@wizeworks/lens-cloud 0.3.0-alpha.3 → 0.3.0-alpha.5

package/dist/billing/gate.js

@@ -0,0 +1,27 @@
+import { HttpError } from "../http/http.js";
+import { orgHas, orgLimits } from "../repo/billing.js";
+import { PLANS, planFor } from "./plans.js";
+export const FEATURE_NAME = { sso: "Single sign-on", scim: "SCIM provisioning", auditExport: "Audit log export" };
+/** What a 402 says: the feature, and the plan it needs. */
+export function planRequired(feature) {
+    const plan = planFor(feature);
+    return { message: `${FEATURE_NAME[feature]} needs the ${PLANS[plan].name} plan. Upgrade on the Billing page.`, plan };
+}
+/** 402 with the plan it needs, unless the organization's plan has the feature (always, with billing off). */
+export async function requireFeature(app, orgId, feature) {
+    if (await orgHas(app.db, orgId, app.billing.on, feature))
+        return;
+    const { message, plan } = planRequired(feature);
+    throw new HttpError(402, message, { plan, feature });
+}
+/** The cheapest plan that keeps data `days` long. */
+const planForDays = (days) => ["team", "business", "enterprise"].find((p) => PLANS[p].maxRetentionDays >= days) ?? "enterprise";
+/** 402 when the retention is longer than the plan allows. */
+export async function requireRetention(app, orgId, days) {
+    const limits = await orgLimits(app.db, orgId, app.billing.on);
+    if (days <= limits.maxRetentionDays)
+        return;
+    const plan = planForDays(days);
+    throw new HttpError(402, `The ${limits.plan.name} plan keeps data up to ${limits.maxRetentionDays} days. ${days} days needs the ${PLANS[plan].name} plan.`, { plan, maxRetentionDays: limits.maxRetentionDays });
+}
+//# sourceMappingURL=gate.js.map

package/dist/billing/gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gate.js","sourceRoot":"","sources":["../../src/billing/gate.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAgB,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAE1D,MAAM,CAAC,MAAM,YAAY,GAA4B,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,mBAAmB,EAAE,WAAW,EAAE,kBAAkB,EAAE,CAAC;AAE3I,2DAA2D;AAC3D,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC9B,OAAO,EAAE,OAAO,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,cAAc,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,qCAAqC,EAAE,IAAI,EAAE,CAAC;AACxH,CAAC;AAED,6GAA6G;AAC7G,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAa,EAAE,KAAa,EAAE,OAAgB;IACjF,IAAI,MAAM,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC;QAAE,OAAO;IACjE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AACvD,CAAC;AAED,qDAAqD;AACrD,MAAM,WAAW,GAAG,CAAC,IAAY,EAAE,EAAE,CAAE,CAAC,MAAM,EAAE,UAAU,EAAE,YAAY,CAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,IAAI,IAAI,CAAC,IAAI,YAAY,CAAC;AAEnJ,6DAA6D;AAC7D,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAa,EAAE,KAAa,EAAE,IAAY;IAC/E,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC9D,IAAI,IAAI,IAAI,MAAM,CAAC,gBAAgB;QAAE,OAAO;IAC5C,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,IAAI,SAAS,CAAC,GAAG,EAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,0BAA0B,MAAM,CAAC,gBAAgB,UAAU,IAAI,mBAAmB,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,QAAQ,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;AACnN,CAAC"}

package/dist/billing/limits.d.ts

@@ -0,0 +1,29 @@
+import type { Queryable } from "../db/db.js";
+import { type OrgBilling } from "../repo/billing.js";
+import { type Limits } from "./plans.js";
+import { type UsageMeter } from "./usage.js";
+export interface UsageState {
+    billing: OrgBilling;
+    limits: Limits;
+    monthGb: number;
+    /** Why ingest is stopped, or null. */
+    blocked: string | null;
+    /** "free" or "cap" when blocked. */
+    reason: "free" | "cap" | null;
+}
+/** The block, if any, for a plan and this month's GB. */
+export declare function blockOf(b: OrgBilling, limits: Limits, monthGb: number): Pick<UsageState, "blocked" | "reason">;
+/** Plans cached for a minute per instance, so ingest does not read orgs on every call. */
+export declare class Limiter {
+    #private;
+    private readonly db;
+    private readonly usage;
+    private readonly on;
+    private readonly now;
+    constructor(db: Queryable, usage: UsageMeter, on: boolean, now: () => number);
+    forget(orgId: string): void;
+    state(orgId: string): Promise<UsageState | null>;
+    /** The message for a 429 when ingest is stopped, else null. The first block of a month goes to the audit log. */
+    blocked(orgId: string): Promise<string | null>;
+}
+//# sourceMappingURL=limits.d.ts.map

package/dist/billing/limits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.d.ts","sourceRoot":"","sources":["../../src/billing/limits.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,OAAO,EAAE,KAAK,UAAU,EAAc,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAgB,KAAK,MAAM,EAA0B,MAAM,YAAY,CAAC;AAC/E,OAAO,EAAW,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAMtD,MAAM,WAAW,UAAU;IACzB,OAAO,EAAE,UAAU,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,sCAAsC;IACtC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,oCAAoC;IACpC,MAAM,EAAE,MAAM,GAAG,KAAK,GAAG,IAAI,CAAC;CAC/B;AAID,yDAAyD;AACzD,wBAAgB,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,SAAS,GAAG,QAAQ,CAAC,CAS9G;AAED,0FAA0F;AAC1F,qBAAa,OAAO;;IAMhB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,EAAE;IACnB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAJtB,YACmB,EAAE,EAAE,SAAS,EACb,KAAK,EAAE,UAAU,EACjB,EAAE,EAAE,OAAO,EACX,GAAG,EAAE,MAAM,MAAM,EAChC;IAEJ,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAE1B;IAEK,KAAK,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAQrD;IAED,iHAAiH;IAC3G,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAMnD;CAUF"}

package/dist/billing/limits.js

@@ -0,0 +1,69 @@
+import { audit } from "../repo/audit.js";
+import { orgBilling } from "../repo/billing.js";
+import { BYTES_PER_GB, limitsOf, overageCents } from "./plans.js";
+import { monthOf } from "./usage.js";
+// Whether an organization may send more data this month: the Free cap and the optional spend cap on Team and Business.
+const PLAN_TTL_MS = 60_000;
+const usd = (cents) => `$${(cents / 100).toFixed(cents % 100 ? 2 : 0)}`;
+/** The block, if any, for a plan and this month's GB. */
+export function blockOf(b, limits, monthGb) {
+    const included = limits.includedGb;
+    if (limits.plan.id === "free" && included !== null && monthGb >= included) {
+        return { reason: "free", blocked: `This organization reached the Free plan's ${included} GB for this month. Data is accepted again on the 1st (UTC), or upgrade on the Billing page.` };
+    }
+    if (limits.plan.overage && included !== null && b.spendCapCents !== null && overageCents(monthGb - included) >= b.spendCapCents) {
+        return { reason: "cap", blocked: `This organization reached its monthly spend cap of ${usd(b.spendCapCents)}. Raise the cap on the Billing page, or data is accepted again on the 1st (UTC).` };
+    }
+    return { reason: null, blocked: null };
+}
+/** Plans cached for a minute per instance, so ingest does not read orgs on every call. */
+export class Limiter {
+    db;
+    usage;
+    on;
+    now;
+    #plans = new Map();
+    /** Blocks already written to the audit log, by "orgId|month|reason". */
+    #logged = new Set();
+    constructor(db, usage, on, now) {
+        this.db = db;
+        this.usage = usage;
+        this.on = on;
+        this.now = now;
+    }
+    forget(orgId) {
+        this.#plans.delete(orgId);
+    }
+    async state(orgId) {
+        const hit = this.#plans.get(orgId);
+        const b = hit && this.now() - hit.at < PLAN_TTL_MS ? hit.b : await orgBilling(this.db, orgId);
+        if (!b)
+            return null;
+        if (!hit || hit.b !== b)
+            this.#plans.set(orgId, { b, at: this.now() });
+        const limits = limitsOf(b, this.on);
+        const monthGb = (await this.usage.monthBytes(orgId)) / BYTES_PER_GB;
+        return { billing: b, limits, monthGb, ...(this.on ? blockOf(b, limits, monthGb) : { blocked: null, reason: null }) };
+    }
+    /** The message for a 429 when ingest is stopped, else null. The first block of a month goes to the audit log. */
+    async blocked(orgId) {
+        if (!this.on)
+            return null;
+        const s = await this.state(orgId);
+        if (!s?.blocked)
+            return null;
+        await this.#logOnce(orgId, s);
+        return s.blocked;
+    }
+    async #logOnce(orgId, s) {
+        const month = monthOf(this.now());
+        const key = `${orgId}|${month}|${s.reason}`;
+        if (this.#logged.has(key))
+            return;
+        this.#logged.add(key);
+        const fresh = await this.db.query("INSERT INTO usage_notices (org_id, month, kind, sent_ms) VALUES ($1, $2, $3, $4) ON CONFLICT DO NOTHING RETURNING org_id", [orgId, month, `blocked-${s.reason}`, this.now()]);
+        if (fresh.length)
+            await audit(this.db, orgId, "system", "ingest.blocked", { reason: s.reason, month, gb: Math.round(s.monthGb * 100) / 100 }, this.now());
+    }
+}
+//# sourceMappingURL=limits.js.map

package/dist/billing/limits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"limits.js","sourceRoot":"","sources":["../../src/billing/limits.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAmB,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,YAAY,EAAe,QAAQ,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC/E,OAAO,EAAE,OAAO,EAAmB,MAAM,YAAY,CAAC;AAEtD,uHAAuH;AAEvH,MAAM,WAAW,GAAG,MAAM,CAAC;AAY3B,MAAM,GAAG,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAEhF,yDAAyD;AACzD,MAAM,UAAU,OAAO,CAAC,CAAa,EAAE,MAAc,EAAE,OAAe;IACpE,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC;IACnC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,MAAM,IAAI,QAAQ,KAAK,IAAI,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC1E,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,6CAA6C,QAAQ,8FAA8F,EAAE,CAAC;IAC1L,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,QAAQ,KAAK,IAAI,IAAI,CAAC,CAAC,aAAa,KAAK,IAAI,IAAI,YAAY,CAAC,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QAChI,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,sDAAsD,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,kFAAkF,EAAE,CAAC;IAClM,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC;AAED,0FAA0F;AAC1F,MAAM,OAAO,OAAO;IAMC,EAAE;IACF,KAAK;IACL,EAAE;IACF,GAAG;IARtB,MAAM,GAAG,IAAI,GAAG,EAAyC,CAAC;IAC1D,wEAAwE;IACxE,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5B,YACmB,EAAa,EACb,KAAiB,EACjB,EAAW,EACX,GAAiB;kBAHjB,EAAE;qBACF,KAAK;kBACL,EAAE;mBACF,GAAG;IACnB,CAAC;IAEJ,MAAM,CAAC,KAAa;QAClB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5B,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAa;QACvB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACnC,MAAM,CAAC,GAAG,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,UAAU,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;QAC9F,IAAI,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACpB,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,GAAG,YAAY,CAAC;QACpE,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACvH,CAAC;IAED,iHAAiH;IACjH,KAAK,CAAC,OAAO,CAAC,KAAa;QACzB,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAClC,IAAI,CAAC,CAAC,EAAE,OAAO;YAAE,OAAO,IAAI,CAAC;QAC7B,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAC9B,OAAO,CAAC,CAAC,OAAO,CAAC;IACnB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,KAAa,EAAE,CAAa;QACzC,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;QAClC,MAAM,GAAG,GAAG,GAAG,KAAK,IAAI,KAAK,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAClC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,0HAA0H,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACjN,IAAI,KAAK,CAAC,MAAM;YAAE,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,GAAG,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5J,CAAC;CACF"}

package/dist/billing/notices.d.ts

@@ -0,0 +1,4 @@
+import type { CloudApp } from "../app.js";
+/** Every organization that sent data this month. Runs after each usage flush. */
+export declare function sendUsageNotices(app: CloudApp): Promise<void>;
+//# sourceMappingURL=notices.d.ts.map

package/dist/billing/notices.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notices.d.ts","sourceRoot":"","sources":["../../src/billing/notices.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAmC1C,iFAAiF;AACjF,wBAAsB,gBAAgB,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CASnE"}

package/dist/billing/notices.js

@@ -0,0 +1,40 @@
+import { spendCapReached, usageNotice } from "../mail/emails-billing.js";
+import { renderMail } from "../mail/templates.js";
+import { monthOf } from "./usage.js";
+// Mail to owners and admins at 80% and 100% of the included GB, and when the spend cap stops ingest: once a month each.
+/** True the first time this organization reaches `kind` this month, on any instance. */
+async function claim(app, orgId, month, kind) {
+    const rows = await app.db.query("INSERT INTO usage_notices (org_id, month, kind, sent_ms) VALUES ($1, $2, $3, $4) ON CONFLICT DO NOTHING RETURNING org_id", [orgId, month, kind, app.config.now()]);
+    return rows.length > 0;
+}
+async function tell(app, orgId, content) {
+    const people = await app.db.query("SELECT u.email FROM members m JOIN users u ON u.id = m.user_id WHERE m.org_id = $1 AND m.role IN ('owner', 'admin') AND (u.email_verified OR NOT $2) ORDER BY u.email", [orgId, app.mailer.live]);
+    for (const p of people)
+        app.mailer.send(renderMail(p.email, content));
+}
+async function checkOrg(app, org, month, url) {
+    const s = await app.billing.limits.state(org.id);
+    const included = s?.limits.includedGb;
+    if (!s || !included)
+        return;
+    const percent = (s.monthGb / included) * 100;
+    const notice = (level) => usageNotice({ org: org.name, plan: s.limits.plan.name, usedGb: s.monthGb, includedGb: included, percent: level, overage: s.limits.plan.overage, url });
+    // At 100%, the 80% notice counts as sent, so a fast month never sends both.
+    if (percent >= 100 && (await claim(app, org.id, month, "mail100")))
+        await claim(app, org.id, month, "mail80").then(() => tell(app, org.id, notice(100)));
+    else if (percent >= 80 && (await claim(app, org.id, month, "mail80")))
+        await tell(app, org.id, notice(80));
+    if (s.reason === "cap" && (await claim(app, org.id, month, "mail-cap")))
+        await tell(app, org.id, spendCapReached(org.name, (s.billing.spendCapCents ?? 0) / 100, url));
+}
+/** Every organization that sent data this month. Runs after each usage flush. */
+export async function sendUsageNotices(app) {
+    if (!app.billing.on)
+        return;
+    const month = monthOf(app.config.now());
+    const orgs = await app.db.query("SELECT o.id, o.name FROM orgs o WHERE o.plan IN ('free', 'team', 'business', 'enterprise') AND EXISTS (SELECT 1 FROM usage_daily u WHERE u.org_id = o.id AND u.day LIKE $1)", [`${month}-%`]);
+    const url = `${app.baseUrl()}/_wizelens/#/team/billing`;
+    for (const org of orgs)
+        await checkOrg(app, org, month, url);
+}
+//# sourceMappingURL=notices.js.map

package/dist/billing/notices.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notices.js","sourceRoot":"","sources":["../../src/billing/notices.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAElD,OAAO,EAAE,OAAO,EAAE,MAAM,YAAY,CAAC;AAErC,wHAAwH;AAExH,wFAAwF;AACxF,KAAK,UAAU,KAAK,CAAC,GAAa,EAAE,KAAa,EAAE,KAAa,EAAE,IAAY;IAC5E,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,0HAA0H,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACpM,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;AACzB,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,GAAa,EAAE,KAAa,EAAE,OAAqB;IACrE,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAC/B,uKAAuK,EACvK,CAAC,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CACzB,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,MAAM;QAAE,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,GAAa,EAAE,GAAiC,EAAE,KAAa,EAAE,GAAW;IAClG,MAAM,CAAC,GAAsB,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACtC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ;QAAE,OAAO;IAC5B,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,OAAO,GAAG,QAAQ,CAAC,GAAG,GAAG,CAAC;IAC7C,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IACzL,4EAA4E;IAC5E,IAAI,OAAO,IAAI,GAAG,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;QAAE,MAAM,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACpJ,IAAI,OAAO,IAAI,EAAE,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QAAE,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IAC3G,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,MAAM,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QAAE,MAAM,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AACzK,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAa;IAClD,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO;IAC5B,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,EAAE,CAAC,KAAK,CAC7B,6KAA6K,EAC7K,CAAC,GAAG,KAAK,IAAI,CAAC,CACf,CAAC;IACF,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,OAAO,EAAE,2BAA2B,CAAC;IACxD,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,MAAM,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;AAC/D,CAAC"}

package/dist/billing/options.d.ts

@@ -0,0 +1,37 @@
+import type { Stripe } from "stripe";
+/** The Stripe ids `wizelens-cloud stripe-setup` prints, passed back as `--stripe-prices` JSON. */
+export interface StripePrices {
+    teamMonthly: string;
+    teamAnnual: string;
+    businessMonthly: string;
+    businessAnnual: string;
+    /** The graduated metered price on the GB meter, billed monthly. */
+    overage: string;
+    /** The meter's event name, `wizelens_gb`. */
+    meter: string;
+}
+export declare const PRICE_KEYS: readonly (keyof StripePrices)[];
+/** The Stripe calls the cloud makes. Tests pass a fake with the same shape. */
+export type StripeClient = Stripe;
+export interface BillingOptions {
+    /** Stripe's secret key (sk_ or rk_). Without it billing is off: every organization is unlimited. */
+    stripeSecretKey?: string;
+    /** The Stripe webhook's whsec_ signing secret. */
+    stripeWebhookSecret?: string;
+    /** Price and meter ids, as JSON text or an object. */
+    stripePrices?: string | StripePrices;
+    /** For tests: a Stripe client in place of the real one. */
+    stripeClient?: StripeClient;
+}
+export interface BillingConfig {
+    on: boolean;
+    stripeSecretKey?: string;
+    stripeWebhookSecret?: string;
+    prices?: StripePrices;
+    stripeClient?: StripeClient;
+}
+/** Billing is on only with a Stripe key; then the webhook secret, the prices, and a public URL must come too. */
+export declare function resolveBilling(o: BillingOptions & {
+    publicUrl?: string;
+}): BillingConfig;
+//# sourceMappingURL=options.d.ts.map

package/dist/billing/options.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.d.ts","sourceRoot":"","sources":["../../src/billing/options.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAErC,kGAAkG;AAClG,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;IACvB,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,6CAA6C;IAC7C,KAAK,EAAE,MAAM,CAAC;CACf;AAED,eAAO,MAAM,UAAU,EAAE,SAAS,CAAC,MAAM,YAAY,CAAC,EAA2F,CAAC;AAElJ,+EAA+E;AAC/E,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC;AAElC,MAAM,WAAW,cAAc;IAC7B,oGAAoG;IACpG,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kDAAkD;IAClD,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,sDAAsD;IACtD,YAAY,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC;IACrC,2DAA2D;IAC3D,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,OAAO,CAAC;IACZ,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,YAAY,CAAC,EAAE,YAAY,CAAC;CAC7B;AAiBD,iHAAiH;AACjH,wBAAgB,cAAc,CAAC,CAAC,EAAE,cAAc,GAAG;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,aAAa,CASxF"}

package/dist/billing/options.js

@@ -0,0 +1,33 @@
+export const PRICE_KEYS = ["teamMonthly", "teamAnnual", "businessMonthly", "businessAnnual", "overage", "meter"];
+function pricesOf(raw) {
+    let v = raw;
+    if (typeof raw === "string") {
+        try {
+            v = JSON.parse(raw);
+        }
+        catch {
+            throw new Error("--stripe-prices must be JSON, as `wizelens-cloud stripe-setup` prints it.");
+        }
+    }
+    const o = (v ?? {});
+    const missing = PRICE_KEYS.filter((k) => typeof o[k] !== "string" || !o[k]);
+    if (missing.length)
+        throw new Error(`--stripe-prices is missing ${missing.join(", ")}. Run wizelens-cloud stripe-setup to make them.`);
+    return Object.fromEntries(PRICE_KEYS.map((k) => [k, o[k]]));
+}
+/** Billing is on only with a Stripe key; then the webhook secret, the prices, and a public URL must come too. */
+export function resolveBilling(o) {
+    if (!o.stripeSecretKey) {
+        if (o.stripeWebhookSecret || o.stripePrices)
+            throw new Error("--stripe-webhook-secret and --stripe-prices need --stripe-secret-key.");
+        return { on: false };
+    }
+    if (!/^(sk|rk)_/.test(o.stripeSecretKey))
+        throw new Error("--stripe-secret-key must be a Stripe secret key (it starts with sk_ or rk_).");
+    if (!o.stripeWebhookSecret?.startsWith("whsec_"))
+        throw new Error("Billing needs --stripe-webhook-secret (it starts with whsec_).");
+    if (!o.publicUrl)
+        throw new Error("Billing needs --public-url, so Stripe sends people back to this cloud.");
+    return { on: true, stripeSecretKey: o.stripeSecretKey, stripeWebhookSecret: o.stripeWebhookSecret, prices: pricesOf(o.stripePrices), stripeClient: o.stripeClient };
+}
+//# sourceMappingURL=options.js.map

package/dist/billing/options.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"options.js","sourceRoot":"","sources":["../../src/billing/options.ts"],"names":[],"mappings":"AAcA,MAAM,CAAC,MAAM,UAAU,GAAoC,CAAC,aAAa,EAAE,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;AAwBlJ,SAAS,QAAQ,CAAC,GAAsC;IACtD,IAAI,CAAC,GAAY,GAAG,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC;YACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,2EAA2E,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAA4B,CAAC;IAC/C,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACvI,OAAO,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAA4B,CAAC;AACzF,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,cAAc,CAAC,CAA0C;IACvE,IAAI,CAAC,CAAC,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,mBAAmB,IAAI,CAAC,CAAC,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,uEAAuE,CAAC,CAAC;QACtI,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;IACvB,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAC1I,IAAI,CAAC,CAAC,CAAC,mBAAmB,EAAE,UAAU,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;IACpI,IAAI,CAAC,CAAC,CAAC,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAC;IAC5G,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,mBAAmB,EAAE,CAAC,CAAC,mBAAmB,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC;AACtK,CAAC"}

package/dist/billing/plans.d.ts

@@ -0,0 +1,50 @@
+export type PlanId = "unlimited" | "free" | "team" | "business" | "enterprise";
+export type Feature = "sso" | "scim" | "auditExport";
+/** The plans people buy through Stripe. */
+export type PaidPlanId = "team" | "business";
+export interface Plan {
+    id: PlanId;
+    name: string;
+    /** Dollars per month; null when the price is set by hand (Enterprise) or there is none. */
+    monthlyUsd: number | null;
+    /** Dollars per year: 10 months' price for 12. */
+    annualUsd: number | null;
+    /** GB a month included; null means no limit. */
+    includedGb: number | null;
+    /** The longest retention the plan allows, in days. */
+    maxRetentionDays: number;
+    /** Past the included GB, data keeps coming and costs extra (Team and Business). False: ingest stops at the cap. */
+    overage: boolean;
+    features: Record<Feature, boolean>;
+}
+export declare const PLANS: Record<PlanId, Plan>;
+export declare const PLAN_IDS: PlanId[];
+export declare const PAID_PLANS: readonly PaidPlanId[];
+export declare const isPlanId: (v: unknown) => v is PlanId;
+export declare const isPaidPlan: (v: unknown) => v is PaidPlanId;
+/** Extra data, graduated, counted on the GB above the plan's included GB each month: first 500 at $0.30, next 1,500 at $0.20, then $0.10. */
+export declare const OVERAGE_TIERS: readonly {
+    upToGb: number | null;
+    centsPerGb: number;
+}[];
+/** A GB is 10^9 bytes of request body as sent, before compression is undone. */
+export declare const BYTES_PER_GB = 1000000000;
+/** What `extraGb` above the included GB costs, in cents, with the graduated tiers. */
+export declare function overageCents(extraGb: number): number;
+/** One organization's billing columns. */
+export interface OrgPlanRow {
+    plan: PlanId;
+    /** Enterprise only: the GB a month and the retention set by hand. */
+    planGb: number | null;
+    planRetentionDays: number | null;
+}
+/** The limits that apply now: everything is unlimited while billing is off. */
+export interface Limits {
+    plan: Plan;
+    includedGb: number | null;
+    maxRetentionDays: number;
+}
+export declare function limitsOf(row: OrgPlanRow, billingOn: boolean): Limits;
+/** The cheapest plan with a feature, for a 402 answer and the upgrade prompt. */
+export declare const planFor: (feature: Feature) => PaidPlanId | "enterprise";
+//# sourceMappingURL=plans.d.ts.map

package/dist/billing/plans.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plans.d.ts","sourceRoot":"","sources":["../../src/billing/plans.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,MAAM,GAAG,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,UAAU,GAAG,YAAY,CAAC;AAC/E,MAAM,MAAM,OAAO,GAAG,KAAK,GAAG,MAAM,GAAG,aAAa,CAAC;AACrD,2CAA2C;AAC3C,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,UAAU,CAAC;AAE7C,MAAM,WAAW,IAAI;IACnB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,2FAA2F;IAC3F,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,iDAAiD;IACjD,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,gDAAgD;IAChD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,sDAAsD;IACtD,gBAAgB,EAAE,MAAM,CAAC;IACzB,mHAAmH;IACnH,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;CACpC;AAKD,eAAO,MAAM,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,IAAI,CAMtC,CAAC;AAEF,eAAO,MAAM,QAAQ,EAAyB,MAAM,EAAE,CAAC;AACvD,eAAO,MAAM,UAAU,EAAE,SAAS,UAAU,EAAyB,CAAC;AACtE,eAAO,MAAM,QAAQ,MAAO,OAAO,KAAG,CAAC,IAAI,MAA6C,CAAC;AACzF,eAAO,MAAM,UAAU,MAAO,OAAO,KAAG,CAAC,IAAI,UAA8C,CAAC;AAE5F,6IAA6I;AAC7I,eAAO,MAAM,aAAa,EAAE,SAAS;IAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,EAIjF,CAAC;AAEF,gFAAgF;AAChF,eAAO,MAAM,YAAY,aAAM,CAAC;AAEhC,sFAAsF;AACtF,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAYpD;AAED,0CAA0C;AAC1C,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AAED,+EAA+E;AAC/E,MAAM,WAAW,MAAM;IACrB,IAAI,EAAE,IAAI,CAAC;IACX,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,SAAS,EAAE,OAAO,GAAG,MAAM,CAIpE;AAED,iFAAiF;AACjF,eAAO,MAAM,OAAO,YAAa,OAAO,KAAG,UAAU,GAAG,YAAsH,CAAC"}

package/dist/billing/plans.js

@@ -0,0 +1,47 @@
+// Cloud plans, prices, and limits in one place (docs/BILLING-PLAN.md). A first version: change them here only.
+const none = { sso: false, scim: false, auditExport: false };
+const all = { sso: true, scim: true, auditExport: true };
+export const PLANS = {
+    unlimited: { id: "unlimited", name: "Unlimited", monthlyUsd: null, annualUsd: null, includedGb: null, maxRetentionDays: 400, overage: false, features: all },
+    free: { id: "free", name: "Free", monthlyUsd: 0, annualUsd: 0, includedGb: 10, maxRetentionDays: 14, overage: false, features: none },
+    team: { id: "team", name: "Team", monthlyUsd: 29, annualUsd: 290, includedGb: 50, maxRetentionDays: 30, overage: true, features: none },
+    business: { id: "business", name: "Business", monthlyUsd: 99, annualUsd: 990, includedGb: 150, maxRetentionDays: 90, overage: true, features: all },
+    enterprise: { id: "enterprise", name: "Enterprise", monthlyUsd: null, annualUsd: null, includedGb: null, maxRetentionDays: 400, overage: false, features: all },
+};
+export const PLAN_IDS = Object.keys(PLANS);
+export const PAID_PLANS = ["team", "business"];
+export const isPlanId = (v) => typeof v === "string" && v in PLANS;
+export const isPaidPlan = (v) => v === "team" || v === "business";
+/** Extra data, graduated, counted on the GB above the plan's included GB each month: first 500 at $0.30, next 1,500 at $0.20, then $0.10. */
+export const OVERAGE_TIERS = [
+    { upToGb: 500, centsPerGb: 30 },
+    { upToGb: 2000, centsPerGb: 20 },
+    { upToGb: null, centsPerGb: 10 },
+];
+/** A GB is 10^9 bytes of request body as sent, before compression is undone. */
+export const BYTES_PER_GB = 1e9;
+/** What `extraGb` above the included GB costs, in cents, with the graduated tiers. */
+export function overageCents(extraGb) {
+    let left = Math.max(0, extraGb);
+    let from = 0;
+    let cents = 0;
+    for (const t of OVERAGE_TIERS) {
+        const size = t.upToGb === null ? left : Math.min(left, t.upToGb - from);
+        cents += size * t.centsPerGb;
+        left -= size;
+        if (t.upToGb !== null)
+            from = t.upToGb;
+        if (left <= 0)
+            break;
+    }
+    return Math.round(cents * 100) / 100;
+}
+export function limitsOf(row, billingOn) {
+    const plan = PLANS[billingOn ? row.plan : "unlimited"] ?? PLANS.free;
+    if (plan.id !== "enterprise")
+        return { plan, includedGb: plan.includedGb, maxRetentionDays: plan.maxRetentionDays };
+    return { plan, includedGb: row.planGb, maxRetentionDays: Math.min(400, row.planRetentionDays ?? 400) };
+}
+/** The cheapest plan with a feature, for a 402 answer and the upgrade prompt. */
+export const planFor = (feature) => (PLANS.team.features[feature] ? "team" : PLANS.business.features[feature] ? "business" : "enterprise");
+//# sourceMappingURL=plans.js.map

package/dist/billing/plans.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plans.js","sourceRoot":"","sources":["../../src/billing/plans.ts"],"names":[],"mappings":"AAAA,+GAA+G;AAuB/G,MAAM,IAAI,GAA6B,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AACvF,MAAM,GAAG,GAA6B,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;AAEnF,MAAM,CAAC,MAAM,KAAK,GAAyB;IACzC,SAAS,EAAE,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE;IAC5J,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE;IACrI,IAAI,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,gBAAgB,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;IACvI,QAAQ,EAAE,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,gBAAgB,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE;IACnJ,UAAU,EAAE,EAAE,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE;CAChK,CAAC;AAEF,MAAM,CAAC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAa,CAAC;AACvD,MAAM,CAAC,MAAM,UAAU,GAA0B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;AACtE,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,CAAU,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,IAAI,KAAK,CAAC;AACzF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,CAAU,EAAmB,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,CAAC,KAAK,UAAU,CAAC;AAE5F,6IAA6I;AAC7I,MAAM,CAAC,MAAM,aAAa,GAA6D;IACrF,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE;IAC/B,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE;IAChC,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE;CACjC,CAAC;AAEF,gFAAgF;AAChF,MAAM,CAAC,MAAM,YAAY,GAAG,GAAG,CAAC;AAEhC,sFAAsF;AACtF,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,IAAI,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAChC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;QACxE,KAAK,IAAI,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC;QAC7B,IAAI,IAAI,IAAI,CAAC;QACb,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;YAAE,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC;QACvC,IAAI,IAAI,IAAI,CAAC;YAAE,MAAM;IACvB,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;AACvC,CAAC;AAiBD,MAAM,UAAU,QAAQ,CAAC,GAAe,EAAE,SAAkB;IAC1D,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC;IACrE,IAAI,IAAI,CAAC,EAAE,KAAK,YAAY;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;IACpH,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,gBAAgB,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,EAAE,CAAC;AACzG,CAAC;AAED,iFAAiF;AACjF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,OAAgB,EAA6B,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC"}

package/dist/billing/report.d.ts

@@ -0,0 +1,26 @@
+import type { Queryable } from "../db/db.js";
+import { type PlanId } from "./plans.js";
+import type { StripeClient, StripePrices } from "./options.js";
+export interface ReportDeps {
+    db: Queryable;
+    client: StripeClient;
+    prices: StripePrices;
+    now: () => number;
+}
+interface PaidOrg {
+    id: string;
+    plan: PlanId;
+    plan_gb: number | null;
+    plan_retention_days: number | null;
+    stripe_customer_id: string;
+}
+/** Completed days from a week back to yesterday, oldest first. */
+export declare function daysToReport(nowMs: number): string[];
+/** Report one organization's unreported days. */
+export declare function reportOrg(d: ReportDeps, org: PaidOrg): Promise<void>;
+/** Every paid organization with a usage subscription. Returns how many it checked. */
+export declare function reportUsage(d: ReportDeps): Promise<number>;
+/** One organization by id, when it is paid, for the last report before its usage subscription ends. */
+export declare function reportBeforeEnd(d: ReportDeps, orgId: string, plan: PlanId): Promise<void>;
+export {};
+//# sourceMappingURL=report.d.ts.map

package/dist/billing/report.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.d.ts","sourceRoot":"","sources":["../../src/billing/report.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAA0B,KAAK,MAAM,EAAE,MAAM,YAAY,CAAC;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAW/D,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,SAAS,CAAC;IACd,MAAM,EAAE,YAAY,CAAC;IACrB,MAAM,EAAE,YAAY,CAAC;IACrB,GAAG,EAAE,MAAM,MAAM,CAAC;CACnB;AAED,UAAU,OAAO;IACf,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,kEAAkE;AAClE,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAGpD;AAqBD,iDAAiD;AACjD,wBAAsB,SAAS,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAI1E;AAED,sFAAsF;AACtF,wBAAsB,WAAW,CAAC,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAOhE;AAED,uGAAuG;AACvG,wBAAsB,eAAe,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAG/F"}

package/dist/billing/report.js

@@ -0,0 +1,53 @@
+import { BYTES_PER_GB, limitsOf } from "./plans.js";
+import { dayOf } from "./usage.js";
+// Each finished UTC day, a paid organization's GB above its included GB goes to the Stripe meter once (wl-<org>-<day>, usage_reports).
+const DAY_MS = 86_400_000;
+/** A day is reported this long after it ends, once every instance flushed it, and well inside the hour Stripe keeps the invoice open. */
+const SETTLE_MS = 5 * 60_000;
+/** Days a rerun still catches up on (Stripe takes events up to 35 days old). */
+const CATCH_UP_DAYS = 7;
+/** Completed days from a week back to yesterday, oldest first. */
+export function daysToReport(nowMs) {
+    const last = Math.floor((nowMs - SETTLE_MS) / DAY_MS) * DAY_MS - DAY_MS;
+    return Array.from({ length: CATCH_UP_DAYS }, (_, i) => dayOf(last - (CATCH_UP_DAYS - 1 - i) * DAY_MS));
+}
+/** Whole GB above the included GB from the 1st through `day`, less what was reported earlier that month. */
+async function gbFor(q, org, day) {
+    const month = `${day.slice(0, 7)}-%`;
+    const [used] = await q.query("SELECT COALESCE(SUM(bytes), 0)::double precision AS b FROM usage_daily WHERE org_id = $1 AND day LIKE $2 AND day <= $3", [org.id, month, day]);
+    const [sent] = await q.query("SELECT COALESCE(SUM(gb), 0)::double precision AS gb FROM usage_reports WHERE org_id = $1 AND day LIKE $2", [org.id, month]);
+    const included = limitsOf({ plan: org.plan, planGb: org.plan_gb, planRetentionDays: org.plan_retention_days }, true).includedGb ?? Infinity;
+    const extra = Math.floor(Math.max(0, Number(used?.b ?? 0) / BYTES_PER_GB - included));
+    return Math.max(0, extra - Number(sent?.gb ?? 0));
+}
+async function reportDay(d, org, day) {
+    const gb = await gbFor(d.db, org, day);
+    if (gb > 0) {
+        const timestamp = Math.floor(Date.parse(`${day}T12:00:00Z`) / 1000);
+        await d.client.billing.meterEvents.create({ event_name: d.prices.meter, identifier: `wl-${org.id}-${day}`, timestamp, payload: { stripe_customer_id: org.stripe_customer_id, value: String(gb) } });
+    }
+    await d.db.query("INSERT INTO usage_reports (org_id, day, gb, reported_ms) VALUES ($1, $2, $3, $4) ON CONFLICT DO NOTHING", [org.id, day, gb, d.now()]);
+}
+/** Report one organization's unreported days. */
+export async function reportOrg(d, org) {
+    const days = daysToReport(d.now());
+    const done = new Set((await d.db.query("SELECT day FROM usage_reports WHERE org_id = $1 AND day >= $2", [org.id, days[0]])).map((r) => r.day));
+    for (const day of days)
+        if (!done.has(day))
+            await reportDay(d, org, day);
+}
+/** Every paid organization with a usage subscription. Returns how many it checked. */
+export async function reportUsage(d) {
+    const orgs = await d.db.query(`SELECT id, plan, plan_gb, plan_retention_days, stripe_customer_id FROM orgs
+     WHERE plan IN ('team', 'business') AND stripe_customer_id IS NOT NULL AND overage_subscription_id IS NOT NULL`);
+    for (const org of orgs)
+        await reportOrg(d, org);
+    return orgs.length;
+}
+/** One organization by id, when it is paid, for the last report before its usage subscription ends. */
+export async function reportBeforeEnd(d, orgId, plan) {
+    const [row] = await d.db.query("SELECT id, plan_gb, plan_retention_days, stripe_customer_id FROM orgs WHERE id = $1 AND stripe_customer_id IS NOT NULL", [orgId]);
+    if (row && (plan === "team" || plan === "business"))
+        await reportOrg(d, { ...row, plan });
+}
+//# sourceMappingURL=report.js.map

package/dist/billing/report.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"report.js","sourceRoot":"","sources":["../../src/billing/report.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAe,MAAM,YAAY,CAAC;AAEjE,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,uIAAuI;AAEvI,MAAM,MAAM,GAAG,UAAU,CAAC;AAC1B,yIAAyI;AACzI,MAAM,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC;AAC7B,gFAAgF;AAChF,MAAM,aAAa,GAAG,CAAC,CAAC;AAiBxB,kEAAkE;AAClE,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,SAAS,CAAC,GAAG,MAAM,CAAC,GAAG,MAAM,GAAG,MAAM,CAAC;IACxE,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,aAAa,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;AACzG,CAAC;AAED,4GAA4G;AAC5G,KAAK,UAAU,KAAK,CAAC,CAAY,EAAE,GAAY,EAAE,GAAW;IAC1D,MAAM,KAAK,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC;IACrC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,CAAgB,wHAAwH,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5L,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,CAAC,KAAK,CAAiB,0GAA0G,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAC1K,MAAM,QAAQ,GAAG,QAAQ,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,CAAC,mBAAmB,EAAE,EAAE,IAAI,CAAC,CAAC,UAAU,IAAI,QAAQ,CAAC;IAC5I,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,GAAG,YAAY,GAAG,QAAQ,CAAC,CAAC,CAAC;IACtF,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,CAAa,EAAE,GAAY,EAAE,GAAW;IAC/D,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACvC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACX,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC;QACpE,MAAM,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,MAAM,GAAG,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,EAAE,kBAAkB,EAAE,GAAG,CAAC,kBAAkB,EAAE,KAAK,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;IACtM,CAAC;IACD,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,yGAAyG,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AAC1J,CAAC;AAED,iDAAiD;AACjD,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,CAAa,EAAE,GAAY;IACzD,MAAM,IAAI,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAkB,+DAA+D,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAChK,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,MAAM,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AAC3E,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,CAAa;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAC3B;mHAC+G,CAChH,CAAC;IACF,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,MAAM,SAAS,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAChD,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,uGAAuG;AACvG,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,CAAa,EAAE,KAAa,EAAE,IAAY;IAC9E,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,KAAK,CAAU,wHAAwH,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3K,IAAI,GAAG,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,IAAI,KAAK,UAAU,CAAC;QAAE,MAAM,SAAS,CAAC,CAAC,EAAE,EAAE,GAAG,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5F,CAAC"}

package/dist/billing/service.d.ts

@@ -0,0 +1,20 @@
+import type { StripeDeps } from "./stripe-plugin.js";
+import type { CloudConfig } from "../config.js";
+import type { Db } from "../db/db.js";
+import { Limiter } from "./limits.js";
+import { UsageMeter } from "./usage.js";
+/** Plans, usage, limits, and (with billing on) Stripe, for routes and jobs. */
+export interface Billing {
+    /** False without a Stripe key: every organization is unlimited and no plan shows anywhere. */
+    readonly on: boolean;
+    readonly usage: UsageMeter;
+    readonly limits: Limiter;
+    /** The Stripe plugin's needs, with billing on. */
+    readonly stripe?: StripeDeps;
+    /** Forget a cached plan after a change, so limits apply at once on this instance. */
+    forget(orgId: string): void;
+    /** With billing on: mend missing usage subscriptions, then send unreported days to the Stripe meter (billing/report.ts). */
+    report?: () => Promise<number>;
+}
+export declare function createBilling(config: CloudConfig, db: Db): Promise<Billing>;
+//# sourceMappingURL=service.d.ts.map

package/dist/billing/service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.d.ts","sourceRoot":"","sources":["../../src/billing/service.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,KAAK,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAItC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,+EAA+E;AAC/E,MAAM,WAAW,OAAO;IACtB,8FAA8F;IAC9F,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,kDAAkD;IAClD,QAAQ,CAAC,MAAM,CAAC,EAAE,UAAU,CAAC;IAC7B,qFAAqF;IACrF,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,4HAA4H;IAC5H,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CAChC;AAcD,wBAAsB,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAUjF"}

package/dist/billing/service.js

@@ -0,0 +1,29 @@
+import { Limiter } from "./limits.js";
+import { reportUsage } from "./report.js";
+import { syncOrgPlan } from "./sync.js";
+import { UsageMeter } from "./usage.js";
+/** Paid organizations without a usage subscription (it failed to start, or someone canceled it in the portal) get it again. */
+async function mend(db, sync) {
+    const rows = await db.query("SELECT id FROM orgs WHERE plan IN ('team', 'business') AND stripe_customer_id IS NOT NULL AND overage_subscription_id IS NULL");
+    for (const r of rows)
+        await sync(r.id).catch((err) => console.error(`[wizelens-cloud] usage subscription for ${r.id} failed:`, err));
+}
+async function stripeClientOf(config) {
+    if (config.billing.stripeClient)
+        return config.billing.stripeClient;
+    const { default: Stripe } = await import("stripe");
+    return new Stripe(config.billing.stripeSecretKey, { appInfo: { name: "WizeLens Cloud", url: "https://wizelens.com" }, maxNetworkRetries: 2 });
+}
+export async function createBilling(config, db) {
+    const usage = new UsageMeter(db, config.now);
+    const limits = new Limiter(db, usage, config.billing.on, config.now);
+    const forget = (orgId) => limits.forget(orgId);
+    if (!config.billing.on)
+        return { on: false, usage, limits, forget };
+    const client = await stripeClientOf(config);
+    const d = { db, client, prices: config.billing.prices, now: config.now };
+    const stripe = { client, webhookSecret: config.billing.stripeWebhookSecret, prices: d.prices, sync: async (orgId) => void (await syncOrgPlan(d, orgId, forget)) };
+    const report = async () => (await mend(db, stripe.sync), reportUsage(d));
+    return { on: true, usage, limits, stripe, forget, report };
+}
+//# sourceMappingURL=service.js.map

package/dist/billing/service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service.js","sourceRoot":"","sources":["../../src/billing/service.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AAEtC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAgBxC,+HAA+H;AAC/H,KAAK,UAAU,IAAI,CAAC,EAAM,EAAE,IAAsC;IAChE,MAAM,IAAI,GAAG,MAAM,EAAE,CAAC,KAAK,CAAiB,+HAA+H,CAAC,CAAC;IAC7K,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,2CAA2C,CAAC,CAAC,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;AAChJ,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,MAAmB;IAC/C,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC;IACpE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC;IACnD,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,eAAgB,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,GAAG,EAAE,sBAAsB,EAAE,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC,CAAC;AACjJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAmB,EAAE,EAAM;IAC7D,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;IACpE,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,OAAO,CAAC,MAAO,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC;IAC1E,MAAM,MAAM,GAAe,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,CAAC,OAAO,CAAC,mBAAoB,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;IAC/K,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC7D,CAAC"}

package/dist/billing/stripe-plugin.d.ts

@@ -0,0 +1,14 @@
+import type { BetterAuthPlugin } from "better-auth";
+import type { AuthDeps } from "../auth/deps.js";
+import type { StripeClient, StripePrices } from "./options.js";
+/** What the Stripe plugin needs: the client, the webhook secret, the prices, and the plan sync that runs on every subscription change. */
+export interface StripeDeps {
+    client: StripeClient;
+    webhookSecret: string;
+    prices: StripePrices;
+    /** Set orgs.plan from the organization's subscriptions (billing/sync.ts). */
+    sync(orgId: string): Promise<void>;
+}
+/** Better Auth's Stripe plugin: the organization is the customer, Checkout starts a plan, the portal changes or cancels it. */
+export declare function stripePlugin(deps: AuthDeps, s: StripeDeps): BetterAuthPlugin;
+//# sourceMappingURL=stripe-plugin.d.ts.map

package/dist/billing/stripe-plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stripe-plugin.d.ts","sourceRoot":"","sources":["../../src/billing/stripe-plugin.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAIhD,OAAO,KAAK,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE/D,0IAA0I;AAC1I,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,YAAY,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,EAAE,YAAY,CAAC;IACrB,6EAA6E;IAC7E,IAAI,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpC;AAaD,+HAA+H;AAC/H,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,UAAU,GAAG,gBAAgB,CAuB5E"}

package/dist/billing/stripe-plugin.js

@@ -0,0 +1,39 @@
+import { stripe } from "@better-auth/stripe";
+import { can, isRole } from "../auth/roles.js";
+import { stripeSchema } from "../auth/schema-names.js";
+import { membership } from "../repo/orgs.js";
+/** Only owners and admins of the organization buy, change, or cancel its plan. */
+async function mayBill(deps, userId, orgId) {
+    const m = await membership(deps.db, userId, orgId);
+    return !!m && isRole(m.role) && can(m.role, "manage");
+}
+const plansOf = (p) => [
+    { name: "team", priceId: p.teamMonthly, annualDiscountPriceId: p.teamAnnual },
+    { name: "business", priceId: p.businessMonthly, annualDiscountPriceId: p.businessAnnual },
+];
+/** Better Auth's Stripe plugin: the organization is the customer, Checkout starts a plan, the portal changes or cancels it. */
+export function stripePlugin(deps, s) {
+    const sync = async ({ subscription }) => s.sync(subscription.referenceId);
+    return stripe({
+        stripeClient: s.client,
+        stripeWebhookSecret: s.webhookSecret,
+        createCustomerOnSignUp: false,
+        schema: stripeSchema,
+        organization: {
+            enabled: true,
+            getCustomerCreateParams: async (org, ctx) => ({ email: ctx.context.session?.user.email, metadata: { wizelensOrgId: org.id } }),
+        },
+        subscription: {
+            enabled: true,
+            plans: plansOf(s.prices),
+            requireEmailVerification: deps.mailer.live,
+            authorizeReference: async ({ user, referenceId }) => mayBill(deps, user.id, referenceId),
+            getCheckoutSessionParams: () => ({ params: { allow_promotion_codes: true, billing_address_collection: "auto" } }),
+            onSubscriptionComplete: sync,
+            onSubscriptionCreated: sync,
+            onSubscriptionUpdate: sync,
+            onSubscriptionDeleted: sync,
+        },
+    });
+}
+//# sourceMappingURL=stripe-plugin.js.map