@drawbridge/drawbridge-utils 0.0.147 → 0.0.148

package/dist/connections/index.cjs

@@ -2311,9 +2311,19 @@ var drawbridge_default2 = {
       // either. Unset, it degrades to the account sender rather than
       // refusing to start.
       { input: "email", key: "leadSender", credential: "SENDGRID_SEND_FROM_ADDRESS", label: "Lead sender", message: "The default for lead-facing mail when a merchant has not verified their own domain." },
-      { input: "text", key: "smsFrom", credential: "TWILIO_ACCOUNT_FROM", label: "SMS number", required: true },
-      { input: "password", key: "smsSid", credential: "TWILIO_ACCOUNT_SID", label: "Twilio account SID", redact: true, required: true },
-      { input: "password", key: "smsToken", credential: "TWILIO_AUTH_TOKEN", label: "Twilio auth token", redact: true, required: true }
+      // NOT required, the three of them together. SendGrid alone is enough to
+      // run the platform — sign-in codes, notifications and every lead-facing
+      // mail are email. Requiring Twilio here made the whole drawbridge
+      // provider read not-live on a deployment that never sends SMS, over a
+      // channel it was not using.
+      //
+      // Missing, SMS is LOCKED DOWN rather than broken: every send path
+      // refuses cleanly (queue/notification.js cancels, the otc stream skips
+      // and logs), the number-purchase routes deny, and identityDefaults.sms
+      // hides the org's SMS settings entirely.
+      { input: "text", key: "smsFrom", credential: "TWILIO_ACCOUNT_FROM", label: "SMS number", message: "Without Twilio credentials, SMS is disabled across the platform." },
+      { input: "password", key: "smsSid", credential: "TWILIO_ACCOUNT_SID", label: "Twilio account SID", redact: true },
+      { input: "password", key: "smsToken", credential: "TWILIO_AUTH_TOKEN", label: "Twilio auth token", redact: true }
     ]
   },
   // NOTHING, and HUBSPOT_ACCESS_TOKEN in particular must not be here.
@@ -4137,7 +4147,7 @@ var shopify_default2 = {
       // against the ones the app now needs, and queues a webhook
       // reconciliation.
       health: async ({ connection: connection2, workflow }, { adminToken, logger: logger2, read, reconcileScopes, resolveSettings, rotateToken, shopify } = {}) => {
-        var _a, _b, _c;
+        var _a, _b, _c, _d;
         const request2 = {
           connectionId: workflow.connection,
           organizationId: workflow.organization,
@@ -4179,15 +4189,40 @@ var shopify_default2 = {
             });
             const usageLine = (_a = subscriptions.find((subscription) => subscription.usageLineItemId)) == null ? void 0 : _a.usageLineItemId;
             if (usageLine) metered = usageLine;
+            const partnerRow = (read == null ? void 0 : read.get) ? await read.get({ collection: "provider", query: { slug: "shopify" } }) : null;
+            const partner = (partnerRow == null ? void 0 : partnerRow.settings) ? decrypt(partnerRow.settings) : {};
+            if (partner.partnerToken && partner.partnerOrgId && partner.partnerAppId && (source == null ? void 0 : source.id) && ((_b = shopify.partner) == null ? void 0 : _b.getUsageChargeEvents)) {
+              const accruals = await shopify.partner.getUsageChargeEvents({
+                appId: "gid://shopify/App/" + partner.partnerAppId,
+                first: 1,
+                occurredAtMin: new Date(Date.now() - 30 * 24 * 60 * 60 * 1e3).toISOString(),
+                organizationId: partner.partnerOrgId,
+                partnerToken: partner.partnerToken,
+                shopId: "gid://shopify/Shop/" + source.id
+              });
+              if (accruals.length) {
+                metered = String(accruals[0].chargeId || accruals[0].id);
+              } else {
+                const unaccrued = await read.get({
+                  collection: "order",
+                  query: {
+                    "billed.date": { $lt: new Date(Date.now() - 6 * 60 * 60 * 1e3) },
+                    organization: workflow.organization,
+                    "provider.slug": "shopify"
+                  }
+                });
+                if (unaccrued) metered = null;
+              }
+            }
           } catch (probeError) {
             billingProbeFailed = true;
-            (_b = logger2 == null ? void 0 : logger2.warn) == null ? void 0 : _b.call(logger2, "shopify.health.billing.probe.failed", {
+            (_c = logger2 == null ? void 0 : logger2.warn) == null ? void 0 : _c.call(logger2, "shopify.health.billing.probe.failed", {
               connectionId: connection2.id,
               message: probeError == null ? void 0 : probeError.message,
               shop: connection2.shop
             });
           }
-          if (sourceRepaired || metered !== void 0 && metered !== (((_c = connection2.source) == null ? void 0 : _c.metered) ?? void 0)) {
+          if (sourceRepaired || metered !== void 0 && metered !== (((_d = connection2.source) == null ? void 0 : _d.metered) ?? void 0)) {
             writes.push({
               collection: "connection",
               data: {
@@ -4409,7 +4444,15 @@ var shopify_default2 = {
       // and classification against it is case-sensitive. Optional: empty
       // means the default, and the sender still refuses any handle that
       // disagrees with the transaction it minted.
-      { format: "slug", input: "text", key: "orderEventHandle", label: "Order event handle", required: false, setting: true }
+      { format: "slug", input: "text", key: "orderEventHandle", label: "Order event handle", required: false, setting: true },
+      // The Partner API credential set — the ONE place meter billing is
+      // observable (CHARGE_USAGE accrual events). Org id and numeric app
+      // id come from the Partner Dashboard; the token from Settings →
+      // Partner API clients (Manage-apps permission). All optional: the
+      // accrual probe simply stays off until they exist.
+      { input: "text", key: "partnerOrgId", label: "Partner organization ID", required: false, setting: true },
+      { input: "text", key: "partnerAppId", label: "Partner app ID (numeric)", required: false, setting: true },
+      { input: "password", key: "partnerToken", label: "Partner API token", redact: true, required: false, setting: true }
     ]
   },
   // A pre-launch integration: it only surfaces once the App Store listing

package/dist/connections/index.d.cts

@@ -2413,9 +2413,19 @@ var drawbridge = {
 			// either. Unset, it degrades to the account sender rather than
 			// refusing to start.
 			{ input : 'email', key : 'leadSender', credential : 'SENDGRID_SEND_FROM_ADDRESS', label : 'Lead sender', message : 'The default for lead-facing mail when a merchant has not verified their own domain.' },
-			{ input : 'text', key : 'smsFrom', credential : 'TWILIO_ACCOUNT_FROM', label : 'SMS number', required : true },
-			{ input : 'password', key : 'smsSid', credential : 'TWILIO_ACCOUNT_SID', label : 'Twilio account SID', redact : true, required : true },
-			{ input : 'password', key : 'smsToken', credential : 'TWILIO_AUTH_TOKEN', label : 'Twilio auth token', redact : true, required : true }
+			// NOT required, the three of them together. SendGrid alone is enough to
+			// run the platform — sign-in codes, notifications and every lead-facing
+			// mail are email. Requiring Twilio here made the whole drawbridge
+			// provider read not-live on a deployment that never sends SMS, over a
+			// channel it was not using.
+			//
+			// Missing, SMS is LOCKED DOWN rather than broken: every send path
+			// refuses cleanly (queue/notification.js cancels, the otc stream skips
+			// and logs), the number-purchase routes deny, and identityDefaults.sms
+			// hides the org's SMS settings entirely.
+			{ input : 'text', key : 'smsFrom', credential : 'TWILIO_ACCOUNT_FROM', label : 'SMS number', message : 'Without Twilio credentials, SMS is disabled across the platform.' },
+			{ input : 'password', key : 'smsSid', credential : 'TWILIO_ACCOUNT_SID', label : 'Twilio account SID', redact : true },
+			{ input : 'password', key : 'smsToken', credential : 'TWILIO_AUTH_TOKEN', label : 'Twilio auth token', redact : true }
 		]
 	},
 	// NOTHING, and HUBSPOT_ACCESS_TOKEN in particular must not be here.
@@ -4958,6 +4968,52 @@ var shopify = {
 
 						if( usageLine ) metered = usageLine;
 
+						// THE REAL METER SIGNAL — Partner API accrual. A CHARGE_USAGE
+						// event for this shop is proof billing works: its charge id
+						// becomes the stamp (overriding the line-item probe, which
+						// managed pricing keeps blind). No accrual AND a billed order
+						// old enough that one should exist is the HONEST unmetered
+						// verdict — the null that re-arms the card, the Issue and the
+						// pager on truth instead of the Admin API's silence. Off
+						// entirely until the provider row carries the credentials.
+						const partnerRow = read?.get ? await read.get({ collection : 'provider', query : { slug : 'shopify' } }) : null;
+						const partner = partnerRow?.settings ? decrypt( partnerRow.settings ) : {};
+
+						if( partner.partnerToken && partner.partnerOrgId && partner.partnerAppId && source?.id && shopify.partner?.getUsageChargeEvents ){
+
+							const accruals = await shopify.partner.getUsageChargeEvents({
+								appId : 'gid://shopify/App/' + partner.partnerAppId,
+								first : 1,
+								occurredAtMin : new Date( Date.now() - 30 * 24 * 60 * 60 * 1000 ).toISOString(),
+								organizationId : partner.partnerOrgId,
+								partnerToken : partner.partnerToken,
+								shopId : 'gid://shopify/Shop/' + source.id
+							});
+
+							if( accruals.length ){
+
+								metered = String( accruals[ 0 ].chargeId || accruals[ 0 ].id );
+
+							} else {
+
+								// Only a store that SHOULD have accrued gets the
+								// unmetered verdict: an order stamped billed six-plus
+								// hours ago with still no accrual event.
+								const unaccrued = await read.get({
+									collection : 'order',
+									query : {
+										'billed.date' : { $lt : new Date( Date.now() - 6 * 60 * 60 * 1000 ) },
+										organization : workflow.organization,
+										'provider.slug' : 'shopify'
+									}
+								});
+
+								if( unaccrued ) metered = null;
+
+							}
+
+						}
+
 					} catch ( probeError ) {
 
 						billingProbeFailed = true;
@@ -5265,7 +5321,15 @@ var shopify = {
 			// and classification against it is case-sensitive. Optional: empty
 			// means the default, and the sender still refuses any handle that
 			// disagrees with the transaction it minted.
-			{ format : 'slug', input : 'text', key : 'orderEventHandle', label : 'Order event handle', required : false, setting : true }
+			{ format : 'slug', input : 'text', key : 'orderEventHandle', label : 'Order event handle', required : false, setting : true },
+			// The Partner API credential set — the ONE place meter billing is
+			// observable (CHARGE_USAGE accrual events). Org id and numeric app
+			// id come from the Partner Dashboard; the token from Settings →
+			// Partner API clients (Manage-apps permission). All optional: the
+			// accrual probe simply stays off until they exist.
+			{ input : 'text', key : 'partnerOrgId', label : 'Partner organization ID', required : false, setting : true },
+			{ input : 'text', key : 'partnerAppId', label : 'Partner app ID (numeric)', required : false, setting : true },
+			{ input : 'password', key : 'partnerToken', label : 'Partner API token', redact : true, required : false, setting : true }
 		]
 	},
 	// A pre-launch integration: it only surfaces once the App Store listing

package/dist/connections/index.d.ts

@@ -2413,9 +2413,19 @@ var drawbridge = {
 			// either. Unset, it degrades to the account sender rather than
 			// refusing to start.
 			{ input : 'email', key : 'leadSender', credential : 'SENDGRID_SEND_FROM_ADDRESS', label : 'Lead sender', message : 'The default for lead-facing mail when a merchant has not verified their own domain.' },
-			{ input : 'text', key : 'smsFrom', credential : 'TWILIO_ACCOUNT_FROM', label : 'SMS number', required : true },
-			{ input : 'password', key : 'smsSid', credential : 'TWILIO_ACCOUNT_SID', label : 'Twilio account SID', redact : true, required : true },
-			{ input : 'password', key : 'smsToken', credential : 'TWILIO_AUTH_TOKEN', label : 'Twilio auth token', redact : true, required : true }
+			// NOT required, the three of them together. SendGrid alone is enough to
+			// run the platform — sign-in codes, notifications and every lead-facing
+			// mail are email. Requiring Twilio here made the whole drawbridge
+			// provider read not-live on a deployment that never sends SMS, over a
+			// channel it was not using.
+			//
+			// Missing, SMS is LOCKED DOWN rather than broken: every send path
+			// refuses cleanly (queue/notification.js cancels, the otc stream skips
+			// and logs), the number-purchase routes deny, and identityDefaults.sms
+			// hides the org's SMS settings entirely.
+			{ input : 'text', key : 'smsFrom', credential : 'TWILIO_ACCOUNT_FROM', label : 'SMS number', message : 'Without Twilio credentials, SMS is disabled across the platform.' },
+			{ input : 'password', key : 'smsSid', credential : 'TWILIO_ACCOUNT_SID', label : 'Twilio account SID', redact : true },
+			{ input : 'password', key : 'smsToken', credential : 'TWILIO_AUTH_TOKEN', label : 'Twilio auth token', redact : true }
 		]
 	},
 	// NOTHING, and HUBSPOT_ACCESS_TOKEN in particular must not be here.
@@ -4958,6 +4968,52 @@ var shopify = {
 
 						if( usageLine ) metered = usageLine;
 
+						// THE REAL METER SIGNAL — Partner API accrual. A CHARGE_USAGE
+						// event for this shop is proof billing works: its charge id
+						// becomes the stamp (overriding the line-item probe, which
+						// managed pricing keeps blind). No accrual AND a billed order
+						// old enough that one should exist is the HONEST unmetered
+						// verdict — the null that re-arms the card, the Issue and the
+						// pager on truth instead of the Admin API's silence. Off
+						// entirely until the provider row carries the credentials.
+						const partnerRow = read?.get ? await read.get({ collection : 'provider', query : { slug : 'shopify' } }) : null;
+						const partner = partnerRow?.settings ? decrypt( partnerRow.settings ) : {};
+
+						if( partner.partnerToken && partner.partnerOrgId && partner.partnerAppId && source?.id && shopify.partner?.getUsageChargeEvents ){
+
+							const accruals = await shopify.partner.getUsageChargeEvents({
+								appId : 'gid://shopify/App/' + partner.partnerAppId,
+								first : 1,
+								occurredAtMin : new Date( Date.now() - 30 * 24 * 60 * 60 * 1000 ).toISOString(),
+								organizationId : partner.partnerOrgId,
+								partnerToken : partner.partnerToken,
+								shopId : 'gid://shopify/Shop/' + source.id
+							});
+
+							if( accruals.length ){
+
+								metered = String( accruals[ 0 ].chargeId || accruals[ 0 ].id );
+
+							} else {
+
+								// Only a store that SHOULD have accrued gets the
+								// unmetered verdict: an order stamped billed six-plus
+								// hours ago with still no accrual event.
+								const unaccrued = await read.get({
+									collection : 'order',
+									query : {
+										'billed.date' : { $lt : new Date( Date.now() - 6 * 60 * 60 * 1000 ) },
+										organization : workflow.organization,
+										'provider.slug' : 'shopify'
+									}
+								});
+
+								if( unaccrued ) metered = null;
+
+							}
+
+						}
+
 					} catch ( probeError ) {
 
 						billingProbeFailed = true;
@@ -5265,7 +5321,15 @@ var shopify = {
 			// and classification against it is case-sensitive. Optional: empty
 			// means the default, and the sender still refuses any handle that
 			// disagrees with the transaction it minted.
-			{ format : 'slug', input : 'text', key : 'orderEventHandle', label : 'Order event handle', required : false, setting : true }
+			{ format : 'slug', input : 'text', key : 'orderEventHandle', label : 'Order event handle', required : false, setting : true },
+			// The Partner API credential set — the ONE place meter billing is
+			// observable (CHARGE_USAGE accrual events). Org id and numeric app
+			// id come from the Partner Dashboard; the token from Settings →
+			// Partner API clients (Manage-apps permission). All optional: the
+			// accrual probe simply stays off until they exist.
+			{ input : 'text', key : 'partnerOrgId', label : 'Partner organization ID', required : false, setting : true },
+			{ input : 'text', key : 'partnerAppId', label : 'Partner app ID (numeric)', required : false, setting : true },
+			{ input : 'password', key : 'partnerToken', label : 'Partner API token', redact : true, required : false, setting : true }
 		]
 	},
 	// A pre-launch integration: it only surfaces once the App Store listing

package/dist/connections/index.js

@@ -2237,9 +2237,19 @@ var drawbridge_default2 = {
       // either. Unset, it degrades to the account sender rather than
       // refusing to start.
       { input: "email", key: "leadSender", credential: "SENDGRID_SEND_FROM_ADDRESS", label: "Lead sender", message: "The default for lead-facing mail when a merchant has not verified their own domain." },
-      { input: "text", key: "smsFrom", credential: "TWILIO_ACCOUNT_FROM", label: "SMS number", required: true },
-      { input: "password", key: "smsSid", credential: "TWILIO_ACCOUNT_SID", label: "Twilio account SID", redact: true, required: true },
-      { input: "password", key: "smsToken", credential: "TWILIO_AUTH_TOKEN", label: "Twilio auth token", redact: true, required: true }
+      // NOT required, the three of them together. SendGrid alone is enough to
+      // run the platform — sign-in codes, notifications and every lead-facing
+      // mail are email. Requiring Twilio here made the whole drawbridge
+      // provider read not-live on a deployment that never sends SMS, over a
+      // channel it was not using.
+      //
+      // Missing, SMS is LOCKED DOWN rather than broken: every send path
+      // refuses cleanly (queue/notification.js cancels, the otc stream skips
+      // and logs), the number-purchase routes deny, and identityDefaults.sms
+      // hides the org's SMS settings entirely.
+      { input: "text", key: "smsFrom", credential: "TWILIO_ACCOUNT_FROM", label: "SMS number", message: "Without Twilio credentials, SMS is disabled across the platform." },
+      { input: "password", key: "smsSid", credential: "TWILIO_ACCOUNT_SID", label: "Twilio account SID", redact: true },
+      { input: "password", key: "smsToken", credential: "TWILIO_AUTH_TOKEN", label: "Twilio auth token", redact: true }
     ]
   },
   // NOTHING, and HUBSPOT_ACCESS_TOKEN in particular must not be here.
@@ -4063,7 +4073,7 @@ var shopify_default2 = {
       // against the ones the app now needs, and queues a webhook
       // reconciliation.
       health: async ({ connection: connection2, workflow }, { adminToken, logger: logger2, read, reconcileScopes, resolveSettings, rotateToken, shopify } = {}) => {
-        var _a, _b, _c;
+        var _a, _b, _c, _d;
         const request2 = {
           connectionId: workflow.connection,
           organizationId: workflow.organization,
@@ -4105,15 +4115,40 @@ var shopify_default2 = {
             });
             const usageLine = (_a = subscriptions.find((subscription) => subscription.usageLineItemId)) == null ? void 0 : _a.usageLineItemId;
             if (usageLine) metered = usageLine;
+            const partnerRow = (read == null ? void 0 : read.get) ? await read.get({ collection: "provider", query: { slug: "shopify" } }) : null;
+            const partner = (partnerRow == null ? void 0 : partnerRow.settings) ? decrypt(partnerRow.settings) : {};
+            if (partner.partnerToken && partner.partnerOrgId && partner.partnerAppId && (source == null ? void 0 : source.id) && ((_b = shopify.partner) == null ? void 0 : _b.getUsageChargeEvents)) {
+              const accruals = await shopify.partner.getUsageChargeEvents({
+                appId: "gid://shopify/App/" + partner.partnerAppId,
+                first: 1,
+                occurredAtMin: new Date(Date.now() - 30 * 24 * 60 * 60 * 1e3).toISOString(),
+                organizationId: partner.partnerOrgId,
+                partnerToken: partner.partnerToken,
+                shopId: "gid://shopify/Shop/" + source.id
+              });
+              if (accruals.length) {
+                metered = String(accruals[0].chargeId || accruals[0].id);
+              } else {
+                const unaccrued = await read.get({
+                  collection: "order",
+                  query: {
+                    "billed.date": { $lt: new Date(Date.now() - 6 * 60 * 60 * 1e3) },
+                    organization: workflow.organization,
+                    "provider.slug": "shopify"
+                  }
+                });
+                if (unaccrued) metered = null;
+              }
+            }
           } catch (probeError) {
             billingProbeFailed = true;
-            (_b = logger2 == null ? void 0 : logger2.warn) == null ? void 0 : _b.call(logger2, "shopify.health.billing.probe.failed", {
+            (_c = logger2 == null ? void 0 : logger2.warn) == null ? void 0 : _c.call(logger2, "shopify.health.billing.probe.failed", {
               connectionId: connection2.id,
               message: probeError == null ? void 0 : probeError.message,
               shop: connection2.shop
             });
           }
-          if (sourceRepaired || metered !== void 0 && metered !== (((_c = connection2.source) == null ? void 0 : _c.metered) ?? void 0)) {
+          if (sourceRepaired || metered !== void 0 && metered !== (((_d = connection2.source) == null ? void 0 : _d.metered) ?? void 0)) {
             writes.push({
               collection: "connection",
               data: {
@@ -4335,7 +4370,15 @@ var shopify_default2 = {
       // and classification against it is case-sensitive. Optional: empty
       // means the default, and the sender still refuses any handle that
       // disagrees with the transaction it minted.
-      { format: "slug", input: "text", key: "orderEventHandle", label: "Order event handle", required: false, setting: true }
+      { format: "slug", input: "text", key: "orderEventHandle", label: "Order event handle", required: false, setting: true },
+      // The Partner API credential set — the ONE place meter billing is
+      // observable (CHARGE_USAGE accrual events). Org id and numeric app
+      // id come from the Partner Dashboard; the token from Settings →
+      // Partner API clients (Manage-apps permission). All optional: the
+      // accrual probe simply stays off until they exist.
+      { input: "text", key: "partnerOrgId", label: "Partner organization ID", required: false, setting: true },
+      { input: "text", key: "partnerAppId", label: "Partner app ID (numeric)", required: false, setting: true },
+      { input: "password", key: "partnerToken", label: "Partner API token", redact: true, required: false, setting: true }
     ]
   },
   // A pre-launch integration: it only surfaces once the App Store listing

package/dist/providers.cjs

@@ -2217,9 +2217,19 @@ var drawbridge_default2 = {
       // either. Unset, it degrades to the account sender rather than
       // refusing to start.
       { input: "email", key: "leadSender", credential: "SENDGRID_SEND_FROM_ADDRESS", label: "Lead sender", message: "The default for lead-facing mail when a merchant has not verified their own domain." },
-      { input: "text", key: "smsFrom", credential: "TWILIO_ACCOUNT_FROM", label: "SMS number", required: true },
-      { input: "password", key: "smsSid", credential: "TWILIO_ACCOUNT_SID", label: "Twilio account SID", redact: true, required: true },
-      { input: "password", key: "smsToken", credential: "TWILIO_AUTH_TOKEN", label: "Twilio auth token", redact: true, required: true }
+      // NOT required, the three of them together. SendGrid alone is enough to
+      // run the platform — sign-in codes, notifications and every lead-facing
+      // mail are email. Requiring Twilio here made the whole drawbridge
+      // provider read not-live on a deployment that never sends SMS, over a
+      // channel it was not using.
+      //
+      // Missing, SMS is LOCKED DOWN rather than broken: every send path
+      // refuses cleanly (queue/notification.js cancels, the otc stream skips
+      // and logs), the number-purchase routes deny, and identityDefaults.sms
+      // hides the org's SMS settings entirely.
+      { input: "text", key: "smsFrom", credential: "TWILIO_ACCOUNT_FROM", label: "SMS number", message: "Without Twilio credentials, SMS is disabled across the platform." },
+      { input: "password", key: "smsSid", credential: "TWILIO_ACCOUNT_SID", label: "Twilio account SID", redact: true },
+      { input: "password", key: "smsToken", credential: "TWILIO_AUTH_TOKEN", label: "Twilio auth token", redact: true }
     ]
   },
   // NOTHING, and HUBSPOT_ACCESS_TOKEN in particular must not be here.
@@ -4062,7 +4072,7 @@ var shopify_default2 = {
       // against the ones the app now needs, and queues a webhook
       // reconciliation.
       health: async ({ connection: connection2, workflow }, { adminToken, logger: logger2, read, reconcileScopes, resolveSettings, rotateToken, shopify } = {}) => {
-        var _a, _b, _c;
+        var _a, _b, _c, _d;
         const request2 = {
           connectionId: workflow.connection,
           organizationId: workflow.organization,
@@ -4104,15 +4114,40 @@ var shopify_default2 = {
             });
             const usageLine = (_a = subscriptions.find((subscription) => subscription.usageLineItemId)) == null ? void 0 : _a.usageLineItemId;
             if (usageLine) metered = usageLine;
+            const partnerRow = (read == null ? void 0 : read.get) ? await read.get({ collection: "provider", query: { slug: "shopify" } }) : null;
+            const partner = (partnerRow == null ? void 0 : partnerRow.settings) ? decrypt(partnerRow.settings) : {};
+            if (partner.partnerToken && partner.partnerOrgId && partner.partnerAppId && (source == null ? void 0 : source.id) && ((_b = shopify.partner) == null ? void 0 : _b.getUsageChargeEvents)) {
+              const accruals = await shopify.partner.getUsageChargeEvents({
+                appId: "gid://shopify/App/" + partner.partnerAppId,
+                first: 1,
+                occurredAtMin: new Date(Date.now() - 30 * 24 * 60 * 60 * 1e3).toISOString(),
+                organizationId: partner.partnerOrgId,
+                partnerToken: partner.partnerToken,
+                shopId: "gid://shopify/Shop/" + source.id
+              });
+              if (accruals.length) {
+                metered = String(accruals[0].chargeId || accruals[0].id);
+              } else {
+                const unaccrued = await read.get({
+                  collection: "order",
+                  query: {
+                    "billed.date": { $lt: new Date(Date.now() - 6 * 60 * 60 * 1e3) },
+                    organization: workflow.organization,
+                    "provider.slug": "shopify"
+                  }
+                });
+                if (unaccrued) metered = null;
+              }
+            }
           } catch (probeError) {
             billingProbeFailed = true;
-            (_b = logger2 == null ? void 0 : logger2.warn) == null ? void 0 : _b.call(logger2, "shopify.health.billing.probe.failed", {
+            (_c = logger2 == null ? void 0 : logger2.warn) == null ? void 0 : _c.call(logger2, "shopify.health.billing.probe.failed", {
               connectionId: connection2.id,
               message: probeError == null ? void 0 : probeError.message,
               shop: connection2.shop
             });
           }
-          if (sourceRepaired || metered !== void 0 && metered !== (((_c = connection2.source) == null ? void 0 : _c.metered) ?? void 0)) {
+          if (sourceRepaired || metered !== void 0 && metered !== (((_d = connection2.source) == null ? void 0 : _d.metered) ?? void 0)) {
             writes.push({
               collection: "connection",
               data: {
@@ -4334,7 +4369,15 @@ var shopify_default2 = {
       // and classification against it is case-sensitive. Optional: empty
       // means the default, and the sender still refuses any handle that
       // disagrees with the transaction it minted.
-      { format: "slug", input: "text", key: "orderEventHandle", label: "Order event handle", required: false, setting: true }
+      { format: "slug", input: "text", key: "orderEventHandle", label: "Order event handle", required: false, setting: true },
+      // The Partner API credential set — the ONE place meter billing is
+      // observable (CHARGE_USAGE accrual events). Org id and numeric app
+      // id come from the Partner Dashboard; the token from Settings →
+      // Partner API clients (Manage-apps permission). All optional: the
+      // accrual probe simply stays off until they exist.
+      { input: "text", key: "partnerOrgId", label: "Partner organization ID", required: false, setting: true },
+      { input: "text", key: "partnerAppId", label: "Partner app ID (numeric)", required: false, setting: true },
+      { input: "password", key: "partnerToken", label: "Partner API token", redact: true, required: false, setting: true }
     ]
   },
   // A pre-launch integration: it only surfaces once the App Store listing

package/dist/providers.js

@@ -2173,9 +2173,19 @@ var drawbridge_default2 = {
       // either. Unset, it degrades to the account sender rather than
       // refusing to start.
       { input: "email", key: "leadSender", credential: "SENDGRID_SEND_FROM_ADDRESS", label: "Lead sender", message: "The default for lead-facing mail when a merchant has not verified their own domain." },
-      { input: "text", key: "smsFrom", credential: "TWILIO_ACCOUNT_FROM", label: "SMS number", required: true },
-      { input: "password", key: "smsSid", credential: "TWILIO_ACCOUNT_SID", label: "Twilio account SID", redact: true, required: true },
-      { input: "password", key: "smsToken", credential: "TWILIO_AUTH_TOKEN", label: "Twilio auth token", redact: true, required: true }
+      // NOT required, the three of them together. SendGrid alone is enough to
+      // run the platform — sign-in codes, notifications and every lead-facing
+      // mail are email. Requiring Twilio here made the whole drawbridge
+      // provider read not-live on a deployment that never sends SMS, over a
+      // channel it was not using.
+      //
+      // Missing, SMS is LOCKED DOWN rather than broken: every send path
+      // refuses cleanly (queue/notification.js cancels, the otc stream skips
+      // and logs), the number-purchase routes deny, and identityDefaults.sms
+      // hides the org's SMS settings entirely.
+      { input: "text", key: "smsFrom", credential: "TWILIO_ACCOUNT_FROM", label: "SMS number", message: "Without Twilio credentials, SMS is disabled across the platform." },
+      { input: "password", key: "smsSid", credential: "TWILIO_ACCOUNT_SID", label: "Twilio account SID", redact: true },
+      { input: "password", key: "smsToken", credential: "TWILIO_AUTH_TOKEN", label: "Twilio auth token", redact: true }
     ]
   },
   // NOTHING, and HUBSPOT_ACCESS_TOKEN in particular must not be here.
@@ -4018,7 +4028,7 @@ var shopify_default2 = {
       // against the ones the app now needs, and queues a webhook
       // reconciliation.
       health: async ({ connection: connection2, workflow }, { adminToken, logger: logger2, read, reconcileScopes, resolveSettings, rotateToken, shopify } = {}) => {
-        var _a, _b, _c;
+        var _a, _b, _c, _d;
         const request2 = {
           connectionId: workflow.connection,
           organizationId: workflow.organization,
@@ -4060,15 +4070,40 @@ var shopify_default2 = {
             });
             const usageLine = (_a = subscriptions.find((subscription) => subscription.usageLineItemId)) == null ? void 0 : _a.usageLineItemId;
             if (usageLine) metered = usageLine;
+            const partnerRow = (read == null ? void 0 : read.get) ? await read.get({ collection: "provider", query: { slug: "shopify" } }) : null;
+            const partner = (partnerRow == null ? void 0 : partnerRow.settings) ? decrypt(partnerRow.settings) : {};
+            if (partner.partnerToken && partner.partnerOrgId && partner.partnerAppId && (source == null ? void 0 : source.id) && ((_b = shopify.partner) == null ? void 0 : _b.getUsageChargeEvents)) {
+              const accruals = await shopify.partner.getUsageChargeEvents({
+                appId: "gid://shopify/App/" + partner.partnerAppId,
+                first: 1,
+                occurredAtMin: new Date(Date.now() - 30 * 24 * 60 * 60 * 1e3).toISOString(),
+                organizationId: partner.partnerOrgId,
+                partnerToken: partner.partnerToken,
+                shopId: "gid://shopify/Shop/" + source.id
+              });
+              if (accruals.length) {
+                metered = String(accruals[0].chargeId || accruals[0].id);
+              } else {
+                const unaccrued = await read.get({
+                  collection: "order",
+                  query: {
+                    "billed.date": { $lt: new Date(Date.now() - 6 * 60 * 60 * 1e3) },
+                    organization: workflow.organization,
+                    "provider.slug": "shopify"
+                  }
+                });
+                if (unaccrued) metered = null;
+              }
+            }
           } catch (probeError) {
             billingProbeFailed = true;
-            (_b = logger2 == null ? void 0 : logger2.warn) == null ? void 0 : _b.call(logger2, "shopify.health.billing.probe.failed", {
+            (_c = logger2 == null ? void 0 : logger2.warn) == null ? void 0 : _c.call(logger2, "shopify.health.billing.probe.failed", {
               connectionId: connection2.id,
               message: probeError == null ? void 0 : probeError.message,
               shop: connection2.shop
             });
           }
-          if (sourceRepaired || metered !== void 0 && metered !== (((_c = connection2.source) == null ? void 0 : _c.metered) ?? void 0)) {
+          if (sourceRepaired || metered !== void 0 && metered !== (((_d = connection2.source) == null ? void 0 : _d.metered) ?? void 0)) {
             writes.push({
               collection: "connection",
               data: {
@@ -4290,7 +4325,15 @@ var shopify_default2 = {
       // and classification against it is case-sensitive. Optional: empty
       // means the default, and the sender still refuses any handle that
       // disagrees with the transaction it minted.
-      { format: "slug", input: "text", key: "orderEventHandle", label: "Order event handle", required: false, setting: true }
+      { format: "slug", input: "text", key: "orderEventHandle", label: "Order event handle", required: false, setting: true },
+      // The Partner API credential set — the ONE place meter billing is
+      // observable (CHARGE_USAGE accrual events). Org id and numeric app
+      // id come from the Partner Dashboard; the token from Settings →
+      // Partner API clients (Manage-apps permission). All optional: the
+      // accrual probe simply stays off until they exist.
+      { input: "text", key: "partnerOrgId", label: "Partner organization ID", required: false, setting: true },
+      { input: "text", key: "partnerAppId", label: "Partner app ID (numeric)", required: false, setting: true },
+      { input: "password", key: "partnerToken", label: "Partner API token", redact: true, required: false, setting: true }
     ]
   },
   // A pre-launch integration: it only surfaces once the App Store listing

package/package.json

@@ -216,5 +216,5 @@
     "prepublishOnly": ". \"$HOME/.nvm/nvm.sh\" && nvm use && tsup && node --test"
   },
   "types": "dist/index.d.ts",
-  "version": "0.0.147"
+  "version": "0.0.148"
 }