@leaflow/sdk 0.0.0-dev.379.g796e6e7 → 0.0.0-dev.381.g84c72f5

package/dist/billing/v1/generated/schemas.zod.js

@@ -2,7 +2,7 @@
  * Generated by orval 🍺
  * Do not edit manually.
  * Leaflow Billing API
- * Products, prices, orders, subscriptions and account billing. Financial operations require an account access token and billing-account authorization. Public catalogue operations declare no security requirement.
+ * Products, prices, orders, subscriptions and account billing. Operations on a billing account require an account access token and ownership of the account. Members of a project, as each operation states, can also read the project's billing account, subscriptions and orders, complete and pay for its purchases, and, with project permissions granted in IAM, change its subscriptions (`billing:subscription.write`), change its billing account (`billing:project_assignment.write`) and read its costs (`billing:cost.read`). A member without the permission an operation needs is refused with 403 `PERMISSION_DENIED` and `meta.permission`; a caller who is not a member, with 403 `IAM_NOT_PROJECT_MEMBER`. Public catalogue operations declare no security requirement.
  * OpenAPI spec version: v1
  */
 import * as zod from "zod";
@@ -232,7 +232,7 @@ export const GetAccountBalanceParams = zod.strictObject({
     accountId: zod.int(),
 });
 /**
- * The payment gateways and methods currently accepting the account's currency, preferred gateway first. Top-ups and invoice payments must use one listed here. An empty result means online payment is unavailable for the account.
+ * The payment gateways and methods currently accepting the account's currency, preferred gateway first. Top-ups and invoice payments must use one listed here. An empty result means online payment is unavailable for the account. Open to the owner of the account and, with `project_id`, to members of a project the account is currently assigned to.
  * @summary List payment options
  */
 export const ListPaymentOptionsParams = zod.strictObject({
@@ -243,6 +243,10 @@ export const listPaymentOptionsQueryPageMax = 2147483647;
 export const listPaymentOptionsQueryPageSizeDefault = 50;
 export const listPaymentOptionsQueryPageSizeMax = 200;
 export const ListPaymentOptionsQueryParams = zod.strictObject({
+    project_id: zod
+        .uuid()
+        .optional()
+        .describe("A project currently assigned to the account, for listing as a member of the project."),
     page: zod
         .int()
         .min(1)
@@ -284,17 +288,18 @@ export const ListProjectAssignmentsQueryParams = zod.strictObject({
         .min(1)
         .max(listProjectAssignmentsQueryProjectIdsMax)
         .optional()
-        .describe("Only records of these projects. Omit for all projects and account-level records. It does not grant access to other billing accounts."),
+        .describe("Only records of these projects. Omit for all projects and account-level records of your billing accounts. Where an operation is open to project members, each project must be assigned to a billing account you own or have you as a member, and a member sees the records of the project that the owner of its current billing account sees."),
 });
 /**
- * The project's current assignment. Returns 404 when no billing account is assigned; the project cannot create resources until one is.
+ * The project's current assignment, readable by the owner of the assigned account and by members of the project. Returns 404 when no billing account is assigned; the project cannot create resources until one is.
  * @summary Get project assignment
  */
 export const GetProjectAssignmentParams = zod.strictObject({
     projectId: zod.uuid(),
 });
 /**
- * Links the project to a billing account. A project without one is linked directly. Moving it to another
+ * Links the project to a billing account you own; you need the project permission
+ * `billing:project_assignment.write`. A project without one is linked directly. Moving it to another
  * account has the same requirements as unlinking: you own both accounts, the project has no metered resources,
  * no subscriptions that have not ended and no orders in progress, and the current account has no unpaid
  * invoices. Nothing moves with the project; charges already incurred stay with the account linked when they
@@ -308,7 +313,7 @@ export const SetProjectAssignmentParams = zod.strictObject({
 });
 export const SetProjectAssignmentBody = SetProjectAssignmentRequest;
 /**
- * Ends the project's current assignment; the assignment history is kept. Allowed only when the project has no metered resources, no subscriptions that have not ended and no orders in progress, including period-end changes, and the billing account has no unpaid invoices; invoices of orders awaiting payment do not count. Orders are not modified, so wait for them to complete. Charges already incurred stay with the billing account and are invoiced as usual. The project cannot make purchases until a billing account is linked again.
+ * Ends the project's current assignment; the assignment history is kept. You need to own the account and hold the project permission `billing:project_assignment.write`. Allowed only when the project has no metered resources, no subscriptions that have not ended and no orders in progress, including period-end changes, and the billing account has no unpaid invoices; invoices of orders awaiting payment do not count. Orders are not modified, so wait for them to complete. Charges already incurred stay with the billing account and are invoiced as usual. The project cannot make purchases until a billing account is linked again.
  * @summary Unlink project billing account
  */
 export const UnlinkProjectBillingAccountParams = zod.strictObject({
@@ -338,7 +343,7 @@ export const ListTopUpsQueryParams = zod.strictObject({
     billing_account_id: zod
         .int()
         .optional()
-        .describe("Only this account of yours; all when omitted."),
+        .describe("Only this account; all of yours when omitted."),
 });
 /**
  * Creates a top-up for an account of the authenticated user and returns its payment information. The balance increases when the gateway confirms receipt. Keep the supplied ID to read the attempt after a lost response; creating it again conflicts.
@@ -390,7 +395,7 @@ export const ListPaymentMethodsQueryParams = zod.strictObject({
     billing_account_id: zod
         .int()
         .optional()
-        .describe("Only this account of yours; all when omitted."),
+        .describe("Only this account; all of yours when omitted."),
 });
 /**
  * Returns what the browser needs to open the payment gateway's card form. Nothing is charged; the method is listed once the gateway confirms it. Card numbers never reach this service.
@@ -431,6 +436,9 @@ export const DeletePaymentMethodParams = zod.strictObject({
  * `BILLING_INVOICE_NOT_PAYABLE` with `meta.reason` `fractional_amount` when the amount left for the gateway is
  * not a whole number of the currency's minor unit; such an invoice is collected from credit grants and balance
  * automatically, including right after a top-up.
+ *
+ * Open to the owner of the invoice's billing account and, for the invoice of an order of a project, to members
+ * of the project. Only the owner can pay with a saved `payment_method_id`.
  * @summary Pay an invoice
  */
 export const PayInvoiceParams = zod.strictObject({
@@ -444,7 +452,7 @@ export const PayInvoiceBody = PayInvoiceRequest;
  * Nothing is charged, reserved or created.
  *
  * Refused with the same errors as paying, except that insufficient funds are not an error here:
- * they show as a `gateway_amount` above zero.
+ * they show as a `gateway_amount` above zero. Open to the same callers as paying.
  * @summary Preview invoice payment
  */
 export const PreviewInvoicePaymentParams = zod.strictObject({
@@ -501,7 +509,7 @@ export const ListInvoicesQueryParams = zod.strictObject({
     billing_account_id: zod
         .int()
         .optional()
-        .describe("Only this account of yours; all when omitted."),
+        .describe("Only this account; all of yours when omitted."),
     status: zod
         .enum(["open", "paid", "void"])
         .optional()
@@ -514,14 +522,14 @@ export const ListInvoicesQueryParams = zod.strictObject({
     to: zod.iso.datetime({ offset: true }).optional().describe("Exclusive."),
 });
 /**
- * An issued invoice of your billing account, with its amounts, tax lines and payment state. A missing or unissued invoice returns 404; an invoice of another user's account returns 403.
+ * An issued invoice of your billing account, or the invoice of an order of a project you are a member of, with its amounts, tax lines and payment state. A missing or unissued invoice returns 404; any other invoice returns 403.
  * @summary Get invoice
  */
 export const GetInvoiceParams = zod.strictObject({
     invoiceId: zod.uuid(),
 });
 /**
- * Lines of an issued invoice of your billing account, with their service periods and projects. A missing or unissued invoice returns 404; an invoice of another user's account returns 403.
+ * Lines of an invoice readable with get-invoice, with their service periods and projects. A missing or unissued invoice returns 404; any other invoice returns 403.
  * @summary List invoice items
  */
 export const ListInvoiceItemsParams = zod.strictObject({
@@ -569,7 +577,7 @@ export const ListTransactionsQueryParams = zod.strictObject({
     billing_account_id: zod
         .int()
         .optional()
-        .describe("Only this account of yours; all when omitted."),
+        .describe("Only this account; all of yours when omitted."),
     from: zod.iso.datetime({ offset: true }).optional(),
     to: zod.iso.datetime({ offset: true }).optional().describe("Exclusive."),
 });
@@ -597,7 +605,7 @@ export const ListAccountDiscountsQueryParams = zod.strictObject({
     billing_account_id: zod
         .int()
         .optional()
-        .describe("Only this account of yours; all when omitted."),
+        .describe("Only this account; all of yours when omitted."),
 });
 /**
  * Credit grants with what remains and what each may pay for. Credit is spent before balance and cannot be withdrawn.
@@ -623,7 +631,7 @@ export const ListCreditGrantsQueryParams = zod.strictObject({
     billing_account_id: zod
         .int()
         .optional()
-        .describe("Only this account of yours; all when omitted."),
+        .describe("Only this account; all of yours when omitted."),
     status: zod.enum(["active", "depleted", "expired", "voided"]).optional(),
 });
 /**
@@ -650,7 +658,7 @@ export const ListCreditNotesQueryParams = zod.strictObject({
     billing_account_id: zod
         .int()
         .optional()
-        .describe("Only this account of yours; all when omitted."),
+        .describe("Only this account; all of yours when omitted."),
     invoice_id: zod.uuid().optional().describe("Only the notes for this invoice."),
 });
 /**
@@ -709,7 +717,7 @@ export const ListRefundsQueryParams = zod.strictObject({
     billing_account_id: zod
         .int()
         .optional()
-        .describe("Only this account of yours; all when omitted."),
+        .describe("Only this account; all of yours when omitted."),
     invoice_id: zod.uuid().optional().describe("Only the refunds of this invoice."),
     order_id: zod
         .uuid()
@@ -717,7 +725,7 @@ export const ListRefundsQueryParams = zod.strictObject({
         .describe("Refunds of this order: those of its invoice, such as for an undeliverable purchase, and those it caused on an earlier invoice, such as a downgrade difference."),
 });
 /**
- * Priced usage charges in the requested scope. Usage that had no price when it occurred is never charged later.
+ * Priced usage charges in the requested scope; members with the project permission `billing:cost.read` list a project's charges with `project_ids`. Usage that had no price when it occurred is never charged later.
  * @summary List usage charges
  */
 export const listUsageChargesQueryPageDefault = 1;
@@ -743,7 +751,7 @@ export const ListUsageChargesQueryParams = zod.strictObject({
     billing_account_id: zod
         .int()
         .optional()
-        .describe("Only this account of yours; all when omitted."),
+        .describe("Only this account; all of yours when omitted."),
     product_id: zod
         .string()
         .min(1)
@@ -763,12 +771,12 @@ export const ListUsageChargesQueryParams = zod.strictObject({
         .min(1)
         .max(listUsageChargesQueryProjectIdsMax)
         .optional()
-        .describe("Only records of these projects. Omit for all projects and account-level records. It does not grant access to other billing accounts."),
+        .describe("Only records of these projects. Omit for all projects and account-level records of your billing accounts. Where an operation is open to project members, each project must be assigned to a billing account you own or have you as a member, and a member sees the records of the project that the owner of its current billing account sees."),
     meter_id: zod.uuid().optional(),
     statement_id: zod.uuid().optional(),
 });
 /**
- * Subscriptions of the authorized billing account. Deleted subscriptions are not listed.
+ * Subscriptions paid by your billing accounts; members of a project list its subscriptions with `project_ids`. Deleted subscriptions are not listed.
  * @summary List subscriptions
  */
 export const listSubscriptionsQueryPageDefault = 1;
@@ -793,23 +801,23 @@ export const ListSubscriptionsQueryParams = zod.strictObject({
     billing_account_id: zod
         .int()
         .optional()
-        .describe("Only this account of yours; all when omitted."),
+        .describe("Only this account; all of yours when omitted."),
     project_ids: zod
         .array(zod.uuid())
         .min(1)
         .max(listSubscriptionsQueryProjectIdsMax)
         .optional()
-        .describe("Only records of these projects. Omit for all projects and account-level records. It does not grant access to other billing accounts."),
+        .describe("Only records of these projects. Omit for all projects and account-level records of your billing accounts. Where an operation is open to project members, each project must be assigned to a billing account you own or have you as a member, and a member sees the records of the project that the owner of its current billing account sees."),
 });
 /**
- * A subscription of the authorized billing account. Deleted subscriptions are reported as not found.
+ * A subscription paid by your billing account or of a project you are a member of. Deleted subscriptions are reported as not found.
  * @summary Get subscription
  */
 export const GetSubscriptionParams = zod.strictObject({
     subscriptionId: zod.uuid(),
 });
 /**
- * Hides a canceled or terminated subscription from your subscription list and detail by setting deleted_at; its status, ended_at and history are kept. The token must authorize the subscription's current billing account. A subscription that has not ended is refused with 409 `BILLING_SUBSCRIPTION_NOT_ENDED` and `status`. Repeating it keeps the original deleted_at. It sends no cleanup command and creates no refund.
+ * Hides a canceled or terminated subscription from your subscription list and detail by setting deleted_at; its status, ended_at and history are kept. Only the owner of the subscription's current billing account can delete it. A subscription that has not ended is refused with 409 `BILLING_SUBSCRIPTION_NOT_ENDED` and `status`. Repeating it keeps the original deleted_at. It sends no cleanup command and creates no refund.
  * @summary Delete subscription
  */
 export const DeleteSubscriptionParams = zod.strictObject({
@@ -817,8 +825,9 @@ export const DeleteSubscriptionParams = zod.strictObject({
 });
 /**
  * Requests cancellation on the purchase's agreed terms, with the same rules as creating a cancellation. Give the
- * refund amount from a quote with this subscription in `cancellation.subscription_ids`. The token must authorize
- * the subscription's current billing account.
+ * refund amount from a quote with this subscription in `cancellation.subscription_ids`. Open to the owner of the
+ * subscription's current billing account and to members of its project with the project permission
+ * `billing:subscription.write`.
  *
  * Immediate cancellation asks the owning service to release the resources now; period-end cancellation keeps the
  * subscription active or suspended until the paid term ends. The subscription becomes canceled when the service
@@ -832,7 +841,7 @@ export const CancelSubscriptionParams = zod.strictObject({
 });
 export const CancelSubscriptionBody = CancelSubscriptionRequest;
 /**
- * Newest first. Filter by `subscription_id` and `status=open` to find a subscription's cancellation in progress.
+ * Newest first; members of a project list its cancellations with `project_ids`. Filter by `subscription_id` and `status=open` to find a subscription's cancellation in progress.
  * @summary List cancellations
  */
 export const listCancellationsQueryPageDefault = 1;
@@ -856,7 +865,7 @@ export const ListCancellationsQueryParams = zod.strictObject({
     billing_account_id: zod
         .int()
         .optional()
-        .describe("Only this account of yours; all when omitted."),
+        .describe("Only this account; all of yours when omitted."),
     subscription_id: zod
         .uuid()
         .optional()
@@ -870,11 +879,13 @@ export const ListCancellationsQueryParams = zod.strictObject({
         .min(1)
         .max(listCancellationsQueryProjectIdsMax)
         .optional()
-        .describe("Only records of these projects. Omit for all projects and account-level records. It does not grant access to other billing accounts."),
+        .describe("Only records of these projects. Omit for all projects and account-level records of your billing accounts. Where an operation is open to project members, each project must be assigned to a billing account you own or have you as a member, and a member sees the records of the project that the owner of its current billing account sees."),
 });
 /**
  * Ends subscriptions of one service together. Deleting a resource is an `immediate` cancellation of every
- * subscription released with it, such as a server with its disks or an address with its bandwidth.
+ * subscription released with it, such as a server with its disks or an address with its bandwidth. Open to the
+ * owner of the subscriptions' current billing account and to members of their project with the project
+ * permission `billing:subscription.write`.
  *
  * The owning service releases the resources at once for `immediate`, or at `scheduled_at`, the end of the paid
  * term, for `period_end`. When release is confirmed, the unused value is returned to the original payment
@@ -907,21 +918,21 @@ export const ListCancellationsQueryParams = zod.strictObject({
  */
 export const CreateCancellationBody = CancellationCreate;
 /**
- * A cancellation of your billing account with its schedule, expected refundable amount and the outcome for each subscription, including partial success.
+ * A cancellation paid by your billing account or of a project you are a member of, with its schedule, expected refundable amount and the outcome for each subscription, including partial success.
  * @summary Get a cancellation
  */
 export const GetCancellationParams = zod.strictObject({
     cancellationId: zod.uuid(),
 });
 /**
- * Withdraws the whole cancellation while no resource has begun to be released; afterwards it is refused with 409 `BILLING_CANCELLATION_CONFLICT`. The subscriptions continue, but automatic renewal, turned off when the cancellation was created, stays off until it is turned on again. Withdrawing a withdrawn cancellation returns it unchanged.
+ * Withdraws the whole cancellation while no resource has begun to be released; afterwards it is refused with 409 `BILLING_CANCELLATION_CONFLICT`. The subscriptions continue, but automatic renewal, turned off when the cancellation was created, stays off until it is turned on again. Withdrawing a withdrawn cancellation returns it unchanged. Open to the owner of the subscriptions' current billing account and to members of their project with the project permission `billing:subscription.write`.
  * @summary Withdraw a cancellation
  */
 export const WithdrawCancellationParams = zod.strictObject({
     cancellationId: zod.uuid(),
 });
 /**
- * Lists the current renewal agreement and available intervals. The current option preserves recurring_amount; other options use current prices. Amounts cover the whole subscription quantity and exclude tax.
+ * Lists the current renewal agreement and available intervals. The current option preserves recurring_amount; other options use current prices. Amounts cover the whole subscription quantity and exclude tax. Open to the owner of the subscription's current billing account and to members of its project.
  * @summary List the terms this item can be renewed for
  */
 export const ListRenewalPricesParams = zod.strictObject({
@@ -954,6 +965,9 @@ export const ListRenewalPricesQueryParams = zod.strictObject({
  * `use_balance` allow; when they cannot cover it, the request fails with `BILLING_INSUFFICIENT_FUNDS` and no
  * order is left. To apply a promotion code or pay later, create a renewal Checkout Session.
  *
+ * Open to the owner of the subscription's current billing account and to members of its project with the
+ * project permission `billing:subscription.write`. Only the owner can pay with `payment_method_id`.
+ *
  * Keep order_id and read the order after an unknown outcome; creating it again conflicts.
  * @summary Renew subscription
  */
@@ -962,7 +976,7 @@ export const RenewSubscriptionParams = zod.strictObject({
 });
 export const RenewSubscriptionBody = RenewRequest;
 /**
- * Turns automatic renewal of an active or suspended licensed subscription on or off. Turning it off does not shorten current_term_end and still allows manual renewal. Refused with 409 `BILLING_SUBSCRIPTION_AUTO_RENEW_INACTIVE` for a pending or provisioning subscription, 409 `BILLING_SUBSCRIPTION_AUTO_RENEW_FIXED` for a metered subscription, which continues until it is canceled, and 409 `BILLING_SUBSCRIPTION_OPERATION_PENDING` with `meta.cancellation_id` while a cancellation is open: creating it turned renewal off, and withdrawing it does not turn renewal back on.
+ * Turns automatic renewal of an active or suspended licensed subscription on or off. Turning it off does not shorten current_term_end and still allows manual renewal. Refused with 409 `BILLING_SUBSCRIPTION_AUTO_RENEW_INACTIVE` for a pending or provisioning subscription, 409 `BILLING_SUBSCRIPTION_AUTO_RENEW_FIXED` for a metered subscription, which continues until it is canceled, and 409 `BILLING_SUBSCRIPTION_OPERATION_PENDING` with `meta.cancellation_id` while a cancellation is open: creating it turned renewal off, and withdrawing it does not turn renewal back on. Open to the owner of the subscription's current billing account and to members of its project with the project permission `billing:subscription.write`.
  * @summary Set auto renew
  */
 export const SetAutoRenewParams = zod.strictObject({
@@ -970,7 +984,7 @@ export const SetAutoRenewParams = zod.strictObject({
 });
 export const SetAutoRenewBody = AutoRenewSet;
 /**
- * Remaining usage quantities, such as bytes, seconds or tokens. Applicable allowances are consumed before usage is charged: lower priority values first, then earlier expiry, then earlier issuance. Unused quantity expires without refund or carry-over. Promotional allowances apply to usage paid by their holding account; included allowances apply only to their subscription, also after its project moves to another billing account.
+ * Remaining usage quantities, such as bytes, seconds or tokens; members of a project list its allowances with `project_ids`. Applicable allowances are consumed before usage is charged: lower priority values first, then earlier expiry, then earlier issuance. Unused quantity expires without refund or carry-over. Promotional allowances apply to usage paid by their holding account; included allowances apply only to their subscription, also after its project moves to another billing account.
  * @summary List allowances
  */
 export const listAllowancesQueryPageDefault = 1;
@@ -996,7 +1010,7 @@ export const ListAllowancesQueryParams = zod.strictObject({
     billing_account_id: zod
         .int()
         .optional()
-        .describe("Only this account of yours; all when omitted."),
+        .describe("Only this account; all of yours when omitted."),
     meter_id: zod.uuid().optional().describe("Filter by the meter UUID."),
     status: zod.enum(["active", "depleted", "expired", "voided"]).optional(),
     product_id: zod
@@ -1011,10 +1025,10 @@ export const ListAllowancesQueryParams = zod.strictObject({
         .min(1)
         .max(listAllowancesQueryProjectIdsMax)
         .optional()
-        .describe("Only records of these projects. Omit for all projects and account-level records. It does not grant access to other billing accounts."),
+        .describe("Only records of these projects. Omit for all projects and account-level records of your billing accounts. Where an operation is open to project members, each project must be assigned to a billing account you own or have you as a member, and a member sees the records of the project that the owner of its current billing account sees."),
 });
 /**
- * Checkout Sessions of your billing accounts, newest first. An open session is a purchase waiting for you to complete checkout.
+ * Checkout Sessions of your billing accounts, newest first; members of a project list its sessions with `project_ids`. An open session is a purchase waiting for checkout to be completed.
  * @summary List Checkout Sessions
  */
 export const listCheckoutSessionsQueryPageDefault = 1;
@@ -1038,7 +1052,7 @@ export const ListCheckoutSessionsQueryParams = zod.strictObject({
     billing_account_id: zod
         .int()
         .optional()
-        .describe("Only this account of yours; all when omitted."),
+        .describe("Only this account; all of yours when omitted."),
     status: zod
         .enum(["open", "complete", "expired"])
         .optional()
@@ -1048,28 +1062,30 @@ export const ListCheckoutSessionsQueryParams = zod.strictObject({
         .min(1)
         .max(listCheckoutSessionsQueryProjectIdsMax)
         .optional()
-        .describe("Only records of these projects. Omit for all projects and account-level records. It does not grant access to other billing accounts."),
+        .describe("Only records of these projects. Omit for all projects and account-level records of your billing accounts. Where an operation is open to project members, each project must be assigned to a billing account you own or have you as a member, and a member sees the records of the project that the owner of its current billing account sees."),
 });
 /**
- * Opens a Checkout Session renewing one of your licensed subscriptions, with periods and price chosen as in
+ * Opens a Checkout Session renewing a licensed subscription, with periods and price chosen as in
  * renewing. Nothing is charged until you complete it, when a promotion code can be applied; it then renews from
  * the subscription's current_term_end at that time. To renew at once from credit grants, balance or a payment
  * method, renew the subscription instead. Purchases and changes of a service's resources are created through
  * that service.
  *
- * Keep `checkout_session_id` and read the session after an unknown outcome; creating it again conflicts.
+ * Open to the owner of the subscription's current billing account and to members of its project with the
+ * project permission `billing:subscription.write`. Keep `checkout_session_id` and read the session after an
+ * unknown outcome; creating it again conflicts.
  * @summary Create a renewal Checkout Session
  */
 export const CreateCheckoutSessionBody = CheckoutSessionCreate;
 /**
- * A Checkout Session of your billing account. Poll it to follow checkout; once it is complete, read its order for payment and delivery. An unknown session returns 404; another account's session returns 403.
+ * A Checkout Session of your billing account or of a project you are a member of. Poll it to follow checkout; once it is complete, read its order for payment and delivery. An unknown session returns 404; any other session returns 403.
  * @summary Get a Checkout Session
  */
 export const GetCheckoutSessionParams = zod.strictObject({
     checkoutSessionId: zod.uuid(),
 });
 /**
- * What the session buys, by position. Prices and amounts are in its quote.
+ * What the session buys, by position. Prices and amounts are in its quote. Readable by whoever can read the session.
  * @summary List Checkout Session items
  */
 export const ListCheckoutSessionItemsParams = zod.strictObject({
@@ -1102,6 +1118,8 @@ export const ListCheckoutSessionItemsQueryParams = zod.strictObject({
  * immediate change, the returned `proration_date`. An expired session is refused with
  * `BILLING_CHECKOUT_SESSION_EXPIRED`, and a complete one with `BILLING_CHECKOUT_SESSION_COMPLETE`; read its order
  * instead.
+ *
+ * Open to the owner of the session's billing account and to members of its project.
  * @summary Quote a Checkout Session
  */
 export const GetCheckoutSessionQuoteParams = zod.strictObject({
@@ -1121,6 +1139,8 @@ export const GetCheckoutSessionQuoteQueryParams = zod.strictObject({
  * Confirming a complete session again with the same terms returns it with its order; different terms are refused
  * with `BILLING_CHECKOUT_SESSION_COMPLETE`. An expired session is refused with `BILLING_CHECKOUT_SESSION_EXPIRED`.
  * The order is delivered by the service that owns it once paid; confirmation alone does not mean delivery.
+ *
+ * Open to the owner of the session's billing account and to members of its project.
  * @summary Confirm a Checkout Session
  */
 export const ConfirmCheckoutSessionParams = zod.strictObject({
@@ -1128,14 +1148,14 @@ export const ConfirmCheckoutSessionParams = zod.strictObject({
 });
 export const ConfirmCheckoutSessionBody = CheckoutSessionConfirm;
 /**
- * Ends an open session without an order; the service that created it releases what it was holding for the purchase. An expired session is returned unchanged.
+ * Ends an open session without an order; the service that created it releases what it was holding for the purchase. An expired session is returned unchanged. Open to the owner of the session's billing account and to members of its project.
  * @summary Expire a Checkout Session
  */
 export const ExpireCheckoutSessionParams = zod.strictObject({
     checkoutSessionId: zod.uuid(),
 });
 /**
- * Orders with their status and invoice amounts. A pending order is not yet accepted and can expire at expires_at; its invoice shows whether payment is needed. Accepted does not mean delivered.
+ * Orders of your billing accounts with their status and invoice amounts; members of a project list its orders with `project_ids`. A pending order is not yet accepted and can expire at expires_at; its invoice shows whether payment is needed. Accepted does not mean delivered.
  * @summary List orders
  */
 export const listOrdersQueryPageDefault = 1;
@@ -1159,7 +1179,7 @@ export const ListOrdersQueryParams = zod.strictObject({
     billing_account_id: zod
         .int()
         .optional()
-        .describe("Only this account of yours; all when omitted."),
+        .describe("Only this account; all of yours when omitted."),
     status: zod
         .enum(["pending", "accepted", "completed", "partially_completed", "failed", "canceled"])
         .optional()
@@ -1171,17 +1191,17 @@ export const ListOrdersQueryParams = zod.strictObject({
         .min(1)
         .max(listOrdersQueryProjectIdsMax)
         .optional()
-        .describe("Only records of these projects. Omit for all projects and account-level records. It does not grant access to other billing accounts."),
+        .describe("Only records of these projects. Omit for all projects and account-level records of your billing accounts. Where an operation is open to project members, each project must be assigned to a billing account you own or have you as a member, and a member sees the records of the project that the owner of its current billing account sees."),
 });
 /**
- * An order of your billing account with its status and invoice. An unknown order returns 404; another user's order returns 403.
+ * An order of your billing account or of a project you are a member of, with its status and invoice. An unknown order returns 404; any other order returns 403.
  * @summary Get order
  */
 export const GetOrderParams = zod.strictObject({
     orderId: zod.uuid(),
 });
 /**
- * What canceling the listed items, or the whole order, would refund to the original payment sources. Nothing is canceled or refunded.
+ * What canceling the listed items, or the whole order, would refund to the original payment sources. Nothing is canceled or refunded. Open to the owner of the order's billing account and to members of its project.
  * @summary Preview an order refund
  */
 export const PreviewOrderRefundParams = zod.strictObject({
@@ -1208,7 +1228,7 @@ export const PreviewOrderRefundQueryParams = zod.strictObject({
  * `BILLING_PAYMENT_PENDING` and `meta.transaction_id`. Repeating the cancellation does not refund twice.
  *
  * An accepted order is canceled by its owning service, and delivered items through subscription cancellation.
- * Refunds are previewed with `preview-order-refund`.
+ * Refunds are previewed with `preview-order-refund`. Open to the owner of the order's billing account and to members of its project.
  * @summary Cancel order
  */
 export const CancelOrderParams = zod.strictObject({
@@ -1216,7 +1236,7 @@ export const CancelOrderParams = zod.strictObject({
 });
 export const CancelOrderBody = OrderCancel;
 /**
- * One entry per item bought, with the price charged and the period it covers.
+ * One entry per item bought, with the price charged and the period it covers. Readable by whoever can read the order.
  * @summary List order items
  */
 export const ListOrderItemsParams = zod.strictObject({
@@ -1241,7 +1261,7 @@ export const ListOrderItemsQueryParams = zod.strictObject({
         .describe("Items per page. Defaults to 50; at most 200."),
 });
 /**
- * Capabilities granted by live subscriptions and active feature grants. A capability not held is not listed, and one stops being listed when the subscription or grant providing it ends.
+ * Capabilities granted by live subscriptions and active feature grants; members of a project list its entitlements with `project_ids`. A capability not held is not listed, and one stops being listed when the subscription or grant providing it ends.
  * @summary List entitlements
  */
 export const listEntitlementsQueryPageDefault = 1;
@@ -1267,13 +1287,13 @@ export const ListEntitlementsQueryParams = zod.strictObject({
     billing_account_id: zod
         .int()
         .optional()
-        .describe("Only this account of yours; all when omitted."),
+        .describe("Only this account; all of yours when omitted."),
     project_ids: zod
         .array(zod.uuid())
         .min(1)
         .max(listEntitlementsQueryProjectIdsMax)
         .optional()
-        .describe("Only records of these projects. Omit for all projects and account-level records. It does not grant access to other billing accounts."),
+        .describe("Only records of these projects. Omit for all projects and account-level records of your billing accounts. Where an operation is open to project members, each project must be assigned to a billing account you own or have you as a member, and a member sees the records of the project that the owner of its current billing account sees."),
     product_id: zod
         .string()
         .min(1)
@@ -1308,7 +1328,7 @@ export const ListFeatureGrantsQueryParams = zod.strictObject({
     billing_account_id: zod
         .int()
         .optional()
-        .describe("Only this account of yours; all when omitted."),
+        .describe("Only this account; all of yours when omitted."),
     product_id: zod
         .string()
         .min(1)
@@ -1546,7 +1566,7 @@ export const ListRatesHeader = zod.strictObject({
         .describe("The `ETag` of an earlier response. When the catalogue has not changed since, the response is `304` with no body."),
 });
 /**
- * Continuous metering registrations paid for by your billing accounts. Their state does not describe the resource's runtime. Project filters only narrow the result.
+ * Continuous metering registrations paid for by your billing accounts; members of a project list its registrations with `project_ids`. Their state does not describe the resource's runtime.
  * @summary List active resources
  */
 export const listActiveResourcesQueryPageDefault = 1;
@@ -1573,13 +1593,13 @@ export const ListActiveResourcesQueryParams = zod.strictObject({
     billing_account_id: zod
         .int()
         .optional()
-        .describe("Only this account of yours; all when omitted."),
+        .describe("Only this account; all of yours when omitted."),
     project_ids: zod
         .array(zod.uuid())
         .min(1)
         .max(listActiveResourcesQueryProjectIdsMax)
         .optional()
-        .describe("Only records of these projects. Omit for all projects and account-level records. It does not grant access to other billing accounts."),
+        .describe("Only records of these projects. Omit for all projects and account-level records of your billing accounts. Where an operation is open to project members, each project must be assigned to a billing account you own or have you as a member, and a member sees the records of the project that the owner of its current billing account sees."),
     meter_id: zod.uuid().optional(),
     product_id: zod
         .string()
@@ -1596,6 +1616,9 @@ export const ListActiveResourcesQueryParams = zod.strictObject({
  * closing are included. `from` and `to` must fall on UTC day boundaries and span at most 92 days.
  * Project filters use the account recorded on each charge, including charges for projects later
  * assigned to another account. The total covers all matching groups, not just the returned page.
+ *
+ * Open to the owner of the account and to members with the project permission `billing:cost.read` of each
+ * project in `project_ids`, which must then be given and currently assigned to the account.
  * @summary List account spend
  */
 export const listSpendQueryGroupByDefault = `product`;
@@ -1642,7 +1665,7 @@ export const ListSpendQueryParams = zod.strictObject({
         .min(1)
         .max(listSpendQueryProjectIdsMax)
         .optional()
-        .describe("Only records of these projects. Omit for all projects and account-level records. It does not grant access to other billing accounts."),
+        .describe("Only records of these projects. Omit for all projects and account-level records of your billing accounts. Where an operation is open to project members, each project must be assigned to a billing account you own or have you as a member, and a member sees the records of the project that the owner of its current billing account sees."),
 });
 /**
  * Usage billing per UTC calendar month for your billing accounts, newest first. Each month combines its statements, the invoices they issued and how those were paid.
@@ -1703,7 +1726,7 @@ export const GetStatementParams = zod.strictObject({
     statementId: zod.uuid(),
 });
 /**
- * The statement's consumption, grouped by project, product or meter and filtered within the statement. Quantities are given only for meter groups; grouping by meter also splits by the meter's presentation dimensions.
+ * The statement's consumption, grouped by project, product or meter and filtered within the statement. Quantities are given only for meter groups; grouping by meter also splits by the meter's presentation dimensions. Open to the owner of the statement's account and to members with the project permission `billing:cost.read` of each project in `project_ids`, which must then be given and currently assigned to that account.
  * @summary Get grouped consumption
  */
 export const GetStatementUsageParams = zod.strictObject({

package/dist/billing/v1/generated/validators/accountBalance.zod.d.ts

@@ -2,7 +2,7 @@
  * Generated by orval 🍺
  * Do not edit manually.
  * Leaflow Billing API
- * Products, prices, orders, subscriptions and account billing. Financial operations require an account access token and billing-account authorization. Public catalogue operations declare no security requirement.
+ * Products, prices, orders, subscriptions and account billing. Operations on a billing account require an account access token and ownership of the account. Members of a project, as each operation states, can also read the project's billing account, subscriptions and orders, complete and pay for its purchases, and, with project permissions granted in IAM, change its subscriptions (`billing:subscription.write`), change its billing account (`billing:project_assignment.write`) and read its costs (`billing:cost.read`). A member without the permission an operation needs is refused with 403 `PERMISSION_DENIED` and `meta.permission`; a caller who is not a member, with 403 `IAM_NOT_PROJECT_MEMBER`. Public catalogue operations declare no security requirement.
  * OpenAPI spec version: v1
  */
 import * as zod from "zod";

package/dist/billing/v1/generated/validators/accountBalance.zod.js

@@ -2,7 +2,7 @@
  * Generated by orval 🍺
  * Do not edit manually.
  * Leaflow Billing API
- * Products, prices, orders, subscriptions and account billing. Financial operations require an account access token and billing-account authorization. Public catalogue operations declare no security requirement.
+ * Products, prices, orders, subscriptions and account billing. Operations on a billing account require an account access token and ownership of the account. Members of a project, as each operation states, can also read the project's billing account, subscriptions and orders, complete and pay for its purchases, and, with project permissions granted in IAM, change its subscriptions (`billing:subscription.write`), change its billing account (`billing:project_assignment.write`) and read its costs (`billing:cost.read`). A member without the permission an operation needs is refused with 403 `PERMISSION_DENIED` and `meta.permission`; a caller who is not a member, with 403 `IAM_NOT_PROJECT_MEMBER`. Public catalogue operations declare no security requirement.
  * OpenAPI spec version: v1
  */
 import * as zod from "zod";

package/dist/billing/v1/generated/validators/accountDeletionObjection.zod.d.ts

@@ -2,7 +2,7 @@
  * Generated by orval 🍺
  * Do not edit manually.
  * Leaflow Billing API
- * Products, prices, orders, subscriptions and account billing. Financial operations require an account access token and billing-account authorization. Public catalogue operations declare no security requirement.
+ * Products, prices, orders, subscriptions and account billing. Operations on a billing account require an account access token and ownership of the account. Members of a project, as each operation states, can also read the project's billing account, subscriptions and orders, complete and pay for its purchases, and, with project permissions granted in IAM, change its subscriptions (`billing:subscription.write`), change its billing account (`billing:project_assignment.write`) and read its costs (`billing:cost.read`). A member without the permission an operation needs is refused with 403 `PERMISSION_DENIED` and `meta.permission`; a caller who is not a member, with 403 `IAM_NOT_PROJECT_MEMBER`. Public catalogue operations declare no security requirement.
  * OpenAPI spec version: v1
  */
 import * as zod from "zod";

package/dist/billing/v1/generated/validators/accountDeletionObjection.zod.js

@@ -2,7 +2,7 @@
  * Generated by orval 🍺
  * Do not edit manually.
  * Leaflow Billing API
- * Products, prices, orders, subscriptions and account billing. Financial operations require an account access token and billing-account authorization. Public catalogue operations declare no security requirement.
+ * Products, prices, orders, subscriptions and account billing. Operations on a billing account require an account access token and ownership of the account. Members of a project, as each operation states, can also read the project's billing account, subscriptions and orders, complete and pay for its purchases, and, with project permissions granted in IAM, change its subscriptions (`billing:subscription.write`), change its billing account (`billing:project_assignment.write`) and read its costs (`billing:cost.read`). A member without the permission an operation needs is refused with 403 `PERMISSION_DENIED` and `meta.permission`; a caller who is not a member, with 403 `IAM_NOT_PROJECT_MEMBER`. Public catalogue operations declare no security requirement.
  * OpenAPI spec version: v1
  */
 import * as zod from "zod";

package/dist/billing/v1/generated/validators/accountDeletionReadiness.zod.d.ts

@@ -2,7 +2,7 @@
  * Generated by orval 🍺
  * Do not edit manually.
  * Leaflow Billing API
- * Products, prices, orders, subscriptions and account billing. Financial operations require an account access token and billing-account authorization. Public catalogue operations declare no security requirement.
+ * Products, prices, orders, subscriptions and account billing. Operations on a billing account require an account access token and ownership of the account. Members of a project, as each operation states, can also read the project's billing account, subscriptions and orders, complete and pay for its purchases, and, with project permissions granted in IAM, change its subscriptions (`billing:subscription.write`), change its billing account (`billing:project_assignment.write`) and read its costs (`billing:cost.read`). A member without the permission an operation needs is refused with 403 `PERMISSION_DENIED` and `meta.permission`; a caller who is not a member, with 403 `IAM_NOT_PROJECT_MEMBER`. Public catalogue operations declare no security requirement.
  * OpenAPI spec version: v1
  */
 import * as zod from "zod";

package/dist/billing/v1/generated/validators/accountDeletionReadiness.zod.js

@@ -2,7 +2,7 @@
  * Generated by orval 🍺
  * Do not edit manually.
  * Leaflow Billing API
- * Products, prices, orders, subscriptions and account billing. Financial operations require an account access token and billing-account authorization. Public catalogue operations declare no security requirement.
+ * Products, prices, orders, subscriptions and account billing. Operations on a billing account require an account access token and ownership of the account. Members of a project, as each operation states, can also read the project's billing account, subscriptions and orders, complete and pay for its purchases, and, with project permissions granted in IAM, change its subscriptions (`billing:subscription.write`), change its billing account (`billing:project_assignment.write`) and read its costs (`billing:cost.read`). A member without the permission an operation needs is refused with 403 `PERMISSION_DENIED` and `meta.permission`; a caller who is not a member, with 403 `IAM_NOT_PROJECT_MEMBER`. Public catalogue operations declare no security requirement.
  * OpenAPI spec version: v1
  */
 import * as zod from "zod";