@wildo-ai/saas-models 1.1.5 → 1.1.7

package/dist/esm/external-providers/provider-usage-pricing.shared.schemas.js

@@ -1,15 +1,28 @@
 import { z } from 'zod';
 const nonnegativeSafeIntegerSchema = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER).refine((value) => !Object.is(value, -0), 'negative zero is not canonical');
 const positiveSafeIntegerSchema = nonnegativeSafeIntegerSchema.refine((value) => value > 0, 'value must be positive');
-const sha256DigestSchema = z.string().regex(/^sha256:[a-f0-9]{64}$/);
 const isoDateTimeSchema = z.iso.datetime({ offset: true });
-/** Billable provider-usage dimensions. These are acquisition-cost categories, not customer billing units. */
+/**
+ * @wildo_source:part:start saas.models.provider-usage-pricing-authority facet:layer:shared facet:family:config facet:audience:app-developer
+ *
+ * Billable provider-usage dimensions. These are ACQUISITION-cost categories (what the application pays a
+ * model provider), not customer billing units.
+ */
 export var ProviderUsagePricingCategory;
 (function (ProviderUsagePricingCategory) {
+    /** Input tokens read without a prompt cache (or every input token, when the provider reported no split). */
     ProviderUsagePricingCategory["INPUT_TOKEN"] = "INPUT_TOKEN";
+    /** Input tokens served from a prompt cache. Priced at `INPUT_TOKEN` when the authority declares no rate. */
     ProviderUsagePricingCategory["CACHED_INPUT_TOKEN"] = "CACHED_INPUT_TOKEN";
+    /** Input tokens written into a prompt cache. Priced at `INPUT_TOKEN` when the authority declares no rate. */
     ProviderUsagePricingCategory["CACHE_WRITE_INPUT_TOKEN"] = "CACHE_WRITE_INPUT_TOKEN";
+    /** Output tokens. Includes reasoning unless the authority declares a `REASONING_TOKEN` rate. */
     ProviderUsagePricingCategory["OUTPUT_TOKEN"] = "OUTPUT_TOKEN";
+    /**
+     * Reasoning tokens, when the authority prices them apart. They are then SUBTRACTED from the output
+     * quantity: every provider already counts reasoning inside its output total, so reasoning is never
+     * billed twice.
+     */
     ProviderUsagePricingCategory["REASONING_TOKEN"] = "REASONING_TOKEN";
 })(ProviderUsagePricingCategory || (ProviderUsagePricingCategory = {}));
 export const PROVIDER_USAGE_PRICING_CATEGORY_ORDER = Object.freeze([
@@ -19,7 +32,11 @@ export const PROVIDER_USAGE_PRICING_CATEGORY_ORDER = Object.freeze([
     ProviderUsagePricingCategory.OUTPUT_TOKEN,
     ProviderUsagePricingCategory.REASONING_TOKEN,
 ]);
-/** V1 rounds once after aggregating every supported category into the authority's common denominator. */
+/**
+ * How a TOTAL is rounded to a whole minor currency unit. There is one mode: exact per-call costs are summed
+ * first and the sum is rounded up once, per reported total (#1598 review F11). Rounding each call up would
+ * overstate an embedding-heavy case by up to one minor unit per call.
+ */
 export var ProviderUsagePricingRoundingMode;
 (function (ProviderUsagePricingRoundingMode) {
     ProviderUsagePricingRoundingMode["CEILING_AGGREGATE_TO_MINOR_UNIT"] = "CEILING_AGGREGATE_TO_MINOR_UNIT";
@@ -27,13 +44,17 @@ export var ProviderUsagePricingRoundingMode;
 /** Closed trigger vocabulary for provider pricing tiers. */
 export var ProviderUsagePricingTierRuleKind;
 (function (ProviderUsagePricingTierRuleKind) {
+    /** The whole request is priced at the tier when its INPUT quantity (all prompt tokens) exceeds the threshold. */
     ProviderUsagePricingTierRuleKind["INPUT_TOKEN_QUANTITY_ABOVE"] = "INPUT_TOKEN_QUANTITY_ABOVE";
 })(ProviderUsagePricingTierRuleKind || (ProviderUsagePricingTierRuleKind = {}));
-const RATE_MULTIPLIER_BASIS_POINTS = 10_000;
+/** A rate multiplier is written in basis points: 10 000 = ×1. */
+export const PROVIDER_USAGE_RATE_MULTIPLIER_BASIS_POINTS = 10_000;
 export const ProviderUsagePricingTierRuleSchema = z.strictObject({
     kind: z.literal(ProviderUsagePricingTierRuleKind.INPUT_TOKEN_QUANTITY_ABOVE),
     inputTokenThresholdExclusive: nonnegativeSafeIntegerSchema,
+    /** Multiplier on the three input categories, in basis points (≥ 10 000: a tier never discounts). */
     inputRateMultiplierBasisPoints: positiveSafeIntegerSchema,
+    /** Multiplier on output and reasoning, in basis points (≥ 10 000). */
     outputRateMultiplierBasisPoints: positiveSafeIntegerSchema,
 });
 export const ProviderUsagePricingRateSchema = z.strictObject({
@@ -42,30 +63,45 @@ export const ProviderUsagePricingRateSchema = z.strictObject({
     amountMinorNumerator: nonnegativeSafeIntegerSchema,
 });
 /**
- * Canonical registered provider/model acquisition-cost authority.
+ * One provider/model acquisition-cost price, REGISTERED BY THE APPLICATION in
+ * `modelCostAccounting.providerUsagePricingAuthorities` (#1598), because rates are negotiated: a list price
+ * shipped by the engine would be wrong for every firm with a contract, and would go stale.
+ *
+ * A price is identified by `pricingAuthorityRef@pricingAuthorityVersion`; the registry refuses a duplicate
+ * pair at startup. A call is priced by the authority whose `providerRef` and `model` equal the call's
+ * recorded provider and model, choosing the highest version whose `effectiveFrom` is not after the call.
+ * No match leaves the call `UNPRICED`, never priced at zero.
  *
- * This is deliberately separate from billing `PriceSchema`, which represents what an application
- * charges its customers. Runtime budget consumers retain this record's identity/digest and never
- * copy its rates into a workflow-local table.
+ * Deliberately separate from billing's `PriceSchema`, which is what the application CHARGES its customers.
+ *
+ * History: an earlier revision carried `implementationDigest` and `pricingDigest` and a "sealed basis" type
+ * saying an application could "neither choose rates" nor mint the digest. Both were remnants of the retired
+ * digest era (one-source-of-truth Rule 0) and contradicted the decision that the application registers its
+ * rates. `modelRef` / `modelVersion` were replaced by `model`, the one id a call actually records.
  */
-export const ProviderUsagePricingAuthorityV1Schema = z.strictObject({
+export const ProviderUsagePricingAuthoritySchema = z.strictObject({
     schemaVersion: z.literal(1),
-    pricingAuthorityRef: z.string().min(1),
+    /** Stable name of this price list entry, for example `pricing:openai/gpt-5.6-terra`. */
+    pricingAuthorityRef: z.string().min(1).max(200),
+    /** Version of that entry. A rate change is a new version with a later `effectiveFrom`, never an edit. */
     pricingAuthorityVersion: positiveSafeIntegerSchema,
+    /** The provider the call went to, exactly as the call records it (`openai`, `anthropic`, ...). */
     providerRef: z.string().min(1),
-    modelRef: z.string().min(1),
-    modelVersion: z.string().min(1),
+    /** The resolved model id, exactly as the call records it (`gpt-5.6-terra`, `claude-opus-4-8`, ...). */
+    model: z.string().min(1),
+    /** ISO 4217 code. Currencies are never converted: every total is per currency. */
     currency: z.string().regex(/^[A-Z]{3}$/),
+    /** The number of billable units each rate's `amountMinorNumerator` is charged per (1 000 000 for "per million tokens"). */
     unitsDenominator: positiveSafeIntegerSchema,
     roundingMode: z.literal(ProviderUsagePricingRoundingMode.CEILING_AGGREGATE_TO_MINOR_UNIT),
     rates: z.array(ProviderUsagePricingRateSchema).min(1),
     /** Ordered full-request price tiers; the highest matching input threshold wins. */
     usageTierRules: z.array(ProviderUsagePricingTierRuleSchema),
+    /** From when this version applies to a call (inclusive). */
     effectiveFrom: isoDateTimeSchema,
+    /** Where the rates come from: a public price page, a contract reference. Provenance only. */
     sourceRef: z.string().min(1),
     sourceVersion: z.string().min(1),
-    implementationDigest: sha256DigestSchema,
-    pricingDigest: sha256DigestSchema,
 }).superRefine((authority, context) => {
     const categories = authority.rates.map((rate) => rate.category);
     if (new Set(categories).size !== categories.length) {
@@ -83,55 +119,30 @@ export const ProviderUsagePricingAuthorityV1Schema = z.strictObject({
         context.addIssue({ code: 'custom', message: 'usage pricing tiers must use unique ascending thresholds', path: ['usageTierRules'] });
     }
     for (const [index, rule] of authority.usageTierRules.entries()) {
-        if (rule.inputRateMultiplierBasisPoints < RATE_MULTIPLIER_BASIS_POINTS || rule.outputRateMultiplierBasisPoints < RATE_MULTIPLIER_BASIS_POINTS) {
+        if (rule.inputRateMultiplierBasisPoints < PROVIDER_USAGE_RATE_MULTIPLIER_BASIS_POINTS || rule.outputRateMultiplierBasisPoints < PROVIDER_USAGE_RATE_MULTIPLIER_BASIS_POINTS) {
             context.addIssue({ code: 'custom', message: 'usage pricing tier multipliers cannot discount the registered base rate', path: ['usageTierRules', index] });
         }
     }
 });
-/**
- * Canonical acquisition-cost basis for the selected app-creation model.
- *
- * The source is the provider's public model page observed on 2026-08-13. This
- * is not customer billing data and is never copied into a Work Cycle or Driver
- * request; those consumers retain only the sealed registry identity.
- */
-export const OPENAI_GPT_5_6_TERRA_PROVIDER_USAGE_PRICING_BASIS_V1 = Object.freeze({
-    schemaVersion: 1,
-    pricingAuthorityRef: 'pricing:openai/gpt-5.6-terra',
-    pricingAuthorityVersion: 1,
-    providerRef: 'openai',
-    modelRef: 'llm-model:gpt-5.6-terra',
-    modelVersion: 'gpt-5.6-terra',
-    currency: 'USD',
-    unitsDenominator: 1_000_000,
-    roundingMode: ProviderUsagePricingRoundingMode.CEILING_AGGREGATE_TO_MINOR_UNIT,
-    rates: Object.freeze([
-        Object.freeze({ category: ProviderUsagePricingCategory.INPUT_TOKEN, amountMinorNumerator: 200 }),
-        Object.freeze({ category: ProviderUsagePricingCategory.CACHED_INPUT_TOKEN, amountMinorNumerator: 20 }),
-        Object.freeze({ category: ProviderUsagePricingCategory.CACHE_WRITE_INPUT_TOKEN, amountMinorNumerator: 250 }),
-        Object.freeze({ category: ProviderUsagePricingCategory.OUTPUT_TOKEN, amountMinorNumerator: 1_200 }),
-    ]),
-    usageTierRules: Object.freeze([
-        Object.freeze({
-            kind: ProviderUsagePricingTierRuleKind.INPUT_TOKEN_QUANTITY_ABOVE,
-            inputTokenThresholdExclusive: 272_000,
-            inputRateMultiplierBasisPoints: 20_000,
-            outputRateMultiplierBasisPoints: 15_000,
-        }),
-    ]),
-    effectiveFrom: '2026-08-13T00:00:00.000Z',
-    sourceRef: 'https://developers.openai.com/api/docs/models/gpt-5.6-terra',
-    sourceVersion: 'observed:2026-08-13',
-});
+/** @wildo_source:part:end saas.models.provider-usage-pricing-authority */
+/** One priced quantity of one category, as the calculator derived it from a call's usage. */
 export const ProviderUsageAmountSchema = z.strictObject({
     category: z.enum(ProviderUsagePricingCategory),
     quantity: nonnegativeSafeIntegerSchema,
 });
+/**
+ * The EXACT cost of one call under one authority, unrounded (#1598 F11):
+ * `callCostMinorNumerator / callCostUnitsDenominator` minor currency units.
+ *
+ * The numerator is a decimal INTEGER STRING because it is an exact rational part and must survive both
+ * adapters without floating-point loss; the denominator is small enough to stay a number.
+ */
 export const ProviderUsageCostResultSchema = z.strictObject({
     pricingAuthorityRef: z.string().min(1),
     pricingAuthorityVersion: positiveSafeIntegerSchema,
-    pricingDigest: sha256DigestSchema,
     currency: z.string().regex(/^[A-Z]{3}$/),
-    amountMinor: nonnegativeSafeIntegerSchema,
+    callCostMinorNumerator: z.string().regex(/^\d+$/),
+    callCostUnitsDenominator: positiveSafeIntegerSchema,
+    amounts: z.array(ProviderUsageAmountSchema),
 });
 //# sourceMappingURL=provider-usage-pricing.shared.schemas.js.map

package/dist/esm/external-providers/provider-usage-pricing.shared.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-usage-pricing.shared.schemas.js","sourceRoot":"","sources":["../../../../src/external-providers/provider-usage-pricing.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,gCAAgC,CAAC,CAAC;AAC5K,MAAM,yBAAyB,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,EAAE,wBAAwB,CAAC,CAAC;AACtH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;AACrE,MAAM,iBAAiB,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAE3D,6GAA6G;AAC7G,MAAM,CAAN,IAAY,4BAMX;AAND,WAAY,4BAA4B;IACtC,2DAA2B,CAAA;IAC3B,yEAAyC,CAAA;IACzC,mFAAmD,CAAA;IACnD,6DAA6B,CAAA;IAC7B,mEAAmC,CAAA;AACrC,CAAC,EANW,4BAA4B,KAA5B,4BAA4B,QAMvC;AAED,MAAM,CAAC,MAAM,qCAAqC,GAA4C,MAAM,CAAC,MAAM,CAAC;IAC1G,4BAA4B,CAAC,WAAW;IACxC,4BAA4B,CAAC,kBAAkB;IAC/C,4BAA4B,CAAC,uBAAuB;IACpD,4BAA4B,CAAC,YAAY;IACzC,4BAA4B,CAAC,eAAe;CAC7C,CAAC,CAAC;AAEH,yGAAyG;AACzG,MAAM,CAAN,IAAY,gCAEX;AAFD,WAAY,gCAAgC;IAC1C,uGAAmE,CAAA;AACrE,CAAC,EAFW,gCAAgC,KAAhC,gCAAgC,QAE3C;AAED,4DAA4D;AAC5D,MAAM,CAAN,IAAY,gCAEX;AAFD,WAAY,gCAAgC;IAC1C,6FAAyD,CAAA;AAC3D,CAAC,EAFW,gCAAgC,KAAhC,gCAAgC,QAE3C;AAED,MAAM,4BAA4B,GAAG,MAAM,CAAC;AAE5C,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC/D,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,0BAA0B,CAAC;IAC5E,4BAA4B,EAAE,4BAA4B;IAC1D,8BAA8B,EAAE,yBAAyB;IACzD,+BAA+B,EAAE,yBAAyB;CAC3D,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC3D,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC;IAC9C,0EAA0E;IAC1E,oBAAoB,EAAE,4BAA4B;CACnD,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,qCAAqC,GAAG,CAAC,CAAC,YAAY,CAAC;IAClE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,uBAAuB,EAAE,yBAAyB;IAClD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;IACxC,gBAAgB,EAAE,yBAAyB;IAC3C,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,+BAA+B,CAAC;IACzF,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,mFAAmF;IACnF,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,kCAAkC,CAAC;IAC3D,aAAa,EAAE,iBAAiB;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,oBAAoB,EAAE,kBAAkB;IACxC,aAAa,EAAE,kBAAkB;CAClC,CAAC,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;IACpC,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QACnD,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mCAAmC,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,qCAAqC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACzG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAE,CAAE,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC,EAAE,CAAC;QACrH,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,6CAA6C,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,CAAC,4BAA4B,CAAC,WAAW,EAAE,4BAA4B,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7G,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,QAAQ,sBAAsB,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxI,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,SAAS,CAAC,cAAc,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,4BAA4B,GAAG,IAAI,CAAC,4BAA4B,CAAC,EAAE,CAAC;QAC3K,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,0DAA0D,EAAE,IAAI,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACtI,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,SAAS,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/D,IAAI,IAAI,CAAC,8BAA8B,GAAG,4BAA4B,IAAI,IAAI,CAAC,+BAA+B,GAAG,4BAA4B,EAAE,CAAC;YAC9I,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,yEAAyE,EAAE,IAAI,EAAE,CAAC,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5J,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAiBH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,oDAAoD,GAAyC,MAAM,CAAC,MAAM,CAAC;IACtH,aAAa,EAAE,CAAC;IAChB,mBAAmB,EAAE,8BAA8B;IACnD,uBAAuB,EAAE,CAAC;IAC1B,WAAW,EAAE,QAAQ;IACrB,QAAQ,EAAE,yBAAyB;IACnC,YAAY,EAAE,eAAe;IAC7B,QAAQ,EAAE,KAAK;IACf,gBAAgB,EAAE,SAAS;IAC3B,YAAY,EAAE,gCAAgC,CAAC,+BAA+B;IAC9E,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,4BAA4B,CAAC,WAAW,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC;QAChG,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,4BAA4B,CAAC,kBAAkB,EAAE,oBAAoB,EAAE,EAAE,EAAE,CAAC;QACtG,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,4BAA4B,CAAC,uBAAuB,EAAE,oBAAoB,EAAE,GAAG,EAAE,CAAC;QAC5G,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,4BAA4B,CAAC,YAAY,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC;KACpG,CAAC;IACF,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC;YACZ,IAAI,EAAE,gCAAgC,CAAC,0BAA0B;YACjE,4BAA4B,EAAE,OAAO;YACrC,8BAA8B,EAAE,MAAM;YACtC,+BAA+B,EAAE,MAAM;SACxC,CAAC;KACH,CAAC;IACF,aAAa,EAAE,0BAA0B;IACzC,SAAS,EAAE,6DAA6D;IACxE,aAAa,EAAE,qBAAqB;CACrC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAY,CAAC;IACtD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC;IAC9C,QAAQ,EAAE,4BAA4B;CACvC,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,uBAAuB,EAAE,yBAAyB;IAClD,aAAa,EAAE,kBAAkB;IACjC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;IACxC,WAAW,EAAE,4BAA4B;CAC1C,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\n\nconst nonnegativeSafeIntegerSchema = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER).refine((value) => !Object.is(value, -0), 'negative zero is not canonical');\nconst positiveSafeIntegerSchema = nonnegativeSafeIntegerSchema.refine((value) => value > 0, 'value must be positive');\nconst sha256DigestSchema = z.string().regex(/^sha256:[a-f0-9]{64}$/);\nconst isoDateTimeSchema = z.iso.datetime({ offset: true });\n\n/** Billable provider-usage dimensions. These are acquisition-cost categories, not customer billing units. */\nexport enum ProviderUsagePricingCategory {\n  INPUT_TOKEN = 'INPUT_TOKEN',\n  CACHED_INPUT_TOKEN = 'CACHED_INPUT_TOKEN',\n  CACHE_WRITE_INPUT_TOKEN = 'CACHE_WRITE_INPUT_TOKEN',\n  OUTPUT_TOKEN = 'OUTPUT_TOKEN',\n  REASONING_TOKEN = 'REASONING_TOKEN',\n}\n\nexport const PROVIDER_USAGE_PRICING_CATEGORY_ORDER: readonly ProviderUsagePricingCategory[] = Object.freeze([\n  ProviderUsagePricingCategory.INPUT_TOKEN,\n  ProviderUsagePricingCategory.CACHED_INPUT_TOKEN,\n  ProviderUsagePricingCategory.CACHE_WRITE_INPUT_TOKEN,\n  ProviderUsagePricingCategory.OUTPUT_TOKEN,\n  ProviderUsagePricingCategory.REASONING_TOKEN,\n]);\n\n/** V1 rounds once after aggregating every supported category into the authority's common denominator. */\nexport enum ProviderUsagePricingRoundingMode {\n  CEILING_AGGREGATE_TO_MINOR_UNIT = 'CEILING_AGGREGATE_TO_MINOR_UNIT',\n}\n\n/** Closed trigger vocabulary for provider pricing tiers. */\nexport enum ProviderUsagePricingTierRuleKind {\n  INPUT_TOKEN_QUANTITY_ABOVE = 'INPUT_TOKEN_QUANTITY_ABOVE',\n}\n\nconst RATE_MULTIPLIER_BASIS_POINTS = 10_000;\n\nexport const ProviderUsagePricingTierRuleSchema = z.strictObject({\n  kind: z.literal(ProviderUsagePricingTierRuleKind.INPUT_TOKEN_QUANTITY_ABOVE),\n  inputTokenThresholdExclusive: nonnegativeSafeIntegerSchema,\n  inputRateMultiplierBasisPoints: positiveSafeIntegerSchema,\n  outputRateMultiplierBasisPoints: positiveSafeIntegerSchema,\n});\nexport type ProviderUsagePricingTierRule = z.infer<typeof ProviderUsagePricingTierRuleSchema>;\n\nexport const ProviderUsagePricingRateSchema = z.strictObject({\n  category: z.enum(ProviderUsagePricingCategory),\n  /** Minor-currency units charged per `unitsDenominator` billable units. */\n  amountMinorNumerator: nonnegativeSafeIntegerSchema,\n});\nexport type ProviderUsagePricingRate = z.infer<typeof ProviderUsagePricingRateSchema>;\n\n/**\n * Canonical registered provider/model acquisition-cost authority.\n *\n * This is deliberately separate from billing `PriceSchema`, which represents what an application\n * charges its customers. Runtime budget consumers retain this record's identity/digest and never\n * copy its rates into a workflow-local table.\n */\nexport const ProviderUsagePricingAuthorityV1Schema = z.strictObject({\n  schemaVersion: z.literal(1),\n  pricingAuthorityRef: z.string().min(1),\n  pricingAuthorityVersion: positiveSafeIntegerSchema,\n  providerRef: z.string().min(1),\n  modelRef: z.string().min(1),\n  modelVersion: z.string().min(1),\n  currency: z.string().regex(/^[A-Z]{3}$/),\n  unitsDenominator: positiveSafeIntegerSchema,\n  roundingMode: z.literal(ProviderUsagePricingRoundingMode.CEILING_AGGREGATE_TO_MINOR_UNIT),\n  rates: z.array(ProviderUsagePricingRateSchema).min(1),\n  /** Ordered full-request price tiers; the highest matching input threshold wins. */\n  usageTierRules: z.array(ProviderUsagePricingTierRuleSchema),\n  effectiveFrom: isoDateTimeSchema,\n  sourceRef: z.string().min(1),\n  sourceVersion: z.string().min(1),\n  implementationDigest: sha256DigestSchema,\n  pricingDigest: sha256DigestSchema,\n}).superRefine((authority, context) => {\n  const categories = authority.rates.map((rate) => rate.category);\n  if (new Set(categories).size !== categories.length) {\n    context.addIssue({ code: 'custom', message: 'pricing categories must be unique', path: ['rates'] });\n  }\n  const order = new Map(PROVIDER_USAGE_PRICING_CATEGORY_ORDER.map((category, index) => [category, index]));\n  if (!categories.every((category, index) => index === 0 || order.get(categories[index - 1]!)! < order.get(category)!)) {\n    context.addIssue({ code: 'custom', message: 'pricing categories must use canonical order', path: ['rates'] });\n  }\n  for (const required of [ProviderUsagePricingCategory.INPUT_TOKEN, ProviderUsagePricingCategory.OUTPUT_TOKEN]) {\n    if (!categories.includes(required)) context.addIssue({ code: 'custom', message: `${required} pricing is required`, path: ['rates'] });\n  }\n  if (!authority.usageTierRules.every((rule, index) => index === 0 || authority.usageTierRules[index - 1]!.inputTokenThresholdExclusive < rule.inputTokenThresholdExclusive)) {\n    context.addIssue({ code: 'custom', message: 'usage pricing tiers must use unique ascending thresholds', path: ['usageTierRules'] });\n  }\n  for (const [index, rule] of authority.usageTierRules.entries()) {\n    if (rule.inputRateMultiplierBasisPoints < RATE_MULTIPLIER_BASIS_POINTS || rule.outputRateMultiplierBasisPoints < RATE_MULTIPLIER_BASIS_POINTS) {\n      context.addIssue({ code: 'custom', message: 'usage pricing tier multipliers cannot discount the registered base rate', path: ['usageTierRules', index] });\n    }\n  }\n});\nexport type ProviderUsagePricingAuthorityV1 = z.infer<typeof ProviderUsagePricingAuthorityV1Schema>;\n\n/**\n * Registry input owned by provider/model configuration. The backend calculator\n * supplies its own implementation identity and seals the final authority, so\n * an application or workflow can neither choose rates nor mint the algorithm\n * digest it later asks the registry to trust.\n */\nexport type ProviderUsagePricingAuthorityBasisV1 = Omit<\n  ProviderUsagePricingAuthorityV1,\n  'implementationDigest' | 'pricingDigest' | 'rates' | 'usageTierRules'\n> & {\n  readonly rates: readonly ProviderUsagePricingRate[];\n  readonly usageTierRules: readonly ProviderUsagePricingTierRule[];\n};\n\n/**\n * Canonical acquisition-cost basis for the selected app-creation model.\n *\n * The source is the provider's public model page observed on 2026-08-13. This\n * is not customer billing data and is never copied into a Work Cycle or Driver\n * request; those consumers retain only the sealed registry identity.\n */\nexport const OPENAI_GPT_5_6_TERRA_PROVIDER_USAGE_PRICING_BASIS_V1: ProviderUsagePricingAuthorityBasisV1 = Object.freeze({\n  schemaVersion: 1,\n  pricingAuthorityRef: 'pricing:openai/gpt-5.6-terra',\n  pricingAuthorityVersion: 1,\n  providerRef: 'openai',\n  modelRef: 'llm-model:gpt-5.6-terra',\n  modelVersion: 'gpt-5.6-terra',\n  currency: 'USD',\n  unitsDenominator: 1_000_000,\n  roundingMode: ProviderUsagePricingRoundingMode.CEILING_AGGREGATE_TO_MINOR_UNIT,\n  rates: Object.freeze([\n    Object.freeze({ category: ProviderUsagePricingCategory.INPUT_TOKEN, amountMinorNumerator: 200 }),\n    Object.freeze({ category: ProviderUsagePricingCategory.CACHED_INPUT_TOKEN, amountMinorNumerator: 20 }),\n    Object.freeze({ category: ProviderUsagePricingCategory.CACHE_WRITE_INPUT_TOKEN, amountMinorNumerator: 250 }),\n    Object.freeze({ category: ProviderUsagePricingCategory.OUTPUT_TOKEN, amountMinorNumerator: 1_200 }),\n  ]),\n  usageTierRules: Object.freeze([\n    Object.freeze({\n      kind: ProviderUsagePricingTierRuleKind.INPUT_TOKEN_QUANTITY_ABOVE,\n      inputTokenThresholdExclusive: 272_000,\n      inputRateMultiplierBasisPoints: 20_000,\n      outputRateMultiplierBasisPoints: 15_000,\n    }),\n  ]),\n  effectiveFrom: '2026-08-13T00:00:00.000Z',\n  sourceRef: 'https://developers.openai.com/api/docs/models/gpt-5.6-terra',\n  sourceVersion: 'observed:2026-08-13',\n});\n\nexport const ProviderUsageAmountSchema = z.strictObject({\n  category: z.enum(ProviderUsagePricingCategory),\n  quantity: nonnegativeSafeIntegerSchema,\n});\nexport type ProviderUsageAmount = z.infer<typeof ProviderUsageAmountSchema>;\n\nexport const ProviderUsageCostResultSchema = z.strictObject({\n  pricingAuthorityRef: z.string().min(1),\n  pricingAuthorityVersion: positiveSafeIntegerSchema,\n  pricingDigest: sha256DigestSchema,\n  currency: z.string().regex(/^[A-Z]{3}$/),\n  amountMinor: nonnegativeSafeIntegerSchema,\n});\nexport type ProviderUsageCostResult = z.infer<typeof ProviderUsageCostResultSchema>;\n"]}
+{"version":3,"file":"provider-usage-pricing.shared.schemas.js","sourceRoot":"","sources":["../../../src/external-providers/provider-usage-pricing.shared.schemas.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,gCAAgC,CAAC,CAAC;AAC5K,MAAM,yBAAyB,GAAG,4BAA4B,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,EAAE,wBAAwB,CAAC,CAAC;AACtH,MAAM,iBAAiB,GAAG,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,CAAN,IAAY,4BAeX;AAfD,WAAY,4BAA4B;IACtC,4GAA4G;IAC5G,2DAA2B,CAAA;IAC3B,4GAA4G;IAC5G,yEAAyC,CAAA;IACzC,6GAA6G;IAC7G,mFAAmD,CAAA;IACnD,gGAAgG;IAChG,6DAA6B,CAAA;IAC7B;;;;OAIG;IACH,mEAAmC,CAAA;AACrC,CAAC,EAfW,4BAA4B,KAA5B,4BAA4B,QAevC;AAED,MAAM,CAAC,MAAM,qCAAqC,GAA4C,MAAM,CAAC,MAAM,CAAC;IAC1G,4BAA4B,CAAC,WAAW;IACxC,4BAA4B,CAAC,kBAAkB;IAC/C,4BAA4B,CAAC,uBAAuB;IACpD,4BAA4B,CAAC,YAAY;IACzC,4BAA4B,CAAC,eAAe;CAC7C,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAN,IAAY,gCAEX;AAFD,WAAY,gCAAgC;IAC1C,uGAAmE,CAAA;AACrE,CAAC,EAFW,gCAAgC,KAAhC,gCAAgC,QAE3C;AAED,4DAA4D;AAC5D,MAAM,CAAN,IAAY,gCAGX;AAHD,WAAY,gCAAgC;IAC1C,iHAAiH;IACjH,6FAAyD,CAAA;AAC3D,CAAC,EAHW,gCAAgC,KAAhC,gCAAgC,QAG3C;AAED,iEAAiE;AACjE,MAAM,CAAC,MAAM,2CAA2C,GAAG,MAAM,CAAC;AAElE,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,YAAY,CAAC;IAC/D,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,0BAA0B,CAAC;IAC5E,4BAA4B,EAAE,4BAA4B;IAC1D,oGAAoG;IACpG,8BAA8B,EAAE,yBAAyB;IACzD,sEAAsE;IACtE,+BAA+B,EAAE,yBAAyB;CAC3D,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC3D,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC;IAC9C,0EAA0E;IAC1E,oBAAoB,EAAE,4BAA4B;CACnD,CAAC,CAAC;AAGH;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,MAAM,mCAAmC,GAAG,CAAC,CAAC,YAAY,CAAC;IAChE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,wFAAwF;IACxF,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC/C,yGAAyG;IACzG,uBAAuB,EAAE,yBAAyB;IAClD,kGAAkG;IAClG,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,uGAAuG;IACvG,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,kFAAkF;IAClF,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;IACxC,2HAA2H;IAC3H,gBAAgB,EAAE,yBAAyB;IAC3C,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC,+BAA+B,CAAC;IACzF,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,mFAAmF;IACnF,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,kCAAkC,CAAC;IAC3D,4DAA4D;IAC5D,aAAa,EAAE,iBAAiB;IAChC,6FAA6F;IAC7F,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACjC,CAAC,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE;IACpC,MAAM,UAAU,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChE,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,MAAM,EAAE,CAAC;QACnD,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,mCAAmC,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACtG,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,qCAAqC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACzG,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC,CAAE,CAAE,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAE,CAAC,EAAE,CAAC;QACrH,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,6CAA6C,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChH,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,CAAC,4BAA4B,CAAC,WAAW,EAAE,4BAA4B,CAAC,YAAY,CAAC,EAAE,CAAC;QAC7G,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,QAAQ,sBAAsB,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxI,CAAC;IACD,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,SAAS,CAAC,cAAc,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC,4BAA4B,GAAG,IAAI,CAAC,4BAA4B,CAAC,EAAE,CAAC;QAC3K,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,0DAA0D,EAAE,IAAI,EAAE,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IACtI,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,SAAS,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/D,IAAI,IAAI,CAAC,8BAA8B,GAAG,2CAA2C,IAAI,IAAI,CAAC,+BAA+B,GAAG,2CAA2C,EAAE,CAAC;YAC5K,OAAO,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,yEAAyE,EAAE,IAAI,EAAE,CAAC,gBAAgB,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5J,CAAC;IACH,CAAC;AACH,CAAC,CAAC,CAAC;AAGH,0EAA0E;AAE1E,6FAA6F;AAC7F,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,YAAY,CAAC;IACtD,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,4BAA4B,CAAC;IAC9C,QAAQ,EAAE,4BAA4B;CACvC,CAAC,CAAC;AAGH;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,YAAY,CAAC;IAC1D,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtC,uBAAuB,EAAE,yBAAyB;IAClD,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,YAAY,CAAC;IACxC,sBAAsB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC;IACjD,wBAAwB,EAAE,yBAAyB;IACnD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC;CAC5C,CAAC,CAAC","sourcesContent":["import { z } from 'zod';\n\nconst nonnegativeSafeIntegerSchema = z.number().int().nonnegative().max(Number.MAX_SAFE_INTEGER).refine((value) => !Object.is(value, -0), 'negative zero is not canonical');\nconst positiveSafeIntegerSchema = nonnegativeSafeIntegerSchema.refine((value) => value > 0, 'value must be positive');\nconst isoDateTimeSchema = z.iso.datetime({ offset: true });\n\n/**\n * @wildo_source:part:start saas.models.provider-usage-pricing-authority facet:layer:shared facet:family:config facet:audience:app-developer\n *\n * Billable provider-usage dimensions. These are ACQUISITION-cost categories (what the application pays a\n * model provider), not customer billing units.\n */\nexport enum ProviderUsagePricingCategory {\n  /** Input tokens read without a prompt cache (or every input token, when the provider reported no split). */\n  INPUT_TOKEN = 'INPUT_TOKEN',\n  /** Input tokens served from a prompt cache. Priced at `INPUT_TOKEN` when the authority declares no rate. */\n  CACHED_INPUT_TOKEN = 'CACHED_INPUT_TOKEN',\n  /** Input tokens written into a prompt cache. Priced at `INPUT_TOKEN` when the authority declares no rate. */\n  CACHE_WRITE_INPUT_TOKEN = 'CACHE_WRITE_INPUT_TOKEN',\n  /** Output tokens. Includes reasoning unless the authority declares a `REASONING_TOKEN` rate. */\n  OUTPUT_TOKEN = 'OUTPUT_TOKEN',\n  /**\n   * Reasoning tokens, when the authority prices them apart. They are then SUBTRACTED from the output\n   * quantity: every provider already counts reasoning inside its output total, so reasoning is never\n   * billed twice.\n   */\n  REASONING_TOKEN = 'REASONING_TOKEN',\n}\n\nexport const PROVIDER_USAGE_PRICING_CATEGORY_ORDER: readonly ProviderUsagePricingCategory[] = Object.freeze([\n  ProviderUsagePricingCategory.INPUT_TOKEN,\n  ProviderUsagePricingCategory.CACHED_INPUT_TOKEN,\n  ProviderUsagePricingCategory.CACHE_WRITE_INPUT_TOKEN,\n  ProviderUsagePricingCategory.OUTPUT_TOKEN,\n  ProviderUsagePricingCategory.REASONING_TOKEN,\n]);\n\n/**\n * How a TOTAL is rounded to a whole minor currency unit. There is one mode: exact per-call costs are summed\n * first and the sum is rounded up once, per reported total (#1598 review F11). Rounding each call up would\n * overstate an embedding-heavy case by up to one minor unit per call.\n */\nexport enum ProviderUsagePricingRoundingMode {\n  CEILING_AGGREGATE_TO_MINOR_UNIT = 'CEILING_AGGREGATE_TO_MINOR_UNIT',\n}\n\n/** Closed trigger vocabulary for provider pricing tiers. */\nexport enum ProviderUsagePricingTierRuleKind {\n  /** The whole request is priced at the tier when its INPUT quantity (all prompt tokens) exceeds the threshold. */\n  INPUT_TOKEN_QUANTITY_ABOVE = 'INPUT_TOKEN_QUANTITY_ABOVE',\n}\n\n/** A rate multiplier is written in basis points: 10 000 = ×1. */\nexport const PROVIDER_USAGE_RATE_MULTIPLIER_BASIS_POINTS = 10_000;\n\nexport const ProviderUsagePricingTierRuleSchema = z.strictObject({\n  kind: z.literal(ProviderUsagePricingTierRuleKind.INPUT_TOKEN_QUANTITY_ABOVE),\n  inputTokenThresholdExclusive: nonnegativeSafeIntegerSchema,\n  /** Multiplier on the three input categories, in basis points (≥ 10 000: a tier never discounts). */\n  inputRateMultiplierBasisPoints: positiveSafeIntegerSchema,\n  /** Multiplier on output and reasoning, in basis points (≥ 10 000). */\n  outputRateMultiplierBasisPoints: positiveSafeIntegerSchema,\n});\nexport type ProviderUsagePricingTierRule = z.infer<typeof ProviderUsagePricingTierRuleSchema>;\n\nexport const ProviderUsagePricingRateSchema = z.strictObject({\n  category: z.enum(ProviderUsagePricingCategory),\n  /** Minor-currency units charged per `unitsDenominator` billable units. */\n  amountMinorNumerator: nonnegativeSafeIntegerSchema,\n});\nexport type ProviderUsagePricingRate = z.infer<typeof ProviderUsagePricingRateSchema>;\n\n/**\n * One provider/model acquisition-cost price, REGISTERED BY THE APPLICATION in\n * `modelCostAccounting.providerUsagePricingAuthorities` (#1598), because rates are negotiated: a list price\n * shipped by the engine would be wrong for every firm with a contract, and would go stale.\n *\n * A price is identified by `pricingAuthorityRef@pricingAuthorityVersion`; the registry refuses a duplicate\n * pair at startup. A call is priced by the authority whose `providerRef` and `model` equal the call's\n * recorded provider and model, choosing the highest version whose `effectiveFrom` is not after the call.\n * No match leaves the call `UNPRICED`, never priced at zero.\n *\n * Deliberately separate from billing's `PriceSchema`, which is what the application CHARGES its customers.\n *\n * History: an earlier revision carried `implementationDigest` and `pricingDigest` and a \"sealed basis\" type\n * saying an application could \"neither choose rates\" nor mint the digest. Both were remnants of the retired\n * digest era (one-source-of-truth Rule 0) and contradicted the decision that the application registers its\n * rates. `modelRef` / `modelVersion` were replaced by `model`, the one id a call actually records.\n */\nexport const ProviderUsagePricingAuthoritySchema = z.strictObject({\n  schemaVersion: z.literal(1),\n  /** Stable name of this price list entry, for example `pricing:openai/gpt-5.6-terra`. */\n  pricingAuthorityRef: z.string().min(1).max(200),\n  /** Version of that entry. A rate change is a new version with a later `effectiveFrom`, never an edit. */\n  pricingAuthorityVersion: positiveSafeIntegerSchema,\n  /** The provider the call went to, exactly as the call records it (`openai`, `anthropic`, ...). */\n  providerRef: z.string().min(1),\n  /** The resolved model id, exactly as the call records it (`gpt-5.6-terra`, `claude-opus-4-8`, ...). */\n  model: z.string().min(1),\n  /** ISO 4217 code. Currencies are never converted: every total is per currency. */\n  currency: z.string().regex(/^[A-Z]{3}$/),\n  /** The number of billable units each rate's `amountMinorNumerator` is charged per (1 000 000 for \"per million tokens\"). */\n  unitsDenominator: positiveSafeIntegerSchema,\n  roundingMode: z.literal(ProviderUsagePricingRoundingMode.CEILING_AGGREGATE_TO_MINOR_UNIT),\n  rates: z.array(ProviderUsagePricingRateSchema).min(1),\n  /** Ordered full-request price tiers; the highest matching input threshold wins. */\n  usageTierRules: z.array(ProviderUsagePricingTierRuleSchema),\n  /** From when this version applies to a call (inclusive). */\n  effectiveFrom: isoDateTimeSchema,\n  /** Where the rates come from: a public price page, a contract reference. Provenance only. */\n  sourceRef: z.string().min(1),\n  sourceVersion: z.string().min(1),\n}).superRefine((authority, context) => {\n  const categories = authority.rates.map((rate) => rate.category);\n  if (new Set(categories).size !== categories.length) {\n    context.addIssue({ code: 'custom', message: 'pricing categories must be unique', path: ['rates'] });\n  }\n  const order = new Map(PROVIDER_USAGE_PRICING_CATEGORY_ORDER.map((category, index) => [category, index]));\n  if (!categories.every((category, index) => index === 0 || order.get(categories[index - 1]!)! < order.get(category)!)) {\n    context.addIssue({ code: 'custom', message: 'pricing categories must use canonical order', path: ['rates'] });\n  }\n  for (const required of [ProviderUsagePricingCategory.INPUT_TOKEN, ProviderUsagePricingCategory.OUTPUT_TOKEN]) {\n    if (!categories.includes(required)) context.addIssue({ code: 'custom', message: `${required} pricing is required`, path: ['rates'] });\n  }\n  if (!authority.usageTierRules.every((rule, index) => index === 0 || authority.usageTierRules[index - 1]!.inputTokenThresholdExclusive < rule.inputTokenThresholdExclusive)) {\n    context.addIssue({ code: 'custom', message: 'usage pricing tiers must use unique ascending thresholds', path: ['usageTierRules'] });\n  }\n  for (const [index, rule] of authority.usageTierRules.entries()) {\n    if (rule.inputRateMultiplierBasisPoints < PROVIDER_USAGE_RATE_MULTIPLIER_BASIS_POINTS || rule.outputRateMultiplierBasisPoints < PROVIDER_USAGE_RATE_MULTIPLIER_BASIS_POINTS) {\n      context.addIssue({ code: 'custom', message: 'usage pricing tier multipliers cannot discount the registered base rate', path: ['usageTierRules', index] });\n    }\n  }\n});\nexport type ProviderUsagePricingAuthority = z.infer<typeof ProviderUsagePricingAuthoritySchema>;\nexport type ProviderUsagePricingAuthorityInput = z.input<typeof ProviderUsagePricingAuthoritySchema>;\n/** @wildo_source:part:end saas.models.provider-usage-pricing-authority */\n\n/** One priced quantity of one category, as the calculator derived it from a call's usage. */\nexport const ProviderUsageAmountSchema = z.strictObject({\n  category: z.enum(ProviderUsagePricingCategory),\n  quantity: nonnegativeSafeIntegerSchema,\n});\nexport type ProviderUsageAmount = z.infer<typeof ProviderUsageAmountSchema>;\n\n/**\n * The EXACT cost of one call under one authority, unrounded (#1598 F11):\n * `callCostMinorNumerator / callCostUnitsDenominator` minor currency units.\n *\n * The numerator is a decimal INTEGER STRING because it is an exact rational part and must survive both\n * adapters without floating-point loss; the denominator is small enough to stay a number.\n */\nexport const ProviderUsageCostResultSchema = z.strictObject({\n  pricingAuthorityRef: z.string().min(1),\n  pricingAuthorityVersion: positiveSafeIntegerSchema,\n  currency: z.string().regex(/^[A-Z]{3}$/),\n  callCostMinorNumerator: z.string().regex(/^\\d+$/),\n  callCostUnitsDenominator: positiveSafeIntegerSchema,\n  amounts: z.array(ProviderUsageAmountSchema),\n});\nexport type ProviderUsageCostResult = z.infer<typeof ProviderUsageCostResultSchema>;\n"]}

package/dist/esm/features/application-features.shared.resources-config.schemas.d.ts

@@ -27,12 +27,12 @@ export declare const ApplicationFeaturesResetFeaturesRequestDtoSchema: z.ZodObje
 }, z.core.$strip>;
 type ApplicationFeaturesCoreOperations = CoreResourceOperation.CREATE | CoreResourceOperation.READ | CoreResourceOperation.SEARCH | CoreResourceOperation.UPDATE | CoreResourceOperation.DELETE;
 export declare const applicationFeaturesResourceConfiguration_InitializationFactory: (resourcesRelationships: ResourceRelationship[]) => import("..").ResourceConfiguration<typeof ApplicationFeatures_Operations, ApplicationFeaturesCoreOperations, z.ZodObject<{
-    features: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<z.ZodUnion<readonly [z.ZodEnum<typeof CoreFeature>, z.ZodString]>>>>>;
-    limits: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodNumber>>>>;
+    features: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodArray<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodUnion<readonly [z.ZodEnum<typeof CoreFeature>, z.ZodString]>>>>>>;
+    limits: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodRecord<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>, import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodNumber>>>>>;
     manualOverrides: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodDefault<z.ZodObject<{
-        addedFeatures: z.ZodDefault<z.ZodArray<z.ZodString>>;
-        removedFeatures: z.ZodDefault<z.ZodArray<z.ZodString>>;
-        limitOverrides: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodNumber>>;
+        addedFeatures: z.ZodDefault<z.ZodArray<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+        removedFeatures: z.ZodDefault<z.ZodArray<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>;
+        limitOverrides: z.ZodDefault<z.ZodRecord<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>, import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodNumber>>>;
     }, z.core.$strip>>>;
     _id: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>;
     applicationId: import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<import("@wildo-ai/zod-decorators").DecoratedPrimitiveZodType<z.ZodString>>>>>>;

package/dist/esm/features/application-features.shared.resources-config.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"application-features.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../../src/features/application-features.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,uDAAuD,CAAC;AAGpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAA8D,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAOzI,oBAAY,8BAA8B;IACxC,cAAc,mBAAmB;IACjC,eAAe,oBAAoB;IACnC,cAAc,mBAAmB;CAClC;AAED,eAAO,MAAM,gDAAgD;;;iBAG3D,CAAC;AAEH,eAAO,MAAM,iDAAiD;;;iBAG5D,CAAC;AAEH,eAAO,MAAM,gDAAgD;;iBAE3D,CAAC;AAEH,KAAK,iCAAiC,GAClC,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAEjC,eAAO,MAAM,8DAA8D,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;kBAoK3H,CAAC"}
+{"version":3,"file":"application-features.shared.resources-config.schemas.d.ts","sourceRoot":"","sources":["../../../src/features/application-features.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,uDAAuD,CAAC;AAGpF,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAA8D,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAOzI,oBAAY,8BAA8B;IACxC,cAAc,mBAAmB;IACjC,eAAe,oBAAoB;IACnC,cAAc,mBAAmB;CAClC;AAED,eAAO,MAAM,gDAAgD;;;iBAG3D,CAAC;AAEH,eAAO,MAAM,iDAAiD;;;iBAG5D,CAAC;AAEH,eAAO,MAAM,gDAAgD;;iBAE3D,CAAC;AAEH,KAAK,iCAAiC,GAClC,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,IAAI,GAC1B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,GAC5B,qBAAqB,CAAC,MAAM,CAAC;AAEjC,eAAO,MAAM,8DAA8D,GAAI,wBAAwB,oBAAoB,EAAE;;;;;;;;;;kBA4K3H,CAAC"}

package/dist/esm/features/application-features.shared.resources-config.schemas.js

@@ -22,15 +22,15 @@ export var ApplicationFeatures_Operations;
     ApplicationFeatures_Operations["RESET_FEATURES"] = "reset_features";
 })(ApplicationFeatures_Operations || (ApplicationFeatures_Operations = {}));
 export const ApplicationFeaturesEnableFeatureRequestDtoSchema = z.object({
-    featureId: z.enum(CoreFeature),
-    reason: z.string().max(500).optional(),
+    featureId: z.enum(CoreFeature).describe('The feature to switch on. It is added to this scope\'s manual overrides and taken off its removed list, so it stays on through billing changes.'),
+    reason: z.string().max(500).optional().describe('Why the feature is being switched on. Recorded on the audit trail with the change.'),
 });
 export const ApplicationFeaturesDisableFeatureRequestDtoSchema = z.object({
-    featureId: z.enum(CoreFeature),
-    reason: z.string().min(1).max(500),
+    featureId: z.enum(CoreFeature).describe('The feature to switch off. It is added to this scope\'s removed list and taken off its added list, so it stays off through billing changes.'),
+    reason: z.string().min(1).max(500).describe('Why the feature is being switched off. Recorded on the audit trail with the change.'),
 });
 export const ApplicationFeaturesResetFeaturesRequestDtoSchema = z.object({
-    reason: z.string().min(1).max(500),
+    reason: z.string().min(1).max(500).describe('Why every manual override is being cleared. Recorded on the audit trail with the change.'),
 });
 export const applicationFeaturesResourceConfiguration_InitializationFactory = (resourcesRelationships) => createResourceConfiguration_Initialization({
     mainSchema: ApplicationFeaturesSchema,
@@ -151,6 +151,10 @@ export const applicationFeaturesResourceConfiguration_InitializationFactory = (r
                     riskLevel: ResourceOperationRiskLevel.MEDIUM,
                     resourceOperationLike: CoreResourceOperation.UPDATE_MANY,
                     requestDto: ApplicationFeaturesEnableFeatureRequestDtoSchema,
+                    // The handler persists and returns the application's features row, like the organization
+                    // twin, so the response is that row rather than the UPDATE_MANY envelope the route shape
+                    // would imply (which the row does not satisfy, and the API reference published).
+                    customResponseDto: ScopeFeaturesWithOverridesSchema,
                 },
             ],
         },
@@ -163,6 +167,8 @@ export const applicationFeaturesResourceConfiguration_InitializationFactory = (r
                     riskLevel: ResourceOperationRiskLevel.HIGH,
                     resourceOperationLike: CoreResourceOperation.UPDATE_MANY,
                     requestDto: ApplicationFeaturesDisableFeatureRequestDtoSchema,
+                    // Same as ENABLE_FEATURE: the handler returns the features row.
+                    customResponseDto: ScopeFeaturesWithOverridesSchema,
                 },
             ],
         },
@@ -178,6 +184,8 @@ export const applicationFeaturesResourceConfiguration_InitializationFactory = (r
                     reversibility: ResourceOperationReversibility.IRREVERSIBLE,
                     resourceOperationLike: CoreResourceOperation.UPDATE_MANY,
                     requestDto: ApplicationFeaturesResetFeaturesRequestDtoSchema,
+                    // Same as ENABLE_FEATURE: the handler returns the features row.
+                    customResponseDto: ScopeFeaturesWithOverridesSchema,
                 },
             ],
         },

package/dist/esm/features/application-features.shared.resources-config.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"application-features.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../../src/features/application-features.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,uDAAuD,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,gCAAgC,EAAE,MAAM,iCAAiC,CAAC;AAE9G,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAAwB,MAAM,uCAAuC,CAAC;AACzI,OAAO,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AACtH,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAEjF,MAAM,CAAN,IAAY,8BAIX;AAJD,WAAY,8BAA8B;IACxC,mEAAiC,CAAA;IACjC,qEAAmC,CAAA;IACnC,mEAAiC,CAAA;AACnC,CAAC,EAJW,8BAA8B,KAA9B,8BAA8B,QAIzC;AAED,MAAM,CAAC,MAAM,gDAAgD,GAAG,CAAC,CAAC,MAAM,CAAC;IACvE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CACvC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iDAAiD,GAAG,CAAC,CAAC,MAAM,CAAC;IACxE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IAC9B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACnC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gDAAgD,GAAG,CAAC,CAAC,MAAM,CAAC;IACvE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;CACnC,CAAC,CAAC;AASH,MAAM,CAAC,MAAM,8DAA8D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI1K;IACA,UAAU,EAAE,yBAAyB;IACrC,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;IAClG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB;;;;;;;;;;;;;;;;;;OAkBG;IACH,kBAAkB,EAAE;QAClB,IAAI,EAAE,wBAAwB,CAAC,OAAO;QACtC,MAAM,EAAE,wBAAwB,CAAC,OAAO;KACzC;IAED,cAAc,EAAE;QACd,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,mFAAmF;QACnF,oFAAoF;QACpF,oFAAoF;QACpF,qBAAqB,CAAC,MAAM;KAC7B;IAED,eAAe,EAAE,8BAA8B;IAE/C,+FAA+F;IAC/F,oDAAoD;IACpD,EAAE;IACF,6FAA6F;IAC7F,8FAA8F;IAC9F,6FAA6F;IAC7F,mGAAmG;IACnG,cAAc;IACd,EAAE;IACF,oGAAoG;IACpG,gEAAgE;IAChE,+DAA+D;IAC/D,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,KAAK;oBACnB,gBAAgB,EAAE,EAAE;oBACpB,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,EAAE;oBAChB,UAAU,EAAE,EAAE;oBACd,8BAA8B,EAAE,EAAE;iBACnC,CAAC;SACH;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;oBAC1C,UAAU,EAAE,gCAAgC,CAAC,OAAO,EAAE;iBACvD;aACF;SACF;QAED,kFAAkF;QAClF,4EAA4E;QAC5E,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;SACF;QAED,CAAC,8BAA8B,CAAC,cAAc,CAAC,EAAE;YAC/C,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,qBAAqB,EAAE,qBAAqB,CAAC,WAAW;oBACxD,UAAU,EAAE,gDAAgD;iBAC7D;aACF;SACF;QAED,CAAC,8BAA8B,CAAC,eAAe,CAAC,EAAE;YAChD,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;oBAC1C,qBAAqB,EAAE,qBAAqB,CAAC,WAAW;oBACxD,UAAU,EAAE,iDAAiD;iBAC9D;aACF;SACF;QAED,CAAC,8BAA8B,CAAC,cAAc,CAAC,EAAE;YAC/C,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,QAAQ;oBAC9C,wIAAwI;oBACxI,wEAAwE;oBACxE,aAAa,EAAE,8BAA8B,CAAC,YAAY;oBAC1D,qBAAqB,EAAE,qBAAqB,CAAC,WAAW;oBACxD,UAAU,EAAE,gDAAgD;iBAC7D;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * Application Features Shared Resource Configuration\n *\n * Application-scope entitlement ledger. This mirrors organization/user feature\n * ledgers so exact-scope gates such as `M2M_WEBHOOK_DELIVERY` can be enabled\n * for `WEBHOOK_APPLICATION` without leaking app enablement to every org.\n */\n\nimport { z } from 'zod';\nimport { CoreFeature } from '../organizations/organization-features.shared.schemas';\nimport { ApplicationFeaturesSchema, ScopeFeaturesWithOverridesSchema } from './scope-features.shared.schemas';\n\nimport { CoreResourceOperation } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationRiskLevel, ResourceOperationReversibility, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationVariantType } from '../resources/resources.shared.schemas';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas';\n\nexport enum ApplicationFeatures_Operations {\n  ENABLE_FEATURE = 'enable_feature',\n  DISABLE_FEATURE = 'disable_feature',\n  RESET_FEATURES = 'reset_features',\n}\n\nexport const ApplicationFeaturesEnableFeatureRequestDtoSchema = z.object({\n  featureId: z.enum(CoreFeature),\n  reason: z.string().max(500).optional(),\n});\n\nexport const ApplicationFeaturesDisableFeatureRequestDtoSchema = z.object({\n  featureId: z.enum(CoreFeature),\n  reason: z.string().min(1).max(500),\n});\n\nexport const ApplicationFeaturesResetFeaturesRequestDtoSchema = z.object({\n  reason: z.string().min(1).max(500),\n});\n\ntype ApplicationFeaturesCoreOperations =\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.SEARCH\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.DELETE;\n\nexport const applicationFeaturesResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n  typeof ApplicationFeatures_Operations,\n  ApplicationFeaturesCoreOperations,\n  typeof ApplicationFeaturesSchema\n>({\n  mainSchema: ApplicationFeaturesSchema,\n  resourceIdentifier: CoreResourceType.APPLICATION_FEATURES,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION_FEATURES],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n  /*\n   * The framework may materialise this scope's row on a caller's behalf.\n   *\n   * `systemAccessPolicy.create: ALLOWED` is what #1179's seam reads before materialising a\n   * context-addressed singleton the caller never named: an administrator can START configuring a\n   * scope that has no row yet, instead of being 404ed for the framework's own omission. Its three\n   * enterprise-config siblings (SSO / SCIM / SIEM) already declared it; this resource did not, so\n   * the same first write was refused here and nowhere else.\n   *\n   * The row written is the scope foreign key and nothing else — this resource's own schema fills\n   * the rest — so the seeding system keeps ownership of what a default MEANS and the seam decides\n   * only WHEN the row comes into existence.\n   *\n   * NOTE, because it was measured on 2026-09-19 and is easy to assume otherwise: this does NOT make\n   * a READ materialise. That seam is reached for UPDATE and DELETE only, and extending it to READ\n   * was tried and reverted — a probe of the running backend showed the read route never enters it.\n   * A scope whose row is still absent therefore still 404s on read; making that row EXIST is a\n   * seeding question, not an access-policy one.\n   */\n  systemAccessPolicy: {\n    read: ResourceSystemAccessMode.ALLOWED,\n    create: ResourceSystemAccessMode.ALLOWED,\n  },\n\n  coreOperations: [\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.READ,\n    CoreResourceOperation.SEARCH,\n    CoreResourceOperation.UPDATE,\n    // DELETE is REPOSITORY_ONLY (no HTTP route): powers the composition onParentDelete\n    // cascade so the row is physically removed when its application is deleted. Without\n    // it the cascade throws ErrorType.CONFIGURATION on any app that has a features row.\n    CoreResourceOperation.DELETE,\n  ],\n\n  customOperation: ApplicationFeatures_Operations,\n\n  // assurance-control: WILDO.ENTITLEMENT.NO_SELF_GRANT — the application-wide entitlement set is\n  // operator-gated on every operation, read included.\n  //\n  // This is the widest of the three feature ledgers: a write here changes what EVERY tenant is\n  // entitled to, so it is the one ledger where even READ and SEARCH are `APP_ADMIN_SUPER_ADMIN`\n  // rather than a tenant role. That asymmetry against the organization and user ledgers is the\n  // deliberate part — those two let a tenant see its own entitlements; this one is not a tenant's to\n  // see at all.\n  //\n  // As on the sibling ledgers the role is the entire control, because the super-admin path must write\n  // these fields and so they cannot be field-protected. Pinned by\n  // `security-sensitive-operation-reachability.backend.test.ts`.\n  operationsConfiguration: {\n    [CoreResourceOperation.CREATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n        },\n      ],\n    },\n\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        },\n      ],\n    },\n\n    [CoreResourceOperation.SEARCH]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.API_CALL,\n        isDefault: true,\n        roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n        riskLevel: ResourceOperationRiskLevel.LOW,\n        isSearchable: false,\n        searchableFields: [],\n        searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n        filterFields: {},\n        sortFields: [],\n        maxPaginatedResultPerPageLimit: 50,\n      }],\n    },\n\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n          requestDto: ScopeFeaturesWithOverridesSchema.partial(),\n        },\n      ],\n    },\n\n    // Internal-only (REPOSITORY_ONLY): powers the composition onParentDelete cascade,\n    // not a public API surface — the ledger is reset, never DELETEd, over HTTP.\n    [CoreResourceOperation.DELETE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n        },\n      ],\n    },\n\n    [ApplicationFeatures_Operations.ENABLE_FEATURE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n          resourceOperationLike: CoreResourceOperation.UPDATE_MANY,\n          requestDto: ApplicationFeaturesEnableFeatureRequestDtoSchema,\n        },\n      ],\n    },\n\n    [ApplicationFeatures_Operations.DISABLE_FEATURE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n          resourceOperationLike: CoreResourceOperation.UPDATE_MANY,\n          requestDto: ApplicationFeaturesDisableFeatureRequestDtoSchema,\n        },\n      ],\n    },\n\n    [ApplicationFeatures_Operations.RESET_FEATURES]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.CRITICAL,\n          // IRREVERSIBLE: Clears every override on the application. There is no backup of the list, and organizations relying on one lose access.\n          // This is what admits it to the danger zone; risk alone no longer does.\n          reversibility: ResourceOperationReversibility.IRREVERSIBLE,\n          resourceOperationLike: CoreResourceOperation.UPDATE_MANY,\n          requestDto: ApplicationFeaturesResetFeaturesRequestDtoSchema,\n        },\n      ],\n    },\n  },\n});\n"]}
+{"version":3,"file":"application-features.shared.resources-config.schemas.js","sourceRoot":"","sources":["../../../src/features/application-features.shared.resources-config.schemas.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,uDAAuD,CAAC;AACpF,OAAO,EAAE,yBAAyB,EAAE,gCAAgC,EAAE,MAAM,iCAAiC,CAAC;AAE9G,OAAO,EAAE,qBAAqB,EAAE,MAAM,gDAAgD,CAAC;AACvF,OAAO,EAAE,0BAA0B,EAAE,8BAA8B,EAAwB,MAAM,uCAAuC,CAAC;AACzI,OAAO,EAAE,gBAAgB,EAAE,kCAAkC,EAAE,MAAM,gDAAgD,CAAC;AACtH,OAAO,EAAE,4BAA4B,EAAE,MAAM,uCAAuC,CAAC;AACrF,OAAO,EAAE,wBAAwB,EAAE,MAAM,8CAA8C,CAAC;AACxF,OAAO,EAAE,0CAA0C,EAAE,MAAM,8CAA8C,CAAC;AAC1G,OAAO,EAAE,cAAc,EAAE,MAAM,iDAAiD,CAAC;AAEjF,MAAM,CAAN,IAAY,8BAIX;AAJD,WAAY,8BAA8B;IACxC,mEAAiC,CAAA;IACjC,qEAAmC,CAAA;IACnC,mEAAiC,CAAA;AACnC,CAAC,EAJW,8BAA8B,KAA9B,8BAA8B,QAIzC;AAED,MAAM,CAAC,MAAM,gDAAgD,GAAG,CAAC,CAAC,MAAM,CAAC;IACvE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,iJAAiJ,CAAC;IAC1L,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,oFAAoF,CAAC;CACtI,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iDAAiD,GAAG,CAAC,CAAC,MAAM,CAAC;IACxE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,6IAA6I,CAAC;IACtL,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,qFAAqF,CAAC;CACnI,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gDAAgD,GAAG,CAAC,CAAC,MAAM,CAAC;IACvE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,0FAA0F,CAAC;CACxI,CAAC,CAAC;AASH,MAAM,CAAC,MAAM,8DAA8D,GAAG,CAAC,sBAA8C,EAAE,EAAE,CAAC,0CAA0C,CAI1K;IACA,UAAU,EAAE,yBAAyB;IACrC,kBAAkB,EAAE,gBAAgB,CAAC,oBAAoB;IACzD,uBAAuB,EAAE,kCAAkC,CAAC,gBAAgB,CAAC,oBAAoB,CAAC;IAClG,qBAAqB,EAAE,sBAAsB;IAC7C,gBAAgB,EAAE,IAAI;IACtB;;;;;;;;;;;;;;;;;;OAkBG;IACH,kBAAkB,EAAE;QAClB,IAAI,EAAE,wBAAwB,CAAC,OAAO;QACtC,MAAM,EAAE,wBAAwB,CAAC,OAAO;KACzC;IAED,cAAc,EAAE;QACd,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,IAAI;QAC1B,qBAAqB,CAAC,MAAM;QAC5B,qBAAqB,CAAC,MAAM;QAC5B,mFAAmF;QACnF,oFAAoF;QACpF,oFAAoF;QACpF,qBAAqB,CAAC,MAAM;KAC7B;IAED,eAAe,EAAE,8BAA8B;IAE/C,+FAA+F;IAC/F,oDAAoD;IACpD,EAAE;IACF,6FAA6F;IAC7F,8FAA8F;IAC9F,6FAA6F;IAC7F,mGAAmG;IACnG,cAAc;IACd,EAAE;IACF,oGAAoG;IACpG,gEAAgE;IAChE,+DAA+D;IAC/D,uBAAuB,EAAE;QACvB,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,MAAM;iBAC7C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE;YAC5B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;iBAC1C;aACF;SACF;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE,CAAC;oBACT,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,GAAG;oBACzC,YAAY,EAAE,KAAK;oBACnB,gBAAgB,EAAE,EAAE;oBACpB,iBAAiB,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE;oBACjE,YAAY,EAAE,EAAE;oBAChB,UAAU,EAAE,EAAE;oBACd,8BAA8B,EAAE,EAAE;iBACnC,CAAC;SACH;QAED,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;oBAC1C,UAAU,EAAE,gCAAgC,CAAC,OAAO,EAAE;iBACvD;aACF;SACF;QAED,kFAAkF;QAClF,4EAA4E;QAC5E,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE;YAC9B,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,eAAe;oBACzD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;iBAC3C;aACF;SACF;QAED,CAAC,8BAA8B,CAAC,cAAc,CAAC,EAAE;YAC/C,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,MAAM;oBAC5C,qBAAqB,EAAE,qBAAqB,CAAC,WAAW;oBACxD,UAAU,EAAE,gDAAgD;oBAC5D,yFAAyF;oBACzF,yFAAyF;oBACzF,iFAAiF;oBACjF,iBAAiB,EAAE,gCAAgC;iBACpD;aACF;SACF;QAED,CAAC,8BAA8B,CAAC,eAAe,CAAC,EAAE;YAChD,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,IAAI;oBAC1C,qBAAqB,EAAE,qBAAqB,CAAC,WAAW;oBACxD,UAAU,EAAE,iDAAiD;oBAC7D,gEAAgE;oBAChE,iBAAiB,EAAE,gCAAgC;iBACpD;aACF;SACF;QAED,CAAC,8BAA8B,CAAC,cAAc,CAAC,EAAE;YAC/C,QAAQ,EAAE;gBACR;oBACE,WAAW,EAAE,4BAA4B,CAAC,QAAQ;oBAClD,SAAS,EAAE,IAAI;oBACf,KAAK,EAAE,CAAC,cAAc,CAAC,qBAAqB,CAAC;oBAC7C,SAAS,EAAE,0BAA0B,CAAC,QAAQ;oBAC9C,wIAAwI;oBACxI,wEAAwE;oBACxE,aAAa,EAAE,8BAA8B,CAAC,YAAY;oBAC1D,qBAAqB,EAAE,qBAAqB,CAAC,WAAW;oBACxD,UAAU,EAAE,gDAAgD;oBAC5D,gEAAgE;oBAChE,iBAAiB,EAAE,gCAAgC;iBACpD;aACF;SACF;KACF;CACF,CAAC,CAAC","sourcesContent":["/**\n * Application Features Shared Resource Configuration\n *\n * Application-scope entitlement ledger. This mirrors organization/user feature\n * ledgers so exact-scope gates such as `M2M_WEBHOOK_DELIVERY` can be enabled\n * for `WEBHOOK_APPLICATION` without leaking app enablement to every org.\n */\n\nimport { z } from 'zod';\nimport { CoreFeature } from '../organizations/organization-features.shared.schemas';\nimport { ApplicationFeaturesSchema, ScopeFeaturesWithOverridesSchema } from './scope-features.shared.schemas';\n\nimport { CoreResourceOperation } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationRiskLevel, ResourceOperationReversibility, ResourceRelationship } from '../resources/resources.shared.schemas';\nimport { CoreResourceType, coreResourceShared_FieldIdentifier } from '../resources/resources.shared.core.definitions';\nimport { ResourceOperationVariantType } from '../resources/resources.shared.schemas';\nimport { ResourceSystemAccessMode } from '../resources/resources-config.shared.schemas';\nimport { createResourceConfiguration_Initialization } from '../resources/resources-config.shared.factory';\nimport { CORE_APP_ROLES } from '../security/authorizations/roles.shared.schemas';\n\nexport enum ApplicationFeatures_Operations {\n  ENABLE_FEATURE = 'enable_feature',\n  DISABLE_FEATURE = 'disable_feature',\n  RESET_FEATURES = 'reset_features',\n}\n\nexport const ApplicationFeaturesEnableFeatureRequestDtoSchema = z.object({\n  featureId: z.enum(CoreFeature).describe('The feature to switch on. It is added to this scope\\'s manual overrides and taken off its removed list, so it stays on through billing changes.'),\n  reason: z.string().max(500).optional().describe('Why the feature is being switched on. Recorded on the audit trail with the change.'),\n});\n\nexport const ApplicationFeaturesDisableFeatureRequestDtoSchema = z.object({\n  featureId: z.enum(CoreFeature).describe('The feature to switch off. It is added to this scope\\'s removed list and taken off its added list, so it stays off through billing changes.'),\n  reason: z.string().min(1).max(500).describe('Why the feature is being switched off. Recorded on the audit trail with the change.'),\n});\n\nexport const ApplicationFeaturesResetFeaturesRequestDtoSchema = z.object({\n  reason: z.string().min(1).max(500).describe('Why every manual override is being cleared. Recorded on the audit trail with the change.'),\n});\n\ntype ApplicationFeaturesCoreOperations =\n  | CoreResourceOperation.CREATE\n  | CoreResourceOperation.READ\n  | CoreResourceOperation.SEARCH\n  | CoreResourceOperation.UPDATE\n  | CoreResourceOperation.DELETE;\n\nexport const applicationFeaturesResourceConfiguration_InitializationFactory = (resourcesRelationships: ResourceRelationship[]) => createResourceConfiguration_Initialization<\n  typeof ApplicationFeatures_Operations,\n  ApplicationFeaturesCoreOperations,\n  typeof ApplicationFeaturesSchema\n>({\n  mainSchema: ApplicationFeaturesSchema,\n  resourceIdentifier: CoreResourceType.APPLICATION_FEATURES,\n  resourceFieldIdentifier: coreResourceShared_FieldIdentifier[CoreResourceType.APPLICATION_FEATURES],\n  resourceRelationships: resourcesRelationships,\n  isSystemResource: true,\n  /*\n   * The framework may materialise this scope's row on a caller's behalf.\n   *\n   * `systemAccessPolicy.create: ALLOWED` is what #1179's seam reads before materialising a\n   * context-addressed singleton the caller never named: an administrator can START configuring a\n   * scope that has no row yet, instead of being 404ed for the framework's own omission. Its three\n   * enterprise-config siblings (SSO / SCIM / SIEM) already declared it; this resource did not, so\n   * the same first write was refused here and nowhere else.\n   *\n   * The row written is the scope foreign key and nothing else — this resource's own schema fills\n   * the rest — so the seeding system keeps ownership of what a default MEANS and the seam decides\n   * only WHEN the row comes into existence.\n   *\n   * NOTE, because it was measured on 2026-09-19 and is easy to assume otherwise: this does NOT make\n   * a READ materialise. That seam is reached for UPDATE and DELETE only, and extending it to READ\n   * was tried and reverted — a probe of the running backend showed the read route never enters it.\n   * A scope whose row is still absent therefore still 404s on read; making that row EXIST is a\n   * seeding question, not an access-policy one.\n   */\n  systemAccessPolicy: {\n    read: ResourceSystemAccessMode.ALLOWED,\n    create: ResourceSystemAccessMode.ALLOWED,\n  },\n\n  coreOperations: [\n    CoreResourceOperation.CREATE,\n    CoreResourceOperation.READ,\n    CoreResourceOperation.SEARCH,\n    CoreResourceOperation.UPDATE,\n    // DELETE is REPOSITORY_ONLY (no HTTP route): powers the composition onParentDelete\n    // cascade so the row is physically removed when its application is deleted. Without\n    // it the cascade throws ErrorType.CONFIGURATION on any app that has a features row.\n    CoreResourceOperation.DELETE,\n  ],\n\n  customOperation: ApplicationFeatures_Operations,\n\n  // assurance-control: WILDO.ENTITLEMENT.NO_SELF_GRANT — the application-wide entitlement set is\n  // operator-gated on every operation, read included.\n  //\n  // This is the widest of the three feature ledgers: a write here changes what EVERY tenant is\n  // entitled to, so it is the one ledger where even READ and SEARCH are `APP_ADMIN_SUPER_ADMIN`\n  // rather than a tenant role. That asymmetry against the organization and user ledgers is the\n  // deliberate part — those two let a tenant see its own entitlements; this one is not a tenant's to\n  // see at all.\n  //\n  // As on the sibling ledgers the role is the entire control, because the super-admin path must write\n  // these fields and so they cannot be field-protected. Pinned by\n  // `security-sensitive-operation-reachability.backend.test.ts`.\n  operationsConfiguration: {\n    [CoreResourceOperation.CREATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n        },\n      ],\n    },\n\n    [CoreResourceOperation.READ]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.LOW,\n        },\n      ],\n    },\n\n    [CoreResourceOperation.SEARCH]: {\n      variants: [{\n        variantType: ResourceOperationVariantType.API_CALL,\n        isDefault: true,\n        roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n        riskLevel: ResourceOperationRiskLevel.LOW,\n        isSearchable: false,\n        searchableFields: [],\n        searchableOptions: { caseSensitive: false, fullMatchOnly: false },\n        filterFields: {},\n        sortFields: [],\n        maxPaginatedResultPerPageLimit: 50,\n      }],\n    },\n\n    [CoreResourceOperation.UPDATE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n          requestDto: ScopeFeaturesWithOverridesSchema.partial(),\n        },\n      ],\n    },\n\n    // Internal-only (REPOSITORY_ONLY): powers the composition onParentDelete cascade,\n    // not a public API surface — the ledger is reset, never DELETEd, over HTTP.\n    [CoreResourceOperation.DELETE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.REPOSITORY_ONLY,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n        },\n      ],\n    },\n\n    [ApplicationFeatures_Operations.ENABLE_FEATURE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.MEDIUM,\n          resourceOperationLike: CoreResourceOperation.UPDATE_MANY,\n          requestDto: ApplicationFeaturesEnableFeatureRequestDtoSchema,\n          // The handler persists and returns the application's features row, like the organization\n          // twin, so the response is that row rather than the UPDATE_MANY envelope the route shape\n          // would imply (which the row does not satisfy, and the API reference published).\n          customResponseDto: ScopeFeaturesWithOverridesSchema,\n        },\n      ],\n    },\n\n    [ApplicationFeatures_Operations.DISABLE_FEATURE]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.HIGH,\n          resourceOperationLike: CoreResourceOperation.UPDATE_MANY,\n          requestDto: ApplicationFeaturesDisableFeatureRequestDtoSchema,\n          // Same as ENABLE_FEATURE: the handler returns the features row.\n          customResponseDto: ScopeFeaturesWithOverridesSchema,\n        },\n      ],\n    },\n\n    [ApplicationFeatures_Operations.RESET_FEATURES]: {\n      variants: [\n        {\n          variantType: ResourceOperationVariantType.API_CALL,\n          isDefault: true,\n          roles: [CORE_APP_ROLES.APP_ADMIN_SUPER_ADMIN],\n          riskLevel: ResourceOperationRiskLevel.CRITICAL,\n          // IRREVERSIBLE: Clears every override on the application. There is no backup of the list, and organizations relying on one lose access.\n          // This is what admits it to the danger zone; risk alone no longer does.\n          reversibility: ResourceOperationReversibility.IRREVERSIBLE,\n          resourceOperationLike: CoreResourceOperation.UPDATE_MANY,\n          requestDto: ApplicationFeaturesResetFeaturesRequestDtoSchema,\n          // Same as ENABLE_FEATURE: the handler returns the features row.\n          customResponseDto: ScopeFeaturesWithOverridesSchema,\n        },\n      ],\n    },\n  },\n});\n"]}

package/dist/esm/features/connected-feature.example.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connected-feature.example.d.ts","sourceRoot":"","sources":["../../../../src/features/connected-feature.example.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAqC,KAAK,iCAAiC,EAAE,MAAM,2BAA2B,CAAC;AAGtH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AAI3F,oIAAoI;AAYpI;;;GAGG;AACH,oBAAY,kBAAkB;IAC5B,2EAA2E;IAC3E,gBAAgB,qBAAqB;CACtC;AAED,eAAO,MAAM,0BAA0B,EAAE,iCAAiC,EAMzE,CAAC;AAGF,eAAO,MAAM,qBAAqB;;;;;;;;;;;CAM2D,CAAC;AAG9F,eAAO,MAAM,qBAAqB;;CAEoB,CAAC;AAGvD,eAAO,MAAM,oBAAoB,EAAE,sBAElC,CAAC;AACF,eAAO,MAAM,sBAAsB;;CAA6C,CAAC;AAEjF,oBAAY,aAAa;IACvB,uFAAuF;IACvF,iBAAiB,sBAAsB;CACxC;AAGD,eAAO,MAAM,kBAAkB,mCAI7B,CAAC;AACH,4EAA4E"}
+{"version":3,"file":"connected-feature.example.d.ts","sourceRoot":"","sources":["../../../src/features/connected-feature.example.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAqC,KAAK,iCAAiC,EAAE,MAAM,2BAA2B,CAAC;AAItH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,8CAA8C,CAAC;AAI3F,oIAAoI;AAYpI;;;GAGG;AACH,oBAAY,kBAAkB;IAC5B,2EAA2E;IAC3E,gBAAgB,qBAAqB;CACtC;AAED,eAAO,MAAM,0BAA0B,EAAE,iCAAiC,EAMzE,CAAC;AAGF,eAAO,MAAM,qBAAqB;;;;;;;;;;;CAM2D,CAAC;AAG9F,eAAO,MAAM,qBAAqB;;CAEoB,CAAC;AAGvD,eAAO,MAAM,oBAAoB,EAAE,sBAElC,CAAC;AACF,eAAO,MAAM,sBAAsB;;CAA6C,CAAC;AAEjF,oBAAY,aAAa;IACvB,uFAAuF;IACvF,iBAAiB,sBAAsB;CACxC;AAGD,eAAO,MAAM,kBAAkB,mCAI7B,CAAC;AACH,4EAA4E"}

package/dist/esm/features/connected-feature.example.js

@@ -25,7 +25,8 @@
  * new shape up on the next `wildo fwk generate-docs`.
  */
 import { defineFeature, defineLimitFeature } from './feature-builders.shared.js';
-import { FEATURES_UNLIMITED, FeatureLimitSemantic, FeatureUnavailabilityBehavior } from './feature-definition.shared.schemas.js';
+import { FeatureLimitSemantic, FeatureUnavailabilityBehavior } from './feature-definition.shared.schemas.js';
+import { FEATURES_UNLIMITED } from './scope-features.shared.schemas.js';
 import { ResourcePrimaryScope } from '../resources/resources.shared.schemas.js';
 /** @wildo_source:part:start example.features.connected-feature.declaration facet:kind:usage-example facet:audience:app-developer */
 // One feature identifier, followed from declaration to enforcement.

package/dist/esm/features/connected-feature.example.js.map

@@ -1 +1 @@
-{"version":3,"file":"connected-feature.example.js","sourceRoot":"","sources":["../../../../src/features/connected-feature.example.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAA0C,MAAM,2BAA2B,CAAC;AACtH,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,qCAAqC,CAAC;AAC9H,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAK7E,oIAAoI;AACpI,oEAAoE;AACpE,EAAE;AACF,oEAAoE;AACpE,EAAE;AACF,aAAa;AACb,mFAAmF;AACnF,2DAA2D;AAC3D,sEAAsE;AACtE,0DAA0D;AAC1D,oCAAoC;AAEpC;;;GAGG;AACH,MAAM,CAAN,IAAY,kBAGX;AAHD,WAAY,kBAAkB;IAC5B,2EAA2E;IAC3E,2DAAqC,CAAA;AACvC,CAAC,EAHW,kBAAkB,KAAlB,kBAAkB,QAG7B;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAwC;IAC7E,aAAa,CAAC,kBAAkB,CAAC,gBAAgB,EAAE;QACjD,KAAK,EAAE,oBAAoB,CAAC,aAAa;QACzC,cAAc,EAAE,KAAK;QACrB,cAAc,EAAE,EAAE,QAAQ,EAAE,6BAA6B,CAAC,cAAc,EAAE;KAC3E,CAAC;CACH,CAAC;AAEF,mGAAmG;AACnG,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,wBAAwB,EAAE,0BAA0B;IACpD,0BAA0B,EAAE;QAC1B,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE;QACtF,cAAc,EAAE,SAAS;KAC1B;CAC0F,CAAC;AAE9F,wFAAwF;AACxF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,eAAe,EAAE,CAAC,kBAAkB,CAAC,gBAAgB,CAAC;CACF,CAAC;AAEvD,0FAA0F;AAC1F,MAAM,CAAC,MAAM,oBAAoB,GAA2B;IAC1D,QAAQ,EAAE,CAAC,kBAAkB,CAAC,gBAAgB,CAAC;CAChD,CAAC;AACF,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,CAAC;AAEjF,MAAM,CAAN,IAAY,aAGX;AAHD,WAAY,aAAa;IACvB,uFAAuF;IACvF,wDAAuC,CAAA;AACzC,CAAC,EAHW,aAAa,KAAb,aAAa,QAGxB;AAED,gGAAgG;AAChG,MAAM,CAAC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,aAAa,CAAC,iBAAiB,EAAE;IACpF,KAAK,EAAE,oBAAoB,CAAC,aAAa;IACzC,OAAO,EAAE,kBAAkB;IAC3B,aAAa,EAAE,oBAAoB,CAAC,OAAO;CAC5C,CAAC,CAAC;AACH,4EAA4E","sourcesContent":["/**\n * Tier B usage example for the `engine-product-definitions` skill: ONE feature identifier followed\n * from its declaration to the contract that sells it and the contract that enforces it.\n *\n * WHY TIER B (and not Tier A against the dogfood application):\n *\n *  1. What this teaches is the JOIN between four declarations that live in four different files —\n *     a definition, a module contribution, a product grant and an operation requirement. In a real\n *     application those are correctly far apart, so a Tier-A anchor would either span unrelated\n *     code or need four separate spans the reader has to reassemble mentally. The shape is stable;\n *     the product identity around it is not, which is exactly what Tier B is for.\n *  2. Declaring a sellable feature in the dogfood application would change what that application\n *     offers, which is a product decision rather than a documentation one.\n *\n * Imports are RELATIVE because this file lives inside `@wildo-ai/saas-models` itself and a package\n * may not import its own name — that resolves against its own `dist/` and is a known compile-storm\n * source. An application developer types the public specifier instead, which the anchored prose\n * below states explicitly, because the compiled skill is read by someone with no access to this\n * repository.\n *\n * This file is anchored but never imported by runtime code and never exported from the package\n * barrel. It is typechecked by the package's ordinary program (`include: [\"src\"]`), so a change to\n * any contract it names breaks the build here rather than silently rotting inside a shipped skill.\n * When an authoring surface below changes, edit this file directly and the compiled skill picks the\n * new shape up on the next `wildo fwk generate-docs`.\n */\n\nimport { defineFeature, defineLimitFeature, type FeatureDefinitionWithAutoRegister } from './feature-builders.shared';\nimport { FEATURES_UNLIMITED, FeatureLimitSemantic, FeatureUnavailabilityBehavior } from './feature-definition.shared.schemas';\nimport { ResourcePrimaryScope } from '../resources/resources.shared.schemas';\nimport type { RequiredFeaturesConfig } from '../resources/resources-config.shared.schemas';\nimport type { ProductDefinition } from '../billing/product-definition.shared.schemas';\nimport type { SharedSaaSModule } from '../runtime/domain-module.shared.definitions';\n\n/** @wildo_source:part:start example.features.connected-feature.declaration facet:kind:usage-example facet:audience:app-developer */\n// One feature identifier, followed from declaration to enforcement.\n//\n// In an application every symbol below comes from the package root:\n//\n//   import {\n//     defineFeature, defineLimitFeature, FEATURES_UNLIMITED, FeatureLimitSemantic,\n//     FeatureUnavailabilityBehavior, ResourcePrimaryScope,\n//     type FeatureDefinitionWithAutoRegister, type ProductDefinition,\n//     type RequiredFeaturesConfig, type SharedSaaSModule,\n//   } from '@wildo-ai/saas-models';\n\n/**\n * The identifier is a NAMED ENUM MEMBER rather than a bare string, so the one place that explains\n * what the feature means travels with every use of it.\n */\nexport enum ApplicationFeature {\n  /** Access the application's advanced reporting operation and interface. */\n  ADVANCED_REPORTS = 'ADVANCED_REPORTS',\n}\n\nexport const CUSTOM_FEATURE_DEFINITIONS: FeatureDefinitionWithAutoRegister[] = [\n  defineFeature(ApplicationFeature.ADVANCED_REPORTS, {\n    scope: ResourcePrimaryScope.ORGANIZATIONS,\n    defaultEnabled: false,\n    unavailability: { behavior: FeatureUnavailabilityBehavior.UPGRADE_PROMPT },\n  }),\n];\n\n// Merge these hooks into the EXISTING engine contribution; do not register a second engine module.\nexport const reportingContribution = {\n  customFeatureDefinitions: CUSTOM_FEATURE_DEFINITIONS,\n  customFeatureConfiguration: {\n    profiles: { preview: { features: [ApplicationFeature.ADVANCED_REPORTS], limits: {} } },\n    defaultProfile: 'preview',\n  },\n} satisfies Pick<SharedSaaSModule, 'customFeatureDefinitions' | 'customFeatureConfiguration'>;\n\n// When billing is enabled, apply this fragment to the intended existing plan or add-on.\nexport const reportingProductGrant = {\n  grantedFeatures: [ApplicationFeature.ADVANCED_REPORTS],\n} satisfies Pick<ProductDefinition, 'grantedFeatures'>;\n\n// Use this as requiredFeatures on EVERY externally reachable reporting operation variant.\nexport const reportingRequirement: RequiredFeaturesConfig = {\n  features: [ApplicationFeature.ADVANCED_REPORTS],\n};\nexport const reportingOperationGate = { requiredFeatures: reportingRequirement };\n\nexport enum BudgetFeature {\n  /** Upper bound measured by a token-consumption service, not a repository row count. */\n  MONTHLY_TOKEN_CAP = 'MONTHLY_TOKEN_CAP',\n}\n\n// Contribute this definition alongside your other definitions only when a consumer enforces it.\nexport const tokenCapDefinition = defineLimitFeature(BudgetFeature.MONTHLY_TOKEN_CAP, {\n  scope: ResourcePrimaryScope.ORGANIZATIONS,\n  default: FEATURES_UNLIMITED,\n  limitSemantic: FeatureLimitSemantic.CEILING,\n});\n/** @wildo_source:part:end example.features.connected-feature.declaration */\n"]}
+{"version":3,"file":"connected-feature.example.js","sourceRoot":"","sources":["../../../src/features/connected-feature.example.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAA0C,MAAM,2BAA2B,CAAC;AACtH,OAAO,EAAE,oBAAoB,EAAE,6BAA6B,EAAE,MAAM,qCAAqC,CAAC;AAC1G,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAK7E,oIAAoI;AACpI,oEAAoE;AACpE,EAAE;AACF,oEAAoE;AACpE,EAAE;AACF,aAAa;AACb,mFAAmF;AACnF,2DAA2D;AAC3D,sEAAsE;AACtE,0DAA0D;AAC1D,oCAAoC;AAEpC;;;GAGG;AACH,MAAM,CAAN,IAAY,kBAGX;AAHD,WAAY,kBAAkB;IAC5B,2EAA2E;IAC3E,2DAAqC,CAAA;AACvC,CAAC,EAHW,kBAAkB,KAAlB,kBAAkB,QAG7B;AAED,MAAM,CAAC,MAAM,0BAA0B,GAAwC;IAC7E,aAAa,CAAC,kBAAkB,CAAC,gBAAgB,EAAE;QACjD,KAAK,EAAE,oBAAoB,CAAC,aAAa;QACzC,cAAc,EAAE,KAAK;QACrB,cAAc,EAAE,EAAE,QAAQ,EAAE,6BAA6B,CAAC,cAAc,EAAE;KAC3E,CAAC;CACH,CAAC;AAEF,mGAAmG;AACnG,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,wBAAwB,EAAE,0BAA0B;IACpD,0BAA0B,EAAE;QAC1B,QAAQ,EAAE,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,kBAAkB,CAAC,gBAAgB,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE;QACtF,cAAc,EAAE,SAAS;KAC1B;CAC0F,CAAC;AAE9F,wFAAwF;AACxF,MAAM,CAAC,MAAM,qBAAqB,GAAG;IACnC,eAAe,EAAE,CAAC,kBAAkB,CAAC,gBAAgB,CAAC;CACF,CAAC;AAEvD,0FAA0F;AAC1F,MAAM,CAAC,MAAM,oBAAoB,GAA2B;IAC1D,QAAQ,EAAE,CAAC,kBAAkB,CAAC,gBAAgB,CAAC;CAChD,CAAC;AACF,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,CAAC;AAEjF,MAAM,CAAN,IAAY,aAGX;AAHD,WAAY,aAAa;IACvB,uFAAuF;IACvF,wDAAuC,CAAA;AACzC,CAAC,EAHW,aAAa,KAAb,aAAa,QAGxB;AAED,gGAAgG;AAChG,MAAM,CAAC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,aAAa,CAAC,iBAAiB,EAAE;IACpF,KAAK,EAAE,oBAAoB,CAAC,aAAa;IACzC,OAAO,EAAE,kBAAkB;IAC3B,aAAa,EAAE,oBAAoB,CAAC,OAAO;CAC5C,CAAC,CAAC;AACH,4EAA4E","sourcesContent":["/**\n * Tier B usage example for the `engine-product-definitions` skill: ONE feature identifier followed\n * from its declaration to the contract that sells it and the contract that enforces it.\n *\n * WHY TIER B (and not Tier A against the dogfood application):\n *\n *  1. What this teaches is the JOIN between four declarations that live in four different files —\n *     a definition, a module contribution, a product grant and an operation requirement. In a real\n *     application those are correctly far apart, so a Tier-A anchor would either span unrelated\n *     code or need four separate spans the reader has to reassemble mentally. The shape is stable;\n *     the product identity around it is not, which is exactly what Tier B is for.\n *  2. Declaring a sellable feature in the dogfood application would change what that application\n *     offers, which is a product decision rather than a documentation one.\n *\n * Imports are RELATIVE because this file lives inside `@wildo-ai/saas-models` itself and a package\n * may not import its own name — that resolves against its own `dist/` and is a known compile-storm\n * source. An application developer types the public specifier instead, which the anchored prose\n * below states explicitly, because the compiled skill is read by someone with no access to this\n * repository.\n *\n * This file is anchored but never imported by runtime code and never exported from the package\n * barrel. It is typechecked by the package's ordinary program (`include: [\"src\"]`), so a change to\n * any contract it names breaks the build here rather than silently rotting inside a shipped skill.\n * When an authoring surface below changes, edit this file directly and the compiled skill picks the\n * new shape up on the next `wildo fwk generate-docs`.\n */\n\nimport { defineFeature, defineLimitFeature, type FeatureDefinitionWithAutoRegister } from './feature-builders.shared';\nimport { FeatureLimitSemantic, FeatureUnavailabilityBehavior } from './feature-definition.shared.schemas';\nimport { FEATURES_UNLIMITED } from './scope-features.shared.schemas';\nimport { ResourcePrimaryScope } from '../resources/resources.shared.schemas';\nimport type { RequiredFeaturesConfig } from '../resources/resources-config.shared.schemas';\nimport type { ProductDefinition } from '../billing/product-definition.shared.schemas';\nimport type { SharedSaaSModule } from '../runtime/domain-module.shared.definitions';\n\n/** @wildo_source:part:start example.features.connected-feature.declaration facet:kind:usage-example facet:audience:app-developer */\n// One feature identifier, followed from declaration to enforcement.\n//\n// In an application every symbol below comes from the package root:\n//\n//   import {\n//     defineFeature, defineLimitFeature, FEATURES_UNLIMITED, FeatureLimitSemantic,\n//     FeatureUnavailabilityBehavior, ResourcePrimaryScope,\n//     type FeatureDefinitionWithAutoRegister, type ProductDefinition,\n//     type RequiredFeaturesConfig, type SharedSaaSModule,\n//   } from '@wildo-ai/saas-models';\n\n/**\n * The identifier is a NAMED ENUM MEMBER rather than a bare string, so the one place that explains\n * what the feature means travels with every use of it.\n */\nexport enum ApplicationFeature {\n  /** Access the application's advanced reporting operation and interface. */\n  ADVANCED_REPORTS = 'ADVANCED_REPORTS',\n}\n\nexport const CUSTOM_FEATURE_DEFINITIONS: FeatureDefinitionWithAutoRegister[] = [\n  defineFeature(ApplicationFeature.ADVANCED_REPORTS, {\n    scope: ResourcePrimaryScope.ORGANIZATIONS,\n    defaultEnabled: false,\n    unavailability: { behavior: FeatureUnavailabilityBehavior.UPGRADE_PROMPT },\n  }),\n];\n\n// Merge these hooks into the EXISTING engine contribution; do not register a second engine module.\nexport const reportingContribution = {\n  customFeatureDefinitions: CUSTOM_FEATURE_DEFINITIONS,\n  customFeatureConfiguration: {\n    profiles: { preview: { features: [ApplicationFeature.ADVANCED_REPORTS], limits: {} } },\n    defaultProfile: 'preview',\n  },\n} satisfies Pick<SharedSaaSModule, 'customFeatureDefinitions' | 'customFeatureConfiguration'>;\n\n// When billing is enabled, apply this fragment to the intended existing plan or add-on.\nexport const reportingProductGrant = {\n  grantedFeatures: [ApplicationFeature.ADVANCED_REPORTS],\n} satisfies Pick<ProductDefinition, 'grantedFeatures'>;\n\n// Use this as requiredFeatures on EVERY externally reachable reporting operation variant.\nexport const reportingRequirement: RequiredFeaturesConfig = {\n  features: [ApplicationFeature.ADVANCED_REPORTS],\n};\nexport const reportingOperationGate = { requiredFeatures: reportingRequirement };\n\nexport enum BudgetFeature {\n  /** Upper bound measured by a token-consumption service, not a repository row count. */\n  MONTHLY_TOKEN_CAP = 'MONTHLY_TOKEN_CAP',\n}\n\n// Contribute this definition alongside your other definitions only when a consumer enforces it.\nexport const tokenCapDefinition = defineLimitFeature(BudgetFeature.MONTHLY_TOKEN_CAP, {\n  scope: ResourcePrimaryScope.ORGANIZATIONS,\n  default: FEATURES_UNLIMITED,\n  limitSemantic: FeatureLimitSemantic.CEILING,\n});\n/** @wildo_source:part:end example.features.connected-feature.declaration */\n"]}

package/dist/esm/features/core-feature-definitions.shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core-feature-definitions.shared.d.ts","sourceRoot":"","sources":["../../../../src/features/core-feature-definitions.shared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAMH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAE7E;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,2BAA2B,4BAA4B,CAAC;AAErE;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,iBAAiB,EA8HvD,CAAC"}
+{"version":3,"file":"core-feature-definitions.shared.d.ts","sourceRoot":"","sources":["../../../src/features/core-feature-definitions.shared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAOH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,qCAAqC,CAAC;AAE7E;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,2BAA2B,4BAA4B,CAAC;AAErE;;;GAGG;AACH,eAAO,MAAM,wBAAwB,EAAE,iBAAiB,EA8HvD,CAAC"}

package/dist/esm/features/core-feature-definitions.shared.js

@@ -13,7 +13,8 @@
 import { CoreFeature } from '../organizations/organization-features.shared.schemas.js';
 import { CoreResourceType } from '../resources/resources.shared.core.definitions.js';
 import { ResourcePrimaryScope } from '../resources/resources.shared.schemas.js';
-import { FEATURES_UNLIMITED, FeatureLimitSemantic, FeatureValueType } from './feature-definition.shared.schemas.js';
+import { FeatureLimitSemantic, FeatureValueType } from './feature-definition.shared.schemas.js';
+import { FEATURES_UNLIMITED } from './scope-features.shared.schemas.js';
 /**
  * LIMIT-feature identifier for the inbound Agent2Agent (A2A) LLM **token budget**: how many LLM
  * tokens a tenant's A2A agent turns may consume per billing period. Grant it from a billing plan

package/dist/esm/features/core-feature-definitions.shared.js.map

@@ -1 +1 @@
-{"version":3,"file":"core-feature-definitions.shared.js","sourceRoot":"","sources":["../../../../src/features/core-feature-definitions.shared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,uDAAuD,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAGjH;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,yBAAyB,CAAC;AAErE;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAwB;IAC3D,4CAA4C;IAC5C;QACE,UAAU,EAAE,WAAW,CAAC,eAAe;QACvC,SAAS,EAAE,gBAAgB,CAAC,OAAO;QACnC,gBAAgB,EAAE,CAAC,oBAAoB,CAAC,aAAa,CAAC;QACtD,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,KAAK;KACpB;IACD;QACE,UAAU,EAAE,WAAW,CAAC,kBAAkB;QAC1C,SAAS,EAAE,gBAAgB,CAAC,OAAO;QACnC,gBAAgB,EAAE,CAAC,oBAAoB,CAAC,aAAa,CAAC;QACtD,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,KAAK;KACpB;IACD;QACE,UAAU,EAAE,WAAW,CAAC,cAAc;QACtC,SAAS,EAAE,gBAAgB,CAAC,OAAO;QACnC,gBAAgB,EAAE,CAAC,oBAAoB,CAAC,aAAa,CAAC;QACtD,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,KAAK;KACpB;IACD;QACE,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,SAAS,EAAE,gBAAgB,CAAC,OAAO;QACnC,gBAAgB,EAAE,CAAC,oBAAoB,CAAC,aAAa,CAAC;QACtD,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,KAAK;KACpB;IACD;QACE,mEAAmE;QACnE,uEAAuE;QACvE,sEAAsE;QACtE,wCAAwC;QACxC,UAAU,EAAE,WAAW,CAAC,qBAAqB;QAC7C,SAAS,EAAE,gBAAgB,CAAC,OAAO;QACnC,gBAAgB,EAAE,CAAC,oBAAoB,CAAC,aAAa,CAAC;QACtD,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,KAAK;KACpB;IACD;QACE,oEAAoE;QACpE,qEAAqE;QACrE,oDAAoD;QACpD,UAAU,EAAE,WAAW,CAAC,sBAAsB;QAC9C,SAAS,EAAE,gBAAgB,CAAC,OAAO;QACnC,gBAAgB,EAAE,CAAC,oBAAoB,CAAC,aAAa,CAAC;QACtD,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,KAAK;KACpB;IACD;QACE,oEAAoE;QACpE,qEAAqE;QACrE,mFAAmF;QACnF,iEAAiE;QACjE,UAAU,EAAE,WAAW,CAAC,oBAAoB;QAC5C,SAAS,EAAE,gBAAgB,CAAC,OAAO;QACnC,gBAAgB,EAAE;YAChB,oBAAoB,CAAC,WAAW;YAChC,oBAAoB,CAAC,aAAa;SACnC;QACD,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,KAAK;QACnB,aAAa,EAAE,IAAI;KACpB;IACD,+CAA+C;IAC/C,EAAE;IACF,4FAA4F;IAC5F,2FAA2F;IAC3F,kGAAkG;IAClG,kGAAkG;IAClG,kGAAkG;IAClG;QACE,UAAU,EAAE,aAAa;QACzB,SAAS,EAAE,gBAAgB,CAAC,KAAK;QACjC,gBAAgB,EAAE,CAAC,oBAAoB,CAAC,aAAa,CAAC;QACtD,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,CAAC;QACf,QAAQ,EAAE,EAAE,YAAY,EAAE,gBAAgB,CAAC,oBAAoB,EAAE;KAClE;IACD;QACE,UAAU,EAAE,cAAc;QAC1B,SAAS,EAAE,gBAAgB,CAAC,KAAK;QACjC,gBAAgB,EAAE,CAAC,oBAAoB,CAAC,aAAa,CAAC;QACtD,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,CAAC;QACf,QAAQ,EAAE,EAAE,YAAY,EAAE,gBAAgB,CAAC,YAAY,EAAE;KAC1D;IACD;QACE,0EAA0E;QAC1E,EAAE;QACF,0FAA0F;QAC1F,2DAA2D;QAC3D,EAAE;QACF,0FAA0F;QAC1F,+FAA+F;QAC/F,6FAA6F;QAC7F,8FAA8F;QAC9F,mDAAmD;QACnD,EAAE;QACF,4FAA4F;QAC5F,gGAAgG;QAChG,4FAA4F;QAC5F,6FAA6F;QAC7F,EAAE;QACF,sFAAsF;QACtF,+FAA+F;QAC/F,6FAA6F;QAC7F,+EAA+E;QAC/E,UAAU,EAAE,2BAA2B;QACvC,SAAS,EAAE,gBAAgB,CAAC,KAAK;QACjC,aAAa,EAAE,oBAAoB,CAAC,OAAO;QAC3C,wFAAwF;QACxF,sFAAsF;QACtF,6FAA6F;QAC7F,4FAA4F;QAC5F,6FAA6F;QAC7F,gBAAgB,EAAE;YAChB,oBAAoB,CAAC,SAAS;YAC9B,oBAAoB,CAAC,aAAa;YAClC,oBAAoB,CAAC,WAAW;SACjC;QACD,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,kBAAkB;KACjC;CACF,CAAC","sourcesContent":["/**\n * Framework Core Feature Definitions\n *\n * These are business features managed by the engine (not tied to external providers).\n * Enabled by config profiles, billing products, or manual admin overrides.\n *\n * Note: PRIORITY_SUPPORT, CUSTOM_INTEGRATIONS, ADVANCED_PERMISSIONS from the old CoreOrganizationFeature\n * enum were dropped:\n * - PRIORITY_SUPPORT → modeled as a custom app feature (not engine-level)\n * - CUSTOM_INTEGRATIONS → modeled by provider declarations, not entitlement features\n * - ADVANCED_PERMISSIONS → handled by RBAC system, not feature gating\n */\n\nimport { CoreFeature } from '../organizations/organization-features.shared.schemas';\nimport { CoreResourceType } from '../resources/resources.shared.core.definitions';\nimport { ResourcePrimaryScope } from '../resources/resources.shared.schemas';\nimport { FEATURES_UNLIMITED, FeatureLimitSemantic, FeatureValueType } from './feature-definition.shared.schemas';\nimport type { FeatureDefinition } from './feature-definition.shared.schemas';\n\n/**\n * LIMIT-feature identifier for the inbound Agent2Agent (A2A) LLM **token budget**: how many LLM\n * tokens a tenant's A2A agent turns may consume per billing period. Grant it from a billing plan\n * (a `LimitGrant` on the product) and the A2A transport enforces it fail-closed, denying further\n * turns with HTTP 402 once exhausted.\n *\n * The single named source for this identifier — the backend budget service resolves the allowance\n * by this exact key, so definition and enforcement cannot drift.\n *\n * Measured in TOKENS, not currency: the framework's canonical provider-usage pricing registry is\n * deliberately not consulted by this A2A entitlement gate. The gate caps the transport's directly\n * metered token consumption; monetary reservation and settlement belong to the separate Work Cycle\n * budget authority.\n */\nexport const A2A_TOKEN_BUDGET_FEATURE_ID = 'a2a.llm.tokensPerPeriod';\n\n/**\n * Core feature definitions: every CoreFeature value + core LIMIT features.\n * Merged with custom app feature definitions at startup.\n */\nexport const CORE_FEATURE_DEFINITIONS: FeatureDefinition[] = [\n  // ─── BOOLEAN features (on/off toggles) ───\n  {\n    identifier: CoreFeature.CUSTOM_BRANDING,\n    valueType: FeatureValueType.BOOLEAN,\n    applicableScopes: [ResourcePrimaryScope.ORGANIZATIONS],\n    dependencies: [],\n    defaultValue: false,\n  },\n  {\n    identifier: CoreFeature.ADVANCED_ANALYTICS,\n    valueType: FeatureValueType.BOOLEAN,\n    applicableScopes: [ResourcePrimaryScope.ORGANIZATIONS],\n    dependencies: [],\n    defaultValue: false,\n  },\n  {\n    identifier: CoreFeature.SINGLE_SIGN_ON,\n    valueType: FeatureValueType.BOOLEAN,\n    applicableScopes: [ResourcePrimaryScope.ORGANIZATIONS],\n    dependencies: [],\n    defaultValue: false,\n  },\n  {\n    identifier: CoreFeature.AUDIT_LOGS,\n    valueType: FeatureValueType.BOOLEAN,\n    applicableScopes: [ResourcePrimaryScope.ORGANIZATIONS],\n    dependencies: [],\n    defaultValue: false,\n  },\n  {\n    // Outbound delivery of audit-trail events to a tenant-owned SIEM /\n    // compliance store. Depends on `AUDIT_LOGS` for the read-side surface,\n    // but the gate is independent so admins can enable read-only auditing\n    // without paying for outbound delivery.\n    identifier: CoreFeature.SECURITY_EVENT_EXPORT,\n    valueType: FeatureValueType.BOOLEAN,\n    applicableScopes: [ResourcePrimaryScope.ORGANIZATIONS],\n    dependencies: [],\n    defaultValue: false,\n  },\n  {\n    // SCIM-driven user/group provisioning. Typically procured alongside\n    // `SINGLE_SIGN_ON` but each feature is an independent gate so an org\n    // can run SSO without provisioning (or vice versa).\n    identifier: CoreFeature.DIRECTORY_PROVISIONING,\n    valueType: FeatureValueType.BOOLEAN,\n    applicableScopes: [ResourcePrimaryScope.ORGANIZATIONS],\n    dependencies: [],\n    defaultValue: false,\n  },\n  {\n    // M2M_WEBHOOK_DELIVERY is scope-bound: enabling it at the app level\n    // does NOT auto-enable it for every organization. Each scope (app or\n    // organization) opts in independently. See `FeatureDefinitionSchema.scopeBoundary`\n    // and `FeatureResolutionBackendService.isFeatureEnabledAtScope`.\n    identifier: CoreFeature.M2M_WEBHOOK_DELIVERY,\n    valueType: FeatureValueType.BOOLEAN,\n    applicableScopes: [\n      ResourcePrimaryScope.APPLICATION,\n      ResourcePrimaryScope.ORGANIZATIONS,\n    ],\n    dependencies: [],\n    defaultValue: false,\n    scopeBoundary: true,\n  },\n  // ─── LIMIT features with counting configs ───\n  //\n  // NOT auto-checked. `registerCoreFeatures` registers these definitions and stops there; the\n  // auto-registration of a `limitChecks` entry runs only in `registerCustomFeatures`, for an\n  // application-declared limit built with `countResource`. No operation declares a check for either\n  // of the two below, so `counting` names the resource that WOULD be counted and nothing counts it.\n  // An application that wants the cap enforced declares the check on the counted resource's CREATE.\n  {\n    identifier: 'MAX_MEMBERS',\n    valueType: FeatureValueType.LIMIT,\n    applicableScopes: [ResourcePrimaryScope.ORGANIZATIONS],\n    dependencies: [],\n    defaultValue: 5,\n    counting: { resourceType: CoreResourceType.ORGANIZATION_MEMBERS },\n  },\n  {\n    identifier: 'MAX_API_KEYS',\n    valueType: FeatureValueType.LIMIT,\n    applicableScopes: [ResourcePrimaryScope.ORGANIZATIONS],\n    dependencies: [],\n    defaultValue: 2,\n    counting: { resourceType: CoreResourceType.ORG_API_KEYS },\n  },\n  {\n    // Inbound A2A LLM token budget — see {@link A2A_TOKEN_BUDGET_FEATURE_ID}.\n    //\n    // Applies to all THREE A2A owner scopes: a user-delegated turn is owned by the delegating\n    // user, a machine turn by its organization or application.\n    //\n    // NO `counting` config, deliberately: consumption here is a SUM OF TOKENS, not a count of\n    // resource rows, so the gate's row-counting strategy cannot measure it. The A2A budget service\n    // owns measurement (accumulating into the `a2aTokenBudgetState` singleton) and resolves this\n    // limit directly — which is exactly the \"limit checking done in custom service code\" case the\n    // `counting` field documents as its absent-branch.\n    //\n    // ⚠️ `limitSemantic: CEILING` is LOAD-BEARING — without it this feature is inert. Under the\n    // default FLOOR semantic the merge is most-permissive-wins, so the `FEATURES_UNLIMITED` default\n    // below would absorb every finite plan grant (`max(-1, 10_000) = -1`) and no cap could ever\n    // engage. CEILING inverts it: `-1` means \"no ceiling\" and YIELDS to the plan's finite grant.\n    //\n    // With CEILING, `defaultValue: FEATURES_UNLIMITED` is both correct and required: this\n    // definition is registered for EVERY application, so a finite default would silently cap every\n    // tenant that never opted into A2A budgeting (and `0` would deny every A2A turn everywhere).\n    // Budgeting stays opt-in — a real cap arrives only from a plan's `LimitGrant`.\n    identifier: A2A_TOKEN_BUDGET_FEATURE_ID,\n    valueType: FeatureValueType.LIMIT,\n    limitSemantic: FeatureLimitSemantic.CEILING,\n    // All three A2A owner scopes are declared because all three can OWN a turn. ⚠️ But only\n    // ORGANIZATIONS and USER_SELF have a BILLING rail (`BILLING_SCOPE_TO_VARIANTS` has no\n    // application variant), so an APPLICATION-scope cap cannot arrive from a plan `LimitGrant` —\n    // it must come from a features profile or a manual `limitOverrides`. Declaring the scope is\n    // still correct: without it an app-machine principal could never be capped by ANY mechanism.\n    applicableScopes: [\n      ResourcePrimaryScope.USER_SELF,\n      ResourcePrimaryScope.ORGANIZATIONS,\n      ResourcePrimaryScope.APPLICATION,\n    ],\n    dependencies: [],\n    defaultValue: FEATURES_UNLIMITED,\n  },\n];\n"]}
+{"version":3,"file":"core-feature-definitions.shared.js","sourceRoot":"","sources":["../../../src/features/core-feature-definitions.shared.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,uDAAuD,CAAC;AACpF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gDAAgD,CAAC;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,qCAAqC,CAAC;AAC7F,OAAO,EAAE,kBAAkB,EAAE,MAAM,iCAAiC,CAAC;AAGrE;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,yBAAyB,CAAC;AAErE;;;GAGG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAwB;IAC3D,4CAA4C;IAC5C;QACE,UAAU,EAAE,WAAW,CAAC,eAAe;QACvC,SAAS,EAAE,gBAAgB,CAAC,OAAO;QACnC,gBAAgB,EAAE,CAAC,oBAAoB,CAAC,aAAa,CAAC;QACtD,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,KAAK;KACpB;IACD;QACE,UAAU,EAAE,WAAW,CAAC,kBAAkB;QAC1C,SAAS,EAAE,gBAAgB,CAAC,OAAO;QACnC,gBAAgB,EAAE,CAAC,oBAAoB,CAAC,aAAa,CAAC;QACtD,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,KAAK;KACpB;IACD;QACE,UAAU,EAAE,WAAW,CAAC,cAAc;QACtC,SAAS,EAAE,gBAAgB,CAAC,OAAO;QACnC,gBAAgB,EAAE,CAAC,oBAAoB,CAAC,aAAa,CAAC;QACtD,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,KAAK;KACpB;IACD;QACE,UAAU,EAAE,WAAW,CAAC,UAAU;QAClC,SAAS,EAAE,gBAAgB,CAAC,OAAO;QACnC,gBAAgB,EAAE,CAAC,oBAAoB,CAAC,aAAa,CAAC;QACtD,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,KAAK;KACpB;IACD;QACE,mEAAmE;QACnE,uEAAuE;QACvE,sEAAsE;QACtE,wCAAwC;QACxC,UAAU,EAAE,WAAW,CAAC,qBAAqB;QAC7C,SAAS,EAAE,gBAAgB,CAAC,OAAO;QACnC,gBAAgB,EAAE,CAAC,oBAAoB,CAAC,aAAa,CAAC;QACtD,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,KAAK;KACpB;IACD;QACE,oEAAoE;QACpE,qEAAqE;QACrE,oDAAoD;QACpD,UAAU,EAAE,WAAW,CAAC,sBAAsB;QAC9C,SAAS,EAAE,gBAAgB,CAAC,OAAO;QACnC,gBAAgB,EAAE,CAAC,oBAAoB,CAAC,aAAa,CAAC;QACtD,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,KAAK;KACpB;IACD;QACE,oEAAoE;QACpE,qEAAqE;QACrE,mFAAmF;QACnF,iEAAiE;QACjE,UAAU,EAAE,WAAW,CAAC,oBAAoB;QAC5C,SAAS,EAAE,gBAAgB,CAAC,OAAO;QACnC,gBAAgB,EAAE;YAChB,oBAAoB,CAAC,WAAW;YAChC,oBAAoB,CAAC,aAAa;SACnC;QACD,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,KAAK;QACnB,aAAa,EAAE,IAAI;KACpB;IACD,+CAA+C;IAC/C,EAAE;IACF,4FAA4F;IAC5F,2FAA2F;IAC3F,kGAAkG;IAClG,kGAAkG;IAClG,kGAAkG;IAClG;QACE,UAAU,EAAE,aAAa;QACzB,SAAS,EAAE,gBAAgB,CAAC,KAAK;QACjC,gBAAgB,EAAE,CAAC,oBAAoB,CAAC,aAAa,CAAC;QACtD,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,CAAC;QACf,QAAQ,EAAE,EAAE,YAAY,EAAE,gBAAgB,CAAC,oBAAoB,EAAE;KAClE;IACD;QACE,UAAU,EAAE,cAAc;QAC1B,SAAS,EAAE,gBAAgB,CAAC,KAAK;QACjC,gBAAgB,EAAE,CAAC,oBAAoB,CAAC,aAAa,CAAC;QACtD,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,CAAC;QACf,QAAQ,EAAE,EAAE,YAAY,EAAE,gBAAgB,CAAC,YAAY,EAAE;KAC1D;IACD;QACE,0EAA0E;QAC1E,EAAE;QACF,0FAA0F;QAC1F,2DAA2D;QAC3D,EAAE;QACF,0FAA0F;QAC1F,+FAA+F;QAC/F,6FAA6F;QAC7F,8FAA8F;QAC9F,mDAAmD;QACnD,EAAE;QACF,4FAA4F;QAC5F,gGAAgG;QAChG,4FAA4F;QAC5F,6FAA6F;QAC7F,EAAE;QACF,sFAAsF;QACtF,+FAA+F;QAC/F,6FAA6F;QAC7F,+EAA+E;QAC/E,UAAU,EAAE,2BAA2B;QACvC,SAAS,EAAE,gBAAgB,CAAC,KAAK;QACjC,aAAa,EAAE,oBAAoB,CAAC,OAAO;QAC3C,wFAAwF;QACxF,sFAAsF;QACtF,6FAA6F;QAC7F,4FAA4F;QAC5F,6FAA6F;QAC7F,gBAAgB,EAAE;YAChB,oBAAoB,CAAC,SAAS;YAC9B,oBAAoB,CAAC,aAAa;YAClC,oBAAoB,CAAC,WAAW;SACjC;QACD,YAAY,EAAE,EAAE;QAChB,YAAY,EAAE,kBAAkB;KACjC;CACF,CAAC","sourcesContent":["/**\n * Framework Core Feature Definitions\n *\n * These are business features managed by the engine (not tied to external providers).\n * Enabled by config profiles, billing products, or manual admin overrides.\n *\n * Note: PRIORITY_SUPPORT, CUSTOM_INTEGRATIONS, ADVANCED_PERMISSIONS from the old CoreOrganizationFeature\n * enum were dropped:\n * - PRIORITY_SUPPORT → modeled as a custom app feature (not engine-level)\n * - CUSTOM_INTEGRATIONS → modeled by provider declarations, not entitlement features\n * - ADVANCED_PERMISSIONS → handled by RBAC system, not feature gating\n */\n\nimport { CoreFeature } from '../organizations/organization-features.shared.schemas';\nimport { CoreResourceType } from '../resources/resources.shared.core.definitions';\nimport { ResourcePrimaryScope } from '../resources/resources.shared.schemas';\nimport { FeatureLimitSemantic, FeatureValueType } from './feature-definition.shared.schemas';\nimport { FEATURES_UNLIMITED } from './scope-features.shared.schemas';\nimport type { FeatureDefinition } from './feature-definition.shared.schemas';\n\n/**\n * LIMIT-feature identifier for the inbound Agent2Agent (A2A) LLM **token budget**: how many LLM\n * tokens a tenant's A2A agent turns may consume per billing period. Grant it from a billing plan\n * (a `LimitGrant` on the product) and the A2A transport enforces it fail-closed, denying further\n * turns with HTTP 402 once exhausted.\n *\n * The single named source for this identifier — the backend budget service resolves the allowance\n * by this exact key, so definition and enforcement cannot drift.\n *\n * Measured in TOKENS, not currency: the framework's canonical provider-usage pricing registry is\n * deliberately not consulted by this A2A entitlement gate. The gate caps the transport's directly\n * metered token consumption; monetary reservation and settlement belong to the separate Work Cycle\n * budget authority.\n */\nexport const A2A_TOKEN_BUDGET_FEATURE_ID = 'a2a.llm.tokensPerPeriod';\n\n/**\n * Core feature definitions: every CoreFeature value + core LIMIT features.\n * Merged with custom app feature definitions at startup.\n */\nexport const CORE_FEATURE_DEFINITIONS: FeatureDefinition[] = [\n  // ─── BOOLEAN features (on/off toggles) ───\n  {\n    identifier: CoreFeature.CUSTOM_BRANDING,\n    valueType: FeatureValueType.BOOLEAN,\n    applicableScopes: [ResourcePrimaryScope.ORGANIZATIONS],\n    dependencies: [],\n    defaultValue: false,\n  },\n  {\n    identifier: CoreFeature.ADVANCED_ANALYTICS,\n    valueType: FeatureValueType.BOOLEAN,\n    applicableScopes: [ResourcePrimaryScope.ORGANIZATIONS],\n    dependencies: [],\n    defaultValue: false,\n  },\n  {\n    identifier: CoreFeature.SINGLE_SIGN_ON,\n    valueType: FeatureValueType.BOOLEAN,\n    applicableScopes: [ResourcePrimaryScope.ORGANIZATIONS],\n    dependencies: [],\n    defaultValue: false,\n  },\n  {\n    identifier: CoreFeature.AUDIT_LOGS,\n    valueType: FeatureValueType.BOOLEAN,\n    applicableScopes: [ResourcePrimaryScope.ORGANIZATIONS],\n    dependencies: [],\n    defaultValue: false,\n  },\n  {\n    // Outbound delivery of audit-trail events to a tenant-owned SIEM /\n    // compliance store. Depends on `AUDIT_LOGS` for the read-side surface,\n    // but the gate is independent so admins can enable read-only auditing\n    // without paying for outbound delivery.\n    identifier: CoreFeature.SECURITY_EVENT_EXPORT,\n    valueType: FeatureValueType.BOOLEAN,\n    applicableScopes: [ResourcePrimaryScope.ORGANIZATIONS],\n    dependencies: [],\n    defaultValue: false,\n  },\n  {\n    // SCIM-driven user/group provisioning. Typically procured alongside\n    // `SINGLE_SIGN_ON` but each feature is an independent gate so an org\n    // can run SSO without provisioning (or vice versa).\n    identifier: CoreFeature.DIRECTORY_PROVISIONING,\n    valueType: FeatureValueType.BOOLEAN,\n    applicableScopes: [ResourcePrimaryScope.ORGANIZATIONS],\n    dependencies: [],\n    defaultValue: false,\n  },\n  {\n    // M2M_WEBHOOK_DELIVERY is scope-bound: enabling it at the app level\n    // does NOT auto-enable it for every organization. Each scope (app or\n    // organization) opts in independently. See `FeatureDefinitionSchema.scopeBoundary`\n    // and `FeatureResolutionBackendService.isFeatureEnabledAtScope`.\n    identifier: CoreFeature.M2M_WEBHOOK_DELIVERY,\n    valueType: FeatureValueType.BOOLEAN,\n    applicableScopes: [\n      ResourcePrimaryScope.APPLICATION,\n      ResourcePrimaryScope.ORGANIZATIONS,\n    ],\n    dependencies: [],\n    defaultValue: false,\n    scopeBoundary: true,\n  },\n  // ─── LIMIT features with counting configs ───\n  //\n  // NOT auto-checked. `registerCoreFeatures` registers these definitions and stops there; the\n  // auto-registration of a `limitChecks` entry runs only in `registerCustomFeatures`, for an\n  // application-declared limit built with `countResource`. No operation declares a check for either\n  // of the two below, so `counting` names the resource that WOULD be counted and nothing counts it.\n  // An application that wants the cap enforced declares the check on the counted resource's CREATE.\n  {\n    identifier: 'MAX_MEMBERS',\n    valueType: FeatureValueType.LIMIT,\n    applicableScopes: [ResourcePrimaryScope.ORGANIZATIONS],\n    dependencies: [],\n    defaultValue: 5,\n    counting: { resourceType: CoreResourceType.ORGANIZATION_MEMBERS },\n  },\n  {\n    identifier: 'MAX_API_KEYS',\n    valueType: FeatureValueType.LIMIT,\n    applicableScopes: [ResourcePrimaryScope.ORGANIZATIONS],\n    dependencies: [],\n    defaultValue: 2,\n    counting: { resourceType: CoreResourceType.ORG_API_KEYS },\n  },\n  {\n    // Inbound A2A LLM token budget — see {@link A2A_TOKEN_BUDGET_FEATURE_ID}.\n    //\n    // Applies to all THREE A2A owner scopes: a user-delegated turn is owned by the delegating\n    // user, a machine turn by its organization or application.\n    //\n    // NO `counting` config, deliberately: consumption here is a SUM OF TOKENS, not a count of\n    // resource rows, so the gate's row-counting strategy cannot measure it. The A2A budget service\n    // owns measurement (accumulating into the `a2aTokenBudgetState` singleton) and resolves this\n    // limit directly — which is exactly the \"limit checking done in custom service code\" case the\n    // `counting` field documents as its absent-branch.\n    //\n    // ⚠️ `limitSemantic: CEILING` is LOAD-BEARING — without it this feature is inert. Under the\n    // default FLOOR semantic the merge is most-permissive-wins, so the `FEATURES_UNLIMITED` default\n    // below would absorb every finite plan grant (`max(-1, 10_000) = -1`) and no cap could ever\n    // engage. CEILING inverts it: `-1` means \"no ceiling\" and YIELDS to the plan's finite grant.\n    //\n    // With CEILING, `defaultValue: FEATURES_UNLIMITED` is both correct and required: this\n    // definition is registered for EVERY application, so a finite default would silently cap every\n    // tenant that never opted into A2A budgeting (and `0` would deny every A2A turn everywhere).\n    // Budgeting stays opt-in — a real cap arrives only from a plan's `LimitGrant`.\n    identifier: A2A_TOKEN_BUDGET_FEATURE_ID,\n    valueType: FeatureValueType.LIMIT,\n    limitSemantic: FeatureLimitSemantic.CEILING,\n    // All three A2A owner scopes are declared because all three can OWN a turn. ⚠️ But only\n    // ORGANIZATIONS and USER_SELF have a BILLING rail (`BILLING_SCOPE_TO_VARIANTS` has no\n    // application variant), so an APPLICATION-scope cap cannot arrive from a plan `LimitGrant` —\n    // it must come from a features profile or a manual `limitOverrides`. Declaring the scope is\n    // still correct: without it an app-machine principal could never be capped by ANY mechanism.\n    applicableScopes: [\n      ResourcePrimaryScope.USER_SELF,\n      ResourcePrimaryScope.ORGANIZATIONS,\n      ResourcePrimaryScope.APPLICATION,\n    ],\n    dependencies: [],\n    defaultValue: FEATURES_UNLIMITED,\n  },\n];\n"]}

package/dist/esm/features/feature-builders.shared.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"feature-builders.shared.d.ts","sourceRoot":"","sources":["../../../../src/features/feature-builders.shared.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EAGL,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,KAAK,6BAA6B,EAClC,KAAK,mBAAmB,EACzB,MAAM,qCAAqC,CAAC;AAM7C;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,eAA0C,CAAC;AAEjF;;;GAGG;AACH,MAAM,MAAM,iCAAiC,GAAG,iBAAiB,GAAG;IAClE,CAAC,yBAAyB,CAAC,CAAC,EAAE;QAC5B,oFAAoF;QACpF,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;CACH,CAAC;AAcF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,wBAAgB,aAAa,CAC3B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE;IACP,KAAK,EAAE,oBAAoB,GAAG,oBAAoB,EAAE,CAAC;IACrD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,6BAA6B,CAAC;CAChD,GACA,iBAAiB,CASnB;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE;IACP,KAAK,EAAE,oBAAoB,GAAG,oBAAoB,EAAE,CAAC;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,kFAAkF;IAClF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,wFAAwF;IACxF,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,6BAA6B,CAAC;CAChD,GACA,iCAAiC,CA0BnC;AACD,sEAAsE"}
+{"version":3,"file":"feature-builders.shared.d.ts","sourceRoot":"","sources":["../../../src/features/feature-builders.shared.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAE7E,OAAO,EAEL,oBAAoB,EACpB,KAAK,iBAAiB,EACtB,KAAK,6BAA6B,EAClC,KAAK,mBAAmB,EACzB,MAAM,qCAAqC,CAAC;AAM7C;;;;GAIG;AACH,eAAO,MAAM,yBAAyB,eAA0C,CAAC;AAEjF;;;GAGG;AACH,MAAM,MAAM,iCAAiC,GAAG,iBAAiB,GAAG;IAClE,CAAC,yBAAyB,CAAC,CAAC,EAAE;QAC5B,oFAAoF;QACpF,aAAa,EAAE,MAAM,CAAC;KACvB,CAAC;CACH,CAAC;AAcF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AACH,wBAAgB,aAAa,CAC3B,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE;IACP,KAAK,EAAE,oBAAoB,GAAG,oBAAoB,EAAE,CAAC;IACrD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,6BAA6B,CAAC;CAChD,GACA,iBAAiB,CASnB;AAMD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE;IACP,KAAK,EAAE,oBAAoB,GAAG,oBAAoB,EAAE,CAAC;IACrD,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,oBAAoB,CAAC;IACrC,kFAAkF;IAClF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oFAAoF;IACpF,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,wFAAwF;IACxF,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,cAAc,CAAC,EAAE,6BAA6B,CAAC;CAChD,GACA,iCAAiC,CA0BnC;AACD,sEAAsE"}