@stewardhq/sdk 0.5.0 → 0.7.0

package/dist/_chunks/src.js

@@ -1,4 +1,4 @@
-import { A as SubscriptionStatusSchema, B as EmailSettingsPatchSchema, Bt as MeterCreditEntrySchema, C as AccountSchema, Ct as DecimalUnitsStringSchema, D as BillingProfileKindSchema, Fn as CurrencySchema, Gn as IdSchema, Hn as ExternalRefSchema, Ht as MeterDefSchema, I as EMAIL_TEMPLATES, In as DateTimeSchema, Jn as InvoicePaymentStatusSchema, Kn as IntervalSchema, Mn as ActorRefSchema, Nn as AmountMinorSchema, O as BillingProfileSchema, Pn as CodeSchema, Qt as MeteredPriceSchema, V as EmailSettingsSchema, Vt as MeterCreditPropertiesSchema, X as applyEmailSettingsPatch, Zt as MeteredPriceDefSchema, a as EVENT_TYPES, bt as CatalogMeterSchema, cn as plainDecimalOf, dt as CatalogBenefitSchema, en as meterFilterClauseOf, ht as featureValueMatchesType, ln as toMicroUnits, nn as MICRO_UNITS_PER_UNIT, o as EventIdSchema, qn as InvoiceBillingReasonSchema, st as BenefitDefSchema, w as AccountStateSchema, yt as AccountMetersSchema, zn as EntitlementsSchema } from "./events.js";
+import { $t as MeteredPriceSchema, A as SubscriptionStatusSchema, Bn as EntitlementsSchema, C as AccountSchema, D as BillingProfileKindSchema, Et as MAX_METER_UNITS, Fn as CodeSchema, H as EmailSettingsSchema, Ht as MeterCreditPropertiesSchema, In as CurrencySchema, Jn as InvoiceBillingReasonSchema, Kn as IdSchema, L as EMAIL_TEMPLATES, Ln as DateTimeSchema, Nn as ActorRefSchema, O as BillingProfileSchema, Pn as AmountMinorSchema, Qt as MeteredPriceDefSchema, Un as ExternalRefSchema, Ut as MeterDefSchema, V as EmailSettingsPatchSchema, Vt as MeterCreditEntrySchema, X as PriceChangeNoticeMeteredRateSchema, Yn as InvoicePaymentStatusSchema, Z as applyEmailSettingsPatch, a as EVENT_TYPES, bt as AccountMetersSchema, ct as BenefitDefSchema, ft as CatalogBenefitSchema, gt as featureValueMatchesType, ln as plainDecimalOf, o as EventIdSchema, on as isMicroPrecise, qn as IntervalSchema, rn as MICRO_UNITS_PER_UNIT, tn as meterFilterClauseOf, un as toMicroUnits, w as AccountStateSchema, wt as DecimalUnitsStringSchema, xt as CatalogMeterSchema } from "./events.js";
 import { z } from "zod";
 //#region ../contract/src/catalog.ts
 const FeatureTypeSchema = z.enum([
@@ -346,17 +346,34 @@ const BrandingSchema = z.object({
 });
 const DEFAULT_PAYMENT_DUE_DAYS = 7;
 const DEFAULT_MIN_INVOICE_MINOR = 1e3;
+const DEFAULT_BANK_TRANSFER_PAYMENT_DAYS = 5;
 const PaymentDueDaysSchema = z.number().int().min(1).max(60);
+const BankTransferPaymentDaysSchema = z.number().int().min(1).max(14);
+const BankTransferSettingsSchema = z.object({
+	enabled: z.boolean().default(false),
+	paymentDays: BankTransferPaymentDaysSchema.default(5)
+});
 const BillingSettingsSchema = z.object({
 	paymentDueDays: PaymentDueDaysSchema.default(7),
 	minInvoiceMinor: AmountMinorSchema.default(DEFAULT_MIN_INVOICE_MINOR),
-	allowMultipleSubscriptions: z.boolean().default(false)
+	allowMultipleSubscriptions: z.boolean().default(false),
+	bankTransfer: BankTransferSettingsSchema.default({
+		enabled: false,
+		paymentDays: 5
+	})
 });
+/** Patch of `settings.billing.bankTransfer`: an omitted field is unchanged, `null` restores its default. */
+const BankTransferSettingsPatchSchema = z.object({
+	enabled: z.boolean().nullable().optional(),
+	paymentDays: BankTransferPaymentDaysSchema.nullable().optional()
+}).strict();
 /** Patch of `settings.billing`: an omitted field is unchanged, `null` restores its default. */
 const BillingSettingsPatchSchema = z.object({
 	paymentDueDays: PaymentDueDaysSchema.nullable().optional(),
 	minInvoiceMinor: AmountMinorSchema.nullable().optional(),
-	allowMultipleSubscriptions: z.boolean().nullable().optional()
+	allowMultipleSubscriptions: z.boolean().nullable().optional(),
+	/** Merges per field; `bankTransfer: null` restores its defaults (off). */
+	bankTransfer: BankTransferSettingsPatchSchema.nullable().optional()
 }).strict();
 const DEFAULT_EVENT_RETENTION_DAYS = 120;
 const DEFAULT_LATE_GRACE_MINUTES = 60;
@@ -423,6 +440,12 @@ const BrandingPatchSchema = z.object({
 }).strict();
 /** `PATCH /v1/admin/settings` gövdesi. */
 const ProductSettingsPatchSchema = z.object({
+	/**
+	* The payment provider for NEW checkouts and payment sessions (issue #57 decision 2; an open
+	* session keeps the provider it was opened with). Steward refuses a provider this deployment
+	* has not configured (422 `provider_not_available`).
+	*/
+	provider: z.string().regex(/^[a-z][a-z0-9_-]{0,39}$/, "a provider id (lowercase)").optional(),
 	appUrl: WebUrlSchema.nullable().optional(),
 	defaultCurrency: CurrencySchema.optional(),
 	defaultLocale: SettingsLocaleSchema.optional(),
@@ -446,6 +469,17 @@ const MERGED_SECTIONS = /* @__PURE__ */ new Set([
 	"events",
 	"metering"
 ]);
+/** Objects inside a merged section that merge one level deeper (`billing.bankTransfer`). */
+const NESTED_MERGED_FIELDS = /* @__PURE__ */ new Set(["bankTransfer"]);
+/** Field-by-field merge: `null` deletes a field (its default comes back), `undefined` keeps it. */
+function mergeFields(current, patch, nested = /* @__PURE__ */ new Set()) {
+	const merged = { ...current };
+	for (const [field, value] of Object.entries(patch)) if (value === null) delete merged[field];
+	else if (value === void 0) continue;
+	else if (nested.has(field)) merged[field] = mergeFields(current[field] ?? {}, value);
+	else merged[field] = value;
+	return merged;
+}
 /**
 * Doğrulanmış yamayı ayarlara uygular (saf). Sonuç şemadan geçer; alan kuralları
 * yamada zaten denetlendiği için yalnızca programlama hatasında fırlatır.
@@ -464,12 +498,7 @@ function applySettingsPatch(current, patch) {
 		} else if (key === "emails") next.emails = applyEmailSettingsPatch(current.emails, value);
 		else if (MERGED_SECTIONS.has(key)) {
 			if (value === null) delete next[key];
-			else {
-				const section = { ...current[key] ?? {} };
-				for (const [field, fieldValue] of Object.entries(value)) if (fieldValue === null) delete section[field];
-				else if (fieldValue !== void 0) section[field] = fieldValue;
-				next[key] = section;
-			}
+			else next[key] = mergeFields(current[key] ?? {}, value, NESTED_MERGED_FIELDS);
 		} else if (value === null) delete next[key];
 		else next[key] = value;
 	}
@@ -540,7 +569,15 @@ const CheckoutSessionCreateInputSchema = z.object({
 	/** Opens the account with this name if it does not exist; never renames an existing account. */
 	displayName: z.string().min(1).max(200).optional(),
 	prefill: CheckoutPrefillSchema.optional(),
-	consents: z.array(CheckoutConsentInputSchema).max(20).optional()
+	consents: z.array(CheckoutConsentInputSchema).max(20).optional(),
+	/**
+	* Upgrade (bank transfer plan H16): a live subscription of the account this checkout replaces.
+	* It does not block the session (`already_subscribed`) and keeps running until the payment is
+	* recorded; in the transaction that records it (card or bank transfer) it is canceled
+	* immediately and the new subscription starts. An abandoned, expired or canceled session leaves
+	* it untouched. Not a live subscription of the account → 422 `replaces_subscription_invalid`.
+	*/
+	replacesSubscriptionId: IdSchema.optional()
 }).superRefine((body, ctx) => {
 	const seen = /* @__PURE__ */ new Set();
 	body.consents?.forEach((consent, i) => {
@@ -567,7 +604,18 @@ const CheckoutStatusSchema = z.enum([
 	"expired",
 	"canceled"
 ]);
-/** Provider form shown on steward's hosted checkout page (never returned to the product). */
+/**
+* How the customer chose to pay on the hosted page (bank transfer plan H5): `card` (the provider's
+* form) or `bank_transfer` (the session stays `open` until an operator records the transfer).
+* Absent/null: not chosen yet. The session status set does not change for it.
+*/
+const PAYMENT_METHODS = ["card", "bank_transfer"];
+const PaymentMethodSchema = z.enum(PAYMENT_METHODS);
+/**
+* Provider form shown on steward's hosted checkout page (never returned to the product).
+* @deprecated Ürün yüzeyinde kullanılmıyor; yalnızca servis içi. Bir sonraki minor sürümde paketin
+* dış yüzeyinden çıkarılacak (temizlik planı C9).
+*/
 const ProviderPayloadSchema = z.discriminatedUnion("type", [z.object({
 	type: z.literal("html_snippet"),
 	html: z.string()
@@ -595,7 +643,11 @@ const CheckoutSessionSchema = z.object({
 	subscriptionId: IdSchema.nullable(),
 	expiresAt: DateTimeSchema,
 	createdAt: DateTimeSchema,
-	completedAt: DateTimeSchema.nullable()
+	completedAt: DateTimeSchema.nullable(),
+	/** Payment method chosen on the page (H6); absent (or null): not chosen yet, or an older steward. */
+	paymentMethod: PaymentMethodSchema.nullable().optional(),
+	/** The subscription this checkout replaces (H16); absent (or null): none, or an older steward. */
+	replacesSubscriptionId: IdSchema.nullable().optional()
 });
 /**
 * `POST /v1/accounts/{ref}/checkout-sessions` response: `url` is steward's checkout page
@@ -640,9 +692,227 @@ const CHECKOUT_ERRORS = [
 	"provider_not_configured",
 	"provider_error",
 	"account_deleted",
-	"meter_already_billed"
+	"meter_already_billed",
+	"replaces_subscription_invalid"
 ];
 //#endregion
+//#region ../contract/src/bank-transfers.ts
+const BankTransferRecordInputSchema = z.object({
+	/** The account's order code as written in the transfer description (`K7M2-QX9D-4`; case and separators are forgiven). */
+	code: z.string().min(1).max(40),
+	/** The amount received, minor units (kuruş, cent); must equal what the item waits for. */
+	amountMinor: z.number().int().positive(),
+	currency: CurrencySchema,
+	/** When the money reached the account. */
+	receivedAt: DateTimeSchema,
+	/** The bank's transaction / receipt number; one payment per reference. */
+	bankRef: z.string().trim().min(1).max(100),
+	/** Settle this checkout (required when several items match, and with `acceptExpired`). */
+	checkoutSessionId: IdSchema.optional(),
+	/** Pay this invoice (a checkout matches too, or a written-off invoice the transfer pays). */
+	invoiceId: IdSchema.optional(),
+	/** H10: settle the named checkout although it expired (a late transfer the operator accepts). */
+	acceptExpired: z.boolean().optional()
+}).strict().refine((input) => !input.acceptExpired || input.checkoutSessionId !== void 0, {
+	path: ["checkoutSessionId"],
+	message: "acceptExpired needs checkoutSessionId"
+}).refine((input) => input.checkoutSessionId === void 0 || input.invoiceId === void 0, {
+	path: ["invoiceId"],
+	message: "name either checkoutSessionId or invoiceId"
+});
+const BankTransferRecordedSchema = z.object({
+	accountRef: ExternalRefSchema,
+	code: z.string(),
+	/** The checkout the transfer completed; null when it paid an invoice. */
+	checkoutSessionId: IdSchema.nullable(),
+	/** The invoice the transfer paid; null when it completed a checkout. */
+	invoiceId: IdSchema.nullable(),
+	subscriptionId: IdSchema,
+	paymentId: IdSchema,
+	/** The subscription the upgrade replaced (canceled in the same transaction, H16); null: none. */
+	replacedSubscriptionId: IdSchema.nullable(),
+	/** The checkout had expired and the operator accepted the transfer (H10). */
+	acceptedAfterExpiry: z.boolean(),
+	/** The paid invoice had been written off (waived / uncollectible). */
+	paidAfterWriteoff: z.boolean(),
+	/** The account's state after the recording. */
+	account: AccountStateSchema.optional()
+});
+//#endregion
+//#region ../contract/src/admin.ts
+const API_KEY_SCOPES = [
+	"product",
+	"admin",
+	"checkout"
+];
+const ApiKeyScopeSchema = z.enum(API_KEY_SCOPES);
+/** The public part of a key: the 12 hex characters after `stw_` (in logs, audit rows and `doctor`). */
+const ApiKeyPrefixSchema = z.string().regex(/^[0-9a-f]{12}$/, "12 lowercase hex characters");
+/**
+* `stw_<prefix: 12 hex>_<secret: 43 base64url>`. A low-variety secret (e.g. one character
+* repeated) is refused; `generateApiKeyToken` draws 32 random bytes.
+*/
+const ApiKeyTokenSchema = z.string().regex(/^stw_[0-9a-f]{12}_[A-Za-z0-9_-]{43}$/, "stw_ + 12 hex + _ + 43 base64url characters").refine((token) => new Set(token.slice(17)).size >= 16, "the secret is not random enough");
+/** Longest expiry a key can be given, in days (about ten years). */
+const MAX_API_KEY_TTL_DAYS = 3650;
+const ApiKeyCreateInputSchema = z.object({
+	/** Generated by the client (`generateApiKeyToken`); never echoed back. */
+	token: ApiKeyTokenSchema,
+	name: z.string().trim().min(1).max(100),
+	scope: ApiKeyScopeSchema,
+	/**
+	* Whole days until the key expires. Omitted: the scope's default (admin 90 days, others never).
+	* null: never expires, refused for an admin key (issue #57 decision 1).
+	*/
+	expiresInDays: z.number().int().min(1).max(MAX_API_KEY_TTL_DAYS).nullable().optional()
+}).strict().refine((input) => !(input.scope === "admin" && input.expiresInDays === null), {
+	path: ["expiresInDays"],
+	message: "an admin key must expire"
+});
+const ApiKeySchema = z.object({
+	prefix: ApiKeyPrefixSchema,
+	name: z.string(),
+	scope: ApiKeyScopeSchema,
+	createdAt: DateTimeSchema,
+	/** Updated at most once a minute. */
+	lastUsedAt: DateTimeSchema.nullable(),
+	expiresAt: DateTimeSchema.nullable(),
+	revokedAt: DateTimeSchema.nullable()
+});
+/** `GET /v1/admin/api-keys`: the product's keys, revoked and expired ones included, oldest first. */
+const ApiKeyListSchema = z.object({ items: z.array(ApiKeySchema) });
+/** A new API key token (`stw_…`), Web Crypto; Node ≥22, edge and workerd. Store it once, send it once. */
+function generateApiKeyToken() {
+	const random = (n) => globalThis.crypto.getRandomValues(new Uint8Array(n));
+	return `stw_${[...random(6)].map((b) => b.toString(16).padStart(2, "0")).join("")}_${btoa(String.fromCharCode(...random(32))).replaceAll("+", "-").replaceAll("/", "_").replace(/=+$/, "")}`;
+}
+const DUNNING_ACTIONS = [
+	"retry_payment",
+	"suspend",
+	"terminate"
+];
+/**
+* `products.dunning_policy`: steps by days after the first failed payment; `dryRun` only audits.
+* Not strict: stored policies are read through it too (an unknown field must not turn a stored
+* policy into the default).
+*/
+const DunningPolicySchema = z.object({
+	steps: z.array(z.object({
+		afterDays: z.number().min(0).max(365),
+		action: z.enum(DUNNING_ACTIONS)
+	})).refine((steps) => steps.every((s, i) => i === 0 || s.afterDays >= steps[i - 1].afterDays), "steps must be in order of days"),
+	dryRun: z.boolean().default(true)
+});
+/** `POST /v1/admin/events/:id/redeliver`: every delivery of the event requeued, attempts reset. */
+const RedeliveredEventSchema = z.object({
+	eventId: EventIdSchema,
+	type: z.string(),
+	deliveries: z.array(z.object({
+		endpointId: IdSchema,
+		status: z.enum([
+			"pending",
+			"delivered",
+			"dead"
+		]),
+		attempts: z.number().int().nonnegative(),
+		nextAttemptAt: DateTimeSchema
+	}))
+});
+const MAX_NOTICE_DAYS = 3650;
+const RepriceInputSchema = z.object({
+	planCode: CodeSchema,
+	/** The move takes effect from the first period boundary at least this many days away. */
+	noticeDays: z.number().int().min(0).max(MAX_NOTICE_DAYS),
+	/** true: the same list, nothing written and no e-mail. Required so a real run is never implicit. */
+	dryRun: z.boolean()
+}).strict();
+const RepriceItemSchema = z.object({
+	subscriptionId: IdSchema,
+	accountRef: ExternalRefSchema,
+	interval: IntervalSchema,
+	currency: CurrencySchema,
+	oldAmountMinor: z.number().int(),
+	newAmountMinor: z.number().int(),
+	taxInclusive: z.boolean(),
+	/** The boundary the current amount applies from; null for a skipped subscription. */
+	effectiveAt: DateTimeSchema.nullable(),
+	action: z.enum([
+		"schedule",
+		"already_scheduled",
+		"skip"
+	]),
+	reason: z.enum([
+		"cancel_scheduled",
+		"change_scheduled",
+		"legacy_provider",
+		"no_period"
+	]).optional(),
+	/** The metered rates that change (locked → current); absent when none does. */
+	meteredRates: z.array(PriceChangeNoticeMeteredRateSchema).optional()
+});
+const RepriceResultSchema = z.object({
+	dryRun: z.boolean(),
+	/** The earliest boundary a move can take effect at (now + notice days). */
+	effectiveNotBefore: DateTimeSchema,
+	/** Subscriptions scheduled by this run (one notice e-mail each); 0 on a dry run. */
+	scheduled: z.number().int().nonnegative(),
+	items: z.array(RepriceItemSchema)
+});
+/** `POST /v1/admin/accounts/:ref/meters/recompute`: every meter, or one. */
+const MeterRecomputeInputSchema = z.object({ meter: CodeSchema.optional() }).strict();
+const MeterRecomputeResultSchema = z.object({ items: z.array(z.object({
+	meter: CodeSchema,
+	/** The open period rebuilt; null when the account has no open period of the meter. */
+	periodStart: DateTimeSchema.nullable(),
+	periodEnd: DateTimeSchema.nullable(),
+	/** Consumption before and after (decimal strings). */
+	before: z.string().nullable(),
+	after: z.string().nullable()
+})) });
+/** `POST /v1/admin/accounts/:ref/meters/close-periods`: `force` does not wait for unrolled events. */
+const MeterClosePeriodsInputSchema = z.object({
+	meter: CodeSchema.optional(),
+	force: z.boolean().optional()
+}).strict();
+const MeterClosePeriodsResultSchema = z.object({
+	closed: z.number().int().nonnegative(),
+	/** `meter.period_closed` events written. */
+	events: z.number().int().nonnegative(),
+	/** Closing periods left (not ended yet, or waiting for the rollup). */
+	pending: z.number().int().nonnegative()
+});
+/**
+* `POST /v1/admin/accounts/:ref/credits`: positive units = `manual_grant` (as the product route),
+* negative = `adjustment` (a correction; admin only, issue #57 decision 3). Response:
+* `CreditGrantResponseSchema`.
+*/
+const CreditAdjustmentInputSchema = z.object({
+	meter: CodeSchema,
+	units: z.number().min(-MAX_METER_UNITS).max(MAX_METER_UNITS).refine((value) => value !== 0, "must not be zero").refine((value) => isMicroPrecise(value), "at most 6 decimal places"),
+	reason: z.string().trim().min(3).max(500)
+}).strict();
+const BANK_TRANSFER_LIST_STATUSES = ["pending", "expired"];
+const BankTransferListStatusSchema = z.enum(BANK_TRANSFER_LIST_STATUSES);
+const BankTransferListItemSchema = z.object({
+	kind: z.enum(["checkout", "invoice"]),
+	id: IdSchema,
+	/** The session status, or the invoice's payment status. */
+	status: z.string(),
+	/** The checkout's plan, or the invoice's subscription plan (null: none). */
+	planCode: z.string().nullable(),
+	totalMinor: z.number().int(),
+	currency: CurrencySchema,
+	/** The session's expiry, or the invoice's due date (null: none). */
+	deadline: DateTimeSchema.nullable(),
+	/** The account's order code (in the transfer description). */
+	code: z.string().nullable(),
+	accountRef: ExternalRefSchema,
+	/** When bank transfer was chosen (checkouts); null for invoices. */
+	selectedAt: DateTimeSchema.nullable()
+});
+/** `GET /v1/admin/bank-transfers`: `pending` by deadline; `expired`: expired in the last 30 days. */
+const BankTransferListSchema = z.object({ items: z.array(BankTransferListItemSchema) });
+//#endregion
 //#region ../contract/src/portal.ts
 const PortalSessionCreateInputSchema = z.object({
 	/** Sayfa dili; verilmezse ürün ayarı `defaultLocale`. */
@@ -1034,6 +1304,11 @@ const ERROR_CODES = Object.freeze({
 	actor_ref_required: spec(400, "validation"),
 	idempotency_key_required: spec(400, "validation"),
 	invalid_idempotency_key: spec(400, "validation"),
+	/**
+	* The request body is over the route's limit (`/v1`: 64 KiB; catalog sync 1 MiB; invoice issue
+	* 10 MiB). Event ingest keeps its own code (`batch_too_large`).
+	*/
+	payload_too_large: spec(413, "validation"),
 	/** Anahtar yok / iptal / yanlış — neden ayrıştırılmaz. */
 	unauthorized: spec(401, "config"),
 	/** Admin kapsamı gereken uç. */
@@ -1052,6 +1327,22 @@ const ERROR_CODES = Object.freeze({
 	checkout_session_not_found: spec(404, "not_found"),
 	/** Yönetim ucu: endpoint yok ya da başka ürünün. */
 	webhook_endpoint_not_found: spec(404, "not_found"),
+	/** Admin endpoint (issue #57): no API key of the product has this prefix. */
+	api_key_not_found: spec(404, "not_found"),
+	/** Admin endpoint (issue #57): no event of the product has this id. */
+	event_not_found: spec(404, "not_found"),
+	/**
+	* `POST /v1/admin/webhook-endpoints`: the URL fails the SSRF policy (through the Ingress only public
+	* `https://` names resolving to public addresses; cluster addresses only from inside the cluster).
+	* The message says which rule.
+	*/
+	webhook_url_not_allowed: spec(422, "validation"),
+	/** `POST /v1/admin/api-keys`: a key with this prefix already exists (generate a new token). */
+	api_key_exists: spec(409, "conflict"),
+	/** `POST /v1/admin/api-keys/:prefix/revoke`: a key cannot revoke itself (revoke it with another admin key). */
+	api_key_self_revoke: spec(409, "conflict"),
+	/** `PATCH /v1/admin/settings`: the `provider` is not configured in this deployment. */
+	provider_not_available: spec(422, "validation"),
 	/** Ürün için henüz katalog senkronlanmadı (404 ama kurulum eksiği). */
 	catalog_not_configured: spec(404, "config"),
 	plan_missing_feature: spec(422, "validation"),
@@ -1065,12 +1356,14 @@ const ERROR_CODES = Object.freeze({
 	already_subscribed: spec(409, "conflict"),
 	already_canceled: spec(409, "conflict"),
 	/**
-	* LEGACY — no longer produced (billing core, M35: no plan rank). Steward before the billing core
+	* @deprecated LEGACY — no longer produced (billing core, M35: no plan rank). Steward before the billing core
 	* answered `PUT …/plan` `mode: "strict"` with it when a live subscription's plan outranked the
 	* target. Kept so clients that handle it keep compiling.
 	*/
 	subscription_plan_higher: spec(409, "conflict"),
 	plan_not_sellable: spec(422, "validation"),
+	/** Checkout `replacesSubscriptionId` (bank transfer plan H16): not a live subscription of the account. */
+	replaces_subscription_invalid: spec(422, "validation"),
 	/**
 	* F4e: hesap silinmiş (anonimleştirilmiş). `/v1/accounts/:ref` altındaki her uç (tekrar
 	* `DELETE` ve aynı ref'le `PUT` dahil) 410 döner; hesap geri açılmaz.
@@ -1078,13 +1371,26 @@ const ERROR_CODES = Object.freeze({
 	account_deleted: spec(410, "not_found"),
 	/** `DELETE /v1/accounts/:ref`: canlı abonelik (dönem sonunda iptali planlı dahil) var; önce hemen iptal. */
 	subscription_active: spec(409, "conflict"),
-	/** `DELETE /v1/accounts/:ref`: sağlayıcı formu açık checkout oturumu var; süresi dolup kapanınca tekrar dene. */
+	/**
+	* `DELETE /v1/accounts/:ref`: sağlayıcı formu açık ya da havale bekleyen (bank transfer plan H5) checkout
+	* oturumu var; kapanınca (süre dolumu, ödeme kaydı) tekrar dene.
+	*/
 	checkout_in_progress: spec(409, "conflict", true),
 	/** `successUrl`, `cancelUrl` or portal `returnUrl` is not in the product's allowed origins: product misconfiguration. */
 	return_url_not_allowed: spec(422, "config"),
 	/** Bu deployment'ta sağlayıcı yapılandırılmamış (503 ama beklemekle düzelmez). */
 	provider_not_configured: spec(503, "config"),
 	provider_error: spec(502, "provider"),
+	/** Not an order code, or its check symbol does not match (a typo in the transfer description). */
+	bank_transfer_code_invalid: spec(422, "validation"),
+	/** No account of the product has this order code. */
+	bank_transfer_code_not_found: spec(404, "not_found"),
+	/** This bank reference is already recorded. */
+	bank_transfer_duplicate: spec(409, "conflict"),
+	/** Nothing of the account waits for exactly this amount, or several items do (name one), or the named checkout is not one. */
+	bank_transfer_unmatched: spec(422, "conflict"),
+	/** The checkout expired (only `acceptExpired` settles it), is closed or cannot be completed: refund the transfer. */
+	bank_transfer_rejected: spec(409, "conflict"),
 	already_issued: spec(409, "conflict"),
 	number_taken: spec(409, "conflict"),
 	invalid_document: spec(422, "validation"),
@@ -1126,14 +1432,21 @@ const ERROR_CODES = Object.freeze({
 	internal_error: spec(500, "unavailable", true),
 	/** `/health`: veritabanına ulaşılamıyor. */
 	database_unavailable: spec(503, "unavailable", true),
-	/** F2c (K26): anahtar prefix'i başına bütçe aşıldı; `Retry-After` başlığı taşır. */
+	/**
+	* Always with `Retry-After` (seconds). `/v1`: the key's budget for the route is spent, or the client
+	* IP is blocked after too many rejected keys (`service/src/http/rate-limit.ts`, issue #43). Hosted
+	* pages: wrong page key / action limit (`hosted/routes.ts`, `hosted/portal-routes.ts`).
+	*/
 	rate_limited: spec(429, "unavailable", true),
 	unknown_provider: spec(404, "not_found"),
 	bad_signature: spec(401, "config"),
 	invalid_payload: spec(400, "validation"),
 	stale_event: spec(400, "validation"),
 	not_configured: spec(503, "config"),
-	/** Yalnızca sahte sağlayıcı (yerel/test). */
+	/**
+	* @deprecated Üretilmiyor: sağlayıcı abonelik yolu silindi (M30) ve sahte sağlayıcı da bu kodu
+	* döndürmüyor. Eski istemciler derlensin diye duruyor; bir sonraki minor sürümde kaldırılacak.
+	*/
 	unknown_subscription: spec(404, "not_found")
 });
 function isKnownErrorCode(code) {
@@ -1502,25 +1815,26 @@ const LOOPBACK_HOSTS = /* @__PURE__ */ new Set([
 ]);
 const CLUSTER_SUFFIX = ".svc.cluster.local";
 /**
-* Adres politikası; uygunsa null, değilse nedeni. `allowLoopback` üretimde false.
-* Şemadan ayrıdır: üretim bilgisi yalnızca serviste var (servis ve sahte steward
-* gövde şemasına `superRefine` ile ekler).
+* Address SYNTAX policy; null when acceptable, otherwise the reason. `allowLoopback` is false in
+* production. Separate from the schema: only the service knows whether it runs in production. The
+* service adds the SSRF rules on top (who may register a cluster address, public names only, DNS
+* resolving to public addresses; `service/src/domain/webhook-url-policy.ts`).
 */
 function webhookEndpointUrlProblem(value, options) {
 	let url;
 	try {
 		url = new URL(value);
 	} catch {
-		return "geçerli bir adres değil";
+		return "not a valid url";
 	}
-	if (url.username !== "" || url.password !== "") return "adreste kullanıcı bilgisi olamaz";
+	if (url.username !== "" || url.password !== "") return "url must not contain credentials";
 	if (url.protocol === "https:") return null;
 	const host = url.hostname.toLowerCase();
 	if (url.protocol === "http:") {
 		if (host.endsWith(CLUSTER_SUFFIX) && host.length > 18) return null;
 		if (options.allowLoopback && LOOPBACK_HOSTS.has(host)) return null;
 	}
-	return options.allowLoopback ? "https://, cluster içi http://*.svc.cluster.local ya da http://localhost olmalı" : "https:// ya da cluster içi http://*.svc.cluster.local olmalı";
+	return options.allowLoopback ? "must be https://, cluster-internal http://*.svc.cluster.local or http://localhost" : "must be https:// or cluster-internal http://*.svc.cluster.local";
 }
 const EndpointUrlSchema = z.url({ protocol: /^https?$/ }).max(2e3).refine((value) => !hasSecretMarker(value), "adres sır içeremez");
 const DescriptionSchema = z.string().trim().min(1).max(200).refine((value) => !hasSecretMarker(value), "açıklama sır içeremez");
@@ -1546,7 +1860,10 @@ const WebhookLastDeliverySchema = z.object({
 		"dead"
 	]),
 	httpStatus: z.number().int().nullable(),
-	/** `http_<kod>`, `timeout`, `network_error`, `endpoint_inactive`; başarıda null. */
+	/**
+	* `http_<kod>`, `timeout`, `network_error`, `endpoint_inactive`, `url_not_allowed` (the URL or the
+	* address it resolves to fails the SSRF policy at send time); başarıda null.
+	*/
 	error: z.string().nullable(),
 	attempts: z.number().int().nonnegative(),
 	at: DateTimeSchema
@@ -1559,6 +1876,11 @@ const WebhookEndpointSchema = z.object({
 	/** null: filtre yok, yalnızca 0.1'in 15 eski tipi (`LEGACY_EVENT_TYPES`). */
 	eventTypes: z.array(EventTypeSchema).nullable(),
 	description: z.string().nullable(),
+	/**
+	* A cluster address registered from inside the cluster (`*.svc.cluster.local`); every other
+	* endpoint must be public `https://`. Absent from stewards before issue #43.
+	*/
+	internal: z.boolean().optional(),
 	createdAt: DateTimeSchema,
 	rotatedAt: DateTimeSchema.nullable(),
 	lastDelivery: WebhookLastDeliverySchema.nullable()
@@ -1740,6 +2062,23 @@ const DoctorEmailsSchema = z.object({
 	/** Emails are sent: transport and sender configured, at least one template on. */
 	ready: z.boolean()
 });
+/** An active `api_keys` row (not revoked, not expired); issue #43. Never the secret. */
+const DoctorApiKeySchema = z.object({
+	name: z.string(),
+	/** Public prefix (`stw_<prefix>_…`): what `revoke-api-key` takes. */
+	prefix: z.string(),
+	/** `product` | `admin` | `checkout`; open set. */
+	scope: z.string(),
+	createdAt: DateTimeSchema,
+	/** Updated at most once a minute. */
+	lastUsedAt: DateTimeSchema.nullable(),
+	/** null: never expires. */
+	expiresAt: DateTimeSchema.nullable(),
+	/** Whole days since creation. */
+	ageDays: z.number().int().nonnegative()
+});
+/** A key expiring within this many days is a warning. */
+const DOCTOR_KEY_EXPIRY_WARN_DAYS = 14;
 const DoctorReportSchema = z.object({
 	/** `error` önemde uyarı yok. */
 	ok: z.boolean(),
@@ -1765,6 +2104,8 @@ dryRun: z.boolean() }),
 	events: DoctorEventsSchema.optional(),
 	/** Metering MF5; absent without metered prices and from older steward. */
 	overage: DoctorOverageSchema.optional(),
+	/** The product's active API keys, oldest first; absent from steward versions before issue #43. */
+	apiKeys: z.array(DoctorApiKeySchema).optional(),
 	warnings: z.array(DoctorWarningSchema)
 });
 /** Email readiness from settings and the deployment's transport (pure). */
@@ -1846,7 +2187,9 @@ function buildDoctorReport(facts) {
 	if (drift > 0) warn("info", "price_drift", `${drift} live subscription(s) keep a locked amount that differs from the current price; moving them to the current price is an explicit operation`);
 	const legacy = facts.billing?.legacyProviderSubscriptions ?? 0;
 	if (legacy > 0) warn("error", "legacy_provider_subscription", `${legacy} live subscription(s) still have a provider subscription: steward never invoices them and the provider may still charge them; cancel each in the provider panel, then immediately in steward`);
-	if (!provider.configured) warn("error", "provider_not_configured", `ödeme sağlayıcısı ${provider.id} bu deployment'ta yapılandırılmamış`);
+	const transferCurrencies = facts.bankTransfer?.currencies ?? [];
+	if (!provider.configured && transferCurrencies.length > 0) warn("warning", "card_payments_unavailable", `payment provider ${provider.id} is not configured in this deployment: card payments are off, checkout offers bank transfer only (${transferCurrencies.join(", ")})`);
+	else if (!provider.configured) warn("error", "provider_not_configured", `ödeme sağlayıcısı ${provider.id} bu deployment'ta yapılandırılmamış`);
 	else if (provider.healthy === false) warn("warning", "provider_unhealthy", `ödeme sağlayıcısı ${provider.id} art arda erişilemedi (yanıtı veren pod'un gözlemi)`);
 	const returnOrigins = returnOriginsOf(settings);
 	if (returnOrigins.length === 0) warn("error", "no_return_origin", "checkout dönüşüne izinli origin yok: `appUrl` ayarlanmalı (her checkout return_url_not_allowed alır)");
@@ -1888,6 +2231,15 @@ function buildDoctorReport(facts) {
 		else if (overage.chargeMode === "dry_run") warn("info", "overage_dry_run", "metering.chargeMode is dry_run: overage is priced into meter charges (GET /v1/accounts/:ref/meter-charges) but not invoiced; switch to live after one full cycle");
 	}
 	if (overage && overage.unratedSubscriptions > 0) warn("info", "overage_unrated_subscriptions", `${overage.unratedSubscriptions} live subscription(s) have no locked rate for a metered price of their plan (added after they started, M20): their overage is not billed until they move to the current terms`);
+	const DAY_MS = 864e5;
+	const apiKeys = facts.apiKeys?.map((key) => ({
+		...key,
+		ageDays: Math.max(0, Math.floor((facts.checkedAt.getTime() - Date.parse(key.createdAt)) / DAY_MS))
+	}));
+	for (const key of apiKeys ?? []) if (key.expiresAt !== null) {
+		const daysLeft = (Date.parse(key.expiresAt) - facts.checkedAt.getTime()) / DAY_MS;
+		if (daysLeft <= 14) warn("warning", "api_key_expiring", `${key.scope} key "${key.name}" (${key.prefix}) expires in ${Math.max(0, Math.ceil(daysLeft))} day(s): create a new key and revoke this one`);
+	} else if (key.scope === "admin") warn("info", "admin_key_without_expiry", `admin key "${key.name}" (${key.prefix}) never expires: replace it with a key created with an expiry`);
 	return {
 		ok: !warnings.some((w) => w.severity === "error"),
 		checkedAt: facts.checkedAt.toISOString(),
@@ -1905,8 +2257,9 @@ function buildDoctorReport(facts) {
 		...facts.billing ? { billing: facts.billing } : {},
 		...facts.events ? { events: facts.events } : {},
 		...overage ? { overage } : {},
+		...apiKeys ? { apiKeys } : {},
 		warnings
 	};
 }
 //#endregion
-export { rolloverOf as $, CheckoutStatusSchema as $t, WebhookEndpointRotateInputSchema as A, TtlMinutesSchema as An, InvoiceWaiveInputSchema as At, PlanSetResponseSchema as B, CatalogSchema as Bn, PaymentSchema as Bt, hostedReadinessOf as C, MeteringSettingsSchema as Cn, InvoiceIssueInputSchema as Ct, WEBHOOK_SECRET_PREFIX as D, ReturnOriginSchema as Dn, InvoiceSchema as Dt, WEBHOOK_ENDPOINT_STATUSES as E, ProductSettingsSchema as En, InvoicePaymentSessionSchema as Et, generateWebhookSecret as F, isReturnUrlAllowed as Fn, splitInclusiveTax as Ft, contributionOf as G, MAX_CATALOG_BENEFITS as Gn, PortalSessionCreateInputSchema as Gt, ResyncResultSchema as H, CatalogSyncResultSchema as Hn, SubscriptionChangeInputSchema as Ht, webhookEndpointUrlProblem as I, meteringSettingsOf as In, CancelSubscriptionInputSchema as It, meterCreditsOf as J, MAX_PLAN_BENEFITS as Jn, CheckoutConsentInputSchema as Jt, matchesFilter as K, MAX_CATALOG_METERED_PRICES as Kn, PortalSessionSchema as Kt, PLAN_SET_MODES as L, returnOriginsOf as Ln, GrantCreateInputSchema as Lt, WebhookEndpointStatusSchema as M, applySettingsPatch as Mn, ManualInvoiceInputSchema as Mt, WebhookLastDeliverySchema as N, billingSettingsOf as Nn, ManualInvoiceLineInputSchema as Nt, WebhookEndpointCreateInputSchema as O, SETTINGS_LOCALES as On, InvoiceStatusSchema as Ot, WebhookSecretSchema as P, eventsSettingsOf as Pn, manualInvoiceTotals as Pt, rateOverage as Q, PriceSchema as Qn, CheckoutSessionSchema as Qt, PlanSetInputSchema as R, AccountsRefreshResultSchema as Rn, GrantSchema as Rt, endpointDiagnosisOf as S, MeteringSettingsPatchSchema as Sn, UncancelSubscriptionResponseSchema as St, EventTypeSchema as T, ProductSettingsPatchSchema as Tn, InvoicePaymentSessionCreateInputSchema as Tt, addUtcMonths as U, FeatureDefSchema as Un, SubscriptionSchema as Ut, PlanSetWarningSchema as V, CatalogSyncInputSchema as Vn, StatsSchema as Vt, consumptionOf as W, FeatureTypeSchema as Wn, PORTAL_SESSION_ERRORS as Wt, overageOf as X, PlanDefSchema as Xn, CheckoutSessionCreateInputSchema as Xt, overageCapReached as Y, METERED_PRICE_TAX_MISMATCH as Yn, CheckoutPrefillSchema as Yt, periodBoundsOf as Z, PriceDefSchema as Zn, CheckoutSessionCreatedSchema as Zt, DoctorSeveritySchema as _, EventsSettingsPatchSchema as _n, InvoiceVoidResponseSchema as _t, DOCTOR_ROLLUP_LAG_WARN_SECONDS as a, BillingSettingsPatchSchema as an, AccountUpsertResponseSchema as at, buildDoctorReport as b, METER_CHARGE_MODES as bn, MeResponseSchema as bt, DoctorCatalogSchema as c, BrandingSchema as cn, CheckoutSessionResponseSchema as ct, DoctorEventsSchema as d, DEFAULT_LATE_GRACE_MINUTES as dn, HEADER_ACTOR_REF as dt, ConsentSchema as en, standingOf as et, DoctorHostedSchema as f, DEFAULT_METER_CHARGE_MODE as fn, HEADER_API_VERSION as ft, DoctorSettingsSchema as g, EventRetentionDaysSchema as gn, InvoiceIssueResponseSchema as gt, DoctorReportSchema as h, DEFAULT_PORTAL_TTL_MINUTES as hn, HEADER_SDK as ht, DOCTOR_REQUIRED_LEGAL_LINKS as i, checkoutRedirectUrl as in, AccountDetailSchema as it, WebhookEndpointSchema as j, WebUrlSchema as jn, MANUAL_INVOICE_MAX_AMOUNT_MINOR as jt, WebhookEndpointListSchema as k, SettingsLocaleSchema as kn, InvoiceVoidInputSchema as kt, DoctorEmailsSchema as l, DEFAULT_CHECKOUT_TTL_MINUTES as ln, CreditGrantResponseSchema as lt, DoctorProviderSchema as m, DEFAULT_PAYMENT_DUE_DAYS as mn, HEADER_REQUEST_ID as mt, DOCTOR_PROVIDER_ENVIRONMENTS as n, MAX_CHECKOUT_CONSENT_DOCS as nn, errorCodeSpec as nt, DOCTOR_SEVERITIES as o, BillingSettingsSchema as on, CancelSubscriptionResponseSchema as ot, DoctorOverageSchema as p, DEFAULT_MIN_INVOICE_MINOR as pn, HEADER_IDEMPOTENCY_KEY as pt, meterChargeTotals as q, MAX_CATALOG_METERS as qn, CHECKOUT_ERRORS as qt, DOCTOR_REQUIRED_BRANDING as r, ProviderPayloadSchema as rn, isKnownErrorCode as rt, DoctorBillingSchema as s, BrandingPatchSchema as sn, ChangeSubscriptionResponseSchema as st, DOCTOR_PENDING_BACKLOG_MS as t, INDIVIDUAL_IDENTITY_PLACEHOLDER as tn, ERROR_CODES as tt, DoctorEndpointSchema as u, DEFAULT_EVENT_RETENTION_DAYS as un, GrantCreateResponseSchema as ut, DoctorUnsellablePriceSchema as v, EventsSettingsSchema as vn, InvoiceWaiveResponseSchema as vt, DEFAULT_ENDPOINT_EVENT_TYPES as w, PaymentDueDaysSchema as wn, InvoiceLineSchema as wt, emailReadinessOf as x, MeterChargeModeSchema as xn, STEWARD_CAPABILITIES as xt, DoctorWarningSchema as y, LateGraceMinutesSchema as yn, ManualInvoiceResponseSchema as yt, PlanSetModeSchema as z, CatalogPlanSchema as zn, MAX_GRANT_BENEFITS as zt };
+export { periodBoundsOf as $, EventsSettingsSchema as $n, ApiKeySchema as $t, WebhookEndpointCreateInputSchema as A, INDIVIDUAL_IDENTITY_PLACEHOLDER as An, METERED_PRICE_TAX_MISMATCH as Ar, InvoiceStatusSchema as At, PlanSetInputSchema as B, BillingSettingsSchema as Bn, GrantSchema as Bt, emailReadinessOf as C, CheckoutConsentInputSchema as Cn, CatalogSyncResultSchema as Cr, STEWARD_CAPABILITIES as Ct, EventTypeSchema as D, CheckoutSessionSchema as Dn, MAX_CATALOG_METERED_PRICES as Dr, InvoicePaymentSessionCreateInputSchema as Dt, DEFAULT_ENDPOINT_EVENT_TYPES as E, CheckoutSessionCreatedSchema as En, MAX_CATALOG_BENEFITS as Er, InvoiceLineSchema as Et, WebhookLastDeliverySchema as F, checkoutRedirectUrl as Fn, ManualInvoiceLineInputSchema as Ft, addUtcMonths as G, DEFAULT_EVENT_RETENTION_DAYS as Gn, SubscriptionSchema as Gt, PlanSetResponseSchema as H, BrandingSchema as Hn, PaymentSchema as Ht, WebhookSecretSchema as I, BankTransferPaymentDaysSchema as In, manualInvoiceTotals as It, matchesFilter as J, DEFAULT_MIN_INVOICE_MINOR as Jn, PortalSessionSchema as Jt, consumptionOf as K, DEFAULT_LATE_GRACE_MINUTES as Kn, PORTAL_SESSION_ERRORS as Kt, generateWebhookSecret as L, BankTransferSettingsPatchSchema as Ln, splitInclusiveTax as Lt, WebhookEndpointRotateInputSchema as M, PAYMENT_METHODS as Mn, PriceDefSchema as Mr, InvoiceWaiveInputSchema as Mt, WebhookEndpointSchema as N, PaymentMethodSchema as Nn, PriceSchema as Nr, MANUAL_INVOICE_MAX_AMOUNT_MINOR as Nt, WEBHOOK_ENDPOINT_STATUSES as O, CheckoutStatusSchema as On, MAX_CATALOG_METERS as Or, InvoicePaymentSessionSchema as Ot, WebhookEndpointStatusSchema as P, ProviderPayloadSchema as Pn, ManualInvoiceInputSchema as Pt, overageOf as Q, EventsSettingsPatchSchema as Qn, ApiKeyPrefixSchema as Qt, webhookEndpointUrlProblem as R, BankTransferSettingsSchema as Rn, CancelSubscriptionInputSchema as Rt, buildDoctorReport as S, CHECKOUT_ERRORS as Sn, CatalogSyncInputSchema as Sr, MeResponseSchema as St, hostedReadinessOf as T, CheckoutSessionCreateInputSchema as Tn, FeatureTypeSchema as Tr, InvoiceIssueInputSchema as Tt, PlanSetWarningSchema as U, DEFAULT_BANK_TRANSFER_PAYMENT_DAYS as Un, StatsSchema as Ut, PlanSetModeSchema as V, BrandingPatchSchema as Vn, MAX_GRANT_BENEFITS as Vt, ResyncResultSchema as W, DEFAULT_CHECKOUT_TTL_MINUTES as Wn, SubscriptionChangeInputSchema as Wt, meterCreditsOf as X, DEFAULT_PORTAL_TTL_MINUTES as Xn, ApiKeyCreateInputSchema as Xt, meterChargeTotals as Y, DEFAULT_PAYMENT_DUE_DAYS as Yn, API_KEY_SCOPES as Yt, overageCapReached as Z, EventRetentionDaysSchema as Zn, ApiKeyListSchema as Zt, DoctorReportSchema as _, RepriceItemSchema as _n, meteringSettingsOf as _r, HEADER_SDK as _t, DOCTOR_REQUIRED_LEGAL_LINKS as a, BankTransferListStatusSchema as an, PaymentDueDaysSchema as ar, isKnownErrorCode as at, DoctorUnsellablePriceSchema as b, BankTransferRecordInputSchema as bn, CatalogPlanSchema as br, InvoiceWaiveResponseSchema as bt, DoctorApiKeySchema as c, DunningPolicySchema as cn, ReturnOriginSchema as cr, CancelSubscriptionResponseSchema as ct, DoctorEmailsSchema as d, MeterClosePeriodsInputSchema as dn, TtlMinutesSchema as dr, CreditGrantResponseSchema as dt, ApiKeyScopeSchema as en, LateGraceMinutesSchema as er, rateOverage as et, DoctorEndpointSchema as f, MeterClosePeriodsResultSchema as fn, WebUrlSchema as fr, GrantCreateResponseSchema as ft, DoctorProviderSchema as g, RepriceInputSchema as gn, isReturnUrlAllowed as gr, HEADER_REQUEST_ID as gt, DoctorOverageSchema as h, RedeliveredEventSchema as hn, eventsSettingsOf as hr, HEADER_IDEMPOTENCY_KEY as ht, DOCTOR_REQUIRED_BRANDING as i, BankTransferListSchema as in, MeteringSettingsSchema as ir, errorCodeSpec as it, WebhookEndpointListSchema as j, MAX_CHECKOUT_CONSENT_DOCS as jn, PlanDefSchema as jr, InvoiceVoidInputSchema as jt, WEBHOOK_SECRET_PREFIX as k, ConsentSchema as kn, MAX_PLAN_BENEFITS as kr, InvoiceSchema as kt, DoctorBillingSchema as l, MAX_API_KEY_TTL_DAYS as ln, SETTINGS_LOCALES as lr, ChangeSubscriptionResponseSchema as lt, DoctorHostedSchema as m, MeterRecomputeResultSchema as mn, billingSettingsOf as mr, HEADER_API_VERSION as mt, DOCTOR_PENDING_BACKLOG_MS as n, BANK_TRANSFER_LIST_STATUSES as nn, MeterChargeModeSchema as nr, standingOf as nt, DOCTOR_ROLLUP_LAG_WARN_SECONDS as o, CreditAdjustmentInputSchema as on, ProductSettingsPatchSchema as or, AccountDetailSchema as ot, DoctorEventsSchema as p, MeterRecomputeInputSchema as pn, applySettingsPatch as pr, HEADER_ACTOR_REF as pt, contributionOf as q, DEFAULT_METER_CHARGE_MODE as qn, PortalSessionCreateInputSchema as qt, DOCTOR_PROVIDER_ENVIRONMENTS as r, BankTransferListItemSchema as rn, MeteringSettingsPatchSchema as rr, ERROR_CODES as rt, DOCTOR_SEVERITIES as s, DUNNING_ACTIONS as sn, ProductSettingsSchema as sr, AccountUpsertResponseSchema as st, DOCTOR_KEY_EXPIRY_WARN_DAYS as t, ApiKeyTokenSchema as tn, METER_CHARGE_MODES as tr, rolloverOf as tt, DoctorCatalogSchema as u, MAX_NOTICE_DAYS as un, SettingsLocaleSchema as ur, CheckoutSessionResponseSchema as ut, DoctorSettingsSchema as v, RepriceResultSchema as vn, returnOriginsOf as vr, InvoiceIssueResponseSchema as vt, endpointDiagnosisOf as w, CheckoutPrefillSchema as wn, FeatureDefSchema as wr, UncancelSubscriptionResponseSchema as wt, DoctorWarningSchema as x, BankTransferRecordedSchema as xn, CatalogSchema as xr, ManualInvoiceResponseSchema as xt, DoctorSeveritySchema as y, generateApiKeyToken as yn, AccountsRefreshResultSchema as yr, InvoiceVoidResponseSchema as yt, PLAN_SET_MODES as z, BillingSettingsPatchSchema as zn, GrantCreateInputSchema as zt };

package/dist/_chunks/validators.d.ts

@@ -5,7 +5,7 @@ declare const UNIT_DECIMALS = 6;
 declare const MICRO_UNITS_PER_UNIT = 1000000n;
 /** A unit value that is not a finite, non-negative decimal (M4 `invalid_value`). */
 declare class InvalidUnitValueError extends RangeError {
-  readonly code: "invalid_value";
+  readonly code: 'invalid_value';
   constructor(value: unknown);
 }
 /**
@@ -61,7 +61,7 @@ declare function isValidVkn(value: unknown): boolean;
  * (iyzico'nun istediği biçim).
  */
 declare function isE164(value: unknown, options?: {
-  country?: "TR";
+  country?: 'TR';
 }): boolean;
 //#endregion
 export { MICRO_UNITS_PER_UNIT as a, isMicroPrecise as c, plainDecimalOf as d, toMicroUnits as f, InvalidUnitValueError as i, microToDecimalString as l, isValidTckn as n, UNIT_DECIMALS as o, isValidVkn as r, fromMicroUnits as s, isE164 as t, parseMicroUnits as u };