npm - @wildo-ai/saas-backend-lib - Versions diffs - 1.1.2 → 1.1.4 - Mend

@wildo-ai/saas-backend-lib 1.1.2 → 1.1.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1358) hide show

package/dist/esm/billing/services/back-office/billing-state.backend.service.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"billing-state.backend.service.js","sourceRoot":"","sources":["../../../../../../src/billing/services/back-office/billing-state.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAUL,gBAAgB,EAChB,qBAAqB,EAErB,kBAAkB,EAClB,SAAS,EACT,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAOpF,OAAO,EAAE,6BAA6B,EAAE,MAAM,kFAAkF,CAAC;AAEjI,OAAO,EAEL,mCAAmC,GACpC,MAAM,mFAAmF,CAAC;AAE3F,uEAAuE;AAGhE,IAAM,0BAA0B,GAAhC,MAAM,0BAA2B,SAAQ,6BAA6B;IAOP;IACD;IAPnE,YACqC,MAAqB,EACG,gBAAuD,EAChD,uBAA8D,EAC5E,iBAAkD,EACtD,YAAwC,EACtB,oBAAiD,EAClD,mBAA+C;QAEhH,KAAK,CAAC,MAAM,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC;QAHxB,yBAAoB,GAApB,oBAAoB,CAA6B;QAClD,wBAAmB,GAAnB,mBAAmB,CAA4B;IAGlH,CAAC;IAED;;;;;;;;;;;;;OAaG;IACI,KAAK,CAAC,QAAQ,CACnB,SAA+B,EAC/B,aAAqB,EACrB,aAAqC,EACrC,gBAAuC;QAEvC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;QAE/D,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,yBAAyB;gBAC7E,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE;aACtC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,mCAAmC,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,yBAAyB;gBAC7E,OAAO,EAAE,EAAE,SAAS,EAAE;aACvB,CAAC,CAAC;QACL,CAAC;QAED,+FAA+F;QAC/F,+FAA+F;QAC/F,mGAAmG;QACnG,0FAA0F;QAC1F,iGAAiG;QACjG,iGAAiG;QACjG,gGAAgG;QAChG,uFAAuF;QACvF,MAAM,gBAAgB,GAAI,gBAAmE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnH,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,IAAI,IAAI,MAAM,CAAC,gBAAgB,CAAC,KAAK,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YACtH,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,gBAAgB,EAAE;gBAC5E,OAAO,EAAE;oBACP,OAAO,EAAE,iFAAiF;oBAC1F,SAAS;iBACV;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACzF,MAAM,gBAAgB,GAAG,cAAc,EAAE,GAAG,IAAI,IAAI,CAAC;QAErD,MAAM,CAAC,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACnF,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;YAChF,IAAI,CAAC,cAAc,EAAE;YACrB,IAAI,CAAC,YAAY,EAAE;YACnB,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;YACpE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;SACxE,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CACjC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,CACtE,CAAC;QACF,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CACrD,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAC9C,CAAC;QACF,MAAM,KAAK,GAAG,gBAAgB;YAC5B,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,gBAAgB,EAAE,YAAY,CAAC;YACtE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAEtB,OAAO;YACL,cAAc;YACd,YAAY;YACZ,QAAQ;YACR,MAAM;YACN,QAAQ;YACR,KAAK;YACL,WAAW;YACX,gBAAgB;YAChB,SAAS;SACV,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,uCAAuC;IACvC,mEAAmE;IAE3D,KAAK,CAAC,6BAA6B,CACzC,QAAiC,EACjC,aAAqB;QAErB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACxE,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,IAAI,CAAC,QAAQ,CAAC,yCAAyC,EAAE;YACvD,kBAAkB,EAAE,QAAQ,CAAC,cAAc;YAC3C,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;YACjD,aAAa;SACd,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,8EAA8E;YAC9E,wDAAwD;YACxD,EAAE;YACF,wDAAwD;YACxD,0EAA0E;YAC1E,8EAA8E;YAC9E,yFAAyF;YACzF,kFAAkF;YAClF,mFAAmF;YACnF,wDAAwD;YACxD,EAAE;YACF,sEAAsE;YACtE,mEAAmE;YACnE,gFAAgF;YAChF,kFAAkF;YAClF,0EAA0E;YAC1E,0EAA0E;YAC1E,sDAAsD;YACtD,iFAAiF;YACjF,MAAM,YAAY,GAChB,QAAQ,CAAC,mBAAmB,KAAK,QAAQ;gBACvC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE;gBAC3B,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,cAAc,CAC3D,QAAQ,CAAC,cAAkC,EAC3C,EAAE,EACF,EAAE,YAAY,EAAE,CACjB,CAAC;YACF,OAAO,OAAO,IAAI,IAAI,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,uCAAuC,EAAE;gBACpE,kBAAkB,EAAE,QAAQ,CAAC,cAAc;gBAC3C,aAAa;aACd,EAAE,OAAO,CAAC,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,QAAiC,EACjC,aAAqB;QAErB,qEAAqE;QACrE,8EAA8E;QAC9E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,cAAkC,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC5G,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAC9C,QAAQ,CAAC,cAAkC,EAC3C,GAAG,EACH,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,aAAa,EAAE,EACjD,EAAE,KAAK,EAAE,CAAC,EAAE,CACO,CAAC;YACtB,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,iCAAiC,EAAE;gBAC9D,kBAAkB,EAAE,QAAQ,CAAC,cAAc;gBAC3C,aAAa;aACd,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,qCAAqC;IACrC,mEAAmE;IAE3D,KAAK,CAAC,qBAAqB,CACjC,gBAAwB,EACxB,QAAiC;QAEjC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAgC,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC1G,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAC9C,QAAQ,CAAC,YAAgC,EACzC,GAAG,EACH;gBACE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,gBAAgB;gBAClD,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EAAE;aAC1E,EACD,EAAE,KAAK,EAAE,CAAC,EAAE,CACgB,CAAC;YAC/B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,8BAA8B,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACnF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,QAAQ,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC1F,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAU,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAc,CAAC;QAChG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;YACzD,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,MAAM,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACxF,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAQ,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAY,CAAC;QAC1F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;YACvD,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,gBAAwB,EACxB,QAAiC;QAEjC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,UAA8B,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACxG,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAC9C,QAAQ,CAAC,UAA8B,EACvC,GAAG,EACH,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,gBAAgB,EAAE,EACtD,EAAE,KAAK,EAAE,EAAE,EAAE,CACE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1F,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,0BAA0B,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC/E,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,gBAAwB,EACxB,QAAiC;QAEjC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,UAA8B,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACxG,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAC5C,QAAQ,CAAC,UAA8B,EACvC,GAAG,EACH,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,gBAAgB,EAAE,CACvC,CAAC;YAElB,MAAM,MAAM,GAAyF,EAAE,CAAC;YACxG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG;oBACjC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,CAAC;oBAC9B,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,CAAC;oBACxC,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,CAAC;iBACvC,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,8BAA8B,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACnF,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,QAAiC,EACjC,gBAAwB,EACxB,YAA4C;QAE5C,IAAI,CAAC;YACH,MAAM,gBAAgB,GAAG,YAAY,EAAE,kBAAkB,IAAI,YAAY,EAAE,gBAAgB,CAAC;YAC5F,MAAM,MAAM,GAAG,gBAAgB;gBAC7B,CAAC,CAAC;oBACA,KAAK,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC;oBAChD,GAAG,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC;iBAC7C;gBACD,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAC7D,QAAQ,EACR,gBAAgB,EAChB,SAAS,EACT,MAAM,CACP,CAAC;YAEF,OAAO;gBACL,SAAS,EAAE,MAAM,CAAC,WAAW,CAC3B,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,kBAAkB,CAAC,EAAE,EAAE,CAAC;oBACvE,UAAU;oBACV,EAAE,kBAAkB,EAAE;iBACvB,CAAC,CACH;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,+BAA+B,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACpF,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACK,KAAK,CAAC,mBAAmB,CAAC,kBAA+B;QAC/D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,UAAU,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC5F,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CACjD,gBAAgB,CAAC,UAAU,EAC3B,GAAG,EACH,EAAE,QAAQ,EAAE,IAAI,EAAE,CACJ,CAAC;YAEjB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBAC3B,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAC7D,IAAI,CAAC,CAAC,UAAU,IAAI,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAC/D,IAAI,CAAC,CAAC,cAAc,KAAK,IAAI,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc;oBAAE,OAAO,KAAK,CAAC;gBAC5H,IAAI,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC,mBAAmB;oBAAE,OAAO,KAAK,CAAC;gBAChE,IAAI,CAAC,CAAC,kBAAkB,EAAE,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACnI,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,mCAAmC,CAAC,CAAC;YAClE,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF,CAAA;AAxVY,0BAA0B;IADtC,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAAA;IACzD,WAAA,MAAM,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAAA;IAChE,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAClD,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAA;IAC/C,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;;GARtC,0BAA0B,CAwVtC","sourcesContent":["/*\n Billing State Backend Service\n \n Aggregated billing state endpoint (Strategy C — lazy facade).\n \n Accepts scopeType + scopeEntityId, resolves the billing account internally\n * (auto-creates if missing), and returns the full aggregated state:\n * billing account, subscription, products, prices, credit pools, usage.\n \n This is the single entry point the frontend BillingProvider calls on mount.\n /\n\nimport { injectable, inject } from 'inversify';\nimport {\n type BillingAccount,\n type BillingSubscriptionBase,\n type Product,\n type Price,\n type Promotion,\n type InvoiceRef,\n type CreditPool,\n type BillingStateResponse,\n type UsageSummary,\n CoreResourceType,\n CoreResourceOperation,\n ResourcePrimaryScope,\n SubscriptionStatus,\n ErrorType,\n ErrorCustomMessageReference,\n} from '@wildo-ai/saas-models';\nimport type { ExecutionContext } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport type { ServicesRegistryHandlerBackendService } from '~wildo-backend-lib/base-classes/services/services/services-registry-handler.backend.service';\nimport type { ExecutionContextCreatorBackendService } from '~wildo-backend-lib/runtime/services/execution-context-creator.backend.service';\nimport type { ResourcesRegistryBackendService } from '~wildo-backend-lib/resources/services/resources-registry.backend.service';\nimport type { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport type { SystemAccessBackendService } from '~wildo-backend-lib/base-classes/services/services/system-access.backend.service';\nimport { AbstractBillingBackendService } from '~wildo-backend-lib/billing/services/back-office/abstract-billing.backend.service';\nimport type { UsageMeteringBackendService } from '~wildo-backend-lib/billing/services/back-office/usage-metering.backend.service';\nimport {\n type BillingResolvedVariants,\n resolveBillingVariantsFromScopeType,\n} from '~wildo-backend-lib/billing/services/custom-impl/billing-custom-impl-utils.backend';\n\n// ── Service ─────────────────────────────────────────────────────────\n\n@injectable()\nexport class BillingStateBackendService extends AbstractBillingBackendService {\n constructor(\n @inject(SAAS_SERVICE_TYPES.Logger) logger: LoggerService,\n @inject(SAAS_SERVICE_TYPES.ServicesRegistryHandlerService) servicesRegistry: ServicesRegistryHandlerBackendService,\n @inject(SAAS_SERVICE_TYPES.ExecutionContextCreatorBackendService) executionContextCreator: ExecutionContextCreatorBackendService,\n @inject(SAAS_SERVICE_TYPES.ResourceRegistryService) resourcesRegistry: ResourcesRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) errorBuilder: ErrorBuilderBackendService,\n @inject(SAAS_SERVICE_TYPES.UsageMeteringService) private readonly usageMeteringService: UsageMeteringBackendService,\n @inject(SAAS_SERVICE_TYPES.SystemAccessService) private readonly systemAccessService: SystemAccessBackendService,\n ) {\n super(logger, servicesRegistry, executionContextCreator, resourcesRegistry, errorBuilder);\n }\n\n /\n Fetch the full aggregated billing state for a scope entity.\n \n Flow:\n * 1. Validate scopeType against enabledScopes\n * 2. Resolve polymorphic variants for this scope\n * 3. DEFENSE-IN-DEPTH: assert `scopeEntityId` belongs to the caller's authenticated scope\n * 4. Query billing account (auto-create if missing)\n * 5. Query subscription, products, prices, credit pools\n * 6. Return aggregated response\n \n @param executionContext the CALLER's authenticated context — the ownership authority for the DiD\n * guard in step 3. Pass the request/operation EC, NOT the internal context this service builds.\n /\n public async getState(\n scopeType: ResourcePrimaryScope,\n scopeEntityId: string,\n enabledScopes: ResourcePrimaryScope[],\n executionContext: ExecutionContext<any>,\n ): Promise<BillingStateResponse> {\n this.logDebug('getState called', { scopeType, scopeEntityId });\n\n if (!enabledScopes.includes(scopeType)) {\n throw this.errorBuilder.buildError(ErrorType.BUSINESS_RULE, undefined, {\n customMessageReference: ErrorCustomMessageReference.BILLING_SCOPE_NOT_ENABLED,\n context: { scopeType, enabledScopes },\n });\n }\n\n const variants = resolveBillingVariantsFromScopeType(scopeType);\n if (!variants) {\n throw this.errorBuilder.buildError(ErrorType.BUSINESS_RULE, undefined, {\n customMessageReference: ErrorCustomMessageReference.BILLING_SCOPE_NOT_ENABLED,\n context: { scopeType },\n });\n }\n\n // DEFENSE-IN-DEPTH: this method runs on an INTERNAL context that bypasses the contextual scope\n // filter and derives the billing account straight from `scopeEntityId`. So it must not blindly\n // trust an id a future caller might forward from client input. When the caller's execution context\n // carries a scope id for this scopeType (every authenticated request does), it MUST equal\n // `scopeEntityId`; a mismatch means the caller is reaching for a scope it does not own → refuse.\n // A system/internal context with no bound scope id is exempt — it legitimately queries any scope\n // (e.g. a billing batch). Both current callers derive `scopeEntityId` from exactly this key, so\n // this fires only on genuine cross-scope misuse, never on the intended own-scope call.\n const principalScopeId = (executionContext as unknown as Record<string, unknown> \| undefined)?.[variants.scopeKey];\n if (principalScopeId !== undefined && principalScopeId !== null && String(principalScopeId) !== String(scopeEntityId)) {\n throw this.errorBuilder.buildError(ErrorType.AUTHORIZATION, executionContext, {\n context: {\n message: 'billing getState scopeEntityId does not match the authenticated principal scope',\n scopeType,\n },\n });\n }\n\n const billingAccount = await this.resolveOrCreateBillingAccount(variants, scopeEntityId);\n const billingAccountId = billingAccount?._id ?? null;\n\n const [subscription, allProducts, prices, invoices, creditPools] = await Promise.all([\n billingAccountId ? this.getActiveSubscription(billingAccountId, variants) : null,\n this.getAllProducts(),\n this.getAllPrices(),\n billingAccountId ? this.getInvoices(billingAccountId, variants) : [],\n billingAccountId ? this.getCreditPools(billingAccountId, variants) : {},\n ]);\n\n const products = allProducts.filter(\n (p: Product) => !p.targetScopes \|\| p.targetScopes.includes(scopeType),\n );\n const activePromotions = await this.getActivePromotions(\n new Set(products.map(product => product.key)),\n );\n const usage = billingAccountId\n ? await this.getUsageSummary(variants, billingAccountId, subscription)\n : { byProduct: {} };\n\n return {\n billingAccount,\n subscription,\n products,\n prices,\n invoices,\n usage,\n creditPools,\n activePromotions,\n scopeType,\n };\n }\n\n // ════════════════════════════════════════════════════════════════\n // Private — Billing Account Resolution\n // ════════════════════════════════════════════════════════════════\n\n private async resolveOrCreateBillingAccount(\n variants: BillingResolvedVariants,\n scopeEntityId: string,\n ): Promise<BillingAccount \| null> {\n const existing = await this.findBillingAccount(variants, scopeEntityId);\n if (existing) return existing;\n\n this.logDebug('No billing account found, auto-creating', {\n billingAccountType: variants.billingAccount,\n scopeEntityDocField: variants.scopeEntityDocField,\n scopeEntityId,\n });\n\n try {\n // Auto-create through the blessed SystemAccess path (`createAsSystem`), NOT a\n // plain `servicesRegistry.create` over the internal EC.\n //\n // Why the previous plain create failed: `internalCtx` →\n // `createForInternalServiceOperation` seeds an EMPTY context map and null\n // `initiatorIds`, and the create request DTO STRIPS context-auto-populated FK\n // names (`organizationId` / `userId` are in `CONTEXT_AUTO_POPULATED_FIELD_IDENTIFIERS`).\n // So the scope FK passed in the DATA payload was dropped, `enrichDataWithContext`\n // found neither Source A (context map) nor Source B (`initiatorIds`), and Mongoose\n // rejected the write with `Path <scopeFK> is required`.\n //\n // `createAsSystem` injects the scope FK via the execution CONTEXT MAP\n // (`contextResourcesFieldIdentifier`, i.e. Source A) — the channel\n // `enrichDataWithContext` reads — instead of the data payload or `initiatorIds`\n // (the internal EC is fail-closed and REJECTS identity fields on `initiatorIds`).\n // The FK is carried on `scopeContext`, keyed generically off the resolved\n // variant's `scopeEntityDocField` so ORGANIZATIONS → `organizationId` and\n // USER_SELF → `userId` both route correctly. Requires\n // `systemAccessPolicy.create = ALLOWED` on both billing-account variant configs.\n const scopeContext: { organizationId?: string; userId?: string } =\n variants.scopeEntityDocField === 'userId'\n ? { userId: scopeEntityId }\n : { organizationId: scopeEntityId };\n const created = await this.systemAccessService.createAsSystem<BillingAccount>(\n variants.billingAccount as CoreResourceType,\n {},\n { scopeContext },\n );\n return created ?? null;\n } catch (error) {\n this.degradeOrRethrow(error, 'Failed to auto-create billing account', {\n billingAccountType: variants.billingAccount,\n scopeEntityId,\n }, 'error');\n return null;\n }\n }\n\n private async findBillingAccount(\n variants: BillingResolvedVariants,\n scopeEntityId: string,\n ): Promise<BillingAccount \| null> {\n // Context construction stays OUTSIDE the try: failing to resolve the\n // INTERNAL_CALL operation path is a wiring fault, never \"no billing account\".\n const ctx = await this.internalCtx(variants.billingAccount as CoreResourceType, CoreResourceOperation.LIST);\n try {\n const results = await this.servicesRegistry.list<BillingAccount>(\n variants.billingAccount as CoreResourceType,\n ctx,\n { [variants.scopeEntityDocField]: scopeEntityId },\n { limit: 1 },\n ) as BillingAccount[];\n return results.length > 0 ? results[0] : null;\n } catch (error) {\n this.degradeOrRethrow(error, 'Failed to query billing account', {\n billingAccountType: variants.billingAccount,\n scopeEntityId,\n });\n return null;\n }\n }\n\n // ════════════════════════════════════════════════════════════════\n // Private — Related Resource Queries\n // ════════════════════════════════════════════════════════════════\n\n private async getActiveSubscription(\n billingAccountId: string,\n variants: BillingResolvedVariants,\n ): Promise<BillingSubscriptionBase \| null> {\n const ctx = await this.internalCtx(variants.subscription as CoreResourceType, CoreResourceOperation.LIST);\n try {\n const results = await this.servicesRegistry.list<BillingSubscriptionBase>(\n variants.subscription as CoreResourceType,\n ctx,\n {\n [variants.billingAccountFkField]: billingAccountId,\n status: { $in: [SubscriptionStatus.ACTIVE, SubscriptionStatus.TRIALING] },\n },\n { limit: 1 },\n ) as BillingSubscriptionBase[];\n return results.length > 0 ? results[0] : null;\n } catch (error) {\n this.degradeOrRethrow(error, 'Failed to query subscription', { billingAccountId });\n return null;\n }\n }\n\n private async getAllProducts(): Promise<Product[]> {\n const ctx = await this.internalCtx(CoreResourceType.PRODUCTS, CoreResourceOperation.LIST);\n try {\n return await this.servicesRegistry.list<Product>(CoreResourceType.PRODUCTS, ctx) as Product[];\n } catch (error) {\n this.degradeOrRethrow(error, 'Failed to query products');\n return [];\n }\n }\n\n private async getAllPrices(): Promise<Price[]> {\n const ctx = await this.internalCtx(CoreResourceType.PRICES, CoreResourceOperation.LIST);\n try {\n return await this.servicesRegistry.list<Price>(CoreResourceType.PRICES, ctx) as Price[];\n } catch (error) {\n this.degradeOrRethrow(error, 'Failed to query prices');\n return [];\n }\n }\n\n private async getInvoices(\n billingAccountId: string,\n variants: BillingResolvedVariants,\n ): Promise<InvoiceRef[]> {\n const ctx = await this.internalCtx(variants.invoiceRef as CoreResourceType, CoreResourceOperation.LIST);\n try {\n const results = await this.servicesRegistry.list<InvoiceRef>(\n variants.invoiceRef as CoreResourceType,\n ctx,\n { [variants.billingAccountFkField]: billingAccountId },\n { limit: 50 },\n ) as InvoiceRef[];\n results.sort((a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime());\n return results;\n } catch (error) {\n this.degradeOrRethrow(error, 'Failed to query invoices', { billingAccountId });\n return [];\n }\n }\n\n private async getCreditPools(\n billingAccountId: string,\n variants: BillingResolvedVariants,\n ): Promise<Record<string, { available: number; totalPurchased: number; totalConsumed: number }>> {\n const ctx = await this.internalCtx(variants.creditPool as CoreResourceType, CoreResourceOperation.LIST);\n try {\n const pools = await this.servicesRegistry.list<CreditPool>(\n variants.creditPool as CoreResourceType,\n ctx,\n { [variants.billingAccountFkField]: billingAccountId },\n ) as CreditPool[];\n\n const result: Record<string, { available: number; totalPurchased: number; totalConsumed: number }> = {};\n for (const pool of pools) {\n result[pool.poolKey ?? pool._id] = {\n available: pool.available ?? 0,\n totalPurchased: pool.totalPurchased ?? 0,\n totalConsumed: pool.totalConsumed ?? 0,\n };\n }\n return result;\n } catch (error) {\n this.degradeOrRethrow(error, 'Failed to query credit pools', { billingAccountId });\n return {};\n }\n }\n\n private async getUsageSummary(\n variants: BillingResolvedVariants,\n billingAccountId: string,\n subscription: BillingSubscriptionBase \| null,\n ): Promise<UsageSummary> {\n try {\n const hasCurrentPeriod = subscription?.currentPeriodStart && subscription?.currentPeriodEnd;\n const period = hasCurrentPeriod\n ? {\n start: new Date(subscription.currentPeriodStart),\n end: new Date(subscription.currentPeriodEnd),\n }\n : undefined;\n\n const usageByProduct = await this.usageMeteringService.getUsage(\n variants,\n billingAccountId,\n undefined,\n period,\n );\n\n return {\n byProduct: Object.fromEntries(\n Object.entries(usageByProduct).map(([productKey, currentPeriodUsage]) => [\n productKey,\n { currentPeriodUsage },\n ]),\n ),\n };\n } catch (error) {\n this.degradeOrRethrow(error, 'Failed to query usage summary', { billingAccountId });\n return { byProduct: {} };\n }\n }\n\n /\n Return promotions that are valid for the current billing scope surface.\n \n The billing-state endpoint is consumed before the user has selected an exact\n * checkout item, so this intentionally stays broader than \"guaranteed\n * redeemable for the next product click\". What it guarantees instead:\n * - the promotion is currently active and within its validity window\n * - the promotion is synced to the billing provider\n * - if it targets products explicitly, at least one targeted product is visible\n * in the current billing scope\n */\n private async getActivePromotions(visibleProductKeys: Set<string>): Promise<Promotion[]> {\n const ctx = await this.internalCtx(CoreResourceType.PROMOTIONS, CoreResourceOperation.LIST);\n try {\n const promotions = await this.servicesRegistry.list<Promotion>(\n CoreResourceType.PROMOTIONS,\n ctx,\n { isActive: true },\n ) as Promotion[];\n\n const now = new Date();\n return promotions.filter(p => {\n if (p.validFrom && now < new Date(p.validFrom)) return false;\n if (p.validUntil && now > new Date(p.validUntil)) return false;\n if (p.maxRedemptions !== null && p.maxRedemptions !== undefined && (p.timesRedeemed ?? 0) >= p.maxRedemptions) return false;\n if (!p.providerCouponId && !p.providerPromotionId) return false;\n if (p.applicableProducts?.length > 0 && !p.applicableProducts.some(productKey => visibleProductKeys.has(productKey))) return false;\n return true;\n });\n } catch (error) {\n this.degradeOrRethrow(error, 'Failed to query active promotions');\n return [];\n }\n }\n}\n"]}
1	+ {"version":3,"file":"billing-state.backend.service.js","sourceRoot":"","sources":["../../../../../src/billing/services/back-office/billing-state.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;;;;;;;;;;;;;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAUL,gBAAgB,EAChB,qBAAqB,EAErB,kBAAkB,EAClB,SAAS,EACT,2BAA2B,GAC5B,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,gDAAgD,CAAC;AAOpF,OAAO,EAAE,6BAA6B,EAAE,MAAM,kFAAkF,CAAC;AAEjI,OAAO,EAEL,mBAAmB,EACnB,mCAAmC,GACpC,MAAM,mFAAmF,CAAC;AAE3F,uEAAuE;AAGhE,IAAM,0BAA0B,GAAhC,MAAM,0BAA2B,SAAQ,6BAA6B;IAOP;IACD;IAPnE,YACqC,MAAqB,EACG,gBAAuD,EAChD,uBAA8D,EAC5E,iBAAkD,EACtD,YAAwC,EACtB,oBAAiD,EAClD,mBAA+C;QAEhH,KAAK,CAAC,MAAM,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,YAAY,CAAC,CAAC;QAHxB,yBAAoB,GAApB,oBAAoB,CAA6B;QAClD,wBAAmB,GAAnB,mBAAmB,CAA4B;IAGlH,CAAC;IAED;;;;;;;;;;;;;OAaG;IACI,KAAK,CAAC,QAAQ,CACnB,SAA+B,EAC/B,aAAqB,EACrB,aAAqC,EACrC,gBAAuC;QAEvC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC;QAE/D,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,yBAAyB;gBAC7E,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE;aACtC,CAAC,CAAC;QACL,CAAC;QAED,MAAM,QAAQ,GAAG,mCAAmC,CAAC,SAAS,CAAC,CAAC;QAChE,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,EAAE;gBACrE,sBAAsB,EAAE,2BAA2B,CAAC,yBAAyB;gBAC7E,OAAO,EAAE,EAAE,SAAS,EAAE;aACvB,CAAC,CAAC;QACL,CAAC;QAED,+FAA+F;QAC/F,+FAA+F;QAC/F,mGAAmG;QACnG,0FAA0F;QAC1F,iGAAiG;QACjG,iGAAiG;QACjG,gGAAgG;QAChG,uFAAuF;QACvF,MAAM,gBAAgB,GAAI,gBAAmE,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnH,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,KAAK,IAAI,IAAI,MAAM,CAAC,gBAAgB,CAAC,KAAK,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;YACtH,MAAM,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,SAAS,CAAC,aAAa,EAAE,gBAAgB,EAAE;gBAC5E,OAAO,EAAE;oBACP,OAAO,EAAE,iFAAiF;oBAC1F,SAAS;iBACV;aACF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,6BAA6B,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACzF,MAAM,gBAAgB,GAAG,cAAc,EAAE,GAAG,IAAI,IAAI,CAAC;QAErD,MAAM,CAAC,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACnF,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI;YAChF,IAAI,CAAC,cAAc,EAAE;YACrB,IAAI,CAAC,YAAY,EAAE;YACnB,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;YACpE,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE;SACxE,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,CACjC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,CACtE,CAAC;QACF,oFAAoF;QACpF,2FAA2F;QAC3F,iFAAiF;QACjF,EAAE;QACF,wFAAwF;QACxF,8FAA8F;QAC9F,uFAAuF;QACvF,kDAAkD;QAClD,MAAM,qBAAqB,GAAG,QAAQ,CAAC,MAAM,CAAC,mBAAmB,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAE/F,MAAM,gBAAgB,GAAG,MAAM,IAAI,CAAC,mBAAmB,CACrD,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAC9C,CAAC;QACF,MAAM,KAAK,GAAG,gBAAgB;YAC5B,CAAC,CAAC,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,gBAAgB,EAAE,YAAY,CAAC;YACtE,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAEtB,OAAO;YACL,cAAc;YACd,YAAY;YACZ,QAAQ;YACR,MAAM;YACN,QAAQ;YACR,KAAK;YACL,WAAW;YACX,gBAAgB;YAChB,qBAAqB;YACrB,SAAS;SACV,CAAC;IACJ,CAAC;IAED,mEAAmE;IACnE,uCAAuC;IACvC,mEAAmE;IAE3D,KAAK,CAAC,6BAA6B,CACzC,QAAiC,EACjC,aAAqB;QAErB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC;QACxE,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;QAE9B,IAAI,CAAC,QAAQ,CAAC,yCAAyC,EAAE;YACvD,kBAAkB,EAAE,QAAQ,CAAC,cAAc;YAC3C,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;YACjD,aAAa;SACd,CAAC,CAAC;QAEH,IAAI,CAAC;YACH,8EAA8E;YAC9E,wDAAwD;YACxD,EAAE;YACF,wDAAwD;YACxD,0EAA0E;YAC1E,8EAA8E;YAC9E,yFAAyF;YACzF,kFAAkF;YAClF,mFAAmF;YACnF,wDAAwD;YACxD,EAAE;YACF,sEAAsE;YACtE,mEAAmE;YACnE,gFAAgF;YAChF,kFAAkF;YAClF,0EAA0E;YAC1E,0EAA0E;YAC1E,sDAAsD;YACtD,iFAAiF;YACjF,MAAM,YAAY,GAChB,QAAQ,CAAC,mBAAmB,KAAK,QAAQ;gBACvC,CAAC,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE;gBAC3B,CAAC,CAAC,EAAE,cAAc,EAAE,aAAa,EAAE,CAAC;YACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,mBAAmB,CAAC,cAAc,CAC3D,QAAQ,CAAC,cAAkC,EAC3C,EAAE,EACF,EAAE,YAAY,EAAE,CACjB,CAAC;YACF,OAAO,OAAO,IAAI,IAAI,CAAC;QACzB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,uCAAuC,EAAE;gBACpE,kBAAkB,EAAE,QAAQ,CAAC,cAAc;gBAC3C,aAAa;aACd,EAAE,OAAO,CAAC,CAAC;YACZ,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAC9B,QAAiC,EACjC,aAAqB;QAErB,qEAAqE;QACrE,8EAA8E;QAC9E,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,cAAkC,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC5G,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAC9C,QAAQ,CAAC,cAAkC,EAC3C,GAAG,EACH,EAAE,CAAC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,aAAa,EAAE,EACjD,EAAE,KAAK,EAAE,CAAC,EAAE,CACO,CAAC;YACtB,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,iCAAiC,EAAE;gBAC9D,kBAAkB,EAAE,QAAQ,CAAC,cAAc;gBAC3C,aAAa;aACd,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,qCAAqC;IACrC,mEAAmE;IAE3D,KAAK,CAAC,qBAAqB,CACjC,gBAAwB,EACxB,QAAiC;QAEjC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,YAAgC,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC1G,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAC9C,QAAQ,CAAC,YAAgC,EACzC,GAAG,EACH;gBACE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,gBAAgB;gBAClD,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,CAAC,QAAQ,CAAC,EAAE;aAC1E,EACD,EAAE,KAAK,EAAE,CAAC,EAAE,CACgB,CAAC;YAC/B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,8BAA8B,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACnF,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc;QAC1B,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,QAAQ,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC1F,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAU,gBAAgB,CAAC,QAAQ,EAAE,GAAG,CAAc,CAAC;QAChG,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;YACzD,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,MAAM,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACxF,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAQ,gBAAgB,CAAC,MAAM,EAAE,GAAG,CAAY,CAAC;QAC1F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAC;YACvD,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,gBAAwB,EACxB,QAAiC;QAEjC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,UAA8B,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACxG,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAC9C,QAAQ,CAAC,UAA8B,EACvC,GAAG,EACH,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,gBAAgB,EAAE,EACtD,EAAE,KAAK,EAAE,EAAE,EAAE,CACE,CAAC;YAClB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1F,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,0BAA0B,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC/E,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,gBAAwB,EACxB,QAAiC;QAEjC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,UAA8B,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC;QACxG,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAC5C,QAAQ,CAAC,UAA8B,EACvC,GAAG,EACH,EAAE,CAAC,QAAQ,CAAC,qBAAqB,CAAC,EAAE,gBAAgB,EAAE,CACvC,CAAC;YAElB,MAAM,MAAM,GAAyF,EAAE,CAAC;YACxG,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG;oBACjC,SAAS,EAAE,IAAI,CAAC,SAAS,IAAI,CAAC;oBAC9B,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,CAAC;oBACxC,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,CAAC;iBACvC,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,8BAA8B,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACnF,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,QAAiC,EACjC,gBAAwB,EACxB,YAA4C;QAE5C,IAAI,CAAC;YACH,MAAM,gBAAgB,GAAG,YAAY,EAAE,kBAAkB,IAAI,YAAY,EAAE,gBAAgB,CAAC;YAC5F,MAAM,MAAM,GAAG,gBAAgB;gBAC7B,CAAC,CAAC;oBACA,KAAK,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC;oBAChD,GAAG,EAAE,IAAI,IAAI,CAAC,YAAY,CAAC,gBAAgB,CAAC;iBAC7C;gBACD,CAAC,CAAC,SAAS,CAAC;YAEd,MAAM,cAAc,GAAG,MAAM,IAAI,CAAC,oBAAoB,CAAC,QAAQ,CAC7D,QAAQ,EACR,gBAAgB,EAChB,SAAS,EACT,MAAM,CACP,CAAC;YAEF,OAAO;gBACL,SAAS,EAAE,MAAM,CAAC,WAAW,CAC3B,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,kBAAkB,CAAC,EAAE,EAAE,CAAC;oBACvE,UAAU;oBACV,EAAE,kBAAkB,EAAE;iBACvB,CAAC,CACH;aACF,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,+BAA+B,EAAE,EAAE,gBAAgB,EAAE,CAAC,CAAC;YACpF,OAAO,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;QAC3B,CAAC;IACH,CAAC;IAED;;;;;;;;;;OAUG;IACK,KAAK,CAAC,mBAAmB,CAAC,kBAA+B;QAC/D,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,UAAU,EAAE,qBAAqB,CAAC,IAAI,CAAC,CAAC;QAC5F,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,gBAAgB,CAAC,IAAI,CACjD,gBAAgB,CAAC,UAAU,EAC3B,GAAG,EACH,EAAE,QAAQ,EAAE,IAAI,EAAE,CACJ,CAAC;YAEjB,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBAC3B,IAAI,CAAC,CAAC,SAAS,IAAI,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAC7D,IAAI,CAAC,CAAC,UAAU,IAAI,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC;oBAAE,OAAO,KAAK,CAAC;gBAC/D,IAAI,CAAC,CAAC,cAAc,KAAK,IAAI,IAAI,CAAC,CAAC,cAAc,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,aAAa,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc;oBAAE,OAAO,KAAK,CAAC;gBAC5H,IAAI,CAAC,CAAC,CAAC,gBAAgB,IAAI,CAAC,CAAC,CAAC,mBAAmB;oBAAE,OAAO,KAAK,CAAC;gBAChE,IAAI,CAAC,CAAC,kBAAkB,EAAE,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,kBAAkB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;oBAAE,OAAO,KAAK,CAAC;gBACnI,OAAO,IAAI,CAAC;YACd,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,gBAAgB,CAAC,KAAK,EAAE,mCAAmC,CAAC,CAAC;YAClE,OAAO,EAAE,CAAC;QACZ,CAAC;IACH,CAAC;CACF,CAAA;AAnWY,0BAA0B;IADtC,UAAU,EAAE;IAGR,WAAA,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAA;IACjC,WAAA,MAAM,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAAA;IACzD,WAAA,MAAM,CAAC,kBAAkB,CAAC,qCAAqC,CAAC,CAAA;IAChE,WAAA,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAA;IAClD,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;IAC9C,WAAA,MAAM,CAAC,kBAAkB,CAAC,oBAAoB,CAAC,CAAA;IAC/C,WAAA,MAAM,CAAC,kBAAkB,CAAC,mBAAmB,CAAC,CAAA;;GARtC,0BAA0B,CAmWtC","sourcesContent":["/*\n Billing State Backend Service\n \n Aggregated billing state endpoint (Strategy C — lazy facade).\n \n Accepts scopeType + scopeEntityId, resolves the billing account internally\n * (auto-creates if missing), and returns the full aggregated state:\n * billing account, subscription, products, prices, credit pools, usage.\n \n This is the single entry point the frontend BillingProvider calls on mount.\n /\n\nimport { injectable, inject } from 'inversify';\nimport {\n type BillingAccount,\n type BillingSubscriptionBase,\n type Product,\n type Price,\n type Promotion,\n type InvoiceRef,\n type CreditPool,\n type BillingStateResponse,\n type UsageSummary,\n CoreResourceType,\n CoreResourceOperation,\n ResourcePrimaryScope,\n SubscriptionStatus,\n ErrorType,\n ErrorCustomMessageReference,\n} from '@wildo-ai/saas-models';\nimport type { ExecutionContext } from '~wildo-backend-lib/runtime/models/execution-context.backend.schemas';\nimport { SAAS_SERVICE_TYPES } from '~wildo-backend-lib/inject/models/service-types';\nimport type { LoggerService } from '~wildo-backend-lib/monitoring/logger/services/logger.service';\nimport type { ServicesRegistryHandlerBackendService } from '~wildo-backend-lib/base-classes/services/services/services-registry-handler.backend.service';\nimport type { ExecutionContextCreatorBackendService } from '~wildo-backend-lib/runtime/services/execution-context-creator.backend.service';\nimport type { ResourcesRegistryBackendService } from '~wildo-backend-lib/resources/services/resources-registry.backend.service';\nimport type { ErrorBuilderBackendService } from '~wildo-backend-lib/errors/services/error-builder.backend.service';\nimport type { SystemAccessBackendService } from '~wildo-backend-lib/base-classes/services/services/system-access.backend.service';\nimport { AbstractBillingBackendService } from '~wildo-backend-lib/billing/services/back-office/abstract-billing.backend.service';\nimport type { UsageMeteringBackendService } from '~wildo-backend-lib/billing/services/back-office/usage-metering.backend.service';\nimport {\n type BillingResolvedVariants,\n isProductAcquirable,\n resolveBillingVariantsFromScopeType,\n} from '~wildo-backend-lib/billing/services/custom-impl/billing-custom-impl-utils.backend';\n\n// ── Service ─────────────────────────────────────────────────────────\n\n@injectable()\nexport class BillingStateBackendService extends AbstractBillingBackendService {\n constructor(\n @inject(SAAS_SERVICE_TYPES.Logger) logger: LoggerService,\n @inject(SAAS_SERVICE_TYPES.ServicesRegistryHandlerService) servicesRegistry: ServicesRegistryHandlerBackendService,\n @inject(SAAS_SERVICE_TYPES.ExecutionContextCreatorBackendService) executionContextCreator: ExecutionContextCreatorBackendService,\n @inject(SAAS_SERVICE_TYPES.ResourceRegistryService) resourcesRegistry: ResourcesRegistryBackendService,\n @inject(SAAS_SERVICE_TYPES.ErrorBuilderService) errorBuilder: ErrorBuilderBackendService,\n @inject(SAAS_SERVICE_TYPES.UsageMeteringService) private readonly usageMeteringService: UsageMeteringBackendService,\n @inject(SAAS_SERVICE_TYPES.SystemAccessService) private readonly systemAccessService: SystemAccessBackendService,\n ) {\n super(logger, servicesRegistry, executionContextCreator, resourcesRegistry, errorBuilder);\n }\n\n /\n Fetch the full aggregated billing state for a scope entity.\n \n Flow:\n * 1. Validate scopeType against enabledScopes\n * 2. Resolve polymorphic variants for this scope\n * 3. DEFENSE-IN-DEPTH: assert `scopeEntityId` belongs to the caller's authenticated scope\n * 4. Query billing account (auto-create if missing)\n * 5. Query subscription, products, prices, credit pools\n * 6. Return aggregated response\n \n @param executionContext the CALLER's authenticated context — the ownership authority for the DiD\n * guard in step 3. Pass the request/operation EC, NOT the internal context this service builds.\n /\n public async getState(\n scopeType: ResourcePrimaryScope,\n scopeEntityId: string,\n enabledScopes: ResourcePrimaryScope[],\n executionContext: ExecutionContext<any>,\n ): Promise<BillingStateResponse> {\n this.logDebug('getState called', { scopeType, scopeEntityId });\n\n if (!enabledScopes.includes(scopeType)) {\n throw this.errorBuilder.buildError(ErrorType.BUSINESS_RULE, undefined, {\n customMessageReference: ErrorCustomMessageReference.BILLING_SCOPE_NOT_ENABLED,\n context: { scopeType, enabledScopes },\n });\n }\n\n const variants = resolveBillingVariantsFromScopeType(scopeType);\n if (!variants) {\n throw this.errorBuilder.buildError(ErrorType.BUSINESS_RULE, undefined, {\n customMessageReference: ErrorCustomMessageReference.BILLING_SCOPE_NOT_ENABLED,\n context: { scopeType },\n });\n }\n\n // DEFENSE-IN-DEPTH: this method runs on an INTERNAL context that bypasses the contextual scope\n // filter and derives the billing account straight from `scopeEntityId`. So it must not blindly\n // trust an id a future caller might forward from client input. When the caller's execution context\n // carries a scope id for this scopeType (every authenticated request does), it MUST equal\n // `scopeEntityId`; a mismatch means the caller is reaching for a scope it does not own → refuse.\n // A system/internal context with no bound scope id is exempt — it legitimately queries any scope\n // (e.g. a billing batch). Both current callers derive `scopeEntityId` from exactly this key, so\n // this fires only on genuine cross-scope misuse, never on the intended own-scope call.\n const principalScopeId = (executionContext as unknown as Record<string, unknown> \| undefined)?.[variants.scopeKey];\n if (principalScopeId !== undefined && principalScopeId !== null && String(principalScopeId) !== String(scopeEntityId)) {\n throw this.errorBuilder.buildError(ErrorType.AUTHORIZATION, executionContext, {\n context: {\n message: 'billing getState scopeEntityId does not match the authenticated principal scope',\n scopeType,\n },\n });\n }\n\n const billingAccount = await this.resolveOrCreateBillingAccount(variants, scopeEntityId);\n const billingAccountId = billingAccount?._id ?? null;\n\n const [subscription, allProducts, prices, invoices, creditPools] = await Promise.all([\n billingAccountId ? this.getActiveSubscription(billingAccountId, variants) : null,\n this.getAllProducts(),\n this.getAllPrices(),\n billingAccountId ? this.getInvoices(billingAccountId, variants) : [],\n billingAccountId ? this.getCreditPools(billingAccountId, variants) : {},\n ]);\n\n const products = allProducts.filter(\n (p: Product) => !p.targetScopes \|\| p.targetScopes.includes(scopeType),\n );\n // The ACQUISITION half of catalogue retirement. `products` deliberately keeps every\n // scope-visible row — including retired ones — so a customer already ON a retired plan can\n // still be shown what they hold; this set is what an acquisition surface offers.\n //\n // Derived by `isProductAcquirable`, the SAME predicate `readProductByKey`'s ACQUIRE arm\n // applies, so a plan this set offers is a plan checkout will accept: the listing cannot drift\n // from the gate the way a re-derived `p.isActive` filter can. Total over `products` by\n // construction rather than a second list to keep.\n const acquirableProductKeys = products.filter(isProductAcquirable).map(product => product.key);\n\n const activePromotions = await this.getActivePromotions(\n new Set(products.map(product => product.key)),\n );\n const usage = billingAccountId\n ? await this.getUsageSummary(variants, billingAccountId, subscription)\n : { byProduct: {} };\n\n return {\n billingAccount,\n subscription,\n products,\n prices,\n invoices,\n usage,\n creditPools,\n activePromotions,\n acquirableProductKeys,\n scopeType,\n };\n }\n\n // ════════════════════════════════════════════════════════════════\n // Private — Billing Account Resolution\n // ════════════════════════════════════════════════════════════════\n\n private async resolveOrCreateBillingAccount(\n variants: BillingResolvedVariants,\n scopeEntityId: string,\n ): Promise<BillingAccount \| null> {\n const existing = await this.findBillingAccount(variants, scopeEntityId);\n if (existing) return existing;\n\n this.logDebug('No billing account found, auto-creating', {\n billingAccountType: variants.billingAccount,\n scopeEntityDocField: variants.scopeEntityDocField,\n scopeEntityId,\n });\n\n try {\n // Auto-create through the blessed SystemAccess path (`createAsSystem`), NOT a\n // plain `servicesRegistry.create` over the internal EC.\n //\n // Why the previous plain create failed: `internalCtx` →\n // `createForInternalServiceOperation` seeds an EMPTY context map and null\n // `initiatorIds`, and the create request DTO STRIPS context-auto-populated FK\n // names (`organizationId` / `userId` are in `CONTEXT_AUTO_POPULATED_FIELD_IDENTIFIERS`).\n // So the scope FK passed in the DATA payload was dropped, `enrichDataWithContext`\n // found neither Source A (context map) nor Source B (`initiatorIds`), and Mongoose\n // rejected the write with `Path <scopeFK> is required`.\n //\n // `createAsSystem` injects the scope FK via the execution CONTEXT MAP\n // (`contextResourcesFieldIdentifier`, i.e. Source A) — the channel\n // `enrichDataWithContext` reads — instead of the data payload or `initiatorIds`\n // (the internal EC is fail-closed and REJECTS identity fields on `initiatorIds`).\n // The FK is carried on `scopeContext`, keyed generically off the resolved\n // variant's `scopeEntityDocField` so ORGANIZATIONS → `organizationId` and\n // USER_SELF → `userId` both route correctly. Requires\n // `systemAccessPolicy.create = ALLOWED` on both billing-account variant configs.\n const scopeContext: { organizationId?: string; userId?: string } =\n variants.scopeEntityDocField === 'userId'\n ? { userId: scopeEntityId }\n : { organizationId: scopeEntityId };\n const created = await this.systemAccessService.createAsSystem<BillingAccount>(\n variants.billingAccount as CoreResourceType,\n {},\n { scopeContext },\n );\n return created ?? null;\n } catch (error) {\n this.degradeOrRethrow(error, 'Failed to auto-create billing account', {\n billingAccountType: variants.billingAccount,\n scopeEntityId,\n }, 'error');\n return null;\n }\n }\n\n private async findBillingAccount(\n variants: BillingResolvedVariants,\n scopeEntityId: string,\n ): Promise<BillingAccount \| null> {\n // Context construction stays OUTSIDE the try: failing to resolve the\n // INTERNAL_CALL operation path is a wiring fault, never \"no billing account\".\n const ctx = await this.internalCtx(variants.billingAccount as CoreResourceType, CoreResourceOperation.LIST);\n try {\n const results = await this.servicesRegistry.list<BillingAccount>(\n variants.billingAccount as CoreResourceType,\n ctx,\n { [variants.scopeEntityDocField]: scopeEntityId },\n { limit: 1 },\n ) as BillingAccount[];\n return results.length > 0 ? results[0] : null;\n } catch (error) {\n this.degradeOrRethrow(error, 'Failed to query billing account', {\n billingAccountType: variants.billingAccount,\n scopeEntityId,\n });\n return null;\n }\n }\n\n // ════════════════════════════════════════════════════════════════\n // Private — Related Resource Queries\n // ════════════════════════════════════════════════════════════════\n\n private async getActiveSubscription(\n billingAccountId: string,\n variants: BillingResolvedVariants,\n ): Promise<BillingSubscriptionBase \| null> {\n const ctx = await this.internalCtx(variants.subscription as CoreResourceType, CoreResourceOperation.LIST);\n try {\n const results = await this.servicesRegistry.list<BillingSubscriptionBase>(\n variants.subscription as CoreResourceType,\n ctx,\n {\n [variants.billingAccountFkField]: billingAccountId,\n status: { $in: [SubscriptionStatus.ACTIVE, SubscriptionStatus.TRIALING] },\n },\n { limit: 1 },\n ) as BillingSubscriptionBase[];\n return results.length > 0 ? results[0] : null;\n } catch (error) {\n this.degradeOrRethrow(error, 'Failed to query subscription', { billingAccountId });\n return null;\n }\n }\n\n private async getAllProducts(): Promise<Product[]> {\n const ctx = await this.internalCtx(CoreResourceType.PRODUCTS, CoreResourceOperation.LIST);\n try {\n return await this.servicesRegistry.list<Product>(CoreResourceType.PRODUCTS, ctx) as Product[];\n } catch (error) {\n this.degradeOrRethrow(error, 'Failed to query products');\n return [];\n }\n }\n\n private async getAllPrices(): Promise<Price[]> {\n const ctx = await this.internalCtx(CoreResourceType.PRICES, CoreResourceOperation.LIST);\n try {\n return await this.servicesRegistry.list<Price>(CoreResourceType.PRICES, ctx) as Price[];\n } catch (error) {\n this.degradeOrRethrow(error, 'Failed to query prices');\n return [];\n }\n }\n\n private async getInvoices(\n billingAccountId: string,\n variants: BillingResolvedVariants,\n ): Promise<InvoiceRef[]> {\n const ctx = await this.internalCtx(variants.invoiceRef as CoreResourceType, CoreResourceOperation.LIST);\n try {\n const results = await this.servicesRegistry.list<InvoiceRef>(\n variants.invoiceRef as CoreResourceType,\n ctx,\n { [variants.billingAccountFkField]: billingAccountId },\n { limit: 50 },\n ) as InvoiceRef[];\n results.sort((a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime());\n return results;\n } catch (error) {\n this.degradeOrRethrow(error, 'Failed to query invoices', { billingAccountId });\n return [];\n }\n }\n\n private async getCreditPools(\n billingAccountId: string,\n variants: BillingResolvedVariants,\n ): Promise<Record<string, { available: number; totalPurchased: number; totalConsumed: number }>> {\n const ctx = await this.internalCtx(variants.creditPool as CoreResourceType, CoreResourceOperation.LIST);\n try {\n const pools = await this.servicesRegistry.list<CreditPool>(\n variants.creditPool as CoreResourceType,\n ctx,\n { [variants.billingAccountFkField]: billingAccountId },\n ) as CreditPool[];\n\n const result: Record<string, { available: number; totalPurchased: number; totalConsumed: number }> = {};\n for (const pool of pools) {\n result[pool.poolKey ?? pool._id] = {\n available: pool.available ?? 0,\n totalPurchased: pool.totalPurchased ?? 0,\n totalConsumed: pool.totalConsumed ?? 0,\n };\n }\n return result;\n } catch (error) {\n this.degradeOrRethrow(error, 'Failed to query credit pools', { billingAccountId });\n return {};\n }\n }\n\n private async getUsageSummary(\n variants: BillingResolvedVariants,\n billingAccountId: string,\n subscription: BillingSubscriptionBase \| null,\n ): Promise<UsageSummary> {\n try {\n const hasCurrentPeriod = subscription?.currentPeriodStart && subscription?.currentPeriodEnd;\n const period = hasCurrentPeriod\n ? {\n start: new Date(subscription.currentPeriodStart),\n end: new Date(subscription.currentPeriodEnd),\n }\n : undefined;\n\n const usageByProduct = await this.usageMeteringService.getUsage(\n variants,\n billingAccountId,\n undefined,\n period,\n );\n\n return {\n byProduct: Object.fromEntries(\n Object.entries(usageByProduct).map(([productKey, currentPeriodUsage]) => [\n productKey,\n { currentPeriodUsage },\n ]),\n ),\n };\n } catch (error) {\n this.degradeOrRethrow(error, 'Failed to query usage summary', { billingAccountId });\n return { byProduct: {} };\n }\n }\n\n /\n Return promotions that are valid for the current billing scope surface.\n \n The billing-state endpoint is consumed before the user has selected an exact\n * checkout item, so this intentionally stays broader than \"guaranteed\n * redeemable for the next product click\". What it guarantees instead:\n * - the promotion is currently active and within its validity window\n * - the promotion is synced to the billing provider\n * - if it targets products explicitly, at least one targeted product is visible\n * in the current billing scope\n */\n private async getActivePromotions(visibleProductKeys: Set<string>): Promise<Promotion[]> {\n const ctx = await this.internalCtx(CoreResourceType.PROMOTIONS, CoreResourceOperation.LIST);\n try {\n const promotions = await this.servicesRegistry.list<Promotion>(\n CoreResourceType.PROMOTIONS,\n ctx,\n { isActive: true },\n ) as Promotion[];\n\n const now = new Date();\n return promotions.filter(p => {\n if (p.validFrom && now < new Date(p.validFrom)) return false;\n if (p.validUntil && now > new Date(p.validUntil)) return false;\n if (p.maxRedemptions !== null && p.maxRedemptions !== undefined && (p.timesRedeemed ?? 0) >= p.maxRedemptions) return false;\n if (!p.providerCouponId && !p.providerPromotionId) return false;\n if (p.applicableProducts?.length > 0 && !p.applicableProducts.some(productKey => visibleProductKeys.has(productKey))) return false;\n return true;\n });\n } catch (error) {\n this.degradeOrRethrow(error, 'Failed to query active promotions');\n return [];\n }\n }\n}\n"]}

package/dist/esm/billing/services/back-office/billing-subject-erasure-effect.backend.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"billing-subject-erasure-effect.backend.d.ts","sourceRoot":"","sources":["~~../../../../../../~~src/billing/services/back-office/billing-subject-erasure-effect.backend.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAGhB,kBAAkB,EAGnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACtF,OAAO,KAAK,EACV,4BAA4B,EAE7B,MAAM,iGAAiG,CAAC;AAGzG,6DAA6D;AAC7D,eAAO,MAAM,kCAAkC,qBAAqB,CAAC;AAErE;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,oBAAoB,CAAC;AAE/D,mGAAmG;AACnG,MAAM,WAAW,iCAAiC;IAChD,iEAAiE;IACjE,kBAAkB,IAAI,yBAAyB,GAAG,IAAI,CAAC;IACvD,8EAA8E;IAC9E,6BAA6B,CAC3B,0BAA0B,EAAE,gBAAgB,EAC5C,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IAChE,8DAA8D;IAC9D,uBAAuB,CACrB,wBAAwB,EAAE,gBAAgB,EAC1C,qBAAqB,EAAE,MAAM,EAC7B,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,sBAAsB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IACpE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACnE;AASD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,iCAAiC,CAC/C,YAAY,EAAE,iCAAiC,GAC9C,4BAA4B,CA8L9B;AAMD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,8BAA8B,EAAE,SAAS,kBAAkB,EAGvE,CAAC;AAEF,gGAAgG;AAChG,eAAO,MAAM,uCAAuC,EAAE,SAAS,qBAAqB,EAEnF,CAAC"}
1	+ {"version":3,"file":"billing-subject-erasure-effect.backend.d.ts","sourceRoot":"","sources":["../../../../../src/billing/services/back-office/billing-subject-erasure-effect.backend.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,gBAAgB,EAGhB,kBAAkB,EAGnB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AACtF,OAAO,KAAK,EACV,4BAA4B,EAE7B,MAAM,iGAAiG,CAAC;AAGzG,6DAA6D;AAC7D,eAAO,MAAM,kCAAkC,qBAAqB,CAAC;AAErE;;;;;;GAMG;AACH,eAAO,MAAM,6BAA6B,oBAAoB,CAAC;AAE/D,mGAAmG;AACnG,MAAM,WAAW,iCAAiC;IAChD,iEAAiE;IACjE,kBAAkB,IAAI,yBAAyB,GAAG,IAAI,CAAC;IACvD,8EAA8E;IAC9E,6BAA6B,CAC3B,0BAA0B,EAAE,gBAAgB,EAC5C,cAAc,EAAE,MAAM,EACtB,UAAU,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,kBAAkB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IAChE,8DAA8D;IAC9D,uBAAuB,CACrB,wBAAwB,EAAE,gBAAgB,EAC1C,qBAAqB,EAAE,MAAM,EAC7B,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,sBAAsB,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;IACpE,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACnE;AASD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,iCAAiC,CAC/C,YAAY,EAAE,iCAAiC,GAC9C,4BAA4B,CA8L9B;AAMD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,8BAA8B,EAAE,SAAS,kBAAkB,EAGvE,CAAC;AAEF,gGAAgG;AAChG,eAAO,MAAM,uCAAuC,EAAE,SAAS,qBAAqB,EAEnF,CAAC"}

package/dist/esm/billing/services/back-office/product-catalog-sync.backend.service.d.ts CHANGED Viewed

@@ -28,6 +28,20 @@ export interface ProductCatalogSyncResult {
     created: number;
     updated: number;
     featuresDirty: string[];
+    /**
+     * Keys that exist in the DATABASE and no longer in the code catalogue, and were soft-retired by
+     * this run (`isActive: false` on the product and every one of its prices).
+     */
+    retired: string[];
+    /**
+     * Retired keys that STILL HAVE LIVE SUBSCRIBERS. Reported, never acted on — see
+     * {@link ProductCatalogSyncBackendService.reconcileRetiredProducts} for why the framework refuses
+     * to decide what happens to those customers.
+     */
+    retiredWithLiveSubscribers: Array<{
+        productKey: string;
+        liveSubscriptions: number;
+    }>;
     errors: string[];
 }
 export declare class ProductCatalogSyncBackendService extends AbstractBillingBackendService {
@@ -62,6 +76,77 @@ export declare class ProductCatalogSyncBackendService extends AbstractBillingBac
      * Idempotent and safe to run multiple times.
      */
     syncProductCatalog(): Promise<ProductCatalogSyncResult>;
+    /**
+     * Soft-retire every local product whose key has left the code catalogue.
+     *
+     * ## What was wrong
+     *
+     * `syncProductCatalog` iterated `this.productCatalog` and nothing else, so it could only ever ADD
+     * and UPDATE. A key deleted from the code catalogue left its `Product` row `isActive: true`, its
+     * `Price` rows active, and its provider product and prices live — and because the purchase path
+     * reads the DATABASE rather than the code catalogue, a product that no longer existed in code
+     * could still be bought, granting whatever `grantedFeatures` the last sync happened to write.
+     *
+     * ## The policy, stated because it changes what a paying customer experiences
+     *
+     * **Retire LOCALLY, always. Report the provider. Never migrate a subscriber. Never delete.**
+     *
+     * - **`isActive: false` on the product and on every one of its prices, unconditionally** — even
+     *   when subscribers are on it. It is entitlement-SAFE, which is the fact that makes the policy
+     *   possible: `BillingFeatureSyncBackendService.getProduct` resolves a subscription item's product
+     *   by `_id` with no `isActive` filter, and renewal happens entirely at the provider against the
+     *   provider price, which this does not touch. So an existing subscriber keeps their features and
+     *   keeps renewing; what stops is NEW acquisition, through the gate in
+     *   `readProductByKey(..., BillingCatalogReadIntent.ACQUIRE, ...)`.
+     *
+     * - **The PROVIDER catalogue is left completely alone.** REJECTED ALTERNATIVE: archive the
+     *   provider product and prices in the same pass. The provider is the party that actually charges,
+     *   and archiving a price a live subscription renews against is a customer-visible failed renewal
+     *   — the exact outcome this whole policy is arranged to avoid. It would also mean adding a
+     *   destructive provider write (`StandardBilling_Interface` has no archive verb today) in the same
+     *   change as the sweep that calls it. An operator archives provider rows deliberately, after
+     *   deciding what happens to the subscribers, and the report below is what tells them to.
+     *
+     * - **A retired key WITH LIVE SUBSCRIBERS is reported and otherwise untouched.** REJECTED
+     *   ALTERNATIVE: migrate them to the nearest surviving plan tier, or cancel them. Which plan a
+     *   customer should move to — and whether they should be moved at all rather than grandfathered —
+     *   is a commercial decision with a price attached, and a framework that guesses it either
+     *   overcharges someone or cancels a paying customer because a key was deleted in a refactor.
+     *   The count is reported at error level so the decision is put in front of a human.
+     *
+     * - **Nothing is ever deleted.** The `Product` and `Price` rows are the only local record of what
+     *   a RETAINED subscription and its retained invoices refer to, and billing rows deliberately
+     *   survive the deletion of their scope for a tax/audit obligation. Deleting a retired product
+     *   would strand exactly the trail that retention exists to preserve.
+     */
+    private reconcileRetiredProducts;
+    /**
+     * How many LIVE subscriptions reference each product, across every billing scope.
+     *
+     * Built by paging live subscriptions and reading their items, rather than by filtering on
+     * `items.productId` per product. Two reasons: a nested-path filter over an array is a document-store
+     * idiom that does not translate to the PostgreSQL adapter's JSON column, and one pass over the live
+     * set answers the question for every retired product at once instead of one query each.
+     */
+    private collectProductIdsWithLiveSubscriptions;
+    /**
+     * `isActive: false` on the product and on every price beneath it.
+     *
+     * The prices matter as much as the product: an application that lists prices directly, or a caller
+     * that names a price id, would otherwise still transact against a retired product's price — and
+     * `readPriceForProduct` refuses on the PRICE's own flag, so leaving them active would leave a
+     * second door open on the surface the gate was built for.
+     */
+    private deactivateProductAndPrices;
+    /** One page of the live-subscription scan. */
+    private static readonly SUBSCRIPTION_SCAN_PAGE_SIZE;
+    /**
+     * Page ceiling for the live-subscription scan. Reaching it UNDER-counts, which is the safe
+     * direction here for exactly one reason: the count only ever decides whether a WARNING is emitted
+     * — the retirement itself is unconditional — so a missed page costs a quieter log line, never a
+     * different write.
+     */
+    private static readonly MAX_SUBSCRIPTION_SCAN_PAGES;
     private findProductByKey;
     private upsertProduct;
     private upsertPrices;
@@ -83,6 +168,21 @@ export declare class ProductCatalogSyncBackendService extends AbstractBillingBac
      * provider catalog stale.
      */
     private syncUnsyncedPricesToProvider;
+    /**
+     * One amount, converted from its authored scale to the currency's smallest unit — or a throw naming
+     * exactly why it cannot be (#515).
+     *
+     * Throws rather than returning a result, because every caller is inside the per-price `try` and the
+     * only correct response to any of the three failures is the same: do not sync this price. Returning
+     * a union here would give each of the three call sites its own chance to forget one.
+     *
+     * **The currency is passed in rather than read off the value**, and that is the second half of the
+     * defect. A tier's `unitPrice`/`flatPrice` carry an OPTIONAL currency — they inherit the price's —
+     * so reading each amount's own currency would resolve a scale per amount and let one price be
+     * converted at up to three different ones. One price is denominated in one currency; the amounts
+     * are its parts.
+     */
+    private toProviderAmountOrThrow;
     /**
      * Check if a product's features/limits have changed relative to the catalog definition.
      * If so, all subscriptions using this product need feature recomputation.

package/dist/esm/billing/services/back-office/product-catalog-sync.backend.service.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"product-catalog-sync.backend.service.d.ts","sourceRoot":"","sources":["~~../../../../../../~~src/billing/services/back-office/product-catalog-sync.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,OAAO,~~EAOb~~,MAAM,uBAAuB,CAAC;~~AAE~~/B,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AAEtF,OAAO,EAAE,6BAA6B,EAAE,MAAM,kFAAkF,CAAC;~~AAEjI~~,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,6FAA6F,CAAC;AACzJ,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AAC3I,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAChI,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAMnH,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAMD,qBACa,gCAAiC,SAAQ,6BAA6B;IAEjF,4DAA4D;IAC5D,OAAO,CAAC,cAAc,CAA2B;gBAGZ,MAAM,EAAE,aAAa,EACG,gBAAgB,EAAE,qCAAqC,EAChD,uBAAuB,EAAE,qCAAqC,EAC5E,iBAAiB,EAAE,+BAA+B,EACtD,YAAY,EAAE,0BAA0B;IAS1F;;OAEG;IACU,UAAU,CACrB,cAAc,EAAE,iBAAiB,EAAE,EACnC,QAAQ,EAAE,yBAAyB,GAClC,OAAO,CAAC,IAAI,CAAC;IAWhB;;;OAGG;IACI,qBAAqB,IAAI,iBAAiB,EAAE;IAQnD;;;;;;;;;OASG;IACU,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAoCtE;;;;;;OAMG;IACU,kBAAkB,IAAI,OAAO,CAAC,wBAAwB,CAAC;~~YAiEtD~~,gBAAgB;YAehB,aAAa;YAkCb,YAAY;IA4C1B;;;;;;;OAOG;IACH,OAAO,CAAC,+BAA+B;YAWzB,qBAAqB;IAsCnC;;;;;;OAMG;YACW,4BAA4B;~~IAoD1C~~;;;OAGG;IACH,OAAO,CAAC,eAAe;CAuBxB"}
1	+ {"version":3,"file":"product-catalog-sync.backend.service.d.ts","sourceRoot":"","sources":["../../../../../src/billing/services/back-office/product-catalog-sync.backend.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EACL,KAAK,iBAAiB,EACtB,KAAK,OAAO,EAQb,MAAM,uBAAuB,CAAC;AAK/B,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,sCAAsC,CAAC;AAEtF,OAAO,EAAE,6BAA6B,EAAE,MAAM,kFAAkF,CAAC;AAOjI,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,8DAA8D,CAAC;AAClG,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,6FAA6F,CAAC;AACzJ,OAAO,KAAK,EAAE,qCAAqC,EAAE,MAAM,+EAA+E,CAAC;AAC3I,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,0EAA0E,CAAC;AAChI,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kEAAkE,CAAC;AAMnH,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB;;;OAGG;IACH,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;;;;OAIG;IACH,0BAA0B,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,iBAAiB,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrF,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAMD,qBACa,gCAAiC,SAAQ,6BAA6B;IAEjF,4DAA4D;IAC5D,OAAO,CAAC,cAAc,CAA2B;gBAGZ,MAAM,EAAE,aAAa,EACG,gBAAgB,EAAE,qCAAqC,EAChD,uBAAuB,EAAE,qCAAqC,EAC5E,iBAAiB,EAAE,+BAA+B,EACtD,YAAY,EAAE,0BAA0B;IAS1F;;OAEG;IACU,UAAU,CACrB,cAAc,EAAE,iBAAiB,EAAE,EACnC,QAAQ,EAAE,yBAAyB,GAClC,OAAO,CAAC,IAAI,CAAC;IAWhB;;;OAGG;IACI,qBAAqB,IAAI,iBAAiB,EAAE;IAQnD;;;;;;;;;OASG;IACU,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAoCtE;;;;;;OAMG;IACU,kBAAkB,IAAI,OAAO,CAAC,wBAAwB,CAAC;IAiFpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA0CG;YACW,wBAAwB;IAuCtC;;;;;;;OAOG;YACW,sCAAsC;IAiCpD;;;;;;;OAOG;YACW,0BAA0B;IAgBxC,8CAA8C;IAC9C,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,2BAA2B,CAAO;IAE1D;;;;;OAKG;IACH,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,2BAA2B,CAAM;YAM3C,gBAAgB;YAehB,aAAa;YAkCb,YAAY;IA4C1B;;;;;;;OAOG;IACH,OAAO,CAAC,+BAA+B;YAWzB,qBAAqB;IAsCnC;;;;;;OAMG;YACW,4BAA4B;IAwE1C;;;;;;;;;;;;;OAaG;IACH,OAAO,CAAC,uBAAuB;IAY/B;;;OAGG;IACH,OAAO,CAAC,eAAe;CAuBxB"}

package/dist/esm/billing/services/back-office/product-catalog-sync.backend.service.js CHANGED Viewed

@@ -27,14 +27,22 @@ var __metadata = (this && this.__metadata) || function (k, v) {
 var __param = (this && this.__param) || function (paramIndex, decorator) {
     return function (target, key) { decorator(target, key, paramIndex); }
 };
+var ProductCatalogSyncBackendService_1;
 import { injectable, inject } from 'inversify';
 import { CoreResourceType, CoreResourceOperation, ErrorType, ErrorCustomMessageReference, deriveTrustedSystemWritePreservedFields, } from '@wildo-ai/saas-models';
+// MoneyValue fields use bigint at an AUTHORED scale; the provider interface uses a number in the
+// CURRENCY's smallest unit. `Number()` alone crosses only the first of those two gaps, which is why
+// it was wrong here for as long as it stood — see `toProviderAmountOrThrow` (#515).
+import { MoneyMinorUnitConversionError, toCurrencyMinorUnitAmountOrThrow } from '@wildo-ai/zod-decorators';
 import { AbstractBillingBackendService } from '../../../billing/services/back-office/abstract-billing.backend.service.js';
+import { TERMINAL_SUBSCRIPTION_STATUSES } from '../../../billing/services/back-office/billing-subject-erasure-effect.backend.js';
+import { BILLING_SCOPE_TO_VARIANTS, } from '../../../billing/services/custom-impl/billing-custom-impl-utils.backend.js';
 import { SAAS_SERVICE_TYPES } from '../../../inject/models/service-types.js';
 // =====================================================
 // Service
 // =====================================================
 let ProductCatalogSyncBackendService = class ProductCatalogSyncBackendService extends AbstractBillingBackendService {
+    static { ProductCatalogSyncBackendService_1 = this; }
     /** The product catalog from code (set at initialization) */
     productCatalog = [];
     constructor(logger, servicesRegistry, executionContextCreator, resourcesRegistry, errorBuilder) {
@@ -121,6 +129,8 @@ let ProductCatalogSyncBackendService = class ProductCatalogSyncBackendService ex
             created: 0,
             updated: 0,
             featuresDirty: [],
+            retired: [],
+            retiredWithLiveSubscribers: [],
             errors: [],
         };
         for (const definition of this.productCatalog) {
@@ -163,10 +173,162 @@ let ProductCatalogSyncBackendService = class ProductCatalogSyncBackendService ex
                 });
             }
         }
+        /*
+         * The other direction, and it runs LAST so that a key present in both is upserted before it is
+         * examined for retirement — otherwise a first-ever sync would race itself.
+         *
+         * A failure here does not fail the sync: pushing the code catalogue is the primary job, and
+         * refusing to do it because the retirement pass could not read subscriptions would make an
+         * unrelated read fault block every deploy.
+         */
+        try {
+            await this.reconcileRetiredProducts(result);
+        }
+        catch (error) {
+            result.errors.push(`Retired-product reconciliation failed: ${error.message}`);
+        }
         this.logDebug('Bulk product catalog sync complete', { ...result });
         return result;
     }
     // ════════════════════════════════════════════════════════════
+    // Retirement — the catalogue's OTHER direction
+    // ════════════════════════════════════════════════════════════
+    /**
+     * Soft-retire every local product whose key has left the code catalogue.
+     *
+     * ## What was wrong
+     *
+     * `syncProductCatalog` iterated `this.productCatalog` and nothing else, so it could only ever ADD
+     * and UPDATE. A key deleted from the code catalogue left its `Product` row `isActive: true`, its
+     * `Price` rows active, and its provider product and prices live — and because the purchase path
+     * reads the DATABASE rather than the code catalogue, a product that no longer existed in code
+     * could still be bought, granting whatever `grantedFeatures` the last sync happened to write.
+     *
+     * ## The policy, stated because it changes what a paying customer experiences
+     *
+     * **Retire LOCALLY, always. Report the provider. Never migrate a subscriber. Never delete.**
+     *
+     * - **`isActive: false` on the product and on every one of its prices, unconditionally** — even
+     *   when subscribers are on it. It is entitlement-SAFE, which is the fact that makes the policy
+     *   possible: `BillingFeatureSyncBackendService.getProduct` resolves a subscription item's product
+     *   by `_id` with no `isActive` filter, and renewal happens entirely at the provider against the
+     *   provider price, which this does not touch. So an existing subscriber keeps their features and
+     *   keeps renewing; what stops is NEW acquisition, through the gate in
+     *   `readProductByKey(..., BillingCatalogReadIntent.ACQUIRE, ...)`.
+     *
+     * - **The PROVIDER catalogue is left completely alone.** REJECTED ALTERNATIVE: archive the
+     *   provider product and prices in the same pass. The provider is the party that actually charges,
+     *   and archiving a price a live subscription renews against is a customer-visible failed renewal
+     *   — the exact outcome this whole policy is arranged to avoid. It would also mean adding a
+     *   destructive provider write (`StandardBilling_Interface` has no archive verb today) in the same
+     *   change as the sweep that calls it. An operator archives provider rows deliberately, after
+     *   deciding what happens to the subscribers, and the report below is what tells them to.
+     *
+     * - **A retired key WITH LIVE SUBSCRIBERS is reported and otherwise untouched.** REJECTED
+     *   ALTERNATIVE: migrate them to the nearest surviving plan tier, or cancel them. Which plan a
+     *   customer should move to — and whether they should be moved at all rather than grandfathered —
+     *   is a commercial decision with a price attached, and a framework that guesses it either
+     *   overcharges someone or cancels a paying customer because a key was deleted in a refactor.
+     *   The count is reported at error level so the decision is put in front of a human.
+     *
+     * - **Nothing is ever deleted.** The `Product` and `Price` rows are the only local record of what
+     *   a RETAINED subscription and its retained invoices refer to, and billing rows deliberately
+     *   survive the deletion of their scope for a tax/audit obligation. Deleting a retired product
+     *   would strand exactly the trail that retention exists to preserve.
+     */
+    async reconcileRetiredProducts(result) {
+        const catalogKeys = new Set(this.productCatalog.map(definition => definition.key));
+        const listCtx = await this.internalCtx(CoreResourceType.PRODUCTS, CoreResourceOperation.LIST);
+        const localProducts = await this.servicesRegistry.list(CoreResourceType.PRODUCTS, listCtx, { isActive: true });
+        const retiredProducts = localProducts.filter(product => !catalogKeys.has(product.key));
+        if (retiredProducts.length === 0)
+            return;
+        const liveProductIds = await this.collectProductIdsWithLiveSubscriptions();
+        for (const product of retiredProducts) {
+            const liveSubscriptions = liveProductIds.get(product._id) ?? 0;
+            try {
+                await this.deactivateProductAndPrices(product);
+                result.retired.push(product.key);
+            }
+            catch (error) {
+                result.errors.push(`Failed to retire product ${product.key}: ${error.message}`);
+                continue;
+            }
+            if (liveSubscriptions > 0) {
+                result.retiredWithLiveSubscribers.push({ productKey: product.key, liveSubscriptions });
+                this.logger.error('Retired product still has live subscribers', {
+                    productKey: product.key,
+                    productId: product._id,
+                    liveSubscriptions,
+                    message: 'This product left the code catalogue and is no longer purchasable, but subscriptions still ' +
+                        'renew against it at the provider and still grant its last-synced features. Decide whether to ' +
+                        'migrate, grandfather or cancel these subscribers — the framework deliberately does not choose. ' +
+                        'Its provider product and prices were NOT archived, so renewals keep working until you act.',
+                });
+            }
+        }
+    }
+    /**
+     * How many LIVE subscriptions reference each product, across every billing scope.
+     *
+     * Built by paging live subscriptions and reading their items, rather than by filtering on
+     * `items.productId` per product. Two reasons: a nested-path filter over an array is a document-store
+     * idiom that does not translate to the PostgreSQL adapter's JSON column, and one pass over the live
+     * set answers the question for every retired product at once instead of one query each.
+     */
+    async collectProductIdsWithLiveSubscriptions() {
+        const counts = new Map();
+        for (const [scopeKey, scopeData] of Object.entries(BILLING_SCOPE_TO_VARIANTS)) {
+            const variants = { scopeKey, ...scopeData };
+            const ctx = await this.internalCtx(variants.subscription, CoreResourceOperation.LIST);
+            for (let page = 1; page <= ProductCatalogSyncBackendService_1.MAX_SUBSCRIPTION_SCAN_PAGES; page += 1) {
+                const subscriptions = await this.servicesRegistry.list(variants.subscription, ctx, { status: { $nin: TERMINAL_SUBSCRIPTION_STATUSES } }, { page, limit: ProductCatalogSyncBackendService_1.SUBSCRIPTION_SCAN_PAGE_SIZE });
+                for (const subscription of subscriptions) {
+                    const seen = new Set();
+                    for (const item of subscription.items ?? []) {
+                        // One subscription counts ONCE per product however many items name it — the number is
+                        // "how many customers am I about to strand", not "how many line items exist".
+                        if (!item?.productId || seen.has(item.productId))
+                            continue;
+                        seen.add(item.productId);
+                        counts.set(item.productId, (counts.get(item.productId) ?? 0) + 1);
+                    }
+                }
+                if (subscriptions.length < ProductCatalogSyncBackendService_1.SUBSCRIPTION_SCAN_PAGE_SIZE)
+                    break;
+            }
+        }
+        return counts;
+    }
+    /**
+     * `isActive: false` on the product and on every price beneath it.
+     *
+     * The prices matter as much as the product: an application that lists prices directly, or a caller
+     * that names a price id, would otherwise still transact against a retired product's price — and
+     * `readPriceForProduct` refuses on the PRICE's own flag, so leaving them active would leave a
+     * second door open on the surface the gate was built for.
+     */
+    async deactivateProductAndPrices(product) {
+        const productUpdate = { isActive: false };
+        const productCtx = await this.internalCtx(CoreResourceType.PRODUCTS, CoreResourceOperation.UPDATE);
+        await this.servicesRegistry.update(CoreResourceType.PRODUCTS, productCtx, product._id, productUpdate);
+        const pricesCtx = await this.internalCtx(CoreResourceType.PRICES, CoreResourceOperation.LIST);
+        const prices = await this.servicesRegistry.list(CoreResourceType.PRICES, pricesCtx, { productId: product._id, isActive: true });
+        for (const price of prices) {
+            const priceCtx = await this.internalCtx(CoreResourceType.PRICES, CoreResourceOperation.UPDATE);
+            await this.servicesRegistry.update(CoreResourceType.PRICES, priceCtx, price._id, { isActive: false });
+        }
+    }
+    /** One page of the live-subscription scan. */
+    static SUBSCRIPTION_SCAN_PAGE_SIZE = 200;
+    /**
+     * Page ceiling for the live-subscription scan. Reaching it UNDER-counts, which is the safe
+     * direction here for exactly one reason: the count only ever decides whether a WARNING is emitted
+     * — the retirement itself is unconditional — so a missed page costs a quieter log line, never a
+     * different write.
+     */
+    static MAX_SUBSCRIPTION_SCAN_PAGES = 50;
+    // ════════════════════════════════════════════════════════════
     // Private — Product Operations
     // ════════════════════════════════════════════════════════════
     async findProductByKey(productKey) {
@@ -318,17 +480,32 @@ let ProductCatalogSyncBackendService = class ProductCatalogSyncBackendService ex
             if (price.providerPriceId)
                 continue;
             try {
-                // Convert MoneyValue (bigint) → provider format (number in cents)
+                /*
+                 * Convert every amount from its AUTHORED scale to the CURRENCY's smallest unit (#515).
+                 *
+                 * This was `Number(price.unitPrice.amount)` and two more like it — the stored amount handed
+                 * over verbatim, with `MoneyValue.decimals` discarded. A price authored at any scale other
+                 * than the currency's was therefore synced at the wrong magnitude, by a factor of 10 per
+                 * decimal place of disagreement, and the three amounts in one price could each carry a
+                 * different scale and still be combined as if they shared one.
+                 *
+                 * A conversion that cannot be made exactly REFUSES the price rather than rounding it. The
+                 * throw is caught by the loop below, which logs and moves to the next price — so one
+                 * unrepresentable price does not stop a catalogue sync, and it does not reach the provider
+                 * either.
+                 */
+                const priceCurrency = price.unitPrice.currency;
+                const amount = this.toProviderAmountOrThrow(price.unitPrice, priceCurrency, `price ${price._id}`);
                 const { providerPriceId } = await this.billingProvider.syncPrice({
                     providerProductId,
-                    amount: Number(price.unitPrice.amount),
+                    amount,
                     currency: price.unitPrice.currency,
                     interval: price.interval,
                     model: price.model,
-                    tiers: price.tiers?.map(t => ({
+                    tiers: price.tiers?.map((t, index) => ({
                         upTo: t.upTo ?? null,
-                        unitAmount: Number(t.unitPrice.amount),
-                        flatAmount: Number(t.flatPrice.amount),
+                        unitAmount: this.toProviderAmountOrThrow(t.unitPrice, priceCurrency, `price ${price._id} tier ${index} unit amount`),
+                        flatAmount: this.toProviderAmountOrThrow(t.flatPrice, priceCurrency, `price ${price._id} tier ${index} flat amount`),
                     })),
                     packageSize: price.packageSize,
                     taxBehavior: price.taxBehavior,
@@ -344,11 +521,37 @@ let ProductCatalogSyncBackendService = class ProductCatalogSyncBackendService ex
                 this.logger.error('Failed to sync price to provider', {
                     priceId: price._id,
                     productKey: product.key,
+                    /*
+                     * The CLASSIFIED reason when the failure is a scale one (#515), because the three have
+                     * different remedies and an operator should not have to read prose to tell them apart:
+                     * `unknown_minor_unit` is a catalogue problem, `precision_loss` is an authoring problem,
+                     * `unsafe_magnitude` is a limit of the provider's number type. This `instanceof` is why the
+                     * conversion throws a TYPED error rather than returning a result union — the engine compiles
+                     * with `strict: false`, where a discriminated union does not narrow.
+                     */
+                    ...(error instanceof MoneyMinorUnitConversionError ? { moneyScaleFailure: error.reason } : {}),
                     error: error.message,
                 });
             }
         }
     }
+    /**
+     * One amount, converted from its authored scale to the currency's smallest unit — or a throw naming
+     * exactly why it cannot be (#515).
+     *
+     * Throws rather than returning a result, because every caller is inside the per-price `try` and the
+     * only correct response to any of the three failures is the same: do not sync this price. Returning
+     * a union here would give each of the three call sites its own chance to forget one.
+     *
+     * **The currency is passed in rather than read off the value**, and that is the second half of the
+     * defect. A tier's `unitPrice`/`flatPrice` carry an OPTIONAL currency — they inherit the price's —
+     * so reading each amount's own currency would resolve a scale per amount and let one price be
+     * converted at up to three different ones. One price is denominated in one currency; the amounts
+     * are its parts.
+     */
+    toProviderAmountOrThrow(value, currency, subject) {
+        return toCurrencyMinorUnitAmountOrThrow({ ...value, currency }, subject);
+    }
     // ════════════════════════════════════════════════════════════
     // Private — Dirty Detection
     // ════════════════════════════════════════════════════════════
@@ -384,7 +587,7 @@ let ProductCatalogSyncBackendService = class ProductCatalogSyncBackendService ex
         return false;
     }
 };
-ProductCatalogSyncBackendService = __decorate([
+ProductCatalogSyncBackendService = ProductCatalogSyncBackendService_1 = __decorate([
     injectable(),
     __param(0, inject(SAAS_SERVICE_TYPES.Logger)),
     __param(1, inject(SAAS_SERVICE_TYPES.ServicesRegistryHandlerService)),