@wildo-ai/saas-models 1.1.1 → 1.1.3

package/dist/esm/billing/billing-configuration.shared.schemas.js

@@ -16,23 +16,41 @@ export const BillingConfigurationSchema = z.object({
     enabled: z.boolean().default(false),
     /** Which billing provider to use (e.g., 'stripe') */
     providerRef: z.string().optional(),
-    /** Webhook configuration */
-    webhooks: z.object({
-        /** Path for billing webhook endpoint */
-        path: z.string().default('/api/v1/webhooks/billing'),
-        /** Reference to the webhook signing secret (resolved from secrets at runtime) */
-        signingSecretRef: z.string().optional(),
-    }).optional(),
-    /** Default ISO 4217 currency for new billing accounts / products */
+    /*
+     * NO `webhooks` block. `path` and `signingSecretRef` were declared here and read by NOTHING —
+     * `signingSecretRef` had zero references outside its own declaration — and they were removed on
+     * 2026-09-08 (#408) rather than relabelled, because unlike the commercial-intent keys below they
+     * were not even an input to anything.
+     *
+     * The route and the signing secret both come from the provider module's `WEBHOOK_ORIGINATOR`
+     * contract: `buildWebhookEndpoints` mounts it at `/api/v1/webhooks/<provider>/billing`. That is
+     * the single authority, and `webhook-auto-controller.backend.service.ts` already recorded the
+     * same conclusion when endpoint-level path/secret extras were dropped as dead in the 2026-05-06
+     * reshape. This block was the copy that survived that sweep.
+     */
+    /**
+     * DECLARATION-ONLY (#408, 2026-09-08). Read by the application-creation commercial-model brief and
+     * by no runtime billing path: nothing validates a product's currency against these, and what
+     * reaches the provider is each price's own `currency`. Authoring them records the commercial
+     * intent a reviewer reads; it enforces nothing.
+     */
     defaultCurrency: CurrencySchema.default('USD'),
-    /** Supported currencies (for multi-currency apps) */
+    /** DECLARATION-ONLY — see `defaultCurrency`. */
     supportedCurrencies: z.array(CurrencySchema).default(['USD']),
     /**
      * Tax configuration — calculation is ALWAYS delegated to provider (Stripe Tax, etc.).
      * We never calculate tax locally.
      */
     tax: z.object({
-        /** How the provider handles tax calculation */
+        /**
+         * Whether the PROVIDER computes tax on a purchase. READ since 2026-09-08 (#408): the checkout
+         * path — the only production purchase route — sends `automaticTax` from this value.
+         *
+         * It reached nothing before that, so `PROVIDER_MANAGED` changed no behaviour and the provider
+         * account's own configuration silently decided. Enabling it changes invoice totals and the tax
+         * amounts persisted against them, which is why it is a decision an application makes rather
+         * than a default the framework picks.
+         */
         calculationMode: z.enum(TaxCalculationMode).default(TaxCalculationMode.DISABLED),
         /**
          * How prices are DISPLAYED to users (does not affect provider calculation).
@@ -41,7 +59,10 @@ export const BillingConfigurationSchema = z.object({
          * - 'inclusive': Prices shown including tax (TTC / inc-VAT). Tax is embedded.
          *   Common for consumer-facing. Shows "€49/mo TTC" and tax is extracted at checkout.
          *
-         * Overridable per product (product.taxDisplayMode) and per price (price.taxBehavior).
+         * DECLARATIVE ONLY: nothing reads this value. It is not an application-wide default that
+         * `product.taxDisplayMode` and `price.taxBehavior` override, because there is no resolution
+         * chain between the three. What reaches the billing provider is each price's own
+         * `taxBehavior`, and only that.
          */
         defaultDisplayMode: z.enum(TaxDisplayMode).default(TaxDisplayMode.EXCLUSIVE),
     }).default(() => ({
@@ -58,7 +79,12 @@ export const BillingConfigurationSchema = z.object({
      * Controls whether the promotions subsystem is active.
      */
     promotions: z.object({
-        /** Whether promotions/coupons are enabled */
+        /**
+         * DECLARATION-ONLY (#408, 2026-09-08), and the sharpest of them: the promotions subsystem runs
+         * UNCONDITIONALLY. Promotion codes are applied at `billing-account.mutations` and resolved in
+         * `billing-state`, neither of which consults this flag — so setting it `false` disables
+         * nothing, which is a stronger statement than "is not read".
+         */
         enabled: z.boolean().default(true),
     }).default(() => ({
         enabled: true,
@@ -68,7 +94,10 @@ export const BillingConfigurationSchema = z.object({
      * Controls whether credit pools are enabled and defines default pool behavior.
      */
     creditPools: z.object({
-        /** Whether credit pool functionality is enabled (auto-creation on CREDIT_PACK purchase) */
+        /**
+         * DECLARATION-ONLY (#408, 2026-09-08) — same shape as `promotions.enabled` above, and the same
+         * correction: credit pools run unconditionally in `billing-state`, so `false` disables nothing.
+         */
         enabled: z.boolean().default(true),
         /** Default initial balance for auto-created pools (default 0) */
         defaultInitialBalance: z.number().min(0).default(0),
@@ -80,13 +109,26 @@ export const BillingConfigurationSchema = z.object({
     defaultBehaviorPolicy: z.object({
         /** Default trial days for new subscriptions (0 = no trial) */
         defaultTrialDays: z.number().min(0).default(0),
-        /** Grace period before marking subscription as past_due after failed payment */
+        /**
+         * DECLARATION-ONLY (#408, 2026-09-08). Dunning — how long to wait and how often to retry after a
+         * failed payment — is configured at the PROVIDER, on its own schedule, and nothing here reaches
+         * it. Binding them would mean writing a provider's retry settings from application config, which
+         * is a different feature from reading a policy at a call site.
+         */
         paymentGracePeriodDays: z.number().min(0).default(3),
-        /** Maximum automatic payment retries before giving up */
+        /** DECLARATION-ONLY — see `paymentGracePeriodDays`. */
         maxPaymentRetries: z.number().min(0).default(3),
-        /** Default proration when no product-specific policy */
+        /** Default proration when no product-specific policy. READ by the change-plan path. */
         defaultProration: z.enum(ProrationBehavior).default(ProrationBehavior.CREATE_PRORATIONS),
-        /** Default cancellation behavior */
+        /**
+         * Default cancellation timing when neither the caller nor the plan product names one.
+         *
+         * READ since 2026-09-08 (#408). It was dead until then, and it is bound rather than relabelled
+         * because — unlike its neighbours above — it needs no provider call at all: cancellation timing
+         * is resolved locally, so the only thing standing between this key and meaning something was a
+         * reader. The chain is caller → product `behaviorPolicy.cancellation.defaultBehavior` → this →
+         * period-end.
+         */
         defaultCancellation: z.enum(BillingTiming).default(BillingTiming.AT_PERIOD_END),
     }).default(() => ({
         defaultTrialDays: 0,

package/dist/esm/billing/billing-configuration.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"billing-configuration.shared.schemas.js","sourceRoot":"","sources":["../../../../src/billing/billing-configuration.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,aAAa,GACd,MAAM,gCAAgC,CAAC;AAExC,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,sDAAsD;IACtD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,qDAAqD;IACrD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAElC,4BAA4B;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB,wCAAwC;QACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC;QACpD,iFAAiF;QACjF,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACxC,CAAC,CAAC,QAAQ,EAAE;IAEb,oEAAoE;IACpE,eAAe,EAAE,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC;IAC9C,qDAAqD;IACrD,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC;IAE7D;;;OAGG;IACH,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ,+CAA+C;QAC/C,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC;QAEhF;;;;;;;;WAQG;QACH,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC;KAC7E,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAChB,eAAe,EAAE,kBAAkB,CAAC,QAAQ;QAC5C,kBAAkB,EAAE,cAAc,CAAC,SAAS;KAC7C,CAAC,CAAC;IAEH;;;OAGG;IACH,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAElG;;;OAGG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB,6CAA6C;QAC7C,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KACnC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAChB,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IAEH;;;OAGG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,2FAA2F;QAC3F,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,iEAAiE;QACjE,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;KACpD,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAChB,OAAO,EAAE,IAAI;QACb,qBAAqB,EAAE,CAAC;KACzB,CAAC,CAAC;IAEH,uFAAuF;IACvF,qBAAqB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC9B,8DAA8D;QAC9D,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9C,gFAAgF;QAChF,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACpD,yDAAyD;QACzD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/C,wDAAwD;QACxD,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,iBAAiB,CAAC;QACxF,oCAAoC;QACpC,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC;KAChF,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAChB,gBAAgB,EAAE,CAAC;QACnB,sBAAsB,EAAE,CAAC;QACzB,iBAAiB,EAAE,CAAC;QACpB,gBAAgB,EAAE,iBAAiB,CAAC,iBAAiB;QACrD,mBAAmB,EAAE,aAAa,CAAC,aAAa;KACjD,CAAC,CAAC;CACJ,CAAC,CAAC","sourcesContent":["/**\n * Billing Configuration Schema (Shared)\n *\n * Top-level billing configuration that custom apps provide at startup.\n * Controls: provider selection, currency, tax policy, enabled scopes,\n * and default behavior policies.\n *\n * @see billing-and-features-system.md §6.7 (Billing Configuration)\n */\n\nimport { z } from 'zod';\nimport { CurrencySchema } from '@wildo-ai/zod-decorators';\nimport { ResourcePrimaryScope } from '../resources/resources.shared.schemas';\nimport {\n  TaxCalculationMode,\n  TaxDisplayMode,\n  ProrationBehavior,\n  BillingTiming,\n} from './billing-enums.shared.schemas';\n\nexport const BillingConfigurationSchema = z.object({\n  /** Master switch: is billing enabled for this app? */\n  enabled: z.boolean().default(false),\n  /** Which billing provider to use (e.g., 'stripe') */\n  providerRef: z.string().optional(),\n\n  /** Webhook configuration */\n  webhooks: z.object({\n    /** Path for billing webhook endpoint */\n    path: z.string().default('/api/v1/webhooks/billing'),\n    /** Reference to the webhook signing secret (resolved from secrets at runtime) */\n    signingSecretRef: z.string().optional(),\n  }).optional(),\n\n  /** Default ISO 4217 currency for new billing accounts / products */\n  defaultCurrency: CurrencySchema.default('USD'),\n  /** Supported currencies (for multi-currency apps) */\n  supportedCurrencies: z.array(CurrencySchema).default(['USD']),\n\n  /**\n   * Tax configuration — calculation is ALWAYS delegated to provider (Stripe Tax, etc.).\n   * We never calculate tax locally.\n   */\n  tax: z.object({\n    /** How the provider handles tax calculation */\n    calculationMode: z.enum(TaxCalculationMode).default(TaxCalculationMode.DISABLED),\n\n    /**\n     * How prices are DISPLAYED to users (does not affect provider calculation).\n     * - 'exclusive': Prices shown excluding tax (HT / ex-VAT). Tax added at checkout.\n     *   Common for B2B. Shows \"$49/mo\" and tax is added separately.\n     * - 'inclusive': Prices shown including tax (TTC / inc-VAT). Tax is embedded.\n     *   Common for consumer-facing. Shows \"€49/mo TTC\" and tax is extracted at checkout.\n     *\n     * Overridable per product (product.taxDisplayMode) and per price (price.taxBehavior).\n     */\n    defaultDisplayMode: z.enum(TaxDisplayMode).default(TaxDisplayMode.EXCLUSIVE),\n  }).default(() => ({\n    calculationMode: TaxCalculationMode.DISABLED,\n    defaultDisplayMode: TaxDisplayMode.EXCLUSIVE,\n  })),\n\n  /**\n   * Which scopes can have billing accounts (default: ORGANIZATIONS only).\n   * Can be extended to include USER_SELF (personal billing).\n   */\n  enabledScopes: z.array(z.enum(ResourcePrimaryScope)).default([ResourcePrimaryScope.ORGANIZATIONS]),\n\n  /**\n   * Promotions configuration.\n   * Controls whether the promotions subsystem is active.\n   */\n  promotions: z.object({\n    /** Whether promotions/coupons are enabled */\n    enabled: z.boolean().default(true),\n  }).default(() => ({\n    enabled: true,\n  })),\n\n  /**\n   * Credit pool configuration.\n   * Controls whether credit pools are enabled and defines default pool behavior.\n   */\n  creditPools: z.object({\n    /** Whether credit pool functionality is enabled (auto-creation on CREDIT_PACK purchase) */\n    enabled: z.boolean().default(true),\n    /** Default initial balance for auto-created pools (default 0) */\n    defaultInitialBalance: z.number().min(0).default(0),\n  }).default(() => ({\n    enabled: true,\n    defaultInitialBalance: 0,\n  })),\n\n  /** Global billing policy defaults (overridden by ProductBehaviorPolicy per product) */\n  defaultBehaviorPolicy: z.object({\n    /** Default trial days for new subscriptions (0 = no trial) */\n    defaultTrialDays: z.number().min(0).default(0),\n    /** Grace period before marking subscription as past_due after failed payment */\n    paymentGracePeriodDays: z.number().min(0).default(3),\n    /** Maximum automatic payment retries before giving up */\n    maxPaymentRetries: z.number().min(0).default(3),\n    /** Default proration when no product-specific policy */\n    defaultProration: z.enum(ProrationBehavior).default(ProrationBehavior.CREATE_PRORATIONS),\n    /** Default cancellation behavior */\n    defaultCancellation: z.enum(BillingTiming).default(BillingTiming.AT_PERIOD_END),\n  }).default(() => ({\n    defaultTrialDays: 0,\n    paymentGracePeriodDays: 3,\n    maxPaymentRetries: 3,\n    defaultProration: ProrationBehavior.CREATE_PRORATIONS,\n    defaultCancellation: BillingTiming.AT_PERIOD_END,\n  })),\n});\nexport type BillingConfiguration = z.infer<typeof BillingConfigurationSchema>;\n"]}
+{"version":3,"file":"billing-configuration.shared.schemas.js","sourceRoot":"","sources":["../../../../src/billing/billing-configuration.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EACL,kBAAkB,EAClB,cAAc,EACd,iBAAiB,EACjB,aAAa,GACd,MAAM,gCAAgC,CAAC;AAExC,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,sDAAsD;IACtD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,qDAAqD;IACrD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAElC;;;;;;;;;;;OAWG;IAEH;;;;;OAKG;IACH,eAAe,EAAE,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC;IAC9C,gDAAgD;IAChD,mBAAmB,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC;IAE7D;;;OAGG;IACH,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC;QACZ;;;;;;;;WAQG;QACH,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,QAAQ,CAAC;QAEhF;;;;;;;;;;;WAWG;QACH,kBAAkB,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC;KAC7E,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAChB,eAAe,EAAE,kBAAkB,CAAC,QAAQ;QAC5C,kBAAkB,EAAE,cAAc,CAAC,SAAS;KAC7C,CAAC,CAAC;IAEH;;;OAGG;IACH,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAElG;;;OAGG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC;QACnB;;;;;WAKG;QACH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;KACnC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAChB,OAAO,EAAE,IAAI;KACd,CAAC,CAAC;IAEH;;;OAGG;IACH,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB;;;WAGG;QACH,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAClC,iEAAiE;QACjE,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;KACpD,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAChB,OAAO,EAAE,IAAI;QACb,qBAAqB,EAAE,CAAC;KACzB,CAAC,CAAC;IAEH,uFAAuF;IACvF,qBAAqB,EAAE,CAAC,CAAC,MAAM,CAAC;QAC9B,8DAA8D;QAC9D,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC9C;;;;;WAKG;QACH,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QACpD,uDAAuD;QACvD,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC/C,uFAAuF;QACvF,gBAAgB,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,iBAAiB,CAAC;QACxF;;;;;;;;WAQG;QACH,mBAAmB,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC;KAChF,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAChB,gBAAgB,EAAE,CAAC;QACnB,sBAAsB,EAAE,CAAC;QACzB,iBAAiB,EAAE,CAAC;QACpB,gBAAgB,EAAE,iBAAiB,CAAC,iBAAiB;QACrD,mBAAmB,EAAE,aAAa,CAAC,aAAa;KACjD,CAAC,CAAC;CACJ,CAAC,CAAC","sourcesContent":["/**\n * Billing Configuration Schema (Shared)\n *\n * Top-level billing configuration that custom apps provide at startup.\n * Controls: provider selection, currency, tax policy, enabled scopes,\n * and default behavior policies.\n *\n * @see billing-and-features-system.md §6.7 (Billing Configuration)\n */\n\nimport { z } from 'zod';\nimport { CurrencySchema } from '@wildo-ai/zod-decorators';\nimport { ResourcePrimaryScope } from '../resources/resources.shared.schemas';\nimport {\n  TaxCalculationMode,\n  TaxDisplayMode,\n  ProrationBehavior,\n  BillingTiming,\n} from './billing-enums.shared.schemas';\n\nexport const BillingConfigurationSchema = z.object({\n  /** Master switch: is billing enabled for this app? */\n  enabled: z.boolean().default(false),\n  /** Which billing provider to use (e.g., 'stripe') */\n  providerRef: z.string().optional(),\n\n  /*\n   * NO `webhooks` block. `path` and `signingSecretRef` were declared here and read by NOTHING —\n   * `signingSecretRef` had zero references outside its own declaration — and they were removed on\n   * 2026-09-08 (#408) rather than relabelled, because unlike the commercial-intent keys below they\n   * were not even an input to anything.\n   *\n   * The route and the signing secret both come from the provider module's `WEBHOOK_ORIGINATOR`\n   * contract: `buildWebhookEndpoints` mounts it at `/api/v1/webhooks/<provider>/billing`. That is\n   * the single authority, and `webhook-auto-controller.backend.service.ts` already recorded the\n   * same conclusion when endpoint-level path/secret extras were dropped as dead in the 2026-05-06\n   * reshape. This block was the copy that survived that sweep.\n   */\n\n  /**\n   * DECLARATION-ONLY (#408, 2026-09-08). Read by the application-creation commercial-model brief and\n   * by no runtime billing path: nothing validates a product's currency against these, and what\n   * reaches the provider is each price's own `currency`. Authoring them records the commercial\n   * intent a reviewer reads; it enforces nothing.\n   */\n  defaultCurrency: CurrencySchema.default('USD'),\n  /** DECLARATION-ONLY — see `defaultCurrency`. */\n  supportedCurrencies: z.array(CurrencySchema).default(['USD']),\n\n  /**\n   * Tax configuration — calculation is ALWAYS delegated to provider (Stripe Tax, etc.).\n   * We never calculate tax locally.\n   */\n  tax: z.object({\n    /**\n     * Whether the PROVIDER computes tax on a purchase. READ since 2026-09-08 (#408): the checkout\n     * path — the only production purchase route — sends `automaticTax` from this value.\n     *\n     * It reached nothing before that, so `PROVIDER_MANAGED` changed no behaviour and the provider\n     * account's own configuration silently decided. Enabling it changes invoice totals and the tax\n     * amounts persisted against them, which is why it is a decision an application makes rather\n     * than a default the framework picks.\n     */\n    calculationMode: z.enum(TaxCalculationMode).default(TaxCalculationMode.DISABLED),\n\n    /**\n     * How prices are DISPLAYED to users (does not affect provider calculation).\n     * - 'exclusive': Prices shown excluding tax (HT / ex-VAT). Tax added at checkout.\n     *   Common for B2B. Shows \"$49/mo\" and tax is added separately.\n     * - 'inclusive': Prices shown including tax (TTC / inc-VAT). Tax is embedded.\n     *   Common for consumer-facing. Shows \"€49/mo TTC\" and tax is extracted at checkout.\n     *\n     * DECLARATIVE ONLY: nothing reads this value. It is not an application-wide default that\n     * `product.taxDisplayMode` and `price.taxBehavior` override, because there is no resolution\n     * chain between the three. What reaches the billing provider is each price's own\n     * `taxBehavior`, and only that.\n     */\n    defaultDisplayMode: z.enum(TaxDisplayMode).default(TaxDisplayMode.EXCLUSIVE),\n  }).default(() => ({\n    calculationMode: TaxCalculationMode.DISABLED,\n    defaultDisplayMode: TaxDisplayMode.EXCLUSIVE,\n  })),\n\n  /**\n   * Which scopes can have billing accounts (default: ORGANIZATIONS only).\n   * Can be extended to include USER_SELF (personal billing).\n   */\n  enabledScopes: z.array(z.enum(ResourcePrimaryScope)).default([ResourcePrimaryScope.ORGANIZATIONS]),\n\n  /**\n   * Promotions configuration.\n   * Controls whether the promotions subsystem is active.\n   */\n  promotions: z.object({\n    /**\n     * DECLARATION-ONLY (#408, 2026-09-08), and the sharpest of them: the promotions subsystem runs\n     * UNCONDITIONALLY. Promotion codes are applied at `billing-account.mutations` and resolved in\n     * `billing-state`, neither of which consults this flag — so setting it `false` disables\n     * nothing, which is a stronger statement than \"is not read\".\n     */\n    enabled: z.boolean().default(true),\n  }).default(() => ({\n    enabled: true,\n  })),\n\n  /**\n   * Credit pool configuration.\n   * Controls whether credit pools are enabled and defines default pool behavior.\n   */\n  creditPools: z.object({\n    /**\n     * DECLARATION-ONLY (#408, 2026-09-08) — same shape as `promotions.enabled` above, and the same\n     * correction: credit pools run unconditionally in `billing-state`, so `false` disables nothing.\n     */\n    enabled: z.boolean().default(true),\n    /** Default initial balance for auto-created pools (default 0) */\n    defaultInitialBalance: z.number().min(0).default(0),\n  }).default(() => ({\n    enabled: true,\n    defaultInitialBalance: 0,\n  })),\n\n  /** Global billing policy defaults (overridden by ProductBehaviorPolicy per product) */\n  defaultBehaviorPolicy: z.object({\n    /** Default trial days for new subscriptions (0 = no trial) */\n    defaultTrialDays: z.number().min(0).default(0),\n    /**\n     * DECLARATION-ONLY (#408, 2026-09-08). Dunning — how long to wait and how often to retry after a\n     * failed payment — is configured at the PROVIDER, on its own schedule, and nothing here reaches\n     * it. Binding them would mean writing a provider's retry settings from application config, which\n     * is a different feature from reading a policy at a call site.\n     */\n    paymentGracePeriodDays: z.number().min(0).default(3),\n    /** DECLARATION-ONLY — see `paymentGracePeriodDays`. */\n    maxPaymentRetries: z.number().min(0).default(3),\n    /** Default proration when no product-specific policy. READ by the change-plan path. */\n    defaultProration: z.enum(ProrationBehavior).default(ProrationBehavior.CREATE_PRORATIONS),\n    /**\n     * Default cancellation timing when neither the caller nor the plan product names one.\n     *\n     * READ since 2026-09-08 (#408). It was dead until then, and it is bound rather than relabelled\n     * because — unlike its neighbours above — it needs no provider call at all: cancellation timing\n     * is resolved locally, so the only thing standing between this key and meaning something was a\n     * reader. The chain is caller → product `behaviorPolicy.cancellation.defaultBehavior` → this →\n     * period-end.\n     */\n    defaultCancellation: z.enum(BillingTiming).default(BillingTiming.AT_PERIOD_END),\n  }).default(() => ({\n    defaultTrialDays: 0,\n    paymentGracePeriodDays: 3,\n    maxPaymentRetries: 3,\n    defaultProration: ProrationBehavior.CREATE_PRORATIONS,\n    defaultCancellation: BillingTiming.AT_PERIOD_END,\n  })),\n});\nexport type BillingConfiguration = z.infer<typeof BillingConfigurationSchema>;\n"]}

package/dist/esm/billing/billing-enums.shared.schemas.d.ts

@@ -5,13 +5,27 @@
  * These supersede the legacy enums from billing.shared.schemas.ts.
  *
  * Enums shared with the standard billing interface (PricingModel, BillingInterval,
- * TaxDisplayMode, SubscriptionStatus) are defined in @wildo-ai/external-connectors-models
- * and re-exported here for convenience.
+ * TaxDisplayMode, SubscriptionStatus, InvoiceStatus, ProrationBehavior) are defined in
+ * @wildo-ai/external-connectors-models and re-exported here for convenience.
  *
  * @see billing-and-features-system.md §6 (Billing Schemas)
  */
-export { PricingModel, BillingInterval, TaxDisplayMode, SubscriptionStatus } from '@wildo-ai/external-connectors-models';
+export { PricingModel, BillingInterval, TaxDisplayMode, SubscriptionStatus, InvoiceStatus, ProrationBehavior } from '@wildo-ai/external-connectors-models';
 /**
+ * @wildo_source:part:start saas.models.billing.catalog-vocabularies facet:layer:shared facet:audience:app-developer
+ *
+ * The vocabularies an application types into its own product catalogue — the `ProductDefinition[]`
+ * it exports from its shared library and hands to the engine with its module declarations.
+ *
+ * Imported from `@wildo-ai/saas-models`. `PricingModel`, `BillingInterval` and `ProrationBehavior`
+ * are re-exported from the connector models, because their values ARE the provider's wire values.
+ *
+ * ⚠️ **The catalogue is ONE-WAY.** Sync pushes only rows that have no provider link yet, so a product
+ * or price edited in the provider's own dashboard is never read back, never reconciled, and never
+ * reported. Removing a product from the array does not retire it at the provider and does not
+ * deactivate the existing row — nothing detects that a previously synced key has disappeared. Treat
+ * the array as the source of truth and make every change through it.
+ *
  * Product types available in the billing catalog.
  *
  * | Type        | Creates subscription? | Repeatable? | Grants features? | Usage tracked? |
@@ -49,11 +63,6 @@ export declare enum LimitGrantMode {
 /**
  * Proration behavior for plan changes (upgrade/downgrade).
  */
-export declare enum ProrationBehavior {
-    CREATE_PRORATIONS = "create_prorations",
-    NONE = "none",
-    ALWAYS_INVOICE = "always_invoice"
-}
 /**
  * Billing timing: when to apply plan changes.
  */
@@ -61,6 +70,7 @@ export declare enum BillingTiming {
     IMMEDIATE = "immediate",
     AT_PERIOD_END = "at_period_end"
 }
+/** @wildo_source:part:end saas.models.billing.catalog-vocabularies */
 /**
  * Metering aggregation window for usage records.
  */
@@ -85,24 +95,56 @@ export declare enum UsageSourceType {
     CUSTOM = "custom"
 }
 /**
- * Tax calculation mode: provider-managed or disabled.
+ * Where one metered usage row stands with respect to the provider flush.
+ *
+ * This was a BOOLEAN (`reportedToProvider`) until 2026-09-09, and the third state is the whole
+ * reason it is an enum now (#512). A boolean can say "not yet reported" and "reported", and the
+ * flush selects on the first — so a row that can NEVER be reported has nowhere to go. It stays
+ * pending, is re-selected by every run, fails identically, and grows an error backlog that no
+ * operator action can drain, on a five-minute schedule.
+ *
+ * The three states are genuinely distinct and must not be collapsed:
+ *
+ * - {@link PENDING} — the flush will try again. Every newly recorded row starts here.
+ * - {@link REPORTED} — the provider acknowledged the quantity. `reportedAt` says when. Terminal,
+ *   and money has moved: never move a row back out of this state.
+ * - {@link UNREPORTABLE} — the flush determined the row can never be reported, for a reason named
+ *   in `unreportableReason`. Terminal, and NO money moved. Marking such a row `REPORTED` instead
+ *   would drain the backlog just as well and would be a lie no later reader could detect, which is
+ *   exactly why the state exists rather than a shortcut.
  */
-export declare enum TaxCalculationMode {
-    PROVIDER_MANAGED = "provider_managed",
-    DISABLED = "disabled"
+export declare enum UsageRecordFlushState {
+    PENDING = "pending",
+    REPORTED = "reported",
+    UNREPORTABLE = "unreportable"
 }
 /**
- * Invoice status values (maps to Stripe invoice statuses).
+ * Why a usage row was determined to be permanently unreportable.
  *
- * Invoices are created and managed entirely by the billing provider.
- * We store a thin reference for status tracking and quick display.
+ * One member today, and it is a closed vocabulary rather than a free string because the operator
+ * reading a retained financial record needs to know which permanent condition applies — and because
+ * the distinction between a PERMANENT and a TRANSIENT failure is the judgement this whole state
+ * turns on. A billing account that merely has no `providerCustomerId` yet is transient: the account
+ * exists, provisioning may still complete, and such a row stays {@link UsageRecordFlushState.PENDING}.
+ * Only a condition that cannot resolve itself belongs here.
  */
-export declare enum InvoiceStatus {
-    DRAFT = "draft",
-    OPEN = "open",
-    PAID = "paid",
-    VOID = "void",
-    UNCOLLECTIBLE = "uncollectible"
+export declare enum UsageRecordUnreportableReason {
+    /**
+     * The billing account row no longer exists.
+     *
+     * Reachable by design: usage rows are RETAINED when their subject is erased (the tax/audit
+     * obligation on `usage-record.shared.schemas.ts`), so a deleted account legitimately leaves rows
+     * behind with no provider customer to report them to. Nothing can restore the mapping, so the
+     * quantity will never be billed and saying so on the row is the only honest outcome.
+     */
+    BILLING_ACCOUNT_DELETED = "billing_account_deleted"
+}
+/**
+ * Tax calculation mode: provider-managed or disabled.
+ */
+export declare enum TaxCalculationMode {
+    PROVIDER_MANAGED = "provider_managed",
+    DISABLED = "disabled"
 }
 /**
  * Billing-compatible scope types.
@@ -224,6 +266,20 @@ export declare enum BillingCheckoutMetadataKey {
     BILLING_ACCOUNT_ID = "wildo_billingAccountId",
     /** The catalog product key purchased — selects the credit pool and credits-per-unit on top-up. */
     PRODUCT_KEY = "wildo_productKey",
+    /**
+     * The PROMOTION row whose code the framework validated when it opened this checkout, so the
+     * redemption can be counted when the session COMPLETES (#518).
+     *
+     * Absent when the purchase used no code, which is the common case.
+     *
+     * Stamped rather than re-derived from the completed session, because the provider reports the
+     * DISCOUNT it applied and not the Wildo row that authorised it — and the row is what carries
+     * `maxRedemptions`. Like every key here it is written for the framework's own reconciliation and is
+     * never trusted as authority on its own: the redemption is counted with a compare-and-swap that
+     * refuses past the cap, so a tampered value can at worst count a redemption against a promotion
+     * that has room for one.
+     */
+    PROMOTION_ID = "wildo_promotionId",
     /**
      * The purchased quantity, as a decimal integer string (provider metadata values are strings).
      * Strictly parsed and bounded by {@link BILLING_CHECKOUT_MAX_QUANTITY} on the way back in.

package/dist/esm/billing/billing-enums.shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"billing-enums.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/billing/billing-enums.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAIzH;;;;;;;;;;;GAWG;AACH,oBAAY,WAAW;IACrB,gEAAgE;IAChE,IAAI,SAAS;IACb,6DAA6D;IAC7D,KAAK,UAAU;IACf,kEAAkE;IAClE,OAAO,YAAY;IACnB,6EAA6E;IAC7E,QAAQ,aAAa;IACrB,sEAAsE;IACtE,WAAW,gBAAgB;IAC3B,0EAA0E;IAC1E,IAAI,SAAS;CACd;AAED;;;;GAIG;AACH,oBAAY,cAAc;IACxB,GAAG,QAAQ;IACX,GAAG,QAAQ;CACZ;AAID;;GAEG;AACH,oBAAY,iBAAiB;IAC3B,iBAAiB,sBAAsB;IACvC,IAAI,SAAS;IACb,cAAc,mBAAmB;CAClC;AAED;;GAEG;AACH,oBAAY,aAAa;IACvB,SAAS,cAAc;IACvB,aAAa,kBAAkB;CAChC;AAMD;;GAEG;AACH,oBAAY,yBAAyB;IACnC,SAAS,cAAc;IACvB,kBAAkB,uBAAuB;CAC1C;AAED;;GAEG;AACH,oBAAY,oBAAoB;IAC9B,GAAG,QAAQ;IACX,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAED;;GAEG;AACH,oBAAY,eAAe;IACzB,SAAS,cAAc;IACvB,cAAc,mBAAmB;IACjC,MAAM,WAAW;CAClB;AAMD;;GAEG;AACH,oBAAY,kBAAkB;IAC5B,gBAAgB,qBAAqB;IACrC,QAAQ,aAAa;CACtB;AAMD;;;;;GAKG;AACH,oBAAY,aAAa;IACvB,KAAK,UAAU;IACf,IAAI,SAAS;IACb,IAAI,SAAS;IACb,IAAI,SAAS;IACb,aAAa,kBAAkB;CAChC;AAID;;;;;GAKG;AACH,oBAAY,gBAAgB;IAC1B,aAAa,kBAAkB;IAC/B,SAAS,cAAc;CACxB;AAID;;GAEG;AACH,oBAAY,aAAa;IACvB,sBAAsB;IACtB,MAAM,WAAW;IACjB,0BAA0B;IAC1B,cAAc,mBAAmB;IACjC,uBAAuB;IACvB,QAAQ,aAAa;IACrB,yBAAyB;IACzB,IAAI,SAAS;CACd;AAED;;GAEG;AACH,oBAAY,YAAY;IACtB,UAAU,eAAe;IACzB,YAAY,iBAAiB;CAC9B;AAED;;GAEG;AACH,oBAAY,iBAAiB;IAC3B,IAAI,SAAS;IACb,SAAS,cAAc;IACvB,OAAO,YAAY;CACpB;AAED;;GAEG;AACH,oBAAY,cAAc;IACxB,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,SAAS,cAAc;IACvB,OAAO,YAAY;IACnB,SAAS,cAAc;CACxB;AAED;;GAEG;AACH,oBAAY,kBAAkB;IAC5B,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,UAAU,eAAe;CAC1B;AAED;;GAEG;AACH,oBAAY,kBAAkB;IAC5B,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,eAAe,oBAAoB;CACpC;AAID;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,eAAO,MAAM,oCAAoC,WAAW,CAAC;AAE7D;;;;;;;;;;;GAWG;AACH,oBAAY,0BAA0B;IACpC;;;;;;OAMG;IACH,kBAAkB,2BAA2B;IAC7C,kGAAkG;IAClG,WAAW,qBAAqB;IAChC;;;OAGG;IACH,QAAQ,mBAAmB;CAC5B;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,6BAA6B,SAAU,CAAC"}
+{"version":3,"file":"billing-enums.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/billing/billing-enums.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAI3J;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,oBAAY,WAAW;IACrB,gEAAgE;IAChE,IAAI,SAAS;IACb,6DAA6D;IAC7D,KAAK,UAAU;IACf,kEAAkE;IAClE,OAAO,YAAY;IACnB,6EAA6E;IAC7E,QAAQ,aAAa;IACrB,sEAAsE;IACtE,WAAW,gBAAgB;IAC3B,0EAA0E;IAC1E,IAAI,SAAS;CACd;AAED;;;;GAIG;AACH,oBAAY,cAAc;IACxB,GAAG,QAAQ;IACX,GAAG,QAAQ;CACZ;AAID;;GAEG;AAKH;;GAEG;AACH,oBAAY,aAAa;IACvB,SAAS,cAAc;IACvB,aAAa,kBAAkB;CAChC;AACD,sEAAsE;AAMtE;;GAEG;AACH,oBAAY,yBAAyB;IACnC,SAAS,cAAc;IACvB,kBAAkB,uBAAuB;CAC1C;AAED;;GAEG;AACH,oBAAY,oBAAoB;IAC9B,GAAG,QAAQ;IACX,GAAG,QAAQ;IACX,IAAI,SAAS;CACd;AAED;;GAEG;AACH,oBAAY,eAAe;IACzB,SAAS,cAAc;IACvB,cAAc,mBAAmB;IACjC,MAAM,WAAW;CAClB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,oBAAY,qBAAqB;IAC/B,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,YAAY,iBAAiB;CAC9B;AAED;;;;;;;;;GASG;AACH,oBAAY,6BAA6B;IACvC;;;;;;;OAOG;IACH,uBAAuB,4BAA4B;CACpD;AAMD;;GAEG;AACH,oBAAY,kBAAkB;IAC5B,gBAAgB,qBAAqB;IACrC,QAAQ,aAAa;CACtB;AAYD;;;;;GAKG;AACH,oBAAY,gBAAgB;IAC1B,aAAa,kBAAkB;IAC/B,SAAS,cAAc;CACxB;AAID;;GAEG;AACH,oBAAY,aAAa;IACvB,sBAAsB;IACtB,MAAM,WAAW;IACjB,0BAA0B;IAC1B,cAAc,mBAAmB;IACjC,uBAAuB;IACvB,QAAQ,aAAa;IACrB,yBAAyB;IACzB,IAAI,SAAS;CACd;AAED;;GAEG;AACH,oBAAY,YAAY;IACtB,UAAU,eAAe;IACzB,YAAY,iBAAiB;CAC9B;AAED;;GAEG;AACH,oBAAY,iBAAiB;IAC3B,IAAI,SAAS;IACb,SAAS,cAAc;IACvB,OAAO,YAAY;CACpB;AAED;;GAEG;AACH,oBAAY,cAAc;IACxB,OAAO,YAAY;IACnB,QAAQ,aAAa;IACrB,SAAS,cAAc;IACvB,OAAO,YAAY;IACnB,SAAS,cAAc;CACxB;AAED;;GAEG;AACH,oBAAY,kBAAkB;IAC5B,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,UAAU,eAAe;CAC1B;AAED;;GAEG;AACH,oBAAY,kBAAkB;IAC5B,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,OAAO,YAAY;IACnB,eAAe,oBAAoB;CACpC;AAID;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,eAAO,MAAM,oCAAoC,WAAW,CAAC;AAE7D;;;;;;;;;;;GAWG;AACH,oBAAY,0BAA0B;IACpC;;;;;;OAMG;IACH,kBAAkB,2BAA2B;IAC7C,kGAAkG;IAClG,WAAW,qBAAqB;IAChC;;;;;;;;;;;;OAYG;IACH,YAAY,sBAAsB;IAClC;;;OAGG;IACH,QAAQ,mBAAmB;CAC5B;AAED;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,6BAA6B,SAAU,CAAC"}

package/dist/esm/billing/billing-enums.shared.schemas.js

@@ -5,14 +5,28 @@
  * These supersede the legacy enums from billing.shared.schemas.ts.
  *
  * Enums shared with the standard billing interface (PricingModel, BillingInterval,
- * TaxDisplayMode, SubscriptionStatus) are defined in @wildo-ai/external-connectors-models
- * and re-exported here for convenience.
+ * TaxDisplayMode, SubscriptionStatus, InvoiceStatus, ProrationBehavior) are defined in
+ * @wildo-ai/external-connectors-models and re-exported here for convenience.
  *
  * @see billing-and-features-system.md §6 (Billing Schemas)
  */
-export { PricingModel, BillingInterval, TaxDisplayMode, SubscriptionStatus } from '@wildo-ai/external-connectors-models';
+export { PricingModel, BillingInterval, TaxDisplayMode, SubscriptionStatus, InvoiceStatus, ProrationBehavior } from '@wildo-ai/external-connectors-models';
 // ── Product & Pricing ──────────────────────────────────────────────
 /**
+ * @wildo_source:part:start saas.models.billing.catalog-vocabularies facet:layer:shared facet:audience:app-developer
+ *
+ * The vocabularies an application types into its own product catalogue — the `ProductDefinition[]`
+ * it exports from its shared library and hands to the engine with its module declarations.
+ *
+ * Imported from `@wildo-ai/saas-models`. `PricingModel`, `BillingInterval` and `ProrationBehavior`
+ * are re-exported from the connector models, because their values ARE the provider's wire values.
+ *
+ * ⚠️ **The catalogue is ONE-WAY.** Sync pushes only rows that have no provider link yet, so a product
+ * or price edited in the provider's own dashboard is never read back, never reconciled, and never
+ * reported. Removing a product from the array does not retire it at the provider and does not
+ * deactivate the existing row — nothing detects that a previously synced key has disappeared. Treat
+ * the array as the source of truth and make every change through it.
+ *
  * Product types available in the billing catalog.
  *
  * | Type        | Creates subscription? | Repeatable? | Grants features? | Usage tracked? |
@@ -53,12 +67,9 @@ export var LimitGrantMode;
 /**
  * Proration behavior for plan changes (upgrade/downgrade).
  */
-export var ProrationBehavior;
-(function (ProrationBehavior) {
-    ProrationBehavior["CREATE_PRORATIONS"] = "create_prorations";
-    ProrationBehavior["NONE"] = "none";
-    ProrationBehavior["ALWAYS_INVOICE"] = "always_invoice";
-})(ProrationBehavior || (ProrationBehavior = {}));
+// ProrationBehavior: re-exported from @wildo-ai/external-connectors-models (see top of file).
+// Moved there 2026-09-08 (#516) because its three values ARE the provider's wire values, so the
+// request contract has to be able to name the type — see TaxDisplayMode for the same reasoning.
 /**
  * Billing timing: when to apply plan changes.
  */
@@ -67,6 +78,7 @@ export var BillingTiming;
     BillingTiming["IMMEDIATE"] = "immediate";
     BillingTiming["AT_PERIOD_END"] = "at_period_end";
 })(BillingTiming || (BillingTiming = {}));
+/** @wildo_source:part:end saas.models.billing.catalog-vocabularies */
 // BillingInterval: re-exported from @wildo-ai/external-connectors-models (see top of file)
 // ── Metering & Usage ───────────────────────────────────────────────
 /**
@@ -95,6 +107,53 @@ export var UsageSourceType;
     UsageSourceType["RESOURCE_COUNT"] = "resource_count";
     UsageSourceType["CUSTOM"] = "custom";
 })(UsageSourceType || (UsageSourceType = {}));
+/**
+ * Where one metered usage row stands with respect to the provider flush.
+ *
+ * This was a BOOLEAN (`reportedToProvider`) until 2026-09-09, and the third state is the whole
+ * reason it is an enum now (#512). A boolean can say "not yet reported" and "reported", and the
+ * flush selects on the first — so a row that can NEVER be reported has nowhere to go. It stays
+ * pending, is re-selected by every run, fails identically, and grows an error backlog that no
+ * operator action can drain, on a five-minute schedule.
+ *
+ * The three states are genuinely distinct and must not be collapsed:
+ *
+ * - {@link PENDING} — the flush will try again. Every newly recorded row starts here.
+ * - {@link REPORTED} — the provider acknowledged the quantity. `reportedAt` says when. Terminal,
+ *   and money has moved: never move a row back out of this state.
+ * - {@link UNREPORTABLE} — the flush determined the row can never be reported, for a reason named
+ *   in `unreportableReason`. Terminal, and NO money moved. Marking such a row `REPORTED` instead
+ *   would drain the backlog just as well and would be a lie no later reader could detect, which is
+ *   exactly why the state exists rather than a shortcut.
+ */
+export var UsageRecordFlushState;
+(function (UsageRecordFlushState) {
+    UsageRecordFlushState["PENDING"] = "pending";
+    UsageRecordFlushState["REPORTED"] = "reported";
+    UsageRecordFlushState["UNREPORTABLE"] = "unreportable";
+})(UsageRecordFlushState || (UsageRecordFlushState = {}));
+/**
+ * Why a usage row was determined to be permanently unreportable.
+ *
+ * One member today, and it is a closed vocabulary rather than a free string because the operator
+ * reading a retained financial record needs to know which permanent condition applies — and because
+ * the distinction between a PERMANENT and a TRANSIENT failure is the judgement this whole state
+ * turns on. A billing account that merely has no `providerCustomerId` yet is transient: the account
+ * exists, provisioning may still complete, and such a row stays {@link UsageRecordFlushState.PENDING}.
+ * Only a condition that cannot resolve itself belongs here.
+ */
+export var UsageRecordUnreportableReason;
+(function (UsageRecordUnreportableReason) {
+    /**
+     * The billing account row no longer exists.
+     *
+     * Reachable by design: usage rows are RETAINED when their subject is erased (the tax/audit
+     * obligation on `usage-record.shared.schemas.ts`), so a deleted account legitimately leaves rows
+     * behind with no provider customer to report them to. Nothing can restore the mapping, so the
+     * quantity will never be billed and saying so on the row is the only honest outcome.
+     */
+    UsageRecordUnreportableReason["BILLING_ACCOUNT_DELETED"] = "billing_account_deleted";
+})(UsageRecordUnreportableReason || (UsageRecordUnreportableReason = {}));
 // ── Tax ────────────────────────────────────────────────────────────
 // TaxDisplayMode: re-exported from @wildo-ai/external-connectors-models (see top of file)
 /**
@@ -107,20 +166,9 @@ export var TaxCalculationMode;
 })(TaxCalculationMode || (TaxCalculationMode = {}));
 // ── Subscription & Invoice Status ──────────────────────────────────
 // SubscriptionStatus: re-exported from @wildo-ai/external-connectors-models (see top of file)
-/**
- * Invoice status values (maps to Stripe invoice statuses).
- *
- * Invoices are created and managed entirely by the billing provider.
- * We store a thin reference for status tracking and quick display.
- */
-export var InvoiceStatus;
-(function (InvoiceStatus) {
-    InvoiceStatus["DRAFT"] = "draft";
-    InvoiceStatus["OPEN"] = "open";
-    InvoiceStatus["PAID"] = "paid";
-    InvoiceStatus["VOID"] = "void";
-    InvoiceStatus["UNCOLLECTIBLE"] = "uncollectible";
-})(InvoiceStatus || (InvoiceStatus = {}));
+// InvoiceStatus: re-exported from @wildo-ai/external-connectors-models (see top of file).
+// It moved there on 2026-09-09 so `StandardBilling_InvoiceData` could name it; the specifier every
+// consumer imports is unchanged.
 // ── Billing Scope ──────────────────────────────────────────────────
 /**
  * Billing-compatible scope types.
@@ -252,6 +300,20 @@ export var BillingCheckoutMetadataKey;
     BillingCheckoutMetadataKey["BILLING_ACCOUNT_ID"] = "wildo_billingAccountId";
     /** The catalog product key purchased — selects the credit pool and credits-per-unit on top-up. */
     BillingCheckoutMetadataKey["PRODUCT_KEY"] = "wildo_productKey";
+    /**
+     * The PROMOTION row whose code the framework validated when it opened this checkout, so the
+     * redemption can be counted when the session COMPLETES (#518).
+     *
+     * Absent when the purchase used no code, which is the common case.
+     *
+     * Stamped rather than re-derived from the completed session, because the provider reports the
+     * DISCOUNT it applied and not the Wildo row that authorised it — and the row is what carries
+     * `maxRedemptions`. Like every key here it is written for the framework's own reconciliation and is
+     * never trusted as authority on its own: the redemption is counted with a compare-and-swap that
+     * refuses past the cap, so a tampered value can at worst count a redemption against a promotion
+     * that has room for one.
+     */
+    BillingCheckoutMetadataKey["PROMOTION_ID"] = "wildo_promotionId";
     /**
      * The purchased quantity, as a decimal integer string (provider metadata values are strings).
      * Strictly parsed and bounded by {@link BILLING_CHECKOUT_MAX_QUANTITY} on the way back in.

package/dist/esm/billing/billing-enums.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"billing-enums.shared.schemas.js","sourceRoot":"","sources":["../../../../src/billing/billing-enums.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,sCAAsC,CAAC;AAEzH,sEAAsE;AAEtE;;;;;;;;;;;GAWG;AACH,MAAM,CAAN,IAAY,WAaX;AAbD,WAAY,WAAW;IACrB,gEAAgE;IAChE,4BAAa,CAAA;IACb,6DAA6D;IAC7D,8BAAe,CAAA;IACf,kEAAkE;IAClE,kCAAmB,CAAA;IACnB,6EAA6E;IAC7E,oCAAqB,CAAA;IACrB,sEAAsE;IACtE,0CAA2B,CAAA;IAC3B,0EAA0E;IAC1E,4BAAa,CAAA;AACf,CAAC,EAbW,WAAW,KAAX,WAAW,QAatB;AAED;;;;GAIG;AACH,MAAM,CAAN,IAAY,cAGX;AAHD,WAAY,cAAc;IACxB,6BAAW,CAAA;IACX,6BAAW,CAAA;AACb,CAAC,EAHW,cAAc,KAAd,cAAc,QAGzB;AAED,sEAAsE;AAEtE;;GAEG;AACH,MAAM,CAAN,IAAY,iBAIX;AAJD,WAAY,iBAAiB;IAC3B,4DAAuC,CAAA;IACvC,kCAAa,CAAA;IACb,sDAAiC,CAAA;AACnC,CAAC,EAJW,iBAAiB,KAAjB,iBAAiB,QAI5B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,aAGX;AAHD,WAAY,aAAa;IACvB,wCAAuB,CAAA;IACvB,gDAA+B,CAAA;AACjC,CAAC,EAHW,aAAa,KAAb,aAAa,QAGxB;AAED,2FAA2F;AAE3F,sEAAsE;AAEtE;;GAEG;AACH,MAAM,CAAN,IAAY,yBAGX;AAHD,WAAY,yBAAyB;IACnC,oDAAuB,CAAA;IACvB,sEAAyC,CAAA;AAC3C,CAAC,EAHW,yBAAyB,KAAzB,yBAAyB,QAGpC;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,oBAIX;AAJD,WAAY,oBAAoB;IAC9B,mCAAW,CAAA;IACX,mCAAW,CAAA;IACX,qCAAa,CAAA;AACf,CAAC,EAJW,oBAAoB,KAApB,oBAAoB,QAI/B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,eAIX;AAJD,WAAY,eAAe;IACzB,0CAAuB,CAAA;IACvB,oDAAiC,CAAA;IACjC,oCAAiB,CAAA;AACnB,CAAC,EAJW,eAAe,KAAf,eAAe,QAI1B;AAED,sEAAsE;AAEtE,0FAA0F;AAE1F;;GAEG;AACH,MAAM,CAAN,IAAY,kBAGX;AAHD,WAAY,kBAAkB;IAC5B,2DAAqC,CAAA;IACrC,2CAAqB,CAAA;AACvB,CAAC,EAHW,kBAAkB,KAAlB,kBAAkB,QAG7B;AAED,sEAAsE;AAEtE,8FAA8F;AAE9F;;;;;GAKG;AACH,MAAM,CAAN,IAAY,aAMX;AAND,WAAY,aAAa;IACvB,gCAAe,CAAA;IACf,8BAAa,CAAA;IACb,8BAAa,CAAA;IACb,8BAAa,CAAA;IACb,gDAA+B,CAAA;AACjC,CAAC,EANW,aAAa,KAAb,aAAa,QAMxB;AAED,sEAAsE;AAEtE;;;;;GAKG;AACH,MAAM,CAAN,IAAY,gBAGX;AAHD,WAAY,gBAAgB;IAC1B,mDAA+B,CAAA;IAC/B,2CAAuB,CAAA;AACzB,CAAC,EAHW,gBAAgB,KAAhB,gBAAgB,QAG3B;AAED,sEAAsE;AAEtE;;GAEG;AACH,MAAM,CAAN,IAAY,aASX;AATD,WAAY,aAAa;IACvB,sBAAsB;IACtB,kCAAiB,CAAA;IACjB,0BAA0B;IAC1B,kDAAiC,CAAA;IACjC,uBAAuB;IACvB,sCAAqB,CAAA;IACrB,yBAAyB;IACzB,8BAAa,CAAA;AACf,CAAC,EATW,aAAa,KAAb,aAAa,QASxB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,YAGX;AAHD,WAAY,YAAY;IACtB,yCAAyB,CAAA;IACzB,6CAA6B,CAAA;AAC/B,CAAC,EAHW,YAAY,KAAZ,YAAY,QAGvB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,iBAIX;AAJD,WAAY,iBAAiB;IAC3B,kCAAa,CAAA;IACb,4CAAuB,CAAA;IACvB,wCAAmB,CAAA;AACrB,CAAC,EAJW,iBAAiB,KAAjB,iBAAiB,QAI5B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,cAMX;AAND,WAAY,cAAc;IACxB,qCAAmB,CAAA;IACnB,uCAAqB,CAAA;IACrB,yCAAuB,CAAA;IACvB,qCAAmB,CAAA;IACnB,yCAAuB,CAAA;AACzB,CAAC,EANW,cAAc,KAAd,cAAc,QAMzB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,kBAKX;AALD,WAAY,kBAAkB;IAC5B,uCAAiB,CAAA;IACjB,2CAAqB,CAAA;IACrB,yCAAmB,CAAA;IACnB,+CAAyB,CAAA;AAC3B,CAAC,EALW,kBAAkB,KAAlB,kBAAkB,QAK7B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,kBAKX;AALD,WAAY,kBAAkB;IAC5B,uCAAiB,CAAA;IACjB,2CAAqB,CAAA;IACrB,yCAAmB,CAAA;IACnB,yDAAmC,CAAA;AACrC,CAAC,EALW,kBAAkB,KAAlB,kBAAkB,QAK7B;AAED,mFAAmF;AAEnF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,QAAQ,CAAC;AAE7D;;;;;;;;;;;GAWG;AACH,MAAM,CAAN,IAAY,0BAgBX;AAhBD,WAAY,0BAA0B;IACpC;;;;;;OAMG;IACH,2EAA6C,CAAA;IAC7C,kGAAkG;IAClG,8DAAgC,CAAA;IAChC;;;OAGG;IACH,yDAA2B,CAAA;AAC7B,CAAC,EAhBW,0BAA0B,KAA1B,0BAA0B,QAgBrC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,OAAO,CAAC","sourcesContent":["/**\n * Billing Enums (Shared)\n *\n * All billing-system enums used across backend, frontend, and shared models.\n * These supersede the legacy enums from billing.shared.schemas.ts.\n *\n * Enums shared with the standard billing interface (PricingModel, BillingInterval,\n * TaxDisplayMode, SubscriptionStatus) are defined in @wildo-ai/external-connectors-models\n * and re-exported here for convenience.\n *\n * @see billing-and-features-system.md §6 (Billing Schemas)\n */\n\nexport { PricingModel, BillingInterval, TaxDisplayMode, SubscriptionStatus } from '@wildo-ai/external-connectors-models';\n\n// ── Product & Pricing ──────────────────────────────────────────────\n\n/**\n * Product types available in the billing catalog.\n *\n * | Type        | Creates subscription? | Repeatable? | Grants features? | Usage tracked? |\n * |-------------|----------------------|-------------|------------------|----------------|\n * | PLAN        | Yes (exclusive)      | No (switch) | Yes              | No             |\n * | ADDON       | Yes (stackable)      | No (toggle) | Yes              | No             |\n * | METERED     | Yes                  | No          | Optional         | Yes            |\n * | ONE_TIME    | No                   | No (once)   | Optional         | No             |\n * | CREDIT_PACK | No                   | Yes         | No (credits)     | Credits-based  |\n * | ITEM        | No                   | Yes         | Optional         | No             |\n */\nexport enum ProductType {\n  /** Subscription plan, mutually exclusive per billing account */\n  PLAN = 'plan',\n  /** Optional subscription add-on, stackable on top of plan */\n  ADDON = 'addon',\n  /** Usage-based subscription (consumption reported to provider) */\n  METERED = 'metered',\n  /** Single purchase, once per billing account (e.g., setup fee, migration) */\n  ONE_TIME = 'one_time',\n  /** Buy a pack of credits/tokens (repeatable, consumable over time) */\n  CREDIT_PACK = 'credit_pack',\n  /** Purchasable item, repeatable (e.g., report generation, data export) */\n  ITEM = 'item',\n}\n\n/**\n * Limit grant mode: how this product's limits compose with other products.\n * - SET: absolute value (replaces, used for PLAN base limits)\n * - ADD: additive (stacks on top, used for ADDON bonus limits)\n */\nexport enum LimitGrantMode {\n  SET = 'set',\n  ADD = 'add',\n}\n\n// ── Billing Lifecycle ──────────────────────────────────────────────\n\n/**\n * Proration behavior for plan changes (upgrade/downgrade).\n */\nexport enum ProrationBehavior {\n  CREATE_PRORATIONS = 'create_prorations',\n  NONE = 'none',\n  ALWAYS_INVOICE = 'always_invoice',\n}\n\n/**\n * Billing timing: when to apply plan changes.\n */\nexport enum BillingTiming {\n  IMMEDIATE = 'immediate',\n  AT_PERIOD_END = 'at_period_end',\n}\n\n// BillingInterval: re-exported from @wildo-ai/external-connectors-models (see top of file)\n\n// ── Metering & Usage ───────────────────────────────────────────────\n\n/**\n * Metering aggregation window for usage records.\n */\nexport enum MeteringAggregationWindow {\n  PER_FLUSH = 'per_flush',\n  PER_BILLING_PERIOD = 'per_billing_period',\n}\n\n/**\n * Usage aggregation type for metered prices.\n */\nexport enum UsageAggregationType {\n  SUM = 'sum',\n  MAX = 'max',\n  LAST = 'last',\n}\n\n/**\n * Usage record source type.\n */\nexport enum UsageSourceType {\n  OPERATION = 'operation',\n  RESOURCE_COUNT = 'resource_count',\n  CUSTOM = 'custom',\n}\n\n// ── Tax ────────────────────────────────────────────────────────────\n\n// TaxDisplayMode: re-exported from @wildo-ai/external-connectors-models (see top of file)\n\n/**\n * Tax calculation mode: provider-managed or disabled.\n */\nexport enum TaxCalculationMode {\n  PROVIDER_MANAGED = 'provider_managed',\n  DISABLED = 'disabled',\n}\n\n// ── Subscription & Invoice Status ──────────────────────────────────\n\n// SubscriptionStatus: re-exported from @wildo-ai/external-connectors-models (see top of file)\n\n/**\n * Invoice status values (maps to Stripe invoice statuses).\n *\n * Invoices are created and managed entirely by the billing provider.\n * We store a thin reference for status tracking and quick display.\n */\nexport enum InvoiceStatus {\n  DRAFT = 'draft',\n  OPEN = 'open',\n  PAID = 'paid',\n  VOID = 'void',\n  UNCOLLECTIBLE = 'uncollectible',\n}\n\n// ── Billing Scope ──────────────────────────────────────────────────\n\n/**\n * Billing-compatible scope types.\n * Subset of ResourcePrimaryScope — excludes APPLICATION which has no billing variants.\n * Used by scope-agnostic billing resources (e.g., Referrals) that reference\n * billing accounts across different polymorphic collections.\n */\nexport enum BillingScopeType {\n  ORGANIZATIONS = 'organizations',\n  USER_SELF = 'user_self',\n}\n\n// ── Promotions & Referrals ─────────────────────────────────────────\n\n/**\n * Promotion type.\n */\nexport enum PromotionType {\n  /** Direct discount */\n  COUPON = 'coupon',\n  /** Code-based discount */\n  PROMOTION_CODE = 'promotion_code',\n  /** Referral program */\n  REFERRAL = 'referral',\n  /** Special deal/offer */\n  DEAL = 'deal',\n}\n\n/**\n * Discount type for promotions.\n */\nexport enum DiscountType {\n  PERCENTAGE = 'percentage',\n  FIXED_AMOUNT = 'fixed_amount',\n}\n\n/**\n * Promotion duration (how long the discount applies).\n */\nexport enum PromotionDuration {\n  ONCE = 'once',\n  REPEATING = 'repeating',\n  FOREVER = 'forever',\n}\n\n/**\n * Referral status lifecycle.\n */\nexport enum ReferralStatus {\n  PENDING = 'pending',\n  ACCEPTED = 'accepted',\n  CONVERTED = 'converted',\n  EXPIRED = 'expired',\n  CANCELLED = 'cancelled',\n}\n\n/**\n * Reward type for the referrer (person who referred).\n */\nexport enum ReferrerRewardType {\n  CREDIT = 'credit',\n  DISCOUNT = 'discount',\n  FEATURE = 'feature',\n  COMMISSION = 'commission',\n}\n\n/**\n * Reward type for the referred (new customer).\n */\nexport enum ReferredRewardType {\n  CREDIT = 'credit',\n  DISCOUNT = 'discount',\n  FEATURE = 'feature',\n  TRIAL_EXTENSION = 'trial_extension',\n}\n\n// ── Provider checkout metadata: the framework/caller trust boundary ─────────────\n\n/**\n * Prefix that marks a provider-metadata key as FRAMEWORK-AUTHORITATIVE.\n *\n * ## Why a reserved namespace exists at all\n *\n * A provider checkout session carries ONE flat `metadata` map, and two parties want to write into\n * it: the framework (which needs to recognise the purchase when the provider echoes the session\n * back on `checkout.session.completed`) and the application's own caller (who legitimately wants\n * to tag the purchase for their analytics or reconciliation).\n *\n * Those two writers do not have the same authority. The framework's entries decide WHICH billing\n * account is credited and HOW MUCH — the provider replays them verbatim inside a genuinely SIGNED\n * webhook, so a signature proves the provider sent them, never that the framework wrote them. The\n * caller's entries decide nothing.\n *\n * Sharing one un-partitioned namespace between those two authorities is what turned a caller-supplied\n * map into a credit-minting primitive: the producer spread caller metadata LAST, so `billingAccountId`\n * / `productKey` / `quantity` were simply overwritable, and the webhook consumer read the result back\n * as trusted framework state. Ordering alone is not the fix — swapping the spread leaves an\n * unmarked namespace in which the NEXT authoritative key is one careless line from being overridable\n * again. The prefix makes the trust boundary a property of the KEY, so it survives refactors.\n *\n * The boundary is enforced in three places, deliberately overlapping:\n * 1. the OPEN_CHECKOUT request DTO REFUSES any caller key carrying this prefix (loud, at the edge);\n * 2. the metadata builder writes the reserved entries LAST (structural, cannot be forgotten);\n * 3. the webhook consumer reads ONLY reserved keys, and re-derives the billing account from\n *    provider-authoritative data rather than trusting the echoed value.\n *\n * @see BillingCheckoutMetadataKey for the reserved key vocabulary itself.\n */\nexport const BILLING_RESERVED_METADATA_KEY_PREFIX = 'wildo_';\n\n/**\n * The closed vocabulary of framework-authoritative provider-metadata keys.\n *\n * Every member MUST start with {@link BILLING_RESERVED_METADATA_KEY_PREFIX} — that is what makes the\n * DTO's caller-key refusal and the consumer's read-only-reserved rule line up. A member added\n * without the prefix would be silently overridable by a caller, which is the whole defect this\n * vocabulary exists to prevent, so a pinned test asserts the prefix across every member.\n *\n * Named rather than inlined because each member carries a different obligation on the consumer side\n * (one is cross-checked against provider truth, one selects the product, one is bounded and\n * strictly parsed) and a bare string literal has nowhere to record that.\n */\nexport enum BillingCheckoutMetadataKey {\n  /**\n   * The billing account the checkout was opened FOR.\n   *\n   * Written for traceability and cross-checking only. The webhook consumer re-derives the account\n   * from the provider-authoritative customer id on the event and REFUSES the event if the echoed\n   * value disagrees — it is never used as the account to credit.\n   */\n  BILLING_ACCOUNT_ID = 'wildo_billingAccountId',\n  /** The catalog product key purchased — selects the credit pool and credits-per-unit on top-up. */\n  PRODUCT_KEY = 'wildo_productKey',\n  /**\n   * The purchased quantity, as a decimal integer string (provider metadata values are strings).\n   * Strictly parsed and bounded by {@link BILLING_CHECKOUT_MAX_QUANTITY} on the way back in.\n   */\n  QUANTITY = 'wildo_quantity',\n}\n\n/**\n * Upper bound on a single checkout's line-item quantity, applied on BOTH sides of the provider\n * round trip: the OPEN_CHECKOUT request DTO refuses more, and the webhook consumer refuses to\n * honour more.\n *\n * One shared constant rather than two, because a consumer bound lower than the producer bound would\n * silently refuse legitimate large purchases the framework itself allowed to be billed — the\n * failure mode where the customer is charged and the credits never arrive.\n *\n * The value is a framework policy ceiling, not a provider-derived one: it is deliberately far above\n * any plausible self-serve purchase and far below the range where an unbounded quantity becomes a\n * credit-minting primitive. An application whose catalog genuinely sells in larger units should\n * raise it here, where both sides read it, rather than at either end.\n */\nexport const BILLING_CHECKOUT_MAX_QUANTITY = 999_999;\n"]}
+{"version":3,"file":"billing-enums.shared.schemas.js","sourceRoot":"","sources":["../../../../src/billing/billing-enums.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAE3J,sEAAsE;AAEtE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAN,IAAY,WAaX;AAbD,WAAY,WAAW;IACrB,gEAAgE;IAChE,4BAAa,CAAA;IACb,6DAA6D;IAC7D,8BAAe,CAAA;IACf,kEAAkE;IAClE,kCAAmB,CAAA;IACnB,6EAA6E;IAC7E,oCAAqB,CAAA;IACrB,sEAAsE;IACtE,0CAA2B,CAAA;IAC3B,0EAA0E;IAC1E,4BAAa,CAAA;AACf,CAAC,EAbW,WAAW,KAAX,WAAW,QAatB;AAED;;;;GAIG;AACH,MAAM,CAAN,IAAY,cAGX;AAHD,WAAY,cAAc;IACxB,6BAAW,CAAA;IACX,6BAAW,CAAA;AACb,CAAC,EAHW,cAAc,KAAd,cAAc,QAGzB;AAED,sEAAsE;AAEtE;;GAEG;AACH,8FAA8F;AAC9F,gGAAgG;AAChG,gGAAgG;AAEhG;;GAEG;AACH,MAAM,CAAN,IAAY,aAGX;AAHD,WAAY,aAAa;IACvB,wCAAuB,CAAA;IACvB,gDAA+B,CAAA;AACjC,CAAC,EAHW,aAAa,KAAb,aAAa,QAGxB;AACD,sEAAsE;AAEtE,2FAA2F;AAE3F,sEAAsE;AAEtE;;GAEG;AACH,MAAM,CAAN,IAAY,yBAGX;AAHD,WAAY,yBAAyB;IACnC,oDAAuB,CAAA;IACvB,sEAAyC,CAAA;AAC3C,CAAC,EAHW,yBAAyB,KAAzB,yBAAyB,QAGpC;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,oBAIX;AAJD,WAAY,oBAAoB;IAC9B,mCAAW,CAAA;IACX,mCAAW,CAAA;IACX,qCAAa,CAAA;AACf,CAAC,EAJW,oBAAoB,KAApB,oBAAoB,QAI/B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,eAIX;AAJD,WAAY,eAAe;IACzB,0CAAuB,CAAA;IACvB,oDAAiC,CAAA;IACjC,oCAAiB,CAAA;AACnB,CAAC,EAJW,eAAe,KAAf,eAAe,QAI1B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAN,IAAY,qBAIX;AAJD,WAAY,qBAAqB;IAC/B,4CAAmB,CAAA;IACnB,8CAAqB,CAAA;IACrB,sDAA6B,CAAA;AAC/B,CAAC,EAJW,qBAAqB,KAArB,qBAAqB,QAIhC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAN,IAAY,6BAUX;AAVD,WAAY,6BAA6B;IACvC;;;;;;;OAOG;IACH,oFAAmD,CAAA;AACrD,CAAC,EAVW,6BAA6B,KAA7B,6BAA6B,QAUxC;AAED,sEAAsE;AAEtE,0FAA0F;AAE1F;;GAEG;AACH,MAAM,CAAN,IAAY,kBAGX;AAHD,WAAY,kBAAkB;IAC5B,2DAAqC,CAAA;IACrC,2CAAqB,CAAA;AACvB,CAAC,EAHW,kBAAkB,KAAlB,kBAAkB,QAG7B;AAED,sEAAsE;AAEtE,8FAA8F;AAE9F,0FAA0F;AAC1F,mGAAmG;AACnG,iCAAiC;AAEjC,sEAAsE;AAEtE;;;;;GAKG;AACH,MAAM,CAAN,IAAY,gBAGX;AAHD,WAAY,gBAAgB;IAC1B,mDAA+B,CAAA;IAC/B,2CAAuB,CAAA;AACzB,CAAC,EAHW,gBAAgB,KAAhB,gBAAgB,QAG3B;AAED,sEAAsE;AAEtE;;GAEG;AACH,MAAM,CAAN,IAAY,aASX;AATD,WAAY,aAAa;IACvB,sBAAsB;IACtB,kCAAiB,CAAA;IACjB,0BAA0B;IAC1B,kDAAiC,CAAA;IACjC,uBAAuB;IACvB,sCAAqB,CAAA;IACrB,yBAAyB;IACzB,8BAAa,CAAA;AACf,CAAC,EATW,aAAa,KAAb,aAAa,QASxB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,YAGX;AAHD,WAAY,YAAY;IACtB,yCAAyB,CAAA;IACzB,6CAA6B,CAAA;AAC/B,CAAC,EAHW,YAAY,KAAZ,YAAY,QAGvB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,iBAIX;AAJD,WAAY,iBAAiB;IAC3B,kCAAa,CAAA;IACb,4CAAuB,CAAA;IACvB,wCAAmB,CAAA;AACrB,CAAC,EAJW,iBAAiB,KAAjB,iBAAiB,QAI5B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,cAMX;AAND,WAAY,cAAc;IACxB,qCAAmB,CAAA;IACnB,uCAAqB,CAAA;IACrB,yCAAuB,CAAA;IACvB,qCAAmB,CAAA;IACnB,yCAAuB,CAAA;AACzB,CAAC,EANW,cAAc,KAAd,cAAc,QAMzB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,kBAKX;AALD,WAAY,kBAAkB;IAC5B,uCAAiB,CAAA;IACjB,2CAAqB,CAAA;IACrB,yCAAmB,CAAA;IACnB,+CAAyB,CAAA;AAC3B,CAAC,EALW,kBAAkB,KAAlB,kBAAkB,QAK7B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,kBAKX;AALD,WAAY,kBAAkB;IAC5B,uCAAiB,CAAA;IACjB,2CAAqB,CAAA;IACrB,yCAAmB,CAAA;IACnB,yDAAmC,CAAA;AACrC,CAAC,EALW,kBAAkB,KAAlB,kBAAkB,QAK7B;AAED,mFAAmF;AAEnF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,QAAQ,CAAC;AAE7D;;;;;;;;;;;GAWG;AACH,MAAM,CAAN,IAAY,0BA8BX;AA9BD,WAAY,0BAA0B;IACpC;;;;;;OAMG;IACH,2EAA6C,CAAA;IAC7C,kGAAkG;IAClG,8DAAgC,CAAA;IAChC;;;;;;;;;;;;OAYG;IACH,gEAAkC,CAAA;IAClC;;;OAGG;IACH,yDAA2B,CAAA;AAC7B,CAAC,EA9BW,0BAA0B,KAA1B,0BAA0B,QA8BrC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,OAAO,CAAC","sourcesContent":["/**\n * Billing Enums (Shared)\n *\n * All billing-system enums used across backend, frontend, and shared models.\n * These supersede the legacy enums from billing.shared.schemas.ts.\n *\n * Enums shared with the standard billing interface (PricingModel, BillingInterval,\n * TaxDisplayMode, SubscriptionStatus, InvoiceStatus, ProrationBehavior) are defined in\n * @wildo-ai/external-connectors-models and re-exported here for convenience.\n *\n * @see billing-and-features-system.md §6 (Billing Schemas)\n */\n\nexport { PricingModel, BillingInterval, TaxDisplayMode, SubscriptionStatus, InvoiceStatus, ProrationBehavior } from '@wildo-ai/external-connectors-models';\n\n// ── Product & Pricing ──────────────────────────────────────────────\n\n/**\n * @wildo_source:part:start saas.models.billing.catalog-vocabularies facet:layer:shared facet:audience:app-developer\n *\n * The vocabularies an application types into its own product catalogue — the `ProductDefinition[]`\n * it exports from its shared library and hands to the engine with its module declarations.\n *\n * Imported from `@wildo-ai/saas-models`. `PricingModel`, `BillingInterval` and `ProrationBehavior`\n * are re-exported from the connector models, because their values ARE the provider's wire values.\n *\n * ⚠️ **The catalogue is ONE-WAY.** Sync pushes only rows that have no provider link yet, so a product\n * or price edited in the provider's own dashboard is never read back, never reconciled, and never\n * reported. Removing a product from the array does not retire it at the provider and does not\n * deactivate the existing row — nothing detects that a previously synced key has disappeared. Treat\n * the array as the source of truth and make every change through it.\n *\n * Product types available in the billing catalog.\n *\n * | Type        | Creates subscription? | Repeatable? | Grants features? | Usage tracked? |\n * |-------------|----------------------|-------------|------------------|----------------|\n * | PLAN        | Yes (exclusive)      | No (switch) | Yes              | No             |\n * | ADDON       | Yes (stackable)      | No (toggle) | Yes              | No             |\n * | METERED     | Yes                  | No          | Optional         | Yes            |\n * | ONE_TIME    | No                   | No (once)   | Optional         | No             |\n * | CREDIT_PACK | No                   | Yes         | No (credits)     | Credits-based  |\n * | ITEM        | No                   | Yes         | Optional         | No             |\n */\nexport enum ProductType {\n  /** Subscription plan, mutually exclusive per billing account */\n  PLAN = 'plan',\n  /** Optional subscription add-on, stackable on top of plan */\n  ADDON = 'addon',\n  /** Usage-based subscription (consumption reported to provider) */\n  METERED = 'metered',\n  /** Single purchase, once per billing account (e.g., setup fee, migration) */\n  ONE_TIME = 'one_time',\n  /** Buy a pack of credits/tokens (repeatable, consumable over time) */\n  CREDIT_PACK = 'credit_pack',\n  /** Purchasable item, repeatable (e.g., report generation, data export) */\n  ITEM = 'item',\n}\n\n/**\n * Limit grant mode: how this product's limits compose with other products.\n * - SET: absolute value (replaces, used for PLAN base limits)\n * - ADD: additive (stacks on top, used for ADDON bonus limits)\n */\nexport enum LimitGrantMode {\n  SET = 'set',\n  ADD = 'add',\n}\n\n// ── Billing Lifecycle ──────────────────────────────────────────────\n\n/**\n * Proration behavior for plan changes (upgrade/downgrade).\n */\n// ProrationBehavior: re-exported from @wildo-ai/external-connectors-models (see top of file).\n// Moved there 2026-09-08 (#516) because its three values ARE the provider's wire values, so the\n// request contract has to be able to name the type — see TaxDisplayMode for the same reasoning.\n\n/**\n * Billing timing: when to apply plan changes.\n */\nexport enum BillingTiming {\n  IMMEDIATE = 'immediate',\n  AT_PERIOD_END = 'at_period_end',\n}\n/** @wildo_source:part:end saas.models.billing.catalog-vocabularies */\n\n// BillingInterval: re-exported from @wildo-ai/external-connectors-models (see top of file)\n\n// ── Metering & Usage ───────────────────────────────────────────────\n\n/**\n * Metering aggregation window for usage records.\n */\nexport enum MeteringAggregationWindow {\n  PER_FLUSH = 'per_flush',\n  PER_BILLING_PERIOD = 'per_billing_period',\n}\n\n/**\n * Usage aggregation type for metered prices.\n */\nexport enum UsageAggregationType {\n  SUM = 'sum',\n  MAX = 'max',\n  LAST = 'last',\n}\n\n/**\n * Usage record source type.\n */\nexport enum UsageSourceType {\n  OPERATION = 'operation',\n  RESOURCE_COUNT = 'resource_count',\n  CUSTOM = 'custom',\n}\n\n/**\n * Where one metered usage row stands with respect to the provider flush.\n *\n * This was a BOOLEAN (`reportedToProvider`) until 2026-09-09, and the third state is the whole\n * reason it is an enum now (#512). A boolean can say \"not yet reported\" and \"reported\", and the\n * flush selects on the first — so a row that can NEVER be reported has nowhere to go. It stays\n * pending, is re-selected by every run, fails identically, and grows an error backlog that no\n * operator action can drain, on a five-minute schedule.\n *\n * The three states are genuinely distinct and must not be collapsed:\n *\n * - {@link PENDING} — the flush will try again. Every newly recorded row starts here.\n * - {@link REPORTED} — the provider acknowledged the quantity. `reportedAt` says when. Terminal,\n *   and money has moved: never move a row back out of this state.\n * - {@link UNREPORTABLE} — the flush determined the row can never be reported, for a reason named\n *   in `unreportableReason`. Terminal, and NO money moved. Marking such a row `REPORTED` instead\n *   would drain the backlog just as well and would be a lie no later reader could detect, which is\n *   exactly why the state exists rather than a shortcut.\n */\nexport enum UsageRecordFlushState {\n  PENDING = 'pending',\n  REPORTED = 'reported',\n  UNREPORTABLE = 'unreportable',\n}\n\n/**\n * Why a usage row was determined to be permanently unreportable.\n *\n * One member today, and it is a closed vocabulary rather than a free string because the operator\n * reading a retained financial record needs to know which permanent condition applies — and because\n * the distinction between a PERMANENT and a TRANSIENT failure is the judgement this whole state\n * turns on. A billing account that merely has no `providerCustomerId` yet is transient: the account\n * exists, provisioning may still complete, and such a row stays {@link UsageRecordFlushState.PENDING}.\n * Only a condition that cannot resolve itself belongs here.\n */\nexport enum UsageRecordUnreportableReason {\n  /**\n   * The billing account row no longer exists.\n   *\n   * Reachable by design: usage rows are RETAINED when their subject is erased (the tax/audit\n   * obligation on `usage-record.shared.schemas.ts`), so a deleted account legitimately leaves rows\n   * behind with no provider customer to report them to. Nothing can restore the mapping, so the\n   * quantity will never be billed and saying so on the row is the only honest outcome.\n   */\n  BILLING_ACCOUNT_DELETED = 'billing_account_deleted',\n}\n\n// ── Tax ────────────────────────────────────────────────────────────\n\n// TaxDisplayMode: re-exported from @wildo-ai/external-connectors-models (see top of file)\n\n/**\n * Tax calculation mode: provider-managed or disabled.\n */\nexport enum TaxCalculationMode {\n  PROVIDER_MANAGED = 'provider_managed',\n  DISABLED = 'disabled',\n}\n\n// ── Subscription & Invoice Status ──────────────────────────────────\n\n// SubscriptionStatus: re-exported from @wildo-ai/external-connectors-models (see top of file)\n\n// InvoiceStatus: re-exported from @wildo-ai/external-connectors-models (see top of file).\n// It moved there on 2026-09-09 so `StandardBilling_InvoiceData` could name it; the specifier every\n// consumer imports is unchanged.\n\n// ── Billing Scope ──────────────────────────────────────────────────\n\n/**\n * Billing-compatible scope types.\n * Subset of ResourcePrimaryScope — excludes APPLICATION which has no billing variants.\n * Used by scope-agnostic billing resources (e.g., Referrals) that reference\n * billing accounts across different polymorphic collections.\n */\nexport enum BillingScopeType {\n  ORGANIZATIONS = 'organizations',\n  USER_SELF = 'user_self',\n}\n\n// ── Promotions & Referrals ─────────────────────────────────────────\n\n/**\n * Promotion type.\n */\nexport enum PromotionType {\n  /** Direct discount */\n  COUPON = 'coupon',\n  /** Code-based discount */\n  PROMOTION_CODE = 'promotion_code',\n  /** Referral program */\n  REFERRAL = 'referral',\n  /** Special deal/offer */\n  DEAL = 'deal',\n}\n\n/**\n * Discount type for promotions.\n */\nexport enum DiscountType {\n  PERCENTAGE = 'percentage',\n  FIXED_AMOUNT = 'fixed_amount',\n}\n\n/**\n * Promotion duration (how long the discount applies).\n */\nexport enum PromotionDuration {\n  ONCE = 'once',\n  REPEATING = 'repeating',\n  FOREVER = 'forever',\n}\n\n/**\n * Referral status lifecycle.\n */\nexport enum ReferralStatus {\n  PENDING = 'pending',\n  ACCEPTED = 'accepted',\n  CONVERTED = 'converted',\n  EXPIRED = 'expired',\n  CANCELLED = 'cancelled',\n}\n\n/**\n * Reward type for the referrer (person who referred).\n */\nexport enum ReferrerRewardType {\n  CREDIT = 'credit',\n  DISCOUNT = 'discount',\n  FEATURE = 'feature',\n  COMMISSION = 'commission',\n}\n\n/**\n * Reward type for the referred (new customer).\n */\nexport enum ReferredRewardType {\n  CREDIT = 'credit',\n  DISCOUNT = 'discount',\n  FEATURE = 'feature',\n  TRIAL_EXTENSION = 'trial_extension',\n}\n\n// ── Provider checkout metadata: the framework/caller trust boundary ─────────────\n\n/**\n * Prefix that marks a provider-metadata key as FRAMEWORK-AUTHORITATIVE.\n *\n * ## Why a reserved namespace exists at all\n *\n * A provider checkout session carries ONE flat `metadata` map, and two parties want to write into\n * it: the framework (which needs to recognise the purchase when the provider echoes the session\n * back on `checkout.session.completed`) and the application's own caller (who legitimately wants\n * to tag the purchase for their analytics or reconciliation).\n *\n * Those two writers do not have the same authority. The framework's entries decide WHICH billing\n * account is credited and HOW MUCH — the provider replays them verbatim inside a genuinely SIGNED\n * webhook, so a signature proves the provider sent them, never that the framework wrote them. The\n * caller's entries decide nothing.\n *\n * Sharing one un-partitioned namespace between those two authorities is what turned a caller-supplied\n * map into a credit-minting primitive: the producer spread caller metadata LAST, so `billingAccountId`\n * / `productKey` / `quantity` were simply overwritable, and the webhook consumer read the result back\n * as trusted framework state. Ordering alone is not the fix — swapping the spread leaves an\n * unmarked namespace in which the NEXT authoritative key is one careless line from being overridable\n * again. The prefix makes the trust boundary a property of the KEY, so it survives refactors.\n *\n * The boundary is enforced in three places, deliberately overlapping:\n * 1. the OPEN_CHECKOUT request DTO REFUSES any caller key carrying this prefix (loud, at the edge);\n * 2. the metadata builder writes the reserved entries LAST (structural, cannot be forgotten);\n * 3. the webhook consumer reads ONLY reserved keys, and re-derives the billing account from\n *    provider-authoritative data rather than trusting the echoed value.\n *\n * @see BillingCheckoutMetadataKey for the reserved key vocabulary itself.\n */\nexport const BILLING_RESERVED_METADATA_KEY_PREFIX = 'wildo_';\n\n/**\n * The closed vocabulary of framework-authoritative provider-metadata keys.\n *\n * Every member MUST start with {@link BILLING_RESERVED_METADATA_KEY_PREFIX} — that is what makes the\n * DTO's caller-key refusal and the consumer's read-only-reserved rule line up. A member added\n * without the prefix would be silently overridable by a caller, which is the whole defect this\n * vocabulary exists to prevent, so a pinned test asserts the prefix across every member.\n *\n * Named rather than inlined because each member carries a different obligation on the consumer side\n * (one is cross-checked against provider truth, one selects the product, one is bounded and\n * strictly parsed) and a bare string literal has nowhere to record that.\n */\nexport enum BillingCheckoutMetadataKey {\n  /**\n   * The billing account the checkout was opened FOR.\n   *\n   * Written for traceability and cross-checking only. The webhook consumer re-derives the account\n   * from the provider-authoritative customer id on the event and REFUSES the event if the echoed\n   * value disagrees — it is never used as the account to credit.\n   */\n  BILLING_ACCOUNT_ID = 'wildo_billingAccountId',\n  /** The catalog product key purchased — selects the credit pool and credits-per-unit on top-up. */\n  PRODUCT_KEY = 'wildo_productKey',\n  /**\n   * The PROMOTION row whose code the framework validated when it opened this checkout, so the\n   * redemption can be counted when the session COMPLETES (#518).\n   *\n   * Absent when the purchase used no code, which is the common case.\n   *\n   * Stamped rather than re-derived from the completed session, because the provider reports the\n   * DISCOUNT it applied and not the Wildo row that authorised it — and the row is what carries\n   * `maxRedemptions`. Like every key here it is written for the framework's own reconciliation and is\n   * never trusted as authority on its own: the redemption is counted with a compare-and-swap that\n   * refuses past the cap, so a tampered value can at worst count a redemption against a promotion\n   * that has room for one.\n   */\n  PROMOTION_ID = 'wildo_promotionId',\n  /**\n   * The purchased quantity, as a decimal integer string (provider metadata values are strings).\n   * Strictly parsed and bounded by {@link BILLING_CHECKOUT_MAX_QUANTITY} on the way back in.\n   */\n  QUANTITY = 'wildo_quantity',\n}\n\n/**\n * Upper bound on a single checkout's line-item quantity, applied on BOTH sides of the provider\n * round trip: the OPEN_CHECKOUT request DTO refuses more, and the webhook consumer refuses to\n * honour more.\n *\n * One shared constant rather than two, because a consumer bound lower than the producer bound would\n * silently refuse legitimate large purchases the framework itself allowed to be billed — the\n * failure mode where the customer is charged and the credits never arrive.\n *\n * The value is a framework policy ceiling, not a provider-derived one: it is deliberately far above\n * any plausible self-serve purchase and far below the range where an unbounded quantity becomes a\n * credit-minting primitive. An application whose catalog genuinely sells in larger units should\n * raise it here, where both sides read it, rather than at either end.\n */\nexport const BILLING_CHECKOUT_MAX_QUANTITY = 999_999;\n"]}

package/dist/esm/billing/billing-types.shared.schemas.d.ts

@@ -88,13 +88,13 @@ export declare const BillingStateResponseSchema: z.ZodObject<{
         _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
         billingAccountId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
         status: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").SubscriptionStatus>>>>>;
-        items: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodArray<z.ZodObject<{
+        items: z.ZodArray<z.ZodObject<{
             _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>;
             productId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
             priceId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
             quantity: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodNumber>>;
             providerSubscriptionItemId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>;
-        }, z.core.$strip>>>;
+        }, z.core.$strip>>;
         currentPeriodStart: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>;
         currentPeriodEnd: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDate>>>;
         trialStart: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodDate>>;
@@ -141,11 +141,11 @@ export declare const BillingStateResponseSchema: z.ZodObject<{
                 requirePaymentMethod: z.ZodDefault<z.ZodBoolean>;
             }, z.core.$strip>>;
             upgrade: z.ZodOptional<z.ZodObject<{
-                proration: z.ZodDefault<z.ZodEnum<typeof import("./billing-enums.shared.schemas").ProrationBehavior>>;
+                proration: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").ProrationBehavior>>;
                 timing: z.ZodDefault<z.ZodEnum<typeof import("./billing-enums.shared.schemas").BillingTiming>>;
             }, z.core.$strip>>;
             downgrade: z.ZodOptional<z.ZodObject<{
-                proration: z.ZodDefault<z.ZodEnum<typeof import("./billing-enums.shared.schemas").ProrationBehavior>>;
+                proration: z.ZodDefault<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").ProrationBehavior>>;
                 timing: z.ZodDefault<z.ZodEnum<typeof import("./billing-enums.shared.schemas").BillingTiming>>;
             }, z.core.$strip>>;
             cancellation: z.ZodOptional<z.ZodObject<{
@@ -193,7 +193,7 @@ export declare const BillingStateResponseSchema: z.ZodObject<{
     invoices: z.ZodArray<z.ZodObject<{
         _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
         billingAccountId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
-        status: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("./billing-enums.shared.schemas").InvoiceStatus>>>>;
+        status: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodEnum<typeof import("@wildo-ai/external-connectors-models").InvoiceStatus>>>>;
         total: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedMoneySchema>>;
         hostedInvoiceUrl: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>;
         invoicePdfUrl: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>;

package/dist/esm/billing/credit-pool.shared.resources-config.schemas.d.ts

@@ -21,5 +21,5 @@ export declare const CreditPool_ConsumeRequestDto: z.ZodObject<{
 export declare const CreditPool_TopUpRequestDto: z.ZodObject<{
     credits: z.ZodNumber;
 }, z.core.$strip>;
-export declare const creditPoolsPolymorphicFactories: Record<string, import("..").ResourceConfiguration_InitializationFactory<typeof CreditPool_Operations, CoreResourceOperation.READ | CoreResourceOperation.UPDATE | CoreResourceOperation.CREATE | CoreResourceOperation.LIST, any>>;
+export declare const creditPoolsPolymorphicFactories: Record<string, import("..").ResourceConfiguration_InitializationFactory<typeof CreditPool_Operations, CoreResourceOperation.READ | CoreResourceOperation.UPDATE | CoreResourceOperation.UPDATE_MANY | CoreResourceOperation.CREATE | CoreResourceOperation.LIST, any>>;
 //# sourceMappingURL=credit-pool.shared.resources-config.schemas.d.ts.map

package/dist/esm/billing/credit-pool.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credit-pool.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/billing/credit-pool.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAazG,oBAAY,qBAAqB;IAC/B;gEAC4D;IAC5D,OAAO,YAAY;IACnB;8GAC0G;IAC1G,MAAM,WAAW;CAClB;AAID,eAAO,MAAM,4BAA4B;;iBAEvC,CAAC;AAEH,eAAO,MAAM,0BAA0B;;iBAErC,CAAC;AAEH,eAAO,MAAM,+BAA+B,oOAiH3C,CAAC"}
+{"version":3,"file":"credit-pool.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/billing/credit-pool.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,qBAAqB,EAAoB,MAAM,gDAAgD,CAAC;AAczG,oBAAY,qBAAqB;IAC/B;gEAC4D;IAC5D,OAAO,YAAY;IACnB;8GAC0G;IAC1G,MAAM,WAAW;CAClB;AAID,eAAO,MAAM,4BAA4B;;iBAEvC,CAAC;AAEH,eAAO,MAAM,0BAA0B;;iBAErC,CAAC;AAEH,eAAO,MAAM,+BAA+B,wQA0J3C,CAAC"}