v0.7.0 Billing and Settlement Beta

English

ModelFaucet v0.7.0 adds the billing and settlement beta so operators can audit money movement before any real payout workflow.

Highlights

• Added admin ledger reconciliation that reconstructs wallet balances from ledger entries.
• Added explicit wallet adjustment, refund, and chargeback accounting with idempotency support.
• Added payout approval before mark-paid, so paid transitions require an operator review gate.
• Added admin CSV exports for usage, revenue, and payouts.
• Added pnpm stripe:webhook:replay for Stripe test-mode webhook replay checks.
• Added English and Chinese billing/settlement docs.
• Extended local smoke to verify zero ledger reconciliation mismatches.

Verification

• Local verify:secrets, lint, typecheck, tests, docs build, Dashboard build, CRM build, temporary-PostgreSQL pnpm smoke:local, and temporary-API Stripe webhook replay passed.
• GitHub Actions ci run 27708896164 passed.
• GitHub Actions docs run 27708896436 passed and deployed Pages.

Security posture is unchanged: provider API keys stay server-side, BYOK remains explicit, and cloud services are not allowed to access localhost or private LAN URLs.

中文

ModelFaucet v0.7.0 增加 Billing 和 Settlement Beta，让运营者在任何真实 payout workflow 前先完成资金流审计。

重点更新

• 新增 admin ledger reconciliation，可从 ledger entries 重建 wallet balance。
• 新增显式 wallet adjustment、refund、chargeback accounting，并支持 idempotency key。
• 新增 payout approval gate；mark-paid 前必须先经过 operator review。
• 新增 usage、revenue、payouts 的 admin CSV 导出。
• 新增 pnpm stripe:webhook:replay，用于 Stripe test-mode webhook replay 检查。
• 新增英文/中文 billing 和 settlement 文档。
• 本地 smoke test 现在会验证 ledger reconciliation 没有 mismatch。

验证

• 本地已通过 verify:secrets、lint、typecheck、tests、docs build、Dashboard build、CRM build、临时 PostgreSQL pnpm smoke:local、以及临时 API Stripe webhook replay。
• GitHub Actions ci run 27708896164 已通过。
• GitHub Actions docs run 27708896436 已通过并部署 Pages。

安全边界保持不变：provider API key 只保留在服务端，BYOK 仍然是显式能力，云服务不会访问 localhost 或私有 LAN URL。