@voltro/plugin-billing 0.86.0 → 0.88.0

package/dist/invoiceStore.js

@@ -0,0 +1,132 @@
+import { BillingError as e } from "./types.js";
+import { decodeInvoiceSnapshot as t, encodeInvoiceSnapshot as n, invoiceSnapshotError as r } from "./invoiceSnapshot.js";
+import { Effect as i } from "effect";
+import { and as a, eq as o, id as s, integer as c, json as l, table as u, text as d, timestamp as f } from "@voltro/database";
+// src/invoiceStore.ts
+var p = "_voltro_billing_account_invoices", m = u("_voltro_billing_invoice_observations", {
+	id: s({ prefix: "binvobs" }),
+	tenantId: d(),
+	provider: d(),
+	providerInvoiceId: d(),
+	providerCustomerId: d(),
+	identityKey: d().maxLength(64),
+	revision: c(),
+	providerSnapshot: l().serverOnly(),
+	createdAt: f()
+}).index("byBillingInvoiceObservationTenant", ["tenantId"]).unique("byBillingInvoiceObservationIdentity", ["identityKey"]), h = u(p, {
+	id: s({ prefix: "binvobs" }),
+	tenantId: d(),
+	provider: d(),
+	providerAccountId: d().maxLength(191),
+	livemode: c(),
+	providerInvoiceId: d(),
+	providerCustomerId: d(),
+	identityKey: d().maxLength(64),
+	revision: c(),
+	providerSnapshot: l().serverOnly(),
+	createdAt: f()
+}).index("byBillingAccountInvoiceTenant", ["tenantId"]).unique("byBillingAccountInvoiceIdentity", ["identityKey"]), g = 2147483647, _ = (e) => typeof e == "string" && e.length > 0 && e.trim() === e, v = (e, t) => ({
+	table: p,
+	predicate: e,
+	order: [],
+	take: t,
+	skip: void 0,
+	projection: void 0
+}), y = (t) => i.tryPromise({
+	try: t,
+	catch: (t) => t instanceof e ? t : r("The native invoice observation could not be persisted or read.", !0)
+}), b = (e) => {
+	if (![
+		e.tenantId,
+		e.provider,
+		e.providerAccountId,
+		e.providerCustomerId,
+		e.providerInvoiceId
+	].every(_) || typeof e.livemode != "boolean") throw r("A valid customer-bound invoice identity is required.");
+	return Object.freeze({
+		tenantId: e.tenantId,
+		provider: e.provider,
+		providerAccountId: e.providerAccountId,
+		livemode: e.livemode,
+		providerCustomerId: e.providerCustomerId,
+		providerInvoiceId: e.providerInvoiceId
+	});
+}, x = async (e) => {
+	let t = await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(JSON.stringify([
+		"voltro.account-invoice-observation.v1",
+		e.provider,
+		e.providerAccountId,
+		e.livemode,
+		e.providerInvoiceId
+	])));
+	return [...new Uint8Array(t)].map((e) => e.toString(16).padStart(2, "0")).join("");
+}, S = (e, t) => e.tenantId === t.tenantId && e.provider === t.provider && e.providerAccountId === t.providerAccountId && e.livemode === t.livemode && e.providerCustomerId === t.providerCustomerId && e.providerInvoiceId === t.providerInvoiceId, C = (e, t) => {
+	if (!S(e, t)) throw r("The invoice is bound to a different tenant or billing customer.");
+}, w = (e) => {
+	let n = e.tenantId, i = e.provider, a = e.providerInvoiceId, o = e.providerAccountId, s = e.livemode, c = e.providerCustomerId, l = e.identityKey, u = e.revision, d = e.id;
+	if (!_(n) || !_(i) || !_(a) || !_(c) || !_(d) || !_(o) || s !== 0 && s !== 1 || typeof l != "string" || !/^[0-9a-f]{64}$/.test(l) || typeof u != "number" || !Number.isInteger(u) || u < 1 || u > g) throw r("The native invoice observation identity is invalid.");
+	let f = t(e.providerSnapshot);
+	if (f.providerCustomerId !== c || f.providerInvoiceId !== a || f.livemode !== (s === 1)) throw r("The stored observation has a different customer or invoice.");
+	return {
+		id: d,
+		tenantId: n,
+		provider: i,
+		providerAccountId: o,
+		livemode: s === 1,
+		providerInvoiceId: a,
+		providerCustomerId: c,
+		identityKey: l,
+		revision: u,
+		snapshot: f
+	};
+}, T = (e, t, i) => {
+	let a = b(e), o = t === null ? null : Object.freeze({
+		...t,
+		...b(t)
+	});
+	if (o !== null && (C(o, a), !_(o.id) || !/^[0-9a-f]{64}$/.test(o.identityKey) || !Number.isInteger(o.revision) || o.revision < 1 || o.revision >= g)) throw r("The expected native invoice revision is invalid or exhausted.");
+	if (i.providerInvoiceId !== a.providerInvoiceId || i.providerCustomerId !== a.providerCustomerId || i.livemode !== a.livemode) throw r("The complete invoice must match the confirmed customer binding.");
+	return {
+		owner: a,
+		previous: o,
+		providerSnapshot: n(i)
+	};
+}, E = (e) => {
+	let t = async (t) => {
+		let n = await e.query(v(o("identityKey", t), 2));
+		if (n.length > 1) throw r("The native invoice identity is not unique.");
+		let i = n[0] ? w(n[0]) : null;
+		if (i !== null && (i.identityKey !== t || await x(i) !== t)) throw r("The native invoice identity digest could not be confirmed.");
+		return i;
+	};
+	return {
+		get: (e) => y(async () => {
+			let n = b(e), r = await t(await x(n));
+			return r !== null && C(r, n), r;
+		}),
+		complete: (n, i, s) => y(async () => {
+			let { owner: c, previous: l, providerSnapshot: u } = T(n, i, s), d = await x(c);
+			if (l === null) {
+				let n = "binvobs_" + globalThis.crypto.randomUUID();
+				await e.insertIgnore(p, {
+					id: n,
+					...c,
+					livemode: +!!c.livemode,
+					identityKey: d,
+					revision: 1,
+					providerSnapshot: u,
+					createdAt: /* @__PURE__ */ new Date()
+				}, { conflictColumns: ["identityKey"] });
+				let i = await t(d);
+				if (i === null) throw r("The persisted invoice observation could not be confirmed.", !0);
+				return C(i, c), i.id === n;
+			}
+			if (d !== l.identityKey) throw r("The expected invoice identity digest is invalid.");
+			return await e.updateMany(p, {
+				providerSnapshot: u,
+				revision: l.revision + 1
+			}, { where: a(o("id", l.id), o("identityKey", d), o("revision", l.revision), o("tenantId", c.tenantId), o("provider", c.provider), o("providerAccountId", c.providerAccountId), o("livemode", +!!c.livemode), o("providerCustomerId", c.providerCustomerId), o("providerInvoiceId", c.providerInvoiceId)) }) === 1;
+		})
+	};
+};
+export { p as BILLING_INVOICE_OBSERVATIONS_TABLE, h as billingInvoiceObservationsTable, m as billingRetainedInvoiceObservationsTable, E as dataStoreInvoiceStore };

package/dist/metering.js

@@ -1,7 +1,7 @@
 import { periodKey as e } from "./service.js";
 import { Effect as t } from "effect";
 import { OccurrenceCounter as n, changeDigest as r, composeChangeKey as i, gte as a, occurrenceWindowMs as o } from "@voltro/database";
-//#region src/metering.ts
+// src/metering.ts
 var s = "_voltro_ai_usage", c = (e) => {
 	for (let [t, n] of Object.entries(e)) {
 		if (t.length === 0) throw Error("billing metering: a meter key must be non-empty");
@@ -70,5 +70,4 @@ var s = "_voltro_ai_usage", c = (e) => {
 		s > 0 && (yield* n.reportUsage(i, e, s).pipe(t.catch(() => t.void)));
 	}
 }), C = (e, n, r, i) => S(e, n, r, i).pipe(t.andThen(e.flushUsage().pipe(t.catch(() => t.void)))), w = (e) => Object.values(e).some((e) => e.from === "cdc");
-//#endregion
 export { v as METERING_CLAIM_SCOPE, b as buildMeteringChangeTap, _ as buildMeteringInterceptor, p as cdcMetersFor, w as hasCdcMeters, S as reconcileAiMeters, f as rpcMetersFor, C as runAutopilotFlush, c as validateMeteringConfig };

package/dist/plans.js

@@ -1,5 +1,5 @@
 import { DEFAULT_PLAN as e } from "./types.js";
-//#region src/plans.ts
+// src/plans.ts
 var t = (e) => e === void 0 ? 0 : e === "unlimited" ? Infinity : e, n = (e) => {
 	let n = /* @__PURE__ */ new Map();
 	for (let [t, r] of Object.entries(e)) r.priceId !== void 0 && n.set(r.priceId, t);
@@ -20,5 +20,4 @@ var t = (e) => e === void 0 ? 0 : e === "unlimited" ? Infinity : e, n = (e) => {
 		planIds: () => Object.keys(e)
 	};
 }, r = () => n({ [e]: { entitlements: {} } });
-//#endregion
 export { n as buildPlanRegistry, r as emptyPlanRegistry };

package/dist/providerIdentity.js

@@ -0,0 +1,23 @@
+import { BillingError as e } from "./types.js";
+// src/providerIdentity.ts
+var t = () => new e({
+	source: "providerIdentity",
+	message: "The provider account or customer observation could not be confirmed.",
+	transient: !0
+}), n = (e) => typeof e == "string" && e.length > 0 && e.trim() === e, r = (e) => {
+	if (!n(e.providerAccountId) || typeof e.livemode != "boolean") throw t();
+	return Object.freeze({
+		providerAccountId: e.providerAccountId,
+		livemode: e.livemode
+	});
+}, i = (e, t) => e.providerAccountId === t.providerAccountId && e.livemode === t.livemode, a = (e) => {
+	let i = r(e.account);
+	if (!n(e.providerCustomerId) || typeof e.deleted != "boolean" || !(e.observedAt instanceof Date) || !Number.isFinite(e.observedAt.getTime())) throw t();
+	return {
+		account: i,
+		providerCustomerId: e.providerCustomerId,
+		deleted: e.deleted,
+		observedAt: new Date(e.observedAt)
+	};
+};
+export { r as captureProviderAccount, a as captureProviderCustomer, n as exactProviderIdentifier, t as providerIdentityError, i as sameProviderAccount };

package/dist/providers.js

@@ -1,10 +1,41 @@
-import { STRIPE_WEBHOOK_EVENTS as e, normalizeStripeEvent as t, stripeProvider as n } from "./stripeProvider.js";
-import { Effect as r } from "effect";
-//#region src/providers.ts
-var i = (e) => {
-	let t = e?.baseUrl ?? "https://mock.billing.local", n = [], i = [], a = [], o = /* @__PURE__ */ new Map(), s = /* @__PURE__ */ new Map(), c = /* @__PURE__ */ new Map(), l = [], u = [], d = [], f = [], p = [], m = [], h = /* @__PURE__ */ new Map(), g = [], _ = 0, v = (e, t) => {
+import { BillingError as e } from "./types.js";
+import { captureProviderAccount as t, captureProviderCustomer as n, providerIdentityError as r, sameProviderAccount as i } from "./providerIdentity.js";
+import { decodeInvoiceSnapshot as a, encodeInvoiceSnapshot as o, invoiceSnapshotError as s } from "./invoiceSnapshot.js";
+import { captureInvoiceHistoryInput as c, captureInvoiceHistoryPage as l, historyError as u, invoiceHistoryPreview as d } from "./invoiceHistory.js";
+import { STRIPE_WEBHOOK_EVENTS as f, normalizeStripeEvent as p, stripeProvider as m } from "./stripeProvider.js";
+import { Effect as h } from "effect";
+// src/providers.ts
+var g = (f) => {
+	let p = t({
+		providerAccountId: f?.accountId ?? "mock_" + globalThis.crypto.randomUUID(),
+		livemode: !1
+	}), m = /* @__PURE__ */ new Map(), g = 0, _ = f?.baseUrl ?? "https://mock.billing.local", v = [], y = [], b = [], x = /* @__PURE__ */ new Map(), S = /* @__PURE__ */ new Map(), C = /* @__PURE__ */ new Map(), w = /* @__PURE__ */ new Map(), T = [], E = (t) => h.try({
+		try: () => {
+			let e = c(t);
+			if (!i(e.account, p)) throw u("The mock invoice history account differs.");
+			let n = T.filter((t) => t.providerCustomerId === e.providerCustomerId).slice().sort((e, t) => t.createdAt.getTime() - e.createdAt.getTime() || (e.providerInvoiceId < t.providerInvoiceId ? 1 : e.providerInvoiceId > t.providerInvoiceId ? -1 : 0)), r = e.cursor === void 0 ? -1 : n.findIndex((t) => t.providerInvoiceId === e.cursor?.afterInvoiceId);
+			if (e.cursor !== void 0 && r < 0) throw u("The mock invoice cursor does not belong to this customer.");
+			let a = n.slice(r + 1, r + 1 + e.limit), o = a[a.length - 1];
+			return l(e, {
+				account: p,
+				providerCustomerId: e.providerCustomerId,
+				invoices: a,
+				nextCursor: r + 1 + a.length < n.length && o !== void 0 ? {
+					...p,
+					providerCustomerId: e.providerCustomerId,
+					afterInvoiceId: o.providerInvoiceId
+				} : null,
+				observedAt: j()
+			});
+		},
+		catch: (t) => t instanceof e ? t : u()
+	}), D = [], O = [], k = [], A = [], j = f?.now ?? (() => /* @__PURE__ */ new Date()), M = /* @__PURE__ */ new Map(), N = (e) => e.status === "open" && e.expiresAt.getTime() <= j().getTime() ? {
+		...e,
+		status: "expired",
+		url: null
+	} : e, P = [], F = [], I = /* @__PURE__ */ new Map(), L = [], R = 0, z = (e, t) => {
 		let n = {
-			...o.get(e) ?? {
+			...x.get(e) ?? {
 				status: "active",
 				plan: null,
 				quantity: 1,
@@ -14,72 +45,241 @@ var i = (e) => {
 			},
 			...t
 		};
-		o.set(e, n);
-		let r = s.get(e);
-		return r !== void 0 && s.set(e, {
+		x.set(e, n);
+		let r = S.get(e);
+		return r !== void 0 && S.set(e, {
 			...r,
 			...t
 		}), n;
-	}, y = (e) => typeof e == "object" && !!e && typeof e._tag == "string";
+	}, B = (e) => typeof e == "object" && !!e && typeof e._tag == "string";
 	return {
 		name: "mock",
-		supportsMeteredUsage: e?.supportsMeteredUsage ?? !0,
-		pushed: n,
-		updates: i,
-		fetched: a,
-		cancels: l,
-		resumes: u,
-		priceAdds: d,
-		checkouts: f,
-		customersCreated: p,
-		expiredFor: m,
+		fetchAccountIdentity: () => h.succeed(t(p)),
+		fetchCustomerSnapshot: (e) => h.try({
+			try: () => {
+				let a = t(e.account);
+				if (!i(a, p)) throw r();
+				let o = m.get(e.providerCustomerId);
+				if (o === void 0) throw r();
+				return n({
+					...o,
+					observedAt: j()
+				});
+			},
+			catch: () => r()
+		}),
+		setCustomerSnapshot: (e) => {
+			let t = n(e);
+			if (!i(t.account, p)) throw r();
+			m.set(t.providerCustomerId, t);
+		},
+		setInvoiceHistory: (e) => {
+			if (!Array.isArray(e) || Object.keys(e).length !== e.length) throw u("The mock invoice history must be complete and dense.");
+			let t = /* @__PURE__ */ new Set(), n = e.map((e) => {
+				if (t.has(e.providerInvoiceId)) throw u("The mock invoice history contains duplicate identities.");
+				t.add(e.providerInvoiceId);
+				let n = c({
+					account: p,
+					providerCustomerId: e.providerCustomerId,
+					limit: 1
+				}), r = l(n, {
+					account: p,
+					providerCustomerId: e.providerCustomerId,
+					invoices: [e],
+					nextCursor: null,
+					observedAt: j()
+				}).invoices[0];
+				if (r === void 0) throw u();
+				return r;
+			});
+			T = Object.freeze(n);
+		},
+		setInvoiceSnapshot: (e) => {
+			let t = o(e);
+			w.set(e.providerInvoiceId, {
+				customerId: e.providerCustomerId,
+				encoded: t
+			});
+		},
+		fetchInvoiceSnapshot: (t) => h.try({
+			try: () => {
+				let e = w.get(t.providerInvoiceId);
+				if (e === void 0) throw s("The mock provider has no detailed invoice evidence.");
+				if (e.customerId !== t.providerCustomerId) throw s("The invoice belongs to a different mock billing customer.");
+				return a(e.encoded);
+			},
+			catch: (t) => t instanceof e ? t : s("The mock invoice observation is invalid.")
+		}),
+		supportsMeteredUsage: f?.supportsMeteredUsage ?? !0,
+		pushed: v,
+		updates: y,
+		fetched: b,
+		cancels: D,
+		resumes: O,
+		priceAdds: k,
+		checkouts: A,
+		customersCreated: P,
+		expiredFor: F,
 		setUndelivered: (e) => {
-			g = e;
+			L = structuredClone(e);
 		},
-		undeliveredReads: () => _,
-		listUndeliveredEvents: () => r.sync(() => (_ += 1, g)),
-		ensureCustomer: (e) => r.sync(() => {
-			let t = h.get(e.tenantId);
-			if (t !== void 0) return t;
-			let n = `mock_cus_${e.tenantId}`;
-			return h.set(e.tenantId, n), p.push(e.tenantId), n;
+		undeliveredReads: () => R,
+		listUndeliveredEvents: (t) => h.try({
+			try: () => {
+				if (R += 1, !Number.isInteger(t.limit) || t.limit < 1 || t.limit > 100) throw Error("Invalid event page size.");
+				let e = t.cursor === null ? 0 : L.findIndex((e) => e.id === t.cursor) + 1;
+				if (t.cursor !== null && e === 0) throw Error("Unknown event cursor.");
+				let n = structuredClone(L.slice(e, e + t.limit));
+				return {
+					events: n,
+					nextCursor: e + n.length < L.length ? n.at(-1)?.id ?? null : null
+				};
+			},
+			catch: () => new e({
+				source: "mock.events.list",
+				message: "The event page could not be read.",
+				transient: !1
+			})
+		}),
+		ensureCustomer: (e) => h.sync(() => {
+			let t = I.get(e.tenantId);
+			if (t !== void 0 && m.get(t)?.deleted === !1) return t;
+			let r = `mock_cus_${e.tenantId}`, i = t === void 0 ? r : `${r}_${++g}`, a = n({
+				account: p,
+				providerCustomerId: i,
+				deleted: !1,
+				observedAt: j()
+			});
+			return I.set(e.tenantId, i), m.set(i, a), P.push(e.tenantId), i;
+		}),
+		expireOpenCheckouts: (e) => h.sync(() => {
+			F.push(e.providerCustomerId);
+			let t = 0;
+			for (let [n, r] of M) r.receipt.providerCustomerId === e.providerCustomerId && n !== e.exceptOperationId && N(r.receipt).status === "open" && (r.receipt = {
+				...r.receipt,
+				status: "expired",
+				url: null
+			}, t++);
+			return t;
 		}),
-		expireOpenCheckouts: (e) => r.sync(() => (m.push(e.providerCustomerId), 0)),
 		listSubscription: (e) => {
-			s.set(e.providerSubscriptionId, e), o.set(e.providerSubscriptionId, e);
+			S.set(e.providerSubscriptionId, e), x.set(e.providerSubscriptionId, e);
 		},
 		setSubscription: (e, t) => {
-			t === null ? o.delete(e) : o.set(e, t);
+			t === null ? x.delete(e) : x.set(e, t);
 		},
 		setCustomerEmail: (e, t) => {
-			t === null ? c.delete(e) : c.set(e, t);
+			t === null ? C.delete(e) : C.set(e, t);
 		},
-		fetchSubscription: (e) => r.sync(() => (a.push(e), o.get(e) ?? null)),
-		listSubscriptions: (e) => r.sync(() => [...s.values()].filter((t) => t.status !== "canceled" && (e.providerCustomerId === void 0 || t.providerCustomerId === e.providerCustomerId))),
-		cancelSubscription: (e) => r.sync(() => {
-			l.push({
-				providerSubscriptionId: e.providerSubscriptionId,
-				mode: e.mode
-			});
-			let t = o.get(e.providerSubscriptionId);
-			return e.mode === "close" ? v(e.providerSubscriptionId, { cancelAt: new Date(Date.now() + 6e5) }) : v(e.providerSubscriptionId, { cancelAt: t?.currentPeriodEnd ?? /* @__PURE__ */ new Date(0) });
+		fetchSubscriptionSnapshot: (e) => h.sync(() => {
+			b.push(e);
+			let t = S.get(e), n = x.get(e);
+			return t === void 0 || n === void 0 ? null : {
+				...t,
+				...n
+			};
 		}),
-		resumeSubscription: (e) => r.sync(() => (u.push(e), v(e, { cancelAt: null }))),
-		addSubscriptionPrices: (e) => r.sync(() => {
-			d.push({
+		fetchSubscription: (e) => h.sync(() => (b.push(e), x.get(e) ?? null)),
+		listSubscriptions: (e) => h.sync(() => [...S.values()].filter((t) => t.status !== "canceled" && (e.providerCustomerId === void 0 || t.providerCustomerId === e.providerCustomerId))),
+		prepareSubscriptionClose: () => h.sync(() => ({ cancelAt: /* @__PURE__ */ new Date(Math.ceil(j().getTime() / 1e3) * 1e3 + 6e5) })),
+		cancelSubscription: (t) => h.try({
+			try: () => {
+				D.push({
+					providerSubscriptionId: t.providerSubscriptionId,
+					mode: t.mode
+				});
+				let e = x.get(t.providerSubscriptionId);
+				if (e?.status === "canceled") return e;
+				if (t.mode === "periodEnd") return z(t.providerSubscriptionId, { cancelAt: e?.currentPeriodEnd ?? /* @__PURE__ */ new Date(0) });
+				let n = t.closeOperation.cancelAt;
+				if (!t.closeOperation.id || !Number.isFinite(n.getTime())) throw Error("A retained close operation is required.");
+				return e?.cancelAt !== null && e?.cancelAt !== void 0 && e.cancelAt.getTime() <= n.getTime() ? e : z(t.providerSubscriptionId, {
+					cancelAt: n,
+					...j().getTime() >= n.getTime() ? { status: "canceled" } : {}
+				});
+			},
+			catch: () => new e({
+				source: "mock",
+				message: "A valid retained billing close operation is required.",
+				transient: !1
+			})
+		}),
+		resumeSubscription: (e) => h.sync(() => (O.push(e), z(e, { cancelAt: null }))),
+		addSubscriptionPrices: (e) => h.sync(() => {
+			k.push({
 				providerSubscriptionId: e.providerSubscriptionId,
 				priceIds: e.priceIds
 			});
-			let t = s.get(e.providerSubscriptionId);
-			t !== void 0 && v(e.providerSubscriptionId, { priceIds: [...t.priceIds, ...e.priceIds] });
+			let t = S.get(e.providerSubscriptionId);
+			t !== void 0 && z(e.providerSubscriptionId, { priceIds: [...t.priceIds, ...e.priceIds] });
+		}),
+		customerEmail: (e) => h.sync(() => C.get(e) ?? null),
+		createCheckoutSession: (t) => h.try({
+			try: () => {
+				let e = t.idempotencyKey ?? "mock_checkout_" + globalThis.crypto.randomUUID(), n = JSON.stringify([
+					t.tenantId,
+					t.priceId,
+					t.meteredPriceIds ?? [],
+					t.successUrl,
+					t.cancelUrl,
+					t.providerCustomerId ?? null,
+					t.quantity ?? 1,
+					t.adjustableQuantity ?? null,
+					t.trialDays ?? null,
+					t.expiresAt?.toISOString() ?? null
+				]), r = M.get(e);
+				if (r) {
+					if (r.fingerprint !== n) throw Error("A checkout operation cannot change its provider parameters.");
+					return N(r.receipt);
+				}
+				let i = t.expiresAt ?? new Date(j().getTime() + 36e5);
+				if (!Number.isFinite(i.getTime()) || i.getTime() <= j().getTime()) throw Error("Checkout deadline has passed.");
+				let a = {
+					id: "mock_cs_" + e,
+					operationId: t.idempotencyKey ?? null,
+					tenantId: t.tenantId,
+					providerCustomerId: t.providerCustomerId ?? null,
+					providerSubscriptionId: null,
+					status: "open",
+					expiresAt: i,
+					url: _ + "/checkout?tenant=" + encodeURIComponent(t.tenantId) + "&price=" + encodeURIComponent(t.priceId) + "&operation=" + encodeURIComponent(e)
+				};
+				return M.set(e, {
+					fingerprint: n,
+					receipt: a
+				}), A.push(t), a;
+			},
+			catch: () => new e({
+				source: "mock",
+				message: "Checkout identity, parameters or deadline could not be confirmed.",
+				transient: !1
+			})
+		}),
+		findCheckoutSession: (t) => h.try({
+			try: () => {
+				let e = M.get(t.operationId);
+				if (!e) return {
+					receipt: null,
+					observedAt: j()
+				};
+				let n = N(e.receipt);
+				if (n.tenantId !== t.tenantId || t.providerCustomerId !== void 0 && n.providerCustomerId !== t.providerCustomerId) throw Error("Checkout receipt owner mismatch.");
+				return {
+					receipt: n,
+					observedAt: j()
+				};
+			},
+			catch: () => new e({
+				source: "mock",
+				message: "Checkout receipt authority could not be confirmed.",
+				transient: !1
+			})
 		}),
-		customerEmail: (e) => r.sync(() => c.get(e) ?? null),
-		createCheckoutSession: (e) => r.sync(() => (f.push(e), { url: `${t}/checkout?tenant=${encodeURIComponent(e.tenantId)}&price=${encodeURIComponent(e.priceId)}` })),
-		createPortalSession: (e) => r.succeed({ url: `${t}/portal?customer=${encodeURIComponent(e.providerCustomerId)}` }),
-		reportUsage: (e) => r.sync(() => {
-			n.push(e);
+		createPortalSession: (e) => h.succeed({ url: `${_}/portal?customer=${encodeURIComponent(e.providerCustomerId)}` }),
+		reportUsage: (e) => h.sync(() => {
+			v.push(e);
 		}),
-		updateSubscription: (e) => r.sync(() => (i.push(e), {
+		updateSubscription: (e) => h.sync(() => (y.push(e), {
 			plan: e.priceId ?? "mock-plan",
 			quantity: e.quantity ?? 1,
 			prorationMinor: 0,
@@ -87,7 +287,7 @@ var i = (e) => {
 			currentPeriodStart: null,
 			currentPeriodEnd: null
 		})),
-		previewSubscriptionChange: (e) => r.succeed({
+		previewSubscriptionChange: (e) => h.succeed({
 			plan: e.priceId ?? "mock-plan",
 			quantity: e.quantity ?? 1,
 			prorationMinor: 0,
@@ -95,39 +295,43 @@ var i = (e) => {
 			currentPeriodStart: null,
 			currentPeriodEnd: null
 		}),
-		listInvoices: () => r.succeed([]),
-		normalizeEvent: (e) => r.succeed(y(e) ? e : null)
+		listInvoiceHistory: E,
+		listInvoices: (e) => E({
+			account: p,
+			providerCustomerId: e.providerCustomerId,
+			limit: e.limit ?? 20
+		}).pipe(h.map((e) => e.invoices.map(d))),
+		normalizeEvent: (e) => h.succeed(B(e) ? e : null)
 	};
-}, a = /* @__PURE__ */ new Set([
+}, _ = /* @__PURE__ */ new Set([
 	"",
 	"development",
 	"dev",
 	"test"
-]), o = (e) => !a.has((e ?? "").trim().toLowerCase()), s = (e) => {
-	if (o(e.env.NODE_ENV)) {
+]), v = (e) => !_.has((e ?? "").trim().toLowerCase()), y = (e) => {
+	if (v(e.env.NODE_ENV)) {
 		if (e.resolvedName === "mock" && e.providerOption === void 0) throw Error("billingPlugin: no STRIPE_SECRET_KEY in a production boot — refusing to run the MOCK billing provider, which answers every charge and subscription call successfully and reaches nobody. Set STRIPE_SECRET_KEY, or declare `billingPlugin({ provider: 'mock' })` if this deployment does not sell.");
 		if (e.resolvedName === "stripe") {
 			if (e.webhookSecret === null || e.webhookSecret.trim() === "") throw Error("billingPlugin: Stripe in a production boot needs STRIPE_WEBHOOK_SECRET — without it no provider event can be verified, so subscriptions, cancellations and payments would never reach this app.");
 			if (e.redirectOrigins === void 0 || e.redirectOrigins.length === 0) throw Error("billingPlugin: Stripe in a production boot needs `redirectOrigins` — the origins checkout and the customer portal may send a customer back to. Without it any URL a caller names is accepted.");
 		}
 	}
-}, c = (e) => {
-	let { provider: t, env: r } = e;
+}, b = (e) => {
+	let { provider: t, env: n } = e;
 	if (t !== void 0 && typeof t == "object") return t;
-	if ((t ?? (r.STRIPE_SECRET_KEY ? "stripe" : "mock")) === "stripe") {
-		let t = e.apiKey ?? r.STRIPE_SECRET_KEY;
+	if ((t ?? (n.STRIPE_SECRET_KEY ? "stripe" : "mock")) === "stripe") {
+		let t = e.apiKey ?? n.STRIPE_SECRET_KEY;
 		if (!t) throw Error("billingPlugin: provider 'stripe' needs an apiKey (option or STRIPE_SECRET_KEY env)");
-		return n({
+		return m({
 			apiKey: t,
 			...e.planForPriceId ? { planForPriceId: e.planForPriceId } : {}
 		});
 	}
-	return i();
-}, l = (e) => e.name === "mock" ? [] : [{
+	return g();
+}, x = (e) => e.name === "mock" ? [] : [{
 	destination: e.name === "stripe" ? "api.stripe.com" : `runtime:the '${e.name}' billing provider`,
 	purpose: "customers, subscriptions, checkout and metered usage",
 	data: ["personal", "metadata"],
 	disable: "without STRIPE_SECRET_KEY the mock provider answers, and nothing leaves (production refuses to boot on it)"
 }];
-//#endregion
-export { e as STRIPE_WEBHOOK_EVENTS, s as assertBillingProductionReady, l as billingEgressOf, o as isProductionBoot, i as mockProvider, t as normalizeStripeEvent, c as resolveProvider, n as stripeProvider };
+export { f as STRIPE_WEBHOOK_EVENTS, y as assertBillingProductionReady, x as billingEgressOf, v as isProductionBoot, g as mockProvider, p as normalizeStripeEvent, b as resolveProvider, m as stripeProvider };

package/dist/provision.js

@@ -3,7 +3,7 @@ import { redactStripeKeys as s, stripeRest as c } from "./stripeRest.js";
 import { execFileSync as l } from "node:child_process";
 import { chmodSync as u, existsSync as d, readFileSync as f, realpathSync as p, writeFileSync as m } from "node:fs";
 import { dirname as h, resolve as g } from "node:path";
-//#region src/provision.ts
+// src/provision.ts
 var _ = (e) => e.filter((e) => e.applied !== !0 && (e.kind === "create" || e.kind === "update" || e.kind === "adopt" || e.kind === "drift")), v = async (s, c, l) => {
 	let u = c.environments[l.env], d = await s.get("/v1/tax/settings"), f = l.env === "live";
 	if (d.livemode !== f) throw Error(`the key reaches a ${d.livemode ? "LIVE" : "test"} account, not ${l.env}`);
@@ -149,5 +149,4 @@ var _ = (e) => e.filter((e) => e.applied !== !0 && (e.kind === "create" || e.kin
 	let p = _(l.findings), h = l.findings.filter((e) => e.kind === "manual");
 	return console.log(`  ${p.length} open, ${h.length} manual`), p.length > 0 || a.strict && h.length > 0 ? 1 : 0;
 };
-//#endregion
 export { x as envOutRefusal, y as mergeEnvFile, _ as openFindings, S as parseProvisionArgs, v as provisionStripeCatalog, C as resolveProvisionKey, T as runStripeProvision };

package/dist/rpc.js

@@ -1,7 +1,7 @@
 import { BillingError as e } from "./types.js";
 import { Schema as t } from "effect";
 import { defineAction as n, defineQuery as r } from "@voltro/protocol";
-//#region src/rpc.ts
+// src/rpc.ts
 var i = n({
 	name: "billing.startCheckout",
 	input: t.Struct({
@@ -211,5 +211,4 @@ var i = n({
 		}
 	}
 ];
-//#endregion
 export { v as billingRpcClientImports, h as cancelSubscriptionDescriptor, p as changePlanDescriptor, m as changeSeatsDescriptor, c as entitlementStatusDescriptor, f as invoicesDescriptor, a as portalUrlDescriptor, d as previewChangeDescriptor, l as reportUsageDescriptor, _ as resumeSubscriptionDescriptor, i as startCheckoutDescriptor, s as subscriptionDescriptor, g as syncDescriptor };