@voltro/plugin-billing 0.86.0 → 0.88.0

package/dist/customerStore.js

@@ -0,0 +1,258 @@
+import { BillingError as e } from "./types.js";
+import { captureProviderAccount as t, captureProviderCustomer as n, exactProviderIdentifier as r, sameProviderAccount as i } from "./providerIdentity.js";
+import { BILLING_CUSTODY_INVENTORY_TABLES as a } from "./custodyInventory.js";
+import { Effect as o } from "effect";
+import { and as s, eq as c, generateId as l, gt as u, id as d, integer as f, table as p, text as m, timestamp as h } from "@voltro/database";
+// src/customerStore.ts
+var g = "_voltro_billing_customer_accounts", _ = "_voltro_billing_customer_custody", v = p(g, {
+	id: d({ prefix: "bcacct" }),
+	tenantId: m().maxLength(191),
+	provider: m().maxLength(64),
+	providerAccountId: m().maxLength(191),
+	livemode: f()
+}).unique("byBillingCustomerAccountTenant", ["tenantId"]), y = p(_, {
+	id: d({ prefix: "bcustody" }),
+	tenantId: m().maxLength(191),
+	provider: m().maxLength(64),
+	providerAccountId: m().maxLength(191),
+	livemode: f(),
+	providerCustomerId: m().maxLength(191),
+	identityKey: m().maxLength(64),
+	slot: m().maxLength(191),
+	observedAt: h(),
+	retiredAt: h().nullable()
+}).unique("byBillingCustomerCustodyIdentity", ["identityKey"]).unique("byBillingCustomerCustodySlot", ["tenantId", "slot"]).index("byBillingCustomerCustodyInventory", [
+	"provider",
+	"providerAccountId",
+	"livemode",
+	"id"
+]), b = () => new e({
+	source: "customerStore",
+	message: "Billing customer custody or retained unqualified history requires reconciliation.",
+	transient: !0
+}), x = (e, t) => {
+	let n = l({
+		kind: "typeid",
+		prefix: t
+	}, e);
+	if (typeof n != "string" || n.length === 0) throw b();
+	return n;
+}, S = (e) => {
+	if (!r(e.provider) || e.provider.length > 64) throw b();
+	let n = t(e.account);
+	if (n.providerAccountId.length > 191) throw b();
+	return Object.freeze({
+		provider: e.provider,
+		account: n
+	});
+}, C = (e) => {
+	if (!r(e) || e.length > 191) throw b();
+	return e;
+}, w = (e, t) => e.provider === t.provider && i(e.account, t.account), T = (e, t) => {
+	if (!w(e, t)) throw b();
+}, E = (e) => {
+	let t = S(e);
+	if (!r(e.providerCustomerId) || e.providerCustomerId.length > 191) throw b();
+	return Object.freeze({
+		...t,
+		tenantId: C(e.tenantId),
+		providerCustomerId: e.providerCustomerId
+	});
+}, D = async (e) => {
+	let t = await globalThis.crypto.subtle.digest("SHA-256", new TextEncoder().encode(JSON.stringify([
+		"voltro.customer-custody.v1",
+		e.provider,
+		e.account.providerAccountId,
+		e.account.livemode,
+		e.providerCustomerId
+	])));
+	return [...new Uint8Array(t)].map((e) => e.toString(16).padStart(2, "0")).join("");
+}, O = (e, t, n) => ({
+	table: e,
+	predicate: t,
+	order: [],
+	take: n,
+	skip: void 0,
+	projection: void 0
+}), k = (t) => o.tryPromise({
+	try: t,
+	catch: (t) => t instanceof e ? t : b()
+}), A = (e) => {
+	if (e.livemode !== 0 && e.livemode !== 1 || !r(e.provider) || !r(e.providerAccountId)) throw b();
+	return S({
+		provider: e.provider,
+		account: {
+			providerAccountId: e.providerAccountId,
+			livemode: e.livemode === 1
+		}
+	});
+}, j = (e) => {
+	let t = e instanceof Date || typeof e == "string" || typeof e == "number" ? new Date(e) : /* @__PURE__ */ new Date(NaN);
+	if (!Number.isFinite(t.getTime())) throw b();
+	return t;
+}, M = (e) => {
+	let t = A(e), n = e.id, i = e.tenantId, a = e.providerCustomerId;
+	if (!r(n) || !r(i) || !r(a) || typeof e.identityKey != "string" || !/^[0-9a-f]{64}$/.test(e.identityKey)) throw b();
+	let o = e.retiredAt === null ? null : j(e.retiredAt);
+	if (j(e.observedAt), e.slot !== (o === null ? "current" : n)) throw b();
+	return {
+		...E({
+			...t,
+			tenantId: i,
+			providerCustomerId: a
+		}),
+		id: n,
+		retiredAt: o
+	};
+}, N = (e, t) => {
+	if (T(e, t), e.tenantId !== t.tenantId || e.providerCustomerId !== t.providerCustomerId) throw b();
+}, P = (e, t, n) => ({
+	id: x(_, "bcustody"),
+	tenantId: e.tenantId,
+	provider: e.provider,
+	providerAccountId: e.account.providerAccountId,
+	livemode: +!!e.account.livemode,
+	providerCustomerId: e.providerCustomerId,
+	identityKey: t,
+	slot: "current",
+	observedAt: n.observedAt,
+	retiredAt: null
+}), F = a, I = (e) => {
+	let t = async (t) => {
+		let n = await e.query(O(g, c("tenantId", C(t)), 2));
+		if (n.length > 1 || n[0] && (n[0].tenantId !== t || !r(n[0].id))) throw b();
+		return n[0] ? A(n[0]) : null;
+	}, a = async (t) => {
+		for (let n of F) if ((await e.query(O(n, c("tenantId", t), 1))).length) throw b();
+	}, o = async (n, r) => {
+		let i = await t(n);
+		if (i !== null) {
+			T(i, r);
+			return;
+		}
+		await a(n), await e.insertIgnore(g, {
+			id: x(g, "bcacct"),
+			tenantId: n,
+			provider: r.provider,
+			providerAccountId: r.account.providerAccountId,
+			livemode: +!!r.account.livemode
+		}, { conflictColumns: ["tenantId"] });
+		let o = await t(n);
+		if (o === null) throw b();
+		T(o, r);
+	}, l = async (e) => {
+		if (e.length > 1) throw b();
+		if (!e[0]) return null;
+		let n = M(e[0]);
+		if (await D(n) !== e[0].identityKey) throw b();
+		let r = await t(n.tenantId);
+		if (r === null) throw b();
+		return T(r, n), n;
+	}, d = async (t) => {
+		let n = await D(t), r = await l(await e.query(O(_, c("identityKey", n), 2)));
+		if (r !== null && await D(r) !== n || r === null && (await e.query(O("_voltro_billing_customers", s(c("provider", t.provider), c("providerCustomerId", t.providerCustomerId)), 1))).length) throw b();
+		return r;
+	};
+	return {
+		accountForTenant: (e) => k(() => t(e)),
+		assertAccount: (e, n) => k(async () => {
+			let r = S(n), i = C(e), o = await t(i);
+			return o === null ? (await a(i), !1) : (T(o, r), !0);
+		}),
+		reserveAccount: (e, t) => k(async () => {
+			let n = S(t);
+			await o(C(e), n);
+		}),
+		bind: (t, r) => k(async () => {
+			let a = E(t), s = n(r);
+			if (s.deleted || s.providerCustomerId !== a.providerCustomerId || !i(s.account, a.account)) throw b();
+			let c = await d(a);
+			if (c !== null) {
+				if (N(c, a), c.retiredAt !== null) throw b();
+				return c;
+			}
+			if (await f(a.tenantId) !== null) throw b();
+			await o(a.tenantId, a);
+			let l = P(a, await D(a), s);
+			await e.insertIgnore(_, l, { conflictColumns: ["identityKey"] });
+			let u = await d(a);
+			if (u === null || u.retiredAt !== null) throw b();
+			N(u, a);
+			let p = await f(a.tenantId);
+			if (p === null || p.id !== u.id) throw b();
+			return u;
+		}),
+		getByTenant: (e) => k(() => f(e)),
+		getByProviderCustomerId: (e, t) => k(async () => {
+			let n = S(t);
+			if (!r(e)) throw b();
+			return d({
+				...n,
+				tenantId: "lookup",
+				providerCustomerId: e
+			});
+		}),
+		inventory: (t, n) => k(async () => {
+			let i = S(t), a = n?.limit ?? 25, o = n?.afterCustodyId ?? null;
+			if (n?.afterCustodyId !== void 0 && typeof n.afterCustodyId != "string" || !Number.isInteger(a) || a < 1 || a > 100 || o !== null && (!r(o) || o.length > 191 || !o.isWellFormed()) || (await e.query(O("_voltro_billing_customers", void 0, 1))).length) throw b();
+			let d = s(c("provider", i.provider), c("providerAccountId", i.account.providerAccountId), c("livemode", +!!i.account.livemode));
+			if (o !== null) {
+				let t = await l(await e.query(O(_, s(d, c("id", o)), 2)));
+				if (t === null || t.id !== o) throw b();
+				T(t, i);
+			}
+			let f = await e.query({
+				...O(_, o === null ? d : s(d, u("id", o)), a + 1),
+				order: [{
+					column: "id",
+					direction: "asc"
+				}]
+			});
+			if (f.length > a + 1) throw b();
+			let p = [], m = o;
+			for (let e of f) {
+				let t = await l([e]);
+				if (t === null || m !== null && t.id <= m) throw b();
+				T(t, i), p.push(t), m = t.id;
+			}
+			return {
+				customers: p.slice(0, a),
+				nextCustodyId: p.length > a ? p[a - 1].id : null
+			};
+		}),
+		list: (t) => k(async () => {
+			let n = S(t);
+			if ((await e.query(O("_voltro_billing_customers", void 0, 1))).length) throw b();
+			let r = await e.query(O(_, s(c("provider", n.provider), c("providerAccountId", n.account.providerAccountId), c("livemode", +!!n.account.livemode), c("slot", "current")))), i = [];
+			for (let e of r) {
+				let t = await l([e]);
+				t && i.push(t);
+			}
+			return i;
+		}),
+		retire: (t, r) => k(async () => {
+			let a = S(t), o = n(r);
+			if (!o.deleted || !i(a.account, o.account)) throw b();
+			let l = {
+				...a,
+				tenantId: "lookup",
+				providerCustomerId: o.providerCustomerId
+			}, u = await d(l);
+			if (u === null || u.retiredAt !== null) return u;
+			let f = await D(u);
+			await e.updateMany(_, {
+				slot: u.id,
+				retiredAt: o.observedAt
+			}, { where: s(c("id", u.id), c("identityKey", f), c("slot", "current"), c("tenantId", u.tenantId), c("provider", a.provider), c("providerAccountId", a.account.providerAccountId), c("livemode", +!!a.account.livemode), c("providerCustomerId", o.providerCustomerId)) });
+			let p = await d(l);
+			if (p === null || p.id !== u.id || p.retiredAt === null) throw b();
+			return p;
+		})
+	};
+	async function f(n) {
+		let r = C(n), i = await l(await e.query(O(_, s(c("tenantId", r), c("slot", "current")), 2)));
+		if (i !== null && (i.tenantId !== r || i.retiredAt !== null)) throw b();
+		return i === null && await t(r) === null && await a(r), i;
+	}
+};
+export { g as BILLING_CUSTOMER_ACCOUNTS_TABLE, _ as BILLING_CUSTOMER_CUSTODY_TABLE, v as billingCustomerAccountsTable, y as billingCustomerCustodyTable, I as dataStoreCustomerStore };

package/dist/dunning.js

@@ -1,7 +1,7 @@
 import { BillingError as e, DEFAULT_PLAN as t } from "./types.js";
 import { Effect as n } from "effect";
 import { and as r, eq as i, id as a, table as o, text as s, timestamp as c } from "@voltro/database";
-//#region src/dunning.ts
+// src/dunning.ts
 var l = "_voltro_billing_dunning_notices", u = o(l, {
 	id: a({ prefix: "bdun" }),
 	tenantId: s().maxLength(191),
@@ -205,5 +205,4 @@ var l = "_voltro_billing_dunning_notices", u = o(l, {
 		})
 	})
 });
-//#endregion
 export { l as BILLING_DUNNING_NOTICES_TABLE, f as DEFAULT_DUNNING_STEPS, p as DEFAULT_GRACE_HOURS, m as DEFAULT_LOCKOUT, d as DUNNING_LOCK_STEP_ID, u as billingDunningNoticesTable, O as dataStoreDunningNoticeStore, C as defaultDunningEmail, b as dueSteps, w as dunningMailNotifier, v as episodeKeyOf, x as evaluateBillingEntitlement, y as graceEndOf, E as memoryDunningNoticeStore, g as resolveDunningConfig };

package/dist/economy.d.ts

@@ -0,0 +1,30 @@
+import { IapProviderDefinition } from '@voltro/plugin-economy/server';
+
+export declare interface StripeIapWebOptions {
+    /** Stripe secret or restricted key; `sk_test_`/`rk_test_` for sandbox, `_live_` for production. */
+    readonly secretKey: string;
+    readonly environment: 'sandbox' | 'production';
+    /** The economy's application ID for this provider (an identifier you choose, e.g. the app name). */
+    readonly applicationId: string;
+    /** Origins players return to after paying (`https://game.example`). */
+    readonly returnOrigins: readonly string[];
+    /** Minutes a started checkout stays open (Stripe allows 30–1440; default 30). */
+    readonly checkoutTtlMinutes?: number;
+    /** Signing secret of a Stripe webhook endpoint (`whsec_…`) pointed at the economy's notification
+     * route (`/_voltro/economy/iap/web`). Set: refunds and lost disputes revoke the purchase
+     * (`charge.refunded`, `charge.dispute.created`, `charge.dispute.closed`), and paid checkouts and
+     * subscription renewals arrive without the player (`checkout.session.completed`, `invoice.paid`). */
+    readonly webhookSecret?: string;
+    /** Transport for tests; defaults to global `fetch`. */
+    readonly fetch?: typeof fetch;
+    /** Clock for webhook timestamps (tests). */
+    readonly now?: () => number;
+}
+
+/** A Stripe Checkout provider for the economy's `web` channel. */
+export declare const stripeIapWebProvider: (options: StripeIapWebOptions) => IapProviderDefinition;
+
+/** The request ID a renewal invoice is redeemed under (economy identifiers have no `_`). */
+export declare const stripeRenewalRequestId: (invoice: string) => string;
+
+export { }

package/dist/economy.js

@@ -0,0 +1,265 @@
+import { StripeRestError as e, stripeRest as t } from "./stripeRest.js";
+import { Effect as n } from "effect";
+import { createHmac as r, timingSafeEqual as i } from "node:crypto";
+import { EconomyError as a, economyError as o } from "@voltro/plugin-economy/errors";
+import { iapCurrentStatePort as s, iapVerificationPort as c, issueVerifiedIapNotification as l } from "@voltro/plugin-economy/server";
+// src/economy.ts
+var u = /* @__PURE__ */ new Set([
+	"BIF",
+	"CLP",
+	"DJF",
+	"GNF",
+	"JPY",
+	"KMF",
+	"KRW",
+	"MGA",
+	"PYG",
+	"RWF",
+	"UGX",
+	"VND",
+	"VUV",
+	"XAF",
+	"XOF",
+	"XPF"
+]), d = /* @__PURE__ */ new Set([
+	"BHD",
+	"JOD",
+	"KWD",
+	"OMR",
+	"TND"
+]), f = (e) => u.has(e) ? 0 : d.has(e) ? 3 : 2, p = /^cs_(test|live)_[A-Za-z0-9]{1,200}$/, m = /^in_[A-Za-z0-9]{1,200}$/, h = /^pi_[A-Za-z0-9]{1,200}$/, g = /^sub_[A-Za-z0-9]{1,200}$/, _ = /^cus_[A-Za-z0-9]{1,200}$/, v = (e) => "renew." + e.replace("_", "."), y = (t) => t instanceof a ? t : o(t instanceof e && t.status >= 400 && t.status < 500 && t.status !== 429 ? "forbidden" : "unavailable"), b = (e) => {
+	let u = /^(sk|rk)_live_/.test(e.secretKey), d = /^(sk|rk)_test_/.test(e.secretKey);
+	if (!u && !d || u !== (e.environment === "production")) throw o("invalid_input");
+	let b = e.checkoutTtlMinutes ?? 30;
+	if (!Number.isInteger(b) || b < 30 || b > 1440) throw o("invalid_input");
+	let x = t(e.secretKey, e.fetch ?? fetch), S = (e) => n.tryPromise({
+		try: e,
+		catch: y
+	}), C = () => S(() => x.get("/v1/checkout/sessions", { limit: 1 })).pipe(n.asVoid), w = (t, n, r) => t.voltro_account === n && t.voltro_application === e.applicationId && t.voltro_offer === r.offer.id && t.voltro_offer_version === r.offer.version, T = (e) => n.tryPromise({
+		try: e,
+		catch: (e) => e instanceof a ? e : o("unavailable")
+	}), E = (t) => ({
+		initialize: C,
+		start: (t) => T(async () => {
+			let n = new URL(t.returnUrl);
+			n.searchParams.set("checkout", "success");
+			let r = new URL(t.returnUrl);
+			r.searchParams.set("checkout", "cancel");
+			let i = {
+				voltro_account: t.accountToken,
+				voltro_offer: t.product.offer.id,
+				voltro_offer_version: t.product.offer.version,
+				voltro_application: e.applicationId
+			}, a = t.product.kind === "subscription", s = await x.post("/v1/checkout/sessions", {
+				mode: a ? "subscription" : "payment",
+				line_items: [{
+					price: t.product.storeProductId,
+					quantity: 1
+				}],
+				success_url: n.toString() + "&checkout_id={CHECKOUT_SESSION_ID}",
+				cancel_url: r.toString(),
+				client_reference_id: t.accountToken,
+				expires_at: Math.floor(t.at / 1e3) + b * 60,
+				metadata: {
+					...i,
+					voltro_request: t.requestId
+				},
+				...a ? { subscription_data: { metadata: i } } : {}
+			});
+			if (!s.url || !p.test(s.id)) throw o("invalid_record");
+			return {
+				checkoutId: s.id,
+				redirectUrl: s.url,
+				expiresAt: s.expires_at * 1e3
+			};
+		})
+	}), D = async (t, n, r, i) => {
+		let a = await x.get(`/v1/invoices/${t}`, { expand: ["payments"] }), s = a.parent?.subscription_details, c = s?.subscription ?? null, l = a.lines.data.filter((e) => e.parent?.subscription_item_details && !e.parent.subscription_item_details.proration && e.pricing?.price_details?.price === i.storeProductId), d = (a.payments?.data ?? []).find((e) => e.status === "paid" && e.payment.type === "payment_intent")?.payment.payment_intent;
+		if (a.id !== t || a.status !== "paid" || a.livemode !== u || c === null || !g.test(c) || n !== null && c !== n || !w(s?.metadata ?? {}, r, i) || l.length !== 1 || l[0].quantity !== 1 || !(a.amount_paid > 0) || !d || !h.test(d)) throw o("forbidden");
+		let p = l[0], m = a.currency.toUpperCase();
+		return {
+			invoice: a,
+			facts: {
+				channel: "web",
+				environment: e.environment,
+				applicationId: e.applicationId,
+				transactionId: d,
+				originalTransactionId: c,
+				storeProductId: i.storeProductId,
+				kind: "subscription",
+				quantity: 1,
+				purchasedAt: p.period.start * 1e3,
+				expiresAt: p.period.end * 1e3,
+				paid: {
+					currency: m,
+					units: String(a.amount_paid),
+					scale: f(m)
+				},
+				acknowledgement: "none",
+				consumption: "none"
+			}
+		};
+	}, O = (t) => c(t, {
+		initialize: C,
+		verify: (t) => n.suspend(() => {
+			let r = t.intent.receipt, i = t.product.kind === "subscription";
+			return i && m.test(r) ? t.intent.requestId === v(r) ? S(async () => {
+				let { invoice: e, facts: n } = await D(r, null, t.accountToken, t.product);
+				if (e.billing_reason === "subscription_create") throw o("forbidden");
+				return n;
+			}) : n.fail(o("forbidden")) : p.test(r) ? S(async () => {
+				let n = await x.get(`/v1/checkout/sessions/${r}`, { expand: ["line_items"] }), a = n.metadata ?? {}, s = n.line_items?.data ?? [], c = s[0];
+				if (n.id !== r || n.mode !== (i ? "subscription" : "payment") || n.status !== "complete" || n.payment_status !== "paid" || n.livemode !== u || !w(a, t.accountToken, t.product) || a.voltro_request !== t.intent.requestId || s.length !== 1 || c?.price?.id !== t.product.storeProductId || !c.quantity || n.currency === null || n.amount_total === null) throw o("forbidden");
+				if (i) {
+					if (!n.invoice || !m.test(n.invoice) || !n.subscription) throw o("forbidden");
+					return (await D(n.invoice, n.subscription, t.accountToken, t.product)).facts;
+				}
+				let l = n.currency.toUpperCase();
+				return {
+					channel: "web",
+					environment: e.environment,
+					applicationId: e.applicationId,
+					transactionId: n.payment_intent ?? n.id,
+					originalTransactionId: null,
+					storeProductId: c.price.id,
+					kind: t.product.kind,
+					quantity: c.quantity,
+					purchasedAt: n.created * 1e3,
+					expiresAt: null,
+					paid: {
+						currency: l,
+						units: String(n.amount_total),
+						scale: f(l)
+					},
+					acknowledgement: "none",
+					consumption: "none"
+				};
+			}) : n.fail(o("forbidden"));
+		})
+	}), k = e.webhookSecret, A = e.now ?? Date.now;
+	if (k !== void 0 && !/^whsec_[A-Za-z0-9+/=_-]{8,}$/.test(k)) throw o("invalid_input");
+	let j = (e) => {
+		let t = e.headers?.["stripe-signature"], n = /* @__PURE__ */ new Map();
+		for (let e of (t ?? "").split(",")) {
+			let [t, r] = e.split("=");
+			t && r && n.set(t, [...n.get(t) ?? [], r]);
+		}
+		let a = Number(n.get("t")?.[0]), s = r("sha256", k).update(`${n.get("t")?.[0]}.${e.body}`).digest();
+		if (!(n.get("v1") ?? []).some((e) => /^[0-9a-f]{64}$/.test(e) && i(Buffer.from(e, "hex"), s)) || !Number.isSafeInteger(a) || Math.abs(A() / 1e3 - a) > 300) throw o("forbidden");
+		let c = JSON.parse(e.body);
+		if (typeof c.id != "string" || !/^evt_[A-Za-z0-9]{1,200}$/.test(c.id) || typeof c.type != "string" || typeof c.created != "number" || c.livemode !== u) throw o("invalid_record");
+		return {
+			id: c.id,
+			type: c.type,
+			created: c.created,
+			object: c.data?.object ?? {}
+		};
+	}, M = (e) => e instanceof a ? e : o("invalid_record"), N = (t) => ({
+		initialize: () => n.void,
+		verify: (r) => n.try({
+			try: () => {
+				let n = j(r), i = n.object, a = typeof i.payment_intent == "string" && h.test(i.payment_intent) ? i.payment_intent : null, o = a !== null && (n.type === "charge.refunded" || n.type === "charge.dispute.created" || n.type === "charge.dispute.closed");
+				return l({
+					channel: "web",
+					applicationId: t.applicationId,
+					environment: e.environment,
+					noticeId: n.id,
+					sourceType: "web." + n.type.replace(/[^a-z._]/g, "").slice(0, 100),
+					kind: o ? n.type === "charge.dispute.created" ? "review" : "voided" : "test",
+					occurredAt: Math.min(n.created * 1e3, A()),
+					transactionId: o ? a : null,
+					originalTransactionId: null,
+					storeProductId: null
+				}, { event: {
+					id: n.id,
+					type: n.type
+				} });
+			},
+			catch: M
+		})
+	}), P = (e) => typeof e == "string" ? e : "";
+	return {
+		channel: "web",
+		environment: e.environment,
+		applicationId: e.applicationId,
+		checkoutReturnOrigins: e.returnOrigins,
+		create: O,
+		createCheckout: E,
+		createManagement: (t) => ({
+			initialize: C,
+			open: (t) => S(async () => {
+				for (let n of t.originals) {
+					if (!g.test(n)) continue;
+					let r = await x.get(`/v1/subscriptions/${n}`), i = r.metadata ?? {};
+					if (r.id === n && r.livemode === u && _.test(r.customer) && i.voltro_account === t.accountToken && i.voltro_application === e.applicationId) return { url: (await x.post("/v1/billing_portal/sessions", {
+						customer: r.customer,
+						return_url: t.returnUrl
+					})).url };
+				}
+				throw o("not_found");
+			})
+		}),
+		...k === void 0 ? {} : {
+			createNotifications: N,
+			createCurrentState: (t) => s({
+				realMoney: !0,
+				channel: "web",
+				applicationId: t.applicationId,
+				environment: e.environment,
+				accounts: t.accounts,
+				now: t.now
+			}, {
+				initialize: C,
+				read: (e) => S(async () => {
+					let n = e.facts.transactionId;
+					if (!h.test(n)) throw o("forbidden");
+					let r = await x.get(`/v1/payment_intents/${n}`, { expand: ["latest_charge"] });
+					if (r.id !== n || r.livemode !== u || !r.latest_charge || !(r.amount_received > 0)) throw o("forbidden");
+					let i = r.latest_charge.dispute !== null && (await x.get(`/v1/disputes/${r.latest_charge.dispute}`)).status === "lost", a = r.amount_received, s = i ? a : Math.min(r.latest_charge.amount_refunded, a), c = (e, t) => t === 0 ? e : c(t, e % t), l = c(s, a) || 1, d = s / l, f = a / l;
+					f > 1e5 && (d = s === a ? 1 : Math.floor(s * 1e5 / a), f = s === a ? 1 : 1e5);
+					let p = t.now();
+					return {
+						orderId: e.orderId,
+						channel: "web",
+						state: d === 0 ? "active" : d === f ? "revoked" : "partially-refunded",
+						refundNumerator: d,
+						refundDenominator: f,
+						observedAt: p,
+						revokedAt: d === 0 ? null : p
+					};
+				})
+			}),
+			createDeliveries: (t) => ({
+				initialize: () => n.void,
+				read: (t) => n.try({
+					try: () => {
+						let n = j(t), r = n.object;
+						if (n.type === "checkout.session.completed" || n.type === "checkout.session.async_payment_succeeded") {
+							let t = r.metadata ?? {};
+							return r.payment_status !== "paid" || !p.test(P(r.id)) || t.voltro_application !== e.applicationId ? null : {
+								accountToken: P(t.voltro_account),
+								requestId: P(t.voltro_request),
+								offerId: P(t.voltro_offer),
+								offerVersion: P(t.voltro_offer_version),
+								receipt: P(r.id)
+							};
+						}
+						if (n.type === "invoice.paid") {
+							let t = r.parent?.subscription_details?.metadata ?? {};
+							return r.billing_reason === "subscription_create" || !m.test(P(r.id)) || t.voltro_application !== e.applicationId ? null : {
+								accountToken: P(t.voltro_account),
+								requestId: v(P(r.id)),
+								offerId: P(t.voltro_offer),
+								offerVersion: P(t.voltro_offer_version),
+								receipt: P(r.id)
+							};
+						}
+						return null;
+					},
+					catch: M
+				})
+			})
+		}
+	};
+};
+export { b as stripeIapWebProvider, v as stripeRenewalRequestId };

package/dist/entitlement.js

@@ -1,6 +1,6 @@
 import { BillingService as e, EntitlementExceeded as t, SubscriptionLocked as n } from "./types.js";
 import { Effect as r } from "effect";
-//#region src/entitlement.ts
+// src/entitlement.ts
 var i = (e, t, n, r) => ({
 	allowed: !Number.isFinite(t) || r <= 0 || n + r <= t,
 	entitlement: e,
@@ -37,5 +37,4 @@ var i = (e, t, n, r) => ({
 		cost: s
 	})) : r.flatMap(n.consumeEntitlement(c, o.entitlement, s), () => i);
 };
-//#endregion
 export { c as buildEnforceInterceptor, i as evaluateEntitlement, s as requireEntitled, o as requireEntitlement };

package/dist/eventDelivery.js

@@ -0,0 +1,71 @@
+import { BillingError as e } from "./types.js";
+import { captureProviderAccount as t, sameProviderAccount as n } from "./providerIdentity.js";
+import { Effect as r, Schema as i } from "effect";
+import { beginIdempotent as a, failIdempotent as o, finishIdempotent as s, holdIdempotentClaim as c, memoryIdempotencyStore as l, prepareIdempotentInput as u, systemSubject as d } from "@voltro/protocol";
+// src/eventDelivery.ts
+var f = 864e5, p = (t) => new e({
+	source: "billing.delivery",
+	message: t,
+	transient: !0
+}), m = (m) => {
+	let h = l(), g, _ = d("billing.provider-delivery", []);
+	return (l) => r.tryPromise({
+		try: async () => {
+			let e = structuredClone(l);
+			if (e.rejected) throw p("The provider event could not be normalized and requires reconciliation.");
+			if (typeof e.id != "string" || !e.id || e.id.trim() !== e.id || e.createdAt !== null && (!(e.createdAt instanceof Date) || !Number.isFinite(e.createdAt.getTime()))) throw p("The verified provider delivery requires exact identity and time evidence.");
+			let d = m.receipts?.store() ?? h;
+			if (g === void 0) {
+				let e = m.provider.fetchAccountIdentity?.bind(m.provider);
+				if (e === void 0) throw p("Account-qualified provider delivery is unsupported.");
+				let i = t(await r.runPromise(e()));
+				if (g !== void 0 && !n(g, i)) throw p("The provider delivery account changed.");
+				g ??= i;
+			}
+			let v = g, y = JSON.stringify([
+				"voltro.billing-delivery.v2",
+				m.provider.name,
+				m.receipts?.scope ?? "standalone",
+				v.providerAccountId,
+				v.livemode
+			]), b = await u(i.Unknown, e, _), x = await a(d, y, e.id, b.fingerprint, f, Date.now());
+			if (x.kind === "replay") {
+				if (x.response.status !== 204 || x.response.body !== null) throw p("The retained delivery receipt is invalid.");
+				return "replayed";
+			}
+			if (x.kind !== "fresh") throw p("The provider delivery is busy or its retained input needs reconciliation.");
+			let S = c(d, x.claim);
+			try {
+				if (!await d.renew(x.claim, Date.now())) throw p("The provider delivery claim changed before processing.");
+				let t = e.event, n = e.providerCustomerId ?? (t !== null && "providerCustomerId" in t ? t.providerCustomerId : null);
+				if (t !== null && "providerCustomerId" in t && e.providerCustomerId !== null && t.providerCustomerId !== e.providerCustomerId) throw p("The provider delivery has inconsistent customer identities.");
+				let i = t?._tag === "invoicePaid" || t?._tag === "invoicePaymentFailed", a = n !== null && t?._tag !== "customerUnlinked" && !i, o = [];
+				if (t !== null && (!a || t._tag !== "subscriptionUpserted" && t._tag !== "subscriptionCanceled" && t._tag !== "customerLinked") && o.push(await r.runPromise(m.service.applyEvent(t))), a) {
+					let e = await r.runPromise(m.service.syncCustomer(n, t !== null && "tenantId" in t && typeof t.tenantId == "string" ? t.tenantId : void 0));
+					o.push(...e.events);
+				}
+				for (let t of o) {
+					if (!await d.renew(x.claim, Date.now())) throw p("The provider delivery claim changed before callback dispatch.");
+					let n = m.onEvent?.[t._tag];
+					n !== void 0 && await r.runPromise(n(t, Object.freeze({
+						provider: m.provider.name,
+						providerEventId: e.id,
+						receiptScope: y,
+						...v
+					})));
+				}
+				if (!await s(d, x.claim, {
+					status: 204,
+					body: null
+				}, Date.now())) throw p("Delivery processing finished without confirmed receipt ownership.");
+				return "processed";
+			} catch (e) {
+				throw await o(d, x.claim), e;
+			} finally {
+				S();
+			}
+		},
+		catch: (t) => t instanceof e ? t : p("Provider delivery processing failed and remains retryable.")
+	});
+};
+export { m as makeBillingEventDelivery };

package/dist/flushClaim.js

@@ -1,5 +1,5 @@
 import { id as e, table as t, text as n, timestamp as r } from "@voltro/database";
-//#region src/flushClaim.ts
+// src/flushClaim.ts
 var i = "_voltro_billing_flush_claims", a = t(i, {
 	id: e({ scheme: "numeric" }),
 	windowKey: n(),
@@ -16,5 +16,4 @@ var i = "_voltro_billing_flush_claims", a = t(i, {
 		return !0;
 	}
 };
-//#endregion
 export { i as BILLING_FLUSH_CLAIMS_TABLE, a as billingFlushClaimsTable, s as claimFlushWindow, o as flushWindowKey };