@automate.ax/api-contract 0.33.1 → 0.35.0

package/dist/api-key.js

@@ -19,7 +19,7 @@ export const apiKeyContract = {
         path: "/organizations/{organizationId}/api-keys",
         operationId: "createOrganizationApiKey",
         summary: "Create organization API key",
-        description: "Creates an API key owned by the organization. The secret is returned once.",
+        description: "Creates an API key owned by the organization. Requires apiKey:create; the secret is returned once.",
         successStatus: 201,
         successDescription: "API key created.",
         tags: ["API Keys"],
@@ -35,7 +35,7 @@ export const apiKeyContract = {
         path: "/organizations/{organizationId}/api-keys/{keyId}",
         operationId: "deleteOrganizationApiKey",
         summary: "Delete organization API key",
-        description: "Permanently revokes an organization API key.",
+        description: "Permanently revokes an organization API key. Requires apiKey:delete.",
         successStatus: 204,
         tags: ["API Keys"],
     })
@@ -50,7 +50,7 @@ export const apiKeyContract = {
         path: "/organizations/{organizationId}/api-keys",
         operationId: "listOrganizationApiKeys",
         summary: "List organization API keys",
-        description: "Lists API keys owned by an organization.",
+        description: "Lists API keys owned by an organization. Requires apiKey:read.",
         tags: ["API Keys"],
     })
         .input(z.object({ organizationId: z.string() }))
@@ -61,7 +61,7 @@ export const apiKeyContract = {
         path: "/organizations/{organizationId}/api-keys/{keyId}",
         operationId: "updateOrganizationApiKey",
         summary: "Update organization API key",
-        description: "Updates an organization API key's display name.",
+        description: "Updates an organization API key's display name. Requires apiKey:update.",
         tags: ["API Keys"],
     })
         .input(z.object({

package/dist/index.d.ts

@@ -8,6 +8,7 @@ export { activeSubscriptionOutputSchema, createdInvitationOutputSchema, organiza
 export { projectOutputSchema } from "./project.js";
 export { reasonableNameSchema } from "./schemas.js";
 export { userOutputSchema } from "./auth.js";
+export { managementPermissionStatement, managementRolePermissions, organizationApiKeyPermissions, type ManagementPermission, } from "./permissions.js";
 /** Procedures exposed by the public Node client and OpenAPI document. */
 export declare const publicContract: {
     apiKey: {
@@ -89,9 +90,15 @@ export declare const publicContract: {
                 enterprise: "enterprise";
             }>;
             limits: import("zod").ZodObject<{
+                aiGenerations: import("zod").ZodNumber;
+                emailRecipients: import("zod").ZodNumber;
                 projects: import("zod").ZodNumber;
                 seats: import("zod").ZodNumber;
             }, import("zod/v4/core").$strip>;
+            usage: import("zod").ZodObject<{
+                aiGenerations: import("zod").ZodNumber;
+                emailRecipients: import("zod").ZodNumber;
+            }, import("zod/v4/core").$strip>;
             members: import("zod").ZodArray<import("zod").ZodObject<{
                 id: import("zod").ZodString;
                 userId: import("zod").ZodString;
@@ -173,9 +180,15 @@ export declare const publicContract: {
                 enterprise: "enterprise";
             }>;
             limits: import("zod").ZodObject<{
+                aiGenerations: import("zod").ZodNumber;
+                emailRecipients: import("zod").ZodNumber;
                 projects: import("zod").ZodNumber;
                 seats: import("zod").ZodNumber;
             }, import("zod/v4/core").$strip>;
+            usage: import("zod").ZodObject<{
+                aiGenerations: import("zod").ZodNumber;
+                emailRecipients: import("zod").ZodNumber;
+            }, import("zod/v4/core").$strip>;
         }, import("zod/v4/core").$strip>>, Record<never, never>, Record<never, never>>;
         remove: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<import("zod").ZodObject<{
             organizationId: import("zod").ZodString;
@@ -606,9 +619,15 @@ export declare const firstPartyContract: {
                 enterprise: "enterprise";
             }>;
             limits: import("zod").ZodObject<{
+                aiGenerations: import("zod").ZodNumber;
+                emailRecipients: import("zod").ZodNumber;
                 projects: import("zod").ZodNumber;
                 seats: import("zod").ZodNumber;
             }, import("zod/v4/core").$strip>;
+            usage: import("zod").ZodObject<{
+                aiGenerations: import("zod").ZodNumber;
+                emailRecipients: import("zod").ZodNumber;
+            }, import("zod/v4/core").$strip>;
             members: import("zod").ZodArray<import("zod").ZodObject<{
                 id: import("zod").ZodString;
                 userId: import("zod").ZodString;
@@ -690,9 +709,15 @@ export declare const firstPartyContract: {
                 enterprise: "enterprise";
             }>;
             limits: import("zod").ZodObject<{
+                aiGenerations: import("zod").ZodNumber;
+                emailRecipients: import("zod").ZodNumber;
                 projects: import("zod").ZodNumber;
                 seats: import("zod").ZodNumber;
             }, import("zod/v4/core").$strip>;
+            usage: import("zod").ZodObject<{
+                aiGenerations: import("zod").ZodNumber;
+                emailRecipients: import("zod").ZodNumber;
+            }, import("zod/v4/core").$strip>;
         }, import("zod/v4/core").$strip>>, Record<never, never>, Record<never, never>>;
         remove: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<import("zod").ZodObject<{
             organizationId: import("zod").ZodString;
@@ -1455,9 +1480,15 @@ export declare const contract: {
                 enterprise: "enterprise";
             }>;
             limits: import("zod").ZodObject<{
+                aiGenerations: import("zod").ZodNumber;
+                emailRecipients: import("zod").ZodNumber;
                 projects: import("zod").ZodNumber;
                 seats: import("zod").ZodNumber;
             }, import("zod/v4/core").$strip>;
+            usage: import("zod").ZodObject<{
+                aiGenerations: import("zod").ZodNumber;
+                emailRecipients: import("zod").ZodNumber;
+            }, import("zod/v4/core").$strip>;
             members: import("zod").ZodArray<import("zod").ZodObject<{
                 id: import("zod").ZodString;
                 userId: import("zod").ZodString;
@@ -1539,9 +1570,15 @@ export declare const contract: {
                 enterprise: "enterprise";
             }>;
             limits: import("zod").ZodObject<{
+                aiGenerations: import("zod").ZodNumber;
+                emailRecipients: import("zod").ZodNumber;
                 projects: import("zod").ZodNumber;
                 seats: import("zod").ZodNumber;
             }, import("zod/v4/core").$strip>;
+            usage: import("zod").ZodObject<{
+                aiGenerations: import("zod").ZodNumber;
+                emailRecipients: import("zod").ZodNumber;
+            }, import("zod/v4/core").$strip>;
         }, import("zod/v4/core").$strip>>, Record<never, never>, Record<never, never>>;
         remove: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<import("zod").ZodObject<{
             organizationId: import("zod").ZodString;

package/dist/index.js

@@ -16,6 +16,7 @@ export { activeSubscriptionOutputSchema, createdInvitationOutputSchema, organiza
 export { projectOutputSchema } from "./project.js";
 export { reasonableNameSchema } from "./schemas.js";
 export { userOutputSchema } from "./auth.js";
+export { managementPermissionStatement, managementRolePermissions, organizationApiKeyPermissions, } from "./permissions.js";
 /** Procedures exposed by the public Node client and OpenAPI document. */
 export const publicContract = {
     apiKey: apiKeyContract,

package/dist/org.d.ts

@@ -42,9 +42,15 @@ export declare const organizationSummaryOutputSchema: z.ZodObject<{
         enterprise: "enterprise";
     }>;
     limits: z.ZodObject<{
+        aiGenerations: z.ZodNumber;
+        emailRecipients: z.ZodNumber;
         projects: z.ZodNumber;
         seats: z.ZodNumber;
     }, z.core.$strip>;
+    usage: z.ZodObject<{
+        aiGenerations: z.ZodNumber;
+        emailRecipients: z.ZodNumber;
+    }, z.core.$strip>;
 }, z.core.$strip>;
 export declare const organizationMemberOutputSchema: z.ZodObject<{
     id: z.ZodString;
@@ -103,9 +109,15 @@ export declare const organizationDetailsOutputSchema: z.ZodObject<{
         enterprise: "enterprise";
     }>;
     limits: z.ZodObject<{
+        aiGenerations: z.ZodNumber;
+        emailRecipients: z.ZodNumber;
         projects: z.ZodNumber;
         seats: z.ZodNumber;
     }, z.core.$strip>;
+    usage: z.ZodObject<{
+        aiGenerations: z.ZodNumber;
+        emailRecipients: z.ZodNumber;
+    }, z.core.$strip>;
     members: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         userId: z.ZodString;
@@ -199,9 +211,15 @@ export declare const orgContract: {
             enterprise: "enterprise";
         }>;
         limits: z.ZodObject<{
+            aiGenerations: z.ZodNumber;
+            emailRecipients: z.ZodNumber;
             projects: z.ZodNumber;
             seats: z.ZodNumber;
         }, z.core.$strip>;
+        usage: z.ZodObject<{
+            aiGenerations: z.ZodNumber;
+            emailRecipients: z.ZodNumber;
+        }, z.core.$strip>;
         members: z.ZodArray<z.ZodObject<{
             id: z.ZodString;
             userId: z.ZodString;
@@ -283,9 +301,15 @@ export declare const orgContract: {
             enterprise: "enterprise";
         }>;
         limits: z.ZodObject<{
+            aiGenerations: z.ZodNumber;
+            emailRecipients: z.ZodNumber;
             projects: z.ZodNumber;
             seats: z.ZodNumber;
         }, z.core.$strip>;
+        usage: z.ZodObject<{
+            aiGenerations: z.ZodNumber;
+            emailRecipients: z.ZodNumber;
+        }, z.core.$strip>;
     }, z.core.$strip>>, Record<never, never>, Record<never, never>>;
     remove: import("@orpc/contract").ContractProcedureBuilderWithInputOutput<z.ZodObject<{
         organizationId: z.ZodString;

package/dist/org.js

@@ -26,9 +26,15 @@ export const organizationSummaryOutputSchema = z.object({
     activeSubscription: activeSubscriptionOutputSchema.nullable(),
     plan: z.enum(["free", "pro", "enterprise"]),
     limits: z.object({
+        aiGenerations: z.number(),
+        emailRecipients: z.number(),
         projects: z.number(),
         seats: z.number(),
     }),
+    usage: z.object({
+        aiGenerations: z.number(),
+        emailRecipients: z.number(),
+    }),
 });
 export const organizationMemberOutputSchema = z.object({
     id: z.string(),
@@ -92,7 +98,7 @@ export const orgContract = {
         path: "/organizations/{organizationId}",
         operationId: "deleteOrganization",
         summary: "Delete organization",
-        description: "Deletes an organization and cancels its billing. Caller must be the organization owner.",
+        description: "Deletes an organization and cancels its billing. Requires organization:delete.",
         tags: ["Organizations"],
         successStatus: 204,
     })
@@ -115,7 +121,7 @@ export const orgContract = {
         path: "/organizations/{organizationId}/invitations",
         operationId: "createOrganizationInvitation",
         summary: "Invite organization member",
-        description: "Creates a pending invitation for an email address. Caller must be an organization admin or owner.",
+        description: "Creates a pending invitation for an email address. Requires invitation:create.",
         successStatus: 201,
         successDescription: "Invitation created.",
         tags: ["Organizations"],

package/dist/permissions.d.ts

@@ -0,0 +1,61 @@
+/** Management permissions understood by organization roles and API keys. */
+export declare const managementPermissionStatement: {
+    readonly ac: readonly ["create", "read", "update", "delete"];
+    readonly account: readonly ["create", "read", "delete"];
+    readonly apiKey: readonly ["create", "read", "update", "delete"];
+    readonly authorization: readonly ["create", "read", "update"];
+    readonly billing: readonly ["read", "update"];
+    readonly deployment: readonly ["create", "read", "cancel"];
+    readonly invitation: readonly ["create", "read", "cancel"];
+    readonly member: readonly ["create", "read", "update", "delete", "leave"];
+    readonly organization: readonly ["read", "update", "delete"];
+    readonly project: readonly ["create", "read", "update", "delete"];
+    readonly team: readonly ["create", "update", "delete"];
+};
+export type ManagementPermission = {
+    [Resource in keyof typeof managementPermissionStatement]?: (typeof managementPermissionStatement)[Resource][number][];
+};
+/** Static organization roles are permission bundles, not authorization checks. */
+export declare const managementRolePermissions: {
+    readonly admin: {
+        readonly ac: ["create", "read", "update", "delete"];
+        readonly account: ["create", "read", "delete"];
+        readonly apiKey: ["create", "read", "update", "delete"];
+        readonly authorization: ["create", "read", "update"];
+        readonly deployment: ["create", "read", "cancel"];
+        readonly invitation: ["create", "read", "cancel"];
+        readonly member: ["create", "read", "update", "delete", "leave"];
+        readonly organization: ["read", "update"];
+        readonly project: ["create", "read", "update", "delete"];
+        readonly team: ["create", "update", "delete"];
+    };
+    readonly member: {
+        readonly ac: ["read"];
+        readonly authorization: ["create", "read", "update"];
+        readonly deployment: ["create", "read", "cancel"];
+        readonly invitation: ["read"];
+        readonly member: ["read", "leave"];
+        readonly organization: ["read"];
+        readonly project: ["create", "read"];
+    };
+    readonly owner: {
+        readonly ac: ["create", "read", "update", "delete"];
+        readonly account: ["create", "read", "delete"];
+        readonly apiKey: ["create", "read", "update", "delete"];
+        readonly authorization: ["create", "read", "update"];
+        readonly billing: ["read", "update"];
+        readonly deployment: ["create", "read", "cancel"];
+        readonly invitation: ["create", "read", "cancel"];
+        readonly member: ["create", "read", "update", "delete"];
+        readonly organization: ["read", "update", "delete"];
+        readonly project: ["create", "read", "update", "delete"];
+        readonly team: ["create", "update", "delete"];
+    };
+};
+/** Explicit capabilities granted to newly issued organization API keys. */
+export declare const organizationApiKeyPermissions: {
+    readonly account: ["create", "read", "delete"];
+    readonly authorization: ["create", "read", "update"];
+    readonly deployment: ["create", "read", "cancel"];
+    readonly project: ["create", "read", "update", "delete"];
+};

package/dist/permissions.js

@@ -0,0 +1,58 @@
+/** Management permissions understood by organization roles and API keys. */
+export const managementPermissionStatement = {
+    ac: ["create", "read", "update", "delete"],
+    account: ["create", "read", "delete"],
+    apiKey: ["create", "read", "update", "delete"],
+    authorization: ["create", "read", "update"],
+    billing: ["read", "update"],
+    deployment: ["create", "read", "cancel"],
+    invitation: ["create", "read", "cancel"],
+    member: ["create", "read", "update", "delete", "leave"],
+    organization: ["read", "update", "delete"],
+    project: ["create", "read", "update", "delete"],
+    team: ["create", "update", "delete"],
+};
+/** Static organization roles are permission bundles, not authorization checks. */
+export const managementRolePermissions = {
+    admin: {
+        ac: ["create", "read", "update", "delete"],
+        account: ["create", "read", "delete"],
+        apiKey: ["create", "read", "update", "delete"],
+        authorization: ["create", "read", "update"],
+        deployment: ["create", "read", "cancel"],
+        invitation: ["create", "read", "cancel"],
+        member: ["create", "read", "update", "delete", "leave"],
+        organization: ["read", "update"],
+        project: ["create", "read", "update", "delete"],
+        team: ["create", "update", "delete"],
+    },
+    member: {
+        ac: ["read"],
+        authorization: ["create", "read", "update"],
+        deployment: ["create", "read", "cancel"],
+        invitation: ["read"],
+        member: ["read", "leave"],
+        organization: ["read"],
+        project: ["create", "read"],
+    },
+    owner: {
+        ac: ["create", "read", "update", "delete"],
+        account: ["create", "read", "delete"],
+        apiKey: ["create", "read", "update", "delete"],
+        authorization: ["create", "read", "update"],
+        billing: ["read", "update"],
+        deployment: ["create", "read", "cancel"],
+        invitation: ["create", "read", "cancel"],
+        member: ["create", "read", "update", "delete"],
+        organization: ["read", "update", "delete"],
+        project: ["create", "read", "update", "delete"],
+        team: ["create", "update", "delete"],
+    },
+};
+/** Explicit capabilities granted to newly issued organization API keys. */
+export const organizationApiKeyPermissions = {
+    account: ["create", "read", "delete"],
+    authorization: ["create", "read", "update"],
+    deployment: ["create", "read", "cancel"],
+    project: ["create", "read", "update", "delete"],
+};

package/dist/project.js

@@ -28,7 +28,7 @@ export const projectContract = {
         path: "/organizations/{organizationId}/projects",
         operationId: "createProject",
         summary: "Create project",
-        description: "Creates a project inside an organization the user belongs to.",
+        description: "Creates a project inside an organization. Requires project:create.",
         successStatus: 201,
         successDescription: "Project created.",
         tags: ["Projects"],
@@ -71,7 +71,7 @@ export const projectContract = {
         path: "/projects/{projectId}",
         operationId: "updateProject",
         summary: "Update project",
-        description: "Updates project fields. Caller must be an organization admin or owner.",
+        description: "Updates project fields. Requires project:update.",
         successStatus: 204,
         tags: ["Projects"],
     })
@@ -86,7 +86,7 @@ export const projectContract = {
         path: "/projects/{projectId}",
         operationId: "deleteProject",
         summary: "Delete project",
-        description: "Deletes a project. Caller must be an organization admin or owner.",
+        description: "Deletes a project. Requires project:delete.",
         tags: ["Projects"],
         successStatus: 204,
     })

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@automate.ax/api-contract",
-  "version": "0.33.1",
+  "version": "0.35.0",
   "description": "Public oRPC contract for the Automate.ax API.",
   "license": "MIT",
   "repository": {
@@ -27,7 +27,7 @@
   },
   "dependencies": {
     "@ai-sdk/gateway": "^4.0.46",
-    "@automate.ax/codec": "0.33.1",
+    "@automate.ax/codec": "0.35.0",
     "@orpc/contract": "1.13.14",
     "zod": "^4.3.6"
   },

package/src/api-key.ts

@@ -24,7 +24,7 @@ export const apiKeyContract = {
       operationId: "createOrganizationApiKey",
       summary: "Create organization API key",
       description:
-        "Creates an API key owned by the organization. The secret is returned once.",
+        "Creates an API key owned by the organization. Requires apiKey:create; the secret is returned once.",
       successStatus: 201,
       successDescription: "API key created.",
       tags: ["API Keys"],
@@ -42,7 +42,8 @@ export const apiKeyContract = {
       path: "/organizations/{organizationId}/api-keys/{keyId}",
       operationId: "deleteOrganizationApiKey",
       summary: "Delete organization API key",
-      description: "Permanently revokes an organization API key.",
+      description:
+        "Permanently revokes an organization API key. Requires apiKey:delete.",
       successStatus: 204,
       tags: ["API Keys"],
     })
@@ -59,7 +60,8 @@ export const apiKeyContract = {
       path: "/organizations/{organizationId}/api-keys",
       operationId: "listOrganizationApiKeys",
       summary: "List organization API keys",
-      description: "Lists API keys owned by an organization.",
+      description:
+        "Lists API keys owned by an organization. Requires apiKey:read.",
       tags: ["API Keys"],
     })
     .input(z.object({ organizationId: z.string() }))
@@ -70,7 +72,8 @@ export const apiKeyContract = {
       path: "/organizations/{organizationId}/api-keys/{keyId}",
       operationId: "updateOrganizationApiKey",
       summary: "Update organization API key",
-      description: "Updates an organization API key's display name.",
+      description:
+        "Updates an organization API key's display name. Requires apiKey:update.",
       tags: ["API Keys"],
     })
     .input(

package/src/index.ts

@@ -48,6 +48,12 @@ export {
 export { projectOutputSchema } from "./project"
 export { reasonableNameSchema } from "./schemas"
 export { userOutputSchema } from "./auth"
+export {
+  managementPermissionStatement,
+  managementRolePermissions,
+  organizationApiKeyPermissions,
+  type ManagementPermission,
+} from "./permissions"
 
 /** Procedures exposed by the public Node client and OpenAPI document. */
 export const publicContract = {

package/src/org.ts

@@ -30,9 +30,15 @@ export const organizationSummaryOutputSchema = z.object({
   activeSubscription: activeSubscriptionOutputSchema.nullable(),
   plan: z.enum(["free", "pro", "enterprise"]),
   limits: z.object({
+    aiGenerations: z.number(),
+    emailRecipients: z.number(),
     projects: z.number(),
     seats: z.number(),
   }),
+  usage: z.object({
+    aiGenerations: z.number(),
+    emailRecipients: z.number(),
+  }),
 })
 
 export const organizationMemberOutputSchema = z.object({
@@ -104,7 +110,7 @@ export const orgContract = {
       operationId: "deleteOrganization",
       summary: "Delete organization",
       description:
-        "Deletes an organization and cancels its billing. Caller must be the organization owner.",
+        "Deletes an organization and cancels its billing. Requires organization:delete.",
       tags: ["Organizations"],
       successStatus: 204,
     })
@@ -129,7 +135,7 @@ export const orgContract = {
       operationId: "createOrganizationInvitation",
       summary: "Invite organization member",
       description:
-        "Creates a pending invitation for an email address. Caller must be an organization admin or owner.",
+        "Creates a pending invitation for an email address. Requires invitation:create.",
       successStatus: 201,
       successDescription: "Invitation created.",
       tags: ["Organizations"],

package/src/permissions.ts

@@ -0,0 +1,64 @@
+/** Management permissions understood by organization roles and API keys. */
+export const managementPermissionStatement = {
+  ac: ["create", "read", "update", "delete"],
+  account: ["create", "read", "delete"],
+  apiKey: ["create", "read", "update", "delete"],
+  authorization: ["create", "read", "update"],
+  billing: ["read", "update"],
+  deployment: ["create", "read", "cancel"],
+  invitation: ["create", "read", "cancel"],
+  member: ["create", "read", "update", "delete", "leave"],
+  organization: ["read", "update", "delete"],
+  project: ["create", "read", "update", "delete"],
+  team: ["create", "update", "delete"],
+} as const
+
+export type ManagementPermission = {
+  [Resource in keyof typeof managementPermissionStatement]?: (typeof managementPermissionStatement)[Resource][number][]
+}
+
+/** Static organization roles are permission bundles, not authorization checks. */
+export const managementRolePermissions = {
+  admin: {
+    ac: ["create", "read", "update", "delete"],
+    account: ["create", "read", "delete"],
+    apiKey: ["create", "read", "update", "delete"],
+    authorization: ["create", "read", "update"],
+    deployment: ["create", "read", "cancel"],
+    invitation: ["create", "read", "cancel"],
+    member: ["create", "read", "update", "delete", "leave"],
+    organization: ["read", "update"],
+    project: ["create", "read", "update", "delete"],
+    team: ["create", "update", "delete"],
+  },
+  member: {
+    ac: ["read"],
+    authorization: ["create", "read", "update"],
+    deployment: ["create", "read", "cancel"],
+    invitation: ["read"],
+    member: ["read", "leave"],
+    organization: ["read"],
+    project: ["create", "read"],
+  },
+  owner: {
+    ac: ["create", "read", "update", "delete"],
+    account: ["create", "read", "delete"],
+    apiKey: ["create", "read", "update", "delete"],
+    authorization: ["create", "read", "update"],
+    billing: ["read", "update"],
+    deployment: ["create", "read", "cancel"],
+    invitation: ["create", "read", "cancel"],
+    member: ["create", "read", "update", "delete"],
+    organization: ["read", "update", "delete"],
+    project: ["create", "read", "update", "delete"],
+    team: ["create", "update", "delete"],
+  },
+} as const satisfies Record<string, ManagementPermission>
+
+/** Explicit capabilities granted to newly issued organization API keys. */
+export const organizationApiKeyPermissions = {
+  account: ["create", "read", "delete"],
+  authorization: ["create", "read", "update"],
+  deployment: ["create", "read", "cancel"],
+  project: ["create", "read", "update", "delete"],
+} as const satisfies ManagementPermission

package/src/project.ts

@@ -31,7 +31,7 @@ export const projectContract = {
       operationId: "createProject",
       summary: "Create project",
       description:
-        "Creates a project inside an organization the user belongs to.",
+        "Creates a project inside an organization. Requires project:create.",
       successStatus: 201,
       successDescription: "Project created.",
       tags: ["Projects"],
@@ -80,8 +80,7 @@ export const projectContract = {
       path: "/projects/{projectId}",
       operationId: "updateProject",
       summary: "Update project",
-      description:
-        "Updates project fields. Caller must be an organization admin or owner.",
+      description: "Updates project fields. Requires project:update.",
       successStatus: 204,
       tags: ["Projects"],
     })
@@ -98,8 +97,7 @@ export const projectContract = {
       path: "/projects/{projectId}",
       operationId: "deleteProject",
       summary: "Delete project",
-      description:
-        "Deletes a project. Caller must be an organization admin or owner.",
+      description: "Deletes a project. Requires project:delete.",
       tags: ["Projects"],
       successStatus: 204,
     })