npm - @wildo-ai/saas-models - Versions diffs - 1.1.4 → 1.1.6 - Mend

@wildo-ai/saas-models 1.1.4 → 1.1.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1399) hide show

package/dist/esm/external-providers/provider-usage-pricing.shared.schemas.js CHANGED Viewed

@@ -1,15 +1,28 @@
 import { z } from 'zod';
 const nonnegativeSafeIntegerSchema = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER).refine((value) => !Object.is(value, -0), 'negative zero is not canonical');
 const positiveSafeIntegerSchema = nonnegativeSafeIntegerSchema.refine((value) => value > 0, 'value must be positive');
-const sha256DigestSchema = z.string().regex(/^sha256:[a-f0-9]{64}$/);
 const isoDateTimeSchema = z.iso.datetime({ offset: true });
-/** Billable provider-usage dimensions. These are acquisition-cost categories, not customer billing units. */
+/**
+ * @wildo_source:part:start saas.models.provider-usage-pricing-authority facet:layer:shared facet:family:config facet:audience:app-developer
+ *
+ * Billable provider-usage dimensions. These are ACQUISITION-cost categories (what the application pays a
+ * model provider), not customer billing units.
+ */
 export var ProviderUsagePricingCategory;
 (function (ProviderUsagePricingCategory) {
+    /** Input tokens read without a prompt cache (or every input token, when the provider reported no split). */
     ProviderUsagePricingCategory["INPUT_TOKEN"] = "INPUT_TOKEN";
+    /** Input tokens served from a prompt cache. Priced at `INPUT_TOKEN` when the authority declares no rate. */
     ProviderUsagePricingCategory["CACHED_INPUT_TOKEN"] = "CACHED_INPUT_TOKEN";
+    /** Input tokens written into a prompt cache. Priced at `INPUT_TOKEN` when the authority declares no rate. */
     ProviderUsagePricingCategory["CACHE_WRITE_INPUT_TOKEN"] = "CACHE_WRITE_INPUT_TOKEN";
+    /** Output tokens. Includes reasoning unless the authority declares a `REASONING_TOKEN` rate. */
     ProviderUsagePricingCategory["OUTPUT_TOKEN"] = "OUTPUT_TOKEN";
+    /**
+     * Reasoning tokens, when the authority prices them apart. They are then SUBTRACTED from the output
+     * quantity: every provider already counts reasoning inside its output total, so reasoning is never
+     * billed twice.
+     */
     ProviderUsagePricingCategory["REASONING_TOKEN"] = "REASONING_TOKEN";
 })(ProviderUsagePricingCategory || (ProviderUsagePricingCategory = {}));
 export const PROVIDER_USAGE_PRICING_CATEGORY_ORDER = Object.freeze([
@@ -19,7 +32,11 @@ export const PROVIDER_USAGE_PRICING_CATEGORY_ORDER = Object.freeze([
     ProviderUsagePricingCategory.OUTPUT_TOKEN,
     ProviderUsagePricingCategory.REASONING_TOKEN,
 ]);
-/** V1 rounds once after aggregating every supported category into the authority's common denominator. */
+/**
+ * How a TOTAL is rounded to a whole minor currency unit. There is one mode: exact per-call costs are summed
+ * first and the sum is rounded up once, per reported total (#1598 review F11). Rounding each call up would
+ * overstate an embedding-heavy case by up to one minor unit per call.
+ */
 export var ProviderUsagePricingRoundingMode;
 (function (ProviderUsagePricingRoundingMode) {
     ProviderUsagePricingRoundingMode["CEILING_AGGREGATE_TO_MINOR_UNIT"] = "CEILING_AGGREGATE_TO_MINOR_UNIT";
@@ -27,13 +44,17 @@ export var ProviderUsagePricingRoundingMode;
 /** Closed trigger vocabulary for provider pricing tiers. */
 export var ProviderUsagePricingTierRuleKind;
 (function (ProviderUsagePricingTierRuleKind) {
+    /** The whole request is priced at the tier when its INPUT quantity (all prompt tokens) exceeds the threshold. */
     ProviderUsagePricingTierRuleKind["INPUT_TOKEN_QUANTITY_ABOVE"] = "INPUT_TOKEN_QUANTITY_ABOVE";
 })(ProviderUsagePricingTierRuleKind || (ProviderUsagePricingTierRuleKind = {}));
-const RATE_MULTIPLIER_BASIS_POINTS = 10_000;
+/** A rate multiplier is written in basis points: 10 000 = ×1. */
+export const PROVIDER_USAGE_RATE_MULTIPLIER_BASIS_POINTS = 10_000;
 export const ProviderUsagePricingTierRuleSchema = z.strictObject({
     kind: z.literal(ProviderUsagePricingTierRuleKind.INPUT_TOKEN_QUANTITY_ABOVE),
     inputTokenThresholdExclusive: nonnegativeSafeIntegerSchema,
+    /** Multiplier on the three input categories, in basis points (≥ 10 000: a tier never discounts). */
     inputRateMultiplierBasisPoints: positiveSafeIntegerSchema,
+    /** Multiplier on output and reasoning, in basis points (≥ 10 000). */
     outputRateMultiplierBasisPoints: positiveSafeIntegerSchema,
 });
 export const ProviderUsagePricingRateSchema = z.strictObject({
@@ -42,30 +63,45 @@ export const ProviderUsagePricingRateSchema = z.strictObject({
     amountMinorNumerator: nonnegativeSafeIntegerSchema,
 });
 /**
- * Canonical registered provider/model acquisition-cost authority.
+ * One provider/model acquisition-cost price, REGISTERED BY THE APPLICATION in
+ * `modelCostAccounting.providerUsagePricingAuthorities` (#1598), because rates are negotiated: a list price
+ * shipped by the engine would be wrong for every firm with a contract, and would go stale.
+ *
+ * A price is identified by `pricingAuthorityRef@pricingAuthorityVersion`; the registry refuses a duplicate
+ * pair at startup. A call is priced by the authority whose `providerRef` and `model` equal the call's
+ * recorded provider and model, choosing the highest version whose `effectiveFrom` is not after the call.
+ * No match leaves the call `UNPRICED`, never priced at zero.
  *
- * This is deliberately separate from billing `PriceSchema`, which represents what an application
- * charges its customers. Runtime budget consumers retain this record's identity/digest and never
- * copy its rates into a workflow-local table.
+ * Deliberately separate from billing's `PriceSchema`, which is what the application CHARGES its customers.
+ *
+ * History: an earlier revision carried `implementationDigest` and `pricingDigest` and a "sealed basis" type
+ * saying an application could "neither choose rates" nor mint the digest. Both were remnants of the retired
+ * digest era (one-source-of-truth Rule 0) and contradicted the decision that the application registers its
+ * rates. `modelRef` / `modelVersion` were replaced by `model`, the one id a call actually records.
  */
-export const ProviderUsagePricingAuthorityV1Schema = z.strictObject({
+export const ProviderUsagePricingAuthoritySchema = z.strictObject({
     schemaVersion: z.literal(1),
-    pricingAuthorityRef: z.string().min(1),
+    /** Stable name of this price list entry, for example `pricing:openai/gpt-5.6-terra`. */
+    pricingAuthorityRef: z.string().min(1).max(200),
+    /** Version of that entry. A rate change is a new version with a later `effectiveFrom`, never an edit. */
     pricingAuthorityVersion: positiveSafeIntegerSchema,
+    /** The provider the call went to, exactly as the call records it (`openai`, `anthropic`, ...). */
     providerRef: z.string().min(1),
-    modelRef: z.string().min(1),
-    modelVersion: z.string().min(1),
+    /** The resolved model id, exactly as the call records it (`gpt-5.6-terra`, `claude-opus-4-8`, ...). */
+    model: z.string().min(1),
+    /** ISO 4217 code. Currencies are never converted: every total is per currency. */
     currency: z.string().regex(/^[A-Z]{3}$/),
+    /** The number of billable units each rate's `amountMinorNumerator` is charged per (1 000 000 for "per million tokens"). */
     unitsDenominator: positiveSafeIntegerSchema,
     roundingMode: z.literal(ProviderUsagePricingRoundingMode.CEILING_AGGREGATE_TO_MINOR_UNIT),
     rates: z.array(ProviderUsagePricingRateSchema).min(1),
     /** Ordered full-request price tiers; the highest matching input threshold wins. */
     usageTierRules: z.array(ProviderUsagePricingTierRuleSchema),
+    /** From when this version applies to a call (inclusive). */
     effectiveFrom: isoDateTimeSchema,
+    /** Where the rates come from: a public price page, a contract reference. Provenance only. */
     sourceRef: z.string().min(1),
     sourceVersion: z.string().min(1),
-    implementationDigest: sha256DigestSchema,
-    pricingDigest: sha256DigestSchema,
 }).superRefine((authority, context) => {
     const categories = authority.rates.map((rate) => rate.category);
     if (new Set(categories).size !== categories.length) {
@@ -83,55 +119,30 @@ export const ProviderUsagePricingAuthorityV1Schema = z.strictObject({
         context.addIssue({ code: 'custom', message: 'usage pricing tiers must use unique ascending thresholds', path: ['usageTierRules'] });
     }
     for (const [index, rule] of authority.usageTierRules.entries()) {
-        if (rule.inputRateMultiplierBasisPoints < RATE_MULTIPLIER_BASIS_POINTS || rule.outputRateMultiplierBasisPoints < RATE_MULTIPLIER_BASIS_POINTS) {
+        if (rule.inputRateMultiplierBasisPoints < PROVIDER_USAGE_RATE_MULTIPLIER_BASIS_POINTS || rule.outputRateMultiplierBasisPoints < PROVIDER_USAGE_RATE_MULTIPLIER_BASIS_POINTS) {
             context.addIssue({ code: 'custom', message: 'usage pricing tier multipliers cannot discount the registered base rate', path: ['usageTierRules', index] });
         }
     }
 });
-/**
- * Canonical acquisition-cost basis for the selected app-creation model.
- *
- * The source is the provider's public model page observed on 2026-08-13. This
- * is not customer billing data and is never copied into a Work Cycle or Driver
- * request; those consumers retain only the sealed registry identity.
- */
-export const OPENAI_GPT_5_6_TERRA_PROVIDER_USAGE_PRICING_BASIS_V1 = Object.freeze({
-    schemaVersion: 1,
-    pricingAuthorityRef: 'pricing:openai/gpt-5.6-terra',
-    pricingAuthorityVersion: 1,
-    providerRef: 'openai',
-    modelRef: 'llm-model:gpt-5.6-terra',
-    modelVersion: 'gpt-5.6-terra',
-    currency: 'USD',
-    unitsDenominator: 1_000_000,
-    roundingMode: ProviderUsagePricingRoundingMode.CEILING_AGGREGATE_TO_MINOR_UNIT,
-    rates: Object.freeze([
-        Object.freeze({ category: ProviderUsagePricingCategory.INPUT_TOKEN, amountMinorNumerator: 200 }),
-        Object.freeze({ category: ProviderUsagePricingCategory.CACHED_INPUT_TOKEN, amountMinorNumerator: 20 }),
-        Object.freeze({ category: ProviderUsagePricingCategory.CACHE_WRITE_INPUT_TOKEN, amountMinorNumerator: 250 }),
-        Object.freeze({ category: ProviderUsagePricingCategory.OUTPUT_TOKEN, amountMinorNumerator: 1_200 }),
-    ]),
-    usageTierRules: Object.freeze([
-        Object.freeze({
-            kind: ProviderUsagePricingTierRuleKind.INPUT_TOKEN_QUANTITY_ABOVE,
-            inputTokenThresholdExclusive: 272_000,
-            inputRateMultiplierBasisPoints: 20_000,
-            outputRateMultiplierBasisPoints: 15_000,
-        }),
-    ]),
-    effectiveFrom: '2026-08-13T00:00:00.000Z',
-    sourceRef: 'https://developers.openai.com/api/docs/models/gpt-5.6-terra',
-    sourceVersion: 'observed:2026-08-13',
-});
+/** @wildo_source:part:end saas.models.provider-usage-pricing-authority */
+/** One priced quantity of one category, as the calculator derived it from a call's usage. */
 export const ProviderUsageAmountSchema = z.strictObject({
     category: z.enum(ProviderUsagePricingCategory),
     quantity: nonnegativeSafeIntegerSchema,
 });
+/**
+ * The EXACT cost of one call under one authority, unrounded (#1598 F11):
+ * `callCostMinorNumerator / callCostUnitsDenominator` minor currency units.
+ *
+ * The numerator is a decimal INTEGER STRING because it is an exact rational part and must survive both
+ * adapters without floating-point loss; the denominator is small enough to stay a number.
+ */
 export const ProviderUsageCostResultSchema = z.strictObject({
     pricingAuthorityRef: z.string().min(1),
     pricingAuthorityVersion: positiveSafeIntegerSchema,
-    pricingDigest: sha256DigestSchema,
     currency: z.string().regex(/^[A-Z]{3}$/),
-    amountMinor: nonnegativeSafeIntegerSchema,
+    callCostMinorNumerator: z.string().regex(/^\d+$/),
+    callCostUnitsDenominator: positiveSafeIntegerSchema,
+    amounts: z.array(ProviderUsageAmountSchema),
 });
 //# sourceMappingURL=provider-usage-pricing.shared.schemas.js.map

package/dist/esm/external-providers/provider-usage-pricing.shared.schemas.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"provider-usage-pricing.shared.schemas.js","sourceRoot":"","sources":["../../../../src/external-providers/provider-usage-pricing.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,gCAAgC,CAAC,CAAC;AAC5K,MAAM,yBAAyB,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,EAAE,wBAAwB,CAAC,CAAC;AACtH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;AACrE,MAAM,iBAAiB,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAE3D,6GAA6G;AAC7G,MAAM,CAAN,IAAY,4BAMX;AAND,WAAY,4BAA4B;IACtC,2DAA2B,CAAA;IAC3B,yEAAyC,CAAA;IACzC,mFAAmD,CAAA;IACnD,6DAA6B,CAAA;IAC7B,mEAAmC,CAAA;AACrC,CAAC,EANW,4BAA4B,KAA5B,4BAA4B,QAMvC;AAED,MAAM,CAAC,MAAM,qCAAqC,GAA4C,MAAM,CAAC,MAAM,CAAC;IAC1G,4BAA4B,CAAC,WAAW;IACxC,4BAA4B,CAAC,kBAAkB;IAC/C,4BAA4B,CAAC,uBAAuB;IACpD,4BAA4B,CAAC,YAAY;IACzC,4BAA4B,CAAC,eAAe;CAC7C,CAAC,CAAC;AAEH,yGAAyG;AACzG,MAAM,CAAN,IAAY,gCAEX;AAFD,WAAY,gCAAgC;IAC1C,uGAAmE,CAAA;AACrE,CAAC,EAFW,gCAAgC,KAAhC,gCAAgC,QAE3C;AAED,4DAA4D;AAC5D,MAAM,CAAN,IAAY,gCAEX;AAFD,WAAY,gCAAgC;IAC1C,6FAAyD,CAAA;AAC3D,CAAC,EAFW,gCAAgC,KAAhC,gCAAgC,QAE3C;AAED,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAE5C,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC/D,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,0BAA0B,CAAC;IAC5E,4BAA4B,EAAE,4BAA4B;IAC1D,8BAA8B,EAAE,yBAAyB;IACzD,+BAA+B,EAAE,yBAAyB;CAC3D,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC3D,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC;IAC9C,0EAA0E;IAC1E,oBAAoB,EAAE,4BAA4B;CACnD,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,YAAY,CAAC;IAClE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,uBAAuB,EAAE,yBAAyB;IAClD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;IACxC,gBAAgB,EAAE,yBAAyB;IAC3C,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,+BAA+B,CAAC;IACzF,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,mFAAmF;IACnF,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,kCAAkC,CAAC;IAC3D,aAAa,EAAE,iBAAiB;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,oBAAoB,EAAE,kBAAkB;IACxC,aAAa,EAAE,kBAAkB;CAClC,CAAC,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;IACpC,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QACnD,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mCAAmC,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,qCAAqC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACzG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAE,CAAE,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC,EAAE,CAAC;QACrH,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,6CAA6C,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,CAAC,4BAA4B,CAAC,WAAW,EAAE,4BAA4B,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7G,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,QAAQ,sBAAsB,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxI,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,SAAS,CAAC,cAAc,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,4BAA4B,GAAG,IAAI,CAAC,4BAA4B,CAAC,EAAE,CAAC;QAC3K,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,0DAA0D,EAAE,IAAI,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACtI,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,SAAS,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/D,IAAI,IAAI,CAAC,8BAA8B,GAAG,4BAA4B,IAAI,IAAI,CAAC,+BAA+B,GAAG,4BAA4B,EAAE,CAAC;YAC9I,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,yEAAyE,EAAE,IAAI,EAAE,CAAC,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5J,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAiBH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oDAAoD,GAAyC,MAAM,CAAC,MAAM,CAAC;IACtH,aAAa,EAAE,CAAC;IAChB,mBAAmB,EAAE,8BAA8B;IACnD,uBAAuB,EAAE,CAAC;IAC1B,WAAW,EAAE,QAAQ;IACrB,QAAQ,EAAE,yBAAyB;IACnC,YAAY,EAAE,eAAe;IAC7B,QAAQ,EAAE,KAAK;IACf,gBAAgB,EAAE,SAAS;IAC3B,YAAY,EAAE,gCAAgC,CAAC,+BAA+B;IAC9E,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,4BAA4B,CAAC,WAAW,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC;QAChG,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,4BAA4B,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,EAAE,EAAE,CAAC;QACtG,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,4BAA4B,CAAC,uBAAuB,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC;QAC5G,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,4BAA4B,CAAC,YAAY,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;KACpG,CAAC;IACF,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC;YACZ,IAAI,EAAE,gCAAgC,CAAC,0BAA0B;YACjE,4BAA4B,EAAE,OAAO;YACrC,8BAA8B,EAAE,MAAM;YACtC,+BAA+B,EAAE,MAAM;SACxC,CAAC;KACH,CAAC;IACF,aAAa,EAAE,0BAA0B;IACzC,SAAS,EAAE,6DAA6D;IACxE,aAAa,EAAE,qBAAqB;CACrC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAY,CAAC;IACtD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC;IAC9C,QAAQ,EAAE,4BAA4B;CACvC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,uBAAuB,EAAE,yBAAyB;IAClD,aAAa,EAAE,kBAAkB;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;IACxC,WAAW,EAAE,4BAA4B;CAC1C,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\n\nconst nonnegativeSafeIntegerSchema = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER).refine((value) => !Object.is(value, -0), 'negative zero is not canonical');\nconst positiveSafeIntegerSchema = nonnegativeSafeIntegerSchema.refine((value) => value > 0, 'value must be positive');\nconst sha256DigestSchema = z.string().regex(/^sha256:[a-f0-9]{64}$/);\nconst isoDateTimeSchema = z.iso.datetime({ offset: true });\n\n/** Billable provider-usage dimensions. These are acquisition-cost categories, not customer billing units. /\nexport enum ProviderUsagePricingCategory {\n INPUT_TOKEN = 'INPUT_TOKEN',\n CACHED_INPUT_TOKEN = 'CACHED_INPUT_TOKEN',\n CACHE_WRITE_INPUT_TOKEN = 'CACHE_WRITE_INPUT_TOKEN',\n OUTPUT_TOKEN = 'OUTPUT_TOKEN',\n REASONING_TOKEN = 'REASONING_TOKEN',\n}\n\nexport const PROVIDER_USAGE_PRICING_CATEGORY_ORDER: readonly ProviderUsagePricingCategory[] = Object.freeze([\n ProviderUsagePricingCategory.INPUT_TOKEN,\n ProviderUsagePricingCategory.CACHED_INPUT_TOKEN,\n ProviderUsagePricingCategory.CACHE_WRITE_INPUT_TOKEN,\n ProviderUsagePricingCategory.OUTPUT_TOKEN,\n ProviderUsagePricingCategory.REASONING_TOKEN,\n]);\n\n/* V1 rounds once after aggregating every supported category into the authority's common denominator. /\nexport enum ProviderUsagePricingRoundingMode {\n CEILING_AGGREGATE_TO_MINOR_UNIT = 'CEILING_AGGREGATE_TO_MINOR_UNIT',\n}\n\n/* Closed trigger vocabulary for provider pricing tiers. /\nexport enum ProviderUsagePricingTierRuleKind {\n INPUT_TOKEN_QUANTITY_ABOVE = 'INPUT_TOKEN_QUANTITY_ABOVE',\n}\n\nconst RATE_MULTIPLIER_BASIS_POINTS = 10_000;\n\nexport const ProviderUsagePricingTierRuleSchema = z.strictObject({\n kind: z.literal(ProviderUsagePricingTierRuleKind.INPUT_TOKEN_QUANTITY_ABOVE),\n inputTokenThresholdExclusive: nonnegativeSafeIntegerSchema,\n inputRateMultiplierBasisPoints: positiveSafeIntegerSchema,\n outputRateMultiplierBasisPoints: positiveSafeIntegerSchema,\n});\nexport type ProviderUsagePricingTierRule = z.infer<typeof ProviderUsagePricingTierRuleSchema>;\n\nexport const ProviderUsagePricingRateSchema = z.strictObject({\n category: z.enum(ProviderUsagePricingCategory),\n /* Minor-currency units charged per `unitsDenominator` billable units. /\n amountMinorNumerator: nonnegativeSafeIntegerSchema,\n});\nexport type ProviderUsagePricingRate = z.infer<typeof ProviderUsagePricingRateSchema>;\n\n/\n Canonical registered provider/model acquisition-cost authority.\n \n This is deliberately separate from billing `PriceSchema`, which represents what an application\n * charges its customers. Runtime budget consumers retain this record's identity/digest and never\n * copy its rates into a workflow-local table.\n /\nexport const ProviderUsagePricingAuthorityV1Schema = z.strictObject({\n schemaVersion: z.literal(1),\n pricingAuthorityRef: z.string().min(1),\n pricingAuthorityVersion: positiveSafeIntegerSchema,\n providerRef: z.string().min(1),\n modelRef: z.string().min(1),\n modelVersion: z.string().min(1),\n currency: z.string().regex(/^[A-Z]{3}$/),\n unitsDenominator: positiveSafeIntegerSchema,\n roundingMode: z.literal(ProviderUsagePricingRoundingMode.CEILING_AGGREGATE_TO_MINOR_UNIT),\n rates: z.array(ProviderUsagePricingRateSchema).min(1),\n /* Ordered full-request price tiers; the highest matching input threshold wins. /\n usageTierRules: z.array(ProviderUsagePricingTierRuleSchema),\n effectiveFrom: isoDateTimeSchema,\n sourceRef: z.string().min(1),\n sourceVersion: z.string().min(1),\n implementationDigest: sha256DigestSchema,\n pricingDigest: sha256DigestSchema,\n}).superRefine((authority, context) => {\n const categories = authority.rates.map((rate) => rate.category);\n if (new Set(categories).size !== categories.length) {\n context.addIssue({ code: 'custom', message: 'pricing categories must be unique', path: ['rates'] });\n }\n const order = new Map(PROVIDER_USAGE_PRICING_CATEGORY_ORDER.map((category, index) => [category, index]));\n if (!categories.every((category, index) => index === 0 \|\| order.get(categories[index - 1]!)! < order.get(category)!)) {\n context.addIssue({ code: 'custom', message: 'pricing categories must use canonical order', path: ['rates'] });\n }\n for (const required of [ProviderUsagePricingCategory.INPUT_TOKEN, ProviderUsagePricingCategory.OUTPUT_TOKEN]) {\n if (!categories.includes(required)) context.addIssue({ code: 'custom', message: `${required} pricing is required`, path: ['rates'] });\n }\n if (!authority.usageTierRules.every((rule, index) => index === 0 \|\| authority.usageTierRules[index - 1]!.inputTokenThresholdExclusive < rule.inputTokenThresholdExclusive)) {\n context.addIssue({ code: 'custom', message: 'usage pricing tiers must use unique ascending thresholds', path: ['usageTierRules'] });\n }\n for (const [index, rule] of authority.usageTierRules.entries()) {\n if (rule.inputRateMultiplierBasisPoints < RATE_MULTIPLIER_BASIS_POINTS \|\| rule.outputRateMultiplierBasisPoints < RATE_MULTIPLIER_BASIS_POINTS) {\n context.addIssue({ code: 'custom', message: 'usage pricing tier multipliers cannot discount the registered base rate', path: ['usageTierRules', index] });\n }\n }\n});\nexport type ProviderUsagePricingAuthorityV1 = z.infer<typeof ProviderUsagePricingAuthorityV1Schema>;\n\n/\n Registry input owned by provider/model configuration. The backend calculator\n * supplies its own implementation identity and seals the final authority, so\n * an application or workflow can neither choose rates nor mint the algorithm\n * digest it later asks the registry to trust.\n /\nexport type ProviderUsagePricingAuthorityBasisV1 = Omit<\n ProviderUsagePricingAuthorityV1,\n 'implementationDigest' \| 'pricingDigest' \| 'rates' \| 'usageTierRules'\n> & {\n readonly rates: readonly ProviderUsagePricingRate[];\n readonly usageTierRules: readonly ProviderUsagePricingTierRule[];\n};\n\n/\n Canonical acquisition-cost basis for the selected app-creation model.\n \n The source is the provider's public model page observed on 2026-08-13. This\n * is not customer billing data and is never copied into a Work Cycle or Driver\n * request; those consumers retain only the sealed registry identity.\n */\nexport const OPENAI_GPT_5_6_TERRA_PROVIDER_USAGE_PRICING_BASIS_V1: ProviderUsagePricingAuthorityBasisV1 = Object.freeze({\n schemaVersion: 1,\n pricingAuthorityRef: 'pricing:openai/gpt-5.6-terra',\n pricingAuthorityVersion: 1,\n providerRef: 'openai',\n modelRef: 'llm-model:gpt-5.6-terra',\n modelVersion: 'gpt-5.6-terra',\n currency: 'USD',\n unitsDenominator: 1_000_000,\n roundingMode: ProviderUsagePricingRoundingMode.CEILING_AGGREGATE_TO_MINOR_UNIT,\n rates: Object.freeze([\n Object.freeze({ category: ProviderUsagePricingCategory.INPUT_TOKEN, amountMinorNumerator: 200 }),\n Object.freeze({ category: ProviderUsagePricingCategory.CACHED_INPUT_TOKEN, amountMinorNumerator: 20 }),\n Object.freeze({ category: ProviderUsagePricingCategory.CACHE_WRITE_INPUT_TOKEN, amountMinorNumerator: 250 }),\n Object.freeze({ category: ProviderUsagePricingCategory.OUTPUT_TOKEN, amountMinorNumerator: 1_200 }),\n ]),\n usageTierRules: Object.freeze([\n Object.freeze({\n kind: ProviderUsagePricingTierRuleKind.INPUT_TOKEN_QUANTITY_ABOVE,\n inputTokenThresholdExclusive: 272_000,\n inputRateMultiplierBasisPoints: 20_000,\n outputRateMultiplierBasisPoints: 15_000,\n }),\n ]),\n effectiveFrom: '2026-08-13T00:00:00.000Z',\n sourceRef: 'https://developers.openai.com/api/docs/models/gpt-5.6-terra',\n sourceVersion: 'observed:2026-08-13',\n});\n\nexport const ProviderUsageAmountSchema = z.strictObject({\n category: z.enum(ProviderUsagePricingCategory),\n quantity: nonnegativeSafeIntegerSchema,\n});\nexport type ProviderUsageAmount = z.infer<typeof ProviderUsageAmountSchema>;\n\nexport const ProviderUsageCostResultSchema = z.strictObject({\n pricingAuthorityRef: z.string().min(1),\n pricingAuthorityVersion: positiveSafeIntegerSchema,\n pricingDigest: sha256DigestSchema,\n currency: z.string().regex(/^[A-Z]{3}$/),\n amountMinor: nonnegativeSafeIntegerSchema,\n});\nexport type ProviderUsageCostResult = z.infer<typeof ProviderUsageCostResultSchema>;\n"]}
1	+ {"version":3,"file":"provider-usage-pricing.shared.schemas.js","sourceRoot":"","sources":["../../../../src/external-providers/provider-usage-pricing.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,gCAAgC,CAAC,CAAC;AAC5K,MAAM,yBAAyB,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,EAAE,wBAAwB,CAAC,CAAC;AACtH,MAAM,iBAAiB,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,CAAN,IAAY,4BAeX;AAfD,WAAY,4BAA4B;IACtC,4GAA4G;IAC5G,2DAA2B,CAAA;IAC3B,4GAA4G;IAC5G,yEAAyC,CAAA;IACzC,6GAA6G;IAC7G,mFAAmD,CAAA;IACnD,gGAAgG;IAChG,6DAA6B,CAAA;IAC7B;;;;OAIG;IACH,mEAAmC,CAAA;AACrC,CAAC,EAfW,4BAA4B,KAA5B,4BAA4B,QAevC;AAED,MAAM,CAAC,MAAM,qCAAqC,GAA4C,MAAM,CAAC,MAAM,CAAC;IAC1G,4BAA4B,CAAC,WAAW;IACxC,4BAA4B,CAAC,kBAAkB;IAC/C,4BAA4B,CAAC,uBAAuB;IACpD,4BAA4B,CAAC,YAAY;IACzC,4BAA4B,CAAC,eAAe;CAC7C,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAN,IAAY,gCAEX;AAFD,WAAY,gCAAgC;IAC1C,uGAAmE,CAAA;AACrE,CAAC,EAFW,gCAAgC,KAAhC,gCAAgC,QAE3C;AAED,4DAA4D;AAC5D,MAAM,CAAN,IAAY,gCAGX;AAHD,WAAY,gCAAgC;IAC1C,iHAAiH;IACjH,6FAAyD,CAAA;AAC3D,CAAC,EAHW,gCAAgC,KAAhC,gCAAgC,QAG3C;AAED,iEAAiE;AACjE,MAAM,CAAC,MAAM,2CAA2C,GAAG,MAAM,CAAC;AAElE,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC/D,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,0BAA0B,CAAC;IAC5E,4BAA4B,EAAE,4BAA4B;IAC1D,oGAAoG;IACpG,8BAA8B,EAAE,yBAAyB;IACzD,sEAAsE;IACtE,+BAA+B,EAAE,yBAAyB;CAC3D,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC3D,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC;IAC9C,0EAA0E;IAC1E,oBAAoB,EAAE,4BAA4B;CACnD,CAAC,CAAC;AAGH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,YAAY,CAAC;IAChE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,wFAAwF;IACxF,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/C,yGAAyG;IACzG,uBAAuB,EAAE,yBAAyB;IAClD,kGAAkG;IAClG,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,uGAAuG;IACvG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,kFAAkF;IAClF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;IACxC,2HAA2H;IAC3H,gBAAgB,EAAE,yBAAyB;IAC3C,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,+BAA+B,CAAC;IACzF,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,mFAAmF;IACnF,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,kCAAkC,CAAC;IAC3D,4DAA4D;IAC5D,aAAa,EAAE,iBAAiB;IAChC,6FAA6F;IAC7F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACjC,CAAC,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;IACpC,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QACnD,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mCAAmC,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,qCAAqC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACzG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAE,CAAE,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC,EAAE,CAAC;QACrH,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,6CAA6C,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,CAAC,4BAA4B,CAAC,WAAW,EAAE,4BAA4B,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7G,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,QAAQ,sBAAsB,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxI,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,SAAS,CAAC,cAAc,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,4BAA4B,GAAG,IAAI,CAAC,4BAA4B,CAAC,EAAE,CAAC;QAC3K,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,0DAA0D,EAAE,IAAI,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACtI,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,SAAS,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/D,IAAI,IAAI,CAAC,8BAA8B,GAAG,2CAA2C,IAAI,IAAI,CAAC,+BAA+B,GAAG,2CAA2C,EAAE,CAAC;YAC5K,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,yEAAyE,EAAE,IAAI,EAAE,CAAC,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5J,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAGH,0EAA0E;AAE1E,6FAA6F;AAC7F,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAY,CAAC;IACtD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC;IAC9C,QAAQ,EAAE,4BAA4B;CACvC,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,uBAAuB,EAAE,yBAAyB;IAClD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;IACxC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;IACjD,wBAAwB,EAAE,yBAAyB;IACnD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;CAC5C,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\n\nconst nonnegativeSafeIntegerSchema = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER).refine((value) => !Object.is(value, -0), 'negative zero is not canonical');\nconst positiveSafeIntegerSchema = nonnegativeSafeIntegerSchema.refine((value) => value > 0, 'value must be positive');\nconst isoDateTimeSchema = z.iso.datetime({ offset: true });\n\n/*\n @wildo_source:part:start saas.models.provider-usage-pricing-authority facet:layer:shared facet:family:config facet:audience:app-developer\n \n Billable provider-usage dimensions. These are ACQUISITION-cost categories (what the application pays a\n * model provider), not customer billing units.\n /\nexport enum ProviderUsagePricingCategory {\n /* Input tokens read without a prompt cache (or every input token, when the provider reported no split). /\n INPUT_TOKEN = 'INPUT_TOKEN',\n /* Input tokens served from a prompt cache. Priced at `INPUT_TOKEN` when the authority declares no rate. /\n CACHED_INPUT_TOKEN = 'CACHED_INPUT_TOKEN',\n /* Input tokens written into a prompt cache. Priced at `INPUT_TOKEN` when the authority declares no rate. /\n CACHE_WRITE_INPUT_TOKEN = 'CACHE_WRITE_INPUT_TOKEN',\n /* Output tokens. Includes reasoning unless the authority declares a `REASONING_TOKEN` rate. /\n OUTPUT_TOKEN = 'OUTPUT_TOKEN',\n /\n Reasoning tokens, when the authority prices them apart. They are then SUBTRACTED from the output\n * quantity: every provider already counts reasoning inside its output total, so reasoning is never\n * billed twice.\n /\n REASONING_TOKEN = 'REASONING_TOKEN',\n}\n\nexport const PROVIDER_USAGE_PRICING_CATEGORY_ORDER: readonly ProviderUsagePricingCategory[] = Object.freeze([\n ProviderUsagePricingCategory.INPUT_TOKEN,\n ProviderUsagePricingCategory.CACHED_INPUT_TOKEN,\n ProviderUsagePricingCategory.CACHE_WRITE_INPUT_TOKEN,\n ProviderUsagePricingCategory.OUTPUT_TOKEN,\n ProviderUsagePricingCategory.REASONING_TOKEN,\n]);\n\n/\n How a TOTAL is rounded to a whole minor currency unit. There is one mode: exact per-call costs are summed\n * first and the sum is rounded up once, per reported total (#1598 review F11). Rounding each call up would\n * overstate an embedding-heavy case by up to one minor unit per call.\n /\nexport enum ProviderUsagePricingRoundingMode {\n CEILING_AGGREGATE_TO_MINOR_UNIT = 'CEILING_AGGREGATE_TO_MINOR_UNIT',\n}\n\n/* Closed trigger vocabulary for provider pricing tiers. /\nexport enum ProviderUsagePricingTierRuleKind {\n /* The whole request is priced at the tier when its INPUT quantity (all prompt tokens) exceeds the threshold. /\n INPUT_TOKEN_QUANTITY_ABOVE = 'INPUT_TOKEN_QUANTITY_ABOVE',\n}\n\n/* A rate multiplier is written in basis points: 10 000 = ×1. /\nexport const PROVIDER_USAGE_RATE_MULTIPLIER_BASIS_POINTS = 10_000;\n\nexport const ProviderUsagePricingTierRuleSchema = z.strictObject({\n kind: z.literal(ProviderUsagePricingTierRuleKind.INPUT_TOKEN_QUANTITY_ABOVE),\n inputTokenThresholdExclusive: nonnegativeSafeIntegerSchema,\n /* Multiplier on the three input categories, in basis points (≥ 10 000: a tier never discounts). /\n inputRateMultiplierBasisPoints: positiveSafeIntegerSchema,\n /* Multiplier on output and reasoning, in basis points (≥ 10 000). /\n outputRateMultiplierBasisPoints: positiveSafeIntegerSchema,\n});\nexport type ProviderUsagePricingTierRule = z.infer<typeof ProviderUsagePricingTierRuleSchema>;\n\nexport const ProviderUsagePricingRateSchema = z.strictObject({\n category: z.enum(ProviderUsagePricingCategory),\n /* Minor-currency units charged per `unitsDenominator` billable units. /\n amountMinorNumerator: nonnegativeSafeIntegerSchema,\n});\nexport type ProviderUsagePricingRate = z.infer<typeof ProviderUsagePricingRateSchema>;\n\n/\n One provider/model acquisition-cost price, REGISTERED BY THE APPLICATION in\n * `modelCostAccounting.providerUsagePricingAuthorities` (#1598), because rates are negotiated: a list price\n * shipped by the engine would be wrong for every firm with a contract, and would go stale.\n \n A price is identified by `pricingAuthorityRef@pricingAuthorityVersion`; the registry refuses a duplicate\n * pair at startup. A call is priced by the authority whose `providerRef` and `model` equal the call's\n * recorded provider and model, choosing the highest version whose `effectiveFrom` is not after the call.\n * No match leaves the call `UNPRICED`, never priced at zero.\n \n Deliberately separate from billing's `PriceSchema`, which is what the application CHARGES its customers.\n \n History: an earlier revision carried `implementationDigest` and `pricingDigest` and a \"sealed basis\" type\n * saying an application could \"neither choose rates\" nor mint the digest. Both were remnants of the retired\n * digest era (one-source-of-truth Rule 0) and contradicted the decision that the application registers its\n * rates. `modelRef` / `modelVersion` were replaced by `model`, the one id a call actually records.\n /\nexport const ProviderUsagePricingAuthoritySchema = z.strictObject({\n schemaVersion: z.literal(1),\n /* Stable name of this price list entry, for example `pricing:openai/gpt-5.6-terra`. /\n pricingAuthorityRef: z.string().min(1).max(200),\n /* Version of that entry. A rate change is a new version with a later `effectiveFrom`, never an edit. /\n pricingAuthorityVersion: positiveSafeIntegerSchema,\n /* The provider the call went to, exactly as the call records it (`openai`, `anthropic`, ...). /\n providerRef: z.string().min(1),\n /* The resolved model id, exactly as the call records it (`gpt-5.6-terra`, `claude-opus-4-8`, ...). /\n model: z.string().min(1),\n /* ISO 4217 code. Currencies are never converted: every total is per currency. /\n currency: z.string().regex(/^[A-Z]{3}$/),\n /* The number of billable units each rate's `amountMinorNumerator` is charged per (1 000 000 for \"per million tokens\"). /\n unitsDenominator: positiveSafeIntegerSchema,\n roundingMode: z.literal(ProviderUsagePricingRoundingMode.CEILING_AGGREGATE_TO_MINOR_UNIT),\n rates: z.array(ProviderUsagePricingRateSchema).min(1),\n /* Ordered full-request price tiers; the highest matching input threshold wins. /\n usageTierRules: z.array(ProviderUsagePricingTierRuleSchema),\n /* From when this version applies to a call (inclusive). /\n effectiveFrom: isoDateTimeSchema,\n /* Where the rates come from: a public price page, a contract reference. Provenance only. /\n sourceRef: z.string().min(1),\n sourceVersion: z.string().min(1),\n}).superRefine((authority, context) => {\n const categories = authority.rates.map((rate) => rate.category);\n if (new Set(categories).size !== categories.length) {\n context.addIssue({ code: 'custom', message: 'pricing categories must be unique', path: ['rates'] });\n }\n const order = new Map(PROVIDER_USAGE_PRICING_CATEGORY_ORDER.map((category, index) => [category, index]));\n if (!categories.every((category, index) => index === 0 \|\| order.get(categories[index - 1]!)! < order.get(category)!)) {\n context.addIssue({ code: 'custom', message: 'pricing categories must use canonical order', path: ['rates'] });\n }\n for (const required of [ProviderUsagePricingCategory.INPUT_TOKEN, ProviderUsagePricingCategory.OUTPUT_TOKEN]) {\n if (!categories.includes(required)) context.addIssue({ code: 'custom', message: `${required} pricing is required`, path: ['rates'] });\n }\n if (!authority.usageTierRules.every((rule, index) => index === 0 \|\| authority.usageTierRules[index - 1]!.inputTokenThresholdExclusive < rule.inputTokenThresholdExclusive)) {\n context.addIssue({ code: 'custom', message: 'usage pricing tiers must use unique ascending thresholds', path: ['usageTierRules'] });\n }\n for (const [index, rule] of authority.usageTierRules.entries()) {\n if (rule.inputRateMultiplierBasisPoints < PROVIDER_USAGE_RATE_MULTIPLIER_BASIS_POINTS \|\| rule.outputRateMultiplierBasisPoints < PROVIDER_USAGE_RATE_MULTIPLIER_BASIS_POINTS) {\n context.addIssue({ code: 'custom', message: 'usage pricing tier multipliers cannot discount the registered base rate', path: ['usageTierRules', index] });\n }\n }\n});\nexport type ProviderUsagePricingAuthority = z.infer<typeof ProviderUsagePricingAuthoritySchema>;\nexport type ProviderUsagePricingAuthorityInput = z.input<typeof ProviderUsagePricingAuthoritySchema>;\n/* @wildo_source:part:end saas.models.provider-usage-pricing-authority /\n\n/* One priced quantity of one category, as the calculator derived it from a call's usage. /\nexport const ProviderUsageAmountSchema = z.strictObject({\n category: z.enum(ProviderUsagePricingCategory),\n quantity: nonnegativeSafeIntegerSchema,\n});\nexport type ProviderUsageAmount = z.infer<typeof ProviderUsageAmountSchema>;\n\n/\n The EXACT cost of one call under one authority, unrounded (#1598 F11):\n * `callCostMinorNumerator / callCostUnitsDenominator` minor currency units.\n \n The numerator is a decimal INTEGER STRING because it is an exact rational part and must survive both\n * adapters without floating-point loss; the denominator is small enough to stay a number.\n */\nexport const ProviderUsageCostResultSchema = z.strictObject({\n pricingAuthorityRef: z.string().min(1),\n pricingAuthorityVersion: positiveSafeIntegerSchema,\n currency: z.string().regex(/^[A-Z]{3}$/),\n callCostMinorNumerator: z.string().regex(/^\\d+$/),\n callCostUnitsDenominator: positiveSafeIntegerSchema,\n amounts: z.array(ProviderUsageAmountSchema),\n});\nexport type ProviderUsageCostResult = z.infer<typeof ProviderUsageCostResultSchema>;\n"]}

package/dist/esm/features/application-features.shared.resources-config.schemas.d.ts CHANGED Viewed

@@ -27,13 +27,15 @@ export declare const ApplicationFeaturesResetFeaturesRequestDtoSchema: z.ZodObje
 }, z.core.$strip>;
 type ApplicationFeaturesCoreOperations = CoreResourceOperation.CREATE | CoreResourceOperation.READ | CoreResourceOperation.SEARCH | CoreResourceOperation.UPDATE | CoreResourceOperation.DELETE;
 export declare const applicationFeaturesResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("..").ResourceConfiguration<typeof ApplicationFeatures_Operations, ApplicationFeaturesCoreOperations, z.ZodObject<{
-    features: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<typeof CoreFeature>, z.ZodString]>>>>>;
-    limits: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodNumber>>>>;
+    features: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodUnion<readonly [z.ZodEnum<typeof CoreFeature>, z.ZodString]>>>>>>;
+    limits: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodRecord<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>, import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodNumber>>>>>;
     manualOverrides: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodObject<{
-        addedFeatures: z.ZodDefault<z.ZodArray<z.ZodString>>;
-        removedFeatures: z.ZodDefault<z.ZodArray<z.ZodString>>;
-        limitOverrides: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodNumber>>;
+        addedFeatures: z.ZodDefault<z.ZodArray<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+        removedFeatures: z.ZodDefault<z.ZodArray<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+        limitOverrides: z.ZodDefault<z.ZodRecord<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>, import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodNumber>>>;
     }, z.core.$strip>>>;
+    _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
+    applicationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>>>;
 }, z.core.$strip>>;
 export {};
 //# sourceMappingURL=application-features.shared.resources-config.schemas.d.ts.map

package/dist/esm/features/application-features.shared.resources-config.schemas.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"application-features.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["~~../../../~~src/features/application-features.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,uDAAuD,CAAC;AAGpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,~~EAA8B~~,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;~~AAMzG~~,oBAAY,8BAA8B;IACxC,cAAc,mBAAmB;IACjC,eAAe,oBAAoB;IACnC,cAAc,mBAAmB;CAClC;AAED,eAAO,MAAM,gDAAgD;;;iBAG3D,CAAC;AAEH,eAAO,MAAM,iDAAiD;;;iBAG5D,CAAC;AAEH,eAAO,MAAM,gDAAgD;;iBAE3D,CAAC;AAEH,KAAK,iCAAiC,GAClC,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAEjC,eAAO,MAAM,8DAA8D,GAAI,wBAAwB,oBAAoB,EAAE~~;;;;;;;;kBA0I3H~~,CAAC"}
1	+ {"version":3,"file":"application-features.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/features/application-features.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,uDAAuD,CAAC;AAGpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAA8D,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAOzI,oBAAY,8BAA8B;IACxC,cAAc,mBAAmB;IACjC,eAAe,oBAAoB;IACnC,cAAc,mBAAmB;CAClC;AAED,eAAO,MAAM,gDAAgD;;;iBAG3D,CAAC;AAEH,eAAO,MAAM,iDAAiD;;;iBAG5D,CAAC;AAEH,eAAO,MAAM,gDAAgD;;iBAE3D,CAAC;AAEH,KAAK,iCAAiC,GAClC,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAEjC,eAAO,MAAM,8DAA8D,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;kBA4K3H,CAAC"}

package/dist/esm/features/application-features.shared.resources-config.schemas.js CHANGED Viewed

@@ -7,11 +7,12 @@
  */
 import { z } from 'zod';
 import { CoreFeature } from '../organizations/organization-features.shared.schemas.js';
-import { ScopeFeaturesWithOverridesSchema } from './scope-features.shared.schemas.js';
+import { ApplicationFeaturesSchema, ScopeFeaturesWithOverridesSchema } from './scope-features.shared.schemas.js';
 import { CoreResourceOperation } from '../resources/resources.shared.core.definitions.js';
-import { ResourceOperationRiskLevel } from '../resources/resources.shared.schemas.js';
+import { ResourceOperationRiskLevel, ResourceOperationReversibility } from '../resources/resources.shared.schemas.js';
 import { CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions.js';
 import { ResourceOperationVariantType } from '../resources/resources.shared.schemas.js';
+import { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas.js';
 import { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory.js';
 import { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas.js';
 export var ApplicationFeatures_Operations;
@@ -21,22 +22,45 @@ export var ApplicationFeatures_Operations;
     ApplicationFeatures_Operations["RESET_FEATURES"] = "reset_features";
 })(ApplicationFeatures_Operations || (ApplicationFeatures_Operations = {}));
 export const ApplicationFeaturesEnableFeatureRequestDtoSchema = z.object({
-    featureId: z.enum(CoreFeature),
-    reason: z.string().max(500).optional(),
+    featureId: z.enum(CoreFeature).describe('The feature to switch on. It is added to this scope\'s manual overrides and taken off its removed list, so it stays on through billing changes.'),
+    reason: z.string().max(500).optional().describe('Why the feature is being switched on. Recorded on the audit trail with the change.'),
 });
 export const ApplicationFeaturesDisableFeatureRequestDtoSchema = z.object({
-    featureId: z.enum(CoreFeature),
-    reason: z.string().min(1).max(500),
+    featureId: z.enum(CoreFeature).describe('The feature to switch off. It is added to this scope\'s removed list and taken off its added list, so it stays off through billing changes.'),
+    reason: z.string().min(1).max(500).describe('Why the feature is being switched off. Recorded on the audit trail with the change.'),
 });
 export const ApplicationFeaturesResetFeaturesRequestDtoSchema = z.object({
-    reason: z.string().min(1).max(500),
+    reason: z.string().min(1).max(500).describe('Why every manual override is being cleared. Recorded on the audit trail with the change.'),
 });
 export const applicationFeaturesResourceConfiguration_InitializationFactory = (resourcesRelationships) => createResourceConfiguration_Initialization({
-    mainSchema: ScopeFeaturesWithOverridesSchema,
+    mainSchema: ApplicationFeaturesSchema,
     resourceIdentifier: CoreResourceType.APPLICATION_FEATURES,
     resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION_FEATURES],
     resourceRelationships: resourcesRelationships,
     isSystemResource: true,
+    /*
+     * The framework may materialise this scope's row on a caller's behalf.
+     *
+     * `systemAccessPolicy.create: ALLOWED` is what #1179's seam reads before materialising a
+     * context-addressed singleton the caller never named: an administrator can START configuring a
+     * scope that has no row yet, instead of being 404ed for the framework's own omission. Its three
+     * enterprise-config siblings (SSO / SCIM / SIEM) already declared it; this resource did not, so
+     * the same first write was refused here and nowhere else.
+     *
+     * The row written is the scope foreign key and nothing else — this resource's own schema fills
+     * the rest — so the seeding system keeps ownership of what a default MEANS and the seam decides
+     * only WHEN the row comes into existence.
+     *
+     * NOTE, because it was measured on 2026-09-19 and is easy to assume otherwise: this does NOT make
+     * a READ materialise. That seam is reached for UPDATE and DELETE only, and extending it to READ
+     * was tried and reverted — a probe of the running backend showed the read route never enters it.
+     * A scope whose row is still absent therefore still 404s on read; making that row EXIST is a
+     * seeding question, not an access-policy one.
+     */
+    systemAccessPolicy: {
+        read: ResourceSystemAccessMode.ALLOWED,
+        create: ResourceSystemAccessMode.ALLOWED,
+    },
     coreOperations: [
         CoreResourceOperation.CREATE,
         CoreResourceOperation.READ,
@@ -127,6 +151,10 @@ export const applicationFeaturesResourceConfiguration_InitializationFactory = (r
                     riskLevel: ResourceOperationRiskLevel.MEDIUM,
                     resourceOperationLike: CoreResourceOperation.UPDATE_MANY,
                     requestDto: ApplicationFeaturesEnableFeatureRequestDtoSchema,
+                    // The handler persists and returns the application's features row, like the organization
+                    // twin, so the response is that row rather than the UPDATE_MANY envelope the route shape
+                    // would imply (which the row does not satisfy, and the API reference published).
+                    customResponseDto: ScopeFeaturesWithOverridesSchema,
                 },
             ],
         },
@@ -139,6 +167,8 @@ export const applicationFeaturesResourceConfiguration_InitializationFactory = (r
                     riskLevel: ResourceOperationRiskLevel.HIGH,
                     resourceOperationLike: CoreResourceOperation.UPDATE_MANY,
                     requestDto: ApplicationFeaturesDisableFeatureRequestDtoSchema,
+                    // Same as ENABLE_FEATURE: the handler returns the features row.
+                    customResponseDto: ScopeFeaturesWithOverridesSchema,
                 },
             ],
         },
@@ -149,8 +179,13 @@ export const applicationFeaturesResourceConfiguration_InitializationFactory = (r
                     isDefault: true,
                     roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],
                     riskLevel: ResourceOperationRiskLevel.CRITICAL,
+                    // IRREVERSIBLE: Clears every override on the application. There is no backup of the list, and organizations relying on one lose access.
+                    // This is what admits it to the danger zone; risk alone no longer does.
+                    reversibility: ResourceOperationReversibility.IRREVERSIBLE,
                     resourceOperationLike: CoreResourceOperation.UPDATE_MANY,
                     requestDto: ApplicationFeaturesResetFeaturesRequestDtoSchema,
+                    // Same as ENABLE_FEATURE: the handler returns the features row.
+                    customResponseDto: ScopeFeaturesWithOverridesSchema,
                 },
             ],
         },

package/dist/esm/features/application-features.shared.resources-config.schemas.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"application-features.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../src/features/application-features.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,uDAAuD,CAAC;AACpF,OAAO,EAAE,gCAAgC,EAAE,MAAM,iCAAiC,CAAC;AAEnF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAwB,MAAM,uCAAuC,CAAC;AACzG,OAAO,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AACtH,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAEjF,MAAM,CAAN,IAAY,8BAIX;AAJD,WAAY,8BAA8B;IACxC,mEAAiC,CAAA;IACjC,qEAAmC,CAAA;IACnC,mEAAiC,CAAA;AACnC,CAAC,EAJW,8BAA8B,KAA9B,8BAA8B,QAIzC;AAED,MAAM,CAAC,MAAM,gDAAgD,GAAG,CAAC,CAAC,MAAM,CAAC;IACvE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iDAAiD,GAAG,CAAC,CAAC,MAAM,CAAC;IACxE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACnC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gDAAgD,GAAG,CAAC,CAAC,MAAM,CAAC;IACvE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACnC,CAAC,CAAC;AASH,MAAM,CAAC,MAAM,8DAA8D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI1K;IACA,UAAU,EAAE,gCAAgC;IAC5C,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;IAClG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IAEtB,cAAc,EAAE;QACd,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,mFAAmF;QACnF,oFAAoF;QACpF,oFAAoF;QACpF,qBAAqB,CAAC,MAAM;KAC7B;IAED,eAAe,EAAE,8BAA8B;IAE/C,+FAA+F;IAC/F,oDAAoD;IACpD,EAAE;IACF,6FAA6F;IAC7F,8FAA8F;IAC9F,6FAA6F;IAC7F,mGAAmG;IACnG,cAAc;IACd,EAAE;IACF,oGAAoG;IACpG,gEAAgE;IAChE,+DAA+D;IAC/D,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,KAAK;oBACnB,gBAAgB,EAAE,EAAE;oBACpB,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,EAAE;oBAChB,UAAU,EAAE,EAAE;oBACd,8BAA8B,EAAE,EAAE;iBACnC,CAAC;SACH;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;oBAC1C,UAAU,EAAE,gCAAgC,CAAC,OAAO,EAAE;iBACvD;aACF;SACF;QAED,kFAAkF;QAClF,4EAA4E;QAC5E,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;SACF;QAED,CAAC,8BAA8B,CAAC,cAAc,CAAC,EAAE;YAC/C,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,qBAAqB,EAAE,qBAAqB,CAAC,WAAW;oBACxD,UAAU,EAAE,gDAAgD;iBAC7D;aACF;SACF;QAED,CAAC,8BAA8B,CAAC,eAAe,CAAC,EAAE;YAChD,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;oBAC1C,qBAAqB,EAAE,qBAAqB,CAAC,WAAW;oBACxD,UAAU,EAAE,iDAAiD;iBAC9D;aACF;SACF;QAED,CAAC,8BAA8B,CAAC,cAAc,CAAC,EAAE;YAC/C,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,QAAQ;oBAC9C,qBAAqB,EAAE,qBAAqB,CAAC,WAAW;oBACxD,UAAU,EAAE,gDAAgD;iBAC7D;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/*\n Application Features Shared Resource Configuration\n \n Application-scope entitlement ledger. This mirrors organization/user feature\n * ledgers so exact-scope gates such as `M2M_WEBHOOK_DELIVERY` can be enabled\n * for `WEBHOOK_APPLICATION` without leaking app enablement to every org.\n */\n\nimport { z } from 'zod';\nimport { CoreFeature } from '../organizations/organization-features.shared.schemas';\nimport { ScopeFeaturesWithOverridesSchema } from './scope-features.shared.schemas';\n\nimport { CoreResourceOperation } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationRiskLevel, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationVariantType } from '../resources/resources.shared.schemas';\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas';\n\nexport enum ApplicationFeatures_Operations {\n ENABLE_FEATURE = 'enable_feature',\n DISABLE_FEATURE = 'disable_feature',\n RESET_FEATURES = 'reset_features',\n}\n\nexport const ApplicationFeaturesEnableFeatureRequestDtoSchema = z.object({\n featureId: z.enum(CoreFeature),\n reason: z.string().max(500).optional(),\n});\n\nexport const ApplicationFeaturesDisableFeatureRequestDtoSchema = z.object({\n featureId: z.enum(CoreFeature),\n reason: z.string().min(1).max(500),\n});\n\nexport const ApplicationFeaturesResetFeaturesRequestDtoSchema = z.object({\n reason: z.string().min(1).max(500),\n});\n\ntype ApplicationFeaturesCoreOperations =\n \| CoreResourceOperation.CREATE\n \| CoreResourceOperation.READ\n \| CoreResourceOperation.SEARCH\n \| CoreResourceOperation.UPDATE\n \| CoreResourceOperation.DELETE;\n\nexport const applicationFeaturesResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n typeof ApplicationFeatures_Operations,\n ApplicationFeaturesCoreOperations,\n typeof ScopeFeaturesWithOverridesSchema\n>({\n mainSchema: ScopeFeaturesWithOverridesSchema,\n resourceIdentifier: CoreResourceType.APPLICATION_FEATURES,\n resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION_FEATURES],\n resourceRelationships: resourcesRelationships,\n isSystemResource: true,\n\n coreOperations: [\n CoreResourceOperation.CREATE,\n CoreResourceOperation.READ,\n CoreResourceOperation.SEARCH,\n CoreResourceOperation.UPDATE,\n // DELETE is REPOSITORY_ONLY (no HTTP route): powers the composition onParentDelete\n // cascade so the row is physically removed when its application is deleted. Without\n // it the cascade throws ErrorType.CONFIGURATION on any app that has a features row.\n CoreResourceOperation.DELETE,\n ],\n\n customOperation: ApplicationFeatures_Operations,\n\n // assurance-control: WILDO.ENTITLEMENT.NO_SELF_GRANT — the application-wide entitlement set is\n // operator-gated on every operation, read included.\n //\n // This is the widest of the three feature ledgers: a write here changes what EVERY tenant is\n // entitled to, so it is the one ledger where even READ and SEARCH are `APP_ADMIN_SUPER_ADMIN`\n // rather than a tenant role. That asymmetry against the organization and user ledgers is the\n // deliberate part — those two let a tenant see its own entitlements; this one is not a tenant's to\n // see at all.\n //\n // As on the sibling ledgers the role is the entire control, because the super-admin path must write\n // these fields and so they cannot be field-protected. Pinned by\n // `security-sensitive-operation-reachability.backend.test.ts`.\n operationsConfiguration: {\n [CoreResourceOperation.CREATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.MEDIUM,\n },\n ],\n },\n\n [CoreResourceOperation.READ]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n\n [CoreResourceOperation.SEARCH]: {\n variants: [{\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n isSearchable: false,\n searchableFields: [],\n searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n filterFields: {},\n sortFields: [],\n maxPaginatedResultPerPageLimit: 50,\n }],\n },\n\n [CoreResourceOperation.UPDATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.HIGH,\n requestDto: ScopeFeaturesWithOverridesSchema.partial(),\n },\n ],\n },\n\n // Internal-only (REPOSITORY_ONLY): powers the composition onParentDelete cascade,\n // not a public API surface — the ledger is reset, never DELETEd, over HTTP.\n [CoreResourceOperation.DELETE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.HIGH,\n },\n ],\n },\n\n [ApplicationFeatures_Operations.ENABLE_FEATURE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.MEDIUM,\n resourceOperationLike: CoreResourceOperation.UPDATE_MANY,\n requestDto: ApplicationFeaturesEnableFeatureRequestDtoSchema,\n },\n ],\n },\n\n [ApplicationFeatures_Operations.DISABLE_FEATURE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.HIGH,\n resourceOperationLike: CoreResourceOperation.UPDATE_MANY,\n requestDto: ApplicationFeaturesDisableFeatureRequestDtoSchema,\n },\n ],\n },\n\n [ApplicationFeatures_Operations.RESET_FEATURES]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.CRITICAL,\n resourceOperationLike: CoreResourceOperation.UPDATE_MANY,\n requestDto: ApplicationFeaturesResetFeaturesRequestDtoSchema,\n },\n ],\n },\n },\n});\n"]}
1	+ {"version":3,"file":"application-features.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/features/application-features.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,uDAAuD,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,gCAAgC,EAAE,MAAM,iCAAiC,CAAC;AAE9G,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAAwB,MAAM,uCAAuC,CAAC;AACzI,OAAO,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AACtH,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAEjF,MAAM,CAAN,IAAY,8BAIX;AAJD,WAAY,8BAA8B;IACxC,mEAAiC,CAAA;IACjC,qEAAmC,CAAA;IACnC,mEAAiC,CAAA;AACnC,CAAC,EAJW,8BAA8B,KAA9B,8BAA8B,QAIzC;AAED,MAAM,CAAC,MAAM,gDAAgD,GAAG,CAAC,CAAC,MAAM,CAAC;IACvE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,iJAAiJ,CAAC;IAC1L,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oFAAoF,CAAC;CACtI,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iDAAiD,GAAG,CAAC,CAAC,MAAM,CAAC;IACxE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,6IAA6I,CAAC;IACtL,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,qFAAqF,CAAC;CACnI,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gDAAgD,GAAG,CAAC,CAAC,MAAM,CAAC;IACvE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,0FAA0F,CAAC;CACxI,CAAC,CAAC;AASH,MAAM,CAAC,MAAM,8DAA8D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI1K;IACA,UAAU,EAAE,yBAAyB;IACrC,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;IAClG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB;;;;;;;;;;;;;;;;;;OAkBG;IACH,kBAAkB,EAAE;QAClB,IAAI,EAAE,wBAAwB,CAAC,OAAO;QACtC,MAAM,EAAE,wBAAwB,CAAC,OAAO;KACzC;IAED,cAAc,EAAE;QACd,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,mFAAmF;QACnF,oFAAoF;QACpF,oFAAoF;QACpF,qBAAqB,CAAC,MAAM;KAC7B;IAED,eAAe,EAAE,8BAA8B;IAE/C,+FAA+F;IAC/F,oDAAoD;IACpD,EAAE;IACF,6FAA6F;IAC7F,8FAA8F;IAC9F,6FAA6F;IAC7F,mGAAmG;IACnG,cAAc;IACd,EAAE;IACF,oGAAoG;IACpG,gEAAgE;IAChE,+DAA+D;IAC/D,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,KAAK;oBACnB,gBAAgB,EAAE,EAAE;oBACpB,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,EAAE;oBAChB,UAAU,EAAE,EAAE;oBACd,8BAA8B,EAAE,EAAE;iBACnC,CAAC;SACH;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;oBAC1C,UAAU,EAAE,gCAAgC,CAAC,OAAO,EAAE;iBACvD;aACF;SACF;QAED,kFAAkF;QAClF,4EAA4E;QAC5E,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;SACF;QAED,CAAC,8BAA8B,CAAC,cAAc,CAAC,EAAE;YAC/C,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,qBAAqB,EAAE,qBAAqB,CAAC,WAAW;oBACxD,UAAU,EAAE,gDAAgD;oBAC5D,yFAAyF;oBACzF,yFAAyF;oBACzF,iFAAiF;oBACjF,iBAAiB,EAAE,gCAAgC;iBACpD;aACF;SACF;QAED,CAAC,8BAA8B,CAAC,eAAe,CAAC,EAAE;YAChD,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;oBAC1C,qBAAqB,EAAE,qBAAqB,CAAC,WAAW;oBACxD,UAAU,EAAE,iDAAiD;oBAC7D,gEAAgE;oBAChE,iBAAiB,EAAE,gCAAgC;iBACpD;aACF;SACF;QAED,CAAC,8BAA8B,CAAC,cAAc,CAAC,EAAE;YAC/C,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,QAAQ;oBAC9C,wIAAwI;oBACxI,wEAAwE;oBACxE,aAAa,EAAE,8BAA8B,CAAC,YAAY;oBAC1D,qBAAqB,EAAE,qBAAqB,CAAC,WAAW;oBACxD,UAAU,EAAE,gDAAgD;oBAC5D,gEAAgE;oBAChE,iBAAiB,EAAE,gCAAgC;iBACpD;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/*\n Application Features Shared Resource Configuration\n \n Application-scope entitlement ledger. This mirrors organization/user feature\n * ledgers so exact-scope gates such as `M2M_WEBHOOK_DELIVERY` can be enabled\n * for `WEBHOOK_APPLICATION` without leaking app enablement to every org.\n /\n\nimport { z } from 'zod';\nimport { CoreFeature } from '../organizations/organization-features.shared.schemas';\nimport { ApplicationFeaturesSchema, ScopeFeaturesWithOverridesSchema } from './scope-features.shared.schemas';\n\nimport { CoreResourceOperation } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationRiskLevel, ResourceOperationReversibility, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationVariantType } from '../resources/resources.shared.schemas';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas';\n\nexport enum ApplicationFeatures_Operations {\n ENABLE_FEATURE = 'enable_feature',\n DISABLE_FEATURE = 'disable_feature',\n RESET_FEATURES = 'reset_features',\n}\n\nexport const ApplicationFeaturesEnableFeatureRequestDtoSchema = z.object({\n featureId: z.enum(CoreFeature).describe('The feature to switch on. It is added to this scope\\'s manual overrides and taken off its removed list, so it stays on through billing changes.'),\n reason: z.string().max(500).optional().describe('Why the feature is being switched on. Recorded on the audit trail with the change.'),\n});\n\nexport const ApplicationFeaturesDisableFeatureRequestDtoSchema = z.object({\n featureId: z.enum(CoreFeature).describe('The feature to switch off. It is added to this scope\\'s removed list and taken off its added list, so it stays off through billing changes.'),\n reason: z.string().min(1).max(500).describe('Why the feature is being switched off. Recorded on the audit trail with the change.'),\n});\n\nexport const ApplicationFeaturesResetFeaturesRequestDtoSchema = z.object({\n reason: z.string().min(1).max(500).describe('Why every manual override is being cleared. Recorded on the audit trail with the change.'),\n});\n\ntype ApplicationFeaturesCoreOperations =\n \| CoreResourceOperation.CREATE\n \| CoreResourceOperation.READ\n \| CoreResourceOperation.SEARCH\n \| CoreResourceOperation.UPDATE\n \| CoreResourceOperation.DELETE;\n\nexport const applicationFeaturesResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n typeof ApplicationFeatures_Operations,\n ApplicationFeaturesCoreOperations,\n typeof ApplicationFeaturesSchema\n>({\n mainSchema: ApplicationFeaturesSchema,\n resourceIdentifier: CoreResourceType.APPLICATION_FEATURES,\n resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION_FEATURES],\n resourceRelationships: resourcesRelationships,\n isSystemResource: true,\n /\n * The framework may materialise this scope's row on a caller's behalf.\n \n `systemAccessPolicy.create: ALLOWED` is what #1179's seam reads before materialising a\n * context-addressed singleton the caller never named: an administrator can START configuring a\n * scope that has no row yet, instead of being 404ed for the framework's own omission. Its three\n * enterprise-config siblings (SSO / SCIM / SIEM) already declared it; this resource did not, so\n * the same first write was refused here and nowhere else.\n \n The row written is the scope foreign key and nothing else — this resource's own schema fills\n * the rest — so the seeding system keeps ownership of what a default MEANS and the seam decides\n * only WHEN the row comes into existence.\n \n NOTE, because it was measured on 2026-09-19 and is easy to assume otherwise: this does NOT make\n * a READ materialise. That seam is reached for UPDATE and DELETE only, and extending it to READ\n * was tried and reverted — a probe of the running backend showed the read route never enters it.\n * A scope whose row is still absent therefore still 404s on read; making that row EXIST is a\n * seeding question, not an access-policy one.\n */\n systemAccessPolicy: {\n read: ResourceSystemAccessMode.ALLOWED,\n create: ResourceSystemAccessMode.ALLOWED,\n },\n\n coreOperations: [\n CoreResourceOperation.CREATE,\n CoreResourceOperation.READ,\n CoreResourceOperation.SEARCH,\n CoreResourceOperation.UPDATE,\n // DELETE is REPOSITORY_ONLY (no HTTP route): powers the composition onParentDelete\n // cascade so the row is physically removed when its application is deleted. Without\n // it the cascade throws ErrorType.CONFIGURATION on any app that has a features row.\n CoreResourceOperation.DELETE,\n ],\n\n customOperation: ApplicationFeatures_Operations,\n\n // assurance-control: WILDO.ENTITLEMENT.NO_SELF_GRANT — the application-wide entitlement set is\n // operator-gated on every operation, read included.\n //\n // This is the widest of the three feature ledgers: a write here changes what EVERY tenant is\n // entitled to, so it is the one ledger where even READ and SEARCH are `APP_ADMIN_SUPER_ADMIN`\n // rather than a tenant role. That asymmetry against the organization and user ledgers is the\n // deliberate part — those two let a tenant see its own entitlements; this one is not a tenant's to\n // see at all.\n //\n // As on the sibling ledgers the role is the entire control, because the super-admin path must write\n // these fields and so they cannot be field-protected. Pinned by\n // `security-sensitive-operation-reachability.backend.test.ts`.\n operationsConfiguration: {\n [CoreResourceOperation.CREATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.MEDIUM,\n },\n ],\n },\n\n [CoreResourceOperation.READ]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n },\n ],\n },\n\n [CoreResourceOperation.SEARCH]: {\n variants: [{\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.LOW,\n isSearchable: false,\n searchableFields: [],\n searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n filterFields: {},\n sortFields: [],\n maxPaginatedResultPerPageLimit: 50,\n }],\n },\n\n [CoreResourceOperation.UPDATE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.HIGH,\n requestDto: ScopeFeaturesWithOverridesSchema.partial(),\n },\n ],\n },\n\n // Internal-only (REPOSITORY_ONLY): powers the composition onParentDelete cascade,\n // not a public API surface — the ledger is reset, never DELETEd, over HTTP.\n [CoreResourceOperation.DELETE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.HIGH,\n },\n ],\n },\n\n [ApplicationFeatures_Operations.ENABLE_FEATURE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.MEDIUM,\n resourceOperationLike: CoreResourceOperation.UPDATE_MANY,\n requestDto: ApplicationFeaturesEnableFeatureRequestDtoSchema,\n // The handler persists and returns the application's features row, like the organization\n // twin, so the response is that row rather than the UPDATE_MANY envelope the route shape\n // would imply (which the row does not satisfy, and the API reference published).\n customResponseDto: ScopeFeaturesWithOverridesSchema,\n },\n ],\n },\n\n [ApplicationFeatures_Operations.DISABLE_FEATURE]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.HIGH,\n resourceOperationLike: CoreResourceOperation.UPDATE_MANY,\n requestDto: ApplicationFeaturesDisableFeatureRequestDtoSchema,\n // Same as ENABLE_FEATURE: the handler returns the features row.\n customResponseDto: ScopeFeaturesWithOverridesSchema,\n },\n ],\n },\n\n [ApplicationFeatures_Operations.RESET_FEATURES]: {\n variants: [\n {\n variantType: ResourceOperationVariantType.API_CALL,\n isDefault: true,\n roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n riskLevel: ResourceOperationRiskLevel.CRITICAL,\n // IRREVERSIBLE: Clears every override on the application. There is no backup of the list, and organizations relying on one lose access.\n // This is what admits it to the danger zone; risk alone no longer does.\n reversibility: ResourceOperationReversibility.IRREVERSIBLE,\n resourceOperationLike: CoreResourceOperation.UPDATE_MANY,\n requestDto: ApplicationFeaturesResetFeaturesRequestDtoSchema,\n // Same as ENABLE_FEATURE: the handler returns the features row.\n customResponseDto: ScopeFeaturesWithOverridesSchema,\n },\n ],\n },\n },\n});\n"]}

package/dist/esm/features/connected-feature.example.d.ts ADDED Viewed

@@ -0,0 +1,64 @@
+/**
+ * Tier B usage example for the `engine-product-definitions` skill: ONE feature identifier followed
+ * from its declaration to the contract that sells it and the contract that enforces it.
+ *
+ * WHY TIER B (and not Tier A against the dogfood application):
+ *
+ *  1. What this teaches is the JOIN between four declarations that live in four different files —
+ *     a definition, a module contribution, a product grant and an operation requirement. In a real
+ *     application those are correctly far apart, so a Tier-A anchor would either span unrelated
+ *     code or need four separate spans the reader has to reassemble mentally. The shape is stable;
+ *     the product identity around it is not, which is exactly what Tier B is for.
+ *  2. Declaring a sellable feature in the dogfood application would change what that application
+ *     offers, which is a product decision rather than a documentation one.
+ *
+ * Imports are RELATIVE because this file lives inside `@wildo-ai/saas-models` itself and a package
+ * may not import its own name — that resolves against its own `dist/` and is a known compile-storm
+ * source. An application developer types the public specifier instead, which the anchored prose
+ * below states explicitly, because the compiled skill is read by someone with no access to this
+ * repository.
+ *
+ * This file is anchored but never imported by runtime code and never exported from the package
+ * barrel. It is typechecked by the package's ordinary program (`include: ["src"]`), so a change to
+ * any contract it names breaks the build here rather than silently rotting inside a shipped skill.
+ * When an authoring surface below changes, edit this file directly and the compiled skill picks the
+ * new shape up on the next `wildo fwk generate-docs`.
+ */
+import { type FeatureDefinitionWithAutoRegister } from './feature-builders.shared';
+import type { RequiredFeaturesConfig } from '../resources/resources-config.shared.schemas';
+/** @wildo_source:part:start example.features.connected-feature.declaration facet:kind:usage-example facet:audience:app-developer */
+/**
+ * The identifier is a NAMED ENUM MEMBER rather than a bare string, so the one place that explains
+ * what the feature means travels with every use of it.
+ */
+export declare enum ApplicationFeature {
+    /** Access the application's advanced reporting operation and interface. */
+    ADVANCED_REPORTS = "ADVANCED_REPORTS"
+}
+export declare const CUSTOM_FEATURE_DEFINITIONS: FeatureDefinitionWithAutoRegister[];
+export declare const reportingContribution: {
+    customFeatureDefinitions: FeatureDefinitionWithAutoRegister[];
+    customFeatureConfiguration: {
+        profiles: {
+            preview: {
+                features: ApplicationFeature[];
+                limits: {};
+            };
+        };
+        defaultProfile: string;
+    };
+};
+export declare const reportingProductGrant: {
+    grantedFeatures: ApplicationFeature[];
+};
+export declare const reportingRequirement: RequiredFeaturesConfig;
+export declare const reportingOperationGate: {
+    requiredFeatures: import("..").RequiredFeaturesFullConfig;
+};
+export declare enum BudgetFeature {
+    /** Upper bound measured by a token-consumption service, not a repository row count. */
+    MONTHLY_TOKEN_CAP = "MONTHLY_TOKEN_CAP"
+}
+export declare const tokenCapDefinition: FeatureDefinitionWithAutoRegister;
+/** @wildo_source:part:end example.features.connected-feature.declaration */
+//# sourceMappingURL=connected-feature.example.d.ts.map

package/dist/esm/features/connected-feature.example.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"connected-feature.example.d.ts","sourceRoot":"","sources":["../../../../src/features/connected-feature.example.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAqC,KAAK,iCAAiC,EAAE,MAAM,2BAA2B,CAAC;AAItH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AAI3F,oIAAoI;AAYpI;;;GAGG;AACH,oBAAY,kBAAkB;IAC5B,2EAA2E;IAC3E,gBAAgB,qBAAqB;CACtC;AAED,eAAO,MAAM,0BAA0B,EAAE,iCAAiC,EAMzE,CAAC;AAGF,eAAO,MAAM,qBAAqB;;;;;;;;;;;CAM2D,CAAC;AAG9F,eAAO,MAAM,qBAAqB;;CAEoB,CAAC;AAGvD,eAAO,MAAM,oBAAoB,EAAE,sBAElC,CAAC;AACF,eAAO,MAAM,sBAAsB;;CAA6C,CAAC;AAEjF,oBAAY,aAAa;IACvB,uFAAuF;IACvF,iBAAiB,sBAAsB;CACxC;AAGD,eAAO,MAAM,kBAAkB,mCAI7B,CAAC;AACH,4EAA4E"}

package/dist/esm/features/connected-feature.example.js ADDED Viewed

@@ -0,0 +1,87 @@
+/**
+ * Tier B usage example for the `engine-product-definitions` skill: ONE feature identifier followed
+ * from its declaration to the contract that sells it and the contract that enforces it.
+ *
+ * WHY TIER B (and not Tier A against the dogfood application):
+ *
+ *  1. What this teaches is the JOIN between four declarations that live in four different files —
+ *     a definition, a module contribution, a product grant and an operation requirement. In a real
+ *     application those are correctly far apart, so a Tier-A anchor would either span unrelated
+ *     code or need four separate spans the reader has to reassemble mentally. The shape is stable;
+ *     the product identity around it is not, which is exactly what Tier B is for.
+ *  2. Declaring a sellable feature in the dogfood application would change what that application
+ *     offers, which is a product decision rather than a documentation one.
+ *
+ * Imports are RELATIVE because this file lives inside `@wildo-ai/saas-models` itself and a package
+ * may not import its own name — that resolves against its own `dist/` and is a known compile-storm
+ * source. An application developer types the public specifier instead, which the anchored prose
+ * below states explicitly, because the compiled skill is read by someone with no access to this
+ * repository.
+ *
+ * This file is anchored but never imported by runtime code and never exported from the package
+ * barrel. It is typechecked by the package's ordinary program (`include: ["src"]`), so a change to
+ * any contract it names breaks the build here rather than silently rotting inside a shipped skill.
+ * When an authoring surface below changes, edit this file directly and the compiled skill picks the
+ * new shape up on the next `wildo fwk generate-docs`.
+ */
+import { defineFeature, defineLimitFeature } from './feature-builders.shared.js';
+import { FeatureLimitSemantic, FeatureUnavailabilityBehavior } from './feature-definition.shared.schemas.js';
+import { FEATURES_UNLIMITED } from './scope-features.shared.schemas.js';
+import { ResourcePrimaryScope } from '../resources/resources.shared.schemas.js';
+/** @wildo_source:part:start example.features.connected-feature.declaration facet:kind:usage-example facet:audience:app-developer */
+// One feature identifier, followed from declaration to enforcement.
+//
+// In an application every symbol below comes from the package root:
+//
+//   import {
+//     defineFeature, defineLimitFeature, FEATURES_UNLIMITED, FeatureLimitSemantic,
+//     FeatureUnavailabilityBehavior, ResourcePrimaryScope,
+//     type FeatureDefinitionWithAutoRegister, type ProductDefinition,
+//     type RequiredFeaturesConfig, type SharedSaaSModule,
+//   } from '@wildo-ai/saas-models';
+/**
+ * The identifier is a NAMED ENUM MEMBER rather than a bare string, so the one place that explains
+ * what the feature means travels with every use of it.
+ */
+export var ApplicationFeature;
+(function (ApplicationFeature) {
+    /** Access the application's advanced reporting operation and interface. */
+    ApplicationFeature["ADVANCED_REPORTS"] = "ADVANCED_REPORTS";
+})(ApplicationFeature || (ApplicationFeature = {}));
+export const CUSTOM_FEATURE_DEFINITIONS = [
+    defineFeature(ApplicationFeature.ADVANCED_REPORTS, {
+        scope: ResourcePrimaryScope.ORGANIZATIONS,
+        defaultEnabled: false,
+        unavailability: { behavior: FeatureUnavailabilityBehavior.UPGRADE_PROMPT },
+    }),
+];
+// Merge these hooks into the EXISTING engine contribution; do not register a second engine module.
+export const reportingContribution = {
+    customFeatureDefinitions: CUSTOM_FEATURE_DEFINITIONS,
+    customFeatureConfiguration: {
+        profiles: { preview: { features: [ApplicationFeature.ADVANCED_REPORTS], limits: {} } },
+        defaultProfile: 'preview',
+    },
+};
+// When billing is enabled, apply this fragment to the intended existing plan or add-on.
+export const reportingProductGrant = {
+    grantedFeatures: [ApplicationFeature.ADVANCED_REPORTS],
+};
+// Use this as requiredFeatures on EVERY externally reachable reporting operation variant.
+export const reportingRequirement = {
+    features: [ApplicationFeature.ADVANCED_REPORTS],
+};
+export const reportingOperationGate = { requiredFeatures: reportingRequirement };
+export var BudgetFeature;
+(function (BudgetFeature) {
+    /** Upper bound measured by a token-consumption service, not a repository row count. */
+    BudgetFeature["MONTHLY_TOKEN_CAP"] = "MONTHLY_TOKEN_CAP";
+})(BudgetFeature || (BudgetFeature = {}));
+// Contribute this definition alongside your other definitions only when a consumer enforces it.
+export const tokenCapDefinition = defineLimitFeature(BudgetFeature.MONTHLY_TOKEN_CAP, {
+    scope: ResourcePrimaryScope.ORGANIZATIONS,
+    default: FEATURES_UNLIMITED,
+    limitSemantic: FeatureLimitSemantic.CEILING,
+});
+/** @wildo_source:part:end example.features.connected-feature.declaration */
+//# sourceMappingURL=connected-feature.example.js.map