@wildo-ai/saas-models 1.1.3 → 1.1.5

package/dist/esm/billing/billing-enums.shared.schemas.js

@@ -21,11 +21,11 @@ export { PricingModel, BillingInterval, TaxDisplayMode, SubscriptionStatus, Invo
  * Imported from `@wildo-ai/saas-models`. `PricingModel`, `BillingInterval` and `ProrationBehavior`
  * are re-exported from the connector models, because their values ARE the provider's wire values.
  *
- * ⚠️ **The catalogue is ONE-WAY.** Sync pushes only rows that have no provider link yet, so a product
- * or price edited in the provider's own dashboard is never read back, never reconciled, and never
- * reported. Removing a product from the array does not retire it at the provider and does not
- * deactivate the existing row — nothing detects that a previously synced key has disappeared. Treat
- * the array as the source of truth and make every change through it.
+ * The authored catalogue is the source of truth; provider-dashboard edits are not read back.
+ * A complete sync detects active local product keys absent from the array and deactivates those
+ * products and their active local prices, retaining the rows and reporting live subscribers.
+ * It does not archive provider products/prices or migrate/cancel subscribers. Treat provider
+ * retirement and customer migration as separate decisions, and inspect the complete sync result.
  *
  * Product types available in the billing catalog.
  *
@@ -154,6 +154,78 @@ export var UsageRecordUnreportableReason;
      */
     UsageRecordUnreportableReason["BILLING_ACCOUNT_DELETED"] = "billing_account_deleted";
 })(UsageRecordUnreportableReason || (UsageRecordUnreportableReason = {}));
+// ── Provider reconciliation ────────────────────────────────────────
+/**
+ * What KIND of disagreement a billing reconciliation run found between local billing state and the
+ * provider.
+ *
+ * A closed vocabulary rather than free text on a log line, because each kind has a different
+ * treatment and a different meaning when it persists, and a recorded run has to be able to say
+ * which one it saw how many times:
+ *
+ * - the two DRIFT kinds and the MISSING kind are REPAIRED, within the provider-authoritative field
+ *   set only;
+ * - {@link SUBSCRIPTION_PROVIDER_STATE_UNREADABLE} is NEVER repaired — a failed read, including a
+ *   provider saying the subscription does not exist, is not evidence the subscription ended, so it
+ *   is reported and nothing is written.
+ *
+ * A steady non-zero count of any repaired kind means webhook delivery is failing and the sweep is
+ * papering over it; that is a different problem from the sweep failing, and only a per-kind count
+ * can tell them apart.
+ */
+export var BillingReconciliationDivergenceKind;
+(function (BillingReconciliationDivergenceKind) {
+    /** A live, provider-linked subscription disagreed with the provider on at least one provider-authoritative field. */
+    BillingReconciliationDivergenceKind["SUBSCRIPTION_FIELD_DRIFT"] = "subscription_field_drift";
+    /** The provider's state for a provider-linked subscription could not be read. Reported only; local state is untouched. */
+    BillingReconciliationDivergenceKind["SUBSCRIPTION_PROVIDER_STATE_UNREADABLE"] = "subscription_provider_state_unreadable";
+    /** An invoice the provider holds for a known customer had no local record — its webhook was never delivered. */
+    BillingReconciliationDivergenceKind["INVOICE_MISSING_LOCALLY"] = "invoice_missing_locally";
+    /** A locally recorded invoice carried a different status from the provider's. */
+    BillingReconciliationDivergenceKind["INVOICE_STATUS_DRIFT"] = "invoice_status_drift";
+})(BillingReconciliationDivergenceKind || (BillingReconciliationDivergenceKind = {}));
+/**
+ * A population a reconciliation run met and deliberately did NOT compare against the provider.
+ *
+ * Counted per run, because a sweep that silently skips rows is indistinguishable from one that
+ * compared them and found agreement — and "we reconciled everything" is only a true sentence when
+ * the skipped populations are stated beside it. Each member is a DECISION with a reason, not a gap:
+ *
+ * Populations that are never compared by design and therefore never met at all — terminal
+ * subscriptions, subscriptions known only to the provider, subscription items, invoice totals, and
+ * invoices older than the per-customer lookback — are named on `BillingReconciliationBackendService`
+ * rather than here, because a run cannot count what it never selects.
+ */
+export var BillingReconciliationUncomparedPopulation;
+(function (BillingReconciliationUncomparedPopulation) {
+    /** A local subscription with no provider link: there is no provider record to compare it against. */
+    BillingReconciliationUncomparedPopulation["SUBSCRIPTION_WITHOUT_PROVIDER_LINK"] = "subscription_without_provider_link";
+    /**
+     * A provider-linked subscription whose mutation slot holds a PREPARED admission: one of its mutations is
+     * about to call the provider, so the run neither read nor wrote it. Its next run re-reads it.
+     */
+    BillingReconciliationUncomparedPopulation["SUBSCRIPTION_MUTATION_ADMISSION_PREPARED"] = "subscription_mutation_admission_prepared";
+    /**
+     * A provider-linked subscription the run read and found disagreeing, but whose mutation slot was written after that read, so nothing
+     * was written: the difference may already be gone. The writer is not always a mutation or a webhook — recovery moving a held
+     * generation behind newer ones advances the same version without settling anything — so this counts a read to REPEAT, never a
+     * mutation observed. Counted here rather than as a divergence the run cannot confirm. Its next run re-reads it.
+     */
+    BillingReconciliationUncomparedPopulation["SUBSCRIPTION_SUPERSEDED_BEFORE_REPAIR"] = "subscription_superseded_before_repair";
+    /**
+     * A provider-linked subscription whose billing account or provider link no longer matches the identity its mutation slot
+     * records. A mutation refuses the same condition as `slot_identity_changed`; the run neither compares nor writes it, and it
+     * stays held until recovery resolves the slot.
+     */
+    BillingReconciliationUncomparedPopulation["SUBSCRIPTION_SLOT_IDENTITY_CHANGED"] = "subscription_slot_identity_changed";
+    /** A billing account with no provider customer: nothing at the provider can hold its invoices. */
+    BillingReconciliationUncomparedPopulation["BILLING_ACCOUNT_WITHOUT_PROVIDER_CUSTOMER"] = "billing_account_without_provider_customer";
+    /**
+     * A billing scope whose rows exceeded one run's page ceiling. The remainder is left to the next run:
+     * reconciliation is idempotent, so a prefix is safe, but the count says the run did not cover the scope.
+     */
+    BillingReconciliationUncomparedPopulation["SCOPE_TRUNCATED_AT_PAGE_CEILING"] = "scope_truncated_at_page_ceiling";
+})(BillingReconciliationUncomparedPopulation || (BillingReconciliationUncomparedPopulation = {}));
 // ── Tax ────────────────────────────────────────────────────────────
 // TaxDisplayMode: re-exported from @wildo-ai/external-connectors-models (see top of file)
 /**
@@ -320,6 +392,20 @@ export var BillingCheckoutMetadataKey;
      */
     BillingCheckoutMetadataKey["QUANTITY"] = "wildo_quantity";
 })(BillingCheckoutMetadataKey || (BillingCheckoutMetadataKey = {}));
+/**
+ * Framework-authoritative metadata keys the engine writes on a provider SUBSCRIPTION (#535), in the same reserved namespace
+ * as {@link BillingCheckoutMetadataKey} and under the same rule: every member starts with
+ * {@link BILLING_RESERVED_METADATA_KEY_PREFIX}, so no caller-authored metadata can be mistaken for it.
+ */
+export var BillingSubscriptionMetadataKey;
+(function (BillingSubscriptionMetadataKey) {
+    /**
+     * `<slotId>:<generation>` of the subscription mutation that sent the update. Written so reconciliation can match a
+     * provider object to the durable mutation that caused it — including a change whose response was lost. A reference, never
+     * authority on its own: a match is confirmed against the stored mutation's identity.
+     */
+    BillingSubscriptionMetadataKey["MUTATION"] = "wildo_mutation";
+})(BillingSubscriptionMetadataKey || (BillingSubscriptionMetadataKey = {}));
 /**
  * Upper bound on a single checkout's line-item quantity, applied on BOTH sides of the provider
  * round trip: the OPEN_CHECKOUT request DTO refuses more, and the webhook consumer refuses to

package/dist/esm/billing/billing-enums.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"billing-enums.shared.schemas.js","sourceRoot":"","sources":["../../../../src/billing/billing-enums.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAE3J,sEAAsE;AAEtE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAN,IAAY,WAaX;AAbD,WAAY,WAAW;IACrB,gEAAgE;IAChE,4BAAa,CAAA;IACb,6DAA6D;IAC7D,8BAAe,CAAA;IACf,kEAAkE;IAClE,kCAAmB,CAAA;IACnB,6EAA6E;IAC7E,oCAAqB,CAAA;IACrB,sEAAsE;IACtE,0CAA2B,CAAA;IAC3B,0EAA0E;IAC1E,4BAAa,CAAA;AACf,CAAC,EAbW,WAAW,KAAX,WAAW,QAatB;AAED;;;;GAIG;AACH,MAAM,CAAN,IAAY,cAGX;AAHD,WAAY,cAAc;IACxB,6BAAW,CAAA;IACX,6BAAW,CAAA;AACb,CAAC,EAHW,cAAc,KAAd,cAAc,QAGzB;AAED,sEAAsE;AAEtE;;GAEG;AACH,8FAA8F;AAC9F,gGAAgG;AAChG,gGAAgG;AAEhG;;GAEG;AACH,MAAM,CAAN,IAAY,aAGX;AAHD,WAAY,aAAa;IACvB,wCAAuB,CAAA;IACvB,gDAA+B,CAAA;AACjC,CAAC,EAHW,aAAa,KAAb,aAAa,QAGxB;AACD,sEAAsE;AAEtE,2FAA2F;AAE3F,sEAAsE;AAEtE;;GAEG;AACH,MAAM,CAAN,IAAY,yBAGX;AAHD,WAAY,yBAAyB;IACnC,oDAAuB,CAAA;IACvB,sEAAyC,CAAA;AAC3C,CAAC,EAHW,yBAAyB,KAAzB,yBAAyB,QAGpC;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,oBAIX;AAJD,WAAY,oBAAoB;IAC9B,mCAAW,CAAA;IACX,mCAAW,CAAA;IACX,qCAAa,CAAA;AACf,CAAC,EAJW,oBAAoB,KAApB,oBAAoB,QAI/B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,eAIX;AAJD,WAAY,eAAe;IACzB,0CAAuB,CAAA;IACvB,oDAAiC,CAAA;IACjC,oCAAiB,CAAA;AACnB,CAAC,EAJW,eAAe,KAAf,eAAe,QAI1B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAN,IAAY,qBAIX;AAJD,WAAY,qBAAqB;IAC/B,4CAAmB,CAAA;IACnB,8CAAqB,CAAA;IACrB,sDAA6B,CAAA;AAC/B,CAAC,EAJW,qBAAqB,KAArB,qBAAqB,QAIhC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAN,IAAY,6BAUX;AAVD,WAAY,6BAA6B;IACvC;;;;;;;OAOG;IACH,oFAAmD,CAAA;AACrD,CAAC,EAVW,6BAA6B,KAA7B,6BAA6B,QAUxC;AAED,sEAAsE;AAEtE,0FAA0F;AAE1F;;GAEG;AACH,MAAM,CAAN,IAAY,kBAGX;AAHD,WAAY,kBAAkB;IAC5B,2DAAqC,CAAA;IACrC,2CAAqB,CAAA;AACvB,CAAC,EAHW,kBAAkB,KAAlB,kBAAkB,QAG7B;AAED,sEAAsE;AAEtE,8FAA8F;AAE9F,0FAA0F;AAC1F,mGAAmG;AACnG,iCAAiC;AAEjC,sEAAsE;AAEtE;;;;;GAKG;AACH,MAAM,CAAN,IAAY,gBAGX;AAHD,WAAY,gBAAgB;IAC1B,mDAA+B,CAAA;IAC/B,2CAAuB,CAAA;AACzB,CAAC,EAHW,gBAAgB,KAAhB,gBAAgB,QAG3B;AAED,sEAAsE;AAEtE;;GAEG;AACH,MAAM,CAAN,IAAY,aASX;AATD,WAAY,aAAa;IACvB,sBAAsB;IACtB,kCAAiB,CAAA;IACjB,0BAA0B;IAC1B,kDAAiC,CAAA;IACjC,uBAAuB;IACvB,sCAAqB,CAAA;IACrB,yBAAyB;IACzB,8BAAa,CAAA;AACf,CAAC,EATW,aAAa,KAAb,aAAa,QASxB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,YAGX;AAHD,WAAY,YAAY;IACtB,yCAAyB,CAAA;IACzB,6CAA6B,CAAA;AAC/B,CAAC,EAHW,YAAY,KAAZ,YAAY,QAGvB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,iBAIX;AAJD,WAAY,iBAAiB;IAC3B,kCAAa,CAAA;IACb,4CAAuB,CAAA;IACvB,wCAAmB,CAAA;AACrB,CAAC,EAJW,iBAAiB,KAAjB,iBAAiB,QAI5B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,cAMX;AAND,WAAY,cAAc;IACxB,qCAAmB,CAAA;IACnB,uCAAqB,CAAA;IACrB,yCAAuB,CAAA;IACvB,qCAAmB,CAAA;IACnB,yCAAuB,CAAA;AACzB,CAAC,EANW,cAAc,KAAd,cAAc,QAMzB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,kBAKX;AALD,WAAY,kBAAkB;IAC5B,uCAAiB,CAAA;IACjB,2CAAqB,CAAA;IACrB,yCAAmB,CAAA;IACnB,+CAAyB,CAAA;AAC3B,CAAC,EALW,kBAAkB,KAAlB,kBAAkB,QAK7B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,kBAKX;AALD,WAAY,kBAAkB;IAC5B,uCAAiB,CAAA;IACjB,2CAAqB,CAAA;IACrB,yCAAmB,CAAA;IACnB,yDAAmC,CAAA;AACrC,CAAC,EALW,kBAAkB,KAAlB,kBAAkB,QAK7B;AAED,mFAAmF;AAEnF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,QAAQ,CAAC;AAE7D;;;;;;;;;;;GAWG;AACH,MAAM,CAAN,IAAY,0BA8BX;AA9BD,WAAY,0BAA0B;IACpC;;;;;;OAMG;IACH,2EAA6C,CAAA;IAC7C,kGAAkG;IAClG,8DAAgC,CAAA;IAChC;;;;;;;;;;;;OAYG;IACH,gEAAkC,CAAA;IAClC;;;OAGG;IACH,yDAA2B,CAAA;AAC7B,CAAC,EA9BW,0BAA0B,KAA1B,0BAA0B,QA8BrC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,OAAO,CAAC","sourcesContent":["/**\n * Billing Enums (Shared)\n *\n * All billing-system enums used across backend, frontend, and shared models.\n * These supersede the legacy enums from billing.shared.schemas.ts.\n *\n * Enums shared with the standard billing interface (PricingModel, BillingInterval,\n * TaxDisplayMode, SubscriptionStatus, InvoiceStatus, ProrationBehavior) are defined in\n * @wildo-ai/external-connectors-models and re-exported here for convenience.\n *\n * @see billing-and-features-system.md §6 (Billing Schemas)\n */\n\nexport { PricingModel, BillingInterval, TaxDisplayMode, SubscriptionStatus, InvoiceStatus, ProrationBehavior } from '@wildo-ai/external-connectors-models';\n\n// ── Product & Pricing ──────────────────────────────────────────────\n\n/**\n * @wildo_source:part:start saas.models.billing.catalog-vocabularies facet:layer:shared facet:audience:app-developer\n *\n * The vocabularies an application types into its own product catalogue — the `ProductDefinition[]`\n * it exports from its shared library and hands to the engine with its module declarations.\n *\n * Imported from `@wildo-ai/saas-models`. `PricingModel`, `BillingInterval` and `ProrationBehavior`\n * are re-exported from the connector models, because their values ARE the provider's wire values.\n *\n * ⚠️ **The catalogue is ONE-WAY.** Sync pushes only rows that have no provider link yet, so a product\n * or price edited in the provider's own dashboard is never read back, never reconciled, and never\n * reported. Removing a product from the array does not retire it at the provider and does not\n * deactivate the existing row — nothing detects that a previously synced key has disappeared. Treat\n * the array as the source of truth and make every change through it.\n *\n * Product types available in the billing catalog.\n *\n * | Type        | Creates subscription? | Repeatable? | Grants features? | Usage tracked? |\n * |-------------|----------------------|-------------|------------------|----------------|\n * | PLAN        | Yes (exclusive)      | No (switch) | Yes              | No             |\n * | ADDON       | Yes (stackable)      | No (toggle) | Yes              | No             |\n * | METERED     | Yes                  | No          | Optional         | Yes            |\n * | ONE_TIME    | No                   | No (once)   | Optional         | No             |\n * | CREDIT_PACK | No                   | Yes         | No (credits)     | Credits-based  |\n * | ITEM        | No                   | Yes         | Optional         | No             |\n */\nexport enum ProductType {\n  /** Subscription plan, mutually exclusive per billing account */\n  PLAN = 'plan',\n  /** Optional subscription add-on, stackable on top of plan */\n  ADDON = 'addon',\n  /** Usage-based subscription (consumption reported to provider) */\n  METERED = 'metered',\n  /** Single purchase, once per billing account (e.g., setup fee, migration) */\n  ONE_TIME = 'one_time',\n  /** Buy a pack of credits/tokens (repeatable, consumable over time) */\n  CREDIT_PACK = 'credit_pack',\n  /** Purchasable item, repeatable (e.g., report generation, data export) */\n  ITEM = 'item',\n}\n\n/**\n * Limit grant mode: how this product's limits compose with other products.\n * - SET: absolute value (replaces, used for PLAN base limits)\n * - ADD: additive (stacks on top, used for ADDON bonus limits)\n */\nexport enum LimitGrantMode {\n  SET = 'set',\n  ADD = 'add',\n}\n\n// ── Billing Lifecycle ──────────────────────────────────────────────\n\n/**\n * Proration behavior for plan changes (upgrade/downgrade).\n */\n// ProrationBehavior: re-exported from @wildo-ai/external-connectors-models (see top of file).\n// Moved there 2026-09-08 (#516) because its three values ARE the provider's wire values, so the\n// request contract has to be able to name the type — see TaxDisplayMode for the same reasoning.\n\n/**\n * Billing timing: when to apply plan changes.\n */\nexport enum BillingTiming {\n  IMMEDIATE = 'immediate',\n  AT_PERIOD_END = 'at_period_end',\n}\n/** @wildo_source:part:end saas.models.billing.catalog-vocabularies */\n\n// BillingInterval: re-exported from @wildo-ai/external-connectors-models (see top of file)\n\n// ── Metering & Usage ───────────────────────────────────────────────\n\n/**\n * Metering aggregation window for usage records.\n */\nexport enum MeteringAggregationWindow {\n  PER_FLUSH = 'per_flush',\n  PER_BILLING_PERIOD = 'per_billing_period',\n}\n\n/**\n * Usage aggregation type for metered prices.\n */\nexport enum UsageAggregationType {\n  SUM = 'sum',\n  MAX = 'max',\n  LAST = 'last',\n}\n\n/**\n * Usage record source type.\n */\nexport enum UsageSourceType {\n  OPERATION = 'operation',\n  RESOURCE_COUNT = 'resource_count',\n  CUSTOM = 'custom',\n}\n\n/**\n * Where one metered usage row stands with respect to the provider flush.\n *\n * This was a BOOLEAN (`reportedToProvider`) until 2026-09-09, and the third state is the whole\n * reason it is an enum now (#512). A boolean can say \"not yet reported\" and \"reported\", and the\n * flush selects on the first — so a row that can NEVER be reported has nowhere to go. It stays\n * pending, is re-selected by every run, fails identically, and grows an error backlog that no\n * operator action can drain, on a five-minute schedule.\n *\n * The three states are genuinely distinct and must not be collapsed:\n *\n * - {@link PENDING} — the flush will try again. Every newly recorded row starts here.\n * - {@link REPORTED} — the provider acknowledged the quantity. `reportedAt` says when. Terminal,\n *   and money has moved: never move a row back out of this state.\n * - {@link UNREPORTABLE} — the flush determined the row can never be reported, for a reason named\n *   in `unreportableReason`. Terminal, and NO money moved. Marking such a row `REPORTED` instead\n *   would drain the backlog just as well and would be a lie no later reader could detect, which is\n *   exactly why the state exists rather than a shortcut.\n */\nexport enum UsageRecordFlushState {\n  PENDING = 'pending',\n  REPORTED = 'reported',\n  UNREPORTABLE = 'unreportable',\n}\n\n/**\n * Why a usage row was determined to be permanently unreportable.\n *\n * One member today, and it is a closed vocabulary rather than a free string because the operator\n * reading a retained financial record needs to know which permanent condition applies — and because\n * the distinction between a PERMANENT and a TRANSIENT failure is the judgement this whole state\n * turns on. A billing account that merely has no `providerCustomerId` yet is transient: the account\n * exists, provisioning may still complete, and such a row stays {@link UsageRecordFlushState.PENDING}.\n * Only a condition that cannot resolve itself belongs here.\n */\nexport enum UsageRecordUnreportableReason {\n  /**\n   * The billing account row no longer exists.\n   *\n   * Reachable by design: usage rows are RETAINED when their subject is erased (the tax/audit\n   * obligation on `usage-record.shared.schemas.ts`), so a deleted account legitimately leaves rows\n   * behind with no provider customer to report them to. Nothing can restore the mapping, so the\n   * quantity will never be billed and saying so on the row is the only honest outcome.\n   */\n  BILLING_ACCOUNT_DELETED = 'billing_account_deleted',\n}\n\n// ── Tax ────────────────────────────────────────────────────────────\n\n// TaxDisplayMode: re-exported from @wildo-ai/external-connectors-models (see top of file)\n\n/**\n * Tax calculation mode: provider-managed or disabled.\n */\nexport enum TaxCalculationMode {\n  PROVIDER_MANAGED = 'provider_managed',\n  DISABLED = 'disabled',\n}\n\n// ── Subscription & Invoice Status ──────────────────────────────────\n\n// SubscriptionStatus: re-exported from @wildo-ai/external-connectors-models (see top of file)\n\n// InvoiceStatus: re-exported from @wildo-ai/external-connectors-models (see top of file).\n// It moved there on 2026-09-09 so `StandardBilling_InvoiceData` could name it; the specifier every\n// consumer imports is unchanged.\n\n// ── Billing Scope ──────────────────────────────────────────────────\n\n/**\n * Billing-compatible scope types.\n * Subset of ResourcePrimaryScope — excludes APPLICATION which has no billing variants.\n * Used by scope-agnostic billing resources (e.g., Referrals) that reference\n * billing accounts across different polymorphic collections.\n */\nexport enum BillingScopeType {\n  ORGANIZATIONS = 'organizations',\n  USER_SELF = 'user_self',\n}\n\n// ── Promotions & Referrals ─────────────────────────────────────────\n\n/**\n * Promotion type.\n */\nexport enum PromotionType {\n  /** Direct discount */\n  COUPON = 'coupon',\n  /** Code-based discount */\n  PROMOTION_CODE = 'promotion_code',\n  /** Referral program */\n  REFERRAL = 'referral',\n  /** Special deal/offer */\n  DEAL = 'deal',\n}\n\n/**\n * Discount type for promotions.\n */\nexport enum DiscountType {\n  PERCENTAGE = 'percentage',\n  FIXED_AMOUNT = 'fixed_amount',\n}\n\n/**\n * Promotion duration (how long the discount applies).\n */\nexport enum PromotionDuration {\n  ONCE = 'once',\n  REPEATING = 'repeating',\n  FOREVER = 'forever',\n}\n\n/**\n * Referral status lifecycle.\n */\nexport enum ReferralStatus {\n  PENDING = 'pending',\n  ACCEPTED = 'accepted',\n  CONVERTED = 'converted',\n  EXPIRED = 'expired',\n  CANCELLED = 'cancelled',\n}\n\n/**\n * Reward type for the referrer (person who referred).\n */\nexport enum ReferrerRewardType {\n  CREDIT = 'credit',\n  DISCOUNT = 'discount',\n  FEATURE = 'feature',\n  COMMISSION = 'commission',\n}\n\n/**\n * Reward type for the referred (new customer).\n */\nexport enum ReferredRewardType {\n  CREDIT = 'credit',\n  DISCOUNT = 'discount',\n  FEATURE = 'feature',\n  TRIAL_EXTENSION = 'trial_extension',\n}\n\n// ── Provider checkout metadata: the framework/caller trust boundary ─────────────\n\n/**\n * Prefix that marks a provider-metadata key as FRAMEWORK-AUTHORITATIVE.\n *\n * ## Why a reserved namespace exists at all\n *\n * A provider checkout session carries ONE flat `metadata` map, and two parties want to write into\n * it: the framework (which needs to recognise the purchase when the provider echoes the session\n * back on `checkout.session.completed`) and the application's own caller (who legitimately wants\n * to tag the purchase for their analytics or reconciliation).\n *\n * Those two writers do not have the same authority. The framework's entries decide WHICH billing\n * account is credited and HOW MUCH — the provider replays them verbatim inside a genuinely SIGNED\n * webhook, so a signature proves the provider sent them, never that the framework wrote them. The\n * caller's entries decide nothing.\n *\n * Sharing one un-partitioned namespace between those two authorities is what turned a caller-supplied\n * map into a credit-minting primitive: the producer spread caller metadata LAST, so `billingAccountId`\n * / `productKey` / `quantity` were simply overwritable, and the webhook consumer read the result back\n * as trusted framework state. Ordering alone is not the fix — swapping the spread leaves an\n * unmarked namespace in which the NEXT authoritative key is one careless line from being overridable\n * again. The prefix makes the trust boundary a property of the KEY, so it survives refactors.\n *\n * The boundary is enforced in three places, deliberately overlapping:\n * 1. the OPEN_CHECKOUT request DTO REFUSES any caller key carrying this prefix (loud, at the edge);\n * 2. the metadata builder writes the reserved entries LAST (structural, cannot be forgotten);\n * 3. the webhook consumer reads ONLY reserved keys, and re-derives the billing account from\n *    provider-authoritative data rather than trusting the echoed value.\n *\n * @see BillingCheckoutMetadataKey for the reserved key vocabulary itself.\n */\nexport const BILLING_RESERVED_METADATA_KEY_PREFIX = 'wildo_';\n\n/**\n * The closed vocabulary of framework-authoritative provider-metadata keys.\n *\n * Every member MUST start with {@link BILLING_RESERVED_METADATA_KEY_PREFIX} — that is what makes the\n * DTO's caller-key refusal and the consumer's read-only-reserved rule line up. A member added\n * without the prefix would be silently overridable by a caller, which is the whole defect this\n * vocabulary exists to prevent, so a pinned test asserts the prefix across every member.\n *\n * Named rather than inlined because each member carries a different obligation on the consumer side\n * (one is cross-checked against provider truth, one selects the product, one is bounded and\n * strictly parsed) and a bare string literal has nowhere to record that.\n */\nexport enum BillingCheckoutMetadataKey {\n  /**\n   * The billing account the checkout was opened FOR.\n   *\n   * Written for traceability and cross-checking only. The webhook consumer re-derives the account\n   * from the provider-authoritative customer id on the event and REFUSES the event if the echoed\n   * value disagrees — it is never used as the account to credit.\n   */\n  BILLING_ACCOUNT_ID = 'wildo_billingAccountId',\n  /** The catalog product key purchased — selects the credit pool and credits-per-unit on top-up. */\n  PRODUCT_KEY = 'wildo_productKey',\n  /**\n   * The PROMOTION row whose code the framework validated when it opened this checkout, so the\n   * redemption can be counted when the session COMPLETES (#518).\n   *\n   * Absent when the purchase used no code, which is the common case.\n   *\n   * Stamped rather than re-derived from the completed session, because the provider reports the\n   * DISCOUNT it applied and not the Wildo row that authorised it — and the row is what carries\n   * `maxRedemptions`. Like every key here it is written for the framework's own reconciliation and is\n   * never trusted as authority on its own: the redemption is counted with a compare-and-swap that\n   * refuses past the cap, so a tampered value can at worst count a redemption against a promotion\n   * that has room for one.\n   */\n  PROMOTION_ID = 'wildo_promotionId',\n  /**\n   * The purchased quantity, as a decimal integer string (provider metadata values are strings).\n   * Strictly parsed and bounded by {@link BILLING_CHECKOUT_MAX_QUANTITY} on the way back in.\n   */\n  QUANTITY = 'wildo_quantity',\n}\n\n/**\n * Upper bound on a single checkout's line-item quantity, applied on BOTH sides of the provider\n * round trip: the OPEN_CHECKOUT request DTO refuses more, and the webhook consumer refuses to\n * honour more.\n *\n * One shared constant rather than two, because a consumer bound lower than the producer bound would\n * silently refuse legitimate large purchases the framework itself allowed to be billed — the\n * failure mode where the customer is charged and the credits never arrive.\n *\n * The value is a framework policy ceiling, not a provider-derived one: it is deliberately far above\n * any plausible self-serve purchase and far below the range where an unbounded quantity becomes a\n * credit-minting primitive. An application whose catalog genuinely sells in larger units should\n * raise it here, where both sides read it, rather than at either end.\n */\nexport const BILLING_CHECKOUT_MAX_QUANTITY = 999_999;\n"]}
+{"version":3,"file":"billing-enums.shared.schemas.js","sourceRoot":"","sources":["../../../../src/billing/billing-enums.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,iBAAiB,EAAE,MAAM,sCAAsC,CAAC;AAE3J,sEAAsE;AAEtE;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAN,IAAY,WAaX;AAbD,WAAY,WAAW;IACrB,gEAAgE;IAChE,4BAAa,CAAA;IACb,6DAA6D;IAC7D,8BAAe,CAAA;IACf,kEAAkE;IAClE,kCAAmB,CAAA;IACnB,6EAA6E;IAC7E,oCAAqB,CAAA;IACrB,sEAAsE;IACtE,0CAA2B,CAAA;IAC3B,0EAA0E;IAC1E,4BAAa,CAAA;AACf,CAAC,EAbW,WAAW,KAAX,WAAW,QAatB;AAED;;;;GAIG;AACH,MAAM,CAAN,IAAY,cAGX;AAHD,WAAY,cAAc;IACxB,6BAAW,CAAA;IACX,6BAAW,CAAA;AACb,CAAC,EAHW,cAAc,KAAd,cAAc,QAGzB;AAED,sEAAsE;AAEtE;;GAEG;AACH,8FAA8F;AAC9F,gGAAgG;AAChG,gGAAgG;AAEhG;;GAEG;AACH,MAAM,CAAN,IAAY,aAGX;AAHD,WAAY,aAAa;IACvB,wCAAuB,CAAA;IACvB,gDAA+B,CAAA;AACjC,CAAC,EAHW,aAAa,KAAb,aAAa,QAGxB;AACD,sEAAsE;AAEtE,2FAA2F;AAE3F,sEAAsE;AAEtE;;GAEG;AACH,MAAM,CAAN,IAAY,yBAGX;AAHD,WAAY,yBAAyB;IACnC,oDAAuB,CAAA;IACvB,sEAAyC,CAAA;AAC3C,CAAC,EAHW,yBAAyB,KAAzB,yBAAyB,QAGpC;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,oBAIX;AAJD,WAAY,oBAAoB;IAC9B,mCAAW,CAAA;IACX,mCAAW,CAAA;IACX,qCAAa,CAAA;AACf,CAAC,EAJW,oBAAoB,KAApB,oBAAoB,QAI/B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,eAIX;AAJD,WAAY,eAAe;IACzB,0CAAuB,CAAA;IACvB,oDAAiC,CAAA;IACjC,oCAAiB,CAAA;AACnB,CAAC,EAJW,eAAe,KAAf,eAAe,QAI1B;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAN,IAAY,qBAIX;AAJD,WAAY,qBAAqB;IAC/B,4CAAmB,CAAA;IACnB,8CAAqB,CAAA;IACrB,sDAA6B,CAAA;AAC/B,CAAC,EAJW,qBAAqB,KAArB,qBAAqB,QAIhC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAN,IAAY,6BAUX;AAVD,WAAY,6BAA6B;IACvC;;;;;;;OAOG;IACH,oFAAmD,CAAA;AACrD,CAAC,EAVW,6BAA6B,KAA7B,6BAA6B,QAUxC;AAED,sEAAsE;AAEtE;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAN,IAAY,mCASX;AATD,WAAY,mCAAmC;IAC7C,qHAAqH;IACrH,4FAAqD,CAAA;IACrD,0HAA0H;IAC1H,wHAAiF,CAAA;IACjF,gHAAgH;IAChH,0FAAmD,CAAA;IACnD,iFAAiF;IACjF,oFAA6C,CAAA;AAC/C,CAAC,EATW,mCAAmC,KAAnC,mCAAmC,QAS9C;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAN,IAAY,yCA4BX;AA5BD,WAAY,yCAAyC;IACnD,qGAAqG;IACrG,sHAAyE,CAAA;IACzE;;;OAGG;IACH,kIAAqF,CAAA;IACrF;;;;;OAKG;IACH,4HAA+E,CAAA;IAC/E;;;;OAIG;IACH,sHAAyE,CAAA;IACzE,kGAAkG;IAClG,oIAAuF,CAAA;IACvF;;;OAGG;IACH,gHAAmE,CAAA;AACrE,CAAC,EA5BW,yCAAyC,KAAzC,yCAAyC,QA4BpD;AAED,sEAAsE;AAEtE,0FAA0F;AAE1F;;GAEG;AACH,MAAM,CAAN,IAAY,kBAGX;AAHD,WAAY,kBAAkB;IAC5B,2DAAqC,CAAA;IACrC,2CAAqB,CAAA;AACvB,CAAC,EAHW,kBAAkB,KAAlB,kBAAkB,QAG7B;AAED,sEAAsE;AAEtE,8FAA8F;AAE9F,0FAA0F;AAC1F,mGAAmG;AACnG,iCAAiC;AAEjC,sEAAsE;AAEtE;;;;;GAKG;AACH,MAAM,CAAN,IAAY,gBAGX;AAHD,WAAY,gBAAgB;IAC1B,mDAA+B,CAAA;IAC/B,2CAAuB,CAAA;AACzB,CAAC,EAHW,gBAAgB,KAAhB,gBAAgB,QAG3B;AAED,sEAAsE;AAEtE;;GAEG;AACH,MAAM,CAAN,IAAY,aASX;AATD,WAAY,aAAa;IACvB,sBAAsB;IACtB,kCAAiB,CAAA;IACjB,0BAA0B;IAC1B,kDAAiC,CAAA;IACjC,uBAAuB;IACvB,sCAAqB,CAAA;IACrB,yBAAyB;IACzB,8BAAa,CAAA;AACf,CAAC,EATW,aAAa,KAAb,aAAa,QASxB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,YAGX;AAHD,WAAY,YAAY;IACtB,yCAAyB,CAAA;IACzB,6CAA6B,CAAA;AAC/B,CAAC,EAHW,YAAY,KAAZ,YAAY,QAGvB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,iBAIX;AAJD,WAAY,iBAAiB;IAC3B,kCAAa,CAAA;IACb,4CAAuB,CAAA;IACvB,wCAAmB,CAAA;AACrB,CAAC,EAJW,iBAAiB,KAAjB,iBAAiB,QAI5B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,cAMX;AAND,WAAY,cAAc;IACxB,qCAAmB,CAAA;IACnB,uCAAqB,CAAA;IACrB,yCAAuB,CAAA;IACvB,qCAAmB,CAAA;IACnB,yCAAuB,CAAA;AACzB,CAAC,EANW,cAAc,KAAd,cAAc,QAMzB;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,kBAKX;AALD,WAAY,kBAAkB;IAC5B,uCAAiB,CAAA;IACjB,2CAAqB,CAAA;IACrB,yCAAmB,CAAA;IACnB,+CAAyB,CAAA;AAC3B,CAAC,EALW,kBAAkB,KAAlB,kBAAkB,QAK7B;AAED;;GAEG;AACH,MAAM,CAAN,IAAY,kBAKX;AALD,WAAY,kBAAkB;IAC5B,uCAAiB,CAAA;IACjB,2CAAqB,CAAA;IACrB,yCAAmB,CAAA;IACnB,yDAAmC,CAAA;AACrC,CAAC,EALW,kBAAkB,KAAlB,kBAAkB,QAK7B;AAED,mFAAmF;AAEnF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,MAAM,CAAC,MAAM,oCAAoC,GAAG,QAAQ,CAAC;AAE7D;;;;;;;;;;;GAWG;AACH,MAAM,CAAN,IAAY,0BA8BX;AA9BD,WAAY,0BAA0B;IACpC;;;;;;OAMG;IACH,2EAA6C,CAAA;IAC7C,kGAAkG;IAClG,8DAAgC,CAAA;IAChC;;;;;;;;;;;;OAYG;IACH,gEAAkC,CAAA;IAClC;;;OAGG;IACH,yDAA2B,CAAA;AAC7B,CAAC,EA9BW,0BAA0B,KAA1B,0BAA0B,QA8BrC;AAED;;;;GAIG;AACH,MAAM,CAAN,IAAY,8BAOX;AAPD,WAAY,8BAA8B;IACxC;;;;OAIG;IACH,6DAA2B,CAAA;AAC7B,CAAC,EAPW,8BAA8B,KAA9B,8BAA8B,QAOzC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,OAAO,CAAC","sourcesContent":["/**\n * Billing Enums (Shared)\n *\n * All billing-system enums used across backend, frontend, and shared models.\n * These supersede the legacy enums from billing.shared.schemas.ts.\n *\n * Enums shared with the standard billing interface (PricingModel, BillingInterval,\n * TaxDisplayMode, SubscriptionStatus, InvoiceStatus, ProrationBehavior) are defined in\n * @wildo-ai/external-connectors-models and re-exported here for convenience.\n *\n * @see billing-and-features-system.md §6 (Billing Schemas)\n */\n\nexport { PricingModel, BillingInterval, TaxDisplayMode, SubscriptionStatus, InvoiceStatus, ProrationBehavior } from '@wildo-ai/external-connectors-models';\n\n// ── Product & Pricing ──────────────────────────────────────────────\n\n/**\n * @wildo_source:part:start saas.models.billing.catalog-vocabularies facet:layer:shared facet:audience:app-developer\n *\n * The vocabularies an application types into its own product catalogue — the `ProductDefinition[]`\n * it exports from its shared library and hands to the engine with its module declarations.\n *\n * Imported from `@wildo-ai/saas-models`. `PricingModel`, `BillingInterval` and `ProrationBehavior`\n * are re-exported from the connector models, because their values ARE the provider's wire values.\n *\n * The authored catalogue is the source of truth; provider-dashboard edits are not read back.\n * A complete sync detects active local product keys absent from the array and deactivates those\n * products and their active local prices, retaining the rows and reporting live subscribers.\n * It does not archive provider products/prices or migrate/cancel subscribers. Treat provider\n * retirement and customer migration as separate decisions, and inspect the complete sync result.\n *\n * Product types available in the billing catalog.\n *\n * | Type        | Creates subscription? | Repeatable? | Grants features? | Usage tracked? |\n * |-------------|----------------------|-------------|------------------|----------------|\n * | PLAN        | Yes (exclusive)      | No (switch) | Yes              | No             |\n * | ADDON       | Yes (stackable)      | No (toggle) | Yes              | No             |\n * | METERED     | Yes                  | No          | Optional         | Yes            |\n * | ONE_TIME    | No                   | No (once)   | Optional         | No             |\n * | CREDIT_PACK | No                   | Yes         | No (credits)     | Credits-based  |\n * | ITEM        | No                   | Yes         | Optional         | No             |\n */\nexport enum ProductType {\n  /** Subscription plan, mutually exclusive per billing account */\n  PLAN = 'plan',\n  /** Optional subscription add-on, stackable on top of plan */\n  ADDON = 'addon',\n  /** Usage-based subscription (consumption reported to provider) */\n  METERED = 'metered',\n  /** Single purchase, once per billing account (e.g., setup fee, migration) */\n  ONE_TIME = 'one_time',\n  /** Buy a pack of credits/tokens (repeatable, consumable over time) */\n  CREDIT_PACK = 'credit_pack',\n  /** Purchasable item, repeatable (e.g., report generation, data export) */\n  ITEM = 'item',\n}\n\n/**\n * Limit grant mode: how this product's limits compose with other products.\n * - SET: absolute value (replaces, used for PLAN base limits)\n * - ADD: additive (stacks on top, used for ADDON bonus limits)\n */\nexport enum LimitGrantMode {\n  SET = 'set',\n  ADD = 'add',\n}\n\n// ── Billing Lifecycle ──────────────────────────────────────────────\n\n/**\n * Proration behavior for plan changes (upgrade/downgrade).\n */\n// ProrationBehavior: re-exported from @wildo-ai/external-connectors-models (see top of file).\n// Moved there 2026-09-08 (#516) because its three values ARE the provider's wire values, so the\n// request contract has to be able to name the type — see TaxDisplayMode for the same reasoning.\n\n/**\n * Billing timing: when to apply plan changes.\n */\nexport enum BillingTiming {\n  IMMEDIATE = 'immediate',\n  AT_PERIOD_END = 'at_period_end',\n}\n/** @wildo_source:part:end saas.models.billing.catalog-vocabularies */\n\n// BillingInterval: re-exported from @wildo-ai/external-connectors-models (see top of file)\n\n// ── Metering & Usage ───────────────────────────────────────────────\n\n/**\n * Metering aggregation window for usage records.\n */\nexport enum MeteringAggregationWindow {\n  PER_FLUSH = 'per_flush',\n  PER_BILLING_PERIOD = 'per_billing_period',\n}\n\n/**\n * Usage aggregation type for metered prices.\n */\nexport enum UsageAggregationType {\n  SUM = 'sum',\n  MAX = 'max',\n  LAST = 'last',\n}\n\n/**\n * Usage record source type.\n */\nexport enum UsageSourceType {\n  OPERATION = 'operation',\n  RESOURCE_COUNT = 'resource_count',\n  CUSTOM = 'custom',\n}\n\n/**\n * Where one metered usage row stands with respect to the provider flush.\n *\n * This was a BOOLEAN (`reportedToProvider`) until 2026-09-09, and the third state is the whole\n * reason it is an enum now (#512). A boolean can say \"not yet reported\" and \"reported\", and the\n * flush selects on the first — so a row that can NEVER be reported has nowhere to go. It stays\n * pending, is re-selected by every run, fails identically, and grows an error backlog that no\n * operator action can drain, on a five-minute schedule.\n *\n * The three states are genuinely distinct and must not be collapsed:\n *\n * - {@link PENDING} — the flush will try again. Every newly recorded row starts here.\n * - {@link REPORTED} — the provider acknowledged the quantity. `reportedAt` says when. Terminal,\n *   and money has moved: never move a row back out of this state.\n * - {@link UNREPORTABLE} — the flush determined the row can never be reported, for a reason named\n *   in `unreportableReason`. Terminal, and NO money moved. Marking such a row `REPORTED` instead\n *   would drain the backlog just as well and would be a lie no later reader could detect, which is\n *   exactly why the state exists rather than a shortcut.\n */\nexport enum UsageRecordFlushState {\n  PENDING = 'pending',\n  REPORTED = 'reported',\n  UNREPORTABLE = 'unreportable',\n}\n\n/**\n * Why a usage row was determined to be permanently unreportable.\n *\n * One member today, and it is a closed vocabulary rather than a free string because the operator\n * reading a retained financial record needs to know which permanent condition applies — and because\n * the distinction between a PERMANENT and a TRANSIENT failure is the judgement this whole state\n * turns on. A billing account that merely has no `providerCustomerId` yet is transient: the account\n * exists, provisioning may still complete, and such a row stays {@link UsageRecordFlushState.PENDING}.\n * Only a condition that cannot resolve itself belongs here.\n */\nexport enum UsageRecordUnreportableReason {\n  /**\n   * The billing account row no longer exists.\n   *\n   * Reachable by design: usage rows are RETAINED when their subject is erased (the tax/audit\n   * obligation on `usage-record.shared.schemas.ts`), so a deleted account legitimately leaves rows\n   * behind with no provider customer to report them to. Nothing can restore the mapping, so the\n   * quantity will never be billed and saying so on the row is the only honest outcome.\n   */\n  BILLING_ACCOUNT_DELETED = 'billing_account_deleted',\n}\n\n// ── Provider reconciliation ────────────────────────────────────────\n\n/**\n * What KIND of disagreement a billing reconciliation run found between local billing state and the\n * provider.\n *\n * A closed vocabulary rather than free text on a log line, because each kind has a different\n * treatment and a different meaning when it persists, and a recorded run has to be able to say\n * which one it saw how many times:\n *\n * - the two DRIFT kinds and the MISSING kind are REPAIRED, within the provider-authoritative field\n *   set only;\n * - {@link SUBSCRIPTION_PROVIDER_STATE_UNREADABLE} is NEVER repaired — a failed read, including a\n *   provider saying the subscription does not exist, is not evidence the subscription ended, so it\n *   is reported and nothing is written.\n *\n * A steady non-zero count of any repaired kind means webhook delivery is failing and the sweep is\n * papering over it; that is a different problem from the sweep failing, and only a per-kind count\n * can tell them apart.\n */\nexport enum BillingReconciliationDivergenceKind {\n  /** A live, provider-linked subscription disagreed with the provider on at least one provider-authoritative field. */\n  SUBSCRIPTION_FIELD_DRIFT = 'subscription_field_drift',\n  /** The provider's state for a provider-linked subscription could not be read. Reported only; local state is untouched. */\n  SUBSCRIPTION_PROVIDER_STATE_UNREADABLE = 'subscription_provider_state_unreadable',\n  /** An invoice the provider holds for a known customer had no local record — its webhook was never delivered. */\n  INVOICE_MISSING_LOCALLY = 'invoice_missing_locally',\n  /** A locally recorded invoice carried a different status from the provider's. */\n  INVOICE_STATUS_DRIFT = 'invoice_status_drift',\n}\n\n/**\n * A population a reconciliation run met and deliberately did NOT compare against the provider.\n *\n * Counted per run, because a sweep that silently skips rows is indistinguishable from one that\n * compared them and found agreement — and \"we reconciled everything\" is only a true sentence when\n * the skipped populations are stated beside it. Each member is a DECISION with a reason, not a gap:\n *\n * Populations that are never compared by design and therefore never met at all — terminal\n * subscriptions, subscriptions known only to the provider, subscription items, invoice totals, and\n * invoices older than the per-customer lookback — are named on `BillingReconciliationBackendService`\n * rather than here, because a run cannot count what it never selects.\n */\nexport enum BillingReconciliationUncomparedPopulation {\n  /** A local subscription with no provider link: there is no provider record to compare it against. */\n  SUBSCRIPTION_WITHOUT_PROVIDER_LINK = 'subscription_without_provider_link',\n  /**\n   * A provider-linked subscription whose mutation slot holds a PREPARED admission: one of its mutations is\n   * about to call the provider, so the run neither read nor wrote it. Its next run re-reads it.\n   */\n  SUBSCRIPTION_MUTATION_ADMISSION_PREPARED = 'subscription_mutation_admission_prepared',\n  /**\n   * A provider-linked subscription the run read and found disagreeing, but whose mutation slot was written after that read, so nothing\n   * was written: the difference may already be gone. The writer is not always a mutation or a webhook — recovery moving a held\n   * generation behind newer ones advances the same version without settling anything — so this counts a read to REPEAT, never a\n   * mutation observed. Counted here rather than as a divergence the run cannot confirm. Its next run re-reads it.\n   */\n  SUBSCRIPTION_SUPERSEDED_BEFORE_REPAIR = 'subscription_superseded_before_repair',\n  /**\n   * A provider-linked subscription whose billing account or provider link no longer matches the identity its mutation slot\n   * records. A mutation refuses the same condition as `slot_identity_changed`; the run neither compares nor writes it, and it\n   * stays held until recovery resolves the slot.\n   */\n  SUBSCRIPTION_SLOT_IDENTITY_CHANGED = 'subscription_slot_identity_changed',\n  /** A billing account with no provider customer: nothing at the provider can hold its invoices. */\n  BILLING_ACCOUNT_WITHOUT_PROVIDER_CUSTOMER = 'billing_account_without_provider_customer',\n  /**\n   * A billing scope whose rows exceeded one run's page ceiling. The remainder is left to the next run:\n   * reconciliation is idempotent, so a prefix is safe, but the count says the run did not cover the scope.\n   */\n  SCOPE_TRUNCATED_AT_PAGE_CEILING = 'scope_truncated_at_page_ceiling',\n}\n\n// ── Tax ────────────────────────────────────────────────────────────\n\n// TaxDisplayMode: re-exported from @wildo-ai/external-connectors-models (see top of file)\n\n/**\n * Tax calculation mode: provider-managed or disabled.\n */\nexport enum TaxCalculationMode {\n  PROVIDER_MANAGED = 'provider_managed',\n  DISABLED = 'disabled',\n}\n\n// ── Subscription & Invoice Status ──────────────────────────────────\n\n// SubscriptionStatus: re-exported from @wildo-ai/external-connectors-models (see top of file)\n\n// InvoiceStatus: re-exported from @wildo-ai/external-connectors-models (see top of file).\n// It moved there on 2026-09-09 so `StandardBilling_InvoiceData` could name it; the specifier every\n// consumer imports is unchanged.\n\n// ── Billing Scope ──────────────────────────────────────────────────\n\n/**\n * Billing-compatible scope types.\n * Subset of ResourcePrimaryScope — excludes APPLICATION which has no billing variants.\n * Used by scope-agnostic billing resources (e.g., Referrals) that reference\n * billing accounts across different polymorphic collections.\n */\nexport enum BillingScopeType {\n  ORGANIZATIONS = 'organizations',\n  USER_SELF = 'user_self',\n}\n\n// ── Promotions & Referrals ─────────────────────────────────────────\n\n/**\n * Promotion type.\n */\nexport enum PromotionType {\n  /** Direct discount */\n  COUPON = 'coupon',\n  /** Code-based discount */\n  PROMOTION_CODE = 'promotion_code',\n  /** Referral program */\n  REFERRAL = 'referral',\n  /** Special deal/offer */\n  DEAL = 'deal',\n}\n\n/**\n * Discount type for promotions.\n */\nexport enum DiscountType {\n  PERCENTAGE = 'percentage',\n  FIXED_AMOUNT = 'fixed_amount',\n}\n\n/**\n * Promotion duration (how long the discount applies).\n */\nexport enum PromotionDuration {\n  ONCE = 'once',\n  REPEATING = 'repeating',\n  FOREVER = 'forever',\n}\n\n/**\n * Referral status lifecycle.\n */\nexport enum ReferralStatus {\n  PENDING = 'pending',\n  ACCEPTED = 'accepted',\n  CONVERTED = 'converted',\n  EXPIRED = 'expired',\n  CANCELLED = 'cancelled',\n}\n\n/**\n * Reward type for the referrer (person who referred).\n */\nexport enum ReferrerRewardType {\n  CREDIT = 'credit',\n  DISCOUNT = 'discount',\n  FEATURE = 'feature',\n  COMMISSION = 'commission',\n}\n\n/**\n * Reward type for the referred (new customer).\n */\nexport enum ReferredRewardType {\n  CREDIT = 'credit',\n  DISCOUNT = 'discount',\n  FEATURE = 'feature',\n  TRIAL_EXTENSION = 'trial_extension',\n}\n\n// ── Provider checkout metadata: the framework/caller trust boundary ─────────────\n\n/**\n * Prefix that marks a provider-metadata key as FRAMEWORK-AUTHORITATIVE.\n *\n * ## Why a reserved namespace exists at all\n *\n * A provider checkout session carries ONE flat `metadata` map, and two parties want to write into\n * it: the framework (which needs to recognise the purchase when the provider echoes the session\n * back on `checkout.session.completed`) and the application's own caller (who legitimately wants\n * to tag the purchase for their analytics or reconciliation).\n *\n * Those two writers do not have the same authority. The framework's entries decide WHICH billing\n * account is credited and HOW MUCH — the provider replays them verbatim inside a genuinely SIGNED\n * webhook, so a signature proves the provider sent them, never that the framework wrote them. The\n * caller's entries decide nothing.\n *\n * Sharing one un-partitioned namespace between those two authorities is what turned a caller-supplied\n * map into a credit-minting primitive: the producer spread caller metadata LAST, so `billingAccountId`\n * / `productKey` / `quantity` were simply overwritable, and the webhook consumer read the result back\n * as trusted framework state. Ordering alone is not the fix — swapping the spread leaves an\n * unmarked namespace in which the NEXT authoritative key is one careless line from being overridable\n * again. The prefix makes the trust boundary a property of the KEY, so it survives refactors.\n *\n * The boundary is enforced in three places, deliberately overlapping:\n * 1. the OPEN_CHECKOUT request DTO REFUSES any caller key carrying this prefix (loud, at the edge);\n * 2. the metadata builder writes the reserved entries LAST (structural, cannot be forgotten);\n * 3. the webhook consumer reads ONLY reserved keys, and re-derives the billing account from\n *    provider-authoritative data rather than trusting the echoed value.\n *\n * @see BillingCheckoutMetadataKey for the reserved key vocabulary itself.\n */\nexport const BILLING_RESERVED_METADATA_KEY_PREFIX = 'wildo_';\n\n/**\n * The closed vocabulary of framework-authoritative provider-metadata keys.\n *\n * Every member MUST start with {@link BILLING_RESERVED_METADATA_KEY_PREFIX} — that is what makes the\n * DTO's caller-key refusal and the consumer's read-only-reserved rule line up. A member added\n * without the prefix would be silently overridable by a caller, which is the whole defect this\n * vocabulary exists to prevent, so a pinned test asserts the prefix across every member.\n *\n * Named rather than inlined because each member carries a different obligation on the consumer side\n * (one is cross-checked against provider truth, one selects the product, one is bounded and\n * strictly parsed) and a bare string literal has nowhere to record that.\n */\nexport enum BillingCheckoutMetadataKey {\n  /**\n   * The billing account the checkout was opened FOR.\n   *\n   * Written for traceability and cross-checking only. The webhook consumer re-derives the account\n   * from the provider-authoritative customer id on the event and REFUSES the event if the echoed\n   * value disagrees — it is never used as the account to credit.\n   */\n  BILLING_ACCOUNT_ID = 'wildo_billingAccountId',\n  /** The catalog product key purchased — selects the credit pool and credits-per-unit on top-up. */\n  PRODUCT_KEY = 'wildo_productKey',\n  /**\n   * The PROMOTION row whose code the framework validated when it opened this checkout, so the\n   * redemption can be counted when the session COMPLETES (#518).\n   *\n   * Absent when the purchase used no code, which is the common case.\n   *\n   * Stamped rather than re-derived from the completed session, because the provider reports the\n   * DISCOUNT it applied and not the Wildo row that authorised it — and the row is what carries\n   * `maxRedemptions`. Like every key here it is written for the framework's own reconciliation and is\n   * never trusted as authority on its own: the redemption is counted with a compare-and-swap that\n   * refuses past the cap, so a tampered value can at worst count a redemption against a promotion\n   * that has room for one.\n   */\n  PROMOTION_ID = 'wildo_promotionId',\n  /**\n   * The purchased quantity, as a decimal integer string (provider metadata values are strings).\n   * Strictly parsed and bounded by {@link BILLING_CHECKOUT_MAX_QUANTITY} on the way back in.\n   */\n  QUANTITY = 'wildo_quantity',\n}\n\n/**\n * Framework-authoritative metadata keys the engine writes on a provider SUBSCRIPTION (#535), in the same reserved namespace\n * as {@link BillingCheckoutMetadataKey} and under the same rule: every member starts with\n * {@link BILLING_RESERVED_METADATA_KEY_PREFIX}, so no caller-authored metadata can be mistaken for it.\n */\nexport enum BillingSubscriptionMetadataKey {\n  /**\n   * `<slotId>:<generation>` of the subscription mutation that sent the update. Written so reconciliation can match a\n   * provider object to the durable mutation that caused it — including a change whose response was lost. A reference, never\n   * authority on its own: a match is confirmed against the stored mutation's identity.\n   */\n  MUTATION = 'wildo_mutation',\n}\n\n/**\n * Upper bound on a single checkout's line-item quantity, applied on BOTH sides of the provider\n * round trip: the OPEN_CHECKOUT request DTO refuses more, and the webhook consumer refuses to\n * honour more.\n *\n * One shared constant rather than two, because a consumer bound lower than the producer bound would\n * silently refuse legitimate large purchases the framework itself allowed to be billed — the\n * failure mode where the customer is charged and the credits never arrive.\n *\n * The value is a framework policy ceiling, not a provider-derived one: it is deliberately far above\n * any plausible self-serve purchase and far below the range where an unbounded quantity becomes a\n * credit-minting primitive. An application whose catalog genuinely sells in larger units should\n * raise it here, where both sides read it, rather than at either end.\n */\nexport const BILLING_CHECKOUT_MAX_QUANTITY = 999_999;\n"]}

package/dist/esm/billing/billing-types.shared.schemas.d.ts

@@ -12,13 +12,14 @@ import type { MoneyValue } from '@wildo-ai/zod-decorators';
 import { ResourcePrimaryScope } from '../resources/resources.shared.schemas';
 export type { StandardBilling_SubscriptionData, StandardBilling_InvoicePreview } from '@wildo-ai/external-connectors-models';
 /**
- * Invoice preview: returned by previewPlanChange() to show prorated cost before committing.
- * Data comes from provider (Stripe's upcoming invoice API), NOT stored locally.
+ * Presentation value used by the billing plan-change preview. BillingContext transports the
+ * provider DTO; the plan-change flow converts its minor-unit amounts into this money shape.
+ * Invoice amount due must not be presented as an immediate charge without the resolved settlement policy.
  *
  * All monetary amounts use MoneyValue for bigint precision and self-contained currency.
  */
 export interface InvoicePreview {
-    /** Prorated amount to charge/credit */
+    /** Previewed invoice amount due; settlement timing must be stated separately. */
     amount: MoneyValue;
     /** Line items breakdown (what changed, prorated amounts) */
     lineItems: Array<{
@@ -26,7 +27,7 @@ export interface InvoicePreview {
         amount: MoneyValue;
         quantity: number;
     }>;
-    /** When this amount would be charged */
+    /** Invoice period boundaries, not a guaranteed charge time. */
     periodStart: Date;
     periodEnd: Date;
 }
@@ -74,7 +75,26 @@ export type CreditPoolBalance = z.infer<typeof CreditPoolBalanceSchema>;
  * project the external response. `BillingStateResponse` is derived from it so the
  * type and the runtime contract cannot drift.
  */
+/** Independently loaded portions of the aggregate. Derived catalog projections use PRODUCTS. */
+export declare enum BillingStateSlice {
+    BILLING_ACCOUNT = "billingAccount",
+    SUBSCRIPTION = "subscription",
+    PRODUCTS = "products",
+    PRICES = "prices",
+    INVOICES = "invoices",
+    USAGE = "usage",
+    CREDIT_POOLS = "creditPools",
+    ACTIVE_PROMOTIONS = "activePromotions"
+}
+/** Empty data is meaningful only when its query (and required dependencies) succeeded. */
+export declare enum BillingSliceAvailability {
+    AVAILABLE = "available",
+    UNAVAILABLE = "unavailable"
+}
+export declare const BillingStateAvailabilitySchema: z.ZodRecord<z.ZodEnum<typeof BillingStateSlice>, z.ZodEnum<typeof BillingSliceAvailability>>;
+export type BillingStateAvailability = z.infer<typeof BillingStateAvailabilitySchema>;
 export declare const BillingStateResponseSchema: z.ZodObject<{
+    availability: z.ZodRecord<z.ZodEnum<typeof BillingStateSlice>, z.ZodEnum<typeof BillingSliceAvailability>>;
     billingAccount: z.ZodNullable<z.ZodObject<{
         _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
         providerCustomerId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodOptional<z.ZodString>>>;
@@ -237,6 +257,7 @@ export declare const BillingStateResponseSchema: z.ZodObject<{
         createdAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
         updatedAt: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodDate>>>;
     }, z.core.$strip>>;
+    acquirableProductKeys: z.ZodOptional<z.ZodArray<z.ZodString>>;
     scopeType: z.ZodEnum<typeof ResourcePrimaryScope>;
 }, z.core.$strip>;
 export type BillingStateResponse = z.infer<typeof BillingStateResponseSchema>;

package/dist/esm/billing/billing-types.shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"billing-types.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/billing/billing-types.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAO3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAM7E,YAAY,EAAE,gCAAgC,EAAE,8BAA8B,EAAE,MAAM,sCAAsC,CAAC;AAI7H;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC7B,uCAAuC;IACvC,MAAM,EAAE,UAAU,CAAC;IACnB,4DAA4D;IAC5D,SAAS,EAAE,KAAK,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,UAAU,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;IACH,wCAAwC;IACxC,WAAW,EAAE,IAAI,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;CACjB;AAID;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB;;;;;;;iBAc7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAI9D;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB;;;;iBAIlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAkBrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}
+{"version":3,"file":"billing-types.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/billing/billing-types.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AAO3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAM7E,YAAY,EAAE,gCAAgC,EAAE,8BAA8B,EAAE,MAAM,sCAAsC,CAAC;AAI7H;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,iFAAiF;IACjF,MAAM,EAAE,UAAU,CAAC;IACnB,4DAA4D;IAC5D,SAAS,EAAE,KAAK,CAAC;QACf,WAAW,EAAE,MAAM,CAAC;QACpB,MAAM,EAAE,UAAU,CAAC;QACnB,QAAQ,EAAE,MAAM,CAAC;KAClB,CAAC,CAAC;IACH,+DAA+D;IAC/D,WAAW,EAAE,IAAI,CAAC;IAClB,SAAS,EAAE,IAAI,CAAC;CACjB;AAID;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB;;;;;;;iBAc7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAI9D;;;;;GAKG;AACH,eAAO,MAAM,uBAAuB;;;;iBAIlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE;;;;;;;;;;;;;GAaG;AACH,gGAAgG;AAChG,oBAAY,iBAAiB;IAC3B,eAAe,mBAAmB;IAClC,YAAY,iBAAiB;IAC7B,QAAQ,aAAa;IACrB,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,KAAK,UAAU;IACf,YAAY,gBAAgB;IAC5B,iBAAiB,qBAAqB;CACvC;AAED,0FAA0F;AAC1F,oBAAY,wBAAwB;IAClC,SAAS,cAAc;IACvB,WAAW,gBAAgB;CAC5B;AAED,eAAO,MAAM,8BAA8B,8FAAwE,CAAC;AACpH,MAAM,MAAM,wBAAwB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8BAA8B,CAAC,CAAC;AAEtF,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA4DrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC"}

package/dist/esm/billing/billing-types.shared.schemas.js

@@ -63,7 +63,28 @@ export const CreditPoolBalanceSchema = z.object({
  * project the external response. `BillingStateResponse` is derived from it so the
  * type and the runtime contract cannot drift.
  */
+/** Independently loaded portions of the aggregate. Derived catalog projections use PRODUCTS. */
+export var BillingStateSlice;
+(function (BillingStateSlice) {
+    BillingStateSlice["BILLING_ACCOUNT"] = "billingAccount";
+    BillingStateSlice["SUBSCRIPTION"] = "subscription";
+    BillingStateSlice["PRODUCTS"] = "products";
+    BillingStateSlice["PRICES"] = "prices";
+    BillingStateSlice["INVOICES"] = "invoices";
+    BillingStateSlice["USAGE"] = "usage";
+    BillingStateSlice["CREDIT_POOLS"] = "creditPools";
+    BillingStateSlice["ACTIVE_PROMOTIONS"] = "activePromotions";
+})(BillingStateSlice || (BillingStateSlice = {}));
+/** Empty data is meaningful only when its query (and required dependencies) succeeded. */
+export var BillingSliceAvailability;
+(function (BillingSliceAvailability) {
+    BillingSliceAvailability["AVAILABLE"] = "available";
+    BillingSliceAvailability["UNAVAILABLE"] = "unavailable";
+})(BillingSliceAvailability || (BillingSliceAvailability = {}));
+export const BillingStateAvailabilitySchema = z.record(z.enum(BillingStateSlice), z.enum(BillingSliceAvailability));
 export const BillingStateResponseSchema = z.object({
+    /** Query failures keep their empty transport placeholders but MUST NOT be presented as absence. */
+    availability: BillingStateAvailabilitySchema,
     billingAccount: BillingAccountSchema.nullable(),
     subscription: BillingSubscriptionBaseSchema.nullable(),
     products: z.array(ProductSchema),
@@ -80,6 +101,46 @@ export const BillingStateResponseSchema = z.object({
      * arbitrary checkout item the user might pick next.
      */
     activePromotions: z.array(PromotionSchema),
+    /**
+     * The subset of `products` (by `key`) a caller may ACQUIRE right now — buy, or move a
+     * subscription onto.
+     *
+     * ## Why a sibling key set rather than a filter on `products`
+     *
+     * One call serves two surfaces that want OPPOSITE things from it. An acquisition surface (a
+     * pricing table) must not offer a plan the purchase gate will refuse; a holding surface (the
+     * "your current plan" panel, the subscription-item → product resolution in the frontend billing
+     * context) must still be able to NAME a plan the catalogue has withdrawn, because a customer
+     * already on a retired plan is exactly who needs to see what they hold. Filtering `products` by
+     * `isActive` would serve the first and break the second — the same trade the `REMOVE_ADDON` call
+     * site settles by reading with `REFERENCE` intent rather than `ACQUIRE`.
+     *
+     * So the response DISTINGUISHES instead of filtering: `products` stays the full scope-visible
+     * catalog, and this set states which of them acquisition may offer.
+     *
+     * ## Why the server answers it at all
+     *
+     * `Product.isActive` is the declared off-boarding path, and the backend gate that makes
+     * retirement TRUE (`readProductByKey` with `ACQUIRE` intent) applies ONE predicate to it. A
+     * listing surface holds rows, not keys, so it cannot use that reader — and every listing left to
+     * itself re-derives the rule from the raw column. That had already happened twice by 2026-09-09,
+     * in a frontend component and in the reader, agreeing only by luck. This set is computed by the
+     * gate's own predicate, so a surface that reads it cannot drift from what checkout will accept.
+     *
+     * NOT a visibility answer: `isPublic` is a per-surface decision the server cannot take for every
+     * caller (a back-office catalog shows non-public rows). A customer pricing table composes the
+     * two; it must not re-spell either.
+     *
+     * The aggregate producer sets this field and BillingContext preserves it. Consumers
+     * must check PRODUCTS availability before interpreting this projection: an empty set
+     * from an unavailable catalog does not prove that nothing can be acquired.
+     *
+     * Absence therefore means "the producer did not project acquirability", never "nothing is
+     * acquirable" and never "everything is". A consumer that receives the set MUST use it in
+     * preference to re-deriving the rule; a consumer that does not is on the older, weaker footing
+     * this field exists to retire.
+     */
+    acquirableProductKeys: z.array(z.string()).optional(),
     scopeType: z.enum(ResourcePrimaryScope),
 });
 //# sourceMappingURL=billing-types.shared.schemas.js.map

package/dist/esm/billing/billing-types.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"billing-types.shared.schemas.js","sourceRoot":"","sources":["../../../../src/billing/billing-types.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AA8B7E,sEAAsE;AAEtE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,sDAAsD;IACtD,SAAS,EAAE,CAAC,CAAC,MAAM,CACjB,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,MAAM,CAAC;QACP,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC9B,0CAA0C;QAC1C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC1C,6DAA6D;QAC7D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,6BAA6B;QAC7B,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;KACpC,CAAC,CACH;CACF,CAAC,CAAC;AAGH,sEAAsE;AAEtE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;CAC1B,CAAC,CAAC;AAGH;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,cAAc,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC/C,YAAY,EAAE,6BAA6B,CAAC,QAAQ,EAAE;IACtD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAC5B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACnC,KAAK,EAAE,kBAAkB;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC;IAC1D;;;;;;;OAOG;IACH,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;CACxC,CAAC,CAAC","sourcesContent":["/**\n * Billing Supporting Types (Shared)\n *\n * Types used by the billing API, frontend hooks, and provider interface.\n * These are NOT DB schemas — they are API response shapes, provider abstractions,\n * and aggregated views.\n *\n * @see billing-and-features-system.md §6.2c (Supporting Types)\n */\n\nimport { z } from 'zod';\nimport type { MoneyValue } from '@wildo-ai/zod-decorators';\nimport { BillingAccountSchema } from './billing-account.shared.schemas';\nimport { BillingSubscriptionBaseSchema } from './subscription.shared.schemas';\nimport { ProductSchema } from './product.shared.schemas';\nimport { PriceSchema } from './price.shared.schemas';\nimport { InvoiceRefSchema } from './invoice-ref.shared.schemas';\nimport { PromotionSchema } from './promotions.shared.schemas';\nimport { ResourcePrimaryScope } from '../resources/resources.shared.schemas';\n\n// ── Provider Canonical Types ───────────────────────────────────────\n// StandardBilling_SubscriptionData and StandardBilling_InvoicePreview are\n// defined in @wildo-ai/external-connectors-models (standard billing interface)\n// and re-exported here for convenience.\nexport type { StandardBilling_SubscriptionData, StandardBilling_InvoicePreview } from '@wildo-ai/external-connectors-models';\n\n// ── Invoice Preview ────────────────────────────────────────────────\n\n/**\n * Invoice preview: returned by previewPlanChange() to show prorated cost before committing.\n * Data comes from provider (Stripe's upcoming invoice API), NOT stored locally.\n *\n * All monetary amounts use MoneyValue for bigint precision and self-contained currency.\n */\nexport interface InvoicePreview {\n  /** Prorated amount to charge/credit */\n  amount: MoneyValue;\n  /** Line items breakdown (what changed, prorated amounts) */\n  lineItems: Array<{\n    description: string;\n    amount: MoneyValue;\n    quantity: number;\n  }>;\n  /** When this amount would be charged */\n  periodStart: Date;\n  periodEnd: Date;\n}\n\n// ── Usage Summary ──────────────────────────────────────────────────\n\n/**\n * Usage summary: aggregated usage data for the frontend UsageDashboard.\n * Computed from UsageRecords, keyed by metered product key.\n *\n * Authored as a Zod schema (not a bare interface) so it can compose into\n * `BillingStateResponseSchema` — the runtime contract wired as the `GET_STATE`\n * custom operation's `customResponseDto`. `UsageSummary` is derived from it to\n * keep the type and the runtime shape from drifting.\n */\nexport const UsageSummarySchema = z.object({\n  /** Usage per metered product, keyed by product key */\n  byProduct: z.record(\n    z.string(),\n    z.object({\n      currentPeriodUsage: z.number(),\n      /** Previous period (for trend display) */\n      previousPeriodUsage: z.number().optional(),\n      /** Usage limit (from product/subscription, if applicable) */\n      limit: z.number().optional(),\n      /** Last usage recorded at */\n      lastRecordedAt: z.date().optional(),\n    }),\n  ),\n});\nexport type UsageSummary = z.infer<typeof UsageSummarySchema>;\n\n// ── Billing State Response ─────────────────────────────────────────\n\n/**\n * Per-pool credit balance projection embedded in the aggregated billing state.\n *\n * A lean view (NOT the full `CreditPool` resource) built by the billing-state\n * facade purely for the frontend balance display, keyed by pool key.\n */\nexport const CreditPoolBalanceSchema = z.object({\n  available: z.number(),\n  totalPurchased: z.number(),\n  totalConsumed: z.number(),\n});\nexport type CreditPoolBalance = z.infer<typeof CreditPoolBalanceSchema>;\n\n/**\n * Aggregated billing state returned by the lazy facade endpoint.\n * Single source of truth for frontend BillingProvider and backend controller.\n *\n * Authored as a Zod schema (not a bare interface) because the `GET_STATE`\n * custom operation wires it as its `customResponseDto`. That operation borrows\n * the COUNT verb for its route/verb via `resourceOperationLike` but returns\n * THIS aggregated shape — so without a `customResponseDto` the DTO builder would\n * assign it the COUNT default envelope (`{ count }`), and the service output\n * would fail `transformOutput`'s `internalDto.parse` → HTTP 500. The composed\n * schema gives the builder the real runtime contract to validate against and to\n * project the external response. `BillingStateResponse` is derived from it so the\n * type and the runtime contract cannot drift.\n */\nexport const BillingStateResponseSchema = z.object({\n  billingAccount: BillingAccountSchema.nullable(),\n  subscription: BillingSubscriptionBaseSchema.nullable(),\n  products: z.array(ProductSchema),\n  prices: z.array(PriceSchema),\n  invoices: z.array(InvoiceRefSchema),\n  usage: UsageSummarySchema,\n  creditPools: z.record(z.string(), CreditPoolBalanceSchema),\n  /**\n   * Scope/product-visible promotions for the current billing surface.\n   *\n   * This list intentionally excludes promotions that are inactive, exhausted,\n   * unsynced with the billing provider, or targeted only at products outside the\n   * current scope. It is not a promise that every entry is redeemable for any\n   * arbitrary checkout item the user might pick next.\n   */\n  activePromotions: z.array(PromotionSchema),\n  scopeType: z.enum(ResourcePrimaryScope),\n});\nexport type BillingStateResponse = z.infer<typeof BillingStateResponseSchema>;\n"]}
+{"version":3,"file":"billing-types.shared.schemas.js","sourceRoot":"","sources":["../../../../src/billing/billing-types.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAC;AACxE,OAAO,EAAE,6BAA6B,EAAE,MAAM,+BAA+B,CAAC;AAC9E,OAAO,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AA+B7E,sEAAsE;AAEtE;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,sDAAsD;IACtD,SAAS,EAAE,CAAC,CAAC,MAAM,CACjB,CAAC,CAAC,MAAM,EAAE,EACV,CAAC,CAAC,MAAM,CAAC;QACP,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE;QAC9B,0CAA0C;QAC1C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC1C,6DAA6D;QAC7D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC5B,6BAA6B;QAC7B,cAAc,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE;KACpC,CAAC,CACH;CACF,CAAC,CAAC;AAGH,sEAAsE;AAEtE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE;IACrB,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE;CAC1B,CAAC,CAAC;AAGH;;;;;;;;;;;;;GAaG;AACH,gGAAgG;AAChG,MAAM,CAAN,IAAY,iBASX;AATD,WAAY,iBAAiB;IAC3B,uDAAkC,CAAA;IAClC,kDAA6B,CAAA;IAC7B,0CAAqB,CAAA;IACrB,sCAAiB,CAAA;IACjB,0CAAqB,CAAA;IACrB,oCAAe,CAAA;IACf,iDAA4B,CAAA;IAC5B,2DAAsC,CAAA;AACxC,CAAC,EATW,iBAAiB,KAAjB,iBAAiB,QAS5B;AAED,0FAA0F;AAC1F,MAAM,CAAN,IAAY,wBAGX;AAHD,WAAY,wBAAwB;IAClC,mDAAuB,CAAA;IACvB,uDAA2B,CAAA;AAC7B,CAAC,EAHW,wBAAwB,KAAxB,wBAAwB,QAGnC;AAED,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC,CAAC;AAGpH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,mGAAmG;IACnG,YAAY,EAAE,8BAA8B;IAC5C,cAAc,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC/C,YAAY,EAAE,6BAA6B,CAAC,QAAQ,EAAE;IACtD,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC;IAC5B,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC;IACnC,KAAK,EAAE,kBAAkB;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,uBAAuB,CAAC;IAC1D;;;;;;;OAOG;IACH,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC;IAC1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAsCG;IACH,qBAAqB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACrD,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC;CACxC,CAAC,CAAC","sourcesContent":["/**\n * Billing Supporting Types (Shared)\n *\n * Types used by the billing API, frontend hooks, and provider interface.\n * These are NOT DB schemas — they are API response shapes, provider abstractions,\n * and aggregated views.\n *\n * @see billing-and-features-system.md §6.2c (Supporting Types)\n */\n\nimport { z } from 'zod';\nimport type { MoneyValue } from '@wildo-ai/zod-decorators';\nimport { BillingAccountSchema } from './billing-account.shared.schemas';\nimport { BillingSubscriptionBaseSchema } from './subscription.shared.schemas';\nimport { ProductSchema } from './product.shared.schemas';\nimport { PriceSchema } from './price.shared.schemas';\nimport { InvoiceRefSchema } from './invoice-ref.shared.schemas';\nimport { PromotionSchema } from './promotions.shared.schemas';\nimport { ResourcePrimaryScope } from '../resources/resources.shared.schemas';\n\n// ── Provider Canonical Types ───────────────────────────────────────\n// StandardBilling_SubscriptionData and StandardBilling_InvoicePreview are\n// defined in @wildo-ai/external-connectors-models (standard billing interface)\n// and re-exported here for convenience.\nexport type { StandardBilling_SubscriptionData, StandardBilling_InvoicePreview } from '@wildo-ai/external-connectors-models';\n\n// ── Invoice Preview ────────────────────────────────────────────────\n\n/**\n * Presentation value used by the billing plan-change preview. BillingContext transports the\n * provider DTO; the plan-change flow converts its minor-unit amounts into this money shape.\n * Invoice amount due must not be presented as an immediate charge without the resolved settlement policy.\n *\n * All monetary amounts use MoneyValue for bigint precision and self-contained currency.\n */\nexport interface InvoicePreview {\n  /** Previewed invoice amount due; settlement timing must be stated separately. */\n  amount: MoneyValue;\n  /** Line items breakdown (what changed, prorated amounts) */\n  lineItems: Array<{\n    description: string;\n    amount: MoneyValue;\n    quantity: number;\n  }>;\n  /** Invoice period boundaries, not a guaranteed charge time. */\n  periodStart: Date;\n  periodEnd: Date;\n}\n\n// ── Usage Summary ──────────────────────────────────────────────────\n\n/**\n * Usage summary: aggregated usage data for the frontend UsageDashboard.\n * Computed from UsageRecords, keyed by metered product key.\n *\n * Authored as a Zod schema (not a bare interface) so it can compose into\n * `BillingStateResponseSchema` — the runtime contract wired as the `GET_STATE`\n * custom operation's `customResponseDto`. `UsageSummary` is derived from it to\n * keep the type and the runtime shape from drifting.\n */\nexport const UsageSummarySchema = z.object({\n  /** Usage per metered product, keyed by product key */\n  byProduct: z.record(\n    z.string(),\n    z.object({\n      currentPeriodUsage: z.number(),\n      /** Previous period (for trend display) */\n      previousPeriodUsage: z.number().optional(),\n      /** Usage limit (from product/subscription, if applicable) */\n      limit: z.number().optional(),\n      /** Last usage recorded at */\n      lastRecordedAt: z.date().optional(),\n    }),\n  ),\n});\nexport type UsageSummary = z.infer<typeof UsageSummarySchema>;\n\n// ── Billing State Response ─────────────────────────────────────────\n\n/**\n * Per-pool credit balance projection embedded in the aggregated billing state.\n *\n * A lean view (NOT the full `CreditPool` resource) built by the billing-state\n * facade purely for the frontend balance display, keyed by pool key.\n */\nexport const CreditPoolBalanceSchema = z.object({\n  available: z.number(),\n  totalPurchased: z.number(),\n  totalConsumed: z.number(),\n});\nexport type CreditPoolBalance = z.infer<typeof CreditPoolBalanceSchema>;\n\n/**\n * Aggregated billing state returned by the lazy facade endpoint.\n * Single source of truth for frontend BillingProvider and backend controller.\n *\n * Authored as a Zod schema (not a bare interface) because the `GET_STATE`\n * custom operation wires it as its `customResponseDto`. That operation borrows\n * the COUNT verb for its route/verb via `resourceOperationLike` but returns\n * THIS aggregated shape — so without a `customResponseDto` the DTO builder would\n * assign it the COUNT default envelope (`{ count }`), and the service output\n * would fail `transformOutput`'s `internalDto.parse` → HTTP 500. The composed\n * schema gives the builder the real runtime contract to validate against and to\n * project the external response. `BillingStateResponse` is derived from it so the\n * type and the runtime contract cannot drift.\n */\n/** Independently loaded portions of the aggregate. Derived catalog projections use PRODUCTS. */\nexport enum BillingStateSlice {\n  BILLING_ACCOUNT = 'billingAccount',\n  SUBSCRIPTION = 'subscription',\n  PRODUCTS = 'products',\n  PRICES = 'prices',\n  INVOICES = 'invoices',\n  USAGE = 'usage',\n  CREDIT_POOLS = 'creditPools',\n  ACTIVE_PROMOTIONS = 'activePromotions',\n}\n\n/** Empty data is meaningful only when its query (and required dependencies) succeeded. */\nexport enum BillingSliceAvailability {\n  AVAILABLE = 'available',\n  UNAVAILABLE = 'unavailable',\n}\n\nexport const BillingStateAvailabilitySchema = z.record(z.enum(BillingStateSlice), z.enum(BillingSliceAvailability));\nexport type BillingStateAvailability = z.infer<typeof BillingStateAvailabilitySchema>;\n\nexport const BillingStateResponseSchema = z.object({\n  /** Query failures keep their empty transport placeholders but MUST NOT be presented as absence. */\n  availability: BillingStateAvailabilitySchema,\n  billingAccount: BillingAccountSchema.nullable(),\n  subscription: BillingSubscriptionBaseSchema.nullable(),\n  products: z.array(ProductSchema),\n  prices: z.array(PriceSchema),\n  invoices: z.array(InvoiceRefSchema),\n  usage: UsageSummarySchema,\n  creditPools: z.record(z.string(), CreditPoolBalanceSchema),\n  /**\n   * Scope/product-visible promotions for the current billing surface.\n   *\n   * This list intentionally excludes promotions that are inactive, exhausted,\n   * unsynced with the billing provider, or targeted only at products outside the\n   * current scope. It is not a promise that every entry is redeemable for any\n   * arbitrary checkout item the user might pick next.\n   */\n  activePromotions: z.array(PromotionSchema),\n  /**\n   * The subset of `products` (by `key`) a caller may ACQUIRE right now — buy, or move a\n   * subscription onto.\n   *\n   * ## Why a sibling key set rather than a filter on `products`\n   *\n   * One call serves two surfaces that want OPPOSITE things from it. An acquisition surface (a\n   * pricing table) must not offer a plan the purchase gate will refuse; a holding surface (the\n   * \"your current plan\" panel, the subscription-item → product resolution in the frontend billing\n   * context) must still be able to NAME a plan the catalogue has withdrawn, because a customer\n   * already on a retired plan is exactly who needs to see what they hold. Filtering `products` by\n   * `isActive` would serve the first and break the second — the same trade the `REMOVE_ADDON` call\n   * site settles by reading with `REFERENCE` intent rather than `ACQUIRE`.\n   *\n   * So the response DISTINGUISHES instead of filtering: `products` stays the full scope-visible\n   * catalog, and this set states which of them acquisition may offer.\n   *\n   * ## Why the server answers it at all\n   *\n   * `Product.isActive` is the declared off-boarding path, and the backend gate that makes\n   * retirement TRUE (`readProductByKey` with `ACQUIRE` intent) applies ONE predicate to it. A\n   * listing surface holds rows, not keys, so it cannot use that reader — and every listing left to\n   * itself re-derives the rule from the raw column. That had already happened twice by 2026-09-09,\n   * in a frontend component and in the reader, agreeing only by luck. This set is computed by the\n   * gate's own predicate, so a surface that reads it cannot drift from what checkout will accept.\n   *\n   * NOT a visibility answer: `isPublic` is a per-surface decision the server cannot take for every\n   * caller (a back-office catalog shows non-public rows). A customer pricing table composes the\n   * two; it must not re-spell either.\n   *\n   * The aggregate producer sets this field and BillingContext preserves it. Consumers\n   * must check PRODUCTS availability before interpreting this projection: an empty set\n   * from an unavailable catalog does not prove that nothing can be acquired.\n   *\n   * Absence therefore means \"the producer did not project acquirability\", never \"nothing is\n   * acquirable\" and never \"everything is\". A consumer that receives the set MUST use it in\n   * preference to re-deriving the rule; a consumer that does not is on the older, weaker footing\n   * this field exists to retire.\n   */\n  acquirableProductKeys: z.array(z.string()).optional(),\n  scopeType: z.enum(ResourcePrimaryScope),\n});\nexport type BillingStateResponse = z.infer<typeof BillingStateResponseSchema>;\n"]}

package/dist/esm/billing/price.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"price.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/billing/price.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,qBAAqB,EAAwD,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAGL,oBAAoB,EACrB,MAAM,uCAAuC,CAAC;AAI/C,KAAK,aAAa,GACd,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAEjC,eAAO,MAAM,iDAAiD,GAC5D,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;iCAsE9C,CAAC"}
+{"version":3,"file":"price.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/billing/price.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,qBAAqB,EAAwD,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAGL,oBAAoB,EACrB,MAAM,uCAAuC,CAAC;AAI/C,KAAK,aAAa,GACd,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAEjC,eAAO,MAAM,iDAAiD,GAC5D,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;iCAoG9C,CAAC"}

package/dist/esm/billing/price.shared.resources-config.schemas.js

@@ -35,12 +35,42 @@ export const pricesResourceConfiguration_InitializationFactory = (resourcesRelat
                 }],
         },
         [CoreResourceOperation.LIST]: {
-            variants: [{
+            variants: [
+                {
                     variantType: ResourceOperationVariantType.INTERNAL_CALL,
                     isDefault: true,
                     roles: [CORE_APP_ROLES.APP_USER],
                     riskLevel: ResourceOperationRiskLevel.LOW,
-                }],
+                },
+                {
+                    /*
+                     * The OPERATOR's door onto the catalogue — added 2026-09-18 for issue #1295.
+                     *
+                     * The `INTERNAL_CALL` variant above is route-less by design: the billing back-office drives
+                     * this resource through the service pipeline, and states that these catalog reads have "NO
+                     * HTTP surface". That stays true and stays the DEFAULT, so `createForInternalServiceOperation`
+                     * keeps resolving it and no internal seam moves.
+                     *
+                     * What was missing is the surface an application ADMINISTRATOR needs. The `billing-catalog`
+                     * settings destination targets `prices.list` and could never load — the rail entry, the tab and the
+                     * heading all rendered, and every request 404'd at the ROUTER, because no route was ever
+                     * mounted. An operator cannot price what they cannot see.
+                     *
+                     * Gated on `APP_ADMIN_SUPER_ADMIN`, exactly what that destination already requires. Not a
+                     * widening: the aggregated billing state already ships products, prices and active promotions
+                     * to EVERY authenticated client, so an admin-only list is strictly narrower than what the
+                     * application discloses today.
+                     *
+                     * Two `isDefault: true` variants is the shape `organizations.CREATE` already uses — default is
+                     * per variant TYPE, so the internal door and the HTTP door each stay the default of their own
+                     * transport and the HTTP one needs no `variantKey` in its URL.
+                     */
+                    variantType: ResourceOperationVariantType.API_CALL,
+                    isDefault: true,
+                    roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
+                    riskLevel: ResourceOperationRiskLevel.LOW,
+                },
+            ],
         },
         [CoreResourceOperation.CREATE]: {
             variants: [{

package/dist/esm/billing/price.shared.resources-config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"price.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/billing/price.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,GAE7B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AASrD,MAAM,CAAC,MAAM,iDAAiD,GAAG,CAC/D,sBAA8C,EAC9C,EAAE,CAAC,0CAA0C,CAI7C;IACA,UAAU,EAAE,WAAW;IACvB,kBAAkB,EAAE,gBAAgB,CAAC,MAAM;IAC3C,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,MAAM,CAAC;IACpF,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,oEAAoE;QACpE,yEAAyE;QACzE,2DAA2D;QAC3D,oEAAoE;QACpE,qBAAqB,CAAC,MAAM;KAC7B;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,aAAa;oBACvD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,aAAa;oBACvD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,aAAa;oBACvD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;oBACjC,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,aAAa;oBACvD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;oBACjC,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C,CAAC;SACH;QAED,yEAAyE;QACzE,gFAAgF;QAChF,gFAAgF;QAChF,2EAA2E;QAC3E,+EAA+E;QAC/E,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;oBACjC,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C,CAAC;SACH;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * Price Resource Configuration\n *\n * Admin-managed: APPLICATION-scoped, linked to products.\n */\n\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport {\n  ResourceOperationRiskLevel,\n  ResourceOperationVariantType,\n  ResourceRelationship,\n} from '../resources/resources.shared.schemas';\nimport { CORE_APP_ROLES, CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { PriceSchema } from './price.shared.schemas';\n\ntype PricesCoreOps =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.LIST\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.DELETE;\n\nexport const pricesResourceConfiguration_InitializationFactory = (\n  resourcesRelationships: ResourceRelationship[]\n) => createResourceConfiguration_Initialization<\n  undefined,\n  PricesCoreOps,\n  typeof PriceSchema\n>({\n  mainSchema: PriceSchema,\n  resourceIdentifier: CoreResourceType.PRICES,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.PRICES],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n  coreOperations: [\n    CoreResourceOperation.READ,\n    CoreResourceOperation.LIST,\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.UPDATE,\n    // DELETE is REPOSITORY_ONLY (no HTTP route): powers the composition\n    // onParentDelete cascade so price rows are physically removed when their\n    // owning product is deleted. Without it the cascade throws\n    // ErrorType.CONFIGURATION on any product that still has price rows.\n    CoreResourceOperation.DELETE,\n  ],\n  operationsConfiguration: {\n    [CoreResourceOperation.READ]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.INTERNAL_CALL,\n        isDefault: true,\n        roles: [CORE_APP_ROLES.APP_USER],\n        riskLevel: ResourceOperationRiskLevel.LOW,\n      }],\n    },\n    [CoreResourceOperation.LIST]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.INTERNAL_CALL,\n        isDefault: true,\n        roles: [CORE_APP_ROLES.APP_USER],\n        riskLevel: ResourceOperationRiskLevel.LOW,\n      }],\n    },\n    [CoreResourceOperation.CREATE]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.INTERNAL_CALL,\n        isDefault: true,\n        roles: [CORE_ORG_ROLES.ORG_OWNER],\n        riskLevel: ResourceOperationRiskLevel.MEDIUM,\n      }],\n    },\n    [CoreResourceOperation.UPDATE]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.INTERNAL_CALL,\n        isDefault: true,\n        roles: [CORE_ORG_ROLES.ORG_OWNER],\n        riskLevel: ResourceOperationRiskLevel.MEDIUM,\n      }],\n    },\n\n    // Internal-only (REPOSITORY_ONLY, no HTTP route): powers the composition\n    // onParentDelete cascade so price rows are physically removed when their owning\n    // product is deleted. Without a DELETE op the cascade (deleteChildrenImmediate)\n    // throws ErrorType.CONFIGURATION on any product that still has price rows.\n    // ORG_OWNER/HIGH: mirrors the price write tier (billing catalog is org-owned).\n    [CoreResourceOperation.DELETE]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n        isDefault: true,\n        roles: [CORE_ORG_ROLES.ORG_OWNER],\n        riskLevel: ResourceOperationRiskLevel.HIGH,\n      }],\n    },\n  },\n});\n"]}
+{"version":3,"file":"price.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/billing/price.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EACL,0BAA0B,EAC1B,4BAA4B,GAE7B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AASrD,MAAM,CAAC,MAAM,iDAAiD,GAAG,CAC/D,sBAA8C,EAC9C,EAAE,CAAC,0CAA0C,CAI7C;IACA,UAAU,EAAE,WAAW;IACvB,kBAAkB,EAAE,gBAAgB,CAAC,MAAM;IAC3C,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,MAAM,CAAC;IACpF,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE;QACd,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,oEAAoE;QACpE,yEAAyE;QACzE,2DAA2D;QAC3D,oEAAoE;QACpE,qBAAqB,CAAC,MAAM;KAC7B;IACD,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,aAAa;oBACvD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACV;oBACE,WAAW,EAAE,4BAA4B,CAAC,aAAa;oBACvD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,QAAQ,CAAC;oBAChC,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;gBACD;oBACE;;;;;;;;;;;;;;;;;;;;;uBAqBG;oBACH,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACA;SACF;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,aAAa;oBACvD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;oBACjC,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C,CAAC;SACH;QACD,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,aAAa;oBACvD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;oBACjC,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C,CAAC;SACH;QAED,yEAAyE;QACzE,gFAAgF;QAChF,gFAAgF;QAChF,2EAA2E;QAC3E,+EAA+E;QAC/E,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC;oBACjC,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C,CAAC;SACH;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * Price Resource Configuration\n *\n * Admin-managed: APPLICATION-scoped, linked to products.\n */\n\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { CoreResourceOperation, CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport {\n  ResourceOperationRiskLevel,\n  ResourceOperationVariantType,\n  ResourceRelationship,\n} from '../resources/resources.shared.schemas';\nimport { CORE_APP_ROLES, CORE_ORG_ROLES } from '../security/authorizations/roles.shared.schemas';\nimport { PriceSchema } from './price.shared.schemas';\n\ntype PricesCoreOps =\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.LIST\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.DELETE;\n\nexport const pricesResourceConfiguration_InitializationFactory = (\n  resourcesRelationships: ResourceRelationship[]\n) => createResourceConfiguration_Initialization<\n  undefined,\n  PricesCoreOps,\n  typeof PriceSchema\n>({\n  mainSchema: PriceSchema,\n  resourceIdentifier: CoreResourceType.PRICES,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.PRICES],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n  coreOperations: [\n    CoreResourceOperation.READ,\n    CoreResourceOperation.LIST,\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.UPDATE,\n    // DELETE is REPOSITORY_ONLY (no HTTP route): powers the composition\n    // onParentDelete cascade so price rows are physically removed when their\n    // owning product is deleted. Without it the cascade throws\n    // ErrorType.CONFIGURATION on any product that still has price rows.\n    CoreResourceOperation.DELETE,\n  ],\n  operationsConfiguration: {\n    [CoreResourceOperation.READ]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.INTERNAL_CALL,\n        isDefault: true,\n        roles: [CORE_APP_ROLES.APP_USER],\n        riskLevel: ResourceOperationRiskLevel.LOW,\n      }],\n    },\n    [CoreResourceOperation.LIST]: {\n      variants: [\n      {\n        variantType: ResourceOperationVariantType.INTERNAL_CALL,\n        isDefault: true,\n        roles: [CORE_APP_ROLES.APP_USER],\n        riskLevel: ResourceOperationRiskLevel.LOW,\n      },\n      {\n        /*\n         * The OPERATOR's door onto the catalogue — added 2026-09-18 for issue #1295.\n         *\n         * The `INTERNAL_CALL` variant above is route-less by design: the billing back-office drives\n         * this resource through the service pipeline, and states that these catalog reads have \"NO\n         * HTTP surface\". That stays true and stays the DEFAULT, so `createForInternalServiceOperation`\n         * keeps resolving it and no internal seam moves.\n         *\n         * What was missing is the surface an application ADMINISTRATOR needs. The `billing-catalog`\n         * settings destination targets `prices.list` and could never load — the rail entry, the tab and the\n         * heading all rendered, and every request 404'd at the ROUTER, because no route was ever\n         * mounted. An operator cannot price what they cannot see.\n         *\n         * Gated on `APP_ADMIN_SUPER_ADMIN`, exactly what that destination already requires. Not a\n         * widening: the aggregated billing state already ships products, prices and active promotions\n         * to EVERY authenticated client, so an admin-only list is strictly narrower than what the\n         * application discloses today.\n         *\n         * Two `isDefault: true` variants is the shape `organizations.CREATE` already uses — default is\n         * per variant TYPE, so the internal door and the HTTP door each stay the default of their own\n         * transport and the HTTP one needs no `variantKey` in its URL.\n         */\n        variantType: ResourceOperationVariantType.API_CALL,\n        isDefault: true,\n        roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n        riskLevel: ResourceOperationRiskLevel.LOW,\n      },\n      ],\n    },\n    [CoreResourceOperation.CREATE]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.INTERNAL_CALL,\n        isDefault: true,\n        roles: [CORE_ORG_ROLES.ORG_OWNER],\n        riskLevel: ResourceOperationRiskLevel.MEDIUM,\n      }],\n    },\n    [CoreResourceOperation.UPDATE]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.INTERNAL_CALL,\n        isDefault: true,\n        roles: [CORE_ORG_ROLES.ORG_OWNER],\n        riskLevel: ResourceOperationRiskLevel.MEDIUM,\n      }],\n    },\n\n    // Internal-only (REPOSITORY_ONLY, no HTTP route): powers the composition\n    // onParentDelete cascade so price rows are physically removed when their owning\n    // product is deleted. Without a DELETE op the cascade (deleteChildrenImmediate)\n    // throws ErrorType.CONFIGURATION on any product that still has price rows.\n    // ORG_OWNER/HIGH: mirrors the price write tier (billing catalog is org-owned).\n    [CoreResourceOperation.DELETE]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n        isDefault: true,\n        roles: [CORE_ORG_ROLES.ORG_OWNER],\n        riskLevel: ResourceOperationRiskLevel.HIGH,\n      }],\n    },\n  },\n});\n"]}

package/dist/esm/billing/product-behavior-policy.shared.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"product-behavior-policy.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/billing/product-behavior-policy.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,yBAAyB,EAC1B,MAAM,gCAAgC,CAAC;AAIxC;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB;;;iBAK3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAI1D;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;iBA8FtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}
+{"version":3,"file":"product-behavior-policy.shared.schemas.d.ts","sourceRoot":"","sources":["../../../../src/billing/product-behavior-policy.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,yBAAyB,EAC1B,MAAM,gCAAgC,CAAC;AAIxC;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,gBAAgB;;;iBAK3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAI1D;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;iBAiGtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC"}

package/dist/esm/billing/product-behavior-policy.shared.schemas.js

@@ -75,7 +75,7 @@ export const ProductBehaviorPolicySchema = z.object({
         allowImmediate: z.boolean().default(false),
         /** Default cancellation timing when user cancels */
         defaultBehavior: z.enum(BillingTiming).default(BillingTiming.AT_PERIOD_END),
-    }).optional(),
+    }).refine((policy) => policy.allowImmediate || policy.defaultBehavior !== BillingTiming.IMMEDIATE, { message: 'Immediate cancellation cannot be the default when immediate cancellation is forbidden.', path: ['defaultBehavior'] }).optional(),
     /**
      * Authored metering policy (for METERED products only), READ by
      * `UsageMeteringBackendService` since 2026-09-08 (#415).

package/dist/esm/billing/product-behavior-policy.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"product-behavior-policy.shared.schemas.js","sourceRoot":"","sources":["../../../../src/billing/product-behavior-policy.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,yBAAyB,GAC1B,MAAM,gCAAgC,CAAC;AAExC,sEAAsE;AAEtE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,2DAA2D;IAC3D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,0CAA0C;IAC1C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC;CACzD,CAAC,CAAC;AAGH,sEAAsE;AAEtE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,mFAAmF;IACnF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,0CAA0C;QAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAClC;;;;;;;;;;WAUG;QACH,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;KACjD,CAAC,CAAC,QAAQ,EAAE;IAEb,uEAAuE;IACvE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,4EAA4E;QAC5E,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,iBAAiB,CAAC;QACjF,oDAAoD;QACpD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC;KAC/D,CAAC,CAAC,QAAQ,EAAE;IAEb,yEAAyE;IACzE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC;QACpE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC;KACnE,CAAC,CAAC,QAAQ,EAAE;IAEb,8DAA8D;IAC9D,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,2DAA2D;QAC3D,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1C,oDAAoD;QACpD,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC;KAC5E,CAAC,CAAC,QAAQ,EAAE;IAEb;;;;;;;;;;OAUG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB;;;;;;;;WAQG;QACH,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD;;;;;;;;;WASG;QACH,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,SAAS,CAAC;QACjG;;;;;;WAMG;QACH,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAC9C;;;;;;WAMG;QACH,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;YACjC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;SACzC,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;KACpD,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAC","sourcesContent":["/**\n * Product Behavior Policy & Limit Grant Schemas (Shared)\n *\n * Declarative configuration for how the billing provider and the engine\n * should handle product lifecycle (trial, proration, cancellation, metering).\n *\n * Also defines the LimitGrant schema that controls how product limits compose.\n *\n * @see billing-and-features-system.md §6.1 (LimitGrant), §6.1 (ProductBehaviorPolicy)\n */\n\nimport { z } from 'zod';\nimport {\n  LimitGrantMode,\n  ProrationBehavior,\n  BillingTiming,\n  MeteringAggregationWindow,\n} from './billing-enums.shared.schemas';\n\n// ── Limit Grant ────────────────────────────────────────────────────\n\n/**\n * A limit grant from a product.\n *\n * - SET mode: absolute value (replaces, used for PLAN base limits).\n *   Example: \"Professional plan gives you 50 projects.\"\n * - ADD mode: additive (stacks on top, used for ADDON bonus limits).\n *   Example: \"+10 extra projects.\"\n *\n * Aggregation algorithm in BillingFeatureSyncBackendService:\n *   1. Start with active PLAN's SET limits (only one active plan per billing account)\n *   2. For each active ADDON with ADD mode: sum onto current limit\n *   3. For each active ADDON with SET mode: take max(current, addon value)\n *   4. FEATURES_UNLIMITED always wins in any comparison\n */\nexport const LimitGrantSchema = z.object({\n  /** The limit value (count or -1 for FEATURES_UNLIMITED) */\n  value: z.number(),\n  /** How this grant composes with others */\n  mode: z.enum(LimitGrantMode).default(LimitGrantMode.SET),\n});\nexport type LimitGrant = z.infer<typeof LimitGrantSchema>;\n\n// ── Product Behavior Policy ────────────────────────────────────────\n\n/**\n * Declarative configuration for how the billing provider and the engine\n * should handle this product's lifecycle.\n *\n * This is the \"billing policy\" layer — NOT reimplementing provider logic,\n * but CONFIGURING the parameters that get passed to the provider's API.\n */\nexport const ProductBehaviorPolicySchema = z.object({\n  /** Trial configuration (overrides global BillingConfiguration.defaultTrialDays) */\n  trial: z.object({\n    /** Number of trial days (0 = no trial) */\n    days: z.number().min(0).default(0),\n    /**\n     * Require a payment method before the trial starts. READ since 2026-09-08 (#408).\n     *\n     * It reached no provider call before that, so a trial declared as requiring a card behaved\n     * identically to one that did not — Wonder Todos' enterprise plan (`true`) and professional\n     * plan (`false`) were indistinguishable at the provider.\n     *\n     * Only meaningful WITH a trial: a product declaring it alongside `days: 0` demands nothing,\n     * because asking for a card up front on a purchase with no trial is a different decision and\n     * nobody authored it.\n     */\n    requirePaymentMethod: z.boolean().default(false),\n  }).optional(),\n\n  /** Upgrade behavior (when switching TO this plan from a lower tier) */\n  upgrade: z.object({\n    /** Proration passed to provider: create_prorations, none, always_invoice */\n    proration: z.enum(ProrationBehavior).default(ProrationBehavior.CREATE_PRORATIONS),\n    /** Apply immediately or at end of current period */\n    timing: z.enum(BillingTiming).default(BillingTiming.IMMEDIATE),\n  }).optional(),\n\n  /** Downgrade behavior (when switching FROM this plan to a lower tier) */\n  downgrade: z.object({\n    proration: z.enum(ProrationBehavior).default(ProrationBehavior.NONE),\n    timing: z.enum(BillingTiming).default(BillingTiming.AT_PERIOD_END),\n  }).optional(),\n\n  /** Cancellation behavior for subscriptions on this product */\n  cancellation: z.object({\n    /** Allow immediate cancellation (vs only at period end) */\n    allowImmediate: z.boolean().default(false),\n    /** Default cancellation timing when user cancels */\n    defaultBehavior: z.enum(BillingTiming).default(BillingTiming.AT_PERIOD_END),\n  }).optional(),\n\n  /**\n   * Authored metering policy (for METERED products only), READ by\n   * `UsageMeteringBackendService` since 2026-09-08 (#415).\n   *\n   * Every field here was declared, defaulted, documented and read by NOTHING until then: the flush\n   * merged every pending row by billing account and product whatever the product said, so\n   * `preFlushAggregation: false` was unrepresentable and `aggregationWindow`'s two members selected\n   * between behaviours that were the same behaviour. The note that stood here said exactly that and\n   * asked that the gap stay visible rather than become \"a false runtime guarantee\"; this replaces it\n   * because the guarantee is now real, and says which reader makes each field true.\n   */\n  metering: z.object({\n    /**\n     * How often to flush aggregated usage to the billing provider (minutes).\n     *\n     * Read by the engine's usage-flush batch, which picks the SHORTEST interval any metered product\n     * authors — a schedule is one thing and the products sharing it are many, so the fastest promise\n     * is the one that has to be kept. A product asking for less frequent reporting than its neighbour\n     * still gets reported at the neighbour's cadence, which costs nothing: reporting sooner than\n     * authored is never wrong, reporting later than authored is.\n     */\n    flushIntervalMinutes: z.number().min(1).default(60),\n    /**\n     * Whether one meter event may span a billing-period boundary.\n     *\n     * This is not a preference, it is a correctness choice about MONEY. A merged group carries ONE\n     * timestamp and the provider assigns the event to the period that timestamp falls in, so\n     * `PER_FLUSH` merging across a boundary bills the earlier period's usage into the later one.\n     * `PER_BILLING_PERIOD` splits at the boundary, derived from the subscription's own\n     * `currentPeriodStart` / `currentPeriodEnd`. Leave it `PER_FLUSH` when the product's periods do\n     * not change what it costs.\n     */\n    aggregationWindow: z.enum(MeteringAggregationWindow).default(MeteringAggregationWindow.PER_FLUSH),\n    /**\n     * Aggregate locally before sending (sum same-key records into one meter event).\n     *\n     * `false` sends one event per recorded row, each with its own instant. Choose it when the provider\n     * must see every event — because its aggregation is not a sum, or because the individual instants\n     * matter. Local merging destroys both irreversibly, before the provider ever sees them.\n     */\n    preFlushAggregation: z.boolean().default(true),\n    /**\n     * Retry policy when a provider report fails.\n     *\n     * Safe only because every meter event carries a derived idempotency identifier: a retry after a\n     * response lost in transit re-sends the same identifier and the provider discards it. Retrying\n     * without that is how a timeout becomes a double charge, which is why the two shipped together.\n     */\n    retryPolicy: z.object({\n      maxRetries: z.number().default(3),\n      backoffMultiplier: z.number().default(2),\n    }).default({ maxRetries: 3, backoffMultiplier: 2 }),\n  }).optional(),\n});\nexport type ProductBehaviorPolicy = z.infer<typeof ProductBehaviorPolicySchema>;\n"]}
+{"version":3,"file":"product-behavior-policy.shared.schemas.js","sourceRoot":"","sources":["../../../../src/billing/product-behavior-policy.shared.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EACL,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,yBAAyB,GAC1B,MAAM,gCAAgC,CAAC;AAExC,sEAAsE;AAEtE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,2DAA2D;IAC3D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,0CAA0C;IAC1C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC;CACzD,CAAC,CAAC;AAGH,sEAAsE;AAEtE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,mFAAmF;IACnF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,0CAA0C;QAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAClC;;;;;;;;;;WAUG;QACH,oBAAoB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;KACjD,CAAC,CAAC,QAAQ,EAAE;IAEb,uEAAuE;IACvE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,4EAA4E;QAC5E,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,iBAAiB,CAAC;QACjF,oDAAoD;QACpD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,SAAS,CAAC;KAC/D,CAAC,CAAC,QAAQ,EAAE;IAEb,yEAAyE;IACzE,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,IAAI,CAAC;QACpE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC;KACnE,CAAC,CAAC,QAAQ,EAAE;IAEb,8DAA8D;IAC9D,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC;QACrB,2DAA2D;QAC3D,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1C,oDAAoD;QACpD,eAAe,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC;KAC5E,CAAC,CAAC,MAAM,CACP,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,eAAe,KAAK,aAAa,CAAC,SAAS,EACvF,EAAE,OAAO,EAAE,wFAAwF,EAAE,IAAI,EAAE,CAAC,iBAAiB,CAAC,EAAE,CACjI,CAAC,QAAQ,EAAE;IAEZ;;;;;;;;;;OAUG;IACH,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC;QACjB;;;;;;;;WAQG;QACH,oBAAoB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD;;;;;;;;;WASG;QACH,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,SAAS,CAAC;QACjG;;;;;;WAMG;QACH,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAC9C;;;;;;WAMG;QACH,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;YACpB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;YACjC,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;SACzC,CAAC,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;KACpD,CAAC,CAAC,QAAQ,EAAE;CACd,CAAC,CAAC","sourcesContent":["/**\n * Product Behavior Policy & Limit Grant Schemas (Shared)\n *\n * Declarative configuration for how the billing provider and the engine\n * should handle product lifecycle (trial, proration, cancellation, metering).\n *\n * Also defines the LimitGrant schema that controls how product limits compose.\n *\n * @see billing-and-features-system.md §6.1 (LimitGrant), §6.1 (ProductBehaviorPolicy)\n */\n\nimport { z } from 'zod';\nimport {\n  LimitGrantMode,\n  ProrationBehavior,\n  BillingTiming,\n  MeteringAggregationWindow,\n} from './billing-enums.shared.schemas';\n\n// ── Limit Grant ────────────────────────────────────────────────────\n\n/**\n * A limit grant from a product.\n *\n * - SET mode: absolute value (replaces, used for PLAN base limits).\n *   Example: \"Professional plan gives you 50 projects.\"\n * - ADD mode: additive (stacks on top, used for ADDON bonus limits).\n *   Example: \"+10 extra projects.\"\n *\n * Aggregation algorithm in BillingFeatureSyncBackendService:\n *   1. Start with active PLAN's SET limits (only one active plan per billing account)\n *   2. For each active ADDON with ADD mode: sum onto current limit\n *   3. For each active ADDON with SET mode: take max(current, addon value)\n *   4. FEATURES_UNLIMITED always wins in any comparison\n */\nexport const LimitGrantSchema = z.object({\n  /** The limit value (count or -1 for FEATURES_UNLIMITED) */\n  value: z.number(),\n  /** How this grant composes with others */\n  mode: z.enum(LimitGrantMode).default(LimitGrantMode.SET),\n});\nexport type LimitGrant = z.infer<typeof LimitGrantSchema>;\n\n// ── Product Behavior Policy ────────────────────────────────────────\n\n/**\n * Declarative configuration for how the billing provider and the engine\n * should handle this product's lifecycle.\n *\n * This is the \"billing policy\" layer — NOT reimplementing provider logic,\n * but CONFIGURING the parameters that get passed to the provider's API.\n */\nexport const ProductBehaviorPolicySchema = z.object({\n  /** Trial configuration (overrides global BillingConfiguration.defaultTrialDays) */\n  trial: z.object({\n    /** Number of trial days (0 = no trial) */\n    days: z.number().min(0).default(0),\n    /**\n     * Require a payment method before the trial starts. READ since 2026-09-08 (#408).\n     *\n     * It reached no provider call before that, so a trial declared as requiring a card behaved\n     * identically to one that did not — Wonder Todos' enterprise plan (`true`) and professional\n     * plan (`false`) were indistinguishable at the provider.\n     *\n     * Only meaningful WITH a trial: a product declaring it alongside `days: 0` demands nothing,\n     * because asking for a card up front on a purchase with no trial is a different decision and\n     * nobody authored it.\n     */\n    requirePaymentMethod: z.boolean().default(false),\n  }).optional(),\n\n  /** Upgrade behavior (when switching TO this plan from a lower tier) */\n  upgrade: z.object({\n    /** Proration passed to provider: create_prorations, none, always_invoice */\n    proration: z.enum(ProrationBehavior).default(ProrationBehavior.CREATE_PRORATIONS),\n    /** Apply immediately or at end of current period */\n    timing: z.enum(BillingTiming).default(BillingTiming.IMMEDIATE),\n  }).optional(),\n\n  /** Downgrade behavior (when switching FROM this plan to a lower tier) */\n  downgrade: z.object({\n    proration: z.enum(ProrationBehavior).default(ProrationBehavior.NONE),\n    timing: z.enum(BillingTiming).default(BillingTiming.AT_PERIOD_END),\n  }).optional(),\n\n  /** Cancellation behavior for subscriptions on this product */\n  cancellation: z.object({\n    /** Allow immediate cancellation (vs only at period end) */\n    allowImmediate: z.boolean().default(false),\n    /** Default cancellation timing when user cancels */\n    defaultBehavior: z.enum(BillingTiming).default(BillingTiming.AT_PERIOD_END),\n  }).refine(\n    (policy) => policy.allowImmediate || policy.defaultBehavior !== BillingTiming.IMMEDIATE,\n    { message: 'Immediate cancellation cannot be the default when immediate cancellation is forbidden.', path: ['defaultBehavior'] },\n  ).optional(),\n\n  /**\n   * Authored metering policy (for METERED products only), READ by\n   * `UsageMeteringBackendService` since 2026-09-08 (#415).\n   *\n   * Every field here was declared, defaulted, documented and read by NOTHING until then: the flush\n   * merged every pending row by billing account and product whatever the product said, so\n   * `preFlushAggregation: false` was unrepresentable and `aggregationWindow`'s two members selected\n   * between behaviours that were the same behaviour. The note that stood here said exactly that and\n   * asked that the gap stay visible rather than become \"a false runtime guarantee\"; this replaces it\n   * because the guarantee is now real, and says which reader makes each field true.\n   */\n  metering: z.object({\n    /**\n     * How often to flush aggregated usage to the billing provider (minutes).\n     *\n     * Read by the engine's usage-flush batch, which picks the SHORTEST interval any metered product\n     * authors — a schedule is one thing and the products sharing it are many, so the fastest promise\n     * is the one that has to be kept. A product asking for less frequent reporting than its neighbour\n     * still gets reported at the neighbour's cadence, which costs nothing: reporting sooner than\n     * authored is never wrong, reporting later than authored is.\n     */\n    flushIntervalMinutes: z.number().min(1).default(60),\n    /**\n     * Whether one meter event may span a billing-period boundary.\n     *\n     * This is not a preference, it is a correctness choice about MONEY. A merged group carries ONE\n     * timestamp and the provider assigns the event to the period that timestamp falls in, so\n     * `PER_FLUSH` merging across a boundary bills the earlier period's usage into the later one.\n     * `PER_BILLING_PERIOD` splits at the boundary, derived from the subscription's own\n     * `currentPeriodStart` / `currentPeriodEnd`. Leave it `PER_FLUSH` when the product's periods do\n     * not change what it costs.\n     */\n    aggregationWindow: z.enum(MeteringAggregationWindow).default(MeteringAggregationWindow.PER_FLUSH),\n    /**\n     * Aggregate locally before sending (sum same-key records into one meter event).\n     *\n     * `false` sends one event per recorded row, each with its own instant. Choose it when the provider\n     * must see every event — because its aggregation is not a sum, or because the individual instants\n     * matter. Local merging destroys both irreversibly, before the provider ever sees them.\n     */\n    preFlushAggregation: z.boolean().default(true),\n    /**\n     * Retry policy when a provider report fails.\n     *\n     * Safe only because every meter event carries a derived idempotency identifier: a retry after a\n     * response lost in transit re-sends the same identifier and the provider discards it. Retrying\n     * without that is how a timeout becomes a double charge, which is why the two shipped together.\n     */\n    retryPolicy: z.object({\n      maxRetries: z.number().default(3),\n      backoffMultiplier: z.number().default(2),\n    }).default({ maxRetries: 3, backoffMultiplier: 2 }),\n  }).optional(),\n});\nexport type ProductBehaviorPolicy = z.infer<typeof ProductBehaviorPolicySchema>;\n"]}

package/dist/esm/billing/product.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"product.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/billing/product.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,qBAAqB,EAAwD,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAGL,oBAAoB,EACrB,MAAM,uCAAuC,CAAC;AAI/C,KAAK,eAAe,GAChB,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAEjC,eAAO,MAAM,mDAAmD,GAC9D,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAkE9C,CAAC"}
+{"version":3,"file":"product.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/billing/product.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,EAAE,qBAAqB,EAAwD,MAAM,gDAAgD,CAAC;AAC7I,OAAO,EAGL,oBAAoB,EACrB,MAAM,uCAAuC,CAAC;AAI/C,KAAK,eAAe,GAChB,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAEjC,eAAO,MAAM,mDAAmD,GAC9D,wBAAwB,oBAAoB,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iCAgG9C,CAAC"}