vidspotai-shared 1.0.105 → 1.0.107-dev.0

package/lib/services/credit.service.js

@@ -5,6 +5,7 @@ const firestore_1 = require("firebase-admin/firestore");
 const types_1 = require("../globals/types");
 const firebase_1 = require("../libs/firebase");
 const logger_1 = require("../utils/logger");
+const organization_model_1 = require("../models/organization.model");
 const firestore_service_1 = require("./firestore.service");
 const notification_service_1 = require("./notification.service");
 // Once balance drops below this fraction of total, fire CREDITS_LOW. The
@@ -25,6 +26,63 @@ class CreditService {
                 throw new Error("USER_NOT_FOUND");
             }
             const data = snap.data();
+            // Enterprise Organizations: a member spends from their org's pooled
+            // balance instead of their own — transparent to every call site (~30+
+            // across controllers/queue-workers/mcp-server all just call
+            // consumeCredits(userId, n)). Must live in THIS transaction — Firestore
+            // doesn't support nested transactions, so this can't call out to
+            // OrganizationCreditService, which owns the separate (non-nested)
+            // owner-tops-up-pool transaction.
+            const orgId = data.organizationId;
+            if (orgId) {
+                const orgRef = firestore_service_1.FirestoreService.organizationsCol.doc(orgId);
+                const memberRef = firestore_service_1.FirestoreService.organizationMembersCol.doc((0, organization_model_1.organizationMemberDocId)(orgId, userId));
+                const [orgSnap, memberSnap] = await Promise.all([
+                    tx.get(orgRef),
+                    tx.get(memberRef),
+                ]);
+                if (!orgSnap.exists)
+                    throw new Error("ORG_NOT_FOUND");
+                if (!memberSnap.exists)
+                    throw new Error("ORG_MEMBER_NOT_FOUND");
+                const orgData = orgSnap.data();
+                const orgConsumed = orgData?.credits?.consumed ?? 0;
+                const orgTotal = orgData?.credits?.total ?? 0;
+                if (orgConsumed + creditsToConsume > orgTotal) {
+                    throw new Error("ORG_INSUFFICIENT_CREDITS");
+                }
+                const allocation = memberSnap.data()?.monthlyAllocation;
+                if (orgData?.creditMode === "allocated" && allocation) {
+                    const memberConsumed = allocation.consumed ?? 0;
+                    if (memberConsumed + creditsToConsume > allocation.total) {
+                        throw new Error("ORG_MEMBER_ALLOCATION_EXCEEDED");
+                    }
+                    tx.update(memberRef, {
+                        "monthlyAllocation.consumed": memberConsumed + creditsToConsume,
+                    });
+                }
+                const newOrgConsumed = orgConsumed + creditsToConsume;
+                tx.update(orgRef, { "credits.consumed": newOrgConsumed });
+                const ledgerRef = firestore_service_1.FirestoreService.organizationCreditLedgerCol.doc();
+                tx.set(ledgerRef, {
+                    id: ledgerRef.id,
+                    orgId,
+                    actorUid: userId,
+                    delta: -creditsToConsume,
+                    reason: "consume",
+                    balanceAfter: orgTotal - newOrgConsumed,
+                    createdAt: firestore_1.FieldValue.serverTimestamp(),
+                });
+                // Signal the org path to the caller so the personal CREDITS_LOW flow
+                // below is skipped — org-pool-low notifications are a fast-follow.
+                return {
+                    orgSpend: true,
+                    chargedOrgId: orgId,
+                    total: 0,
+                    newRemaining: 0,
+                    lastNotifiedMs: 0,
+                };
+            }
             const consumed = data.credits?.consumed ?? 0;
             const total = data.credits?.total ?? 0;
             if (consumed + creditsToConsume > total) {
@@ -35,8 +93,16 @@ class CreditService {
             });
             const newRemaining = total - (consumed + creditsToConsume);
             const lastNotifiedMs = data.lastCreditsLowNotifiedAt?.toMillis?.() ?? 0;
-            return { total, newRemaining, lastNotifiedMs };
+            return {
+                orgSpend: false,
+                chargedOrgId: null,
+                total,
+                newRemaining,
+                lastNotifiedMs,
+            };
         });
+        if (postState.orgSpend)
+            return { chargedOrgId: postState.chargedOrgId };
         const { total, newRemaining, lastNotifiedMs } = postState;
         if (total > 0 && newRemaining < total * CREDITS_LOW_THRESHOLD) {
             const sinceLast = Date.now() - lastNotifiedMs;
@@ -62,8 +128,9 @@ class CreditService {
                 });
             }
         }
+        return { chargedOrgId: postState.chargedOrgId };
     }
-    static async refundCredits(userId, creditsToRefund) {
+    static async refundCredits(userId, creditsToRefund, spentFromOrgId) {
         if (creditsToRefund <= 0)
             return;
         await firebase_1.firestore.runTransaction(async (tx) => {
@@ -72,6 +139,50 @@ class CreditService {
             if (!snap.exists) {
                 throw new Error("USER_NOT_FOUND");
             }
+            // `spentFromOrgId` (from the job's `spentFrom` snapshot) takes priority
+            // over the user's *current* organizationId — the active org may have
+            // changed between the charge and this refund. Callers with no job-doc
+            // concept (older refund sites) omit it and fall back to today's
+            // re-derive-from-current-org behavior.
+            const orgId = spentFromOrgId ?? snap.data()?.organizationId;
+            if (orgId) {
+                const orgRef = firestore_service_1.FirestoreService.organizationsCol.doc(orgId);
+                const memberRef = firestore_service_1.FirestoreService.organizationMembersCol.doc((0, organization_model_1.organizationMemberDocId)(orgId, userId));
+                const [orgSnap, memberSnap] = await Promise.all([
+                    tx.get(orgRef),
+                    tx.get(memberRef),
+                ]);
+                // Org/membership may have been deleted since the charge — swallow
+                // like the personal path's own "can't go below 0" clamp; there's
+                // nowhere left to refund to.
+                if (!orgSnap.exists)
+                    return;
+                const orgData = orgSnap.data();
+                const orgConsumed = orgData?.credits?.consumed ?? 0;
+                const orgTotal = orgData?.credits?.total ?? 0;
+                const newOrgConsumed = Math.max(0, orgConsumed - creditsToRefund);
+                tx.update(orgRef, { "credits.consumed": newOrgConsumed });
+                const allocation = memberSnap.exists
+                    ? memberSnap.data()?.monthlyAllocation
+                    : undefined;
+                if (orgData?.creditMode === "allocated" && allocation && memberSnap.exists) {
+                    const newMemberConsumed = Math.max(0, (allocation.consumed ?? 0) - creditsToRefund);
+                    tx.update(memberRef, {
+                        "monthlyAllocation.consumed": newMemberConsumed,
+                    });
+                }
+                const ledgerRef = firestore_service_1.FirestoreService.organizationCreditLedgerCol.doc();
+                tx.set(ledgerRef, {
+                    id: ledgerRef.id,
+                    orgId,
+                    actorUid: userId,
+                    delta: creditsToRefund,
+                    reason: "refund",
+                    balanceAfter: orgTotal - newOrgConsumed,
+                    createdAt: firestore_1.FieldValue.serverTimestamp(),
+                });
+                return;
+            }
             const consumed = snap.data()?.credits?.consumed ?? 0;
             // Never let consumed go below 0
             const newConsumed = Math.max(0, consumed - creditsToRefund);

package/lib/services/email/index.d.ts

@@ -0,0 +1,3 @@
+export * from "./resendClient";
+export * from "./orgInvite";
+//# sourceMappingURL=index.d.ts.map

package/lib/services/email/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/services/email/index.ts"],"names":[],"mappings":"AAAA,cAAc,gBAAgB,CAAC;AAC/B,cAAc,aAAa,CAAC"}

package/lib/services/email/index.js

@@ -0,0 +1,18 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./resendClient"), exports);
+__exportStar(require("./orgInvite"), exports);

package/lib/services/email/orgInvite.d.ts

@@ -0,0 +1,25 @@
+import { TOrgRole } from "../../models/organization.model";
+export interface SendOrgInviteEmailInput {
+    /** Invitee's email address. */
+    to: string;
+    orgName: string;
+    /** Display name (or email, if no name set) of the org member sending the invite. */
+    inviterName: string;
+    role: TOrgRole;
+    /** Full accept-invite URL, e.g. `${FRONTEND_URL}/invite/${token}`. */
+    acceptUrl: string;
+}
+export interface SendOrgInviteEmailResult {
+    /** Resend message id. */
+    id: string;
+}
+/**
+ * Sends the org-invite email via Resend. Throws on misconfiguration or a
+ * Resend-reported failure — this is intentional: callers that want
+ * best-effort semantics (the invite doc + copyable link are already the
+ * source of truth) should call this WITHOUT awaiting and chain `.catch()` to
+ * log rather than fail the parent request. See
+ * `organization.controller.ts#createInvite`.
+ */
+export declare function sendOrgInviteEmail(input: SendOrgInviteEmailInput): Promise<SendOrgInviteEmailResult>;
+//# sourceMappingURL=orgInvite.d.ts.map

package/lib/services/email/orgInvite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"orgInvite.d.ts","sourceRoot":"","sources":["../../../src/services/email/orgInvite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,iCAAiC,CAAC;AAM3D,MAAM,WAAW,uBAAuB;IACtC,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,oFAAoF;IACpF,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,QAAQ,CAAC;IACf,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,wBAAwB;IACvC,yBAAyB;IACzB,EAAE,EAAE,MAAM,CAAC;CACZ;AAiFD;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,uBAAuB,GAC7B,OAAO,CAAC,wBAAwB,CAAC,CA2BnC"}

package/lib/services/email/orgInvite.js

@@ -0,0 +1,113 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sendOrgInviteEmail = sendOrgInviteEmail;
+const logger_1 = require("../../utils/logger");
+const resendClient_1 = require("./resendClient");
+const log = (0, logger_1.createLogger)("email:orgInvite");
+const ROLE_LABEL = {
+    owner: "Owner",
+    admin: "Admin",
+    member: "Member",
+};
+/** Minimal HTML-escaping for the handful of user-controlled strings we interpolate. */
+function esc(s) {
+    return s
+        .replace(/&/g, "&")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;")
+        .replace(/'/g, "&#39;");
+}
+function renderHtml(input) {
+    const orgName = esc(input.orgName);
+    const inviterName = esc(input.inviterName);
+    const roleLabel = ROLE_LABEL[input.role] ?? input.role;
+    const acceptUrl = esc(input.acceptUrl);
+    // Inline styles only — email clients don't reliably support external/embedded CSS.
+    return `<!doctype html>
+<html>
+  <body style="margin:0;padding:0;background-color:#f4f4f7;font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;">
+    <table role="presentation" width="100%" cellpadding="0" cellspacing="0" style="background-color:#f4f4f7;padding:32px 16px;">
+      <tr>
+        <td align="center">
+          <table role="presentation" width="480" cellpadding="0" cellspacing="0" style="max-width:480px;width:100%;background-color:#ffffff;border-radius:12px;overflow:hidden;border:1px solid #e5e5ea;">
+            <tr>
+              <td style="padding:32px 32px 24px 32px;text-align:center;">
+                <div style="font-size:20px;font-weight:700;color:#111114;">VidSpotAI</div>
+              </td>
+            </tr>
+            <tr>
+              <td style="padding:0 32px 8px 32px;">
+                <h1 style="margin:0 0 16px 0;font-size:18px;line-height:1.4;color:#111114;">
+                  ${inviterName} invited you to join <strong>${orgName}</strong>
+                </h1>
+                <p style="margin:0 0 24px 0;font-size:14px;line-height:1.6;color:#52525b;">
+                  You've been invited to join the <strong>${orgName}</strong> team on VidSpotAI as
+                  a <strong>${esc(roleLabel)}</strong>. Accept the invite to start collaborating
+                  on AI-generated video projects together.
+                </p>
+              </td>
+            </tr>
+            <tr>
+              <td style="padding:0 32px 32px 32px;text-align:center;">
+                <a href="${acceptUrl}"
+                   style="display:inline-block;background:linear-gradient(90deg,#6366f1,#a855f7,#ec4899);color:#ffffff;text-decoration:none;font-size:14px;font-weight:600;padding:12px 28px;border-radius:8px;">
+                  Accept invite
+                </a>
+              </td>
+            </tr>
+            <tr>
+              <td style="padding:0 32px 32px 32px;">
+                <p style="margin:0;font-size:12px;line-height:1.6;color:#a1a1aa;">
+                  If the button doesn't work, copy and paste this link into your browser:<br />
+                  <a href="${acceptUrl}" style="color:#6366f1;word-break:break-all;">${acceptUrl}</a>
+                </p>
+              </td>
+            </tr>
+            <tr>
+              <td style="padding:20px 32px;background-color:#fafafa;border-top:1px solid #e5e5ea;">
+                <p style="margin:0;font-size:11px;line-height:1.5;color:#a1a1aa;">
+                  This invite expires in 14 days. If you weren't expecting this, you can safely
+                  ignore this email.
+                </p>
+              </td>
+            </tr>
+          </table>
+        </td>
+      </tr>
+    </table>
+  </body>
+</html>`;
+}
+/**
+ * Sends the org-invite email via Resend. Throws on misconfiguration or a
+ * Resend-reported failure — this is intentional: callers that want
+ * best-effort semantics (the invite doc + copyable link are already the
+ * source of truth) should call this WITHOUT awaiting and chain `.catch()` to
+ * log rather than fail the parent request. See
+ * `organization.controller.ts#createInvite`.
+ */
+async function sendOrgInviteEmail(input) {
+    if (!(0, resendClient_1.isResendConfigured)()) {
+        throw new Error("sendOrgInviteEmail: RESEND_API_KEY not set");
+    }
+    const resend = (0, resendClient_1.getResendClient)();
+    const subject = `${input.inviterName} invited you to join ${input.orgName} on VidSpotAI`;
+    const { data, error } = await resend.emails.send({
+        from: resendClient_1.EMAIL_FROM,
+        to: input.to,
+        subject,
+        html: renderHtml(input),
+    });
+    if (error || !data?.id) {
+        const detail = error?.message ?? "no message id returned";
+        throw new Error(`sendOrgInviteEmail: Resend send failed — ${detail}`);
+    }
+    log.info("sendOrgInviteEmail sent", {
+        to: input.to,
+        orgName: input.orgName,
+        role: input.role,
+        id: data.id,
+    });
+    return { id: data.id };
+}

package/lib/services/email/resendClient.d.ts

@@ -0,0 +1,12 @@
+import { Resend } from "resend";
+/** True once RESEND_API_KEY is configured. Gate email-sending on this. */
+export declare function isResendConfigured(): boolean;
+/** Lazily-constructed singleton Resend client. Throws if not configured. */
+export declare function getResendClient(): Resend;
+/**
+ * Verified sending domain (DKIM/SPF confirmed in Resend for vidspotai.com).
+ * Keep the display name generic — individual senders can override the
+ * subject/body per email type.
+ */
+export declare const EMAIL_FROM = "VidSpotAI <noreply@vidspotai.com>";
+//# sourceMappingURL=resendClient.d.ts.map

package/lib/services/email/resendClient.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resendClient.d.ts","sourceRoot":"","sources":["../../../src/services/email/resendClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAgBhC,0EAA0E;AAC1E,wBAAgB,kBAAkB,IAAI,OAAO,CAE5C;AAED,4EAA4E;AAC5E,wBAAgB,eAAe,IAAI,MAAM,CASxC;AAED;;;;GAIG;AACH,eAAO,MAAM,UAAU,sCAAsC,CAAC"}

package/lib/services/email/resendClient.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EMAIL_FROM = void 0;
+exports.isResendConfigured = isResendConfigured;
+exports.getResendClient = getResendClient;
+const resend_1 = require("resend");
+/**
+ * Thin Resend client wrapper. Mirrors the other single-provider wrappers in
+ * this codebase (e.g. `services/demo/githubOAuth.ts`): a lazy singleton keyed
+ * off an env var, a `isXConfigured()` gate the caller can check before doing
+ * real work, and a getter that throws a descriptive error instead of letting
+ * the SDK fail on `undefined`.
+ *
+ * Env:
+ *   RESEND_API_KEY — Resend API key (Doppler `vidspotai-backend` / `dev`
+ *                     config only for now; NOT set in `prd`).
+ */
+let client = null;
+/** True once RESEND_API_KEY is configured. Gate email-sending on this. */
+function isResendConfigured() {
+    return Boolean(process.env.RESEND_API_KEY);
+}
+/** Lazily-constructed singleton Resend client. Throws if not configured. */
+function getResendClient() {
+    const apiKey = process.env.RESEND_API_KEY;
+    if (!apiKey) {
+        throw new Error("resend: RESEND_API_KEY not set");
+    }
+    if (!client) {
+        client = new resend_1.Resend(apiKey);
+    }
+    return client;
+}
+/**
+ * Verified sending domain (DKIM/SPF confirmed in Resend for vidspotai.com).
+ * Keep the display name generic — individual senders can override the
+ * subject/body per email type.
+ */
+exports.EMAIL_FROM = "VidSpotAI <noreply@vidspotai.com>";

package/lib/services/firestore.service.d.ts

@@ -17,6 +17,7 @@ import { IVideoQaJobModel } from "../models/videoQaJob.model";
 import { IGithubConnectionModel } from "../models/githubConnection.model";
 import { IProductConnectionModel } from "../models/productConnection.model";
 import { IOutreachCampaignModel, IOutreachRecipientModel, IOutreachTemplateModel, IPersonalizedVideoModel, IVideoViewModel } from "../models/outreach.model";
+import { IOrganizationCreditLedgerEntry, IOrganizationInviteModel, IOrganizationMemberModel, IOrganizationModel } from "../models/organization.model";
 /**
  * FirestoreService
  * ----------------
@@ -80,6 +81,10 @@ export declare class FirestoreService {
     static outreachCampaignsCol: CollectionReference<IOutreachCampaignModel, DocumentData>;
     static outreachRecipientsCol: CollectionReference<IOutreachRecipientModel, DocumentData>;
     static videoViewsCol: CollectionReference<IVideoViewModel, DocumentData>;
+    static organizationsCol: CollectionReference<IOrganizationModel, DocumentData>;
+    static organizationMembersCol: CollectionReference<IOrganizationMemberModel, DocumentData>;
+    static organizationInvitesCol: CollectionReference<IOrganizationInviteModel, DocumentData>;
+    static organizationCreditLedgerCol: CollectionReference<IOrganizationCreditLedgerEntry, DocumentData>;
     /**
      * Sentinel for `.update()` that removes a field from a doc (wraps
      * `FieldValue.delete()`). Use to clear a transient field — e.g. plan-B's

package/lib/services/firestore.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"firestore.service.d.ts","sourceRoot":"","sources":["../../src/services/firestore.service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EAEZ,gBAAgB,EAEhB,aAAa,EACd,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,UAAU,EAEX,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,cAAc,EACd,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,eAAe,EAChB,MAAM,0BAA0B,CAAC;AAelC;;;;GAIG;AACH,qBAAa,gBAAgB;IAE3B,MAAM,CAAC,YAAY,oDAEqC;IAExD,MAAM,CAAC,YAAY,oDAEqC;IAExD,MAAM,CAAC,gBAAgB,wDAEqC;IAE5D,MAAM,CAAC,OAAO,+CAEqC;IAEnD,MAAM,CAAC,QAAQ,gDAEqC;IAEpD,MAAM,CAAC,UAAU;;;;;;;;;;;;;;;;;;;qBAEqC;IAEtD,MAAM,CAAC,aAAa,uDAEuC;IAE3D,MAAM,CAAC,gBAAgB,0DAEuC;IAE9D,MAAM,CAAC,YAAY,oDAEqC;IAExD,MAAM,CAAC,cAAc,uDAEsC;IAE3D,MAAM,CAAC,gBAAgB,wDAEqC;IAE5D,MAAM,CAAC,YAAY,oDAEqC;IAExD,MAAM,CAAC,SAAS,iDAEqC;IAErD,MAAM,CAAC,eAAe,uDAEqC;IAG3D,MAAM,CAAC,oBAAoB,4DAEqC;IAEhE;;;;OAIG;IACH,MAAM,CAAC,cAAc,sDAEqC;IAE1D,8EAA8E;IAC9E,MAAM,CAAC,oBAAoB,4DAEqC;IAEhE;;;;OAIG;IACH,MAAM,CAAC,qBAAqB,6DAEqC;IAGjE,MAAM,CAAC,iBAAiB,yDAEqC;IAE7D,MAAM,CAAC,cAAc,sDAEqC;IAE1D,MAAM,CAAC,kBAAkB,2DAEsC;IAE/D,MAAM,CAAC,cAAc,2DAE0C;IAG/D,MAAM,CAAC,oBAAoB,4DAEqC;IAEhE,MAAM,CAAC,qBAAqB,6DAEqC;IAEjE,MAAM,CAAC,oBAAoB,4DAEqC;IAEhE,MAAM,CAAC,qBAAqB,6DAEqC;IAEjE,MAAM,CAAC,aAAa,qDAEqC;IAIzD;;;;OAIG;IACH,MAAM,CAAC,WAAW,IAAI,UAAU;IAIhC,yCAAyC;WAC5B,eAAe,CAAC,CAAC,EAC5B,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAC,EACrC,IAAI,EAAE,CAAC,GACN,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAMhC,qDAAqD;WACxC,OAAO,CAAC,CAAC,EACpB,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAC,EACrC,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,CAAC,GACN,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAMhC,0CAA0C;WAC7B,UAAU,CAAC,CAAC,EACvB,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAC,GACpC,OAAO,CAAC,CAAC,CAAC,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IAKlC,kCAAkC;WACrB,WAAW,CAAC,CAAC,EACxB,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAC,EACrC,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,CAAC,CAAC,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,SAAS,CAAC;IAO5C,+BAA+B;WAClB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAIrE,+CAA+C;WAClC,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAS3E,gCAAgC;WACnB,iBAAiB,CAAC,CAAC,SAAS,YAAY,EACnD,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAC,EACrC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,GAAG,EACV,OAAO,CAAC,EAAE;QACR,YAAY,CAAC,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC;QAChC,cAAc,CAAC,EAAE,gBAAgB,CAAC;QAClC,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GACA,OAAO,CAAC,CAAC,CAAC,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IAsBlC,8CAA8C;WACjC,UAAU,CAAC,CAAC,EACvB,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAC,EACrC,EAAE,EAAE,MAAM,EACV,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,EAC9B,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAwB,GACrD,OAAO,CAAC,IAAI,CAAC;IAWhB,OAAO,CAAC,MAAM,CAAC,aAAa;IA2B5B,0CAA0C;WAC7B,cAAc,CACzB,EAAE,EAAE,MAAM,EACV,cAAc,EAAE,OAAO,CAAC,UAAU,CAAC,GAClC,OAAO,CAAC,IAAI,CAAC;IAIhB,sBAAsB;WACT,UAAU,CAAC,CAAC,EACvB,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAC,EACrC,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC;IAKhB,kCAAkC;WACrB,cAAc,CAAC,CAAC,EAC3B,OAAO,EAAE,CAAC,EAAE,EAAE,iBAAiB,CAAC,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,GACzD,OAAO,CAAC,CAAC,CAAC;CAGd"}
+{"version":3,"file":"firestore.service.d.ts","sourceRoot":"","sources":["../../src/services/firestore.service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,YAAY,EAEZ,gBAAgB,EAEhB,aAAa,EACd,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,mBAAmB,EACnB,iBAAiB,EACjB,UAAU,EAEX,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,cAAc,EACd,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AACtE,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,qBAAqB,EACrB,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACpD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,sBAAsB,EAAE,MAAM,kCAAkC,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,mCAAmC,CAAC;AAC5E,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,sBAAsB,EACtB,uBAAuB,EACvB,eAAe,EAChB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,8BAA8B,EAC9B,wBAAwB,EACxB,wBAAwB,EACxB,kBAAkB,EACnB,MAAM,8BAA8B,CAAC;AAetC;;;;GAIG;AACH,qBAAa,gBAAgB;IAE3B,MAAM,CAAC,YAAY,oDAEqC;IAExD,MAAM,CAAC,YAAY,oDAEqC;IAExD,MAAM,CAAC,gBAAgB,wDAEqC;IAE5D,MAAM,CAAC,OAAO,+CAEqC;IAEnD,MAAM,CAAC,QAAQ,gDAEqC;IAEpD,MAAM,CAAC,UAAU;;;;;;;;;;;;;;;;;;;qBAEqC;IAEtD,MAAM,CAAC,aAAa,uDAEuC;IAE3D,MAAM,CAAC,gBAAgB,0DAEuC;IAE9D,MAAM,CAAC,YAAY,oDAEqC;IAExD,MAAM,CAAC,cAAc,uDAEsC;IAE3D,MAAM,CAAC,gBAAgB,wDAEqC;IAE5D,MAAM,CAAC,YAAY,oDAEqC;IAExD,MAAM,CAAC,SAAS,iDAEqC;IAErD,MAAM,CAAC,eAAe,uDAEqC;IAG3D,MAAM,CAAC,oBAAoB,4DAEqC;IAEhE;;;;OAIG;IACH,MAAM,CAAC,cAAc,sDAEqC;IAE1D,8EAA8E;IAC9E,MAAM,CAAC,oBAAoB,4DAEqC;IAEhE;;;;OAIG;IACH,MAAM,CAAC,qBAAqB,6DAEqC;IAGjE,MAAM,CAAC,iBAAiB,yDAEqC;IAE7D,MAAM,CAAC,cAAc,sDAEqC;IAE1D,MAAM,CAAC,kBAAkB,2DAEsC;IAE/D,MAAM,CAAC,cAAc,2DAE0C;IAG/D,MAAM,CAAC,oBAAoB,4DAEqC;IAEhE,MAAM,CAAC,qBAAqB,6DAEqC;IAEjE,MAAM,CAAC,oBAAoB,4DAEqC;IAEhE,MAAM,CAAC,qBAAqB,6DAEqC;IAEjE,MAAM,CAAC,aAAa,qDAEqC;IAGzD,MAAM,CAAC,gBAAgB,wDAEqC;IAE5D,MAAM,CAAC,sBAAsB,8DAEqC;IAElE,MAAM,CAAC,sBAAsB,8DAEqC;IAElE,MAAM,CAAC,2BAA2B,oEAEsC;IAIxE;;;;OAIG;IACH,MAAM,CAAC,WAAW,IAAI,UAAU;IAIhC,yCAAyC;WAC5B,eAAe,CAAC,CAAC,EAC5B,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAC,EACrC,IAAI,EAAE,CAAC,GACN,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAMhC,qDAAqD;WACxC,OAAO,CAAC,CAAC,EACpB,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAC,EACrC,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,CAAC,GACN,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;IAMhC,0CAA0C;WAC7B,UAAU,CAAC,CAAC,EACvB,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAC,GACpC,OAAO,CAAC,CAAC,CAAC,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IAKlC,kCAAkC;WACrB,WAAW,CAAC,CAAC,EACxB,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAC,EACrC,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,CAAC,CAAC,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,GAAG,SAAS,CAAC;IAO5C,+BAA+B;WAClB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAIrE,+CAA+C;WAClC,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAS3E,gCAAgC;WACnB,iBAAiB,CAAC,CAAC,SAAS,YAAY,EACnD,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAC,EACrC,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,GAAG,EACV,OAAO,CAAC,EAAE;QACR,YAAY,CAAC,EAAE,MAAM,CAAC,GAAG,MAAM,CAAC;QAChC,cAAc,CAAC,EAAE,gBAAgB,CAAC;QAClC,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,GACA,OAAO,CAAC,CAAC,CAAC,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC,EAAE,CAAC;IAsBlC,8CAA8C;WACjC,UAAU,CAAC,CAAC,EACvB,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAC,EACrC,EAAE,EAAE,MAAM,EACV,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,EAC9B,OAAO,GAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAwB,GACrD,OAAO,CAAC,IAAI,CAAC;IAWhB,OAAO,CAAC,MAAM,CAAC,aAAa;IA2B5B,0CAA0C;WAC7B,cAAc,CACzB,EAAE,EAAE,MAAM,EACV,cAAc,EAAE,OAAO,CAAC,UAAU,CAAC,GAClC,OAAO,CAAC,IAAI,CAAC;IAIhB,sBAAsB;WACT,UAAU,CAAC,CAAC,EACvB,aAAa,EAAE,mBAAmB,CAAC,CAAC,CAAC,EACrC,EAAE,EAAE,MAAM,GACT,OAAO,CAAC,IAAI,CAAC;IAKhB,kCAAkC;WACrB,cAAc,CAAC,CAAC,EAC3B,OAAO,EAAE,CAAC,EAAE,EAAE,iBAAiB,CAAC,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,GACzD,OAAO,CAAC,CAAC,CAAC;CAGd"}

package/lib/services/firestore.service.js

@@ -217,3 +217,16 @@ FirestoreService.outreachRecipientsCol = firebase_1.firestore
 FirestoreService.videoViewsCol = firebase_1.firestore
     .collection("videoViews")
     .withConverter(collectionConverter());
+// Enterprise: Organizations & Team Members
+FirestoreService.organizationsCol = firebase_1.firestore
+    .collection("organizations")
+    .withConverter(collectionConverter());
+FirestoreService.organizationMembersCol = firebase_1.firestore
+    .collection("organizationMembers")
+    .withConverter(collectionConverter());
+FirestoreService.organizationInvitesCol = firebase_1.firestore
+    .collection("organizationInvites")
+    .withConverter(collectionConverter());
+FirestoreService.organizationCreditLedgerCol = firebase_1.firestore
+    .collection("organizationCreditLedger")
+    .withConverter(collectionConverter());

package/lib/services/index.d.ts

@@ -35,4 +35,6 @@ export * from "./socialAI";
 export * from "./socialInsights";
 export * from "./socialAccounts";
 export * from "./freePlan";
+export * from "./organizationCredit.service";
+export * from "./email";
 //# sourceMappingURL=index.d.ts.map

package/lib/services/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,OAAO,CAAC;AACtB,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,OAAO,CAAC;AACtB,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,OAAO,CAAC;AACtB,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/services/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,SAAS,CAAC;AACxB,cAAc,aAAa,CAAC;AAC5B,cAAc,kBAAkB,CAAC;AACjC,cAAc,OAAO,CAAC;AACtB,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,OAAO,CAAC;AACtB,cAAc,eAAe,CAAC;AAC9B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAChC,cAAc,OAAO,CAAC;AACtB,cAAc,SAAS,CAAC;AACxB,cAAc,QAAQ,CAAC;AACvB,cAAc,kBAAkB,CAAC;AACjC,cAAc,sBAAsB,CAAC;AACrC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,0BAA0B,CAAC;AACzC,cAAc,0BAA0B,CAAC;AACzC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,SAAS,CAAC;AACxB,cAAc,UAAU,CAAC;AACzB,cAAc,eAAe,CAAC;AAC9B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iBAAiB,CAAC;AAChC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,kBAAkB,CAAC;AACjC,cAAc,YAAY,CAAC;AAC3B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,SAAS,CAAC"}

package/lib/services/index.js

@@ -51,3 +51,5 @@ __exportStar(require("./socialAI"), exports);
 __exportStar(require("./socialInsights"), exports);
 __exportStar(require("./socialAccounts"), exports);
 __exportStar(require("./freePlan"), exports);
+__exportStar(require("./organizationCredit.service"), exports);
+__exportStar(require("./email"), exports);

package/lib/services/organizationCredit.service.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Enterprise: Organizations & Team Members — credit-pool funding.
+ *
+ * Day-to-day spend/refund against the pool happens transparently inside
+ * `CreditService.consumeCredits`/`refundCredits` (redirected there when the
+ * acting user has `organizationId` set, within the SAME transaction as the
+ * personal-credit path would have used — Firestore transactions can't nest,
+ * so that logic lives inline in credit.service.ts rather than calling out to
+ * this file). This service covers the one op that's genuinely distinct: the
+ * owner moving credits FROM their own personal balance INTO the org pool.
+ * No new Stripe/seat billing — the pool is funded entirely this way for MVP.
+ */
+export declare class OrganizationCreditService {
+    /**
+     * Owner-only. Reads owner's user doc + the org doc, then in the same
+     * transaction: increments the owner's personal `credits.consumed` (spends
+     * `amount` of their own remaining balance) and increments the org's
+     * `credits.total` (tops up the pool) by the same amount. Throws
+     * "INSUFFICIENT_CREDITS" if the owner doesn't have `amount` remaining —
+     * reusing the existing personal error code since this is, from the owner's
+     * point of view, spending their own balance.
+     */
+    static transferToOrgPool(orgId: string, ownerUid: string, amount: number): Promise<{
+        orgTotal: number;
+        orgRemaining: number;
+    }>;
+    /**
+     * Owner/admin-set monthly draw cap for a member (only meaningful once the
+     * org's creditMode is "allocated"). Setting `monthlyTotal` to undefined
+     * clears the member's allocation (falls back to full-pool access if the org
+     * later flips back to "shared", or is simply uncapped within "allocated"
+     * mode until set again).
+     */
+    static setMemberAllocation(orgId: string, memberUid: string, monthlyTotal: number | undefined): Promise<void>;
+}
+//# sourceMappingURL=organizationCredit.service.d.ts.map

package/lib/services/organizationCredit.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"organizationCredit.service.d.ts","sourceRoot":"","sources":["../../src/services/organizationCredit.service.ts"],"names":[],"mappings":"AAKA;;;;;;;;;;;GAWG;AACH,qBAAa,yBAAyB;IACpC;;;;;;;;OAQG;WACU,iBAAiB,CAC5B,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAC;IAqDtD;;;;;;OAMG;WACU,mBAAmB,CAC9B,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,GAAG,SAAS,GAC/B,OAAO,CAAC,IAAI,CAAC;CA0BjB"}

package/lib/services/organizationCredit.service.js

@@ -0,0 +1,105 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrganizationCreditService = void 0;
+const firestore_1 = require("firebase-admin/firestore");
+const firebase_1 = require("../libs/firebase");
+const organization_model_1 = require("../models/organization.model");
+const firestore_service_1 = require("./firestore.service");
+/**
+ * Enterprise: Organizations & Team Members — credit-pool funding.
+ *
+ * Day-to-day spend/refund against the pool happens transparently inside
+ * `CreditService.consumeCredits`/`refundCredits` (redirected there when the
+ * acting user has `organizationId` set, within the SAME transaction as the
+ * personal-credit path would have used — Firestore transactions can't nest,
+ * so that logic lives inline in credit.service.ts rather than calling out to
+ * this file). This service covers the one op that's genuinely distinct: the
+ * owner moving credits FROM their own personal balance INTO the org pool.
+ * No new Stripe/seat billing — the pool is funded entirely this way for MVP.
+ */
+class OrganizationCreditService {
+    /**
+     * Owner-only. Reads owner's user doc + the org doc, then in the same
+     * transaction: increments the owner's personal `credits.consumed` (spends
+     * `amount` of their own remaining balance) and increments the org's
+     * `credits.total` (tops up the pool) by the same amount. Throws
+     * "INSUFFICIENT_CREDITS" if the owner doesn't have `amount` remaining —
+     * reusing the existing personal error code since this is, from the owner's
+     * point of view, spending their own balance.
+     */
+    static async transferToOrgPool(orgId, ownerUid, amount) {
+        if (!Number.isFinite(amount) || amount <= 0) {
+            throw new Error("INVALID_AMOUNT");
+        }
+        return firebase_1.firestore.runTransaction(async (tx) => {
+            const userRef = firestore_service_1.FirestoreService.usersCol.doc(ownerUid);
+            const orgRef = firestore_service_1.FirestoreService.organizationsCol.doc(orgId);
+            // All reads before any writes (Firestore transaction requirement).
+            const [userSnap, orgSnap] = await Promise.all([
+                tx.get(userRef),
+                tx.get(orgRef),
+            ]);
+            if (!userSnap.exists)
+                throw new Error("USER_NOT_FOUND");
+            if (!orgSnap.exists)
+                throw new Error("ORG_NOT_FOUND");
+            const userData = userSnap.data();
+            const orgData = orgSnap.data();
+            if (orgData?.ownerId !== ownerUid) {
+                throw new Error("ORG_NOT_OWNER");
+            }
+            const userConsumed = userData?.credits?.consumed ?? 0;
+            const userTotal = userData?.credits?.total ?? 0;
+            if (userConsumed + amount > userTotal) {
+                throw new Error("INSUFFICIENT_CREDITS");
+            }
+            const orgConsumed = orgData?.credits?.consumed ?? 0;
+            const orgTotal = orgData?.credits?.total ?? 0;
+            const newOrgTotal = orgTotal + amount;
+            tx.update(userRef, { "credits.consumed": userConsumed + amount });
+            tx.update(orgRef, { "credits.total": newOrgTotal });
+            const ledgerRef = firestore_service_1.FirestoreService.organizationCreditLedgerCol.doc();
+            tx.set(ledgerRef, {
+                id: ledgerRef.id,
+                orgId,
+                actorUid: ownerUid,
+                delta: amount,
+                reason: "transfer_in",
+                balanceAfter: newOrgTotal - orgConsumed,
+                createdAt: firestore_1.FieldValue.serverTimestamp(),
+            });
+            return { orgTotal: newOrgTotal, orgRemaining: newOrgTotal - orgConsumed };
+        });
+    }
+    /**
+     * Owner/admin-set monthly draw cap for a member (only meaningful once the
+     * org's creditMode is "allocated"). Setting `monthlyTotal` to undefined
+     * clears the member's allocation (falls back to full-pool access if the org
+     * later flips back to "shared", or is simply uncapped within "allocated"
+     * mode until set again).
+     */
+    static async setMemberAllocation(orgId, memberUid, monthlyTotal) {
+        const memberRef = firestore_service_1.FirestoreService.organizationMembersCol.doc((0, organization_model_1.organizationMemberDocId)(orgId, memberUid));
+        const snap = await memberRef.get();
+        if (!snap.exists)
+            throw new Error("ORG_MEMBER_NOT_FOUND");
+        if (monthlyTotal === undefined) {
+            await memberRef.update({
+                monthlyAllocation: firestore_service_1.FirestoreService.deleteField(),
+            });
+            return;
+        }
+        if (!Number.isFinite(monthlyTotal) || monthlyTotal < 0) {
+            throw new Error("INVALID_AMOUNT");
+        }
+        const existing = snap.data()?.monthlyAllocation;
+        await memberRef.update({
+            monthlyAllocation: {
+                total: monthlyTotal,
+                consumed: existing?.consumed ?? 0,
+                resetAt: existing?.resetAt ?? Date.now() + 30 * 24 * 60 * 60 * 1000,
+            },
+        });
+    }
+}
+exports.OrganizationCreditService = OrganizationCreditService;

package/lib/services/translation/translation.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"translation.service.d.ts","sourceRoot":"","sources":["../../../src/services/translation/translation.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAqGvD;;;;GAIG;AACH,iBAAe,SAAS,CACtB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,cAAc,EACpB,EAAE,GAAE,cAAkC,EACtC,OAAO,GAAE,IAAI,GAAG,IAAW,GAC1B,OAAO,CAAC,MAAM,CAAC,CAsCjB;AAiDD;;;;;;;;;;;;;;GAcG;AACH,iBAAe,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CA8ChE;AAOD,eAAO,MAAM,kBAAkB;;;CAG9B,CAAC;AAGF,qDAAqD;AACrD,eAAO,MAAM,qBAAqB,kBAAY,CAAC;AAC/C,0DAA0D;AAC1D,eAAO,MAAM,UAAU,uBAAiB,CAAC"}
+{"version":3,"file":"translation.service.d.ts","sourceRoot":"","sources":["../../../src/services/translation/translation.service.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAGlE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,eAAO,MAAM,kBAAkB,uBAAuB,CAAC;AAqGvD;;;;GAIG;AACH,iBAAe,SAAS,CACtB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,cAAc,EACpB,EAAE,GAAE,cAAkC,EACtC,OAAO,GAAE,IAAI,GAAG,IAAW,GAC1B,OAAO,CAAC,MAAM,CAAC,CAsCjB;AAiCD;;;;;;;;;;;;;;GAcG;AACH,iBAAe,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CA8ChE;AAOD,eAAO,MAAM,kBAAkB;;;CAG9B,CAAC;AAGF,qDAAqD;AACrD,eAAO,MAAM,qBAAqB,kBAAY,CAAC;AAC/C,0DAA0D;AAC1D,eAAO,MAAM,UAAU,uBAAiB,CAAC"}