@
+import { BillingError as e } from "./types.js";
+import { captureProviderAccount as t, captureProviderCustomer as n, exactProviderIdentifier as r, sameProviderAccount as i } from "./providerIdentity.js";
+import { BILLING_CUSTODY_INVENTORY_TABLES as a } from "./custodyInventory.js";
+import { Effect as o } from "effect";
+import { and as s, eq as c, generateId as l, gt as u, id as d, integer as f, table as p, text as m, timestamp as h } from "@voltro/database";
+//#region src/customerStore.ts
+var g = "_voltro_billing_customer_accounts", _ = "_voltro_billing_customer_custody", v = p(g, {
+	id: d({ prefix: "bcacct" }),
+	tenantId: m().maxLength(191),
+	provider: m().maxLength(64),
+	providerAccountId: m().maxLength(191),
+	livemode: f()
+}).unique("byBillingCustomerAccountTenant", ["tenantId"]), y = p(_, {
+	id: d({ prefix: "bcustody" }),
+	tenantId: m().maxLength(191),
+	provider: m().maxLength(64),
+	providerAccountId: m().maxLength(191),
+	livemode: f(),
+	providerCustomerId: m().maxLength(191),
+	identityKey: m().maxLength(64),
+	slot: m().maxLength(191),
+	observedAt: h(),
+	retiredAt: h().nullable()
+}).unique("byBillingCustomerCustodyIdentity", ["identityKey"]).unique("byBillingCustomerCustodySlot", ["tenantId", "slot"]).index("byBillingCustomerCustodyInventory", [
+	"provider",
+	"providerAccountId",
+	"livemode",
+	"id"
+]), b = () => new e({
+	source: "customerStore",
+	message: "Billing customer custody or retained unqualified history requires reconciliation.",
+	transient: !0
+}), x = (e, t) => {
+	let n = l({
+		kind: "typeid",
+		prefix: t
+	}, e);
+	if (typeof n != "string" || n.length === 0) throw b();
+	return n;
+}, S = (e) => {
+	if (!r(e.provider) || e.provider.length > 64) throw b();
+	let n = t(e.account);
+	if (n.providerAccountId.length > 191) throw b();
+	return Object.freeze({
+		provider: e.provider,
+		account: n
+	});
+}, C = (e) => {
+	if (!r(e) || e.length > 191) throw b();
+	return e;
+}, w = (e, t) => e.provider === t.provider && i(e.account, t.account), T = (e, t) => {
+	if (!w(e, t)) throw b();
+}, E = (e) => {
+	let t = S(e);
+	if (!r(e.providerCustomerId) || e.providerCustomerId.length > 191) throw b();
+	return Object.freeze({
+		...t,
+		tenantId: C(e.tenantId),
+		providerCustomerId: e.providerCustomerId
+	});
+}, D = async (e) => {
+	let t = await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(JSON.stringify([
+		"voltro.customer-custody.v1",
+		e.provider,
+		e.account.providerAccountId,
+		e.account.livemode,
+		e.providerCustomerId
+	])));
+	return [...new Uint8Array(t)].map((e) => e.toString(16).padStart(2, "0")).join("");
+}, O = (e, t, n) => ({
+	table: e,
+	predicate: t,
+	order: [],
+	take: n,
+	skip: void 0,
+	projection: void 0
+}), k = (t) => o.tryPromise({
+	try: t,
+	catch: (t) => t instanceof e ? t : b()
+}), A = (e) => {
+	if (e.livemode !== 0 && e.livemode !== 1 || !r(e.provider) || !r(e.providerAccountId)) throw b();
+	return S({
+		provider: e.provider,
+		account: {
+			providerAccountId: e.providerAccountId,
+			livemode: e.livemode === 1
+		}
+	});
+}, j = (e) => {
+	let t = e instanceof Date || typeof e == "string" || typeof e == "number" ? new Date(e) : /* @__PURE__ */ new Date(NaN);
+	if (!Number.isFinite(t.getTime())) throw b();
+	return t;
+}, M = (e) => {
+	let t = A(e), n = e.id, i = e.tenantId, a = e.providerCustomerId;
+	if (!r(n) || !r(i) || !r(a) || typeof e.identityKey != "string" || !/^[0-9a-f]{64}$/.test(e.identityKey)) throw b();
+	let o = e.retiredAt === null ? null : j(e.retiredAt);
+	if (j(e.observedAt), e.slot !== (o === null ? "current" : n)) throw b();
+	return {
+		...E({
+			...t,
+			tenantId: i,
+			providerCustomerId: a
+		}),
+		id: n,
+		retiredAt: o
+	};
+}, N = (e, t) => {
+	if (T(e, t), e.tenantId !== t.tenantId || e.providerCustomerId !== t.providerCustomerId) throw b();
+}, P = (e, t, n) => ({
+	id: x(_, "bcustody"),
+	tenantId: e.tenantId,
+	provider: e.provider,
+	providerAccountId: e.account.providerAccountId,
+	livemode: +!!e.account.livemode,
+	providerCustomerId: e.providerCustomerId,
+	identityKey: t,
+	slot: "current",
+	observedAt: n.observedAt,
+	retiredAt: null
+}), F = a, I = (e) => {
+	let t = async (t) => {
+		let n = await e.query(O(g, c("tenantId", C(t)), 2));
+		if (n.length > 1 || n[0] && (n[0].tenantId !== t || !r(n[0].id))) throw b();
+		return n[0] ? A(n[0]) : null;
+	}, a = async (t) => {
+		for (let n of F) if ((await e.query(O(n, c("tenantId", t), 1))).length) throw b();
+	}, o = async (n, r) => {
+		let i = await t(n);
+		if (i !== null) {
+			T(i, r);
+			return;
+		}
+		await a(n), await e.insertIgnore(g, {
+			id: x(g, "bcacct"),
+			tenantId: n,
+			provider: r.provider,
+			providerAccountId: r.account.providerAccountId,
+			livemode: +!!r.account.livemode
+		}, { conflictColumns: ["tenantId"] });
+		let o = await t(n);
+		if (o === null) throw b();
+		T(o, r);
+	}, l = async (e) => {
+		if (e.length > 1) throw b();
+		if (!e[0]) return null;
+		let n = M(e[0]);
+		if (await D(n) !== e[0].identityKey) throw b();
+		let r = await t(n.tenantId);
+		if (r === null) throw b();
+		return T(r, n), n;
+	}, d = async (t) => {
+		let n = await D(t), r = await l(await e.query(O(_, c("identityKey", n), 2)));
+		if (r !== null && await D(r) !== n || r === null && (await e.query(O("_voltro_billing_customers", s(c("provider", t.provider), c("providerCustomerId", t.providerCustomerId)), 1))).length) throw b();
+		return r;
+	};
+	return {
+		accountForTenant: (e) => k(() => t(e)),
+		assertAccount: (e, n) => k(async () => {
+			let r = S(n), i = C(e), o = await t(i);
+			return o === null ? (await a(i), !1) : (T(o, r), !0);
+		}),
+		reserveAccount: (e, t) => k(async () => {
+			let n = S(t);
+			await o(C(e), n);
+		}),
+		bind: (t, r) => k(async () => {
+			let a = E(t), s = n(r);
+			if (s.deleted || s.providerCustomerId !== a.providerCustomerId || !i(s.account, a.account)) throw b();
+			let c = await d(a);
+			if (c !== null) {
+				if (N(c, a), c.retiredAt !== null) throw b();
+				return c;
+			}
+			if (await f(a.tenantId) !== null) throw b();
+			await o(a.tenantId, a);
+			let l = P(a, await D(a), s);
+			await e.insertIgnore(_, l, { conflictColumns: ["identityKey"] });
+			let u = await d(a);
+			if (u === null || u.retiredAt !== null) throw b();
+			N(u, a);
+			let p = await f(a.tenantId);
+			if (p === null || p.id !== u.id) throw b();
+			return u;
+		}),
+		getByTenant: (e) => k(() => f(e)),
+		getByProviderCustomerId: (e, t) => k(async () => {
+			let n = S(t);
+			if (!r(e)) throw b();
+			return d({
+				...n,
+				tenantId: "lookup",
+				providerCustomerId: e
+			});
+		}),
+		inventory: (t, n) => k(async () => {
+			let i = S(t), a = n?.limit ?? 25, o = n?.afterCustodyId ?? null;
+			if (n?.afterCustodyId !== void 0 && typeof n.afterCustodyId != "string" || !Number.isInteger(a) || a < 1 || a > 100 || o !== null && (!r(o) || o.length > 191 || !o.isWellFormed()) || (await e.query(O("_voltro_billing_customers", void 0, 1))).length) throw b();
+			let d = s(c("provider", i.provider), c("providerAccountId", i.account.providerAccountId), c("livemode", +!!i.account.livemode));
+			if (o !== null) {
+				let t = await l(await e.query(O(_, s(d, c("id", o)), 2)));
+				if (t === null || t.id !== o) throw b();
+				T(t, i);
+			}
+			let f = await e.query({
+				...O(_, o === null ? d : s(d, u("id", o)), a + 1),
+				order: [{
+					column: "id",
+					direction: "asc"
+				}]
+			});
+			if (f.length > a + 1) throw b();
+			let p = [], m = o;
+			for (let e of f) {
+				let t = await l([e]);
+				if (t === null || m !== null && t.id <= m) throw b();
+				T(t, i), p.push(t), m = t.id;
+			}
+			return {
+				customers: p.slice(0, a),
+				nextCustodyId: p.length > a ? p[a - 1].id : null
+			};
+		}),
+		list: (t) => k(async () => {
+			let n = S(t);
+			if ((await e.query(O("_voltro_billing_customers", void 0, 1))).length) throw b();
+			let r = await e.query(O(_, s(c("provider", n.provider), c("providerAccountId", n.account.providerAccountId), c("livemode", +!!n.account.livemode), c("slot", "current")))), i = [];
+			for (let e of r) {
+				let t = await l([e]);
+				t && i.push(t);
+			}
+			return i;
+		}),
+		retire: (t, r) => k(async () => {
+			let a = S(t), o = n(r);
+			if (!o.deleted || !i(a.account, o.account)) throw b();
+			let l = {
+				...a,
+				tenantId: "lookup",
+				providerCustomerId: o.providerCustomerId
+			}, u = await d(l);
+			if (u === null || u.retiredAt !== null) return u;
+			let f = await D(u);
+			await e.updateMany(_, {
+				slot: u.id,
+				retiredAt: o.observedAt
+			}, { where: s(c("id", u.id), c("identityKey", f), c("slot", "current"), c("tenantId", u.tenantId), c("provider", a.provider), c("providerAccountId", a.account.providerAccountId), c("livemode", +!!a.account.livemode), c("providerCustomerId", o.providerCustomerId)) });
+			let p = await d(l);
+			if (p === null || p.id !== u.id || p.retiredAt === null) throw b();
+			return p;
+		})
+	};
+	async function f(n) {
+		let r = C(n), i = await l(await e.query(O(_, s(c("tenantId", r), c("slot", "current")), 2)));
+		if (i !== null && (i.tenantId !== r || i.retiredAt !== null)) throw b();
+		return i === null && await t(r) === null && await a(r), i;
+	}
+};
+//#endregion
+export { g as BILLING_CUSTOMER_ACCOUNTS_TABLE, _ as BILLING_CUSTOMER_CUSTODY_TABLE, v as billingCustomerAccountsTable, y as billingCustomerCustodyTable, I as dataStoreCustomerStore };