@hyperscale0/hsx 1.0.125 → 1.0.130

package/dist/src/std-bundle.js.map

@@ -1 +1 @@
-{"version":3,"file":"std-bundle.js","sourceRoot":"","sources":["../../src/std-bundle.ts"],"names":[],"mappings":"AAAA,oEAAoE;AAEpE,MAAM,CAAC,MAAM,iBAAiB,GAAgC,IAAI,GAAG,CAAiB;IACpF,CAAC,WAAW,EAAE,2oKAA2oK,CAAC;IAC1pK,CAAC,iBAAiB,EAAE,2sNAA2sN,CAAC;IAChuN,CAAC,YAAY,EAAE,+qHAA+qH,CAAC;IAC/rH,CAAC,eAAe,EAAE,6m+DAA6m+D,CAAC;IACho+D,CAAC,eAAe,EAAE,01KAA01K,CAAC;IAC72K,CAAC,aAAa,EAAE,qwTAAqwT,CAAC;IACtxT,CAAC,iBAAiB,EAAE,woTAAwoT,CAAC;IAC7pT,CAAC,WAAW,EAAE,u1VAAu1V,CAAC;IACt2V,CAAC,eAAe,EAAE,+q2BAA+q2B,CAAC;IACls2B,CAAC,aAAa,EAAE,85JAA85J,CAAC;IAC/6J,CAAC,YAAY,EAAE,2jGAA2jG,CAAC;CAC5kG,CAAC,CAAC"}
+{"version":3,"file":"std-bundle.js","sourceRoot":"","sources":["../../src/std-bundle.ts"],"names":[],"mappings":"AAAA,oEAAoE;AAEpE,MAAM,CAAC,MAAM,iBAAiB,GAAgC,IAAI,GAAG,CAAiB;IACpF,CAAC,aAAa,EAAE,soLAAsoL,CAAC;IACvpL,CAAC,WAAW,EAAE,63KAA63K,CAAC;IAC54K,CAAC,iBAAiB,EAAE,2sNAA2sN,CAAC;IAChuN,CAAC,YAAY,EAAE,60LAA60L,CAAC;IAC71L,CAAC,eAAe,EAAE,8v2EAA8v2E,CAAC;IACjx2E,CAAC,eAAe,EAAE,uxLAAuxL,CAAC;IAC1yL,CAAC,aAAa,EAAE,qwTAAqwT,CAAC;IACtxT,CAAC,iBAAiB,EAAE,mpTAAmpT,CAAC;IACxqT,CAAC,WAAW,EAAE,+1VAA+1V,CAAC;IAC92V,CAAC,eAAe,EAAE,+q2BAA+q2B,CAAC;IACls2B,CAAC,aAAa,EAAE,85JAA85J,CAAC;IAC/6J,CAAC,YAAY,EAAE,s2HAAs2H,CAAC;CACv3H,CAAC,CAAC"}

package/docs/README.md

@@ -82,11 +82,16 @@ the executor's current time when the action runs, not a caller-supplied return d
 A late `due` permits the operator action; it does not schedule that action.
 
 This sample binds a declared business named `renter` in Product configuration.
-It uses fixed parties because this compiler rejects parameterized instruments
-inside a program. Changing the renter binding is a Build configuration decision,
-not a different party ID on each request. Use header party parameters bound to
-`owner` or `actor` for per-object participants. Reusable custom headers require a
-host-supplied `StandardLibrary`; `use` cannot load a local file through this CLI.
+The renter is one business for the whole Build, so the instrument takes no
+parameters. Changing the renter binding is a Build configuration decision, not a
+different party ID on each request. For per-object participants, give a program
+instrument parameters as a header would, such as `instrument purse(holder: party)`,
+and bind `holder: owner` or `holder: actor` in each `attach` block. A
+parameterized program instrument exists only through its attachments. A `fee` on
+a move of an action input, such as `moves input.amount from holder to self.held
+fee { seller: 1% }`, is calculated when that action runs. Reusable custom headers
+require a host-supplied `StandardLibrary`; `use` cannot load a local file through
+this CLI.
 
 Inspect `objects` in the compiled UDL for the attachment and public names, then
 its instrument for fields, transitions, actors, requirements and ordered moves.
@@ -104,11 +109,19 @@ executor. Compilation cannot establish balances, permissions or provider readine
 
 Every attached party parameter binds to `owner`, `actor`, `operator`, a declared
 business, or a declared staff party with a supported role. Configure declared
-business participants per Build. Declared person parties cannot bind attachments.
+business participants per Build. The host binds a declared business to an
+organization customer of this company, and that business must be a customer with
+an account before the Build that binds it is saved. It also needs an open balance
+account in this Product before it takes part in a payment. Declared person
+parties cannot bind attachments.
 `owner` is the object's resolved customer or business, `actor` is the authenticated
-caller, and `operator` is the program operator. A parameter with one of these
-names binds by name. Other party parameters use a same-named eligible declaration,
-a header default, or an explicit binding. Explicit bindings take precedence.
+caller, or the customer a Product key or member names in `onBehalfOf`, and
+`operator` is the program operator. `programOperator`, the default
+of many std party parameters, is the same company: it resolves to the Product's
+own company, and a Build binding for it is ignored. A parameter with one of these
+names binds by name. Other required party parameters use a same-named eligible
+declaration, a header default, or an explicit binding. An optional party parameter
+stays unset unless the attachment binds it. Explicit bindings take precedence.
 Unbound parameters report `subject_party_unbound`. These bindings are frozen in
 UDL `objects[].attachments[].parties`; no caller supplies party IDs at creation.
 
@@ -119,7 +132,10 @@ compiler freezes the adapter identity, digest and requirements. An unavailable
 declaration leaves a null snapshot in compiled output. Product creation and
 recomposition reject unresolved or changed declarations during Build admission.
 Execution checks the frozen declaration too; later adapter unavailability can
-block actions on an already saved Build.
+block actions on an already saved Build. A boundary adapter, such
+as `conformance_boundary`, only binds its accounts and needs no evidence. Any
+other adapter also needs a matching `requires evidence` rule on the action, or
+preview and execution refuse with `subject_adapter_unbound`.
 
 An attachment can use `rename { price: salePrice }` to separate requirements with
 different meanings. Matching names must match types and constraints. The compiler
@@ -156,6 +172,8 @@ decimal places and percentages at most two. The compiler uses integer minor unit
 and basis points. Fee and tax calculations round down. Split percentages sum to
 100%; the last declared recipient receives the rounding remainder. Finite
 schedules use positions 1 through n and put the division remainder in position 1.
+Amortizing financing is the exception: it rounds half up and puts the remainder in
+the last instalment, as a standard amortization table does.
 Tax binds `programTax`. Fees default to `programOperator`. Fine, recovery and
 residual destinations are party tunables.
 
@@ -233,6 +251,13 @@ a literal. `requires unique "order" on [self.order]` fixes an identity namespace
 `requires count of { instrument: child, reference: "parent", anchor: self.id,
 states: [pending], limit: 12 } == 12` checks a typed selection; `sum "amount" of`
 uses the same selection syntax. `invariants` accepts these requirement expressions.
+The reference is a `ref` field or a party account; `reference: "traveller",
+anchor: self.traveller` selects every record of the same traveller. `overlaps:
+{ start: departure, end: returning, from: { field: self.departure }, until: {
+field: self.returning } }` keeps rows whose own `[departure, returning)` period
+meets the range, so a stay ending on the 8th and one starting on the 8th do not
+overlap. `count of { instrument: current(), ..., overlaps: ... } <= 1` stops one
+traveller holding two trips on the same dates.
 `requires hours self.now between 8 and 20 timezone "Asia/Riyadh"` checks local hours.
 `requires evidence self.payer family registry check ownership result verified
 maxAge 1d` requires a recent completed provider check.
@@ -261,20 +286,30 @@ and a correction. No artifact is returned with diagnostics.
 
 ## Financing policies
 
-`financing.installments` keeps principal and fixed flat profit as claims from
-activation. The company chooses where funding goes and when profit becomes earned.
-All choices use accounts, calculations and moves in the same two books.
-
-| Tunable                            | Default                  | Selected behavior                                                                                                                                                                                                                                                                                                                                                                |
-| ---------------------------------- | ------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `disburse_to`                      | `funds`                  | `funds` pays down payment and principal into the hold and confirms it. `borrower` credits principal to the borrower's balance.                                                                                                                                                                                                                                                   |
-| `profit_earned`                    | `on_payment`             | `on_payment` collects unearned profit on payment. `by_schedule` moves unearned claims to earned claims at each slice's date. `at_disbursement` makes that move at activation. Cash arrives only on payment.                                                                                                                                                                      |
-| `apply`                            | `fines_profit_principal` | Visit each slice in position order; within that slice collect assessed fines by overdue date, evidenced costs, profit, then principal. `principal_profit` collects each slice in position order, principal before profit. `pro_rata` uses the slice's fixed principal:profit ratio, caps each side by its collectible balance, and assigns the remainder without stranding cash. |
-| `payoff_rebate`                    | `100%`                   | Reverse this share of unearned profit to borrower debt. Collect the remainder and all earned profit with outstanding principal.                                                                                                                                                                                                                                                  |
-| `late_charge.fines_to`             | `programOperator`        | Receive fine cash and fund its refunds.                                                                                                                                                                                                                                                                                                                                          |
-| `late_charge.costs_to`             | `programOperator`        | Receive evidenced recovery cash and fund its refunds.                                                                                                                                                                                                                                                                                                                            |
-| `collections.case.fee`             | `20%`                    | After payment succeeds, transfer this share of the payment amount from plan capital to the agency.                                                                                                                                                                                                                                                                               |
-| `lending.distribution.residual_to` | `programOperator`        | Receive the cash remainder and own the claim loss remainder after weighted distribution.                                                                                                                                                                                                                                                                                         |
+`financing.installments` keeps principal and fixed profit as claims from
+activation. The company chooses how profit is priced, where funding goes and when
+profit becomes earned. All choices use accounts, calculations and moves in the same
+two books.
+
+`pricing` has no default, so every plan states it. `amortizing` reads
+`profit_rate` as an annual rate on the declining balance: equal monthly
+instalments from standard annuity maths, interest and instalment rounded half up,
+the last instalment absorbing the rounding. 12,000 SAR at 18% over 12 months is
+11 instalments of 1,100.16 SAR and a last one of 1,100.19 SAR, 13,201.95 SAR in
+total. `flat_total` reads `profit_rate` as one charge on principal for the whole
+term, rounded down and split evenly with the remainder in position 1: murabaha and
+fixed-fee pay-later. The same 12,000 SAR at 18% `flat_total` costs 14,160 SAR.
+
+| Tunable                            | Default                  | Selected behavior                                                                                                                                                                                                                                                                                                                                                                                                                  |
+| ---------------------------------- | ------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `disburse_to`                      | `funds`                  | `funds` pays down payment and principal into the hold and confirms it. `borrower` credits principal to the borrower's balance. `seller` pays principal to the `seller` party at activation; after capital refunds every paid payment, capital's `unwind` debits it back from the seller and cancels open slices.                                                                                                                   |
+| `profit_earned`                    | `on_payment`             | `on_payment` collects unearned profit on payment. `by_schedule` moves unearned claims to earned claims at each slice's date. `at_disbursement` makes that move at activation. Cash arrives only on payment.                                                                                                                                                                                                                        |
+| `apply`                            | `fines_profit_principal` | Visit each slice in position order; within that slice collect assessed fines by overdue date, evidenced costs, profit, then principal. `principal_profit` collects each slice in position order, principal before profit. `pro_rata` uses the slice's fixed principal:profit ratio (its own principal and profit under `amortizing`), caps each side by its collectible balance, and assigns the remainder without stranding cash. |
+| `payoff_rebate`                    | `100%`                   | Reverse this share of unearned profit to borrower debt. Collect the remainder and all earned profit with outstanding principal.                                                                                                                                                                                                                                                                                                    |
+| `late_charge.fines_to`             | `programOperator`        | Receive fine cash and fund its refunds.                                                                                                                                                                                                                                                                                                                                                                                            |
+| `late_charge.costs_to`             | `programOperator`        | Receive evidenced recovery cash and fund its refunds.                                                                                                                                                                                                                                                                                                                                                                              |
+| `collections.case.fee`             | `20%`                    | After payment succeeds, transfer this share of the payment amount from plan capital to the agency.                                                                                                                                                                                                                                                                                                                                 |
+| `lending.distribution.residual_to` | `programOperator`        | Receive the cash remainder and own the claim loss remainder after weighted distribution.                                                                                                                                                                                                                                                                                                                                           |
 
 Each slice owns separate unearned and earned claim accounts. Scheduled recognition
 uses a dated child record so a partial payment cannot disable the maturity clock.
@@ -362,9 +397,9 @@ The compiler API is `compile(source)`. On success, `result.verdict` is `valid`
 and `result.artifacts` contains `document`, `costManifest` and `originMap`.
 On refusal, inspect `result.diagnostics`; no artifact is returned.
 
-`hsx headers` prints the instrument inventory from the declarations. The
+`hsx headers --json` prints the instrument inventory from the declarations. The
 [object example](../examples/library.hsx) shows authenticated role bindings.
-The [playground](../playground/index.html) compiles locally in the browser.
+The [playground](https://hyperscale0.ai/playground/) compiles locally in the browser.
 
 ## Standard-library behavior
 
@@ -372,24 +407,30 @@ Read the instrument's states, time gates and moves before promising a money
 outcome. A compiler pass does not prove that required actions are exposed,
 adapters are bound, participants have funds, or the flow can finish.
 
-| Instrument                                 | Behavior                                                                                                                                                                                                         |
-| ------------------------------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `financing.installments`                   | `share` allocates collected profit to a cash payable owned by `capital`. It does not itself pay operator income.                                                                                                 |
-| `financing.limits`                         | `per_borrower` caps outstanding principal. Both borrower and portfolio limits must be approved before disbursement; attaching them does not approve them.                                                        |
-| `lending.round`                            | The target is the linked plan's principal. Closing requires commitments and held funds to equal that amount.                                                                                                     |
-| `lending.distribution`                     | Cash distribution needs an eligible recorded settlement, `prepare_cash`, one share record per funded commitment, then `distribute_cash`. Attaching it moves nothing.                                             |
-| `insurance.cover.slice`                    | `collect` credits premium net of commission to the insurer account. The tenant retains commission. `refund` returns both portions; claims reserve insurer funds. External settlement uses the boundary protocol. |
-| `financing.installments`, `savings.circle` | Supply explicit date lists when creating agreements. A term count does not generate a monthly calendar. Savings supports at most 60 distinct member seats.                                                       |
-| `escrow.hold`                              | `fund` takes the whole price. Financing into pending escrow collects the remaining down payment and adds capital principal at disbursement; `fund` is not a down-payment checkout.                               |
-| `escrow.hold`                              | Acceptance timeout enters `disputed` without paying the seller. Delivery and return verification belong to `payee`; rebinding it also changes who receives accepted funds.                                       |
-| `financing.late_charge`                    | `fine` is a fixed money amount, not a percentage of overdue principal.                                                                                                                                           |
-| `cards.card`                               | `spend_limit` is a per-authorization ceiling, not a monthly aggregate.                                                                                                                                           |
+| Instrument                                 | Behavior                                                                                                                                                                                                                                                                                                          |
+| ------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `financing.installments`                   | `share` allocates collected profit to a cash payable owned by `capital`. It does not itself pay operator income.                                                                                                                                                                                                  |
+| `financing.limits`                         | `per_borrower` caps outstanding principal. Both borrower and portfolio limits must be approved before disbursement; attaching them does not approve them.                                                                                                                                                         |
+| `lending.round`                            | The target is the linked plan's principal. Closing requires commitments and held funds to equal that amount.                                                                                                                                                                                                      |
+| `lending.distribution`                     | Cash distribution needs an eligible recorded settlement, `prepare_cash`, one share record per funded commitment, then `distribute_cash`. Attaching it moves nothing.                                                                                                                                              |
+| `insurance.cover.slice`                    | `collect` credits premium net of commission to the insurer account. The tenant retains commission. `refund` returns both portions; claims reserve insurer funds. External settlement uses the boundary protocol.                                                                                                  |
+| `financing.installments`, `savings.circle` | Supply explicit date lists when creating agreements. A term count does not generate a monthly calendar. Savings supports at most 60 distinct member seats.                                                                                                                                                        |
+| `escrow.hold`                              | `fund` takes the whole price. Financing into pending escrow collects the remaining down payment and adds capital principal at disbursement; `fund` is not a down-payment checkout.                                                                                                                                |
+| `escrow.hold`                              | Acceptance timeout enters `disputed` without paying the seller. Delivery and return verification belong to `payee`; rebinding it also changes who receives accepted funds.                                                                                                                                        |
+| `escrow.hold`                              | `deliver_within` (default `14d`) starts at funding. After it passes without delivery, an exposed `refund_undelivered` lets the payer take the whole held price back. Nothing runs it automatically.                                                                                                               |
+| `wallet.balance`                           | `topup_fee` (default `0%`) takes a floored percentage of each top-up for the Company. At `1%`, a 100.00 top-up credits 99.00 and earns 1.00.                                                                                                                                                                      |
+| `booking.reservation`                      | The balance is payable only from `deposit_paid`, so a cancelled booking never takes it. `middle_forfeit` and `late_forfeit` default to `0%`, so every cancellation returns all held money until the author sets them. At departure the clock completes a paid booking and lapses an unpaid one on `late_forfeit`. |
+| `financing.late_charge`                    | `fine` is a fixed money amount, not a percentage of overdue principal.                                                                                                                                                                                                                                            |
+| `cards.card`                               | `spend_limit` is a per-authorization ceiling, not a monthly aggregate.                                                                                                                                                                                                                                            |
 
 A seller-owned marketplace object can declare `entryActions: [create_order]`
 when `create_order` exposes an attachment's create action with its buyer bound
 to `actor`. This admits active enrolled customers to that action. The default
 is closed. A retained buyer can read the record and run its buyer actions;
 the seller remains owner. Entry never grants access to an existing escrow.
+Without entry actions, the company runs a two-customer sale from its Product
+key: create the record with `onBehalfOf` naming the seller, then run the buyer's
+steps with `onBehalfOf` naming the buyer.
 
 `financing.limits` and `financing.portfolio_limit` declare `scope: product`.
 Create and approve the portfolio limit once per Product and the borrower limit
@@ -441,8 +482,9 @@ has no checkout collection action. The plan and escrow must agree on payer and
 price.
 
 Expose escrow `cancel` to return money credited before full funding. Plan `void`
-cancels the signed financing agreement but does not cancel its escrow. After
-funding and delivery, the default return path needs three separate aliases for
+cancels the signed financing agreement but does not cancel its escrow. Between
+funding and delivery, the payee's `refund` returns the full price. After
+delivery, the default return path needs three separate aliases for
 `dispute`, `verify_return` and `refund`. The payee supplies return evidence and
 returns the full price to the payer. `accept` pays the payee instead.
 Marketplace order fulfillment alone does not execute any of these money actions.
@@ -456,15 +498,26 @@ cost assessment is a separate record.
 
 Bind `insurance.cover.broker` to the agency that receives commission. Collection
 pays the insurer's net premium and the broker's commission as two moves. Refunds
-reverse those same portions. The default broker is the program operator.
+reverse those same portions. The default broker, `programOperator`, is the
+Product's own company and needs no binding.
 `claim.deny` accepts only `submitted`; after approval, `pay` or expiry consumes
-the reservation.
+the reservation. `claim_limit` is the sum insured, supplied per cover at creation:
+approved and paid claims on one cover never total more. `adapter` names a
+registered boundary adapter, `conformance_boundary` in sandbox. `covers` is
+optional; the attached object is already the insured thing.
 
 A booking cancellation refunds only its own held cash. Expose `cover.cancel`
 separately for eligible premium refunds before the paid period starts. Active
 and expired premium periods are excluded. A card transaction needs a captured
 authorization and its own record before refund, but no authorization-expiry wait.
 
+A booking runs two clock actions at departure. `complete` takes a `paid`
+booking and pays the held money to `operator`. `lapse` takes a booking still
+`reserved` or `deposit_paid` to `cancelled`: `operator` keeps `late_forfeit` of
+the held money and the customer gets the rest back. An unpaid balance at
+departure therefore costs the customer the same as `cancel_late`, and with the
+default `0%` it costs nothing. Nothing stays held after departure.
+
 A savings membership becomes `received` after its pot payout. Its contribution
 records become `paid` independently. Future contributions can remain pending
 after the member receives the pot; paying a contribution does not advance their
@@ -497,8 +550,9 @@ instruments stay generic. New Builds carry the purpose; existing agreements
 and postings keep their retained Build and classification.
 
 Held customer funding and its unspent return are `principal`. A release for the
-company's sale is `earning`. A payment from company cash to another participant
-is `participant_payout`. Claims, waivers, write-offs and own-account allocations
+company's sale is `earning`; its release to another participant is
+`pass_through`, because the company never owned it. A payment from company cash
+to another participant is `participant_payout`. Claims, waivers, write-offs and own-account allocations
 are `internal`; prepaid balance topups and returns are `prepaid_credit`. Tax is
 `pass_through`, excluded from earnings and costs. Unpaid claims count as neither.
 Refunds of paid profit, company charges and commission capture the original
@@ -511,16 +565,14 @@ product fees. Automatic platform fees keep their commercial classification.
 
 A move's economics block can select by a resolved party: `economics { recipient:
 recipient, company: { purpose: earning, sourceParty: payer }, participant:
-{ purpose: participant_payout, sourceParty: programOperator } }`. The compiler
+{ purpose: pass_through, sourceParty: programOperator } }`. The compiler
 chooses `company` for `operator`, `programOperator`, or a declared party with the
 `program_operator` role; it chooses `participant` for other bound parties.
 Both branches must be supplied. A branch may be `unclassified` when no purpose
 is established. Outside financing-profit and recovery recipients refund directly
-to the customer, not the company that funded the payout; those refund branches
-remain unclassified because they cannot reverse that company payout. Std
-recovery charges use this rule to avoid counting company receipts as participant
-costs. Direct customer payments to
-outside recipients are pass-through; payments from held company cash are costs.
+to the customer; those refund branches remain unclassified. Customer cash paid to
+outside recipients is pass-through, whether paid direct or released from a hold
+the customer funded as principal. Only company-owned cash paid out is a cost.
 
 Generic transfers and mixed principal/profit distributions remain unclassified
 when their structure does not establish a purpose. Adapter-owned premium and

package/examples/cards.hsx

@@ -1,6 +1,10 @@
 // A company issues expense cards to employees and reserves each supplier payment before capture.
 program team_expense_cards "Team expense cards"
 use cards
+// supplier is a business this program declares, so plan needs {"partyBindings":{"supplier":"<partyId>"}}.
+// That partyId is an organization customer's: create the Product from this source without the payment
+// and receipt attachments, add the customer with customer.create, activate its access, open its
+// customer_balance account, then compose this source with the binding.
 party supplier: business
 
 object employee "Employee card" {

package/examples/collections.hsx

@@ -2,6 +2,10 @@
 program business_collections "Small business collections"
 use collections
 use financing
+// agency is a business this program declares, so plan needs {"partyBindings":{"agency":"<partyId>"}}.
+// That partyId is an organization customer's: create the Product from this source without the recovery
+// and contact attachments, add the customer with customer.create, activate its access, open its
+// customer_balance account, then compose this source with the binding.
 party agency: business
 
 object facility "Business loan" {
@@ -12,7 +16,7 @@ object facility "Business loan" {
   attach loan = financing.installments {
     expose create as create_loan
     borrower: owner, capital: operator
-    months: 12, profit: 6%, disburse_to: borrower
+    months: 12, pricing: amortizing, profit_rate: 6%, disburse_to: borrower
     limits: allowance, portfolio: budget
     expose sign as sign_loan
     expose disburse as release_loan

package/examples/cost-table.json

@@ -4,15 +4,14 @@
     "declaredMeters": [
       "account.active_month",
       "instrument.event.count",
-      "transfer.internal.count",
-      "transfer.internal.volume_sar"
+      "transfer.internal.count"
     ],
-    "effectiveTableDigest": "2d53121d200de2cb7567113ebf5bc0ce9377e7089fd4697f4b694bd557e32063",
+    "effectiveTableDigest": "e58f5c33766a44254880f328f1f9fb886b63d510bf3dfa0f9fb529a0638d74c6",
     "fixed": {
       "activationBaseMinor": "500000",
-      "activationPerPointMinor": "100000",
+      "activationPerPointMinor": "10000",
       "monthlyBaseMinor": "100000",
-      "monthlyPerPointMinor": "20000",
+      "monthlyPerPointMinor": "2000",
       "weights": {
         "aggregate_invariant": 2,
         "flow": 1,
@@ -69,7 +68,7 @@
         "bps": 0,
         "meter": "account.active_month",
         "payer": "product",
-        "perEventMinor": "27500",
+        "perEventMinor": "500",
         "settlement": "invoice",
         "signature": "meters.account.active_month"
       },
@@ -77,18 +76,25 @@
         "bps": 0,
         "meter": "instrument.event.count",
         "payer": "product",
-        "perEventMinor": "150",
+        "perEventMinor": "25",
         "settlement": "invoice",
         "signature": "meters.instrument.event.count"
       },
       {
-        "bps": 6,
+        "bps": 0,
         "meter": "transfer.internal.count",
-        "payer": "end_customer",
-        "perEventMinor": "75",
-        "settlement": "per_event",
-        "signature": "moves.transfer.internal",
-        "volumeMeter": "transfer.internal.volume_sar"
+        "payer": "product",
+        "perEventMinor": "25",
+        "settlement": "invoice",
+        "signature": "meters.transfer.internal.count"
+      },
+      {
+        "bps": 0,
+        "meter": "instrument.event.count",
+        "payer": "product",
+        "perEventMinor": "0",
+        "settlement": "invoice",
+        "signature": "moves.transfer.internal"
       },
       {
         "bps": 0,
@@ -155,22 +161,21 @@
         "signature": "unwinds.void"
       }
     ],
-    "version": "2026-09-02.1"
+    "version": "2026-09-27.1"
   },
   {
     "currency": "USD",
     "declaredMeters": [
       "account.active_month",
       "instrument.event.count",
-      "transfer.internal.count",
-      "transfer.internal.volume_usd"
+      "transfer.internal.count"
     ],
-    "effectiveTableDigest": "44fa81226359fcafa8bd66b70c2311ee999c9bae66ff59c85ccb14d7d68126a9",
+    "effectiveTableDigest": "f2845819ad077745ed5d0af924b33f34210b20da703522e78aa2629d9be5040e",
     "fixed": {
       "activationBaseMinor": "133300",
-      "activationPerPointMinor": "26700",
+      "activationPerPointMinor": "2700",
       "monthlyBaseMinor": "26700",
-      "monthlyPerPointMinor": "5300",
+      "monthlyPerPointMinor": "500",
       "weights": {
         "aggregate_invariant": 2,
         "flow": 1,
@@ -227,7 +232,7 @@
         "bps": 0,
         "meter": "account.active_month",
         "payer": "product",
-        "perEventMinor": "7333",
+        "perEventMinor": "133",
         "settlement": "invoice",
         "signature": "meters.account.active_month"
       },
@@ -235,18 +240,25 @@
         "bps": 0,
         "meter": "instrument.event.count",
         "payer": "product",
-        "perEventMinor": "40",
+        "perEventMinor": "7",
         "settlement": "invoice",
         "signature": "meters.instrument.event.count"
       },
       {
-        "bps": 6,
+        "bps": 0,
         "meter": "transfer.internal.count",
-        "payer": "end_customer",
-        "perEventMinor": "20",
-        "settlement": "per_event",
-        "signature": "moves.transfer.internal",
-        "volumeMeter": "transfer.internal.volume_usd"
+        "payer": "product",
+        "perEventMinor": "7",
+        "settlement": "invoice",
+        "signature": "meters.transfer.internal.count"
+      },
+      {
+        "bps": 0,
+        "meter": "instrument.event.count",
+        "payer": "product",
+        "perEventMinor": "0",
+        "settlement": "invoice",
+        "signature": "moves.transfer.internal"
       },
       {
         "bps": 0,
@@ -313,22 +325,21 @@
         "signature": "unwinds.void"
       }
     ],
-    "version": "2026-09-02.1"
+    "version": "2026-09-27.1"
   },
   {
     "currency": "EUR",
     "declaredMeters": [
       "account.active_month",
       "instrument.event.count",
-      "transfer.internal.count",
-      "transfer.internal.volume_eur"
+      "transfer.internal.count"
     ],
-    "effectiveTableDigest": "613d900e38f98a6bf3934e7940ff4d06c76f1dddc695c79ee3b5ee1ad45b8636",
+    "effectiveTableDigest": "f741132e1aa38a860d855a83f20f12c0ec8a7ec5379117c407799e2012e63335",
     "fixed": {
       "activationBaseMinor": "125000",
-      "activationPerPointMinor": "25000",
+      "activationPerPointMinor": "2500",
       "monthlyBaseMinor": "25000",
-      "monthlyPerPointMinor": "5000",
+      "monthlyPerPointMinor": "500",
       "weights": {
         "aggregate_invariant": 2,
         "flow": 1,
@@ -385,7 +396,7 @@
         "bps": 0,
         "meter": "account.active_month",
         "payer": "product",
-        "perEventMinor": "6875",
+        "perEventMinor": "125",
         "settlement": "invoice",
         "signature": "meters.account.active_month"
       },
@@ -393,18 +404,25 @@
         "bps": 0,
         "meter": "instrument.event.count",
         "payer": "product",
-        "perEventMinor": "38",
+        "perEventMinor": "6",
         "settlement": "invoice",
         "signature": "meters.instrument.event.count"
       },
       {
-        "bps": 6,
+        "bps": 0,
         "meter": "transfer.internal.count",
-        "payer": "end_customer",
-        "perEventMinor": "19",
-        "settlement": "per_event",
-        "signature": "moves.transfer.internal",
-        "volumeMeter": "transfer.internal.volume_eur"
+        "payer": "product",
+        "perEventMinor": "6",
+        "settlement": "invoice",
+        "signature": "meters.transfer.internal.count"
+      },
+      {
+        "bps": 0,
+        "meter": "instrument.event.count",
+        "payer": "product",
+        "perEventMinor": "0",
+        "settlement": "invoice",
+        "signature": "moves.transfer.internal"
       },
       {
         "bps": 0,
@@ -471,22 +489,21 @@
         "signature": "unwinds.void"
       }
     ],
-    "version": "2026-09-02.1"
+    "version": "2026-09-27.1"
   },
   {
     "currency": "GBP",
     "declaredMeters": [
       "account.active_month",
       "instrument.event.count",
-      "transfer.internal.count",
-      "transfer.internal.volume_gbp"
+      "transfer.internal.count"
     ],
-    "effectiveTableDigest": "11ff399b5078ba8ba544a518d5483fced9da63da9c7b1cc2124fea1f17a5b01c",
+    "effectiveTableDigest": "12ed3fa44010e80ae20c114d7dd94f277686225c040576a8bb96d12a0fe5333a",
     "fixed": {
       "activationBaseMinor": "104200",
-      "activationPerPointMinor": "20800",
+      "activationPerPointMinor": "2100",
       "monthlyBaseMinor": "20800",
-      "monthlyPerPointMinor": "4200",
+      "monthlyPerPointMinor": "400",
       "weights": {
         "aggregate_invariant": 2,
         "flow": 1,
@@ -543,7 +560,7 @@
         "bps": 0,
         "meter": "account.active_month",
         "payer": "product",
-        "perEventMinor": "5729",
+        "perEventMinor": "104",
         "settlement": "invoice",
         "signature": "meters.account.active_month"
       },
@@ -551,18 +568,25 @@
         "bps": 0,
         "meter": "instrument.event.count",
         "payer": "product",
-        "perEventMinor": "31",
+        "perEventMinor": "5",
         "settlement": "invoice",
         "signature": "meters.instrument.event.count"
       },
       {
-        "bps": 6,
+        "bps": 0,
         "meter": "transfer.internal.count",
-        "payer": "end_customer",
-        "perEventMinor": "16",
-        "settlement": "per_event",
-        "signature": "moves.transfer.internal",
-        "volumeMeter": "transfer.internal.volume_gbp"
+        "payer": "product",
+        "perEventMinor": "5",
+        "settlement": "invoice",
+        "signature": "meters.transfer.internal.count"
+      },
+      {
+        "bps": 0,
+        "meter": "instrument.event.count",
+        "payer": "product",
+        "perEventMinor": "0",
+        "settlement": "invoice",
+        "signature": "moves.transfer.internal"
       },
       {
         "bps": 0,
@@ -629,6 +653,6 @@
         "signature": "unwinds.void"
       }
     ],
-    "version": "2026-09-02.1"
+    "version": "2026-09-27.1"
   }
 ]

package/examples/financing.hsx

@@ -18,7 +18,7 @@ object enrolment "Enrolment" {
   attach tuition = financing.installments {
     expose create as create_tuition
     borrower: owner, capital: operator
-    months: 3, profit: 0%, disburse_to: borrower
+    months: 3, pricing: flat_total, profit_rate: 0%, disburse_to: borrower
     limits: allowance, portfolio: budget
     expose sign as sign_tuition_plan
     expose disburse as fund_tuition