Accrue.Entitlements.Admin (accrue v1.5.0)

Copy Markdown View Source

Internal read-only diagnostic seam for the accrue_admin entitlements tab (ENT-11).

NOT a public gate API — there is no boolean entitled?-style surface here. fetch_entitled/2 is closed and will-not-build: a Stripe-backed predicate makes authorization depend on a network call that can fail open under partition, while Accrue.Entitlements.StripeSync.summary_for_customer/1 and resolve_for_customer/1 already provide diagnostic observation. This module answers the operator question "what does the resolver currently grant this customer, and what entitling price_ids is it silently discarding?" by returning a {resolved, unmapped_price_ids} pair — never a grant/deny decision.

One-way dependency

admin → billing/entitlements core, never the reverse. Nothing under Accrue.Billing or the resolver references this module; it only reads through the resolver's SSOT fold.

Resolver scope

Hard-codes the default Accrue.Entitlements.Resolver.LocalMap resolver. The diagnostic re-derives the structurally-discarded unmapped drift, which is a property of the local plan→price_id catalog; custom resolvers are out of scope for this read-only diagnostic.

Why a {resolved, unmapped} pair

The resolver drops unmapped entitling price_ids under :deny (Accrue.Entitlements.Resolver.LocalMap handle_unmapped/3), so the resolved map can NEVER surface drift. unmapped_entitling_price_ids/1 re-reads the customer's entitling items independently and returns only the price_ids the catalog does not map — the operator's drift signal.

Summary

Functions

diagnostic_for_account(account, opts \\ [])

Returns the closed, read-only diagnostic for one already-authorized entitlement account. The host is responsible for resolving and authorizing account before it reaches this seam; this function deliberately never provisions an account, calls a provider, queues work, or records an audit event.

resolve_for_customer(customer)

Returns {resolved, unmapped_price_ids} for customer

Functions

diagnostic_for_account(account, opts \\ [])

@spec diagnostic_for_account(
  Accrue.Entitlements.Account.t(),
  keyword()
) :: {:ok, map()} | {:error, :not_found | :unavailable}

Returns the closed, read-only diagnostic for one already-authorized entitlement account. The host is responsible for resolving and authorizing account before it reaches this seam; this function deliberately never provisions an account, calls a provider, queues work, or records an audit event.

The result is a support contract, not an explorer: it contains only normalized states, bounded ages, and a stable opaque correlation. Raw observations, account ownership, device identifiers, proof material, queue data, and provider responses are intentionally excluded.

resolve_for_customer(customer)

@spec resolve_for_customer(Accrue.Billing.Customer.t()) ::
  {resolved :: map(), unmapped_price_ids :: [String.t()]}

Returns {resolved, unmapped_price_ids} for customer:

  • resolved — the resolver's SSOT fold (active_plans, features, quantities, and the grace sets), reusing LocalMap.fold_for_customer/1 (no re-implemented fold), and
  • unmapped_price_ids — the entitling price_ids the resolver structurally discards under :deny, via LocalMap.unmapped_entitling_price_ids/1.