@delegance/sdk 0.2.0 → 0.3.0

package/README.md

@@ -1,27 +1,35 @@
 # @delegance/sdk
 
-TypeScript SDK for integrating with the Delegance Brokerage platform.
+Get commercial insurance quotes from your code. This TypeScript SDK covers the Delegance API: signup, instant quotes, bind, payments, policies, certificates, bonds, claims, and documents.
 
-## Installation
+Full docs: https://portal.delegancebrokerage.com/docs/sdk
+
+## Install
 
 ```bash
 npm install @delegance/sdk
-# or
-yarn add @delegance/sdk
-# or
-pnpm add @delegance/sdk
 ```
 
 Requires Node 18 or newer. The package ships CommonJS, ESM, and TypeScript types.
 
+Prefer a terminal? [`@delegance/cli`](https://www.npmjs.com/package/@delegance/cli) runs the same flows: `npx -y @delegance/cli quote start --demo`.
+
 ## Availability
 
-- **Quoting over the API is live for enrolled companies.** Delegance turns it on account by account today.
-- **Public access opens on 2026-10-06.** From that date a new account created with `createSignup()` can quote.
-- **Until an account has access,** the instant-quote, bind, and payment calls throw a `DeleganceError` with `statusCode` 503 and `reason` `'not_available'`. The SDK does not retry that answer.
-- **A licensed Delegance broker reviews every bind.** `instantQuotes.bind()` creates a request. It never charges a card and never binds coverage by itself.
+- Quoting is open to every account. A new account from `createSignup()` can quote as soon as the owner confirms the email.
+- Bind, payments, bonds, and claims are live over the API.
+- A licensed Delegance broker approves every bind before coverage starts. `instantQuotes.bind()` files the request; it never charges a card.
+- A switched-off feature answers 503 with `reason: 'not_available'`. The SDK does not retry that answer.
+
+## One key, one company
 
-## Sign up and quote
+An API key belongs to exactly one company. Every call acts on that company, so you never pass a company id to quote.
+
+- `documents.upload()` and `documents.list()` take an optional `companyId`. Leave it out. If you name a company the key does not belong to, the server answers 403 with `code: 'company_mismatch'`.
+- A customer key cannot create companies. `companies.create()` and `companies.upsert()` answer 403 `tenant_key_cannot_create`. Open a new account with `createSignup()` instead.
+- `companies.list()` returns the key's own company.
+
+## Quick start: sign up and quote
 
 ```typescript
 import { createSignup, newDeviceSecret, DeleganceClient } from '@delegance/sdk';
@@ -33,6 +41,7 @@ const account = await signup.createAccount({
   contactEmail: 'owner@acmebakery.com',
   industry: 'commercial bakery',
   companySize: '2-10',
+  address: { street: '100 Main St', city: 'Austin', state: 'TX', zip: '78701' },
 });
 const device = newDeviceSecret();
 const { enrollmentId } = await signup.enroll(account.bootstrapKey, {
@@ -46,250 +55,258 @@ await signup.requestVerification(account.bootstrapKey);
 const result = await signup.waitForKey(enrollmentId, device.secret);
 if (result.status !== 'ready') throw new Error('Confirm link not clicked yet');
 
-// 3. Quote general liability.
+// 3. Quote. See "Instant quotes" below for the answers.
 const client = new DeleganceClient({ apiKey: result.apiKey });
 const session = await client.instantQuotes.start(['general_liability']);
-// Answer session.questions (keyed by question id), then submit.
-const submitted = await client.instantQuotes.submit({
-  submissionId: session.submissionId,
-  sessionVersion: session.sessionVersion,
-  answers: {},
-});
-const status = await client.instantQuotes.waitForQuotes(session.submissionId);
 ```
 
-The [`@delegance/cli`](https://www.npmjs.com/package/@delegance/cli) package runs the same flow from a terminal (`delegance signup`, `delegance quote start`).
+Store `result.apiKey` somewhere safe. The server shows it once.
 
-## Quick Start (existing API key)
+## Quick start: existing API key
 
 ```typescript
 import { DeleganceClient } from '@delegance/sdk';
 import fs from 'fs';
 
-// Initialize the client
-const client = new DeleganceClient({
-  apiKey: 'dlg_xxxxxxxx_sk_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'
-});
+const client = new DeleganceClient({ apiKey: process.env.DELEGANCE_API_KEY! });
 
-// Create a company
-const company = await client.companies.create({
-  name: 'ABC Construction',
-  industry: 'construction',
-  companySize: '11-25',
-  contactEmail: 'contact@abcconstruction.com',
-  fein: '12-3456789',
-  address: {
-    street: '123 Main St',
-    city: 'Austin',
-    state: 'TX',
-    zip: '78701'
-  }
-});
-
-console.log('Created company:', company.id);
+// The key's own company
+const [company] = await client.companies.list();
+console.log(company.name);
 
-// Upload a policy document
+// Upload a policy. No companyId: the key decides the company.
 const doc = await client.documents.upload({
-  companyId: company.id,
   file: fs.readFileSync('./GL-Policy-2025.pdf'),
   fileName: 'GL-Policy-2025.pdf',
-  documentType: 'policy'
+  documentType: 'policy',
 });
 
-console.log('Document uploaded:', doc.id, 'Status:', doc.status);
-
-// Wait for extraction to complete
-const result = await client.documents.waitForExtraction(doc.id, {
-  timeoutMs: 60000,
-  onStatusChange: (status) => console.log('Processing:', status)
-});
+const done = await client.documents.waitForExtraction(doc.id, { timeoutMs: 120_000 });
+console.log(done.extraction?.policies);
 
-if (result.extraction) {
-  console.log('Extracted policies:', result.extraction.policies);
-}
+// Read what is in force
+const { policies } = await client.policies.list();
 ```
 
-## Configuration
+## Instant quotes
+
+Real carrier premiums over the API. The flow has four calls.
+
+1. `start(coverages)` returns the session and the carriers' questions.
+2. `submit()` files your answers with the carriers.
+3. `status()` or `waitForQuotes()` returns premiums as carriers answer.
+4. `bind()` requests a bind on one offer.
 
-### Client Options
+Coverage ids: `general_liability`, `workers_comp`, `business_owners`, `cyber`, `professional_liability`, `tech_eo`, `commercial_auto`, `commercial_property`, `umbrella`.
 
 ```typescript
-const client = new DeleganceClient({
-  // Required: Your API key
-  apiKey: 'dlg_xxxxxxxx_sk_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx',
-  
-  // Optional: API base URL (default: https://portal.delegancebrokerage.com)
-  baseUrl: 'https://portal.delegancebrokerage.com',
-  
-  // Optional: Request timeout in ms (default: 30000)
-  timeout: 30000,
-  
-  // Optional: Number of retry attempts (default: 3)
-  retries: 3,
-  
-  // Optional: Custom headers
-  headers: {
-    'X-Custom-Header': 'value'
-  }
+const session = await client.instantQuotes.start(['general_liability', 'workers_comp']);
+
+// Each question: { id, label, type, options?, required, prefill?, suggested?, showIf?, requiredIfShown? }
+const answers: Record<string, unknown> = {};
+for (const q of session.questions) {
+  if (q.prefill !== undefined && q.prefill !== null) answers[q.id] = q.prefill;
+}
+answers.annual_revenue = 850000;
+
+const submitted = await client.instantQuotes.submit({
+  submissionId: session.submissionId,
+  sessionVersion: session.sessionVersion,
+  answers,
 });
+
+if (submitted.status === 'submitted') {
+  const status = await client.instantQuotes.waitForQuotes(session.submissionId, { timeoutMs: 10 * 60_000 });
+  console.log('Coverage starts', status.effectiveDate);
+  for (const q of status.carrierQuotes) {
+    console.log(q.coverage, q.carrierName, q.premium, q.limits, q.deductible, q.bindable);
+  }
+}
 ```
 
-### Environment Variables
+### Answers
 
-You can also create a client from environment variables:
+- Key every answer by question `id`.
+- `yes_no`: `'yes'` or `'no'`. `number`, `currency`, `percentage`: a number. `select`: one option `value`. Anything else: text.
+- `prefill` comes from the insured's own account data. Send it back unless the insured changes it.
+- `suggested` is a guess from another source. It counts only after the insured confirms it.
+- `showIf: { questionId, equals }` hides a follow-up until the parent answer matches. A hidden question is never required. `requiredIfShown` makes it required while visible.
 
-```typescript
-import { createClientFromEnv } from '@delegance/sdk';
+### Submit results
 
-// Reads DELEGANCE_API_KEY and optionally DELEGANCE_BASE_URL
-const client = createClientFromEnv();
-```
+`submit()` returns `status`:
 
-## API Reference
+| Status | Meaning |
+|--------|---------|
+| `submitted` | Filed with the instant carriers. Poll `status()` for premiums. |
+| `acord_pending` | Some coverages need a person. A broker task opened (`brokerTaskId`). |
+| `no_carriers` | No carrier can quote this instantly. Hand it to a broker (below). |
 
-### Companies
+A second submit for coverage that already has a live request answers 409 `active_request_exists`. To re-quote, call `start(coverages, { fresh: true })` and submit with `replace: true`.
 
-#### Create a Company
+### Reading quotes
 
-```typescript
-const company = await client.companies.create({
-  name: 'ABC Construction',           // Required
-  industry: 'construction',           // Required
-  companySize: '11-25',              // Required: '1', '2-10', '11-25', '26-50', '51-100', '100-499', '500+'
-  contactEmail: 'contact@abc.com',   // Required
-  
-  // Optional fields
-  legalName: 'ABC Construction LLC',
-  fein: '12-3456789',
-  website: 'https://abc.com',
-  yearEstablished: '2015',
-  companyStructure: 'LLC',
-  description: 'Commercial construction company',
-  contactPhone: '+1-555-123-4567',
-  externalId: 'ams-12345',           // For deduplication
-  address: {
-    street: '123 Main St',
-    suite: 'Suite 100',
-    city: 'Austin',
-    state: 'TX',
-    zip: '78701'
-  }
-});
-```
+`status()` returns `carrierQuotes`, one row per carrier offer:
 
-#### List Companies
+- `premium`: annual premium in dollars, or null before the carrier prices it.
+- `bindable`: true when you can bind the offer.
+- `limits`: readable limits, for example `"$1M per occurrence / $2M aggregate"` or `"Statutory / $1M employers liability"`.
+- `deductible`: dollars, 0 for none. Today only cyber quotes carry one; other lines return null.
+- `effectiveDate` (on the status): when coverage would start, as `YYYY-MM-DD`.
 
-```typescript
-// List your company
-const companies = await client.companies.list();
+The three fields are new in 0.2.1. An older server leaves them out, so treat a missing field like null.
 
-// Include companies created via this API key
-const allCompanies = await client.companies.list({ includeCreated: true });
-```
+Compare prices within one coverage only. The cheapest bindable offer per coverage is the one to show first.
 
-#### Upsert (Create if not exists)
+### No instant carrier: broker handoff
 
 ```typescript
-const { company, isExisting } = await client.companies.upsert({
-  name: 'ABC Construction',
-  industry: 'construction',
-  companySize: '11-25',
-  contactEmail: 'contact@abc.com',
-  externalId: 'ams-12345'  // Deduplication key
-});
-
-if (isExisting) {
-  console.log('Company already existed');
+if (submitted.status === 'no_carriers') {
+  const plan = await client.instantQuotes.brokerHandoffQuestions(session.submissionId, answers);
+  const acordAnswers: Record<string, unknown> = {}; // answer plan.questions the same way
+  const handoff = await client.instantQuotes.brokerHandoff(session.submissionId, {
+    answers: acordAnswers,
+    instantAnswers: answers,
+    complete: true,
+  });
+  console.log(handoff.status, handoff.brokerTaskId); // 'broker_review'
 }
 ```
 
-### Documents
+A broker places the risk with a market that quotes by hand and emails the owner. `complete: false` says you stopped early; the broker asks the rest. A repeat call returns the same broker task. `status().brokerReview` shows the task.
 
-#### Upload a Document
+### Bind and pay
 
 ```typescript
-import fs from 'fs';
-
-const doc = await client.documents.upload({
-  companyId: 'company-uuid',
-  file: fs.readFileSync('./policy.pdf'),  // Buffer, Blob, or base64 string
-  fileName: 'policy.pdf',
-  
-  // Optional
-  documentType: 'policy',    // 'policy', 'loss_run', 'financial_statement', 'sov', 'application', 'certificate', 'endorsement', 'bor', 'other'
-  externalId: 'doc-123',     // For deduplication
-  metadata: { source: 'ams' }
-});
+const status = await client.instantQuotes.status(session.submissionId);
+const offer = status.carrierQuotes.find((q) => q.bindable && q.premium !== null);
+if (!offer) throw new Error('No bindable offer yet');
+
+const bind = await client.instantQuotes.bind(session.submissionId, offer.opportunityId);
+console.log(bind.status, bind.next);
+
+// After a broker approves the bind, a payment request appears
+const due = (await client.payments.list()).filter((p) => p.payable);
+if (due[0]) {
+  const { checkoutUrl } = await client.payments.checkout(due[0].id);
+  console.log('Pay here:', checkoutUrl); // Stripe checkout
+}
 ```
 
-#### Upload Multiple Documents
+A Delegance broker approves each bind request. You get an email when payment is ready. One live bind per coverage per submission: a repeat returns the existing request (`existing: true`).
+
+`bindWithStepUp()` covers fast bind, where the owner attests the answers and enters a 6-digit code we email. Fast bind with the carrier's own checkout (tier A) is not open yet; until it is, every bind goes to a broker.
+
+## Device login (existing customers)
+
+A person who already has a portal account approves a new device in the browser. No API key is needed to start.
 
 ```typescript
-const { documents, errors } = await client.documents.uploadBatch([
-  { companyId, file: buffer1, fileName: 'policy1.pdf' },
-  { companyId, file: buffer2, fileName: 'policy2.pdf' },
-  { companyId, file: buffer3, fileName: 'policy3.pdf' }
-], { concurrency: 3 });
-
-console.log(`Uploaded ${documents.length} documents`);
-if (errors.length > 0) {
-  console.error('Failed uploads:', errors);
+import { createDeviceLogin, newDeviceSecret, DeleganceClient } from '@delegance/sdk';
+
+const login = createDeviceLogin();
+const device = newDeviceSecret();
+const start = await login.start({ deviceSecretHash: device.hash, deviceName: 'build-server' });
+console.log(`Open ${start.verificationUriComplete} and confirm code ${start.userCode}`);
+
+const result = await login.waitForKey(start.loginId, device.secret);
+if (result.status === 'ready') {
+  const client = new DeleganceClient({ apiKey: result.apiKey });
+  const info = await client.auth.keyInfo();   // scopes, company, expiry
+  if (info.refreshable) await client.auth.refresh(); // extend a CLI key
 }
 ```
 
-#### Get Document Status
+## API keys
 
-```typescript
-const doc = await client.documents.get('document-uuid');
+Create keys in the portal (Settings > API keys), with `delegance signup` / `delegance auth login`, or with `client.apiKeys.create()` from a key with the `admin` scope.
 
-console.log('Status:', doc.status);
-// 'pending' | 'processing' | 'completed' | 'processed' | 'error' | 'failed'
+Key rules:
 
-if (doc.extraction) {
-  console.log('Extracted policies:', doc.extraction.policies);
-}
+- A key belongs to one company.
+- A new key expires in 90 days unless you pick another expiry.
+- A key with `write`, `admin`, or `claims:write` must expire within 365 days. `expiresInDays: 'never'` is allowed only for a read-only key; otherwise the server answers 400 `write_key_requires_expiry`.
+- `claims:write` can be created only while signed in to the portal (signup and device login keys for owners and admins carry it).
+- Delegance staff accounts cannot create client keys (403).
+- `appetite:read`, `mcp:read`, `mcp:orin`, and `claims:write` are opt-in. `read` and `write` never imply them.
+- Keys from signup and device login refresh with `client.auth.refresh()`.
+
+```typescript
+const created = await client.apiKeys.create({
+  name: 'CI uploader',
+  scopes: ['read', 'write'],
+  expiresInDays: 90,
+});
+console.log('Save this key now:', created.key);
 ```
 
-#### List Documents
+Format: `dlg_xxxxxxxx_sk_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx`.
+
+## Limits
+
+| Limit | Error |
+|-------|-------|
+| Quote starts per key per day | 429 `quote_limit_reached` |
+| Per-key daily AI budget (chat, quote sessions) | 429 `api_key_budget_exhausted` |
+| Delegance-wide daily API AI budget | 429 `api_budget_exhausted`, `Retry-After: 3600` |
+| Requests per minute | 429, see `client.usage.rateLimits()` |
+
+The SDK does not retry a 429. Read `err.retryAfter` (seconds, from the body or the `Retry-After` header) and wait before you call again.
+
+## Other modules
+
+Every module hangs off the client. Each one has a docs page with examples.
+
+| Module | What it does |
+|--------|--------------|
+| `instantQuotes` | Start, submit, status, broker handoff, bind |
+| `payments` | Premium payment requests and checkout links |
+| `bonds` | Surety bond quotes; you buy on the surety's page |
+| `claims` | File and track claims (needs `claims:write`; accept the claims disclaimer once in the portal) |
+| `policies` | Policies in force, expiring soon, cancellation requests |
+| `coi` | Certificates of insurance |
+| `documents` | Upload, extraction status, list |
+| `sov` | Schedules of values |
+| `chat` | Ask about your coverage |
+| `knowledge` | Notecards and facts extracted from a document |
+| `appetite` | Which carriers will write a risk (needs `appetite:read`) |
+| `leads` | Send a prospect business to Delegance |
+| `onboarding` | Account setup status and verification email |
+| `feedback` | Report a bug, an idea, or a question |
+| `usage` | Billing-period usage, daily usage, rate limits |
+| `apiKeys` | Create, list, revoke keys |
+| `auth` | Key info and refresh |
+| `companies` | The key's own company |
+| `quotes` | Legacy partner quote queue. Submission answers 501; use `instantQuotes` |
+
+### Bonds
 
 ```typescript
-// List all documents
-const { documents, pagination } = await client.documents.list();
+const start = await client.bonds.start({ state: 'TX', bondName: 'notary' });
+```
 
-// Filter by type and status
-const policies = await client.documents.list({
-  documentType: 'policy',
-  status: 'completed',
-  limit: 50,
-  offset: 0
-});
+### Claims
 
-// Paginate
-while (pagination.hasMore) {
-  const next = await client.documents.list({ offset: pagination.offset + 50 });
-  // ...
-}
+```typescript
+const claim = await client.claims.file({ description: 'Water damage in the kitchen', incidentDate: '2026-10-01' });
+console.log(claim.claimId, claim.status, claim.portalUrl);
 ```
 
-#### Wait for Extraction
+A 403 with `reason: 'gate_not_acknowledged'` means the claims disclaimer is not accepted yet. The owner accepts it once in the portal (`err.body.portalUrl`).
+
+### Feedback
 
 ```typescript
-const result = await client.documents.waitForExtraction('document-uuid', {
-  timeoutMs: 120000,      // 2 minutes max
-  pollIntervalMs: 2000,   // Check every 2 seconds
-  onStatusChange: (status) => console.log('Status:', status)
+const { id } = await client.feedback.submit({
+  type: 'bug',
+  message: 'quote submit hung on the delivery question',
+  context: { command: 'quote submit', exitCode: 1, traceId: 'trace-from-the-error' },
 });
-
-if (result.status === 'completed') {
-  console.log('Policies found:', result.extraction?.policies.length);
-} else if (result.status === 'error') {
-  console.error('Processing failed:', result.error?.message);
-}
 ```
 
 ### Appetite
 
-Which carriers will write a risk. Needs an API key with the `appetite:read` scope, which `read` and `write` do not include. A warm cache hit returns the result at once; a cold match returns a job to poll.
+Needs a key with the `appetite:read` scope. A warm cache hit returns the result at once; a cold match returns a job to poll.
 
 ```typescript
 const start = await client.appetite.match({
@@ -297,19 +314,12 @@ const start = await client.appetite.match({
   industry: 'commercial bakery',
   coverageTypes: ['general_liability', 'workers_comp'],
 });
-
-const result = start.status === 'succeeded'
-  ? start
-  : await client.appetite.waitForMatch(start.jobId);
-
-for (const c of result.carrierResults) {
-  console.log(c.carrier, c.overallStatus, c.productsAvailable);
-}
+const result = start.status === 'succeeded' ? start : await client.appetite.waitForMatch(start.jobId);
 ```
 
 ### Leads
 
-Send a prospect business to Delegance. Idempotent on `externalId`, and a contact email that already belongs to a company returns that company.
+Idempotent on `externalId`. A contact email that already belongs to a company returns that company.
 
 ```typescript
 const { companyId } = await client.leads.create({
@@ -320,77 +330,63 @@ const { companyId } = await client.leads.create({
 });
 ```
 
-## Error Handling
+## Use it from an AI agent
 
-The SDK throws typed errors for different scenarios:
+Claude Code, Codex, Gemini CLI, and other coding agents can drive the SDK or the CLI. The CLI is often simpler for an agent: `npx -y @delegance/cli quote start --json` prints the questions as JSON, and `--answers answers.json` files them. See the CLI README section "Use it from an AI agent" and https://portal.delegancebrokerage.com/docs/cli.
 
-```typescript
-import { 
-  AuthenticationError,
-  ForbiddenError,
-  ValidationError,
-  NotFoundError,
-  NotImplementedError,
-  RateLimitError,
-  DeleganceError
-} from '@delegance/sdk';
+Rules that keep an agent safe:
 
-try {
-  await client.documents.get('invalid-uuid');
-} catch (error) {
-  if (error instanceof AuthenticationError) {
-    console.error('Invalid API key');
-  } else if (error instanceof ForbiddenError) {
-    console.error('Key lacks the scope for this call');
-  } else if (error instanceof NotFoundError) {
-    console.error('Document not found');
-  } else if (error instanceof NotImplementedError) {
-    console.error('Not available over the API yet:', error.message);
-  } else if (error instanceof ValidationError) {
-    console.error('Invalid input:', error.details);
-  } else if (error instanceof RateLimitError) {
-    console.error('Rate limited, retry after:', error.retryAfter);
-  } else if (error instanceof DeleganceError) {
-    console.error('API error:', error.message, 'Status:', error.statusCode);
-  }
-}
-```
+- Read the key from `DELEGANCE_API_KEY`. Never paste it into a prompt or a file the agent commits.
+- Pass your own `idempotencyKey` to `submit()`, `bind()`, and `brokerHandoff()` when the agent may retry across restarts. The same key lands on the same request.
+- Gate on `err.reason` and `err.code`, never on the message text.
+
+## Configuration
 
-The SDK retries network failures and 5xx responses other than 501. It never retries a 4xx or a 501.
+```typescript
+const client = new DeleganceClient({
+  apiKey: 'dlg_xxxxxxxx_sk_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx', // required
+  baseUrl: 'https://portal.delegancebrokerage.com',           // default
+  timeout: 30000,                                             // ms, default 30000
+  retries: 3,                                                 // default 3
+  headers: { 'X-Custom-Header': 'value' },
+});
+```
 
-## TypeScript Support
+`createClientFromEnv()` reads `DELEGANCE_API_KEY` and, if set, `DELEGANCE_BASE_URL`.
 
-The SDK is written in TypeScript and includes full type definitions:
+## Errors
 
 ```typescript
-import type {
-  Company,
-  Document,
-  DocumentWithExtraction,
-  ExtractedPolicy,
-  CreateCompanyInput,
-  UploadDocumentInput
+import {
+  DeleganceError,
+  AuthenticationError,  // 401
+  ValidationError,      // 400
+  ForbiddenError,       // 403
+  NotFoundError,        // 404
+  RateLimitError,       // 429
+  NotImplementedError,  // 501
 } from '@delegance/sdk';
 
-// Use Zod schemas for validation
-import { CreateCompanySchema, DocumentTypeSchema } from '@delegance/sdk';
-
-const result = CreateCompanySchema.safeParse(data);
-if (!result.success) {
-  console.error(result.error.issues);
+try {
+  await client.documents.list({ companyId: 'another-company' });
+} catch (err) {
+  if (err instanceof DeleganceError) {
+    console.error(err.statusCode, err.reason, err.code, err.message, err.traceId);
+  }
 }
 ```
 
-## Getting an API Key
+Every error carries:
 
-1. Log in to the portal at https://portal.delegancebrokerage.com
-2. Open Settings > API keys
-3. Click "Create API Key"
-4. Copy the key (it's only shown once!)
+- `statusCode`: the HTTP status.
+- `reason`: the machine-readable reason from the body, when sent (`not_available`, `quote_limit_reached`, `active_request_exists`, `attestation_required`, ...).
+- `code`: the body's `code`, when sent (`company_mismatch`). New in 0.2.1; on 0.2.0 read `err.body.code`.
+- `body`: the parsed error body, for fields such as `portalUrl`.
+- `traceId`: quote it to support.
 
-API keys have the format: `dlg_xxxxxxxx_sk_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx`
+Retries: the SDK retries network failures and 5xx answers other than 501, with backoff. It never retries a 4xx (including 429), a 501, or a 503 with `reason: 'not_available'`.
 
 ## Support
 
-- Documentation: https://portal.delegancebrokerage.com/docs/sdk
+- Docs: https://portal.delegancebrokerage.com/docs/sdk
 - Email: support@delegancebrokerage.com