@oxyhq/contracts 0.26.0 → 0.28.0

package/dist/cjs/accountGraph.js

@@ -22,9 +22,10 @@ const zod_1 = require("zod");
  * `db/schema/users.ts` mirrors to keep the `users_kind_check` CHECK honest.
  *
  * Deriving the union from the array instead would cost nothing here and be paid
- * by consumers: `kind` travels into `@oxyhq/services` through
- * `SwitchableAccount`, where an indexed-access type is materially more
- * expensive to check than a literal union.
+ * by consumers: `kind` travels into `@oxyhq/services` on every device-directory
+ * context (`deviceContextSchema.kind` → `DeviceContext` → the switcher rows),
+ * and an indexed-access type is materially more expensive to check there than a
+ * literal union.
  */
 exports.ACCOUNT_KINDS = [
     'personal',

package/dist/cjs/index.js

@@ -16,7 +16,9 @@ exports.reputationBalanceBreakdownSchema = exports.reputationTransactionSchema =
 exports.reverseModerationEffectSchema = exports.finalizeModerationDecisionSchema = exports.moderationDecisionEventSchema = exports.moderationPolicyVersionsSchema = exports.moderationDecisionEventSubjectSchema = exports.moderationFindingSchema = exports.applicationModerationStandingSchema = exports.identityBindingStatusSchema = exports.identityBindingTypeSchema = exports.personhoodStatusSchema = exports.contributionTierSchema = exports.conductStandingSchema = exports.conductStrikeStatusSchema = exports.moderationEffectSkipReasonSchema = exports.moderationEffectStatusSchema = exports.moderationEffectTypeSchema = exports.moderationDecisionStatusSchema = exports.moderationAttributionSchema = exports.moderationFindingScopeSchema = exports.moderationSeveritySchema = exports.APPLICATION_MODERATION_STANDINGS = exports.IDENTITY_BINDING_STATUSES = exports.IDENTITY_BINDING_TYPES = exports.PERSONHOOD_STATUSES = exports.CONTRIBUTION_TIERS = exports.CONDUCT_STANDINGS = exports.CONDUCT_STRIKE_STATUSES = exports.MODERATION_EFFECT_SKIP_REASONS = exports.MODERATION_EFFECT_STATUSES = exports.MODERATION_EFFECT_TYPES = exports.MODERATION_DECISION_STATUSES = exports.MODERATION_ATTRIBUTIONS = exports.MODERATION_FINDING_SCOPES = exports.MODERATION_SEVERITIES = exports.isFullReputationBalance = exports.reverseReputationTransactionSchema = exports.upsertReputationRuleSchema = exports.resolveReputationDisputeSchema = exports.createReputationDisputeSchema = exports.awardReputationSchema = exports.reverseReputationTransactionResultSchema = exports.reputationInfluenceResultSchema = exports.reputationLeaderboardEntrySchema = exports.reputationLeaderboardUserSchema = exports.reputationRuleSchema = exports.reputationDisputeSchema = exports.reputationBalanceSchema = exports.reputationBalanceSummarySchema = exports.reputationReliabilitySchema = exports.reputationInfluenceSchema = void 0;
 exports.hubActivateRequestSchema = exports.hubClaimRequestSchema = exports.hubSessionSchema = exports.browserHubRevokeResponseSchema = exports.browserHubErrorSchema = exports.browserHubResolveResponseSchema = exports.browserHubHandleResponseSchema = exports.browserHubHandleRequestSchema = exports.browserHubHandleSchema = exports.BROWSER_HUB_HANDLE_TTL_MS = exports.BROWSER_HUB_COOKIE_ATTRIBUTES = exports.BROWSER_HUB_COOKIE_NAME = exports.oauthAuthorizeCodeResponseSchema = exports.oauthConsentDecisionSchema = exports.deviceDirectorySyncSchema = exports.deviceActivateResponseSchema = exports.deviceActivateRequestSchema = exports.deviceDirectorySchema = exports.devicePrincipalSchema = exports.deviceAccountContextSchema = exports.deviceDirectoryProfileSchema = exports.deviceContextRelationshipSchema = exports.sessionAccountsChangedEventSchema = exports.sessionAccountsChangedReasonSchema = exports.SESSION_ACCOUNTS_CHANGED_EVENT = exports.deviceBackgroundTokenResponseSchema = exports.deviceBackgroundTokenRequestSchema = exports.deviceBackgroundCredentialResponseSchema = exports.deviceTokenMintResponseSchema = exports.deviceTokenMintRequestSchema = exports.deviceSessionSyncSchema = exports.activeTokenSchema = exports.deviceSessionStateSchema = exports.sessionAccountSchema = exports.linkPreviewResponseSchema = exports.linkPreviewBatchResponseSchema = exports.linkPreviewBatchRequestSchema = exports.linkPreviewSchema = exports.applicationModerationTrustSchema = exports.reputationContextualInfluenceSchema = exports.reputationReviewingSchema = exports.reputationReportingSchema = exports.reputationConductSchema = exports.reputationContributionSchema = exports.reputationPersonhoodSchema = exports.identityBindingSchema = exports.registerIdentityBindingSchema = exports.reverseModerationEffectResultSchema = exports.applyModerationDecisionResultSchema = exports.moderationEffectSchema = void 0;
 exports.transparencyCheckpointSchema = exports.transparencyAnchorSchema = exports.transparencyCheckpointSignatureSchema = exports.deviceTransferDenyResponseSchema = exports.deviceTransferApproveResponseSchema = exports.deviceTransferApproveRequestSchema = exports.deviceTransferInfoResponseSchema = exports.deviceTransferInitResponseSchema = exports.deviceTransferInitRequestSchema = exports.devicePairingStatusSchema = exports.webauthnLoginVerifyRequestSchema = exports.webauthnRegisterVerifyRequestSchema = exports.webauthnLoginOptionsRequestSchema = exports.webauthnRegisterOptionsRequestSchema = exports.updateRolloutPatchSchema = exports.promoteRequestSchema = exports.rollbackToEmbeddedRequestSchema = exports.rollbackRequestSchema = exports.updateListResponseSchema = exports.channelListResponseSchema = exports.channelSchema = exports.rollbackToEmbeddedEntrySchema = exports.createUpdateResponseSchema = exports.updateSchema = exports.createUpdateRequestSchema = exports.updateAssetRefSchema = exports.assetCompleteResponseSchema = exports.assetCompleteResultItemSchema = exports.assetCompleteRequestSchema = exports.assetInitResponseSchema = exports.assetUploadTicketSchema = exports.assetInitRequestSchema = exports.assetInitItemSchema = exports.rolloutPercentSchema = exports.runtimeVersionSchema = exports.channelNameSchema = exports.sha256HexSchema = exports.updateAssetStatusSchema = exports.updateStatusSchema = exports.updatePlatformSchema = exports.backupStatusResponseSchema = exports.backupUploadRequestSchema = exports.encryptedBackupEnvelopeSchema = exports.backupLookupIdSchema = exports.rotateKeyCompleteResponseSchema = exports.rotateKeyCompleteRequestSchema = exports.rotateKeyChallengeResponseSchema = exports.loginResultSchema = exports.hubAuthorizeResultSchema = exports.hubAuthorizeRequestSchema = void 0;
-exports.transparencyCheckpointListSchema = exports.transparencyInclusionProofSchema = void 0;
+exports.inferenceModalitySchema = exports.priceSnapshotSchema = exports.priceVersionSchema = exports.priceVersionStatusSchema = exports.inferenceErrorSchema = exports.providerErrorPassthroughSchema = exports.safeErrorTextSchema = exports.upstreamErrorCategorySchema = exports.inferenceErrorCodeSchema = exports.NON_RETRYABLE_INFERENCE_ERROR_CODES = exports.INFERENCE_ERROR_CODES = exports.inferenceAttributionSchema = exports.authenticatedPrincipalSchema = exports.billingPrincipalSchema = exports.inferenceScopeSchema = exports.INFERENCE_SCOPES = exports.unitPriceSchema = exports.usageQuantitySchema = exports.usageSourceSchema = exports.USAGE_SOURCES = exports.usageUnitSchema = exports.USAGE_UNITS = exports.moneySchema = exports.exactDecimalSchema = exports.INFERENCE_MONEY_SCALE = exports.currencyCodeSchema = exports.RESERVED_ALIA_PUBLISHER = exports.inferenceRegionSchema = exports.deploymentIdSchema = exports.inferenceProviderSlugSchema = exports.routingProfileSlugSchema = exports.modelReferenceSchema = exports.modelRevisionLabelSchema = exports.modelIdSchema = exports.modelSlugSchema = exports.publisherSlugSchema = exports.inferenceHttpsUrlSchema = exports.inferenceDateSchema = exports.inferenceTimestampSchema = exports.inferenceEnvironmentSchema = exports.idempotencyKeySchema = exports.generationIdSchema = exports.requestIdSchema = exports.oxyCredentialIdSchema = exports.oxyApplicationIdSchema = exports.delegatedUserIdSchema = exports.oxyAccountIdSchema = exports.INFERENCE_CONTRACT_VERSION = exports.transparencyCheckpointListSchema = exports.transparencyInclusionProofSchema = void 0;
+exports.usageReservationSchema = exports.usageReservationStatusSchema = exports.usageReservationRequestSchema = exports.inferenceStreamEventSchema = exports.inferenceStreamDoneEventSchema = exports.inferenceFinishReasonSchema = exports.inferenceStreamErrorEventSchema = exports.inferenceStreamRouteSwitchEventSchema = exports.inferenceRouteSwitchReasonSchema = exports.inferenceRouteSwitchDetailSchema = exports.inferenceStreamUsageEventSchema = exports.inferenceStreamToolCallEventSchema = exports.inferenceStreamDeltaEventSchema = exports.inferenceStreamStartEventSchema = exports.inferenceRequestSchema = exports.clientRequestMetadataSchema = exports.responseFormatSchema = exports.toolChoiceSchema = exports.toolDefinitionSchema = exports.samplingParametersSchema = exports.inferenceInputSchema = exports.inferenceMessageSchema = exports.inferenceMessageRoleSchema = exports.inferenceToolCallSchema = exports.inferenceContentPartSchema = exports.inferenceContentSourceSchema = exports.routingPolicyReferenceSchema = exports.routingPolicySchema = exports.routingFallbackPolicySchema = exports.routingPolicyScopeSchema = exports.routingTargetSchema = exports.modelCatalogueEntrySchema = exports.catalogueServingProviderSummarySchema = exports.cataloguePublisherSummarySchema = exports.routingProfileSchema = exports.routingProfileCandidateSchema = exports.modelDeploymentSchema = exports.inferenceProviderSchema = exports.modelRevisionSchema = exports.catalogueModelSchema = exports.modelPublisherSchema = exports.modelSafetyMetadataSchema = exports.modelEvaluationResultSchema = exports.modelDeprecationSchema = exports.commercialPermissionSchema = exports.availabilityScopeSchema = exports.inferenceDataPolicySchema = exports.modelProvenanceSchema = exports.modelLicenseSchema = exports.modelCapabilitiesSchema = void 0;
+exports.productEntitlementSchema = exports.costCenterSpendSchema = exports.costCenterSchema = exports.costCenterStatusSchema = exports.COST_CENTER_STATUSES = exports.payAsYouGoEntitlementSchema = exports.productPlanSchema = exports.planAllowanceSchema = exports.LIVE_PRODUCT_PLAN_STATUSES = exports.productPlanStatusSchema = exports.PRODUCT_PLAN_STATUSES = exports.reconciliationReportSchema = exports.reconciliationRunSchema = exports.reconciliationDiscrepancySchema = exports.reconciliationRunStatusSchema = exports.RECONCILIATION_RUN_STATUSES = exports.reconciliationDiscrepancyKindSchema = exports.RECONCILIATION_DISCREPANCY_KINDS = exports.autoRechargeAttemptSchema = exports.autoRechargeStatusSchema = exports.AUTO_RECHARGE_STATUSES = exports.externalPaymentSchema = exports.externalPaymentKindSchema = exports.EXTERNAL_PAYMENT_KINDS = exports.externalPaymentProviderSchema = exports.EXTERNAL_PAYMENT_PROVIDERS = exports.billingInvoiceSchema = exports.billingInvoiceStatusSchema = exports.BILLING_INVOICE_STATUSES = exports.accountBillingStateSchema = exports.billingProfileSchema = exports.autoRechargeSchema = exports.billingProfileStatusSchema = exports.BILLING_PROFILE_STATUSES = exports.billingModeSchema = exports.BILLING_MODES = exports.providerConnectionSchema = exports.providerConnectionStatusSchema = exports.providerConnectionValidationSchema = exports.providerSecretReferenceSchema = exports.providerConnectionScopeSchema = exports.usageRefundSchema = exports.usageRefundReasonSchema = exports.usageRefundSubjectSchema = exports.usageReceiptSchema = exports.normalizedUsageReportSchema = exports.inferenceRequestOutcomeSchema = void 0;
 var accountGraph_1 = require("./accountGraph");
 Object.defineProperty(exports, "ACCOUNT_KINDS", { enumerable: true, get: function () { return accountGraph_1.ACCOUNT_KINDS; } });
 Object.defineProperty(exports, "accountKindSchema", { enumerable: true, get: function () { return accountGraph_1.accountKindSchema; } });
@@ -330,3 +332,186 @@ Object.defineProperty(exports, "transparencyAnchorSchema", { enumerable: true, g
 Object.defineProperty(exports, "transparencyCheckpointSchema", { enumerable: true, get: function () { return transparency_1.transparencyCheckpointSchema; } });
 Object.defineProperty(exports, "transparencyInclusionProofSchema", { enumerable: true, get: function () { return transparency_1.transparencyInclusionProofSchema; } });
 Object.defineProperty(exports, "transparencyCheckpointListSchema", { enumerable: true, get: function () { return transparency_1.transparencyCheckpointListSchema; } });
+/* -------------------------------------------------------------------------- */
+/*  Inference (Oxy↔data-plane) — issue #972                                        */
+/* -------------------------------------------------------------------------- */
+var version_1 = require("./inference/version");
+// The version of the contract SET; per-shape versions live in the data.
+Object.defineProperty(exports, "INFERENCE_CONTRACT_VERSION", { enumerable: true, get: function () { return version_1.INFERENCE_CONTRACT_VERSION; } });
+var identifiers_1 = require("./inference/identifiers");
+// Principal identifiers. `oxyAccountIdSchema` and `delegatedUserIdSchema`
+// are branded apart so a delegated end user can never become the payer.
+Object.defineProperty(exports, "oxyAccountIdSchema", { enumerable: true, get: function () { return identifiers_1.oxyAccountIdSchema; } });
+Object.defineProperty(exports, "delegatedUserIdSchema", { enumerable: true, get: function () { return identifiers_1.delegatedUserIdSchema; } });
+Object.defineProperty(exports, "oxyApplicationIdSchema", { enumerable: true, get: function () { return identifiers_1.oxyApplicationIdSchema; } });
+Object.defineProperty(exports, "oxyCredentialIdSchema", { enumerable: true, get: function () { return identifiers_1.oxyCredentialIdSchema; } });
+Object.defineProperty(exports, "requestIdSchema", { enumerable: true, get: function () { return identifiers_1.requestIdSchema; } });
+Object.defineProperty(exports, "generationIdSchema", { enumerable: true, get: function () { return identifiers_1.generationIdSchema; } });
+Object.defineProperty(exports, "idempotencyKeySchema", { enumerable: true, get: function () { return identifiers_1.idempotencyKeySchema; } });
+Object.defineProperty(exports, "inferenceEnvironmentSchema", { enumerable: true, get: function () { return identifiers_1.inferenceEnvironmentSchema; } });
+// Wire primitives
+Object.defineProperty(exports, "inferenceTimestampSchema", { enumerable: true, get: function () { return identifiers_1.inferenceTimestampSchema; } });
+Object.defineProperty(exports, "inferenceDateSchema", { enumerable: true, get: function () { return identifiers_1.inferenceDateSchema; } });
+Object.defineProperty(exports, "inferenceHttpsUrlSchema", { enumerable: true, get: function () { return identifiers_1.inferenceHttpsUrlSchema; } });
+// Catalogue references
+Object.defineProperty(exports, "publisherSlugSchema", { enumerable: true, get: function () { return identifiers_1.publisherSlugSchema; } });
+Object.defineProperty(exports, "modelSlugSchema", { enumerable: true, get: function () { return identifiers_1.modelSlugSchema; } });
+Object.defineProperty(exports, "modelIdSchema", { enumerable: true, get: function () { return identifiers_1.modelIdSchema; } });
+Object.defineProperty(exports, "modelRevisionLabelSchema", { enumerable: true, get: function () { return identifiers_1.modelRevisionLabelSchema; } });
+Object.defineProperty(exports, "modelReferenceSchema", { enumerable: true, get: function () { return identifiers_1.modelReferenceSchema; } });
+Object.defineProperty(exports, "routingProfileSlugSchema", { enumerable: true, get: function () { return identifiers_1.routingProfileSlugSchema; } });
+Object.defineProperty(exports, "inferenceProviderSlugSchema", { enumerable: true, get: function () { return identifiers_1.inferenceProviderSlugSchema; } });
+Object.defineProperty(exports, "deploymentIdSchema", { enumerable: true, get: function () { return identifiers_1.deploymentIdSchema; } });
+Object.defineProperty(exports, "inferenceRegionSchema", { enumerable: true, get: function () { return identifiers_1.inferenceRegionSchema; } });
+Object.defineProperty(exports, "RESERVED_ALIA_PUBLISHER", { enumerable: true, get: function () { return identifiers_1.RESERVED_ALIA_PUBLISHER; } });
+var money_1 = require("./inference/money");
+// Exact money and metered units — never floats, units never money.
+Object.defineProperty(exports, "currencyCodeSchema", { enumerable: true, get: function () { return money_1.currencyCodeSchema; } });
+Object.defineProperty(exports, "INFERENCE_MONEY_SCALE", { enumerable: true, get: function () { return money_1.INFERENCE_MONEY_SCALE; } });
+Object.defineProperty(exports, "exactDecimalSchema", { enumerable: true, get: function () { return money_1.exactDecimalSchema; } });
+Object.defineProperty(exports, "moneySchema", { enumerable: true, get: function () { return money_1.moneySchema; } });
+Object.defineProperty(exports, "USAGE_UNITS", { enumerable: true, get: function () { return money_1.USAGE_UNITS; } });
+Object.defineProperty(exports, "usageUnitSchema", { enumerable: true, get: function () { return money_1.usageUnitSchema; } });
+Object.defineProperty(exports, "USAGE_SOURCES", { enumerable: true, get: function () { return money_1.USAGE_SOURCES; } });
+Object.defineProperty(exports, "usageSourceSchema", { enumerable: true, get: function () { return money_1.usageSourceSchema; } });
+Object.defineProperty(exports, "usageQuantitySchema", { enumerable: true, get: function () { return money_1.usageQuantitySchema; } });
+Object.defineProperty(exports, "unitPriceSchema", { enumerable: true, get: function () { return money_1.unitPriceSchema; } });
+var attribution_1 = require("./inference/attribution");
+// Canonical attribution: who pays, which app, which credential, which user.
+Object.defineProperty(exports, "INFERENCE_SCOPES", { enumerable: true, get: function () { return attribution_1.INFERENCE_SCOPES; } });
+Object.defineProperty(exports, "inferenceScopeSchema", { enumerable: true, get: function () { return attribution_1.inferenceScopeSchema; } });
+Object.defineProperty(exports, "billingPrincipalSchema", { enumerable: true, get: function () { return attribution_1.billingPrincipalSchema; } });
+Object.defineProperty(exports, "authenticatedPrincipalSchema", { enumerable: true, get: function () { return attribution_1.authenticatedPrincipalSchema; } });
+Object.defineProperty(exports, "inferenceAttributionSchema", { enumerable: true, get: function () { return attribution_1.inferenceAttributionSchema; } });
+var errors_1 = require("./inference/errors");
+// Closed error vocabulary + retryability + a leak-proof provider passthrough.
+Object.defineProperty(exports, "INFERENCE_ERROR_CODES", { enumerable: true, get: function () { return errors_1.INFERENCE_ERROR_CODES; } });
+Object.defineProperty(exports, "NON_RETRYABLE_INFERENCE_ERROR_CODES", { enumerable: true, get: function () { return errors_1.NON_RETRYABLE_INFERENCE_ERROR_CODES; } });
+Object.defineProperty(exports, "inferenceErrorCodeSchema", { enumerable: true, get: function () { return errors_1.inferenceErrorCodeSchema; } });
+Object.defineProperty(exports, "upstreamErrorCategorySchema", { enumerable: true, get: function () { return errors_1.upstreamErrorCategorySchema; } });
+Object.defineProperty(exports, "safeErrorTextSchema", { enumerable: true, get: function () { return errors_1.safeErrorTextSchema; } });
+Object.defineProperty(exports, "providerErrorPassthroughSchema", { enumerable: true, get: function () { return errors_1.providerErrorPassthroughSchema; } });
+Object.defineProperty(exports, "inferenceErrorSchema", { enumerable: true, get: function () { return errors_1.inferenceErrorSchema; } });
+var priceVersion_1 = require("./inference/priceVersion");
+// Price versions and the snapshot a settled receipt keeps.
+Object.defineProperty(exports, "priceVersionStatusSchema", { enumerable: true, get: function () { return priceVersion_1.priceVersionStatusSchema; } });
+Object.defineProperty(exports, "priceVersionSchema", { enumerable: true, get: function () { return priceVersion_1.priceVersionSchema; } });
+Object.defineProperty(exports, "priceSnapshotSchema", { enumerable: true, get: function () { return priceVersion_1.priceSnapshotSchema; } });
+var catalogue_1 = require("./inference/catalogue");
+// The six distinct catalogue objects + the customer-safe projection.
+Object.defineProperty(exports, "inferenceModalitySchema", { enumerable: true, get: function () { return catalogue_1.inferenceModalitySchema; } });
+Object.defineProperty(exports, "modelCapabilitiesSchema", { enumerable: true, get: function () { return catalogue_1.modelCapabilitiesSchema; } });
+Object.defineProperty(exports, "modelLicenseSchema", { enumerable: true, get: function () { return catalogue_1.modelLicenseSchema; } });
+Object.defineProperty(exports, "modelProvenanceSchema", { enumerable: true, get: function () { return catalogue_1.modelProvenanceSchema; } });
+Object.defineProperty(exports, "inferenceDataPolicySchema", { enumerable: true, get: function () { return catalogue_1.inferenceDataPolicySchema; } });
+Object.defineProperty(exports, "availabilityScopeSchema", { enumerable: true, get: function () { return catalogue_1.availabilityScopeSchema; } });
+Object.defineProperty(exports, "commercialPermissionSchema", { enumerable: true, get: function () { return catalogue_1.commercialPermissionSchema; } });
+Object.defineProperty(exports, "modelDeprecationSchema", { enumerable: true, get: function () { return catalogue_1.modelDeprecationSchema; } });
+Object.defineProperty(exports, "modelEvaluationResultSchema", { enumerable: true, get: function () { return catalogue_1.modelEvaluationResultSchema; } });
+Object.defineProperty(exports, "modelSafetyMetadataSchema", { enumerable: true, get: function () { return catalogue_1.modelSafetyMetadataSchema; } });
+Object.defineProperty(exports, "modelPublisherSchema", { enumerable: true, get: function () { return catalogue_1.modelPublisherSchema; } });
+Object.defineProperty(exports, "catalogueModelSchema", { enumerable: true, get: function () { return catalogue_1.catalogueModelSchema; } });
+Object.defineProperty(exports, "modelRevisionSchema", { enumerable: true, get: function () { return catalogue_1.modelRevisionSchema; } });
+Object.defineProperty(exports, "inferenceProviderSchema", { enumerable: true, get: function () { return catalogue_1.inferenceProviderSchema; } });
+Object.defineProperty(exports, "modelDeploymentSchema", { enumerable: true, get: function () { return catalogue_1.modelDeploymentSchema; } });
+Object.defineProperty(exports, "routingProfileCandidateSchema", { enumerable: true, get: function () { return catalogue_1.routingProfileCandidateSchema; } });
+Object.defineProperty(exports, "routingProfileSchema", { enumerable: true, get: function () { return catalogue_1.routingProfileSchema; } });
+Object.defineProperty(exports, "cataloguePublisherSummarySchema", { enumerable: true, get: function () { return catalogue_1.cataloguePublisherSummarySchema; } });
+Object.defineProperty(exports, "catalogueServingProviderSummarySchema", { enumerable: true, get: function () { return catalogue_1.catalogueServingProviderSummarySchema; } });
+Object.defineProperty(exports, "modelCatalogueEntrySchema", { enumerable: true, get: function () { return catalogue_1.modelCatalogueEntrySchema; } });
+var routingPolicy_1 = require("./inference/routingPolicy");
+// Routing policy: every control, plus the refinement that rejects a policy
+// no route could ever satisfy.
+Object.defineProperty(exports, "routingTargetSchema", { enumerable: true, get: function () { return routingPolicy_1.routingTargetSchema; } });
+Object.defineProperty(exports, "routingPolicyScopeSchema", { enumerable: true, get: function () { return routingPolicy_1.routingPolicyScopeSchema; } });
+Object.defineProperty(exports, "routingFallbackPolicySchema", { enumerable: true, get: function () { return routingPolicy_1.routingFallbackPolicySchema; } });
+Object.defineProperty(exports, "routingPolicySchema", { enumerable: true, get: function () { return routingPolicy_1.routingPolicySchema; } });
+Object.defineProperty(exports, "routingPolicyReferenceSchema", { enumerable: true, get: function () { return routingPolicy_1.routingPolicyReferenceSchema; } });
+var request_1 = require("./inference/request");
+// The normalized Oxy→data-plane request envelope.
+Object.defineProperty(exports, "inferenceContentSourceSchema", { enumerable: true, get: function () { return request_1.inferenceContentSourceSchema; } });
+Object.defineProperty(exports, "inferenceContentPartSchema", { enumerable: true, get: function () { return request_1.inferenceContentPartSchema; } });
+Object.defineProperty(exports, "inferenceToolCallSchema", { enumerable: true, get: function () { return request_1.inferenceToolCallSchema; } });
+Object.defineProperty(exports, "inferenceMessageRoleSchema", { enumerable: true, get: function () { return request_1.inferenceMessageRoleSchema; } });
+Object.defineProperty(exports, "inferenceMessageSchema", { enumerable: true, get: function () { return request_1.inferenceMessageSchema; } });
+Object.defineProperty(exports, "inferenceInputSchema", { enumerable: true, get: function () { return request_1.inferenceInputSchema; } });
+Object.defineProperty(exports, "samplingParametersSchema", { enumerable: true, get: function () { return request_1.samplingParametersSchema; } });
+Object.defineProperty(exports, "toolDefinitionSchema", { enumerable: true, get: function () { return request_1.toolDefinitionSchema; } });
+Object.defineProperty(exports, "toolChoiceSchema", { enumerable: true, get: function () { return request_1.toolChoiceSchema; } });
+Object.defineProperty(exports, "responseFormatSchema", { enumerable: true, get: function () { return request_1.responseFormatSchema; } });
+Object.defineProperty(exports, "clientRequestMetadataSchema", { enumerable: true, get: function () { return request_1.clientRequestMetadataSchema; } });
+Object.defineProperty(exports, "inferenceRequestSchema", { enumerable: true, get: function () { return request_1.inferenceRequestSchema; } });
+var streamEvents_1 = require("./inference/streamEvents");
+// Normalized SSE events.
+Object.defineProperty(exports, "inferenceStreamStartEventSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceStreamStartEventSchema; } });
+Object.defineProperty(exports, "inferenceStreamDeltaEventSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceStreamDeltaEventSchema; } });
+Object.defineProperty(exports, "inferenceStreamToolCallEventSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceStreamToolCallEventSchema; } });
+Object.defineProperty(exports, "inferenceStreamUsageEventSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceStreamUsageEventSchema; } });
+Object.defineProperty(exports, "inferenceRouteSwitchDetailSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceRouteSwitchDetailSchema; } });
+Object.defineProperty(exports, "inferenceRouteSwitchReasonSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceRouteSwitchReasonSchema; } });
+Object.defineProperty(exports, "inferenceStreamRouteSwitchEventSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceStreamRouteSwitchEventSchema; } });
+Object.defineProperty(exports, "inferenceStreamErrorEventSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceStreamErrorEventSchema; } });
+Object.defineProperty(exports, "inferenceFinishReasonSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceFinishReasonSchema; } });
+Object.defineProperty(exports, "inferenceStreamDoneEventSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceStreamDoneEventSchema; } });
+Object.defineProperty(exports, "inferenceStreamEventSchema", { enumerable: true, get: function () { return streamEvents_1.inferenceStreamEventSchema; } });
+var usage_1 = require("./inference/usage");
+// Reserve → settle → refund.
+Object.defineProperty(exports, "usageReservationRequestSchema", { enumerable: true, get: function () { return usage_1.usageReservationRequestSchema; } });
+Object.defineProperty(exports, "usageReservationStatusSchema", { enumerable: true, get: function () { return usage_1.usageReservationStatusSchema; } });
+Object.defineProperty(exports, "usageReservationSchema", { enumerable: true, get: function () { return usage_1.usageReservationSchema; } });
+Object.defineProperty(exports, "inferenceRequestOutcomeSchema", { enumerable: true, get: function () { return usage_1.inferenceRequestOutcomeSchema; } });
+Object.defineProperty(exports, "normalizedUsageReportSchema", { enumerable: true, get: function () { return usage_1.normalizedUsageReportSchema; } });
+Object.defineProperty(exports, "usageReceiptSchema", { enumerable: true, get: function () { return usage_1.usageReceiptSchema; } });
+Object.defineProperty(exports, "usageRefundSubjectSchema", { enumerable: true, get: function () { return usage_1.usageRefundSubjectSchema; } });
+Object.defineProperty(exports, "usageRefundReasonSchema", { enumerable: true, get: function () { return usage_1.usageRefundReasonSchema; } });
+Object.defineProperty(exports, "usageRefundSchema", { enumerable: true, get: function () { return usage_1.usageRefundSchema; } });
+var providerConnection_1 = require("./inference/providerConnection");
+// BYOK connection metadata that structurally cannot carry a secret.
+Object.defineProperty(exports, "providerConnectionScopeSchema", { enumerable: true, get: function () { return providerConnection_1.providerConnectionScopeSchema; } });
+Object.defineProperty(exports, "providerSecretReferenceSchema", { enumerable: true, get: function () { return providerConnection_1.providerSecretReferenceSchema; } });
+Object.defineProperty(exports, "providerConnectionValidationSchema", { enumerable: true, get: function () { return providerConnection_1.providerConnectionValidationSchema; } });
+Object.defineProperty(exports, "providerConnectionStatusSchema", { enumerable: true, get: function () { return providerConnection_1.providerConnectionStatusSchema; } });
+Object.defineProperty(exports, "providerConnectionSchema", { enumerable: true, get: function () { return providerConnection_1.providerConnectionSchema; } });
+var accountBilling_1 = require("./inference/accountBilling");
+// Account-scoped billing: who pays, what they hold, what bounds them, and
+// how it reconciles against the payment processor. A grant and a purchase
+// are never one number — there is deliberately no total.
+Object.defineProperty(exports, "BILLING_MODES", { enumerable: true, get: function () { return accountBilling_1.BILLING_MODES; } });
+Object.defineProperty(exports, "billingModeSchema", { enumerable: true, get: function () { return accountBilling_1.billingModeSchema; } });
+Object.defineProperty(exports, "BILLING_PROFILE_STATUSES", { enumerable: true, get: function () { return accountBilling_1.BILLING_PROFILE_STATUSES; } });
+Object.defineProperty(exports, "billingProfileStatusSchema", { enumerable: true, get: function () { return accountBilling_1.billingProfileStatusSchema; } });
+Object.defineProperty(exports, "autoRechargeSchema", { enumerable: true, get: function () { return accountBilling_1.autoRechargeSchema; } });
+Object.defineProperty(exports, "billingProfileSchema", { enumerable: true, get: function () { return accountBilling_1.billingProfileSchema; } });
+Object.defineProperty(exports, "accountBillingStateSchema", { enumerable: true, get: function () { return accountBilling_1.accountBillingStateSchema; } });
+Object.defineProperty(exports, "BILLING_INVOICE_STATUSES", { enumerable: true, get: function () { return accountBilling_1.BILLING_INVOICE_STATUSES; } });
+Object.defineProperty(exports, "billingInvoiceStatusSchema", { enumerable: true, get: function () { return accountBilling_1.billingInvoiceStatusSchema; } });
+Object.defineProperty(exports, "billingInvoiceSchema", { enumerable: true, get: function () { return accountBilling_1.billingInvoiceSchema; } });
+Object.defineProperty(exports, "EXTERNAL_PAYMENT_PROVIDERS", { enumerable: true, get: function () { return accountBilling_1.EXTERNAL_PAYMENT_PROVIDERS; } });
+Object.defineProperty(exports, "externalPaymentProviderSchema", { enumerable: true, get: function () { return accountBilling_1.externalPaymentProviderSchema; } });
+Object.defineProperty(exports, "EXTERNAL_PAYMENT_KINDS", { enumerable: true, get: function () { return accountBilling_1.EXTERNAL_PAYMENT_KINDS; } });
+Object.defineProperty(exports, "externalPaymentKindSchema", { enumerable: true, get: function () { return accountBilling_1.externalPaymentKindSchema; } });
+Object.defineProperty(exports, "externalPaymentSchema", { enumerable: true, get: function () { return accountBilling_1.externalPaymentSchema; } });
+Object.defineProperty(exports, "AUTO_RECHARGE_STATUSES", { enumerable: true, get: function () { return accountBilling_1.AUTO_RECHARGE_STATUSES; } });
+Object.defineProperty(exports, "autoRechargeStatusSchema", { enumerable: true, get: function () { return accountBilling_1.autoRechargeStatusSchema; } });
+Object.defineProperty(exports, "autoRechargeAttemptSchema", { enumerable: true, get: function () { return accountBilling_1.autoRechargeAttemptSchema; } });
+Object.defineProperty(exports, "RECONCILIATION_DISCREPANCY_KINDS", { enumerable: true, get: function () { return accountBilling_1.RECONCILIATION_DISCREPANCY_KINDS; } });
+Object.defineProperty(exports, "reconciliationDiscrepancyKindSchema", { enumerable: true, get: function () { return accountBilling_1.reconciliationDiscrepancyKindSchema; } });
+Object.defineProperty(exports, "RECONCILIATION_RUN_STATUSES", { enumerable: true, get: function () { return accountBilling_1.RECONCILIATION_RUN_STATUSES; } });
+Object.defineProperty(exports, "reconciliationRunStatusSchema", { enumerable: true, get: function () { return accountBilling_1.reconciliationRunStatusSchema; } });
+Object.defineProperty(exports, "reconciliationDiscrepancySchema", { enumerable: true, get: function () { return accountBilling_1.reconciliationDiscrepancySchema; } });
+Object.defineProperty(exports, "reconciliationRunSchema", { enumerable: true, get: function () { return accountBilling_1.reconciliationRunSchema; } });
+Object.defineProperty(exports, "reconciliationReportSchema", { enumerable: true, get: function () { return accountBilling_1.reconciliationReportSchema; } });
+var entitlement_1 = require("./inference/entitlement");
+// Product entitlements. Allowances are integer counts and money is an exact
+// decimal, so a plan allowance cannot be added to a balance.
+Object.defineProperty(exports, "PRODUCT_PLAN_STATUSES", { enumerable: true, get: function () { return entitlement_1.PRODUCT_PLAN_STATUSES; } });
+Object.defineProperty(exports, "productPlanStatusSchema", { enumerable: true, get: function () { return entitlement_1.productPlanStatusSchema; } });
+Object.defineProperty(exports, "LIVE_PRODUCT_PLAN_STATUSES", { enumerable: true, get: function () { return entitlement_1.LIVE_PRODUCT_PLAN_STATUSES; } });
+Object.defineProperty(exports, "planAllowanceSchema", { enumerable: true, get: function () { return entitlement_1.planAllowanceSchema; } });
+Object.defineProperty(exports, "productPlanSchema", { enumerable: true, get: function () { return entitlement_1.productPlanSchema; } });
+Object.defineProperty(exports, "payAsYouGoEntitlementSchema", { enumerable: true, get: function () { return entitlement_1.payAsYouGoEntitlementSchema; } });
+Object.defineProperty(exports, "COST_CENTER_STATUSES", { enumerable: true, get: function () { return entitlement_1.COST_CENTER_STATUSES; } });
+Object.defineProperty(exports, "costCenterStatusSchema", { enumerable: true, get: function () { return entitlement_1.costCenterStatusSchema; } });
+Object.defineProperty(exports, "costCenterSchema", { enumerable: true, get: function () { return entitlement_1.costCenterSchema; } });
+Object.defineProperty(exports, "costCenterSpendSchema", { enumerable: true, get: function () { return entitlement_1.costCenterSpendSchema; } });
+Object.defineProperty(exports, "productEntitlementSchema", { enumerable: true, get: function () { return entitlement_1.productEntitlementSchema; } });

package/dist/cjs/inference/accountBilling.js

@@ -0,0 +1,334 @@
+"use strict";
+/**
+ * The account-scoped billing surface: who pays, what they hold, what bounds
+ * them, and how it reconciles against the payment processor.
+ *
+ * Every shape here is denominated in {@link exactDecimalSchema} — an exact
+ * decimal string — for the reason `money.ts` gives at length: a JS `number`
+ * cannot represent `0.1 + 0.2`, and a balance is the last place a rounding error
+ * should be allowed to accumulate silently.
+ *
+ * ## What is NOT here, and where it is instead
+ *
+ * The BALANCE and the BUDGETS both live at `/inference/reporting` (#972
+ * workstream 8), which owns the customer's view of what they hold and what
+ * bounds them, stamped `{source, consistency}` so a reader can always tell which
+ * kind of number they are looking at. This file declares who PAYS and on what
+ * TERMS, plus the records that sit behind those numbers — invoices, processor
+ * payments, auto-recharge attempts and reconciliation.
+ *
+ * The split is not cosmetic. A second balance shape here would be a second
+ * answer to one question, and the pair would disagree the day one of them stops
+ * accounting for an invoiced account's unused credit line — which is exactly the
+ * kind of drift a customer discovers before we do.
+ *
+ * ## Product entitlements are NOT here
+ *
+ * Alia plans, their monthly allowances and the API-credit product live in
+ * `entitlement.ts`, in a shape that cannot be added to a balance. #972 is
+ * explicit that confusing a product subscription with pay-as-you-go inference
+ * spend is the failure mode, so the two are separate types that share no field
+ * and no unit.
+ *
+ * ## Stripe appears only as a REFERENCE
+ *
+ * `externalRef` names a record in the processor's database; nothing in this file
+ * is derived from Stripe, and no shape here can carry a processor-computed
+ * balance. The epic's invariant is that Stripe is a payment and invoicing
+ * processor and not the authoritative usage ledger, so the reconciliation shapes
+ * below describe a COMPARISON between two independent records rather than an
+ * import of one into the other.
+ *
+ * Decided in: docs/adr/0014-account-billing-and-entitlements.md,
+ * docs/adr/0009-usage-reservation-and-settlement.md.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.reconciliationReportSchema = exports.reconciliationRunSchema = exports.reconciliationDiscrepancySchema = exports.reconciliationRunStatusSchema = exports.RECONCILIATION_RUN_STATUSES = exports.reconciliationDiscrepancyKindSchema = exports.RECONCILIATION_DISCREPANCY_KINDS = exports.autoRechargeAttemptSchema = exports.autoRechargeStatusSchema = exports.AUTO_RECHARGE_STATUSES = exports.externalPaymentSchema = exports.externalPaymentKindSchema = exports.EXTERNAL_PAYMENT_KINDS = exports.externalPaymentProviderSchema = exports.EXTERNAL_PAYMENT_PROVIDERS = exports.billingInvoiceSchema = exports.billingInvoiceStatusSchema = exports.BILLING_INVOICE_STATUSES = exports.accountBillingStateSchema = exports.billingProfileSchema = exports.autoRechargeSchema = exports.billingProfileStatusSchema = exports.BILLING_PROFILE_STATUSES = exports.billingModeSchema = exports.BILLING_MODES = void 0;
+const zod_1 = require("zod");
+const identifiers_1 = require("./identifiers");
+const money_1 = require("./money");
+/* -------------------------------------------------------------------------- */
+/*  Billing profile                                                           */
+/* -------------------------------------------------------------------------- */
+/**
+ * How an account pays.
+ *
+ * `prepaid` spends money it topped up in advance. `invoiced` draws against a
+ * credit limit and is billed in arrears — the enterprise shape. Both settle
+ * through the same ledger; the difference is only which bucket a reservation
+ * draws from once the prepaid and granted balances are exhausted.
+ */
+exports.BILLING_MODES = ['prepaid', 'invoiced'];
+exports.billingModeSchema = zod_1.z.enum(exports.BILLING_MODES);
+/** Whether the profile may currently spend at all. */
+exports.BILLING_PROFILE_STATUSES = ['active', 'suspended', 'closed'];
+exports.billingProfileStatusSchema = zod_1.z.enum(exports.BILLING_PROFILE_STATUSES);
+/**
+ * Automatic top-up settings.
+ *
+ * An IMPLICATION rather than a biconditional, matching the column CHECK: the
+ * two amounts may be configured before the feature is switched on, but an
+ * `enabled` recharge with either missing is a setting that reads as "on" and can
+ * never fire — the shape a customer discovers only when their traffic stops.
+ */
+exports.autoRechargeSchema = zod_1.z
+    .object({
+    enabled: zod_1.z.boolean(),
+    /** Recharge when the spendable balance falls below this. */
+    threshold: money_1.exactDecimalSchema.optional(),
+    /** How much to add. */
+    amount: money_1.exactDecimalSchema.optional(),
+})
+    .strict()
+    .refine((value) => !value.enabled || (value.threshold !== undefined && value.amount !== undefined), { message: 'an enabled auto-recharge must carry both a threshold and an amount' });
+/**
+ * Which account pays for a workload, and on what terms.
+ *
+ * `accountId` is an Oxy account of ANY kind — personal, organization, project,
+ * bot or channel — because `Application.ownerAccountId` may be any of them. It
+ * is branded (`oxyAccountIdSchema`), so a delegated end-user id cannot be
+ * substituted for it anywhere in this contract.
+ */
+exports.billingProfileSchema = zod_1.z
+    .object({
+    /** See `version.ts`: this shape is served to Console and to Alia. */
+    schemaVersion: zod_1.z.literal(1),
+    accountId: identifiers_1.oxyAccountIdSchema,
+    currency: money_1.currencyCodeSchema,
+    billingMode: exports.billingModeSchema,
+    status: exports.billingProfileStatusSchema,
+    /**
+     * How far an `invoiced` account may draw before a reservation is refused.
+     * Always `'0'` for a `prepaid` account, where it is not consulted at all.
+     */
+    creditLimit: money_1.exactDecimalSchema,
+    autoRecharge: exports.autoRechargeSchema,
+    createdAt: zod_1.z.string().datetime(),
+    updatedAt: zod_1.z.string().datetime(),
+})
+    .strict();
+/* -------------------------------------------------------------------------- */
+/*  Billing state                                                             */
+/* -------------------------------------------------------------------------- */
+/**
+ * WHO pays for an account and on what TERMS. Deliberately not how much they
+ * have.
+ *
+ * The balance lives at `GET /inference/reporting/accounts/:accountId/balance`
+ * (#972 workstream 8), which reads `account_balances` and stamps every response
+ * with `{source: 'financial_ledger', consistency: 'authoritative'}`. Restating
+ * those amounts here would be a second answer to one question, and the failure
+ * mode of two balance endpoints is the pair disagreeing on the day one of them
+ * stops accounting for the credit line.
+ *
+ * What this shape adds, and what nothing else carries: `billingAccountId` and
+ * `inherited`. A project draws on the nearest ancestor that has a profile
+ * (ADR 0014), so a Console page has to be able to say "this project spends the
+ * organization's balance" — showing somebody else's money under a project's name
+ * with no indication whose it is would be worse than showing nothing.
+ */
+exports.accountBillingStateSchema = zod_1.z
+    .object({
+    /** See `version.ts`: this shape is served to Console and to Alia. */
+    schemaVersion: zod_1.z.literal(1),
+    accountId: identifiers_1.oxyAccountIdSchema,
+    billingAccountId: identifiers_1.oxyAccountIdSchema,
+    inherited: zod_1.z.boolean(),
+    profile: exports.billingProfileSchema,
+})
+    .strict();
+/*
+ * SPENDING LIMITS AND THEIR ALERTS ARE NOT DECLARED HERE.
+ *
+ * `/inference/reporting` owns the budget surface (#972 workstream 8) and
+ * declares its own shapes beside the router that serves them, stamped
+ * `{source, consistency}` so a reader can always tell which kind of number they
+ * are looking at. A second set here would be a second answer to what a budget
+ * is, on a table both would write — and the closed alert-threshold set already
+ * lives once more where it is ENFORCED, as a CHECK on
+ * `spending_limits.alert_threshold_bps`.
+ */
+/* -------------------------------------------------------------------------- */
+/*  Invoices                                                                  */
+/* -------------------------------------------------------------------------- */
+exports.BILLING_INVOICE_STATUSES = ['draft', 'open', 'paid', 'void'];
+exports.billingInvoiceStatusSchema = zod_1.z.enum(exports.BILLING_INVOICE_STATUSES);
+/**
+ * A period's charges, aggregated — the invoiced-enterprise settlement document.
+ *
+ * `subtotalAmount` is the EXACT sum of the receipts on the invoice, at full
+ * scale; `totalAmount` is the rounded figure actually charged. The difference is
+ * booked as an `invoice_rounding` ledger entry rather than discarded, because a
+ * discarded remainder is money that exists in one system and not the other.
+ *
+ * `minorUnitExponent` is carried rather than derived from the currency code:
+ * USD is 2, JPY is 0, BHD is 3, and that is not a property this platform's
+ * database knows. Storing what was used keeps the invoice reproducible.
+ */
+exports.billingInvoiceSchema = zod_1.z
+    .object({
+    /** See `version.ts`: this shape is served to Console and to Alia. */
+    schemaVersion: zod_1.z.literal(1),
+    id: zod_1.z.string().min(1).max(64),
+    accountId: identifiers_1.oxyAccountIdSchema,
+    currency: money_1.currencyCodeSchema,
+    periodStart: zod_1.z.string().datetime(),
+    periodEnd: zod_1.z.string().datetime(),
+    status: exports.billingInvoiceStatusSchema,
+    subtotalAmount: money_1.exactDecimalSchema,
+    totalAmount: money_1.exactDecimalSchema,
+    minorUnitExponent: zod_1.z.number().int().min(0).max(4),
+    /** The processor's own invoice id, for reconciliation. Never an authority. */
+    externalInvoiceRef: zod_1.z.string().min(1).max(255).optional(),
+    issuedAt: zod_1.z.string().datetime().optional(),
+    paidAt: zod_1.z.string().datetime().optional(),
+    receiptCount: zod_1.z.number().int().nonnegative().safe(),
+})
+    .strict();
+/* -------------------------------------------------------------------------- */
+/*  Payment processor boundary                                                */
+/* -------------------------------------------------------------------------- */
+/** The processors this platform records payments from. */
+exports.EXTERNAL_PAYMENT_PROVIDERS = ['stripe'];
+exports.externalPaymentProviderSchema = zod_1.z.enum(exports.EXTERNAL_PAYMENT_PROVIDERS);
+/**
+ * What kind of processor record `externalRef` names.
+ *
+ * Kept explicit because reconciliation compares like with like: a payment intent
+ * and the invoice it paid are two records of one movement of money, and counting
+ * both would double the external total.
+ */
+exports.EXTERNAL_PAYMENT_KINDS = ['payment_intent', 'invoice'];
+exports.externalPaymentKindSchema = zod_1.z.enum(exports.EXTERNAL_PAYMENT_KINDS);
+/**
+ * A processor payment that funded an Oxy balance.
+ *
+ * This is the reconciliation ANCHOR: one row per charge that landed in the
+ * ledger, carrying both the processor's reference and the ledger entry it
+ * produced. Without it, matching a Stripe charge back to a ledger entry means
+ * parsing an idempotency key, and a parser is not a foreign key.
+ */
+exports.externalPaymentSchema = zod_1.z
+    .object({
+    id: zod_1.z.string().min(1).max(64),
+    accountId: identifiers_1.oxyAccountIdSchema,
+    provider: exports.externalPaymentProviderSchema,
+    externalKind: exports.externalPaymentKindSchema,
+    externalRef: zod_1.z.string().min(1).max(255),
+    amount: money_1.exactDecimalSchema,
+    currency: money_1.currencyCodeSchema,
+    ledgerEntryId: zod_1.z.string().min(1).max(64),
+    occurredAt: zod_1.z.string().datetime(),
+    createdAt: zod_1.z.string().datetime(),
+})
+    .strict();
+/** Lifecycle of one automatic top-up. */
+exports.AUTO_RECHARGE_STATUSES = ['pending', 'succeeded', 'failed'];
+exports.autoRechargeStatusSchema = zod_1.z.enum(exports.AUTO_RECHARGE_STATUSES);
+/**
+ * One attempt to top an account up automatically.
+ *
+ * Recorded BEFORE the processor is called and keyed on the account, currency and
+ * the window it fired in, so a sweep that runs twice — or two instances of it —
+ * charges a customer's card once. An off-session charge is the one operation on
+ * this surface where a duplicate is not merely a wrong number in a report.
+ */
+exports.autoRechargeAttemptSchema = zod_1.z
+    .object({
+    /** See `version.ts`: this shape is served to Console and to Alia. */
+    schemaVersion: zod_1.z.literal(1),
+    id: zod_1.z.string().min(1).max(64),
+    accountId: identifiers_1.oxyAccountIdSchema,
+    currency: money_1.currencyCodeSchema,
+    requestedAmount: money_1.exactDecimalSchema,
+    /** The spendable balance that triggered it — why this attempt exists. */
+    balanceAtTrigger: money_1.exactDecimalSchema,
+    status: exports.autoRechargeStatusSchema,
+    externalRef: zod_1.z.string().min(1).max(255).optional(),
+    /** The processor's own decline code. Never a free-form message. */
+    failureCode: zod_1.z.string().min(1).max(64).optional(),
+    createdAt: zod_1.z.string().datetime(),
+    updatedAt: zod_1.z.string().datetime(),
+})
+    .strict();
+/* -------------------------------------------------------------------------- */
+/*  Reconciliation                                                            */
+/* -------------------------------------------------------------------------- */
+/**
+ * How an Oxy record and a processor record fail to agree.
+ *
+ * A closed set, and every member is a DIFFERENT operational problem:
+ *
+ *  - `missing_in_ledger` — the processor took money Oxy never credited. The
+ *    customer paid and has no balance. This is the one that costs a customer.
+ *  - `missing_in_external` — Oxy credited a balance with no processor charge
+ *    behind it. This is the one that costs Oxy.
+ *  - `amount_mismatch` — both exist and disagree.
+ *  - `account_unresolved` — a processor charge whose customer maps to no Oxy
+ *    account. Money arrived and nobody owns it.
+ *
+ * Collapsing them into a single "discrepancy" count is what makes a
+ * reconciliation report a number nobody acts on.
+ */
+exports.RECONCILIATION_DISCREPANCY_KINDS = [
+    'missing_in_ledger',
+    'missing_in_external',
+    'amount_mismatch',
+    'account_unresolved',
+];
+exports.reconciliationDiscrepancyKindSchema = zod_1.z.enum(exports.RECONCILIATION_DISCREPANCY_KINDS);
+exports.RECONCILIATION_RUN_STATUSES = ['running', 'completed', 'failed'];
+exports.reconciliationRunStatusSchema = zod_1.z.enum(exports.RECONCILIATION_RUN_STATUSES);
+exports.reconciliationDiscrepancySchema = zod_1.z
+    .object({
+    /** See `version.ts`: this shape is served to Console and to Alia. */
+    schemaVersion: zod_1.z.literal(1),
+    id: zod_1.z.string().min(1).max(64),
+    runId: zod_1.z.string().min(1).max(64),
+    kind: exports.reconciliationDiscrepancyKindSchema,
+    accountId: identifiers_1.oxyAccountIdSchema.optional(),
+    externalRef: zod_1.z.string().min(1).max(255).optional(),
+    ledgerEntryId: zod_1.z.string().min(1).max(64).optional(),
+    /** What Oxy recorded. Absent for `missing_in_ledger`. */
+    ledgerAmount: money_1.exactDecimalSchema.optional(),
+    /** What the processor recorded. Absent for `missing_in_external`. */
+    externalAmount: money_1.exactDecimalSchema.optional(),
+    currency: money_1.currencyCodeSchema,
+    createdAt: zod_1.z.string().datetime(),
+})
+    .strict();
+/**
+ * One reconciliation pass over a window.
+ *
+ * The totals are carried beside the discrepancy list on purpose: two totals that
+ * agree while the lists differ is a real and common state (a charge recorded
+ * against the wrong account), and a report that only published a difference
+ * would call it clean.
+ */
+exports.reconciliationRunSchema = zod_1.z
+    .object({
+    /** See `version.ts`: this shape is served to Console and to Alia. */
+    schemaVersion: zod_1.z.literal(1),
+    id: zod_1.z.string().min(1).max(64),
+    provider: exports.externalPaymentProviderSchema,
+    /** Absent for a platform-wide pass. */
+    accountId: identifiers_1.oxyAccountIdSchema.optional(),
+    currency: money_1.currencyCodeSchema,
+    periodStart: zod_1.z.string().datetime(),
+    periodEnd: zod_1.z.string().datetime(),
+    status: exports.reconciliationRunStatusSchema,
+    ledgerTotal: money_1.exactDecimalSchema,
+    externalTotal: money_1.exactDecimalSchema,
+    discrepancyCount: zod_1.z.number().int().nonnegative().safe(),
+    startedAt: zod_1.z.string().datetime(),
+    completedAt: zod_1.z.string().datetime().optional(),
+})
+    .strict();
+exports.reconciliationReportSchema = zod_1.z
+    .object({
+    /** See `version.ts`: this shape is served to Console and to Alia. */
+    schemaVersion: zod_1.z.literal(1),
+    run: exports.reconciliationRunSchema,
+    discrepancies: zod_1.z.array(exports.reconciliationDiscrepancySchema),
+})
+    .strict();