- Shipped
- October 18, 2026 at 7:35 PM UTC
- Author
- Kamo
- Commit
- 2b70a57
Nine billing_* tools (BillingPack) through SecurityService's billing door (SITP TP02's BillingRelayController; TP18 added the licensee step and the usage reads) as the SI member: - billing_my_plan (own plan, coverage, seat eligibility, alerts: why "this needs a licensed seat"), billing_catalog (markets, plans, add-ons, promotion); no right. - billing_get_account (accounts; one with its subscriptions and members), billing_list_seats (subscription members and licenses), billing_list_invoices (without hosted-payment or PDF links or processor ids), billing_usage (mailboxes, extensions, storage): VIEW_ORG_BILLING or MANAGE_ORG_BILLING, as BillingService and the door decide. - billing_provider_status: the invoicing provider's health and sync runs (MANAGE_SUBSCRIPTION_SETTINGS); never a credential. - billing_assign_seat (COMMIT_PRICING: a seat is money; makes the member a licensee first when needed) and billing_remove_seat (DELETE_RECORD): MANAGE_ORG_BILLING; on its own initiative an SI asks a person first. Payment methods, buying or cancelling seats, plan changes, billing groups and cost modes are never built. Billing reads are unlabeled items (private to the run's principal); the golden tool lists gain exactly these nine tools.