@nehorai/credits 1.7.0 → 2.1.0

package/dist/{types-CjLj3GW5.d.cts → types-Dzc443vy.d.cts}

@@ -122,6 +122,20 @@ interface PortableReservation {
     expiresAt: string;
     /** When reservation was committed/released - ISO 8601 or undefined */
     completedAt?: string;
+    /**
+     * Caller-supplied idempotency key (V2). Absent on legacy reservations.
+     * Unique per user; a replay with the same key returns this same reservation.
+     */
+    idempotencyKey?: string;
+    /**
+     * When the atomic reserve placed this hold - ISO 8601, or absent.
+     *
+     * Written by `reserveCreditsV2` inside the same transaction that increases
+     * `reserved`, so its presence is proof that the hold exists. `createReservation`
+     * never sets it, and the V2 transitions refuse to move a row without it.
+     * See `assertHoldPlaced` in `core/reservation-integrity.ts`.
+     */
+    holdPlacedAt?: string;
 }
 /**
  * Result of a credit check operation
@@ -165,6 +179,15 @@ interface MonthlyResetResult {
     wasReset: boolean;
     /** The user credits after the operation */
     credits: PortableUserCredits;
+    /**
+     * `true` when the repository wrote the reset's journal entry inside the same
+     * atomic step as the balance write. The service then skips its own journal
+     * call — a separate call sits outside the reset's atomicity, and if it fails
+     * after the CAS was consumed, the line is lost for good (no retry ever sees
+     * the reset again). Absent/`false` means the repository did not journal and
+     * the service falls back to the legacy non-atomic write.
+     */
+    journaled?: boolean;
 }
 /**
  * Result of subscription expiry check
@@ -178,6 +201,16 @@ interface SubscriptionExpiryResult {
     graceDaysRemaining: number;
     /** The user credits after the operation */
     credits: PortableUserCredits;
+    /**
+     * `true` when the repository wrote the downgrade's journal entry inside the
+     * same atomic step as the tier write. The service then skips its own journal
+     * call — a separate call sits outside the downgrade's atomicity, and if it
+     * fails after the tier write committed, the account is downgraded with no
+     * audit line and no retry ever fires (the row is no longer eligible).
+     * Absent/`false` means the repository did not journal and the service falls
+     * back to the legacy non-atomic write.
+     */
+    journaled?: boolean;
 }
 /**
  * Credit transaction type
@@ -229,6 +262,11 @@ interface PortableJournalEntry {
     description: string;
     /** Additional metadata */
     metadata?: Record<string, unknown>;
+    /**
+     * Deterministic key that makes this entry unique per user (V2). Absent on
+     * legacy entries; present entries cannot be written twice.
+     */
+    idempotencyKey?: string;
     /** When this entry was created - ISO 8601 */
     createdAt: string;
 }
@@ -300,7 +338,11 @@ interface WithCreditsOptions {
     operationType: CreditOperationType;
     /** AI provider (defaults to "gemini") */
     provider?: AIProviderType;
-    /** Custom cost override (use with caution) */
+    /**
+     * Custom cost override (use with caution). Must be a movable amount: only a
+     * cost of 0 in `operationCosts` makes an operation free, so a computed
+     * override that lands on 0 is refused rather than run for nothing.
+     */
     customCost?: number;
     /** Resource ID for usage logging */
     resourceId?: string;
@@ -308,4 +350,4 @@ interface WithCreditsOptions {
     resourceType?: ResourceType;
 }
 
-export { type AIProviderType as A, type BuiltinTier as B, type CreditSource as C, type DeductCreditsResult as D, type JournalReferenceType as J, type MonthlyResetResult as M, type PortableTransaction as P, type ReservationStatus as R, type SubscriptionTier as S, type TierConfig as T, type UsageHistoryEntry as U, type WithCreditsOptions as W, type CreditOperationType as a, type PortableUserCredits as b, type PortableReservation as c, type PortableUsageLog as d, type SubscriptionExpiryResult as e, type PortableJournalEntry as f, type CreditCheckResult as g, type ResourceType as h, type TransactionType as i, type UsageHistoryResponse as j, calculateAvailableCredits as k, toPortableTimestamp as l, toDate as t };
+export { type AIProviderType as A, type BuiltinTier as B, type CreditOperationType as C, type DeductCreditsResult as D, type JournalReferenceType as J, type MonthlyResetResult as M, type PortableTransaction as P, type ReservationStatus as R, type SubscriptionTier as S, type TierConfig as T, type UsageHistoryEntry as U, type WithCreditsOptions as W, type PortableReservation as a, type CreditSource as b, type PortableUserCredits as c, type PortableUsageLog as d, type SubscriptionExpiryResult as e, type PortableJournalEntry as f, type CreditCheckResult as g, type ResourceType as h, type TransactionType as i, type UsageHistoryResponse as j, calculateAvailableCredits as k, toPortableTimestamp as l, toDate as t };

package/dist/{types-CjLj3GW5.d.ts → types-Dzc443vy.d.ts}

@@ -122,6 +122,20 @@ interface PortableReservation {
     expiresAt: string;
     /** When reservation was committed/released - ISO 8601 or undefined */
     completedAt?: string;
+    /**
+     * Caller-supplied idempotency key (V2). Absent on legacy reservations.
+     * Unique per user; a replay with the same key returns this same reservation.
+     */
+    idempotencyKey?: string;
+    /**
+     * When the atomic reserve placed this hold - ISO 8601, or absent.
+     *
+     * Written by `reserveCreditsV2` inside the same transaction that increases
+     * `reserved`, so its presence is proof that the hold exists. `createReservation`
+     * never sets it, and the V2 transitions refuse to move a row without it.
+     * See `assertHoldPlaced` in `core/reservation-integrity.ts`.
+     */
+    holdPlacedAt?: string;
 }
 /**
  * Result of a credit check operation
@@ -165,6 +179,15 @@ interface MonthlyResetResult {
     wasReset: boolean;
     /** The user credits after the operation */
     credits: PortableUserCredits;
+    /**
+     * `true` when the repository wrote the reset's journal entry inside the same
+     * atomic step as the balance write. The service then skips its own journal
+     * call — a separate call sits outside the reset's atomicity, and if it fails
+     * after the CAS was consumed, the line is lost for good (no retry ever sees
+     * the reset again). Absent/`false` means the repository did not journal and
+     * the service falls back to the legacy non-atomic write.
+     */
+    journaled?: boolean;
 }
 /**
  * Result of subscription expiry check
@@ -178,6 +201,16 @@ interface SubscriptionExpiryResult {
     graceDaysRemaining: number;
     /** The user credits after the operation */
     credits: PortableUserCredits;
+    /**
+     * `true` when the repository wrote the downgrade's journal entry inside the
+     * same atomic step as the tier write. The service then skips its own journal
+     * call — a separate call sits outside the downgrade's atomicity, and if it
+     * fails after the tier write committed, the account is downgraded with no
+     * audit line and no retry ever fires (the row is no longer eligible).
+     * Absent/`false` means the repository did not journal and the service falls
+     * back to the legacy non-atomic write.
+     */
+    journaled?: boolean;
 }
 /**
  * Credit transaction type
@@ -229,6 +262,11 @@ interface PortableJournalEntry {
     description: string;
     /** Additional metadata */
     metadata?: Record<string, unknown>;
+    /**
+     * Deterministic key that makes this entry unique per user (V2). Absent on
+     * legacy entries; present entries cannot be written twice.
+     */
+    idempotencyKey?: string;
     /** When this entry was created - ISO 8601 */
     createdAt: string;
 }
@@ -300,7 +338,11 @@ interface WithCreditsOptions {
     operationType: CreditOperationType;
     /** AI provider (defaults to "gemini") */
     provider?: AIProviderType;
-    /** Custom cost override (use with caution) */
+    /**
+     * Custom cost override (use with caution). Must be a movable amount: only a
+     * cost of 0 in `operationCosts` makes an operation free, so a computed
+     * override that lands on 0 is refused rather than run for nothing.
+     */
     customCost?: number;
     /** Resource ID for usage logging */
     resourceId?: string;
@@ -308,4 +350,4 @@ interface WithCreditsOptions {
     resourceType?: ResourceType;
 }
 
-export { type AIProviderType as A, type BuiltinTier as B, type CreditSource as C, type DeductCreditsResult as D, type JournalReferenceType as J, type MonthlyResetResult as M, type PortableTransaction as P, type ReservationStatus as R, type SubscriptionTier as S, type TierConfig as T, type UsageHistoryEntry as U, type WithCreditsOptions as W, type CreditOperationType as a, type PortableUserCredits as b, type PortableReservation as c, type PortableUsageLog as d, type SubscriptionExpiryResult as e, type PortableJournalEntry as f, type CreditCheckResult as g, type ResourceType as h, type TransactionType as i, type UsageHistoryResponse as j, calculateAvailableCredits as k, toPortableTimestamp as l, toDate as t };
+export { type AIProviderType as A, type BuiltinTier as B, type CreditOperationType as C, type DeductCreditsResult as D, type JournalReferenceType as J, type MonthlyResetResult as M, type PortableTransaction as P, type ReservationStatus as R, type SubscriptionTier as S, type TierConfig as T, type UsageHistoryEntry as U, type WithCreditsOptions as W, type PortableReservation as a, type CreditSource as b, type PortableUserCredits as c, type PortableUsageLog as d, type SubscriptionExpiryResult as e, type PortableJournalEntry as f, type CreditCheckResult as g, type ResourceType as h, type TransactionType as i, type UsageHistoryResponse as j, calculateAvailableCredits as k, toPortableTimestamp as l, toDate as t };