@wizeworks/lens-cloud 0.3.0-alpha.3 → 0.3.0-alpha.4

package/dist/billing/stripe-plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe-plugin.js","sourceRoot":"","sources":["../../src/billing/stripe-plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAG7C,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAY7C,kFAAkF;AAClF,KAAK,UAAU,OAAO,CAAC,IAAc,EAAE,MAAc,EAAE,KAAa;IAClE,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IACnD,OAAO,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AACxD,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,CAAe,EAAE,EAAE,CAAC;IACnC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,WAAW,EAAE,qBAAqB,EAAE,CAAC,CAAC,UAAU,EAAE;IAC7E,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,eAAe,EAAE,qBAAqB,EAAE,CAAC,CAAC,cAAc,EAAE;CAC1F,CAAC;AAEF,+HAA+H;AAC/H,MAAM,UAAU,YAAY,CAAC,IAAc,EAAE,CAAa;IACxD,MAAM,IAAI,GAAG,KAAK,EAAE,EAAE,YAAY,EAA6C,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;IACrH,OAAO,MAAM,CAAC;QACZ,YAAY,EAAE,CAAC,CAAC,MAAM;QACtB,mBAAmB,EAAE,CAAC,CAAC,aAAa;QACpC,sBAAsB,EAAE,KAAK;QAC7B,MAAM,EAAE,YAAY;QACpB,YAAY,EAAE;YACZ,OAAO,EAAE,IAAI;YACb,uBAAuB,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,CAAC;SAC/H;QACD,YAAY,EAAE;YACZ,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;YACxB,wBAAwB,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI;YAC1C,kBAAkB,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,WAAW,CAAC;YACxF,wBAAwB,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,qBAAqB,EAAE,IAAI,EAAE,0BAA0B,EAAE,MAAM,EAAE,EAAE,CAAC;YACjH,sBAAsB,EAAE,IAAI;YAC5B,qBAAqB,EAAE,IAAI;YAC3B,oBAAoB,EAAE,IAAI;YAC1B,qBAAqB,EAAE,IAAI;SAC5B;KACF,CAAgC,CAAC;AACpC,CAAC"}

package/dist/billing/stripe-setup.d.ts

@@ -0,0 +1,15 @@
+import type { Stripe } from "stripe";
+import type { StripeClient, StripePrices } from "./options.js";
+export declare const METER_EVENT = "wizelens_gb";
+export declare const WEBHOOK_EVENTS: Stripe.WebhookEndpointCreateParams.EnabledEvent[];
+export interface SetupResult {
+    prices: StripePrices;
+    /** Made by this run: products, prices, the meter, the webhook. */
+    made: string[];
+    webhookUrl?: string;
+    /** Only when this run made the webhook: Stripe shows the secret once. */
+    webhookSecret?: string;
+}
+/** Make (or find) everything, and return the ids to deploy with. `publicUrl` also makes the webhook. */
+export declare function stripeSetup(client: StripeClient, publicUrl?: string): Promise<SetupResult>;
+//# sourceMappingURL=stripe-setup.d.ts.map

package/dist/billing/stripe-setup.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe-setup.d.ts","sourceRoot":"","sources":["../../src/billing/stripe-setup.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AACrC,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAK/D,eAAO,MAAM,WAAW,gBAAgB,CAAC;AACzC,eAAO,MAAM,cAAc,EAAE,MAAM,CAAC,2BAA2B,CAAC,YAAY,EAAsI,CAAC;AASnN,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,YAAY,CAAC;IACrB,kEAAkE;IAClE,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAwCD,wGAAwG;AACxG,wBAAsB,WAAW,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAmBhG"}

package/dist/billing/stripe-setup.js

@@ -0,0 +1,73 @@
+import { OVERAGE_TIERS, PLANS } from "./plans.js";
+// `wizelens-cloud stripe-setup`: products, prices, meter, and webhook, made once; reruns reuse them (lookup key, event name, URL).
+export const METER_EVENT = "wizelens_gb";
+export const WEBHOOK_EVENTS = ["checkout.session.completed", "customer.subscription.created", "customer.subscription.updated", "customer.subscription.deleted"];
+const LOOKUP = {
+    teamMonthly: "wizelens_team_monthly",
+    teamAnnual: "wizelens_team_annual",
+    businessMonthly: "wizelens_business_monthly",
+    businessAnnual: "wizelens_business_annual",
+    overage: "wizelens_gb_overage",
+};
+async function meterOf(client, made) {
+    for await (const m of client.billing.meters.list({ status: "active", limit: 100 }))
+        if (m.event_name === METER_EVENT)
+            return m;
+    made.push(`meter ${METER_EVENT}`);
+    return client.billing.meters.create({
+        display_name: "WizeLens extra data (GB)",
+        event_name: METER_EVENT,
+        default_aggregation: { formula: "sum" },
+        customer_mapping: { type: "by_id", event_payload_key: "stripe_customer_id" },
+        value_settings: { event_payload_key: "value" },
+    });
+}
+async function productOf(client, key, name, made) {
+    const found = await client.products.search({ query: `metadata['wizelens']:'${key}' AND active:'true'` });
+    if (found.data[0])
+        return found.data[0].id;
+    made.push(`product ${name}`);
+    return (await client.products.create({ name, metadata: { wizelens: key } })).id;
+}
+/** The price for each lookup key: the one that exists, or a new one. */
+function priceParams(meterId, products) {
+    const flat = (product, usd, interval) => ({ product, currency: "usd", unit_amount: Math.round(usd * 100), recurring: { interval } });
+    const tiers = OVERAGE_TIERS.map((t) => ({ up_to: t.upToGb ?? "inf", unit_amount: t.centsPerGb }));
+    return {
+        teamMonthly: flat(products.team, PLANS.team.monthlyUsd, "month"),
+        teamAnnual: flat(products.team, PLANS.team.annualUsd, "year"),
+        businessMonthly: flat(products.business, PLANS.business.monthlyUsd, "month"),
+        businessAnnual: flat(products.business, PLANS.business.annualUsd, "year"),
+        overage: { product: products.data, currency: "usd", billing_scheme: "tiered", tiers_mode: "graduated", tiers, recurring: { interval: "month", usage_type: "metered", meter: meterId } },
+    };
+}
+async function webhookOf(client, url, made) {
+    for await (const w of client.webhookEndpoints.list({ limit: 100 }))
+        if (w.url === url)
+            return undefined;
+    made.push(`webhook ${url}`);
+    return (await client.webhookEndpoints.create({ url, enabled_events: WEBHOOK_EVENTS, description: "WizeLens Cloud billing" })).secret;
+}
+/** Make (or find) everything, and return the ids to deploy with. `publicUrl` also makes the webhook. */
+export async function stripeSetup(client, publicUrl) {
+    const made = [];
+    const meter = await meterOf(client, made);
+    const products = {
+        team: await productOf(client, "team", "WizeLens Team", made),
+        business: await productOf(client, "business", "WizeLens Business", made),
+        data: await productOf(client, "data", "WizeLens extra data", made),
+    };
+    const existing = await client.prices.list({ lookup_keys: Object.values(LOOKUP), active: true, limit: 100 });
+    const params = priceParams(meter.id, products);
+    const ids = {};
+    for (const [k, lookup] of Object.entries(LOOKUP)) {
+        const hit = existing.data.find((p) => p.lookup_key === lookup);
+        if (!hit)
+            made.push(`price ${lookup}`);
+        ids[k] = hit?.id ?? (await client.prices.create({ ...params[k], lookup_key: lookup })).id;
+    }
+    const webhookUrl = publicUrl ? `${publicUrl.replace(/\/+$/, "")}/_wizelens/api/auth/stripe/webhook` : undefined;
+    const webhookSecret = webhookUrl ? await webhookOf(client, webhookUrl, made) : undefined;
+    return { prices: { ...ids, meter: METER_EVENT }, made, webhookUrl, webhookSecret };
+}
+//# sourceMappingURL=stripe-setup.js.map

package/dist/billing/stripe-setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe-setup.js","sourceRoot":"","sources":["../../src/billing/stripe-setup.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAElD,mIAAmI;AAEnI,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC;AACzC,MAAM,CAAC,MAAM,cAAc,GAAsD,CAAC,4BAA4B,EAAE,+BAA+B,EAAE,+BAA+B,EAAE,+BAA+B,CAAC,CAAC;AACnN,MAAM,MAAM,GAAyD;IACnE,WAAW,EAAE,uBAAuB;IACpC,UAAU,EAAE,sBAAsB;IAClC,eAAe,EAAE,2BAA2B;IAC5C,cAAc,EAAE,0BAA0B;IAC1C,OAAO,EAAE,qBAAqB;CAC/B,CAAC;AAWF,KAAK,UAAU,OAAO,CAAC,MAAoB,EAAE,IAAc;IACzD,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAAE,IAAI,CAAC,CAAC,UAAU,KAAK,WAAW;YAAE,OAAO,CAAC,CAAC;IAC/H,IAAI,CAAC,IAAI,CAAC,SAAS,WAAW,EAAE,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;QAClC,YAAY,EAAE,0BAA0B;QACxC,UAAU,EAAE,WAAW;QACvB,mBAAmB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE;QACvC,gBAAgB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE;QAC5E,cAAc,EAAE,EAAE,iBAAiB,EAAE,OAAO,EAAE;KAC/C,CAAC,CAAC;AACL,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,MAAoB,EAAE,GAAW,EAAE,IAAY,EAAE,IAAc;IACtF,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,yBAAyB,GAAG,qBAAqB,EAAE,CAAC,CAAC;IACzG,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3C,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAC7B,OAAO,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AAClF,CAAC;AAED,wEAAwE;AACxE,SAAS,WAAW,CAAC,OAAe,EAAE,QAAsD;IAC1F,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,GAAW,EAAE,QAA0B,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IACvK,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,IAAK,KAAe,EAAE,WAAW,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC7G,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,UAAW,EAAE,OAAO,CAAC;QACjE,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,SAAU,EAAE,MAAM,CAAC;QAC9D,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAW,EAAE,OAAO,CAAC;QAC7E,cAAc,EAAE,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,SAAU,EAAE,MAAM,CAAC;QAC1E,OAAO,EAAE,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;KACxL,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,MAAoB,EAAE,GAAW,EAAE,IAAc;IACxE,IAAI,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;QAAE,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG;YAAE,OAAO,SAAS,CAAC;IACxG,IAAI,CAAC,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC,CAAC;IAC5B,OAAO,CAAC,MAAM,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,cAAc,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AACvI,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAoB,EAAE,SAAkB;IACxE,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG;QACf,IAAI,EAAE,MAAM,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,IAAI,CAAC;QAC5D,QAAQ,EAAE,MAAM,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,mBAAmB,EAAE,IAAI,CAAC;QACxE,IAAI,EAAE,MAAM,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,IAAI,CAAC;KACnE,CAAC;IACF,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5G,MAAM,MAAM,GAAG,WAAW,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;IAC/C,MAAM,GAAG,GAAG,EAAyC,CAAC;IACtD,KAAK,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAoC,EAAE,CAAC;QACpF,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,MAAM,CAAC,CAAC;QAC/D,IAAI,CAAC,GAAG;YAAE,IAAI,CAAC,IAAI,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;QACvC,GAAG,CAAC,CAAC,CAAC,GAAG,GAAG,EAAE,EAAE,IAAI,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,CAAC;IACD,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,oCAAoC,CAAC,CAAC,CAAC,SAAS,CAAC;IAChH,MAAM,aAAa,GAAG,UAAU,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,MAAM,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzF,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,CAAC;AACrF,CAAC"}

package/dist/billing/summary.d.ts

@@ -0,0 +1,59 @@
+import type { CloudApp } from "../app.js";
+import { type PlanId } from "./plans.js";
+export interface SubscriptionInfo {
+    plan: string;
+    status: string;
+    interval: string | null;
+    periodEndMs: number | null;
+    cancelAtPeriodEnd: boolean;
+    cancelAtMs: number | null;
+}
+/** Days gone this month (at least one) and days in it, in UTC. */
+export declare function monthProgress(nowMs: number): {
+    elapsed: number;
+    total: number;
+};
+/** Everything the Billing page and the usage banner show. */
+export declare function usageSummary(app: CloudApp, orgId: string): Promise<{
+    billing: boolean;
+    plan: {
+        id: PlanId;
+        name: string;
+        monthlyUsd: number | null;
+        annualUsd: number | null;
+        includedGb: number | null;
+        maxRetentionDays: number;
+        overage: boolean;
+        features: Record<import("./plans.js").Feature, boolean>;
+    };
+    includedGb: number | null;
+    maxRetentionDays: number;
+    month: string;
+    monthGb: number;
+    days: {
+        bytes: number;
+        spans: number;
+        logs: number;
+        points: number;
+        day: string;
+        gb: number;
+    }[];
+    overageUsd: number;
+    projectedGb: number;
+    projectedOverageUsd: number;
+    spendCapUsd: number | null;
+    blocked: string | null;
+    reason: "cap" | "free" | null;
+    subscription: SubscriptionInfo | null;
+    plans: {
+        id: PlanId;
+        name: string;
+        monthlyUsd: number | null;
+        annualUsd: number | null;
+        includedGb: number | null;
+        maxRetentionDays: number;
+        overage: boolean;
+        features: Record<import("./plans.js").Feature, boolean>;
+    }[];
+} | null>;
+//# sourceMappingURL=summary.d.ts.map

package/dist/billing/summary.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"summary.d.ts","sourceRoot":"","sources":["../../src/billing/summary.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAgD,KAAK,MAAM,EAAE,MAAM,YAAY,CAAC;AAQvF,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,iBAAiB,EAAE,OAAO,CAAC;IAC3B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,kEAAkE;AAClE,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAK/E;AAcD,6DAA6D;AAC7D,wBAAsB,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UA2B9D"}

package/dist/billing/summary.js

@@ -0,0 +1,50 @@
+import { BYTES_PER_GB, overageCents, PLANS } from "./plans.js";
+import { monthOf, usageDays } from "./usage.js";
+// `GET api/orgs/:org/usage`: this month's GB, the days, the plan's included GB, overage so far, and a month-end projection.
+const DAY_MS = 86_400_000;
+const round = (n, digits = 3) => Math.round(n * 10 ** digits) / 10 ** digits;
+/** Days gone this month (at least one) and days in it, in UTC. */
+export function monthProgress(nowMs) {
+    const d = new Date(nowMs);
+    const start = Date.UTC(d.getUTCFullYear(), d.getUTCMonth(), 1);
+    const end = Date.UTC(d.getUTCFullYear(), d.getUTCMonth() + 1, 1);
+    return { elapsed: Math.max(1, (nowMs - start) / DAY_MS), total: (end - start) / DAY_MS };
+}
+async function subscriptionOf(app, orgId) {
+    const [row] = await app.db.query(`SELECT plan, status, billing_interval, (extract(epoch FROM period_end) * 1000)::double precision AS end_ms, cancel_at_period_end AS cape,
+     (extract(epoch FROM cancel_at) * 1000)::double precision AS cancel_ms FROM subscriptions
+     WHERE reference_id = $1 AND status IN ('active', 'trialing', 'past_due') ORDER BY period_end DESC NULLS LAST LIMIT 1`, [orgId]);
+    return row ? { plan: row.plan, status: row.status, interval: row.billing_interval, periodEndMs: row.end_ms, cancelAtPeriodEnd: !!row.cape, cancelAtMs: row.cancel_ms } : null;
+}
+const planView = (p) => ({ id: p.id, name: p.name, monthlyUsd: p.monthlyUsd, annualUsd: p.annualUsd, includedGb: p.includedGb, maxRetentionDays: p.maxRetentionDays, overage: p.overage, features: p.features });
+/** Everything the Billing page and the usage banner show. */
+export async function usageSummary(app, orgId) {
+    const now = app.config.now();
+    const state = await app.billing.limits.state(orgId);
+    if (!state)
+        return null;
+    const { limits } = state;
+    const included = limits.includedGb;
+    const days = (await usageDays(app.db, orgId, monthOf(now))).map((d) => ({ ...d, gb: round(d.bytes / BYTES_PER_GB, 4) }));
+    const { elapsed, total } = monthProgress(now);
+    const projectedGb = (state.monthGb / elapsed) * total;
+    const cost = (gb) => (limits.plan.overage && included !== null ? overageCents(gb - included) / 100 : 0);
+    return {
+        billing: app.billing.on,
+        plan: planView(limits.plan),
+        includedGb: included,
+        maxRetentionDays: limits.maxRetentionDays,
+        month: monthOf(now),
+        monthGb: round(state.monthGb),
+        days,
+        overageUsd: round(cost(state.monthGb), 2),
+        projectedGb: round(projectedGb, 1),
+        projectedOverageUsd: round(cost(projectedGb), 2),
+        spendCapUsd: state.billing.spendCapCents === null ? null : state.billing.spendCapCents / 100,
+        blocked: state.blocked,
+        reason: state.reason,
+        subscription: app.billing.on ? await subscriptionOf(app, orgId) : null,
+        plans: app.billing.on ? ["free", "team", "business", "enterprise"].map((id) => planView(PLANS[id])) : [],
+    };
+}
+//# sourceMappingURL=summary.js.map

package/dist/billing/summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"summary.js","sourceRoot":"","sources":["../../src/billing/summary.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,KAAK,EAA0B,MAAM,YAAY,CAAC;AACvF,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAEhD,4HAA4H;AAE5H,MAAM,MAAM,GAAG,UAAU,CAAC;AAC1B,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC;AAWrF,kEAAkE;AAClE,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,GAAG,KAAK,CAAC,GAAG,MAAM,EAAE,CAAC;AAC3F,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,GAAa,EAAE,KAAa;IACxD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAC9B;;0HAEsH,EACtH,CAAC,KAAK,CAAC,CACR,CAAC;IACF,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,GAAG,CAAC,gBAAgB,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAChL,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,CAAO,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;AAEvN,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAa,EAAE,KAAa;IAC7D,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC;IACnC,MAAM,IAAI,GAAG,CAAC,MAAM,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,YAAY,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACzH,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,CAAC,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC,GAAG,KAAK,CAAC;IACtD,MAAM,IAAI,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,GAAG,QAAQ,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChH,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE;QACvB,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QAC3B,UAAU,EAAE,QAAQ;QACpB,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC;QACnB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC;QAC7B,IAAI;QACJ,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACzC,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAClC,mBAAmB,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC;QAChD,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,aAAa,GAAG,GAAG;QAC5F,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,YAAY,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;QACtE,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAE,CAAC,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,YAAY,CAAc,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE;KACvH,CAAC;AACJ,CAAC"}

package/dist/billing/sync.d.ts

@@ -0,0 +1,5 @@
+import { type PlanId } from "./plans.js";
+import { type UsageSubDeps } from "./usage-sub.js";
+/** Set the plan from Stripe: a live subscription's plan, else Free. Plans set by hand (Enterprise, Unlimited) stay without one. */
+export declare function syncOrgPlan(d: UsageSubDeps, orgId: string, forget: (orgId: string) => void): Promise<PlanId | undefined>;
+//# sourceMappingURL=sync.d.ts.map

package/dist/billing/sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../../src/billing/sync.ts"],"names":[],"mappings":"AACA,OAAO,EAA+B,KAAK,MAAM,EAAE,MAAM,YAAY,CAAC;AAEtE,OAAO,EAA+B,KAAK,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAsBhF,mIAAmI;AACnI,wBAAsB,WAAW,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAgB9H"}

package/dist/billing/sync.js

@@ -0,0 +1,35 @@
+import { orgBilling, setPlan } from "../repo/billing.js";
+import { isPaidPlan } from "./plans.js";
+import { reportBeforeEnd } from "./report.js";
+import { endUsageSub, ensureUsageSub } from "./usage-sub.js";
+// orgs.plan follows the organization's Stripe subscription (Better Auth's `subscriptions` rows, written by its webhook).
+/** A failed payment keeps the plan while Stripe retries (past_due); after the last retry Stripe cancels or marks it unpaid. */
+const KEEPS_PLAN = new Set(["active", "trialing", "past_due"]);
+const RANK = { team: 1, business: 2 };
+/** The best live paid subscription of an organization, if any. */
+async function liveSub(d, orgId) {
+    const rows = await d.db.query("SELECT plan, status, stripe_subscription_id, stripe_customer_id FROM subscriptions WHERE reference_id = $1", [orgId]);
+    const live = rows.filter((r) => isPaidPlan(r.plan) && KEEPS_PLAN.has(r.status) && !!r.stripe_subscription_id);
+    return live.sort((a, b) => RANK[b.plan] - RANK[a.plan])[0];
+}
+/** Set the plan from Stripe: a live subscription's plan, else Free. Plans set by hand (Enterprise, Unlimited) stay without one. */
+export async function syncOrgPlan(d, orgId, forget) {
+    const before = await orgBilling(d.db, orgId);
+    if (!before)
+        return undefined;
+    const live = await liveSub(d, orgId);
+    const manual = before.plan === "enterprise" || before.plan === "unlimited";
+    const next = live ? live.plan : manual ? before.plan : "free";
+    await setPlan(d.db, orgId, { plan: next }, "stripe", d.now());
+    forget(orgId);
+    const customer = live?.stripe_customer_id ?? before.stripeCustomerId;
+    if (live && customer)
+        await ensureUsageSub(d, orgId, customer, live.stripe_subscription_id);
+    else if (!live && before.overageSubscriptionId) {
+        // Bill the finished days at the old plan's included GB before the usage subscription ends.
+        await reportBeforeEnd(d, orgId, before.plan);
+        await endUsageSub(d, orgId);
+    }
+    return next;
+}
+//# sourceMappingURL=sync.js.map

package/dist/billing/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../../src/billing/sync.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,UAAU,EAAgC,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,cAAc,EAAqB,MAAM,gBAAgB,CAAC;AAEhF,yHAAyH;AAEzH,+HAA+H;AAC/H,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;AAC/D,MAAM,IAAI,GAA+B,EAAE,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AASlE,kEAAkE;AAClE,KAAK,UAAU,OAAO,CAAC,CAAe,EAAE,KAAa;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAS,4GAA4G,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7J,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAsC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC;IAClJ,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,mIAAmI;AACnI,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,CAAe,EAAE,KAAa,EAAE,MAA+B;IAC/F,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,KAAK,YAAY,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,CAAC;IAC3E,MAAM,IAAI,GAAW,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IACtE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9D,MAAM,CAAC,KAAK,CAAC,CAAC;IACd,MAAM,QAAQ,GAAG,IAAI,EAAE,kBAAkB,IAAI,MAAM,CAAC,gBAAgB,CAAC;IACrE,IAAI,IAAI,IAAI,QAAQ;QAAE,MAAM,cAAc,CAAC,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,sBAAuB,CAAC,CAAC;SACxF,IAAI,CAAC,IAAI,IAAI,MAAM,CAAC,qBAAqB,EAAE,CAAC;QAC/C,2FAA2F;QAC3F,MAAM,eAAe,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAC7C,MAAM,WAAW,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/billing/usage-sub.d.ts

@@ -0,0 +1,17 @@
+import type { Queryable } from "../db/db.js";
+import type { StripeClient, StripePrices } from "./options.js";
+/** Marks the usage subscription in Stripe, so the webhook keeps it away from the plan sync (billing/webhook.ts). */
+export declare const USAGE_ROLE = "usage";
+/** The next 1st of a month, 00:00 UTC, in seconds. */
+export declare function nextMonthStartS(nowMs: number): number;
+export interface UsageSubDeps {
+    db: Queryable;
+    client: StripeClient;
+    prices: StripePrices;
+    now: () => number;
+}
+/** Make sure a paid organization has its usage subscription. `planSubId` makes the create idempotent. */
+export declare function ensureUsageSub(d: UsageSubDeps, orgId: string, customerId: string, planSubId: string): Promise<void>;
+/** End the usage subscription when the plan ends. Stripe sends the last usage invoice at once. */
+export declare function endUsageSub(d: UsageSubDeps, orgId: string): Promise<void>;
+//# sourceMappingURL=usage-sub.d.ts.map

package/dist/billing/usage-sub.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-sub.d.ts","sourceRoot":"","sources":["../../src/billing/usage-sub.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAI/D,oHAAoH;AACpH,eAAO,MAAM,UAAU,UAAU,CAAC;AAGlC,sDAAsD;AACtD,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGrD;AAED,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,SAAS,CAAC;IACd,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;IACrB,GAAG,EAAE,MAAM,MAAM,CAAC;CACnB;AAOD,yGAAyG;AACzG,wBAAsB,cAAc,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAsBzH;AAED,kGAAkG;AAClG,wBAAsB,WAAW,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAO/E"}

package/dist/billing/usage-sub.js

@@ -0,0 +1,47 @@
+// Extra GB bill on a separate monthly subscription with only the metered price, from the 1st (UTC): tiers count calendar months.
+/** Marks the usage subscription in Stripe, so the webhook keeps it away from the plan sync (billing/webhook.ts). */
+export const USAGE_ROLE = "usage";
+const LIVE = new Set(["active", "trialing", "past_due"]);
+/** The next 1st of a month, 00:00 UTC, in seconds. */
+export function nextMonthStartS(nowMs) {
+    const d = new Date(nowMs);
+    return Math.floor(Date.UTC(d.getUTCFullYear(), d.getUTCMonth() + 1, 1) / 1000);
+}
+async function current(d, orgId) {
+    const [row] = await d.db.query("SELECT overage_subscription_id AS id FROM orgs WHERE id = $1", [orgId]);
+    return row?.id ?? null;
+}
+/** Make sure a paid organization has its usage subscription. `planSubId` makes the create idempotent. */
+export async function ensureUsageSub(d, orgId, customerId, planSubId) {
+    const id = await current(d, orgId);
+    if (id) {
+        const sub = await d.client.subscriptions.retrieve(id).catch(() => null);
+        if (sub && LIVE.has(sub.status))
+            return;
+    }
+    // Checkout saves the card on the plan subscription, not the customer, so the usage subscription takes the same one.
+    const plan = await d.client.subscriptions.retrieve(planSubId);
+    const pm = typeof plan.default_payment_method === "string" ? plan.default_payment_method : plan.default_payment_method?.id;
+    const sub = await d.client.subscriptions.create({
+        customer: customerId,
+        ...(pm ? { default_payment_method: pm } : {}),
+        items: [{ price: d.prices.overage }],
+        billing_cycle_anchor: nextMonthStartS(d.now()),
+        proration_behavior: "none",
+        description: "WizeLens extra data (GB above the plan's included GB)",
+        metadata: { wizelensOrgId: orgId, wizelensRole: USAGE_ROLE },
+    }, { idempotencyKey: `wl-usage-${orgId}-${planSubId}${id ? `-${id}` : ""}` });
+    await d.db.query("UPDATE orgs SET overage_subscription_id = $1 WHERE id = $2", [sub.id, orgId]);
+}
+/** End the usage subscription when the plan ends. Stripe sends the last usage invoice at once. */
+export async function endUsageSub(d, orgId) {
+    const id = await current(d, orgId);
+    if (!id)
+        return;
+    await d.client.subscriptions.cancel(id, { invoice_now: true, prorate: false }).catch((err) => {
+        if (err.code !== "resource_missing")
+            throw err;
+    });
+    await d.db.query("UPDATE orgs SET overage_subscription_id = NULL WHERE id = $1", [orgId]);
+}
+//# sourceMappingURL=usage-sub.js.map

package/dist/billing/usage-sub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage-sub.js","sourceRoot":"","sources":["../../src/billing/usage-sub.ts"],"names":[],"mappings":"AAGA,iIAAiI;AAEjI,oHAAoH;AACpH,MAAM,CAAC,MAAM,UAAU,GAAG,OAAO,CAAC;AAClC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC;AAEzD,sDAAsD;AACtD,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACjF,CAAC;AASD,KAAK,UAAU,OAAO,CAAC,CAAe,EAAE,KAAa;IACnD,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAwB,8DAA8D,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/H,OAAO,GAAG,EAAE,EAAE,IAAI,IAAI,CAAC;AACzB,CAAC;AAED,yGAAyG;AACzG,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,CAAe,EAAE,KAAa,EAAE,UAAkB,EAAE,SAAiB;IACxG,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACnC,IAAI,EAAE,EAAE,CAAC;QACP,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACxE,IAAI,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO;IAC1C,CAAC;IACD,oHAAoH;IACpH,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC9D,MAAM,EAAE,GAAG,OAAO,IAAI,CAAC,sBAAsB,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,CAAC;IAC3H,MAAM,GAAG,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAC7C;QACE,QAAQ,EAAE,UAAU;QACpB,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,sBAAsB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpC,oBAAoB,EAAE,eAAe,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;QAC9C,kBAAkB,EAAE,MAAM;QAC1B,WAAW,EAAE,uDAAuD;QACpE,QAAQ,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE;KAC7D,EACD,EAAE,cAAc,EAAE,YAAY,KAAK,IAAI,SAAS,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAC1E,CAAC;IACF,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,4DAA4D,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;AAClG,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,CAAe,EAAE,KAAa;IAC9D,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE;QAAE,OAAO;IAChB,MAAM,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;QACpG,IAAK,GAAyB,CAAC,IAAI,KAAK,kBAAkB;YAAE,MAAM,GAAG,CAAC;IACxE,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,8DAA8D,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5F,CAAC"}

package/dist/billing/usage.d.ts

@@ -0,0 +1,28 @@
+import type { Queryable } from "../db/db.js";
+export interface UsageCounts {
+    bytes: number;
+    spans: number;
+    logs: number;
+    points: number;
+}
+/** "2026-10-19" for a time in ms, in UTC. */
+export declare const dayOf: (ms: number) => string;
+/** "2026-10" for a time in ms, in UTC. */
+export declare const monthOf: (ms: number) => string;
+export declare class UsageMeter {
+    #private;
+    private readonly db;
+    private readonly now;
+    constructor(db: Queryable, now: () => number);
+    add(orgId: string, c: Partial<UsageCounts>): void;
+    /** Bytes this month: saved plus not yet saved. */
+    monthBytes(orgId: string): Promise<number>;
+    /** Save the counters (added to the day's row), then reread this month's totals. A failed save keeps them for the next try. */
+    flush(): Promise<void>;
+}
+export interface UsageDay extends UsageCounts {
+    day: string;
+}
+/** One organization's days in a month ("2026-10"), oldest first. */
+export declare const usageDays: (q: Queryable, orgId: string, month: string) => Promise<UsageDay[]>;
+//# sourceMappingURL=usage.d.ts.map

package/dist/billing/usage.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.d.ts","sourceRoot":"","sources":["../../src/billing/usage.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAI7C,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,6CAA6C;AAC7C,eAAO,MAAM,KAAK,OAAQ,MAAM,KAAG,MAAiD,CAAC;AACrF,0CAA0C;AAC1C,eAAO,MAAM,OAAO,OAAQ,MAAM,KAAG,MAAgD,CAAC;AAqBtF,qBAAa,UAAU;;IAQnB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAFtB,YACmB,EAAE,EAAE,SAAS,EACb,GAAG,EAAE,MAAM,MAAM,EAChC;IAEJ,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG,IAAI,CAKhD;IAED,kDAAkD;IAC5C,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAO/C;IAED,8HAA8H;IACxH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAa3B;CAWF;AAED,MAAM,WAAW,QAAS,SAAQ,WAAW;IAC3C,GAAG,EAAE,MAAM,CAAC;CACb;AAED,oEAAoE;AACpE,eAAO,MAAM,SAAS,MAAO,SAAS,SAAS,MAAM,SAAS,MAAM,KAAG,OAAO,CAAC,QAAQ,EAAE,CAKtF,CAAC"}

package/dist/billing/usage.js

@@ -0,0 +1,80 @@
+/** "2026-10-19" for a time in ms, in UTC. */
+export const dayOf = (ms) => new Date(ms).toISOString().slice(0, 10);
+/** "2026-10" for a time in ms, in UTC. */
+export const monthOf = (ms) => new Date(ms).toISOString().slice(0, 7);
+const empty = () => ({ bytes: 0, spans: 0, logs: 0, points: 0 });
+function addInto(into, c) {
+    into.bytes += c.bytes ?? 0;
+    into.spans += c.spans ?? 0;
+    into.logs += c.logs ?? 0;
+    into.points += c.points ?? 0;
+}
+/** Bytes this month per organization, as saved: the sum of its usage_daily rows. */
+async function savedMonthBytes(q, month, orgIds) {
+    if (!orgIds.length)
+        return new Map();
+    const rows = await q.query(`SELECT org_id, SUM(bytes)::double precision AS bytes FROM usage_daily WHERE day LIKE $1 AND org_id IN (${orgIds.map((_, i) => `$${i + 2}`).join(", ")}) GROUP BY org_id`, [`${month}-%`, ...orgIds]);
+    return new Map(rows.map((r) => [r.org_id, Number(r.bytes)]));
+}
+export class UsageMeter {
+    db;
+    now;
+    /** Not yet saved, by "orgId|day". */
+    #pending = new Map();
+    /** Saved bytes this month, by organization, refreshed at every flush (other instances add to the same rows). */
+    #saved = new Map();
+    #savedMonth = "";
+    constructor(db, now) {
+        this.db = db;
+        this.now = now;
+    }
+    add(orgId, c) {
+        const key = `${orgId}|${dayOf(this.now())}`;
+        const row = this.#pending.get(key) ?? empty();
+        addInto(row, c);
+        this.#pending.set(key, row);
+    }
+    /** Bytes this month: saved plus not yet saved. */
+    async monthBytes(orgId) {
+        const month = monthOf(this.now());
+        if (month !== this.#savedMonth)
+            (this.#saved.clear(), (this.#savedMonth = month));
+        if (!this.#saved.has(orgId))
+            this.#saved.set(orgId, (await savedMonthBytes(this.db, month, [orgId])).get(orgId) ?? 0);
+        let pending = 0;
+        for (const [key, c] of this.#pending)
+            if (key.startsWith(`${orgId}|${month}`))
+                pending += c.bytes;
+        return this.#saved.get(orgId) + pending;
+    }
+    /** Save the counters (added to the day's row), then reread this month's totals. A failed save keeps them for the next try. */
+    async flush() {
+        const batch = this.#pending;
+        this.#pending = new Map();
+        try {
+            for (const [key, c] of batch)
+                await this.#save(key, c);
+        }
+        catch (err) {
+            for (const [key, c] of batch)
+                addInto(this.#pending.get(key) ?? (this.#pending.set(key, empty()), this.#pending.get(key)), c);
+            throw err;
+        }
+        const month = monthOf(this.now());
+        if (month !== this.#savedMonth)
+            (this.#saved.clear(), (this.#savedMonth = month));
+        const fresh = await savedMonthBytes(this.db, month, [...this.#saved.keys()]);
+        for (const id of this.#saved.keys())
+            this.#saved.set(id, fresh.get(id) ?? 0);
+    }
+    async #save(key, c) {
+        const [orgId, day] = key.split("|");
+        await this.db.query(`INSERT INTO usage_daily (org_id, day, bytes, spans, logs, points) SELECT $1, $2, $3, $4, $5, $6 WHERE EXISTS (SELECT 1 FROM orgs WHERE id = $1)
+       ON CONFLICT (org_id, day) DO UPDATE SET bytes = usage_daily.bytes + EXCLUDED.bytes, spans = usage_daily.spans + EXCLUDED.spans,
+       logs = usage_daily.logs + EXCLUDED.logs, points = usage_daily.points + EXCLUDED.points`, [orgId, day, c.bytes, c.spans, c.logs, c.points]);
+    }
+}
+/** One organization's days in a month ("2026-10"), oldest first. */
+export const usageDays = (q, orgId, month) => q.query(`SELECT day, bytes::double precision AS bytes, spans::double precision AS spans, logs::double precision AS logs, points::double precision AS points
+     FROM usage_daily WHERE org_id = $1 AND day LIKE $2 ORDER BY day`, [orgId, `${month}-%`]);
+//# sourceMappingURL=usage.js.map

package/dist/billing/usage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"usage.js","sourceRoot":"","sources":["../../src/billing/usage.ts"],"names":[],"mappings":"AAWA,6CAA6C;AAC7C,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACrF,0CAA0C;AAC1C,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,EAAU,EAAU,EAAE,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAEtF,MAAM,KAAK,GAAG,GAAgB,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;AAE9E,SAAS,OAAO,CAAC,IAAiB,EAAE,CAAuB;IACzD,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAC3B,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC;IACzB,IAAI,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC;AAC/B,CAAC;AAED,oFAAoF;AACpF,KAAK,UAAU,eAAe,CAAC,CAAY,EAAE,KAAa,EAAE,MAAgB;IAC1E,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,KAAK,CACxB,0GAA0G,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EACzK,CAAC,GAAG,KAAK,IAAI,EAAE,GAAG,MAAM,CAAC,CAC1B,CAAC;IACF,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED,MAAM,OAAO,UAAU;IAQF,EAAE;IACF,GAAG;IARtB,qCAAqC;IACrC,QAAQ,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC1C,gHAAgH;IAChH,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnC,WAAW,GAAG,EAAE,CAAC;IAEjB,YACmB,EAAa,EACb,GAAiB;kBADjB,EAAE;mBACF,GAAG;IACnB,CAAC;IAEJ,GAAG,CAAC,KAAa,EAAE,CAAuB;QACxC,MAAM,GAAG,GAAG,GAAG,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC;QAC9C,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QAChB,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAC9B,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,IAAI,CAAC,WAAW;YAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC;QAClF,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACtH,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,IAAI,CAAC,QAAQ;YAAE,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,KAAK,IAAI,KAAK,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC;QAClG,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAE,GAAG,OAAO,CAAC;IAC3C,CAAC;IAED,8HAA8H;IAC9H,KAAK,CAAC,KAAK;QACT,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,IAAI,GAAG,EAAE,CAAC;QAC1B,IAAI,CAAC;YACH,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,KAAK;gBAAE,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,KAAK,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAC/H,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,IAAI,CAAC,WAAW;YAAE,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC,CAAC;QAClF,MAAM,KAAK,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7E,KAAK,MAAM,EAAE,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/E,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,GAAW,EAAE,CAAc;QACrC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAqB,CAAC;QACxD,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CACjB;;8FAEwF,EACxF,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CACjD,CAAC;IACJ,CAAC;CACF;AAMD,oEAAoE;AACpE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAY,EAAE,KAAa,EAAE,KAAa,EAAuB,EAAE,CAC3F,CAAC,CAAC,KAAK,CACL;qEACiE,EACjE,CAAC,KAAK,EAAE,GAAG,KAAK,IAAI,CAAC,CACtB,CAAC"}

package/dist/billing/webhook.d.ts

@@ -0,0 +1,6 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+import type { CloudApp } from "../app.js";
+export declare const STRIPE_WEBHOOK_PATH = "/_wizelens/api/auth/stripe/webhook";
+/** `POST /_wizelens/api/auth/stripe/webhook`. 404 while billing is off. */
+export declare function stripeWebhook(app: CloudApp, req: IncomingMessage, res: ServerResponse): Promise<void>;
+//# sourceMappingURL=webhook.d.ts.map

package/dist/billing/webhook.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../src/billing/webhook.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAO1C,eAAO,MAAM,mBAAmB,uCAAqC,CAAC;AAsBtE,2EAA2E;AAC3E,wBAAsB,aAAa,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAc3G"}

package/dist/billing/webhook.js

@@ -0,0 +1,41 @@
+import { AUTH_BASE_PATH } from "../auth/options.js";
+import { readRawBody, sendJson } from "../http/http.js";
+import { USAGE_ROLE } from "./usage-sub.js";
+// Stripe's webhook before Better Auth's: usage subscription events are ours (the plugin would mistake them for the plan's).
+export const STRIPE_WEBHOOK_PATH = `${AUTH_BASE_PATH}/stripe/webhook`;
+const usageSubOf = (e) => (e.type.startsWith("customer.subscription.") && e.data.object.metadata?.wizelensRole === USAGE_ROLE ? e.data.object : null);
+/** A usage subscription that ended while the plan still runs (for example, canceled in the portal) is made again. */
+async function onUsageSub(app, e) {
+    const sub = usageSubOf(e);
+    const orgId = sub.metadata?.wizelensOrgId;
+    if (!orgId || e.type !== "customer.subscription.deleted")
+        return;
+    await app.db.query("UPDATE orgs SET overage_subscription_id = NULL WHERE id = $1 AND overage_subscription_id = $2", [orgId, sub.id]);
+    await app.billing.stripe.sync(orgId);
+}
+async function forward(app, req, raw, res) {
+    const headers = { "content-type": String(req.headers["content-type"] ?? "application/json"), "stripe-signature": String(req.headers["stripe-signature"] ?? "") };
+    const answer = await app.auth.handler(new Request(`${app.baseUrl()}${STRIPE_WEBHOOK_PATH}`, { method: "POST", headers, body: raw }));
+    res.writeHead(answer.status, { "Content-Type": answer.headers.get("content-type") ?? "application/json", "Cache-Control": "no-store" });
+    res.end(await answer.text());
+}
+/** `POST /_wizelens/api/auth/stripe/webhook`. 404 while billing is off. */
+export async function stripeWebhook(app, req, res) {
+    const stripe = app.billing.stripe;
+    if (!stripe)
+        return sendJson(res, 404, { error: "Billing is off." });
+    const raw = await readRawBody(req);
+    const sig = String(req.headers["stripe-signature"] ?? "");
+    let event;
+    try {
+        event = await stripe.client.webhooks.constructEventAsync(raw, sig, stripe.webhookSecret);
+    }
+    catch {
+        return sendJson(res, 400, { error: "The Stripe signature is not valid." });
+    }
+    if (!usageSubOf(event))
+        return forward(app, req, raw, res);
+    await onUsageSub(app, event);
+    sendJson(res, 200, { received: true });
+}
+//# sourceMappingURL=webhook.js.map

package/dist/billing/webhook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook.js","sourceRoot":"","sources":["../../src/billing/webhook.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AACxD,OAAO,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAE5C,4HAA4H;AAE5H,MAAM,CAAC,MAAM,mBAAmB,GAAG,GAAG,cAAc,iBAAiB,CAAC;AAItE,MAAM,UAAU,GAAG,CAAC,CAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,YAAY,KAAK,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAEhK,qHAAqH;AACrH,KAAK,UAAU,UAAU,CAAC,GAAa,EAAE,CAAW;IAClD,MAAM,GAAG,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAE,aAAa,CAAC;IAC1C,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,+BAA+B;QAAE,OAAO;IACjE,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,+FAA+F,EAAE,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACrI,MAAM,GAAG,CAAC,OAAO,CAAC,MAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACxC,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,GAAa,EAAE,GAAoB,EAAE,GAAW,EAAE,GAAmB;IAC1F,MAAM,OAAO,GAAG,EAAE,cAAc,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,kBAAkB,CAAC,EAAE,kBAAkB,EAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;IACjK,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,mBAAmB,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;IACrI,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE,CAAC,CAAC;IACxI,GAAG,CAAC,GAAG,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAa,EAAE,GAAoB,EAAE,GAAmB;IAC1F,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC;IAClC,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,IAAI,KAAmB,CAAC;IACxB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,aAAa,CAAC,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,KAA4B,CAAC;QAAE,OAAO,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IAClF,MAAM,UAAU,CAAC,GAAG,EAAE,KAA4B,CAAC,CAAC;IACpD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;AACzC,CAAC"}

package/dist/cli-args.d.ts

@@ -1,5 +1,5 @@
 import type { CloudOptions } from "./config.js";
-export declare const USAGE = "wizelens-cloud: the WizeLens service for many teams.\n\nUsage: wizelens-cloud [options]\n\n  --database <url>          postgres://..., pglite:<folder>, or memory.\n                            Default pglite:./.wizelens-cloud.          (DATABASE_URL)\n  --clickhouse <url>        Scale mode: telemetry in ClickHouse,        (WIZELENS_CLOUD_CLICKHOUSE_URL)\n                            http://user:pass@host:8123/database.\n  --port <n>                Default 5970.                               (PORT)\n  --host <addr>             Default 0.0.0.0.                            (WIZELENS_CLOUD_HOST)\n  --public-url <url>        The address people use, for links.          (WIZELENS_CLOUD_PUBLIC_URL)\n  --signup <invite|open>    Who can make an account. Default invite.    (WIZELENS_CLOUD_SIGNUP)\n  --retention-days <n>      Default for new organizations. Default 30.  (WIZELENS_CLOUD_RETENTION_DAYS)\n  --ingest-per-minute <n>   Ingest calls per key per minute. Default    (WIZELENS_CLOUD_INGEST_PER_MINUTE)\n                            1200.\n  --allow-private-webhooks  Let alert webhooks reach private addresses. (WIZELENS_CLOUD_ALLOW_PRIVATE_WEBHOOKS=1)\n  --auth-secret <text>      Signs sessions, encrypts 2FA secrets. 32+   (WIZELENS_CLOUD_AUTH_SECRET)\n                            characters; \"2:new,1:old\" rotates.\n                            Required with Postgres.\n  --resend-api-key <key>    Outgoing mail through Resend (re_...).      (WIZELENS_CLOUD_RESEND_API_KEY)\n                            Needs --public-url.\n  --resend-webhook-secret <s>  The Resend webhook's whsec_ secret:     (WIZELENS_CLOUD_RESEND_WEBHOOK_SECRET)\n                            bounces and complaints stop later mail.\n                            Webhook URL: <public-url>/_wizelens/api/mail/resend\n  --smtp-url <url>          Or mail over SMTP: smtp://user:pass@host:587 (WIZELENS_CLOUD_SMTP_URL)\n                            or smtps://...:465. Needs --public-url.\n  --mail-from <address>     Sender, e.g. \"WizeLens <a@b.com>\".          (WIZELENS_CLOUD_MAIL_FROM)\n  --mail-reply-to <address> Where replies go, e.g. \"hello@b.com\".       (WIZELENS_CLOUD_MAIL_REPLY_TO)\n  --trust-proxy             Read the client address from the last       (WIZELENS_CLOUD_TRUST_PROXY=1)\n                            X-Forwarded-For entry (your own proxy only).\n  --setup-token <text>      The first account's token. Default: random, (WIZELENS_CLOUD_SETUP_TOKEN)\n                            printed at start while no account exists.\n  --check-pwned-passwords   Refuse breached passwords. Default on with  (WIZELENS_CLOUD_CHECK_PWNED=1|0)\n  --no-check-pwned-passwords Postgres, off with PGlite.\n  --sso-origins <list>      Identity provider origins for OIDC single   (WIZELENS_CLOUD_SSO_ORIGINS)\n                            sign-on, comma separated, for example\n                            https://acme.okta.com. SAML needs none.\n  --help                    Show this help.\n";
+export declare const USAGE = "wizelens-cloud: the WizeLens service for many teams.\n\nUsage: wizelens-cloud [options]\n       wizelens-cloud plan set <org> <plan> [--gb <n>] [--retention-days <n>]\n       wizelens-cloud stripe-setup --stripe-secret-key <key>\n\n  --database <url>          postgres://..., pglite:<folder>, or memory.\n                            Default pglite:./.wizelens-cloud.          (DATABASE_URL)\n  --clickhouse <url>        Scale mode: telemetry in ClickHouse,        (WIZELENS_CLOUD_CLICKHOUSE_URL)\n                            http://user:pass@host:8123/database.\n  --settle-workers <n>      Threads that settle new traces. 0 uses the  (WIZELENS_CLOUD_SETTLE_WORKERS)\n                            main thread. Default CPUs - 1, at most 4.\n  --port <n>                Default 5970.                               (PORT)\n  --host <addr>             Default 0.0.0.0.                            (WIZELENS_CLOUD_HOST)\n  --public-url <url>        The address people use, for links.          (WIZELENS_CLOUD_PUBLIC_URL)\n  --mcp-url <url>           Another origin your proxy sends to MCP,     (WIZELENS_CLOUD_MCP_URL)\n                            e.g. https://mcp.example.com.\n  --signup <invite|open>    Who can make an account. Default invite.    (WIZELENS_CLOUD_SIGNUP)\n  --retention-days <n>      Default for new organizations. Default 30.  (WIZELENS_CLOUD_RETENTION_DAYS)\n  --ingest-per-minute <n>   Ingest calls per key per minute. Default    (WIZELENS_CLOUD_INGEST_PER_MINUTE)\n                            1200.\n  --slow-query-ms <n>       A database call this slow is slow. Default  (WIZELENS_CLOUD_SLOW_QUERY_MS)\n                            100. Projects can set their own.\n  --n-plus-one <n>          Similar calls in a request that make an     (WIZELENS_CLOUD_N_PLUS_ONE)\n                            N+1. Default 5.\n  --allow-private-webhooks  Let alert webhooks and uptime checks reach (WIZELENS_CLOUD_ALLOW_PRIVATE_WEBHOOKS=1)\n                            private addresses.\n  --auth-secret <text>      Signs sessions, encrypts 2FA secrets. 32+   (WIZELENS_CLOUD_AUTH_SECRET)\n                            characters; \"2:new,1:old\" rotates.\n                            Required with Postgres.\n  --resend-api-key <key>    Outgoing mail through Resend (re_...).      (WIZELENS_CLOUD_RESEND_API_KEY)\n                            Needs --public-url.\n  --resend-webhook-secret <s>  The Resend webhook's whsec_ secret:     (WIZELENS_CLOUD_RESEND_WEBHOOK_SECRET)\n                            bounces and complaints stop later mail.\n                            Webhook URL: <public-url>/_wizelens/api/mail/resend\n  --smtp-url <url>          Or mail over SMTP: smtp://user:pass@host:587 (WIZELENS_CLOUD_SMTP_URL)\n                            or smtps://...:465. Needs --public-url.\n  --mail-from <address>     Sender, e.g. \"WizeLens <a@b.com>\".          (WIZELENS_CLOUD_MAIL_FROM)\n  --mail-reply-to <address> Where replies go, e.g. \"hello@b.com\".       (WIZELENS_CLOUD_MAIL_REPLY_TO)\n  --trust-proxy             Read the client address from the last       (WIZELENS_CLOUD_TRUST_PROXY=1)\n                            X-Forwarded-For entry (your own proxy only).\n  --setup-token <text>      The first account's token. Default: random, (WIZELENS_CLOUD_SETUP_TOKEN)\n                            printed at start while no account exists.\n  --check-pwned-passwords   Refuse breached passwords. Default on with  (WIZELENS_CLOUD_CHECK_PWNED=1|0)\n  --no-check-pwned-passwords Postgres, off with PGlite.\n  --sso-origins <list>      Identity provider origins for OIDC single   (WIZELENS_CLOUD_SSO_ORIGINS)\n                            sign-on, comma separated, for example\n                            https://acme.okta.com. SAML needs none.\n  --stripe-secret-key <key> Turns billing on (sk_... or rk_...).       (WIZELENS_CLOUD_STRIPE_SECRET_KEY)\n                            Without it, every organization is unlimited.\n  --stripe-webhook-secret <s>  The Stripe webhook's whsec_ secret.     (WIZELENS_CLOUD_STRIPE_WEBHOOK_SECRET)\n                            Webhook URL: <public-url>/_wizelens/api/auth/stripe/webhook\n  --stripe-prices <json>    Price and meter ids, as stripe-setup        (WIZELENS_CLOUD_STRIPE_PRICES)\n                            prints them.\n  --help                   Show this help.\n";
 /** Options from the command line, then from the environment. */
 export declare function optionsFromArgs(argv: string[], env: NodeJS.ProcessEnv): CloudOptions | "help";
 //# sourceMappingURL=cli-args.d.ts.map

package/dist/cli-args.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli-args.d.ts","sourceRoot":"","sources":["../src/cli-args.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAc,MAAM,aAAa,CAAC;AAE5D,eAAO,MAAM,KAAK,65FAsCjB,CAAC;AAmCF,gEAAgE;AAChE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,YAAY,GAAG,MAAM,CAwB7F"}
+{"version":3,"file":"cli-args.d.ts","sourceRoot":"","sources":["../src/cli-args.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAc,MAAM,aAAa,CAAC;AAE5D,eAAO,MAAM,KAAK,4uIAuDjB,CAAC;AA0CF,gEAAgE;AAChE,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,YAAY,GAAG,MAAM,CA+B7F"}