@stewardhq/sdk 0.6.0 → 0.7.0

package/README.md

@@ -270,7 +270,8 @@ await steward.admin.settings.update({
 
 const secret = generateWebhookSecret();          // whsec_ + 32 random bytes
 const endpoint = await steward.admin.endpoints.create({ url: "http://api.acme.svc.cluster.local/billing/events", secret });
-// without eventTypes, ["account.state_changed"]; the address must be https:// or http://*.svc.cluster.local
+// without eventTypes, ["account.state_changed"]; the address must be public https://, or http(s)://*.svc.cluster.local
+// when called from inside the cluster (otherwise 422 webhook_url_not_allowed)
 await steward.admin.endpoints.rotate(endpoint.id, { secret: generateWebhookSecret() }); // the old secret stays as a second signature during the transition
 ```
 
@@ -447,6 +448,23 @@ version in `sdk/package.json` and push the `sdk-v<version>` tag
 (`.github/workflows/sdk-publish.yml`). **The first version on npmjs is 0.5.0** (2026-09-21);
 0.4.0 stayed inside the repository and was never published.
 
+**0.7.0** (contract 0.6.0; additive; `API_VERSION` `2026-10-01` unchanged):
+
+- Admin operations that used to need the pod CLI (issue #57), under `steward.admin`: `apiKeys.list/create/revoke`
+  (the caller generates the token with `generateApiKeyToken()`; steward never returns it; an admin key always
+  expires; a key cannot revoke itself, `api_key_self_revoke`), `dunning.get/set` (`DunningPolicySchema`),
+  `events.redeliver`, `subscriptions.reprice` (`dryRun` required), `meters.recompute/closePeriods`,
+  `credits.adjust` (signed units: negative = adjustment), `bankTransfers.list/record`.
+- Settings: `provider` in `ProductSettingsPatch` (only a provider configured in the deployment;
+  `provider_not_available`).
+- `doctor()`: `apiKeys` (active keys with age, last use and expiry) and the warnings `api_key_expiring`,
+  `admin_key_without_expiry`.
+- Webhook endpoints: `internal` (a cluster address registered from inside the cluster); `webhook_url_not_allowed`
+  when the URL fails the SSRF policy.
+- Error codes: `payload_too_large` (413), `api_key_not_found`, `api_key_exists`, `api_key_self_revoke`,
+  `event_not_found`, `provider_not_available`, `webhook_url_not_allowed`. `rate_limited` (429) now also comes
+  from the `/v1` per-key budgets, always with `Retry-After`.
+
 **0.6.0** (contract 0.5.0, bank transfer F1; additive; `API_VERSION` `2026-10-01` unchanged):
 
 - `Checkout().create({ replacesSubscriptionId })`: an upgrade that replaces the live subscription only

package/dist/_chunks/errors.js

@@ -1,4 +1,4 @@
-import { nt as errorCodeSpec } from "./src.js";
+import { it as errorCodeSpec } from "./src.js";
 //#region src/errors.ts
 var StewardError = class extends Error {
 	code;

package/dist/_chunks/index.d.ts

@@ -1520,6 +1520,288 @@ declare const BankTransferRecordedSchema: z.ZodObject<{
 }, z.core.$strip>;
 type BankTransferRecorded = z.infer<typeof BankTransferRecordedSchema>;
 //#endregion
+//#region ../contract/src/admin.d.ts
+declare const API_KEY_SCOPES: readonly ['product', 'admin', 'checkout'];
+declare const ApiKeyScopeSchema: z.ZodEnum<{
+  admin: "admin";
+  checkout: "checkout";
+  product: "product";
+}>;
+type ApiKeyScope = z.infer<typeof ApiKeyScopeSchema>;
+/** The public part of a key: the 12 hex characters after `stw_` (in logs, audit rows and `doctor`). */
+declare const ApiKeyPrefixSchema: z.ZodString;
+/**
+ * `stw_<prefix: 12 hex>_<secret: 43 base64url>`. A low-variety secret (e.g. one character
+ * repeated) is refused; `generateApiKeyToken` draws 32 random bytes.
+ */
+declare const ApiKeyTokenSchema: z.ZodString;
+/** Longest expiry a key can be given, in days (about ten years). */
+declare const MAX_API_KEY_TTL_DAYS = 3650;
+declare const ApiKeyCreateInputSchema: z.ZodObject<{
+  token: z.ZodString;
+  name: z.ZodString;
+  scope: z.ZodEnum<{
+    admin: "admin";
+    checkout: "checkout";
+    product: "product";
+  }>;
+  expiresInDays: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+}, z.core.$strict>;
+type ApiKeyCreateInput = z.input<typeof ApiKeyCreateInputSchema>;
+declare const ApiKeySchema: z.ZodObject<{
+  prefix: z.ZodString;
+  name: z.ZodString;
+  scope: z.ZodEnum<{
+    admin: "admin";
+    checkout: "checkout";
+    product: "product";
+  }>;
+  createdAt: z.ZodISODateTime;
+  lastUsedAt: z.ZodNullable<z.ZodISODateTime>;
+  expiresAt: z.ZodNullable<z.ZodISODateTime>;
+  revokedAt: z.ZodNullable<z.ZodISODateTime>;
+}, z.core.$strip>;
+type ApiKey = z.infer<typeof ApiKeySchema>;
+/** `GET /v1/admin/api-keys`: the product's keys, revoked and expired ones included, oldest first. */
+declare const ApiKeyListSchema: z.ZodObject<{
+  items: z.ZodArray<z.ZodObject<{
+    prefix: z.ZodString;
+    name: z.ZodString;
+    scope: z.ZodEnum<{
+      admin: "admin";
+      checkout: "checkout";
+      product: "product";
+    }>;
+    createdAt: z.ZodISODateTime;
+    lastUsedAt: z.ZodNullable<z.ZodISODateTime>;
+    expiresAt: z.ZodNullable<z.ZodISODateTime>;
+    revokedAt: z.ZodNullable<z.ZodISODateTime>;
+  }, z.core.$strip>>;
+}, z.core.$strip>;
+type ApiKeyList = z.infer<typeof ApiKeyListSchema>;
+/** A new API key token (`stw_…`), Web Crypto; Node ≥22, edge and workerd. Store it once, send it once. */
+declare function generateApiKeyToken(): string;
+declare const DUNNING_ACTIONS: readonly ['retry_payment', 'suspend', 'terminate'];
+/**
+ * `products.dunning_policy`: steps by days after the first failed payment; `dryRun` only audits.
+ * Not strict: stored policies are read through it too (an unknown field must not turn a stored
+ * policy into the default).
+ */
+declare const DunningPolicySchema: z.ZodObject<{
+  steps: z.ZodArray<z.ZodObject<{
+    afterDays: z.ZodNumber;
+    action: z.ZodEnum<{
+      retry_payment: "retry_payment";
+      suspend: "suspend";
+      terminate: "terminate";
+    }>;
+  }, z.core.$strip>>;
+  dryRun: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strip>;
+type DunningPolicy = z.output<typeof DunningPolicySchema>;
+type DunningPolicyInput = z.input<typeof DunningPolicySchema>;
+/** `POST /v1/admin/events/:id/redeliver`: every delivery of the event requeued, attempts reset. */
+declare const RedeliveredEventSchema: z.ZodObject<{
+  eventId: z.ZodString;
+  type: z.ZodString;
+  deliveries: z.ZodArray<z.ZodObject<{
+    endpointId: z.ZodUUID;
+    status: z.ZodEnum<{
+      dead: "dead";
+      delivered: "delivered";
+      pending: "pending";
+    }>;
+    attempts: z.ZodNumber;
+    nextAttemptAt: z.ZodISODateTime;
+  }, z.core.$strip>>;
+}, z.core.$strip>;
+type RedeliveredEvent = z.infer<typeof RedeliveredEventSchema>;
+declare const MAX_NOTICE_DAYS = 3650;
+declare const RepriceInputSchema: z.ZodObject<{
+  planCode: z.ZodString;
+  noticeDays: z.ZodNumber;
+  dryRun: z.ZodBoolean;
+}, z.core.$strict>;
+type RepriceInput = z.input<typeof RepriceInputSchema>;
+declare const RepriceItemSchema: z.ZodObject<{
+  subscriptionId: z.ZodUUID;
+  accountRef: z.ZodString;
+  interval: z.ZodEnum<{
+    month: "month";
+    year: "year";
+  }>;
+  currency: z.ZodString;
+  oldAmountMinor: z.ZodNumber;
+  newAmountMinor: z.ZodNumber;
+  taxInclusive: z.ZodBoolean;
+  effectiveAt: z.ZodNullable<z.ZodISODateTime>;
+  action: z.ZodEnum<{
+    already_scheduled: "already_scheduled";
+    schedule: "schedule";
+    skip: "skip";
+  }>;
+  reason: z.ZodOptional<z.ZodEnum<{
+    cancel_scheduled: "cancel_scheduled";
+    change_scheduled: "change_scheduled";
+    legacy_provider: "legacy_provider";
+    no_period: "no_period";
+  }>>;
+  meteredRates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    meter: z.ZodString;
+    label: z.ZodObject<{
+      tr: z.ZodString;
+      en: z.ZodString;
+    }, z.core.$strip>;
+    unitLabel: z.ZodNullable<z.ZodObject<{
+      tr: z.ZodString;
+      en: z.ZodString;
+    }, z.core.$strip>>;
+    displayPer: z.ZodNullable<z.ZodNumber>;
+    oldRate: z.ZodNullable<z.ZodObject<{
+      amountMinor: z.ZodNumber;
+      perUnits: z.ZodNumber;
+      capMinor: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>>;
+    newRate: z.ZodNullable<z.ZodObject<{
+      amountMinor: z.ZodNumber;
+      perUnits: z.ZodNumber;
+      capMinor: z.ZodNullable<z.ZodNumber>;
+    }, z.core.$strip>>;
+  }, z.core.$strip>>>;
+}, z.core.$strip>;
+type RepriceItem = z.infer<typeof RepriceItemSchema>;
+declare const RepriceResultSchema: z.ZodObject<{
+  dryRun: z.ZodBoolean;
+  effectiveNotBefore: z.ZodISODateTime;
+  scheduled: z.ZodNumber;
+  items: z.ZodArray<z.ZodObject<{
+    subscriptionId: z.ZodUUID;
+    accountRef: z.ZodString;
+    interval: z.ZodEnum<{
+      month: "month";
+      year: "year";
+    }>;
+    currency: z.ZodString;
+    oldAmountMinor: z.ZodNumber;
+    newAmountMinor: z.ZodNumber;
+    taxInclusive: z.ZodBoolean;
+    effectiveAt: z.ZodNullable<z.ZodISODateTime>;
+    action: z.ZodEnum<{
+      already_scheduled: "already_scheduled";
+      schedule: "schedule";
+      skip: "skip";
+    }>;
+    reason: z.ZodOptional<z.ZodEnum<{
+      cancel_scheduled: "cancel_scheduled";
+      change_scheduled: "change_scheduled";
+      legacy_provider: "legacy_provider";
+      no_period: "no_period";
+    }>>;
+    meteredRates: z.ZodOptional<z.ZodArray<z.ZodObject<{
+      meter: z.ZodString;
+      label: z.ZodObject<{
+        tr: z.ZodString;
+        en: z.ZodString;
+      }, z.core.$strip>;
+      unitLabel: z.ZodNullable<z.ZodObject<{
+        tr: z.ZodString;
+        en: z.ZodString;
+      }, z.core.$strip>>;
+      displayPer: z.ZodNullable<z.ZodNumber>;
+      oldRate: z.ZodNullable<z.ZodObject<{
+        amountMinor: z.ZodNumber;
+        perUnits: z.ZodNumber;
+        capMinor: z.ZodNullable<z.ZodNumber>;
+      }, z.core.$strip>>;
+      newRate: z.ZodNullable<z.ZodObject<{
+        amountMinor: z.ZodNumber;
+        perUnits: z.ZodNumber;
+        capMinor: z.ZodNullable<z.ZodNumber>;
+      }, z.core.$strip>>;
+    }, z.core.$strip>>>;
+  }, z.core.$strip>>;
+}, z.core.$strip>;
+type RepriceResult = z.infer<typeof RepriceResultSchema>;
+/** `POST /v1/admin/accounts/:ref/meters/recompute`: every meter, or one. */
+declare const MeterRecomputeInputSchema: z.ZodObject<{
+  meter: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+type MeterRecomputeInput = z.input<typeof MeterRecomputeInputSchema>;
+declare const MeterRecomputeResultSchema: z.ZodObject<{
+  items: z.ZodArray<z.ZodObject<{
+    meter: z.ZodString;
+    periodStart: z.ZodNullable<z.ZodISODateTime>;
+    periodEnd: z.ZodNullable<z.ZodISODateTime>;
+    before: z.ZodNullable<z.ZodString>;
+    after: z.ZodNullable<z.ZodString>;
+  }, z.core.$strip>>;
+}, z.core.$strip>;
+type MeterRecomputeResult = z.infer<typeof MeterRecomputeResultSchema>;
+/** `POST /v1/admin/accounts/:ref/meters/close-periods`: `force` does not wait for unrolled events. */
+declare const MeterClosePeriodsInputSchema: z.ZodObject<{
+  meter: z.ZodOptional<z.ZodString>;
+  force: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+type MeterClosePeriodsInput = z.input<typeof MeterClosePeriodsInputSchema>;
+declare const MeterClosePeriodsResultSchema: z.ZodObject<{
+  closed: z.ZodNumber;
+  events: z.ZodNumber;
+  pending: z.ZodNumber;
+}, z.core.$strip>;
+type MeterClosePeriodsResult = z.infer<typeof MeterClosePeriodsResultSchema>;
+/**
+ * `POST /v1/admin/accounts/:ref/credits`: positive units = `manual_grant` (as the product route),
+ * negative = `adjustment` (a correction; admin only, issue #57 decision 3). Response:
+ * `CreditGrantResponseSchema`.
+ */
+declare const CreditAdjustmentInputSchema: z.ZodObject<{
+  meter: z.ZodString;
+  units: z.ZodNumber;
+  reason: z.ZodString;
+}, z.core.$strict>;
+type CreditAdjustmentInput = z.input<typeof CreditAdjustmentInputSchema>;
+declare const BANK_TRANSFER_LIST_STATUSES: readonly ['pending', 'expired'];
+declare const BankTransferListStatusSchema: z.ZodEnum<{
+  expired: "expired";
+  pending: "pending";
+}>;
+type BankTransferListStatus = z.infer<typeof BankTransferListStatusSchema>;
+declare const BankTransferListItemSchema: z.ZodObject<{
+  kind: z.ZodEnum<{
+    checkout: "checkout";
+    invoice: "invoice";
+  }>;
+  id: z.ZodUUID;
+  status: z.ZodString;
+  planCode: z.ZodNullable<z.ZodString>;
+  totalMinor: z.ZodNumber;
+  currency: z.ZodString;
+  deadline: z.ZodNullable<z.ZodISODateTime>;
+  code: z.ZodNullable<z.ZodString>;
+  accountRef: z.ZodString;
+  selectedAt: z.ZodNullable<z.ZodISODateTime>;
+}, z.core.$strip>;
+type BankTransferListItem = z.infer<typeof BankTransferListItemSchema>;
+/** `GET /v1/admin/bank-transfers`: `pending` by deadline; `expired`: expired in the last 30 days. */
+declare const BankTransferListSchema: z.ZodObject<{
+  items: z.ZodArray<z.ZodObject<{
+    kind: z.ZodEnum<{
+      checkout: "checkout";
+      invoice: "invoice";
+    }>;
+    id: z.ZodUUID;
+    status: z.ZodString;
+    planCode: z.ZodNullable<z.ZodString>;
+    totalMinor: z.ZodNumber;
+    currency: z.ZodString;
+    deadline: z.ZodNullable<z.ZodISODateTime>;
+    code: z.ZodNullable<z.ZodString>;
+    accountRef: z.ZodString;
+    selectedAt: z.ZodNullable<z.ZodISODateTime>;
+  }, z.core.$strip>>;
+}, z.core.$strip>;
+type BankTransferList = z.infer<typeof BankTransferListSchema>;
+//#endregion
 //#region ../contract/src/portal.d.ts
 declare const PortalSessionCreateInputSchema: z.ZodObject<{
   locale: z.ZodOptional<z.ZodEnum<{
@@ -4118,6 +4400,11 @@ declare const ERROR_CODES: Readonly<{
   actor_ref_required: ErrorCodeSpec;
   idempotency_key_required: ErrorCodeSpec;
   invalid_idempotency_key: ErrorCodeSpec;
+  /**
+   * The request body is over the route's limit (`/v1`: 64 KiB; catalog sync 1 MiB; invoice issue
+   * 10 MiB). Event ingest keeps its own code (`batch_too_large`).
+   */
+  payload_too_large: ErrorCodeSpec;
   /** Anahtar yok / iptal / yanlış — neden ayrıştırılmaz. */
   unauthorized: ErrorCodeSpec;
   /** Admin kapsamı gereken uç. */
@@ -4136,6 +4423,22 @@ declare const ERROR_CODES: Readonly<{
   checkout_session_not_found: ErrorCodeSpec;
   /** Yönetim ucu: endpoint yok ya da başka ürünün. */
   webhook_endpoint_not_found: ErrorCodeSpec;
+  /** Admin endpoint (issue #57): no API key of the product has this prefix. */
+  api_key_not_found: ErrorCodeSpec;
+  /** Admin endpoint (issue #57): no event of the product has this id. */
+  event_not_found: ErrorCodeSpec;
+  /**
+   * `POST /v1/admin/webhook-endpoints`: the URL fails the SSRF policy (through the Ingress only public
+   * `https://` names resolving to public addresses; cluster addresses only from inside the cluster).
+   * The message says which rule.
+   */
+  webhook_url_not_allowed: ErrorCodeSpec;
+  /** `POST /v1/admin/api-keys`: a key with this prefix already exists (generate a new token). */
+  api_key_exists: ErrorCodeSpec;
+  /** `POST /v1/admin/api-keys/:prefix/revoke`: a key cannot revoke itself (revoke it with another admin key). */
+  api_key_self_revoke: ErrorCodeSpec;
+  /** `PATCH /v1/admin/settings`: the `provider` is not configured in this deployment. */
+  provider_not_available: ErrorCodeSpec;
   /** Ürün için henüz katalog senkronlanmadı (404 ama kurulum eksiği). */
   catalog_not_configured: ErrorCodeSpec;
   plan_missing_feature: ErrorCodeSpec;
@@ -4226,9 +4529,9 @@ declare const ERROR_CODES: Readonly<{
   /** `/health`: veritabanına ulaşılamıyor. */
   database_unavailable: ErrorCodeSpec;
   /**
-   * Bugün yalnızca hosted sayfalar üretir (yanlış sayfa anahtarı / aksiyon sınırı; `hosted/routes.ts`,
-   * `hosted/portal-routes.ts`); `Retry-After` başlığı taşır. `/v1` için anahtar başına bütçe (F2c, K26)
-   * ertelendi — geldiğinde aynı kod kullanılır.
+   * Always with `Retry-After` (seconds). `/v1`: the key's budget for the route is spent, or the client
+   * IP is blocked after too many rejected keys (`service/src/http/rate-limit.ts`, issue #43). Hosted
+   * pages: wrong page key / action limit (`hosted/routes.ts`, `hosted/portal-routes.ts`).
    */
   rate_limited: ErrorCodeSpec;
   unknown_provider: ErrorCodeSpec;
@@ -5466,6 +5769,7 @@ declare const BrandingPatchSchema: z.ZodObject<{
 }, z.core.$strict>;
 /** `PATCH /v1/admin/settings` gövdesi. */
 declare const ProductSettingsPatchSchema: z.ZodObject<{
+  provider: z.ZodOptional<z.ZodString>;
   appUrl: z.ZodOptional<z.ZodNullable<z.ZodURL>>;
   defaultCurrency: z.ZodOptional<z.ZodString>;
   defaultLocale: z.ZodOptional<z.ZodEnum<{
@@ -5563,9 +5867,7 @@ type ProductSettingsPatch = z.input<typeof ProductSettingsPatchSchema>;
  * Doğrulanmış yamayı ayarlara uygular (saf). Sonuç şemadan geçer; alan kuralları
  * yamada zaten denetlendiği için yalnızca programlama hatasında fırlatır.
  */
-declare function applySettingsPatch(current: ProductSettings, patch: z.output<typeof ProductSettingsPatchSchema> & {
-  readonly provider?: string | undefined;
-}): ProductSettings;
+declare function applySettingsPatch(current: ProductSettings, patch: z.output<typeof ProductSettingsPatchSchema>): ProductSettings;
 /** Checkout dönüşüne izinli origin'ler: `appUrl`'in origin'i + `extraReturnOrigins`. */
 declare function returnOriginsOf(settings: Pick<ProductSettings, 'appUrl' | 'extraReturnOrigins'>): string[];
 /** `returnUrl`'in origin'i izinli mi (geçersiz adres: hayır). */
@@ -5614,9 +5916,10 @@ declare const WebhookEndpointStatusSchema: z.ZodEnum<{
 }>;
 type WebhookEndpointStatus = z.infer<typeof WebhookEndpointStatusSchema>;
 /**
- * Adres politikası; uygunsa null, değilse nedeni. `allowLoopback` üretimde false.
- * Şemadan ayrıdır: üretim bilgisi yalnızca serviste var (servis ve sahte steward
- * gövde şemasına `superRefine` ile ekler).
+ * Address SYNTAX policy; null when acceptable, otherwise the reason. `allowLoopback` is false in
+ * production. Separate from the schema: only the service knows whether it runs in production. The
+ * service adds the SSRF rules on top (who may register a cluster address, public names only, DNS
+ * resolving to public addresses; `service/src/domain/webhook-url-policy.ts`).
  */
 declare function webhookEndpointUrlProblem(value: string, options: {
   allowLoopback: boolean;
@@ -5715,6 +6018,7 @@ declare const WebhookEndpointSchema: z.ZodObject<{
     "subscription.terminated": "subscription.terminated";
   }>>>;
   description: z.ZodNullable<z.ZodString>;
+  internal: z.ZodOptional<z.ZodBoolean>;
   createdAt: z.ZodISODateTime;
   rotatedAt: z.ZodNullable<z.ZodISODateTime>;
   lastDelivery: z.ZodNullable<z.ZodObject<{
@@ -5768,6 +6072,7 @@ declare const WebhookEndpointListSchema: z.ZodObject<{
       "subscription.terminated": "subscription.terminated";
     }>>>;
     description: z.ZodNullable<z.ZodString>;
+    internal: z.ZodOptional<z.ZodBoolean>;
     createdAt: z.ZodISODateTime;
     rotatedAt: z.ZodNullable<z.ZodISODateTime>;
     lastDelivery: z.ZodNullable<z.ZodObject<{
@@ -5796,7 +6101,7 @@ declare const DoctorSeveritySchema: z.ZodEnum<{
 }>;
 type DoctorSeverity = z.infer<typeof DoctorSeveritySchema>;
 /** `warnings[].code` — bu sürümün ürettiği kodlar; küme açık. */
-type DoctorWarningCode = 'catalog_not_synced' | 'price_unsellable' | 'price_drift' | 'legacy_provider_subscription' | 'provider_not_configured' | 'provider_unhealthy' | 'no_return_origin' | 'app_url_missing' | 'branding_incomplete' | 'legal_links_missing' | 'no_active_endpoint' | 'no_state_changed_endpoint' | 'endpoint_wrong_secret' | 'endpoint_old_contract' | 'endpoint_unreachable' | 'endpoint_failing' | 'endpoint_dead_deliveries' | 'endpoint_pending_backlog' | 'dunning_dry_run' | 'email_not_configured' | 'email_sender_missing' | 'email_billing_link_missing' | 'events_backlog' | 'meter_rollup_lag' | 'events_invalid_value' | 'meter_without_events' | 'events_unmatched' | 'overage_charge_mode_off' | 'overage_dry_run' | 'overage_unrated_subscriptions' | (string & Record<never, never>);
+type DoctorWarningCode = 'catalog_not_synced' | 'price_unsellable' | 'price_drift' | 'legacy_provider_subscription' | 'provider_not_configured' | 'card_payments_unavailable' | 'provider_unhealthy' | 'no_return_origin' | 'app_url_missing' | 'branding_incomplete' | 'legal_links_missing' | 'no_active_endpoint' | 'no_state_changed_endpoint' | 'endpoint_wrong_secret' | 'endpoint_old_contract' | 'endpoint_unreachable' | 'endpoint_failing' | 'endpoint_dead_deliveries' | 'endpoint_pending_backlog' | 'dunning_dry_run' | 'email_not_configured' | 'email_sender_missing' | 'email_billing_link_missing' | 'events_backlog' | 'meter_rollup_lag' | 'events_invalid_value' | 'meter_without_events' | 'events_unmatched' | 'overage_charge_mode_off' | 'overage_dry_run' | 'overage_unrated_subscriptions' | 'api_key_expiring' | 'admin_key_without_expiry' | (string & Record<never, never>);
 declare const DoctorWarningSchema: z.ZodObject<{
   code: z.ZodString;
   severity: z.ZodEnum<{
@@ -5991,6 +6296,19 @@ declare const DoctorEmailsSchema: z.ZodObject<{
   ready: z.ZodBoolean;
 }, z.core.$strip>;
 type DoctorEmails = z.infer<typeof DoctorEmailsSchema>;
+/** An active `api_keys` row (not revoked, not expired); issue #43. Never the secret. */
+declare const DoctorApiKeySchema: z.ZodObject<{
+  name: z.ZodString;
+  prefix: z.ZodString;
+  scope: z.ZodString;
+  createdAt: z.ZodISODateTime;
+  lastUsedAt: z.ZodNullable<z.ZodISODateTime>;
+  expiresAt: z.ZodNullable<z.ZodISODateTime>;
+  ageDays: z.ZodNumber;
+}, z.core.$strip>;
+type DoctorApiKey = z.infer<typeof DoctorApiKeySchema>;
+/** A key expiring within this many days is a warning. */
+declare const DOCTOR_KEY_EXPIRY_WARN_DAYS = 14;
 declare const DoctorReportSchema: z.ZodObject<{
   ok: z.ZodBoolean;
   checkedAt: z.ZodISODateTime;
@@ -6131,6 +6449,15 @@ declare const DoctorReportSchema: z.ZodObject<{
     unratedSubscriptions: z.ZodNumber;
     carriedCharges: z.ZodNumber;
   }, z.core.$strip>>;
+  apiKeys: z.ZodOptional<z.ZodArray<z.ZodObject<{
+    name: z.ZodString;
+    prefix: z.ZodString;
+    scope: z.ZodString;
+    createdAt: z.ZodISODateTime;
+    lastUsedAt: z.ZodNullable<z.ZodISODateTime>;
+    expiresAt: z.ZodNullable<z.ZodISODateTime>;
+    ageDays: z.ZodNumber;
+  }, z.core.$strip>>>;
   warnings: z.ZodArray<z.ZodObject<{
     code: z.ZodString;
     severity: z.ZodEnum<{
@@ -6163,6 +6490,12 @@ type DoctorFacts = {
   events?: DoctorEvents;
   /** Overage facts (MF5); omitted: no overage section in the report. */
   overage?: DoctorOverage;
+  /** Currencies the product sells by bank transfer (switch on and a deployment IBAN); omitted: none. */
+  bankTransfer?: {
+    currencies: string[];
+  };
+  /** Active API keys; omitted: no `apiKeys` section in the report. */
+  apiKeys?: Omit<DoctorApiKey, 'ageDays'>[];
 };
 /** Email readiness from settings and the deployment's transport (pure). */
 declare function emailReadinessOf(settings: DoctorFacts['settings'], transport: NonNullable<DoctorFacts['emailTransport']>): DoctorEmails;
@@ -6175,4 +6508,4 @@ declare function hostedReadinessOf(settings: DoctorFacts['settings']): DoctorHos
 /** Olgulardan raporu türetir (saf): endpoint teşhisleri, hosted hazırlığı, uyarılar ve `ok`. */
 declare function buildDoctorReport(facts: DoctorFacts): DoctorReport;
 //#endregion
-export { WebhookEndpointStatus as $, Consent as $a, InvoiceStatusSchema as $i, MeterCreditsOptions as $n, MeterCreditBenefitDefSchema as $o, ResolvedBenefits as $r, MeterLowAtSchema as $s, BankTransferInstructionsEmail as $t, DoctorSeveritySchema as A, PortalSessionError as Aa, ErrorResponseSchema as Ac, InvoiceIssueResponseSchema as Ai, emailLocaleOf as An, PriceDef as Ao, EventsIngestInput as Ar, MeterChargeListSchema as As, MeterChargeMode as At, hostedReadinessOf as B, CheckoutPrefill as Ba, InvoicePaymentStatusSchema as Bc, StewardCapability as Bi, PlanSetMode as Bn, BenefitFeatureType as Bo, IngestRejectionSchema as Br, MeterDef as Bs, ReturnOriginSchema as Bt, DoctorProvider as C, SubscriptionChangeInput as Ca, EntitlementValue as Cc, GrantCreateResponseSchema as Ci, NotificationEmailsSchema as Cn, MAX_CATALOG_METERED_PRICES as Co, EventExternalIdSchema as Cr, MeterAggregation as Cs, DEFAULT_PORTAL_TTL_MINUTES as Ct, DoctorSettings as D, PortalSession as Da, ErrorCategory as Dc, HEADER_REQUEST_ID as Di, PriceChangeNoticeMeteredRateSchema as Dn, PlanDef as Do, EventMetadataValue as Dr, MeterChargeLine as Ds, EventsSettingsSchema as Dt, DoctorReportSchema as E, PORTAL_SESSION_ERRORS as Ea, EntitlementsSchema as Ec, HEADER_IDEMPOTENCY_KEY as Ei, PriceChangeNoticeMeteredRate as En, METERED_PRICE_TAX_MISMATCH as Eo, EventMetadataSchema as Er, MeterCharge as Es, EventsSettingsPatchSchema as Et, DoctorWarningCode as F, BankTransferRecordedSchema as Fa, Interval as Fc, ManualInvoiceResponse as Fi, liveSubscriptionOf as Fn, BENEFIT_TYPES as Fo, IngestEvent as Fr, MeterCreditEntryKind as Fs, PaymentDueDaysSchema as Ft, WebhookEndpoint as G, CheckoutSessionCreateInput as Ga, InvoiceIssueInputSchema as Gi, PlanSetWarningCode as Gn, CatalogBenefitSchema as Go, EntitlementRulesCatalog as Gr, MeterFilterCondition as Gs, WebUrlSchema as Gt, EventTypeSchema as H, CheckoutRedirectTarget as Ha, UncancelSubscriptionResponseSchema as Hi, PlanSetResponse as Hn, BenefitType as Ho, isEventTimestampInRange as Hr, MeterDefSchema as Hs, SettingsLocale as Ht, DoctorWarningSchema as I, CHECKOUT_ERRORS as Ia, IntervalSchema as Ic, ManualInvoiceResponseSchema as Ii, uniqueEmails as In, BenefitDef as Io, IngestEventSchema as Ir, MeterCreditEntryKindSchema as Is, ProductSettings as It, WebhookEndpointList as J, CheckoutSessionCreated as Ja, InvoicePaymentSession as Ji, ResyncResultSchema as Jn, FeatureFlagBenefitDefSchema as Jo, LIVE_SUBSCRIPTION_STATUSES as Jr, MeterFilterOperator as Js, eventsSettingsOf as Jt, WebhookEndpointCreateInput as K, CheckoutSessionCreateInputSchema as Ka, InvoiceLine as Ki, PlanSetWarningSchema as Kn, FeatureFlagAccountBenefit as Ko, EntitlementRulesGrant as Kr, MeterFilterGroup as Ks, applySettingsPatch as Kt, buildDoctorReport as L, CheckoutConsentInput as La, InvoiceBillingReason as Lc, MeResponse as Li, PLAN_SET_MODES as Ln, BenefitDefSchema as Lo, IngestRejectCode as Lr, MeterCreditEntrySchema as Ls, ProductSettingsPatch as Lt, DoctorUnsellablePriceSchema as M, BankTransferRecordInput as Ma, INVOICE_BILLING_REASONS as Mc, InvoiceVoidResponseSchema as Mi, emailTemplateOf as Mn, PriceSchema as Mo, EventsIngestResult as Mr, MeterChargeStatus as Ms, MeteringSettings as Mt, DoctorUnsellableReason as N, BankTransferRecordInputSchema as Na, INVOICE_PAYMENT_STATUSES as Nc, InvoiceWaiveResponse as Ni, emailTemplateSettings as Nn, AccountBenefit as No, EventsIngestResultSchema as Nr, MeterChargeStatusSchema as Ns, MeteringSettingsPatchSchema as Nt, DoctorSettingsSchema as O, PortalSessionCreateInput as Oa, ErrorCategorySchema as Oc, HEADER_SDK as Oi, applyEmailSettingsPatch as On, PlanDefSchema as Oo, EventMetadataValueSchema as Or, MeterChargeLineSchema as Os, LateGraceMinutesSchema as Ot, DoctorWarning as P, BankTransferRecorded as Pa, IdSchema as Pc, InvoiceWaiveResponseSchema as Pi, isEmailRelevant as Pn, AccountBenefitSchema as Po, INGEST_REJECT_CODES as Pr, MeterCreditEntry as Ps, MeteringSettingsSchema as Pt, WebhookEndpointSchema as Q, CheckoutStatusSchema as Qa, InvoiceSchema as Qi, MeterCreditBenefit as Qn, MeterCreditBenefitDef as Qo, ResolvedBenefit as Qr, MeterLabelSchema as Qs, BILLING_PATH_PLACEHOLDERS as Qt, emailReadinessOf as R, CheckoutConsentInputSchema as Ra, InvoiceBillingReasonSchema as Rc, MeResponseSchema as Ri, PlanSetInput as Rn, BenefitDescription as Ro, IngestRejectCodeSchema as Rr, MeterCreditProperties as Rs, ProductSettingsPatchSchema as Rt, DoctorOverageSchema as S, Subscription as Sa, ERROR_CATEGORIES as Sc, GrantCreateResponse as Si, NoticedMeteredRateSchema as Sn, MAX_CATALOG_BENEFITS as So, EVENT_TIMESTAMP_MAX_SKEW_MINUTES as Sr, METER_STANDINGS as Ss, DEFAULT_PAYMENT_DUE_DAYS as St, DoctorReport as T, SubscriptionSchema as Ta, Entitlements as Tc, HEADER_API_VERSION as Ti, PriceChangeNoticeEmailSchema as Tn, MAX_PLAN_BENEFITS as To, EventMetadataKeySchema as Tr, MeterAggregationSchema as Ts, EventsSettings as Tt, WEBHOOK_ENDPOINT_STATUSES as U, CheckoutReturnStatus as Ua, Invoice as Ui, PlanSetResponseSchema as Un, BenefitTypeSchema as Uo, BenefitRulesDefinition as Ur, MeterFilter as Us, SettingsLocaleSchema as Ut, DEFAULT_ENDPOINT_EVENT_TYPES as V, CheckoutPrefillSchema as Va, MetadataSchema as Vc, UncancelSubscriptionResponse as Vi, PlanSetModeSchema as Vn, BenefitSourceSchema as Vo, hasControlCharacters as Vr, MeterDefInput as Vs, SETTINGS_LOCALES as Vt, WEBHOOK_SECRET_PREFIX as W, CheckoutSession as Wa, InvoiceIssueInput as Wi, PlanSetWarning as Wn, CatalogBenefit as Wo, BenefitRulesSubscription as Wr, MeterFilterClause as Ws, TtlMinutesSchema as Wt, WebhookEndpointRotateInput as X, CheckoutSessionSchema as Xa, InvoicePaymentSessionCreateInputSchema as Xi, MeterChargeTotalsLine as Xn, FeatureFlagPropertiesSchema as Xo, ResolveBenefitsInput as Xr, MeterFilterValue as Xs, meteringSettingsOf as Xt, WebhookEndpointListSchema as Y, CheckoutSessionCreatedSchema as Ya, InvoicePaymentSessionCreateInput as Yi, GrantedMeterCredit as Yn, FeatureFlagProperties as Yo, OVERRIDE_BENEFIT_SOURCE as Yr, MeterFilterSchema as Ys, isReturnUrlAllowed as Yt, WebhookEndpointRotateInputSchema as Z, CheckoutStatus as Za, InvoicePaymentSessionSchema as Zi, MeterContribution as Zn, MeterCreditAccountBenefit as Zo, ResolveEntitlementsInput as Zr, MeterLabel as Zs, returnOriginsOf as Zt, DoctorEventsSchema as _, MAX_GRANT_BENEFITS as _a, AmountMinorSchema as _c, ChangeSubscriptionResponseSchema as _i, EmailTemplateSettingsSchema as _n, CatalogSyncResult as _o, EVENT_METADATA_KEY_MAX_LENGTH as _r, METER_CREDIT_ENTRY_KINDS as _s, DEFAULT_CHECKOUT_TTL_MINUTES as _t, DOCTOR_ROLLUP_LAG_WARN_SECONDS as a, ManualInvoiceInput as aa, MeterPeriodStatusSchema as ac, ERROR_CODES as ai, EMAIL_TEMPLATE_BY_EVENT as an, PaymentMethodSchema as ao, contributionOf as ar, AccountMeters as as, webhookEndpointUrlProblem as at, DoctorHostedSchema as b, Stats as ba, CurrencySchema as bc, CreditGrantResponse as bi, MAX_NOTIFICATION_EMAILS as bn, FeatureDefSchema as bo, EVENT_NAME_MAX_LENGTH as br, METER_FILTER_OPERATORS as bs, DEFAULT_METER_CHARGE_MODE as bt, DoctorBillingSchema as c, ManualInvoiceLineInputSchema as ca, MeterUnitsSchema as cc, errorCodeSpec as ci, EmailRelevanceFacts as cn, checkoutRedirectUrl as co, meterCreditsOf as cr, CatalogMeterSchema as cs, BankTransferSettingsPatchSchema as ct, DoctorEmails as d, CancelSubscriptionInput as da, MeteredPriceDefSchema as dc, AccountDetailSchema as di, EmailSettingsPatch as dn, Catalog as do, periodBoundsOf as dr, DEFAULT_METER_LOW_AT as ds, BillingSettingsPatchSchema as dt, InvoiceVoidInput as ea, MeterPeriod as ec, ResolvedEntitlements as ei, BankTransferInstructionsEmailSchema as en, ConsentSchema as eo, MeterRulesEvent as er, featureValueMatchesType as es, WebhookEndpointStatusSchema as et, DoctorEmailsSchema as f, CancelSubscriptionInputSchema as fa, MeteredPriceSchema as fc, AccountUpsertResponse as fi, EmailSettingsPatchSchema as fn, CatalogPlan as fo, rateOverage as fr, DecimalUnitsStringSchema as fs, BillingSettingsSchema as ft, DoctorEvents as g, GrantSchema as ga, ActorRefSchema as gc, ChangeSubscriptionResponse as gi, EmailTemplateSettings as gn, CatalogSyncInputSchema as go, EVENTS_INGEST_MAX_EVENTS as gr, METER_CHARGE_STATUSES as gs, DEFAULT_BANK_TRANSFER_PAYMENT_DAYS as gt, DoctorEndpointSchema as h, GrantCreateInputSchema as ha, API_VERSION as hc, CancelSubscriptionResponseSchema as hi, EmailTemplateSchema as hn, CatalogSyncInput as ho, EVENTS_INGEST_MAX_BYTES as hr, METER_AGGREGATION_KINDS as hs, BrandingSchema as ht, DOCTOR_REQUIRED_LEGAL_LINKS as i, MANUAL_INVOICE_MAX_AMOUNT_MINOR as ia, MeterPeriodStatus as ic, resolveEntitlements as ii, EMAIL_TEMPLATES as in, PaymentMethod as io, consumptionOf as ir, AccountMeterSchema as is, generateWebhookSecret as it, DoctorUnsellablePrice as j, PortalSessionSchema as ja, ExternalRefSchema as jc, InvoiceVoidResponse as ji, emailRecipients as jn, PriceDefSchema as jo, EventsIngestInputSchema as jr, MeterChargeSchema as js, MeterChargeModeSchema as jt, DoctorSeverity as k, PortalSessionCreateInputSchema as ka, ErrorResponse as kc, InvoiceIssueResponse as ki, billingPageUrl as kn, Price as ko, EventNameSchema as kr, MeterChargeList as ks, METER_CHARGE_MODES as kt, DoctorCatalog as l, manualInvoiceTotals as la, MeteredPrice as lc, isKnownErrorCode as li, EmailSenderSchema as ln, AccountsRefreshResult as lo, overageCapReached as lr, CreditGrantInput as ls, BankTransferSettingsSchema as lt, DoctorEndpointDiagnosis as m, GrantCreateInput as ma, meterFilterClauseOf as mc, CancelSubscriptionResponse as mi, EmailTemplate as mn, CatalogSchema as mo, standingOf as mr, MAX_METER_UNITS as ms, BrandingPatchSchema as mt, DOCTOR_PROVIDER_ENVIRONMENTS as n, InvoiceWaiveInput as na, MeterPeriodListSchema as nc, isLiveSubscriptionStatus as ni, EMAIL_LOCALES as nn, MAX_CHECKOUT_CONSENT_DOCS as no, OverageRateInput as nr, isMeterCreditBenefit as ns, WebhookLastDeliverySchema as nt, DOCTOR_SEVERITIES as o, ManualInvoiceInputSchema as oa, MeterStanding as oc, ErrorCode as oi, EmailExtraTextSchema as on, ProviderPayload as oo, matchesFilter as or, AccountMetersSchema as os, BankTransferPaymentDaysSchema as ot, DoctorEndpoint as p, Grant as pa, canonicalMeterFilter as pc, AccountUpsertResponseSchema as pi, EmailSettingsSchema as pn, CatalogPlanSchema as po, rolloverOf as pr, MAX_METERED_PRICE_PER_UNITS as ps, Branding as pt, WebhookEndpointCreateInputSchema as q, CheckoutSessionCreateParsed as qa, InvoiceLineSchema as qi, ResyncResult as qn, FeatureFlagBenefitDef as qo, FEATURE_FLAG_BENEFIT_TYPE as qr, MeterFilterOperand as qs, billingSettingsOf as qt, DOCTOR_REQUIRED_BRANDING as r, InvoiceWaiveInputSchema as ra, MeterPeriodSchema as rc, resolveBenefits as ri, EMAIL_PAYLOAD_SCHEMAS as rn, PAYMENT_METHODS as ro, addUtcMonths as rr, AccountMeter as rs, WebhookSecretSchema as rt, DoctorBilling as s, ManualInvoiceLineInput as sa, MeterStandingSchema as sc, ErrorCodeSpec as si, EmailLocale as sn, ProviderPayloadSchema as so, meterChargeTotals as sr, CatalogMeter as ss, BankTransferSettings as st, DOCTOR_PENDING_BACKLOG_MS as t, InvoiceVoidInputSchema as ta, MeterPeriodList as tc, isGrantActive as ti, BillingPathSchema as tn, INDIVIDUAL_IDENTITY_PLACEHOLDER as to, MeterRulesMeter as tr, isFeatureFlagBenefit as ts, WebhookLastDelivery as tt, DoctorCatalogSchema as u, splitInclusiveTax as ua, MeteredPriceDef as uc, AccountDetail as ui, EmailSettings as un, AccountsRefreshResultSchema as uo, overageOf as ur, CreditGrantInputSchema as us, BillingSettings as ut, DoctorFacts as v, Payment as va, CodeSchema as vc, CheckoutSessionResponse as vi, InvoicePaymentDueEmail as vn, CatalogSyncResultSchema as vo, EVENT_METADATA_MAX_PAIRS as vr, METER_FILTER_MAX_CONDITIONS as vs, DEFAULT_EVENT_RETENTION_DAYS as vt, DoctorProviderSchema as w, SubscriptionChangeInputSchema as wa, EntitlementValueSchema as wc, HEADER_ACTOR_REF as wi, PriceChangeNoticeEmail as wn, MAX_CATALOG_METERS as wo, EventMetadata as wr, MeterAggregationKind as ws, EventRetentionDaysSchema as wt, DoctorOverage as x, StatsSchema as xa, DateTimeSchema as xc, CreditGrantResponseSchema as xi, NoticedMeteredRate as xn, FeatureTypeSchema as xo, EVENT_TIMESTAMP_MAX_AGE_DAYS as xr, METER_PERIOD_STATUSES as xs, DEFAULT_MIN_INVOICE_MINOR as xt, DoctorHosted as y, PaymentSchema as ya, Currency as yc, CheckoutSessionResponseSchema as yi, InvoicePaymentDueEmailSchema as yn, FeatureDef as yo, EVENT_METADATA_STRING_MAX_LENGTH as yr, METER_FILTER_MAX_DEPTH as ys, DEFAULT_LATE_GRACE_MINUTES as yt, endpointDiagnosisOf as z, CheckoutError as za, InvoicePaymentStatus as zc, STEWARD_CAPABILITIES as zi, PlanSetInputSchema as zn, BenefitDescriptionSchema as zo, IngestRejection as zr, MeterCreditPropertiesSchema as zs, ProductSettingsSchema as zt };
+export { WebhookEndpointRotateInput as $, CreditAdjustmentInput as $a, MeterStandingSchema as $c, InvoicePaymentSessionCreateInputSchema as $i, MeterChargeTotalsLine as $n, ProviderPayloadSchema as $o, ResolveBenefitsInput as $r, CatalogMeter as $s, meteringSettingsOf as $t, DoctorSettings as A, PortalSession as Aa, MeterCreditProperties as Ac, HEADER_REQUEST_ID as Ai, InvoiceBillingReasonSchema as Al, PriceChangeNoticeMeteredRateSchema as An, CheckoutConsentInputSchema as Ao, EventMetadataValue as Ar, BenefitDescription as As, EventsSettingsSchema as At, buildDoctorReport as B, ApiKeyListSchema as Ba, MeterFilterOperator as Bc, MeResponse as Bi, PLAN_SET_MODES as Bn, CheckoutSessionCreated as Bo, IngestRejectCode as Br, FeatureFlagBenefitDefSchema as Bs, ProductSettingsPatch as Bt, DoctorHostedSchema as C, Stats as Ca, MeterChargeSchema as Cc, CreditGrantResponse as Ci, ExternalRefSchema as Cl, MAX_NOTIFICATION_EMAILS as Cn, generateApiKeyToken as Co, EVENT_NAME_MAX_LENGTH as Cr, PriceDefSchema as Cs, DEFAULT_METER_CHARGE_MODE as Ct, DoctorProviderSchema as D, SubscriptionChangeInputSchema as Da, MeterCreditEntryKind as Dc, HEADER_ACTOR_REF as Di, Interval as Dl, PriceChangeNoticeEmail as Dn, BankTransferRecordedSchema as Do, EventMetadata as Dr, BENEFIT_TYPES as Ds, EventRetentionDaysSchema as Dt, DoctorProvider as E, SubscriptionChangeInput as Ea, MeterCreditEntry as Ec, GrantCreateResponseSchema as Ei, IdSchema as El, NotificationEmailsSchema as En, BankTransferRecorded as Eo, EventExternalIdSchema as Er, AccountBenefitSchema as Es, DEFAULT_PORTAL_TTL_MINUTES as Et, DoctorUnsellablePriceSchema as F, API_KEY_SCOPES as Fa, MeterFilter as Fc, InvoiceVoidResponseSchema as Fi, emailTemplateOf as Fn, CheckoutReturnStatus as Fo, EventsIngestResult as Fr, BenefitTypeSchema as Fs, MeteringSettings as Ft, EventTypeSchema as G, ApiKeyTokenSchema as Ga, MeterLowAtSchema as Gc, UncancelSubscriptionResponseSchema as Gi, PlanSetResponse as Gn, Consent as Go, isEventTimestampInRange as Gr, MeterCreditBenefitDefSchema as Gs, SettingsLocale as Gt, endpointDiagnosisOf as H, ApiKeySchema as Ha, MeterFilterValue as Hc, STEWARD_CAPABILITIES as Hi, PlanSetInputSchema as Hn, CheckoutSessionSchema as Ho, IngestRejection as Hr, FeatureFlagPropertiesSchema as Hs, ProductSettingsSchema as Ht, DoctorUnsellableReason as I, ApiKey as Ia, MeterFilterClause as Ic, InvoiceWaiveResponse as Ii, emailTemplateSettings as In, CheckoutSession as Io, EventsIngestResultSchema as Ir, CatalogBenefit as Is, MeteringSettingsPatchSchema as It, WebhookEndpoint as J, BankTransferListItem as Ja, MeterPeriodListSchema as Jc, InvoiceIssueInputSchema as Ji, PlanSetWarningCode as Jn, MAX_CHECKOUT_CONSENT_DOCS as Jo, EntitlementRulesCatalog as Jr, isMeterCreditBenefit as Js, WebUrlSchema as Jt, WEBHOOK_ENDPOINT_STATUSES as K, BANK_TRANSFER_LIST_STATUSES as Ka, MeterPeriod as Kc, Invoice as Ki, PlanSetResponseSchema as Kn, ConsentSchema as Ko, BenefitRulesDefinition as Kr, featureValueMatchesType as Ks, SettingsLocaleSchema as Kt, DoctorWarning as L, ApiKeyCreateInput as La, MeterFilterCondition as Lc, InvoiceWaiveResponseSchema as Li, isEmailRelevant as Ln, CheckoutSessionCreateInput as Lo, INGEST_REJECT_CODES as Lr, CatalogBenefitSchema as Ls, MeteringSettingsSchema as Lt, DoctorSeverity as M, PortalSessionCreateInputSchema as Ma, MeterDef as Mc, InvoiceIssueResponse as Mi, InvoicePaymentStatusSchema as Ml, billingPageUrl as Mn, CheckoutPrefill as Mo, EventNameSchema as Mr, BenefitFeatureType as Ms, METER_CHARGE_MODES as Mt, DoctorSeveritySchema as N, PortalSessionError as Na, MeterDefInput as Nc, InvoiceIssueResponseSchema as Ni, MetadataSchema as Nl, emailLocaleOf as Nn, CheckoutPrefillSchema as No, EventsIngestInput as Nr, BenefitSourceSchema as Ns, MeterChargeMode as Nt, DoctorReport as O, SubscriptionSchema as Oa, MeterCreditEntryKindSchema as Oc, HEADER_API_VERSION as Oi, IntervalSchema as Ol, PriceChangeNoticeEmailSchema as On, CHECKOUT_ERRORS as Oo, EventMetadataKeySchema as Or, BenefitDef as Os, EventsSettings as Ot, DoctorUnsellablePrice as P, PortalSessionSchema as Pa, MeterDefSchema as Pc, InvoiceVoidResponse as Pi, emailRecipients as Pn, CheckoutRedirectTarget as Po, EventsIngestInputSchema as Pr, BenefitType as Ps, MeterChargeModeSchema as Pt, WebhookEndpointListSchema as Q, BankTransferListStatusSchema as Qa, MeterStanding as Qc, InvoicePaymentSessionCreateInput as Qi, GrantedMeterCredit as Qn, ProviderPayload as Qo, OVERRIDE_BENEFIT_SOURCE as Qr, AccountMetersSchema as Qs, isReturnUrlAllowed as Qt, DoctorWarningCode as R, ApiKeyCreateInputSchema as Ra, MeterFilterGroup as Rc, ManualInvoiceResponse as Ri, liveSubscriptionOf as Rn, CheckoutSessionCreateInputSchema as Ro, IngestEvent as Rr, FeatureFlagAccountBenefit as Rs, PaymentDueDaysSchema as Rt, DoctorHosted as S, PaymentSchema as Sa, MeterChargeListSchema as Sc, CheckoutSessionResponseSchema as Si, ErrorResponseSchema as Sl, InvoicePaymentDueEmailSchema as Sn, RepriceResultSchema as So, EVENT_METADATA_STRING_MAX_LENGTH as Sr, PriceDef as Ss, DEFAULT_LATE_GRACE_MINUTES as St, DoctorOverageSchema as T, Subscription as Ta, MeterChargeStatusSchema as Tc, GrantCreateResponse as Ti, INVOICE_PAYMENT_STATUSES as Tl, NoticedMeteredRateSchema as Tn, BankTransferRecordInputSchema as To, EVENT_TIMESTAMP_MAX_SKEW_MINUTES as Tr, AccountBenefit as Ts, DEFAULT_PAYMENT_DUE_DAYS as Tt, hostedReadinessOf as U, ApiKeyScope as Ua, MeterLabel as Uc, StewardCapability as Ui, PlanSetMode as Un, CheckoutStatus as Uo, IngestRejectionSchema as Ur, MeterCreditAccountBenefit as Us, ReturnOriginSchema as Ut, emailReadinessOf as V, ApiKeyPrefixSchema as Va, MeterFilterSchema as Vc, MeResponseSchema as Vi, PlanSetInput as Vn, CheckoutSessionCreatedSchema as Vo, IngestRejectCodeSchema as Vr, FeatureFlagProperties as Vs, ProductSettingsPatchSchema as Vt, DEFAULT_ENDPOINT_EVENT_TYPES as W, ApiKeyScopeSchema as Wa, MeterLabelSchema as Wc, UncancelSubscriptionResponse as Wi, PlanSetModeSchema as Wn, CheckoutStatusSchema as Wo, hasControlCharacters as Wr, MeterCreditBenefitDef as Ws, SETTINGS_LOCALES as Wt, WebhookEndpointCreateInputSchema as X, BankTransferListSchema as Xa, MeterPeriodStatus as Xc, InvoiceLineSchema as Xi, ResyncResult as Xn, PaymentMethod as Xo, FEATURE_FLAG_BENEFIT_TYPE as Xr, AccountMeterSchema as Xs, billingSettingsOf as Xt, WebhookEndpointCreateInput as Y, BankTransferListItemSchema as Ya, MeterPeriodSchema as Yc, InvoiceLine as Yi, PlanSetWarningSchema as Yn, PAYMENT_METHODS as Yo, EntitlementRulesGrant as Yr, AccountMeter as Ys, applySettingsPatch as Yt, WebhookEndpointList as Z, BankTransferListStatus as Za, MeterPeriodStatusSchema as Zc, InvoicePaymentSession as Zi, ResyncResultSchema as Zn, PaymentMethodSchema as Zo, LIVE_SUBSCRIPTION_STATUSES as Zr, AccountMeters as Zs, eventsSettingsOf as Zt, DoctorEndpointDiagnosis as _, GrantCreateInput as _a, MeterAggregationSchema as _c, CancelSubscriptionResponse as _i, Entitlements as _l, EmailTemplate as _n, RepriceInput as _o, standingOf as _r, MAX_PLAN_BENEFITS as _s, BrandingPatchSchema as _t, DOCTOR_REQUIRED_LEGAL_LINKS as a, InvoiceWaiveInput as aa, MAX_METERED_PRICE_PER_UNITS as ac, isLiveSubscriptionStatus as ai, canonicalMeterFilter as al, EMAIL_LOCALES as an, MAX_API_KEY_TTL_DAYS as ao, OverageRateInput as ar, CatalogPlanSchema as as, WebhookLastDeliverySchema as at, DoctorEventsSchema as b, MAX_GRANT_BENEFITS as ba, MeterChargeLineSchema as bc, ChangeSubscriptionResponseSchema as bi, ErrorCategorySchema as bl, EmailTemplateSettingsSchema as bn, RepriceItemSchema as bo, EVENT_METADATA_KEY_MAX_LENGTH as br, PlanDefSchema as bs, DEFAULT_CHECKOUT_TTL_MINUTES as bt, DoctorApiKey as c, ManualInvoiceInput as ca, METER_CHARGE_STATUSES as cc, ERROR_CODES as ci, ActorRefSchema as cl, EMAIL_TEMPLATE_BY_EVENT as cn, MeterClosePeriodsInputSchema as co, contributionOf as cr, CatalogSyncInputSchema as cs, webhookEndpointUrlProblem as ct, DoctorBillingSchema as d, ManualInvoiceLineInputSchema as da, METER_FILTER_MAX_DEPTH as dc, errorCodeSpec as di, Currency as dl, EmailRelevanceFacts as dn, MeterRecomputeInput as do, meterCreditsOf as dr, FeatureDef as ds, BankTransferSettingsPatchSchema as dt, InvoicePaymentSessionSchema as ea, CatalogMeterSchema as ec, ResolveEntitlementsInput as ei, MeterUnitsSchema as el, returnOriginsOf as en, CreditAdjustmentInputSchema as eo, MeterContribution as er, checkoutRedirectUrl as es, WebhookEndpointRotateInputSchema as et, DoctorCatalog as f, manualInvoiceTotals as fa, METER_FILTER_OPERATORS as fc, isKnownErrorCode as fi, CurrencySchema as fl, EmailSenderSchema as fn, MeterRecomputeInputSchema as fo, overageCapReached as fr, FeatureDefSchema as fs, BankTransferSettingsSchema as ft, DoctorEndpoint as g, Grant as ga, MeterAggregationKind as gc, AccountUpsertResponseSchema as gi, EntitlementValueSchema as gl, EmailSettingsSchema as gn, RedeliveredEventSchema as go, rolloverOf as gr, MAX_CATALOG_METERS as gs, Branding as gt, DoctorEmailsSchema as h, CancelSubscriptionInputSchema as ha, MeterAggregation as hc, AccountUpsertResponse as hi, EntitlementValue as hl, EmailSettingsPatchSchema as hn, RedeliveredEvent as ho, rateOverage as hr, MAX_CATALOG_METERED_PRICES as hs, BillingSettingsSchema as ht, DOCTOR_REQUIRED_BRANDING as i, InvoiceVoidInputSchema as ia, DecimalUnitsStringSchema as ic, isGrantActive as ii, MeteredPriceSchema as il, BillingPathSchema as in, DunningPolicySchema as io, MeterRulesMeter as ir, CatalogPlan as is, WebhookLastDelivery as it, DoctorSettingsSchema as j, PortalSessionCreateInput as ja, MeterCreditPropertiesSchema as jc, HEADER_SDK as ji, InvoicePaymentStatus as jl, applyEmailSettingsPatch as jn, CheckoutError as jo, EventMetadataValueSchema as jr, BenefitDescriptionSchema as js, LateGraceMinutesSchema as jt, DoctorReportSchema as k, PORTAL_SESSION_ERRORS as ka, MeterCreditEntrySchema as kc, HEADER_IDEMPOTENCY_KEY as ki, InvoiceBillingReason as kl, PriceChangeNoticeMeteredRate as kn, CheckoutConsentInput as ko, EventMetadataSchema as kr, BenefitDefSchema as ks, EventsSettingsPatchSchema as kt, DoctorApiKeySchema as l, ManualInvoiceInputSchema as la, METER_CREDIT_ENTRY_KINDS as lc, ErrorCode as li, AmountMinorSchema as ll, EmailExtraTextSchema as ln, MeterClosePeriodsResult as lo, matchesFilter as lr, CatalogSyncResult as ls, BankTransferPaymentDaysSchema as lt, DoctorEmails as m, CancelSubscriptionInput as ma, METER_STANDINGS as mc, AccountDetailSchema as mi, ERROR_CATEGORIES as ml, EmailSettingsPatch as mn, MeterRecomputeResultSchema as mo, periodBoundsOf as mr, MAX_CATALOG_BENEFITS as ms, BillingSettingsPatchSchema as mt, DOCTOR_PENDING_BACKLOG_MS as n, InvoiceStatusSchema as na, CreditGrantInputSchema as nc, ResolvedBenefits as ni, MeteredPriceDef as nl, BankTransferInstructionsEmail as nn, DunningPolicy as no, MeterCreditsOptions as nr, AccountsRefreshResultSchema as ns, WebhookEndpointStatus as nt, DOCTOR_ROLLUP_LAG_WARN_SECONDS as o, InvoiceWaiveInputSchema as oa, MAX_METER_UNITS as oc, resolveBenefits as oi, meterFilterClauseOf as ol, EMAIL_PAYLOAD_SCHEMAS as on, MAX_NOTICE_DAYS as oo, addUtcMonths as or, CatalogSchema as os, WebhookSecretSchema as ot, DoctorCatalogSchema as p, splitInclusiveTax as pa, METER_PERIOD_STATUSES as pc, AccountDetail as pi, DateTimeSchema as pl, EmailSettings as pn, MeterRecomputeResult as po, overageOf as pr, FeatureTypeSchema as ps, BillingSettings as pt, WEBHOOK_SECRET_PREFIX as q, BankTransferList as qa, MeterPeriodList as qc, InvoiceIssueInput as qi, PlanSetWarning as qn, INDIVIDUAL_IDENTITY_PLACEHOLDER as qo, BenefitRulesSubscription as qr, isFeatureFlagBenefit as qs, TtlMinutesSchema as qt, DOCTOR_PROVIDER_ENVIRONMENTS as r, InvoiceVoidInput as ra, DEFAULT_METER_LOW_AT as rc, ResolvedEntitlements as ri, MeteredPriceDefSchema as rl, BankTransferInstructionsEmailSchema as rn, DunningPolicyInput as ro, MeterRulesEvent as rr, Catalog as rs, WebhookEndpointStatusSchema as rt, DOCTOR_SEVERITIES as s, MANUAL_INVOICE_MAX_AMOUNT_MINOR as sa, METER_AGGREGATION_KINDS as sc, resolveEntitlements as si, API_VERSION as sl, EMAIL_TEMPLATES as sn, MeterClosePeriodsInput as so, consumptionOf as sr, CatalogSyncInput as ss, generateWebhookSecret as st, DOCTOR_KEY_EXPIRY_WARN_DAYS as t, InvoiceSchema as ta, CreditGrantInput as tc, ResolvedBenefit as ti, MeteredPrice as tl, BILLING_PATH_PLACEHOLDERS as tn, DUNNING_ACTIONS as to, MeterCreditBenefit as tr, AccountsRefreshResult as ts, WebhookEndpointSchema as tt, DoctorBilling as u, ManualInvoiceLineInput as ua, METER_FILTER_MAX_CONDITIONS as uc, ErrorCodeSpec as ui, CodeSchema as ul, EmailLocale as un, MeterClosePeriodsResultSchema as uo, meterChargeTotals as ur, CatalogSyncResultSchema as us, BankTransferSettings as ut, DoctorEndpointSchema as v, GrantCreateInputSchema as va, MeterCharge as vc, CancelSubscriptionResponseSchema as vi, EntitlementsSchema as vl, EmailTemplateSchema as vn, RepriceInputSchema as vo, EVENTS_INGEST_MAX_BYTES as vr, METERED_PRICE_TAX_MISMATCH as vs, BrandingSchema as vt, DoctorOverage as w, StatsSchema as wa, MeterChargeStatus as wc, CreditGrantResponseSchema as wi, INVOICE_BILLING_REASONS as wl, NoticedMeteredRate as wn, BankTransferRecordInput as wo, EVENT_TIMESTAMP_MAX_AGE_DAYS as wr, PriceSchema as ws, DEFAULT_MIN_INVOICE_MINOR as wt, DoctorFacts as x, Payment as xa, MeterChargeList as xc, CheckoutSessionResponse as xi, ErrorResponse as xl, InvoicePaymentDueEmail as xn, RepriceResult as xo, EVENT_METADATA_MAX_PAIRS as xr, Price as xs, DEFAULT_EVENT_RETENTION_DAYS as xt, DoctorEvents as y, GrantSchema as ya, MeterChargeLine as yc, ChangeSubscriptionResponse as yi, ErrorCategory as yl, EmailTemplateSettings as yn, RepriceItem as yo, EVENTS_INGEST_MAX_EVENTS as yr, PlanDef as ys, DEFAULT_BANK_TRANSFER_PAYMENT_DAYS as yt, DoctorWarningSchema as z, ApiKeyList as za, MeterFilterOperand as zc, ManualInvoiceResponseSchema as zi, uniqueEmails as zn, CheckoutSessionCreateParsed as zo, IngestEventSchema as zr, FeatureFlagBenefitDef as zs, ProductSettings as zt };

package/dist/_chunks/locale.d.ts

@@ -1,4 +1,4 @@
-import { Ar as EventsIngestInput, Ca as SubscriptionChangeInput, Da as PortalSession, Fi as ManualInvoiceResponse, G as WebhookEndpoint, Ga as CheckoutSessionCreateInput, Hn as PlanSetResponse, It as ProductSettings, J as WebhookEndpointList, Ja as CheckoutSessionCreated, Ji as InvoicePaymentSession, K as WebhookEndpointCreateInput, Li as MeResponse, Lt as ProductSettingsPatch, Mr as EventsIngestResult, Ni as InvoiceWaiveResponse, Oa as PortalSessionCreateInput, Rn as PlanSetInput, Si as GrantCreateResponse, T as DoctorReport, Vi as UncancelSubscriptionResponse, Wi as InvoiceIssueInput, X as WebhookEndpointRotateInput, Yi as InvoicePaymentSessionCreateInput, _o as CatalogSyncResult, aa as ManualInvoiceInput, as as AccountMeters, ba as Stats, bi as CreditGrantResponse, da as CancelSubscriptionInput, do as Catalog, ea as InvoiceVoidInput, fi as AccountUpsertResponse, gi as ChangeSubscriptionResponse, ho as CatalogSyncInput, ji as InvoiceVoidResponse, ki as InvoiceIssueResponse, ks as MeterChargeList, lo as AccountsRefreshResult, ls as CreditGrantInput, ma as GrantCreateInput, mi as CancelSubscriptionResponse, na as InvoiceWaiveInput, qn as ResyncResult, tc as MeterPeriodList, ui as AccountDetail, vi as CheckoutSessionResponse } from "./index.js";
+import { $ as WebhookEndpointRotateInput, $a as CreditAdjustmentInput, Aa as PortalSession, Bi as MeResponse, Bo as CheckoutSessionCreated, Bt as ProductSettingsPatch, Ca as Stats, Ci as CreditGrantResponse, Ea as SubscriptionChangeInput, Eo as BankTransferRecorded, Fr as EventsIngestResult, Gn as PlanSetResponse, Ia as ApiKey, Ii as InvoiceWaiveResponse, J as WebhookEndpoint, La as ApiKeyCreateInput, Lo as CheckoutSessionCreateInput, Mi as InvoiceIssueResponse, Nr as EventsIngestInput, O as DoctorReport, Pi as InvoiceVoidResponse, Qi as InvoicePaymentSessionCreateInput, Ri as ManualInvoiceResponse, Ti as GrantCreateResponse, Vn as PlanSetInput, Wi as UncancelSubscriptionResponse, Xn as ResyncResult, Y as WebhookEndpointCreateInput, Z as WebhookEndpointList, Za as BankTransferListStatus, Zi as InvoicePaymentSession, Zs as AccountMeters, _a as GrantCreateInput, _i as CancelSubscriptionResponse, _o as RepriceInput, aa as InvoiceWaiveInput, ca as ManualInvoiceInput, do as MeterRecomputeInput, hi as AccountUpsertResponse, ho as RedeliveredEvent, ja as PortalSessionCreateInput, lo as MeterClosePeriodsResult, ls as CatalogSyncResult, ma as CancelSubscriptionInput, no as DunningPolicy, pi as AccountDetail, po as MeterRecomputeResult, qa as BankTransferList, qc as MeterPeriodList, qi as InvoiceIssueInput, ra as InvoiceVoidInput, ro as DunningPolicyInput, rs as Catalog, so as MeterClosePeriodsInput, ss as CatalogSyncInput, tc as CreditGrantInput, ts as AccountsRefreshResult, wo as BankTransferRecordInput, xc as MeterChargeList, xi as CheckoutSessionResponse, xo as RepriceResult, yi as ChangeSubscriptionResponse, za as ApiKeyList, zt as ProductSettings } from "./index.js";
 import { O as AccountInclude, U as AccountState, q as AccountUpsertInput, w as AccountDeleteResponse } from "./events.js";
 //#region ../contract/src/client.d.ts
 type CallOptions = {
@@ -262,6 +262,45 @@ type Steward = {
       /** `status: inactive`; geri alınmaz (yeni endpoint açılır). */
       deactivate(id: string, options?: MutationOptions): Promise<WebhookEndpoint>;
     };
+    /**
+     * API keys of the product (issue #57). The caller generates the token (`generateApiKeyToken()`)
+     * and keeps it; steward never returns it. An admin key always expires (default 90 days).
+     */
+    apiKeys: {
+      list(): Promise<ApiKeyList>;
+      create(input: ApiKeyCreateInput, options?: MutationOptions): Promise<ApiKey>;
+      /** 409 `api_key_self_revoke` for the key making the call. */
+      revoke(prefix: string, options?: MutationOptions): Promise<ApiKey>;
+    };
+    dunning: {
+      /** The stored policy, or the default. */
+      get(): Promise<DunningPolicy>;
+      set(policy: DunningPolicyInput, options?: MutationOptions): Promise<DunningPolicy>;
+    };
+    events: {
+      /** Requeues every delivery of one event (dead ones included); 404 `event_not_found`. */
+      redeliver(eventId: string, options?: MutationOptions): Promise<RedeliveredEvent>;
+    };
+    subscriptions: {
+      /** Moves a plan's subscriptions to its current price and metered rates; `dryRun: true` writes nothing. */
+      reprice(input: RepriceInput, options?: MutationOptions): Promise<RepriceResult>;
+    };
+    meters: {
+      /** Rebuilds the account's open usage periods from the raw events. */
+      recompute(accountRef: string, input?: MeterRecomputeInput, options?: MutationOptions): Promise<MeterRecomputeResult>;
+      /** Closes the account's closing periods now instead of after the late window. */
+      closePeriods(accountRef: string, input?: MeterClosePeriodsInput, options?: MutationOptions): Promise<MeterClosePeriodsResult>;
+    };
+    credits: {
+      /** Signed units: negative = `adjustment` (admin only), positive = `manual_grant`. */
+      adjust(accountRef: string, input: CreditAdjustmentInput, options?: MutationOptions): Promise<CreditGrantResponse>;
+    };
+    bankTransfers: {
+      /** `pending` (default): waiting for a transfer, by deadline; `expired`: the last 30 days. */
+      list(status?: BankTransferListStatus): Promise<BankTransferList>;
+      /** Records a transfer seen on the bank account (exact amount; see the contract's errors). */
+      record(input: BankTransferRecordInput, options?: MutationOptions): Promise<BankTransferRecorded>;
+    };
   };
 };
 declare function createSteward(options?: StewardOptions): Steward;