@happyvertical/smrt-subscriptions 0.60.15 → 0.60.17

package/dist/smrt-knowledge.okf.md

@@ -5,10 +5,10 @@ description: "Tenant subscriptions, entitlement resolution, usage thresholds, an
 status: "stable"
 generated:
   by: "smrt/scripts/generate-knowledge-okf.ts"
-  at: "2026-11-08T23:20:26Z"
+  at: "2026-11-09T23:09:38Z"
 audience: "internal"
 evidence_level: "source-inspected"
-source_revision: "sha256:7c2168e5c5217ff6f6d7073b39f02053dadab3070527ce4c41698152a0ed878b"
+source_revision: "sha256:48d3599db9578e435280b3dd42751090babf37fc1f9fc84da681314f14dc5579"
 sources:
   - id: "manifest"
     resource: "https://github.com/happyvertical/smrt/blob/main/packages/subscriptions/package.json"
@@ -37,6 +37,7 @@ sources:
 - [smrt-features](/components/smrt-features.md)
 - [smrt-tenancy](/components/smrt-tenancy.md)
 - [smrt-ui](/components/smrt-ui.md)
+- [smrt-users](/components/smrt-users.md)
 - [smrt-vitest](/components/smrt-vitest.md)
 
 ## SDK dependencies
@@ -54,6 +55,8 @@ sources:
 
 - `BillingAdjustment` (collection `billingadjustments`, extends `SmrtObject`)
 - `BillingAdjustmentCollection` (collection `billingadjustments`, extends `SmrtCollection`)
+- `BillingCheckoutSession` (collection `billingcheckoutsessions`, extends `SmrtObject`)
+- `BillingCheckoutSessionCollection` (collection `billingcheckoutsessions`, extends `SmrtCollection`)
 - `ClientCharge` (collection `clientcharges`, extends `SmrtObject`)
 - `ClientChargeCollection` (collection `clientcharges`, extends `SmrtCollection`)
 - `CreditGrant` (collection `creditgrants`, extends `SmrtObject`)

package/dist/svelte/CommercialOverview.svelte

@@ -41,11 +41,11 @@ function formatCharge(metric: CommercialMetricView): string {
 }
 </script>
 
-<section class="commercial-overview" aria-label={t(M['subscriptions.commercial.overview_label'])} data-smrt-component="CommercialOverview">
+<section class="smrt-commercial-overview__root" aria-label={t(M['subscriptions.commercial.overview_label'])} data-smrt-component="CommercialOverview">
   {#each metrics as metric (metric.metricKey)}
-    <article>
-      <header><strong>{metric.metricKey}</strong><span class:blocked={metric.thresholdState === 'blocked'}>{metric.thresholdState ?? 'ok'}</span></header>
-      <dl>
+    <article data-smrt-part="row">
+      <header data-smrt-part="header"><strong>{metric.metricKey}</strong><span class:smrt-commercial-overview__blocked={metric.thresholdState === 'blocked'} data-smrt-part="indicator">{metric.thresholdState ?? 'ok'}</span></header>
+      <dl data-smrt-part="body">
         <div><dt>Usage</dt><dd>{metric.usage}</dd></div>
         <div><dt>Allowance</dt><dd>{metric.allowance ?? '—'}</dd></div>
         <div><dt>Forecast</dt><dd>{metric.forecast ?? '—'}</dd></div>
@@ -57,13 +57,39 @@ function formatCharge(metric: CommercialMetricView): string {
 
 <style>
 @layer smrt.reset, smrt.structure, smrt.theme;
+@layer smrt.structure {
+  .smrt-commercial-overview__root {
+    display:grid;
+    gap:.75rem;
+  }
+  article {
+    padding:1rem;
+  }
+  header, dl, dl div {
+    display:flex;
+    justify-content:space-between;
+    gap:1rem;
+  }
+  dl {
+    flex-wrap:wrap;
+    margin:.75rem 0 0;
+  }
+  dd {
+    margin:0;
+  }
+}
+
 @layer smrt.theme {
-.commercial-overview { display:grid; gap:.75rem; }
-article { border:var(--smrt-hairline); border-radius:var(--smrt-radius-md); padding:1rem; }
-header, dl, dl div { display:flex; justify-content:space-between; gap:1rem; }
-dl { flex-wrap:wrap; margin:.75rem 0 0; }
-dt { color:var(--smrt-color-on-surface-variant); }
-dd { margin:0; }
-.blocked { color:var(--smrt-color-error); }
+  article {
+    border:var(--smrt-hairline);
+    border-radius:var(--smrt-radius-md);
+  }
+  dt {
+    color:var(--smrt-color-on-surface-variant);
+  }
+  .smrt-commercial-overview__blocked {
+    color:var(--smrt-color-error);
+  }
 }
+
 </style>

package/dist/svelte/PlanPicker.svelte

@@ -91,13 +91,13 @@ let {
     <!-- raw-primitive-allow: pressable selection card (aria-pressed toggle with multi-line plan summary), not a standard action button -->
     <button
       aria-pressed={plan.planKey === selectedPlanKey}
-      class:selected={plan.planKey === selectedPlanKey}
+      class:smrt-plan-picker__selected={plan.planKey === selectedPlanKey}
       class="smrt-plan-picker__plan"
       type="button"
-      onclick={() => onSelect?.(plan)}
+      onclick={() => onSelect?.(plan)} data-smrt-part="trigger"
     >
-      <span class="smrt-plan-picker__name">{plan.name}</span>
-      <span class="smrt-plan-picker__price">
+      <span class="smrt-plan-picker__name" data-smrt-part="title">{plan.name}</span>
+      <span class="smrt-plan-picker__price" data-smrt-part="value">
         {#if plan.pricingMode === 'free'}
           {t(M['subscriptions.picker.free'])}
         {:else if plan.pricingMode === 'pay_what_you_can'}
@@ -112,9 +112,9 @@ let {
         {/if}
       </span>
       {#if plan.description}
-        <span class="smrt-plan-picker__description">{plan.description}</span>
+        <span class="smrt-plan-picker__description" data-smrt-part="description">{plan.description}</span>
       {/if}
-      <span class="smrt-plan-picker__features">
+      <span class="smrt-plan-picker__features" data-smrt-part="group">
         {featureCount(plan)} features
       </span>
     </button>
@@ -123,40 +123,40 @@ let {
 
 <style>
 @layer smrt.reset, smrt.structure, smrt.theme;
-@layer smrt.theme {
+@layer smrt.structure {
   .smrt-plan-picker {
     display: grid;
     gap: 0.75rem;
     grid-template-columns: repeat(auto-fit, minmax(14rem, 1fr));
   }
-
   .smrt-plan-picker__plan {
     align-items: flex-start;
-    background: var(--smrt-color-surface);
-    border: var(--smrt-hairline);
-    border-radius: var(--smrt-radius-md);
-    color: inherit;
     cursor: pointer;
     display: grid;
     gap: 0.45rem;
     padding: 1rem;
-    text-align: left;
   }
+}
 
-  .smrt-plan-picker__plan.selected {
+@layer smrt.theme {
+  .smrt-plan-picker__plan {
+    background: var(--smrt-color-surface);
+    border: var(--smrt-hairline);
+    border-radius: var(--smrt-radius-md);
+    color: inherit;
+    text-align: left;
+  }
+  .smrt-plan-picker__plan.smrt-plan-picker__selected {
     border-color: var(--smrt-color-primary);
     box-shadow: 0 0 0 1px var(--smrt-color-primary);
   }
-
   .smrt-plan-picker__name {
     font-weight: var(--smrt-typography-weight-bold, 650);
   }
-
   .smrt-plan-picker__price {
     font-size: var(--smrt-typography-title-large-size, 1.25rem);
     font-weight: var(--smrt-typography-weight-bold, 700);
   }
-
   .smrt-plan-picker__price small,
   .smrt-plan-picker__description,
   .smrt-plan-picker__features {
@@ -164,4 +164,5 @@ let {
     font-size: var(--smrt-typography-body-medium-size, 0.875rem);
   }
 }
+
 </style>

package/dist/svelte/SubscriptionSummary.svelte

@@ -48,7 +48,7 @@ const periodLabel = $derived(
 
 <section class="smrt-subscription-summary" data-smrt-component="SubscriptionSummary">
   <div>
-    <p class="smrt-subscription-summary__label">{t(M['subscriptions.summary.current_plan'])}</p>
+    <p class="smrt-subscription-summary__label" data-smrt-part="label">{t(M['subscriptions.summary.current_plan'])}</p>
     <h2>{resolution?.planKey ?? t(M['subscriptions.summary.no_active_plan'])}</h2>
   </div>
   <dl>
@@ -75,34 +75,36 @@ const periodLabel = $derived(
 
 <style>
 @layer smrt.reset, smrt.structure, smrt.theme;
-@layer smrt.theme {
+@layer smrt.structure {
   .smrt-subscription-summary {
     align-items: center;
     display: flex;
     gap: 1rem;
     justify-content: space-between;
   }
-
   .smrt-subscription-summary h2,
   .smrt-subscription-summary__label {
     margin: 0;
   }
-
-  .smrt-subscription-summary__label,
-  .smrt-subscription-summary dt {
-    color: var(--smrt-color-on-surface-variant);
-    font-size: var(--smrt-typography-label-medium-size, 0.8rem);
-  }
-
   .smrt-subscription-summary dl {
     display: flex;
     gap: 1rem;
     margin: 0;
   }
+  .smrt-subscription-summary dd {
+    margin: 0;
+  }
+}
 
+@layer smrt.theme {
+  .smrt-subscription-summary__label,
+  .smrt-subscription-summary dt {
+    color: var(--smrt-color-on-surface-variant);
+    font-size: var(--smrt-typography-label-medium-size, 0.8rem);
+  }
   .smrt-subscription-summary dd {
     font-weight: var(--smrt-typography-weight-bold, 650);
-    margin: 0;
   }
 }
+
 </style>

package/dist/svelte/UsageThresholds.svelte

@@ -12,11 +12,12 @@ let {
 <div class="smrt-usage-thresholds" data-smrt-component="UsageThresholds">
   {#each evaluations as evaluation (`${evaluation.threshold.metricKey}:${evaluation.usage.windowStart.toISOString()}`)}
     <article
-      class:warn={evaluation.state === 'warn'}
-      class:blocked={evaluation.state === 'blocked'}
+      class:smrt-usage-thresholds__warn={evaluation.state === 'warn'}
+      class:smrt-usage-thresholds__blocked={evaluation.state === 'blocked'}
       class="smrt-usage-thresholds__row"
+      data-smrt-part="row"
     >
-      <div class="smrt-usage-thresholds__header">
+      <div class="smrt-usage-thresholds__header" data-smrt-part="header">
         <strong>{evaluation.threshold.label ?? evaluation.threshold.metricKey}</strong>
         <span>{evaluation.usage.quantity} / {evaluation.threshold.limit}</span>
       </div>
@@ -34,38 +35,41 @@ let {
 
 <style>
 @layer smrt.reset, smrt.structure, smrt.theme;
-@layer smrt.theme {
+@layer smrt.structure {
   .smrt-usage-thresholds {
     display: grid;
     gap: 0.75rem;
   }
-
   .smrt-usage-thresholds__row {
-    border: var(--smrt-hairline);
-    border-radius: var(--smrt-radius-md);
     display: grid;
     gap: 0.45rem;
     padding: 0.875rem;
   }
-
-  .smrt-usage-thresholds__row.warn {
-    border-color: var(--smrt-color-warning);
-  }
-
-  .smrt-usage-thresholds__row.blocked {
-    border-color: var(--smrt-color-error);
-  }
-
   .smrt-usage-thresholds__header {
     align-items: center;
     display: flex;
     justify-content: space-between;
   }
+  .smrt-usage-thresholds p {
+    margin: 0;
+  }
+}
 
+@layer smrt.theme {
+  .smrt-usage-thresholds__row {
+    border: var(--smrt-hairline);
+    border-radius: var(--smrt-radius-md);
+  }
+  .smrt-usage-thresholds__row.smrt-usage-thresholds__warn {
+    border-color: var(--smrt-color-warning);
+  }
+  .smrt-usage-thresholds__row.smrt-usage-thresholds__blocked {
+    border-color: var(--smrt-color-error);
+  }
   .smrt-usage-thresholds p {
     color: var(--smrt-color-on-surface-variant);
     font-size: var(--smrt-typography-body-medium-size, 0.875rem);
-    margin: 0;
   }
 }
+
 </style>

package/dist/vault-account/actions.d.ts

@@ -0,0 +1,24 @@
+import type { ProvisionRestartAccountInput, ProvisionRestartAccountResult, SupersedeVaultAccountInput, UnsupersedeVaultAccountInput } from './types.js';
+/**
+ * Replace `oldAccount` by `newAccount` (relay admin `PUT
+ * .../superseded-by`). The new account must already hold an active device
+ * (see {@link provisionRestartAccount}); the relay enforces that, and no
+ * chains or loops. Idempotent for the same target.
+ */
+export declare function supersedeVaultAccount(input: SupersedeVaultAccountInput): Promise<'superseded' | 'unchanged'>;
+/**
+ * Undo a supersession (relay admin `DELETE .../superseded-by`), for an
+ * operator mistake or a restart that never reached the working device. Returns
+ * false when `oldAccount` was not superseded.
+ */
+export declare function unsupersedeVaultAccount(input: UnsupersedeVaultAccountInput): Promise<boolean>;
+/**
+ * Step 1 of the restart flow (app-runtime README, "Restarting when the
+ * recovery secret is lost"), before the supersede: allocate a fresh vault
+ * account id, link it to the caller's tenant (so `backup.vault` resolves for
+ * it), and register the working device's relay signing key in it (relay admin
+ * `PUT .../devices/:device`). The id is minted per call, so a retry after a
+ * crash makes another empty account unless `newAccountId` is pinned.
+ */
+export declare function provisionRestartAccount(input: ProvisionRestartAccountInput): Promise<ProvisionRestartAccountResult>;
+//# sourceMappingURL=actions.d.ts.map

package/dist/vault-account/actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../src/vault-account/actions.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EACV,4BAA4B,EAC5B,6BAA6B,EAC7B,0BAA0B,EAC1B,4BAA4B,EAI7B,MAAM,YAAY,CAAC;AA2KpB;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,0BAA0B,GAChC,OAAO,CAAC,YAAY,GAAG,WAAW,CAAC,CAYrC;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,OAAO,CAAC,CAOlB;AAED;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,4BAA4B,GAClC,OAAO,CAAC,6BAA6B,CAAC,CA6CxC"}

package/dist/vault-account/errors.d.ts

@@ -0,0 +1,20 @@
+import { StepUpRequiredError } from '@happyvertical/smrt-users/step-up';
+export { StepUpRequiredError };
+/** Stable machine code of {@link NotOwnerError}. */
+export declare const NOT_OWNER_CODE = "not_owner";
+/**
+ * The caller is not the owner of the tenant that holds the account: a member,
+ * a device-only or layered session, no session, or another tenant's account.
+ * One message and code for all of them, so nothing about the account or the
+ * tenant leaks.
+ */
+export declare class NotOwnerError extends Error {
+    readonly code = "not_owner";
+    constructor(message?: string);
+}
+/** A refusal after both checks passed (the relay or directory said no). */
+export declare class VaultAccountAdminError extends Error {
+    readonly code: string;
+    constructor(code: string, message?: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/vault-account/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/vault-account/errors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAC;AAExE,OAAO,EAAE,mBAAmB,EAAE,CAAC;AAE/B,oDAAoD;AACpD,eAAO,MAAM,cAAc,cAAc,CAAC;AAE1C;;;;;GAKG;AACH,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,eAAkB;gBAEnB,OAAO,SAAwC;CAI5D;AAED,2EAA2E;AAC3E,qBAAa,sBAAuB,SAAQ,KAAK;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBAEV,IAAI,EAAE,MAAM,EAAE,OAAO,SAAqC;CAKvE"}

package/dist/vault-account/index.d.ts

@@ -0,0 +1,5 @@
+export { provisionRestartAccount, supersedeVaultAccount, unsupersedeVaultAccount, } from './actions.js';
+export { NOT_OWNER_CODE, NotOwnerError, StepUpRequiredError, VaultAccountAdminError, } from './errors.js';
+export { createVaultRelayAdminClient, type VaultRelayAdminClientOptions, } from './relay-admin-client.js';
+export type { ProvisionRestartAccountInput, ProvisionRestartAccountResult, SupersedeVaultAccountInput, UnsupersedeVaultAccountInput, VaultAccountAction, VaultAccountAdminDeps, VaultAccountAuditEntry, VaultAccountAuditSink, VaultAccountDenial, VaultAccountDirectory, VaultRelayAdminPort, } from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/vault-account/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/vault-account/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,cAAc,EACd,aAAa,EACb,mBAAmB,EACnB,sBAAsB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EACL,2BAA2B,EAC3B,KAAK,4BAA4B,GAClC,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,4BAA4B,EAC5B,6BAA6B,EAC7B,0BAA0B,EAC1B,4BAA4B,EAC5B,kBAAkB,EAClB,qBAAqB,EACrB,sBAAsB,EACtB,qBAAqB,EACrB,kBAAkB,EAClB,qBAAqB,EACrB,mBAAmB,GACpB,MAAM,YAAY,CAAC"}

package/dist/vault-account/relay-admin-client.d.ts

@@ -0,0 +1,10 @@
+import type { VaultRelayAdminPort } from './types.js';
+export interface VaultRelayAdminClientOptions {
+    /** Admin listener origin, e.g. `http://vault-relay-admin:8081`. */
+    baseUrl: string;
+    /** `VAULT_RELAY_ADMIN_TOKEN`. */
+    adminToken: string;
+    fetch?: typeof fetch;
+}
+export declare function createVaultRelayAdminClient(options: VaultRelayAdminClientOptions): VaultRelayAdminPort;
+//# sourceMappingURL=relay-admin-client.d.ts.map

package/dist/vault-account/relay-admin-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay-admin-client.d.ts","sourceRoot":"","sources":["../../src/vault-account/relay-admin-client.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEtD,MAAM,WAAW,4BAA4B;IAC3C,mEAAmE;IACnE,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAWD,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,4BAA4B,GACpC,mBAAmB,CA8ErB"}

package/dist/vault-account/types.d.ts

@@ -0,0 +1,115 @@
+/**
+ * Types for the hosted vault-account admin surface (#4841).
+ *
+ * Everything the gated actions touch is an injected port, so no HTTP server or
+ * real relay is needed to run or test them. `VaultRelay` from
+ * `@happyvertical/smrt-vault-relay` satisfies {@link VaultRelayAdminPort}
+ * structurally (this package cannot depend on it: the relay depends on this
+ * package), and {@link createVaultRelayAdminClient} implements it over the
+ * relay's admin HTTP API.
+ */
+import type { StepUpSession } from '@happyvertical/smrt-users/step-up';
+/** The three gated actions. */
+export type VaultAccountAction = 'supersede' | 'unsupersede' | 'provision_restart_account';
+/** Why an attempt was refused. The caller sees only the error code. */
+export type VaultAccountDenial = 'not_owner' | 'step_up_required';
+/**
+ * The relay admin operations the actions use: the account-layer hooks of
+ * `VaultRelay` (`registerDevice`, `supersedeAccount`, `clearSupersession`).
+ */
+export interface VaultRelayAdminPort {
+    /** Register a device's raw Ed25519 public key (base64url) in an account. */
+    registerDevice(accountId: string, deviceId: string, publicKey: string): Promise<'registered' | 'unchanged' | 'conflict'>;
+    /** Replace `accountId` by `supersededBy`. Idempotent for the same target. */
+    supersedeAccount(accountId: string, supersededBy: string): Promise<'superseded' | 'unchanged'>;
+    /** Undo a supersession; false when there was none. */
+    clearSupersession(accountId: string): Promise<boolean>;
+}
+/**
+ * The host's account directory: which tenant a vault account belongs to (the
+ * same mapping the relay's `tenantForAccount` entitlement lookup reads, so
+ * `backup.vault` resolves for a linked account).
+ */
+export interface VaultAccountDirectory {
+    /** The tenant that owns `accountId`, or null when unknown. */
+    tenantForAccount(accountId: string): string | null | Promise<string | null>;
+    /** Record that `accountId` belongs to `tenantId`. Idempotent. */
+    linkAccount(tenantId: string, accountId: string): void | Promise<void>;
+}
+/**
+ * One audit record. Carries ids, codes and times only: never a password, a
+ * session id, a token, a key or a recovery secret.
+ */
+export interface VaultAccountAuditEntry {
+    /** ISO time. */
+    at: string;
+    action: VaultAccountAction;
+    /**
+     * `denied`: refused before any relay call. `authorized`: both checks
+     * passed, written before the relay call. `succeeded` / `failed`: the relay
+     * call's outcome.
+     */
+    outcome: 'denied' | 'authorized' | 'succeeded' | 'failed';
+    /** The caller's user id; null when there was no usable session. */
+    actorUserId: string | null;
+    tenantId: string | null;
+    oldAccountId?: string;
+    newAccountId?: string;
+    deviceId?: string;
+    /** Set when `outcome` is `denied`. */
+    denial?: VaultAccountDenial;
+    /** Set when `outcome` is `failed`: an error name or code, never a message. */
+    errorCode?: string;
+    /** The relay's result word, when the call returned one. */
+    result?: string;
+}
+export interface VaultAccountAuditSink {
+    record(entry: VaultAccountAuditEntry): void | Promise<void>;
+}
+/** Collaborators and policy shared by every gated action. */
+export interface VaultAccountAdminDeps {
+    relay: VaultRelayAdminPort;
+    directory: VaultAccountDirectory;
+    audit: VaultAccountAuditSink;
+    /**
+     * Longest age of the owner's last authentication, in seconds. Default 300
+     * (5 minutes); at most one hour.
+     */
+    stepUpMaxAgeSeconds?: number;
+    /**
+     * Replaces the default owner test (`isTenantOwnerSession`) for hosts with a
+     * custom owner role. It must still refuse device-only and layered sessions.
+     */
+    isOwner?: (session: StepUpSession) => boolean;
+    /** Clock, injectable for tests. */
+    now?: () => Date;
+}
+export interface SupersedeVaultAccountInput extends VaultAccountAdminDeps {
+    /** The caller's session context, from `SessionService.loadSessionContext`. */
+    session: StepUpSession | null | undefined;
+    oldAccount: string;
+    newAccount: string;
+}
+export interface UnsupersedeVaultAccountInput extends VaultAccountAdminDeps {
+    session: StepUpSession | null | undefined;
+    oldAccount: string;
+}
+export interface ProvisionRestartAccountInput extends VaultAccountAdminDeps {
+    session: StepUpSession | null | undefined;
+    /** The account being replaced; must belong to the caller's tenant. */
+    oldAccount: string;
+    /** The working device's relay signing key id. */
+    deviceId: string;
+    /** Its raw Ed25519 public key, base64url. */
+    devicePublicKey: string;
+    /** Mints the new account id. Default `crypto.randomUUID()`. */
+    newAccountId?: () => string | Promise<string>;
+}
+export interface ProvisionRestartAccountResult {
+    /** The new vault account, linked to the caller's tenant. */
+    accountId: string;
+    deviceId: string;
+    /** `registered` the first time, `unchanged` on a retry. */
+    device: 'registered' | 'unchanged';
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/vault-account/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/vault-account/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAEvE,+BAA+B;AAC/B,MAAM,MAAM,kBAAkB,GAC1B,WAAW,GACX,aAAa,GACb,2BAA2B,CAAC;AAEhC,uEAAuE;AACvE,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,kBAAkB,CAAC;AAElE;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,4EAA4E;IAC5E,cAAc,CACZ,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC,YAAY,GAAG,WAAW,GAAG,UAAU,CAAC,CAAC;IACpD,6EAA6E;IAC7E,gBAAgB,CACd,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,YAAY,GAAG,WAAW,CAAC,CAAC;IACvC,sDAAsD;IACtD,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACxD;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,8DAA8D;IAC9D,gBAAgB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5E,iEAAiE;IACjE,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACxE;AAED;;;GAGG;AACH,MAAM,WAAW,sBAAsB;IACrC,gBAAgB;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,kBAAkB,CAAC;IAC3B;;;;OAIG;IACH,OAAO,EAAE,QAAQ,GAAG,YAAY,GAAG,WAAW,GAAG,QAAQ,CAAC;IAC1D,mEAAmE;IACnE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,sCAAsC;IACtC,MAAM,CAAC,EAAE,kBAAkB,CAAC;IAC5B,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,CAAC,KAAK,EAAE,sBAAsB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC7D;AAED,6DAA6D;AAC7D,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,mBAAmB,CAAC;IAC3B,SAAS,EAAE,qBAAqB,CAAC;IACjC,KAAK,EAAE,qBAAqB,CAAC;IAC7B;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,OAAO,CAAC;IAC9C,mCAAmC;IACnC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,0BAA2B,SAAQ,qBAAqB;IACvE,8EAA8E;IAC9E,OAAO,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,4BAA6B,SAAQ,qBAAqB;IACzE,OAAO,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,CAAC;IAC1C,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,4BAA6B,SAAQ,qBAAqB;IACzE,OAAO,EAAE,aAAa,GAAG,IAAI,GAAG,SAAS,CAAC;IAC1C,sEAAsE;IACtE,UAAU,EAAE,MAAM,CAAC;IACnB,iDAAiD;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,6CAA6C;IAC7C,eAAe,EAAE,MAAM,CAAC;IACxB,+DAA+D;IAC/D,YAAY,CAAC,EAAE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CAC/C;AAED,MAAM,WAAW,6BAA6B;IAC5C,4DAA4D;IAC5D,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,MAAM,EAAE,YAAY,GAAG,WAAW,CAAC;CACpC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@happyvertical/smrt-subscriptions",
-  "version": "0.60.15",
+  "version": "0.60.17",
   "description": "Tenant subscriptions, entitlement resolution, usage thresholds, and subscription UI for SMRT",
   "type": "module",
   "smrtRawPrimitives": "strict",
@@ -26,10 +26,11 @@
     }
   },
   "dependencies": {
-    "@happyvertical/smrt-core": "0.60.15",
-    "@happyvertical/smrt-tenancy": "0.60.15",
-    "@happyvertical/smrt-ui": "0.60.15",
-    "@happyvertical/sql": "^0.111.6"
+    "@happyvertical/smrt-core": "0.60.17",
+    "@happyvertical/smrt-tenancy": "0.60.17",
+    "@happyvertical/smrt-ui": "0.60.17",
+    "@happyvertical/smrt-users": "0.60.17",
+    "@happyvertical/sql": "^0.112.2"
   },
   "peerDependencies": {
     "svelte": "^5.57.0"
@@ -40,8 +41,9 @@
     }
   },
   "devDependencies": {
-    "@happyvertical/smrt-features": "0.60.15",
-    "@happyvertical/smrt-vitest": "0.60.15",
+    "@happyvertical/accounting": "^0.112.2",
+    "@happyvertical/smrt-features": "0.60.17",
+    "@happyvertical/smrt-vitest": "0.60.17",
     "@sveltejs/package": "^2.5.8",
     "@types/node": "24.13.6",
     "svelte": "^5.57.1",