@drawbridge/drawbridge-utils 0.0.132 → 0.0.134

package/dist/connections/index.cjs

@@ -1370,10 +1370,6 @@ var featuresFor = (array = []) => Object.values({
   },
   { denied: {}, granted: {} }
 );
-var overage = (actionCents) => ({
-  actionCents,
-  overages: { actions: String(actionCents) }
-});
 var all = {
   features: (array = []) => featuresFor([
     connection.attentive.key,
@@ -1455,7 +1451,7 @@ var plans = {
         ["Storage", "10GB"]
       ]
     },
-    ...overage(2.5),
+    actionCents: 2.5,
     title: "Starter",
     conversion: 2
   },
@@ -1486,7 +1482,7 @@ var plans = {
         ["Storage", "20GB"]
       ]
     },
-    ...overage(2),
+    actionCents: 2,
     title: "Pro",
     conversion: 1.5
   },
@@ -1517,7 +1513,7 @@ var plans = {
         ["Storage", "50GB"]
       ]
     },
-    ...overage(1.85),
+    actionCents: 1.85,
     title: "Premium",
     conversion: 1
   },
@@ -1548,7 +1544,7 @@ var plans = {
         ["Storage", "100GB"]
       ]
     },
-    ...overage(1.5),
+    actionCents: 1.5,
     title: "Elite",
     conversion: 0.5
   }
@@ -1570,12 +1566,10 @@ var resolvePlan = (subscription) => {
     // silently lacking it would be a support ticket, not a pricing decision.
     features: all.features([organization.networking.key, ...((_a = custom.features) == null ? void 0 : _a.granted) || []]),
     limits: all.limits(((_b = custom.limits) == null ? void 0 : _b.organization) || {}),
-    // A custom plan stores its overage BARE on `custom.overages` — a different
-    // shape from the catalog's nested one. Number() so a deal stored as a string
-    // still resolves to cents-per-action; an unnamed overage stays undefined
-    // (it bills nothing) rather than becoming NaN.
+    // A custom plan stores its overage BARE on `custom.overages`. Number() so
+    // a deal stored as a string still resolves to cents-per-action; an unnamed
+    // overage stays undefined (it bills nothing) rather than becoming NaN.
     actionCents: custom.overages == null ? void 0 : Number(custom.overages),
-    overages: { actions: custom.overages },
     title: custom.title || "Custom"
   };
 };

package/dist/connections/index.js

@@ -1296,10 +1296,6 @@ var featuresFor = (array = []) => Object.values({
   },
   { denied: {}, granted: {} }
 );
-var overage = (actionCents) => ({
-  actionCents,
-  overages: { actions: String(actionCents) }
-});
 var all = {
   features: (array = []) => featuresFor([
     connection.attentive.key,
@@ -1381,7 +1377,7 @@ var plans = {
         ["Storage", "10GB"]
       ]
     },
-    ...overage(2.5),
+    actionCents: 2.5,
     title: "Starter",
     conversion: 2
   },
@@ -1412,7 +1408,7 @@ var plans = {
         ["Storage", "20GB"]
       ]
     },
-    ...overage(2),
+    actionCents: 2,
     title: "Pro",
     conversion: 1.5
   },
@@ -1443,7 +1439,7 @@ var plans = {
         ["Storage", "50GB"]
       ]
     },
-    ...overage(1.85),
+    actionCents: 1.85,
     title: "Premium",
     conversion: 1
   },
@@ -1474,7 +1470,7 @@ var plans = {
         ["Storage", "100GB"]
       ]
     },
-    ...overage(1.5),
+    actionCents: 1.5,
     title: "Elite",
     conversion: 0.5
   }
@@ -1496,12 +1492,10 @@ var resolvePlan = (subscription) => {
     // silently lacking it would be a support ticket, not a pricing decision.
     features: all.features([organization.networking.key, ...((_a = custom.features) == null ? void 0 : _a.granted) || []]),
     limits: all.limits(((_b = custom.limits) == null ? void 0 : _b.organization) || {}),
-    // A custom plan stores its overage BARE on `custom.overages` — a different
-    // shape from the catalog's nested one. Number() so a deal stored as a string
-    // still resolves to cents-per-action; an unnamed overage stays undefined
-    // (it bills nothing) rather than becoming NaN.
+    // A custom plan stores its overage BARE on `custom.overages`. Number() so
+    // a deal stored as a string still resolves to cents-per-action; an unnamed
+    // overage stays undefined (it bills nothing) rather than becoming NaN.
     actionCents: custom.overages == null ? void 0 : Number(custom.overages),
-    overages: { actions: custom.overages },
     title: custom.title || "Custom"
   };
 };

package/dist/plans.cjs

@@ -291,10 +291,6 @@ var featuresFor = (array = []) => Object.values({
   },
   { denied: {}, granted: {} }
 );
-var overage = (actionCents) => ({
-  actionCents,
-  overages: { actions: String(actionCents) }
-});
 var unitAmountDecimal = (cents) => {
   const value = Number(cents);
   if (cents == null || !Number.isFinite(value)) throw new Error(`Invalid overage rate: ${cents}`);
@@ -381,7 +377,7 @@ var plans = {
         ["Storage", "10GB"]
       ]
     },
-    ...overage(2.5),
+    actionCents: 2.5,
     title: "Starter",
     conversion: 2
   },
@@ -412,7 +408,7 @@ var plans = {
         ["Storage", "20GB"]
       ]
     },
-    ...overage(2),
+    actionCents: 2,
     title: "Pro",
     conversion: 1.5
   },
@@ -443,7 +439,7 @@ var plans = {
         ["Storage", "50GB"]
       ]
     },
-    ...overage(1.85),
+    actionCents: 1.85,
     title: "Premium",
     conversion: 1
   },
@@ -474,7 +470,7 @@ var plans = {
         ["Storage", "100GB"]
       ]
     },
-    ...overage(1.5),
+    actionCents: 1.5,
     title: "Elite",
     conversion: 0.5
   }
@@ -496,12 +492,10 @@ var resolvePlan = (subscription) => {
     // silently lacking it would be a support ticket, not a pricing decision.
     features: all.features([organization.networking.key, ...((_a = custom.features) == null ? void 0 : _a.granted) || []]),
     limits: all.limits(((_b = custom.limits) == null ? void 0 : _b.organization) || {}),
-    // A custom plan stores its overage BARE on `custom.overages` — a different
-    // shape from the catalog's nested one. Number() so a deal stored as a string
-    // still resolves to cents-per-action; an unnamed overage stays undefined
-    // (it bills nothing) rather than becoming NaN.
+    // A custom plan stores its overage BARE on `custom.overages`. Number() so
+    // a deal stored as a string still resolves to cents-per-action; an unnamed
+    // overage stays undefined (it bills nothing) rather than becoming NaN.
     actionCents: custom.overages == null ? void 0 : Number(custom.overages),
-    overages: { actions: custom.overages },
     title: custom.title || "Custom"
   };
 };

package/dist/plans.d.cts

@@ -31,21 +31,12 @@ const featuresFor = ( array = [] ) => Object.values({
 	{ denied : {}, granted : {} }
 );
 
-// Overage pricing, unit-explicit.
-//
-// `actionCents` is CENTS PER ACTION, as a number: 2.5 = $0.025. Before
-// 2026-05-31 the same rate was encoded as dollars-per-1,000-actions, Stripe read
-// it as per-action, and every paid tier billed 10x. `overages.actions` — the
-// string this used to be the only name for — is kept as a byte-identical alias
-// so consumers can be pin-bumped in any order; drop it once they all read
-// `actionCents`.
+// Each paid plan's `actionCents` is CENTS PER ACTION, as a number: 2.5 = $0.025.
+// Before 2026-05-31 the rate was encoded as dollars-per-1,000-actions, Stripe
+// read it as per-action, and every paid tier billed 10x.
 //
 // Sub-cent precision is deliberate: Premium's 1.85¢ does not fit integer cents
 // (2¢ is +8%, 1¢ is −46%).
-const overage = ( actionCents ) => ({
-	actionCents,
-	overages : { actions : String( actionCents ) }
-});
 
 // Cents → Stripe's `unit_amount_decimal`.
 //
@@ -148,7 +139,7 @@ const plans = {
 				[ 'Storage', '10GB' ]
 			]
 		},
-		...overage( 2.5 ),
+		actionCents : 2.5,
 		title : 'Starter',
 		conversion : 2
 	},
@@ -179,7 +170,7 @@ const plans = {
 				[ 'Storage', '20GB' ]
 			]
 		},
-		...overage( 2 ),
+		actionCents : 2,
 		title : 'Pro',
 		conversion : 1.5
 	},
@@ -210,7 +201,7 @@ const plans = {
 				[ 'Storage', '50GB' ]
 			]
 		},
-		...overage( 1.85 ),
+		actionCents : 1.85,
 		title : 'Premium',
 		conversion : 1
 	},
@@ -241,7 +232,7 @@ const plans = {
 				[ 'Storage', '100GB' ]
 			]
 		},
-		...overage( 1.5 ),
+		actionCents : 1.5,
 		title : 'Elite',
 		conversion : 0.5
 	},
@@ -279,12 +270,10 @@ const resolvePlan = ( subscription ) => {
 		// silently lacking it would be a support ticket, not a pricing decision.
 		features : all.features([ organization.networking.key, ...( custom.features?.granted || [] ) ]),
 		limits : all.limits( custom.limits?.organization || {} ),
-		// A custom plan stores its overage BARE on `custom.overages` — a different
-		// shape from the catalog's nested one. Number() so a deal stored as a string
-		// still resolves to cents-per-action; an unnamed overage stays undefined
-		// (it bills nothing) rather than becoming NaN.
+		// A custom plan stores its overage BARE on `custom.overages`. Number() so
+		// a deal stored as a string still resolves to cents-per-action; an unnamed
+		// overage stays undefined (it bills nothing) rather than becoming NaN.
 		actionCents : custom.overages == null ? undefined : Number( custom.overages ),
-		overages : { actions : custom.overages },
 		title : custom.title || 'Custom'
 	};
 

package/dist/plans.d.ts

@@ -31,21 +31,12 @@ const featuresFor = ( array = [] ) => Object.values({
 	{ denied : {}, granted : {} }
 );
 
-// Overage pricing, unit-explicit.
-//
-// `actionCents` is CENTS PER ACTION, as a number: 2.5 = $0.025. Before
-// 2026-05-31 the same rate was encoded as dollars-per-1,000-actions, Stripe read
-// it as per-action, and every paid tier billed 10x. `overages.actions` — the
-// string this used to be the only name for — is kept as a byte-identical alias
-// so consumers can be pin-bumped in any order; drop it once they all read
-// `actionCents`.
+// Each paid plan's `actionCents` is CENTS PER ACTION, as a number: 2.5 = $0.025.
+// Before 2026-05-31 the rate was encoded as dollars-per-1,000-actions, Stripe
+// read it as per-action, and every paid tier billed 10x.
 //
 // Sub-cent precision is deliberate: Premium's 1.85¢ does not fit integer cents
 // (2¢ is +8%, 1¢ is −46%).
-const overage = ( actionCents ) => ({
-	actionCents,
-	overages : { actions : String( actionCents ) }
-});
 
 // Cents → Stripe's `unit_amount_decimal`.
 //
@@ -148,7 +139,7 @@ const plans = {
 				[ 'Storage', '10GB' ]
 			]
 		},
-		...overage( 2.5 ),
+		actionCents : 2.5,
 		title : 'Starter',
 		conversion : 2
 	},
@@ -179,7 +170,7 @@ const plans = {
 				[ 'Storage', '20GB' ]
 			]
 		},
-		...overage( 2 ),
+		actionCents : 2,
 		title : 'Pro',
 		conversion : 1.5
 	},
@@ -210,7 +201,7 @@ const plans = {
 				[ 'Storage', '50GB' ]
 			]
 		},
-		...overage( 1.85 ),
+		actionCents : 1.85,
 		title : 'Premium',
 		conversion : 1
 	},
@@ -241,7 +232,7 @@ const plans = {
 				[ 'Storage', '100GB' ]
 			]
 		},
-		...overage( 1.5 ),
+		actionCents : 1.5,
 		title : 'Elite',
 		conversion : 0.5
 	},
@@ -279,12 +270,10 @@ const resolvePlan = ( subscription ) => {
 		// silently lacking it would be a support ticket, not a pricing decision.
 		features : all.features([ organization.networking.key, ...( custom.features?.granted || [] ) ]),
 		limits : all.limits( custom.limits?.organization || {} ),
-		// A custom plan stores its overage BARE on `custom.overages` — a different
-		// shape from the catalog's nested one. Number() so a deal stored as a string
-		// still resolves to cents-per-action; an unnamed overage stays undefined
-		// (it bills nothing) rather than becoming NaN.
+		// A custom plan stores its overage BARE on `custom.overages`. Number() so
+		// a deal stored as a string still resolves to cents-per-action; an unnamed
+		// overage stays undefined (it bills nothing) rather than becoming NaN.
 		actionCents : custom.overages == null ? undefined : Number( custom.overages ),
-		overages : { actions : custom.overages },
 		title : custom.title || 'Custom'
 	};
 

package/dist/plans.js

@@ -252,10 +252,6 @@ var featuresFor = (array = []) => Object.values({
   },
   { denied: {}, granted: {} }
 );
-var overage = (actionCents) => ({
-  actionCents,
-  overages: { actions: String(actionCents) }
-});
 var unitAmountDecimal = (cents) => {
   const value = Number(cents);
   if (cents == null || !Number.isFinite(value)) throw new Error(`Invalid overage rate: ${cents}`);
@@ -342,7 +338,7 @@ var plans = {
         ["Storage", "10GB"]
       ]
     },
-    ...overage(2.5),
+    actionCents: 2.5,
     title: "Starter",
     conversion: 2
   },
@@ -373,7 +369,7 @@ var plans = {
         ["Storage", "20GB"]
       ]
     },
-    ...overage(2),
+    actionCents: 2,
     title: "Pro",
     conversion: 1.5
   },
@@ -404,7 +400,7 @@ var plans = {
         ["Storage", "50GB"]
       ]
     },
-    ...overage(1.85),
+    actionCents: 1.85,
     title: "Premium",
     conversion: 1
   },
@@ -435,7 +431,7 @@ var plans = {
         ["Storage", "100GB"]
       ]
     },
-    ...overage(1.5),
+    actionCents: 1.5,
     title: "Elite",
     conversion: 0.5
   }
@@ -457,12 +453,10 @@ var resolvePlan = (subscription) => {
     // silently lacking it would be a support ticket, not a pricing decision.
     features: all.features([organization.networking.key, ...((_a = custom.features) == null ? void 0 : _a.granted) || []]),
     limits: all.limits(((_b = custom.limits) == null ? void 0 : _b.organization) || {}),
-    // A custom plan stores its overage BARE on `custom.overages` — a different
-    // shape from the catalog's nested one. Number() so a deal stored as a string
-    // still resolves to cents-per-action; an unnamed overage stays undefined
-    // (it bills nothing) rather than becoming NaN.
+    // A custom plan stores its overage BARE on `custom.overages`. Number() so
+    // a deal stored as a string still resolves to cents-per-action; an unnamed
+    // overage stays undefined (it bills nothing) rather than becoming NaN.
     actionCents: custom.overages == null ? void 0 : Number(custom.overages),
-    overages: { actions: custom.overages },
     title: custom.title || "Custom"
   };
 };

package/dist/pricing.cjs

@@ -303,10 +303,6 @@ var featuresFor = (array = []) => Object.values({
   },
   { denied: {}, granted: {} }
 );
-var overage = (actionCents) => ({
-  actionCents,
-  overages: { actions: String(actionCents) }
-});
 var unitAmountDecimal = (cents) => {
   const value = Number(cents);
   if (cents == null || !Number.isFinite(value)) throw new Error(`Invalid overage rate: ${cents}`);
@@ -393,7 +389,7 @@ var plans = {
         ["Storage", "10GB"]
       ]
     },
-    ...overage(2.5),
+    actionCents: 2.5,
     title: "Starter",
     conversion: 2
   },
@@ -424,7 +420,7 @@ var plans = {
         ["Storage", "20GB"]
       ]
     },
-    ...overage(2),
+    actionCents: 2,
     title: "Pro",
     conversion: 1.5
   },
@@ -455,7 +451,7 @@ var plans = {
         ["Storage", "50GB"]
       ]
     },
-    ...overage(1.85),
+    actionCents: 1.85,
     title: "Premium",
     conversion: 1
   },
@@ -486,7 +482,7 @@ var plans = {
         ["Storage", "100GB"]
       ]
     },
-    ...overage(1.5),
+    actionCents: 1.5,
     title: "Elite",
     conversion: 0.5
   }
@@ -508,12 +504,10 @@ var resolvePlan = (subscription) => {
     // silently lacking it would be a support ticket, not a pricing decision.
     features: all.features([organization.networking.key, ...((_a = custom.features) == null ? void 0 : _a.granted) || []]),
     limits: all.limits(((_b = custom.limits) == null ? void 0 : _b.organization) || {}),
-    // A custom plan stores its overage BARE on `custom.overages` — a different
-    // shape from the catalog's nested one. Number() so a deal stored as a string
-    // still resolves to cents-per-action; an unnamed overage stays undefined
-    // (it bills nothing) rather than becoming NaN.
+    // A custom plan stores its overage BARE on `custom.overages`. Number() so
+    // a deal stored as a string still resolves to cents-per-action; an unnamed
+    // overage stays undefined (it bills nothing) rather than becoming NaN.
     actionCents: custom.overages == null ? void 0 : Number(custom.overages),
-    overages: { actions: custom.overages },
     title: custom.title || "Custom"
   };
 };

package/dist/pricing.d.cts

@@ -25,8 +25,6 @@ import '@drawbridge/drawbridge-telemetry';
 //   actionCents            CENTS per action, number. 2.5 = $0.025.
 //                          Starter 2.5 · Pro 2 · Premium 1.85 · Elite 1.5.
 //                          Free has none — it is hard-capped at 200 actions.
-//   overages.actions       DEPRECATED alias of actionCents, as a string. Kept for
-//                          one release so consumers pin-bump in any order.
 //   unitAmountDecimal()    cents → Stripe `unit_amount_decimal` (a cents string).
 //   plans[ id ].conversion PERCENT of order value taken as the conversion fee.
 //   limits.*               counts, except storage which is BYTES.

package/dist/pricing.d.ts

@@ -25,8 +25,6 @@ import '@drawbridge/drawbridge-telemetry';
 //   actionCents            CENTS per action, number. 2.5 = $0.025.
 //                          Starter 2.5 · Pro 2 · Premium 1.85 · Elite 1.5.
 //                          Free has none — it is hard-capped at 200 actions.
-//   overages.actions       DEPRECATED alias of actionCents, as a string. Kept for
-//                          one release so consumers pin-bump in any order.
 //   unitAmountDecimal()    cents → Stripe `unit_amount_decimal` (a cents string).
 //   plans[ id ].conversion PERCENT of order value taken as the conversion fee.
 //   limits.*               counts, except storage which is BYTES.

package/dist/pricing.js

@@ -252,10 +252,6 @@ var featuresFor = (array = []) => Object.values({
   },
   { denied: {}, granted: {} }
 );
-var overage = (actionCents) => ({
-  actionCents,
-  overages: { actions: String(actionCents) }
-});
 var unitAmountDecimal = (cents) => {
   const value = Number(cents);
   if (cents == null || !Number.isFinite(value)) throw new Error(`Invalid overage rate: ${cents}`);
@@ -342,7 +338,7 @@ var plans = {
         ["Storage", "10GB"]
       ]
     },
-    ...overage(2.5),
+    actionCents: 2.5,
     title: "Starter",
     conversion: 2
   },
@@ -373,7 +369,7 @@ var plans = {
         ["Storage", "20GB"]
       ]
     },
-    ...overage(2),
+    actionCents: 2,
     title: "Pro",
     conversion: 1.5
   },
@@ -404,7 +400,7 @@ var plans = {
         ["Storage", "50GB"]
       ]
     },
-    ...overage(1.85),
+    actionCents: 1.85,
     title: "Premium",
     conversion: 1
   },
@@ -435,7 +431,7 @@ var plans = {
         ["Storage", "100GB"]
       ]
     },
-    ...overage(1.5),
+    actionCents: 1.5,
     title: "Elite",
     conversion: 0.5
   }
@@ -457,12 +453,10 @@ var resolvePlan = (subscription) => {
     // silently lacking it would be a support ticket, not a pricing decision.
     features: all.features([organization.networking.key, ...((_a = custom.features) == null ? void 0 : _a.granted) || []]),
     limits: all.limits(((_b = custom.limits) == null ? void 0 : _b.organization) || {}),
-    // A custom plan stores its overage BARE on `custom.overages` — a different
-    // shape from the catalog's nested one. Number() so a deal stored as a string
-    // still resolves to cents-per-action; an unnamed overage stays undefined
-    // (it bills nothing) rather than becoming NaN.
+    // A custom plan stores its overage BARE on `custom.overages`. Number() so
+    // a deal stored as a string still resolves to cents-per-action; an unnamed
+    // overage stays undefined (it bills nothing) rather than becoming NaN.
     actionCents: custom.overages == null ? void 0 : Number(custom.overages),
-    overages: { actions: custom.overages },
     title: custom.title || "Custom"
   };
 };

package/dist/providers.cjs

@@ -1276,10 +1276,6 @@ var featuresFor = (array = []) => Object.values({
   },
   { denied: {}, granted: {} }
 );
-var overage = (actionCents) => ({
-  actionCents,
-  overages: { actions: String(actionCents) }
-});
 var all = {
   features: (array = []) => featuresFor([
     connection.attentive.key,
@@ -1361,7 +1357,7 @@ var plans = {
         ["Storage", "10GB"]
       ]
     },
-    ...overage(2.5),
+    actionCents: 2.5,
     title: "Starter",
     conversion: 2
   },
@@ -1392,7 +1388,7 @@ var plans = {
         ["Storage", "20GB"]
       ]
     },
-    ...overage(2),
+    actionCents: 2,
     title: "Pro",
     conversion: 1.5
   },
@@ -1423,7 +1419,7 @@ var plans = {
         ["Storage", "50GB"]
       ]
     },
-    ...overage(1.85),
+    actionCents: 1.85,
     title: "Premium",
     conversion: 1
   },
@@ -1454,7 +1450,7 @@ var plans = {
         ["Storage", "100GB"]
       ]
     },
-    ...overage(1.5),
+    actionCents: 1.5,
     title: "Elite",
     conversion: 0.5
   }
@@ -1476,12 +1472,10 @@ var resolvePlan = (subscription) => {
     // silently lacking it would be a support ticket, not a pricing decision.
     features: all.features([organization.networking.key, ...((_a = custom.features) == null ? void 0 : _a.granted) || []]),
     limits: all.limits(((_b = custom.limits) == null ? void 0 : _b.organization) || {}),
-    // A custom plan stores its overage BARE on `custom.overages` — a different
-    // shape from the catalog's nested one. Number() so a deal stored as a string
-    // still resolves to cents-per-action; an unnamed overage stays undefined
-    // (it bills nothing) rather than becoming NaN.
+    // A custom plan stores its overage BARE on `custom.overages`. Number() so
+    // a deal stored as a string still resolves to cents-per-action; an unnamed
+    // overage stays undefined (it bills nothing) rather than becoming NaN.
     actionCents: custom.overages == null ? void 0 : Number(custom.overages),
-    overages: { actions: custom.overages },
     title: custom.title || "Custom"
   };
 };

package/dist/providers.js

@@ -1232,10 +1232,6 @@ var featuresFor = (array = []) => Object.values({
   },
   { denied: {}, granted: {} }
 );
-var overage = (actionCents) => ({
-  actionCents,
-  overages: { actions: String(actionCents) }
-});
 var all = {
   features: (array = []) => featuresFor([
     connection.attentive.key,
@@ -1317,7 +1313,7 @@ var plans = {
         ["Storage", "10GB"]
       ]
     },
-    ...overage(2.5),
+    actionCents: 2.5,
     title: "Starter",
     conversion: 2
   },
@@ -1348,7 +1344,7 @@ var plans = {
         ["Storage", "20GB"]
       ]
     },
-    ...overage(2),
+    actionCents: 2,
     title: "Pro",
     conversion: 1.5
   },
@@ -1379,7 +1375,7 @@ var plans = {
         ["Storage", "50GB"]
       ]
     },
-    ...overage(1.85),
+    actionCents: 1.85,
     title: "Premium",
     conversion: 1
   },
@@ -1410,7 +1406,7 @@ var plans = {
         ["Storage", "100GB"]
       ]
     },
-    ...overage(1.5),
+    actionCents: 1.5,
     title: "Elite",
     conversion: 0.5
   }
@@ -1432,12 +1428,10 @@ var resolvePlan = (subscription) => {
     // silently lacking it would be a support ticket, not a pricing decision.
     features: all.features([organization.networking.key, ...((_a = custom.features) == null ? void 0 : _a.granted) || []]),
     limits: all.limits(((_b = custom.limits) == null ? void 0 : _b.organization) || {}),
-    // A custom plan stores its overage BARE on `custom.overages` — a different
-    // shape from the catalog's nested one. Number() so a deal stored as a string
-    // still resolves to cents-per-action; an unnamed overage stays undefined
-    // (it bills nothing) rather than becoming NaN.
+    // A custom plan stores its overage BARE on `custom.overages`. Number() so
+    // a deal stored as a string still resolves to cents-per-action; an unnamed
+    // overage stays undefined (it bills nothing) rather than becoming NaN.
     actionCents: custom.overages == null ? void 0 : Number(custom.overages),
-    overages: { actions: custom.overages },
     title: custom.title || "Custom"
   };
 };

package/dist/twilio.cjs

@@ -107,28 +107,37 @@ var twilio = {
   // NUMBER LIFECYCLE, same transport discipline as sms above. Endpoints and
   // parameter names are Twilio's own, from the AvailablePhoneNumbers and
   // IncomingPhoneNumbers resource docs:
-  //   GET    /2010-04-01/Accounts/{AccountSid}/AvailablePhoneNumbers/{CountryCode}/Local.json
-  //          query: SmsEnabled, AreaCode (US/CA only), PageSize (1-1000)
+  //   GET    /2010-04-01/Accounts/{AccountSid}/AvailablePhoneNumbers/{CountryCode}/TollFree.json
+  //          query: SmsEnabled, Contains, PageSize (1-1000)
   //   POST   /2010-04-01/Accounts/{AccountSid}/IncomingPhoneNumbers.json
   //          body: PhoneNumber (E.164), SmsUrl, SmsMethod
   //   DELETE /2010-04-01/Accounts/{AccountSid}/IncomingPhoneNumbers/{Sid}.json
   // Basic auth throughout, like Messages.
-  searchNumbers: async ({ accountSid, areaCode, authToken, contains, country = "US", cursor, limit = 10, request: request2 = request }) => {
+  //
+  // TOLL-FREE, not Local, and that is a carrier-registration decision rather
+  // than an inventory one. A US local number may not send A2P SMS without full
+  // 10DLC brand-and-campaign registration; a toll-free number needs only
+  // Toll-Free Verification — one API submission per number (see
+  // submitVerification below), no TCR brand, no campaign fees. Until a
+  // verification is approved, Twilio blocks the number's US-bound messages
+  // outright — which is why a purchased number starts `pending` and the send
+  // path refuses anything but `verified`.
+  searchNumbers: async ({ accountSid, authToken, contains, country = "US", cursor, limit = 10, request: request2 = request }) => {
     if (!accountSid || !authToken) throw new Error("Twilio credentials missing \u2014 accountSid, authToken");
     const page = Number(cursor) || 0;
     const result = await request2({
       method: "GET",
-      url: "https://api.twilio.com/2010-04-01/Accounts/" + accountSid + "/AvailablePhoneNumbers/" + country + "/Local.json",
+      url: "https://api.twilio.com/2010-04-01/Accounts/" + accountSid + "/AvailablePhoneNumbers/" + country + "/TollFree.json",
       headers: {
         "Authorization": "Basic " + Buffer.from(accountSid + ":" + authToken).toString("base64")
       },
       query: {
         SmsEnabled: true,
         PageSize: limit,
-        ...areaCode && { AreaCode: areaCode },
         // `Contains` is the vendor's matching-pattern filter — digits
-        // match anywhere in the number, so one search box serves "my
-        // area code" and "ends in 7777" alike.
+        // match anywhere in the number, so one search box serves "an 888
+        // prefix" and "ends in 7777" alike. (AreaCode is a Local-only
+        // filter and went with Local.json.)
         ...contains && { Contains: contains },
         ...page && { Page: page }
       }
@@ -175,6 +184,84 @@ var twilio = {
         "Authorization": "Basic " + Buffer.from(accountSid + ":" + authToken).toString("base64")
       }
     });
+  },
+  // TOLL-FREE VERIFICATION — the carrier registration that lets a purchased
+  // number actually deliver. From the Tollfree Verification resource docs
+  // (messaging.twilio.com, docs/messaging/api/tollfree-verification-resource):
+  //   POST   /v1/Tollfree/Verifications
+  //          required: BusinessName, BusinessWebsite, NotificationEmail,
+  //          UseCaseCategories (array), UseCaseSummary,
+  //          ProductionMessageSample, OptInImageUrls (array), OptInType,
+  //          MessageVolume, TollfreePhoneNumberSid (PN…)
+  //   GET    /v1/Tollfree/Verifications/{Sid}
+  //          status: PENDING_REVIEW | IN_REVIEW | TWILIO_APPROVED |
+  //          TWILIO_REJECTED, with rejection_reason beside a rejection.
+  // Basic auth, form-encoded, like everything above. There is no status
+  // callback on this resource — the caller polls the fetch.
+  //
+  // THE END BUSINESS'S DETAILS, never the platform's. Twilio rejects ISV
+  // submissions carrying the ISV's own identity (Toll-Free Verification for
+  // ISVs, support.twilio.com) — so businessName, website and email here are
+  // the merchant's, collected at purchase.
+  //
+  // The use-case fields are PLATFORM facts and live here beside the message
+  // composition for the same reason it does: how Drawbridge collects opt-in
+  // (its own hosted entry forms) and what its messages look like are
+  // properties of sending through Drawbridge, not of any one merchant.
+  submitVerification: async ({
+    accountSid,
+    authToken,
+    businessName,
+    email,
+    numberSid,
+    optInImage,
+    request: request2 = request,
+    volume,
+    website
+  }) => {
+    const missing = Object.entries({ accountSid, authToken, businessName, email, numberSid, optInImage, website }).filter(([, value]) => !value).map(([name]) => name);
+    if (missing.length) throw new Error("Toll-free verification submission missing \u2014 " + missing.join(", "));
+    const body = new URLSearchParams();
+    body.append("BusinessName", businessName);
+    body.append("BusinessWebsite", website);
+    body.append("NotificationEmail", email);
+    body.append("UseCaseCategories", "MARKETING");
+    body.append("UseCaseSummary", "Prize-draw entry confirmations, winner notifications and campaign updates to consumers who opted in on this business's Drawbridge-hosted entry form.");
+    body.append("ProductionMessageSample", businessName + "\nThanks for entering! We'll text you here about your entry.\nReply STOP to opt out");
+    body.append("OptInImageUrls", optInImage);
+    body.append("OptInType", "WEB_FORM");
+    body.append("MessageVolume", volume || "1,000");
+    body.append("TollfreePhoneNumberSid", numberSid);
+    const result = await request2({
+      method: "POST",
+      type: "form",
+      url: "https://messaging.twilio.com/v1/Tollfree/Verifications",
+      headers: {
+        "Authorization": "Basic " + Buffer.from(accountSid + ":" + authToken).toString("base64")
+      },
+      body
+    });
+    return {
+      sid: result == null ? void 0 : result.sid,
+      status: result == null ? void 0 : result.status
+    };
+  },
+  fetchVerification: async ({ accountSid, authToken, request: request2 = request, sid }) => {
+    if (!accountSid || !authToken) throw new Error("Twilio credentials missing \u2014 accountSid, authToken");
+    if (!sid) throw new Error("Twilio verification fetch needs the verification sid");
+    const result = await request2({
+      method: "GET",
+      url: "https://messaging.twilio.com/v1/Tollfree/Verifications/" + sid,
+      headers: {
+        "Authorization": "Basic " + Buffer.from(accountSid + ":" + authToken).toString("base64")
+      }
+    });
+    return {
+      // TWILIO_APPROVED → verified, TWILIO_REJECTED → rejected, both
+      // review states → pending.
+      outcome: (result == null ? void 0 : result.status) === "TWILIO_APPROVED" ? "approved" : (result == null ? void 0 : result.status) === "TWILIO_REJECTED" ? "rejected" : "pending",
+      reason: (result == null ? void 0 : result.rejection_reason) || null
+    };
   }
 };
 // Annotate the CommonJS export names for ESM import in node:

package/dist/twilio.d.cts

@@ -70,14 +70,23 @@ const twilio = {
 	// NUMBER LIFECYCLE, same transport discipline as sms above. Endpoints and
 	// parameter names are Twilio's own, from the AvailablePhoneNumbers and
 	// IncomingPhoneNumbers resource docs:
-	//   GET    /2010-04-01/Accounts/{AccountSid}/AvailablePhoneNumbers/{CountryCode}/Local.json
-	//          query: SmsEnabled, AreaCode (US/CA only), PageSize (1-1000)
+	//   GET    /2010-04-01/Accounts/{AccountSid}/AvailablePhoneNumbers/{CountryCode}/TollFree.json
+	//          query: SmsEnabled, Contains, PageSize (1-1000)
 	//   POST   /2010-04-01/Accounts/{AccountSid}/IncomingPhoneNumbers.json
 	//          body: PhoneNumber (E.164), SmsUrl, SmsMethod
 	//   DELETE /2010-04-01/Accounts/{AccountSid}/IncomingPhoneNumbers/{Sid}.json
 	// Basic auth throughout, like Messages.
+	//
+	// TOLL-FREE, not Local, and that is a carrier-registration decision rather
+	// than an inventory one. A US local number may not send A2P SMS without full
+	// 10DLC brand-and-campaign registration; a toll-free number needs only
+	// Toll-Free Verification — one API submission per number (see
+	// submitVerification below), no TCR brand, no campaign fees. Until a
+	// verification is approved, Twilio blocks the number's US-bound messages
+	// outright — which is why a purchased number starts `pending` and the send
+	// path refuses anything but `verified`.
 
-	searchNumbers : async ({ accountSid, areaCode, authToken, contains, country = 'US', cursor, limit = 10, request: request$1 = request }) => {
+	searchNumbers : async ({ accountSid, authToken, contains, country = 'US', cursor, limit = 10, request: request$1 = request }) => {
 
 		if( ! accountSid || ! authToken ) throw new Error( 'Twilio credentials missing — accountSid, authToken' );
 
@@ -93,17 +102,17 @@ const twilio = {
 
 		const result = await request$1({
 			method : 'GET',
-			url : 'https://api.twilio.com/2010-04-01/Accounts/' + accountSid + '/AvailablePhoneNumbers/' + country + '/Local.json',
+			url : 'https://api.twilio.com/2010-04-01/Accounts/' + accountSid + '/AvailablePhoneNumbers/' + country + '/TollFree.json',
 			headers : {
 				'Authorization' : 'Basic ' + Buffer.from( accountSid + ':' + authToken ).toString( 'base64' )
 			},
 			query : {
 				SmsEnabled : true,
 				PageSize : limit,
-				...( areaCode && { AreaCode : areaCode } ),
 				// `Contains` is the vendor's matching-pattern filter — digits
-				// match anywhere in the number, so one search box serves "my
-				// area code" and "ends in 7777" alike.
+				// match anywhere in the number, so one search box serves "an 888
+				// prefix" and "ends in 7777" alike. (AreaCode is a Local-only
+				// filter and went with Local.json.)
 				...( contains && { Contains : contains } ),
 				...( page && { Page : page } )
 			}
@@ -163,6 +172,111 @@ const twilio = {
 			}
 		});
 
+	},
+
+	// TOLL-FREE VERIFICATION — the carrier registration that lets a purchased
+	// number actually deliver. From the Tollfree Verification resource docs
+	// (messaging.twilio.com, docs/messaging/api/tollfree-verification-resource):
+	//   POST   /v1/Tollfree/Verifications
+	//          required: BusinessName, BusinessWebsite, NotificationEmail,
+	//          UseCaseCategories (array), UseCaseSummary,
+	//          ProductionMessageSample, OptInImageUrls (array), OptInType,
+	//          MessageVolume, TollfreePhoneNumberSid (PN…)
+	//   GET    /v1/Tollfree/Verifications/{Sid}
+	//          status: PENDING_REVIEW | IN_REVIEW | TWILIO_APPROVED |
+	//          TWILIO_REJECTED, with rejection_reason beside a rejection.
+	// Basic auth, form-encoded, like everything above. There is no status
+	// callback on this resource — the caller polls the fetch.
+	//
+	// THE END BUSINESS'S DETAILS, never the platform's. Twilio rejects ISV
+	// submissions carrying the ISV's own identity (Toll-Free Verification for
+	// ISVs, support.twilio.com) — so businessName, website and email here are
+	// the merchant's, collected at purchase.
+	//
+	// The use-case fields are PLATFORM facts and live here beside the message
+	// composition for the same reason it does: how Drawbridge collects opt-in
+	// (its own hosted entry forms) and what its messages look like are
+	// properties of sending through Drawbridge, not of any one merchant.
+	submitVerification : async ({
+		accountSid,
+		authToken,
+		businessName,
+		email,
+		numberSid,
+		optInImage,
+		request: request$1 = request,
+		volume,
+		website
+	}) => {
+
+		const missing = Object.entries({ accountSid, authToken, businessName, email, numberSid, optInImage, website })
+			.filter( ( [ , value ] ) => ! value )
+			.map( ( [ name ] ) => name );
+
+		if( missing.length ) throw new Error( 'Toll-free verification submission missing — ' + missing.join( ', ' ) );
+
+		// URLSearchParams rather than an object: UseCaseCategories and
+		// OptInImageUrls are array parameters, which Twilio takes as REPEATED
+		// form keys — an object body would comma-join them into one value.
+		const body = new URLSearchParams();
+
+		body.append( 'BusinessName', businessName );
+		body.append( 'BusinessWebsite', website );
+		body.append( 'NotificationEmail', email );
+		body.append( 'UseCaseCategories', 'MARKETING' );
+		body.append( 'UseCaseSummary', 'Prize-draw entry confirmations, winner notifications and campaign updates to consumers who opted in on this business\'s Drawbridge-hosted entry form.' );
+		// Mirrors the sms() composition above — newline-separated, brand first,
+		// opt-out line appended — so the reviewed sample is the sent shape.
+		body.append( 'ProductionMessageSample', businessName + '\nThanks for entering! We\'ll text you here about your entry.\nReply STOP to opt out' );
+		body.append( 'OptInImageUrls', optInImage );
+		// The entry form is a web form; the phone field is beside the consent
+		// language on the merchant's campaign page.
+		body.append( 'OptInType', 'WEB_FORM' );
+		body.append( 'MessageVolume', volume || '1,000' );
+		body.append( 'TollfreePhoneNumberSid', numberSid );
+
+		const result = await request$1({
+			method : 'POST',
+			type : 'form',
+			url : 'https://messaging.twilio.com/v1/Tollfree/Verifications',
+			headers : {
+				'Authorization' : 'Basic ' + Buffer.from( accountSid + ':' + authToken ).toString( 'base64' )
+			},
+			body
+		});
+
+		return {
+			sid : result?.sid,
+			status : result?.status
+		};
+
+	},
+
+	fetchVerification : async ({ accountSid, authToken, request: request$1 = request, sid }) => {
+
+		if( ! accountSid || ! authToken ) throw new Error( 'Twilio credentials missing — accountSid, authToken' );
+		if( ! sid ) throw new Error( 'Twilio verification fetch needs the verification sid' );
+
+		const result = await request$1({
+			method : 'GET',
+			url : 'https://messaging.twilio.com/v1/Tollfree/Verifications/' + sid,
+			headers : {
+				'Authorization' : 'Basic ' + Buffer.from( accountSid + ':' + authToken ).toString( 'base64' )
+			}
+		});
+
+		// The caller-facing shape is ours; the vendor's vocabulary stays here.
+		return {
+			// TWILIO_APPROVED → verified, TWILIO_REJECTED → rejected, both
+			// review states → pending.
+			outcome : result?.status === 'TWILIO_APPROVED'
+				? 'approved'
+				: result?.status === 'TWILIO_REJECTED'
+					? 'rejected'
+					: 'pending',
+			reason : result?.rejection_reason || null
+		};
+
 	}
 
 };

package/dist/twilio.d.ts

@@ -70,14 +70,23 @@ const twilio = {
 	// NUMBER LIFECYCLE, same transport discipline as sms above. Endpoints and
 	// parameter names are Twilio's own, from the AvailablePhoneNumbers and
 	// IncomingPhoneNumbers resource docs:
-	//   GET    /2010-04-01/Accounts/{AccountSid}/AvailablePhoneNumbers/{CountryCode}/Local.json
-	//          query: SmsEnabled, AreaCode (US/CA only), PageSize (1-1000)
+	//   GET    /2010-04-01/Accounts/{AccountSid}/AvailablePhoneNumbers/{CountryCode}/TollFree.json
+	//          query: SmsEnabled, Contains, PageSize (1-1000)
 	//   POST   /2010-04-01/Accounts/{AccountSid}/IncomingPhoneNumbers.json
 	//          body: PhoneNumber (E.164), SmsUrl, SmsMethod
 	//   DELETE /2010-04-01/Accounts/{AccountSid}/IncomingPhoneNumbers/{Sid}.json
 	// Basic auth throughout, like Messages.
+	//
+	// TOLL-FREE, not Local, and that is a carrier-registration decision rather
+	// than an inventory one. A US local number may not send A2P SMS without full
+	// 10DLC brand-and-campaign registration; a toll-free number needs only
+	// Toll-Free Verification — one API submission per number (see
+	// submitVerification below), no TCR brand, no campaign fees. Until a
+	// verification is approved, Twilio blocks the number's US-bound messages
+	// outright — which is why a purchased number starts `pending` and the send
+	// path refuses anything but `verified`.
 
-	searchNumbers : async ({ accountSid, areaCode, authToken, contains, country = 'US', cursor, limit = 10, request: request$1 = request }) => {
+	searchNumbers : async ({ accountSid, authToken, contains, country = 'US', cursor, limit = 10, request: request$1 = request }) => {
 
 		if( ! accountSid || ! authToken ) throw new Error( 'Twilio credentials missing — accountSid, authToken' );
 
@@ -93,17 +102,17 @@ const twilio = {
 
 		const result = await request$1({
 			method : 'GET',
-			url : 'https://api.twilio.com/2010-04-01/Accounts/' + accountSid + '/AvailablePhoneNumbers/' + country + '/Local.json',
+			url : 'https://api.twilio.com/2010-04-01/Accounts/' + accountSid + '/AvailablePhoneNumbers/' + country + '/TollFree.json',
 			headers : {
 				'Authorization' : 'Basic ' + Buffer.from( accountSid + ':' + authToken ).toString( 'base64' )
 			},
 			query : {
 				SmsEnabled : true,
 				PageSize : limit,
-				...( areaCode && { AreaCode : areaCode } ),
 				// `Contains` is the vendor's matching-pattern filter — digits
-				// match anywhere in the number, so one search box serves "my
-				// area code" and "ends in 7777" alike.
+				// match anywhere in the number, so one search box serves "an 888
+				// prefix" and "ends in 7777" alike. (AreaCode is a Local-only
+				// filter and went with Local.json.)
 				...( contains && { Contains : contains } ),
 				...( page && { Page : page } )
 			}
@@ -163,6 +172,111 @@ const twilio = {
 			}
 		});
 
+	},
+
+	// TOLL-FREE VERIFICATION — the carrier registration that lets a purchased
+	// number actually deliver. From the Tollfree Verification resource docs
+	// (messaging.twilio.com, docs/messaging/api/tollfree-verification-resource):
+	//   POST   /v1/Tollfree/Verifications
+	//          required: BusinessName, BusinessWebsite, NotificationEmail,
+	//          UseCaseCategories (array), UseCaseSummary,
+	//          ProductionMessageSample, OptInImageUrls (array), OptInType,
+	//          MessageVolume, TollfreePhoneNumberSid (PN…)
+	//   GET    /v1/Tollfree/Verifications/{Sid}
+	//          status: PENDING_REVIEW | IN_REVIEW | TWILIO_APPROVED |
+	//          TWILIO_REJECTED, with rejection_reason beside a rejection.
+	// Basic auth, form-encoded, like everything above. There is no status
+	// callback on this resource — the caller polls the fetch.
+	//
+	// THE END BUSINESS'S DETAILS, never the platform's. Twilio rejects ISV
+	// submissions carrying the ISV's own identity (Toll-Free Verification for
+	// ISVs, support.twilio.com) — so businessName, website and email here are
+	// the merchant's, collected at purchase.
+	//
+	// The use-case fields are PLATFORM facts and live here beside the message
+	// composition for the same reason it does: how Drawbridge collects opt-in
+	// (its own hosted entry forms) and what its messages look like are
+	// properties of sending through Drawbridge, not of any one merchant.
+	submitVerification : async ({
+		accountSid,
+		authToken,
+		businessName,
+		email,
+		numberSid,
+		optInImage,
+		request: request$1 = request,
+		volume,
+		website
+	}) => {
+
+		const missing = Object.entries({ accountSid, authToken, businessName, email, numberSid, optInImage, website })
+			.filter( ( [ , value ] ) => ! value )
+			.map( ( [ name ] ) => name );
+
+		if( missing.length ) throw new Error( 'Toll-free verification submission missing — ' + missing.join( ', ' ) );
+
+		// URLSearchParams rather than an object: UseCaseCategories and
+		// OptInImageUrls are array parameters, which Twilio takes as REPEATED
+		// form keys — an object body would comma-join them into one value.
+		const body = new URLSearchParams();
+
+		body.append( 'BusinessName', businessName );
+		body.append( 'BusinessWebsite', website );
+		body.append( 'NotificationEmail', email );
+		body.append( 'UseCaseCategories', 'MARKETING' );
+		body.append( 'UseCaseSummary', 'Prize-draw entry confirmations, winner notifications and campaign updates to consumers who opted in on this business\'s Drawbridge-hosted entry form.' );
+		// Mirrors the sms() composition above — newline-separated, brand first,
+		// opt-out line appended — so the reviewed sample is the sent shape.
+		body.append( 'ProductionMessageSample', businessName + '\nThanks for entering! We\'ll text you here about your entry.\nReply STOP to opt out' );
+		body.append( 'OptInImageUrls', optInImage );
+		// The entry form is a web form; the phone field is beside the consent
+		// language on the merchant's campaign page.
+		body.append( 'OptInType', 'WEB_FORM' );
+		body.append( 'MessageVolume', volume || '1,000' );
+		body.append( 'TollfreePhoneNumberSid', numberSid );
+
+		const result = await request$1({
+			method : 'POST',
+			type : 'form',
+			url : 'https://messaging.twilio.com/v1/Tollfree/Verifications',
+			headers : {
+				'Authorization' : 'Basic ' + Buffer.from( accountSid + ':' + authToken ).toString( 'base64' )
+			},
+			body
+		});
+
+		return {
+			sid : result?.sid,
+			status : result?.status
+		};
+
+	},
+
+	fetchVerification : async ({ accountSid, authToken, request: request$1 = request, sid }) => {
+
+		if( ! accountSid || ! authToken ) throw new Error( 'Twilio credentials missing — accountSid, authToken' );
+		if( ! sid ) throw new Error( 'Twilio verification fetch needs the verification sid' );
+
+		const result = await request$1({
+			method : 'GET',
+			url : 'https://messaging.twilio.com/v1/Tollfree/Verifications/' + sid,
+			headers : {
+				'Authorization' : 'Basic ' + Buffer.from( accountSid + ':' + authToken ).toString( 'base64' )
+			}
+		});
+
+		// The caller-facing shape is ours; the vendor's vocabulary stays here.
+		return {
+			// TWILIO_APPROVED → verified, TWILIO_REJECTED → rejected, both
+			// review states → pending.
+			outcome : result?.status === 'TWILIO_APPROVED'
+				? 'approved'
+				: result?.status === 'TWILIO_REJECTED'
+					? 'rejected'
+					: 'pending',
+			reason : result?.rejection_reason || null
+		};
+
 	}
 
 };

package/dist/twilio.js

@@ -82,28 +82,37 @@ var twilio = {
   // NUMBER LIFECYCLE, same transport discipline as sms above. Endpoints and
   // parameter names are Twilio's own, from the AvailablePhoneNumbers and
   // IncomingPhoneNumbers resource docs:
-  //   GET    /2010-04-01/Accounts/{AccountSid}/AvailablePhoneNumbers/{CountryCode}/Local.json
-  //          query: SmsEnabled, AreaCode (US/CA only), PageSize (1-1000)
+  //   GET    /2010-04-01/Accounts/{AccountSid}/AvailablePhoneNumbers/{CountryCode}/TollFree.json
+  //          query: SmsEnabled, Contains, PageSize (1-1000)
   //   POST   /2010-04-01/Accounts/{AccountSid}/IncomingPhoneNumbers.json
   //          body: PhoneNumber (E.164), SmsUrl, SmsMethod
   //   DELETE /2010-04-01/Accounts/{AccountSid}/IncomingPhoneNumbers/{Sid}.json
   // Basic auth throughout, like Messages.
-  searchNumbers: async ({ accountSid, areaCode, authToken, contains, country = "US", cursor, limit = 10, request: request2 = request }) => {
+  //
+  // TOLL-FREE, not Local, and that is a carrier-registration decision rather
+  // than an inventory one. A US local number may not send A2P SMS without full
+  // 10DLC brand-and-campaign registration; a toll-free number needs only
+  // Toll-Free Verification — one API submission per number (see
+  // submitVerification below), no TCR brand, no campaign fees. Until a
+  // verification is approved, Twilio blocks the number's US-bound messages
+  // outright — which is why a purchased number starts `pending` and the send
+  // path refuses anything but `verified`.
+  searchNumbers: async ({ accountSid, authToken, contains, country = "US", cursor, limit = 10, request: request2 = request }) => {
     if (!accountSid || !authToken) throw new Error("Twilio credentials missing \u2014 accountSid, authToken");
     const page = Number(cursor) || 0;
     const result = await request2({
       method: "GET",
-      url: "https://api.twilio.com/2010-04-01/Accounts/" + accountSid + "/AvailablePhoneNumbers/" + country + "/Local.json",
+      url: "https://api.twilio.com/2010-04-01/Accounts/" + accountSid + "/AvailablePhoneNumbers/" + country + "/TollFree.json",
       headers: {
         "Authorization": "Basic " + Buffer.from(accountSid + ":" + authToken).toString("base64")
       },
       query: {
         SmsEnabled: true,
         PageSize: limit,
-        ...areaCode && { AreaCode: areaCode },
         // `Contains` is the vendor's matching-pattern filter — digits
-        // match anywhere in the number, so one search box serves "my
-        // area code" and "ends in 7777" alike.
+        // match anywhere in the number, so one search box serves "an 888
+        // prefix" and "ends in 7777" alike. (AreaCode is a Local-only
+        // filter and went with Local.json.)
         ...contains && { Contains: contains },
         ...page && { Page: page }
       }
@@ -150,6 +159,84 @@ var twilio = {
         "Authorization": "Basic " + Buffer.from(accountSid + ":" + authToken).toString("base64")
       }
     });
+  },
+  // TOLL-FREE VERIFICATION — the carrier registration that lets a purchased
+  // number actually deliver. From the Tollfree Verification resource docs
+  // (messaging.twilio.com, docs/messaging/api/tollfree-verification-resource):
+  //   POST   /v1/Tollfree/Verifications
+  //          required: BusinessName, BusinessWebsite, NotificationEmail,
+  //          UseCaseCategories (array), UseCaseSummary,
+  //          ProductionMessageSample, OptInImageUrls (array), OptInType,
+  //          MessageVolume, TollfreePhoneNumberSid (PN…)
+  //   GET    /v1/Tollfree/Verifications/{Sid}
+  //          status: PENDING_REVIEW | IN_REVIEW | TWILIO_APPROVED |
+  //          TWILIO_REJECTED, with rejection_reason beside a rejection.
+  // Basic auth, form-encoded, like everything above. There is no status
+  // callback on this resource — the caller polls the fetch.
+  //
+  // THE END BUSINESS'S DETAILS, never the platform's. Twilio rejects ISV
+  // submissions carrying the ISV's own identity (Toll-Free Verification for
+  // ISVs, support.twilio.com) — so businessName, website and email here are
+  // the merchant's, collected at purchase.
+  //
+  // The use-case fields are PLATFORM facts and live here beside the message
+  // composition for the same reason it does: how Drawbridge collects opt-in
+  // (its own hosted entry forms) and what its messages look like are
+  // properties of sending through Drawbridge, not of any one merchant.
+  submitVerification: async ({
+    accountSid,
+    authToken,
+    businessName,
+    email,
+    numberSid,
+    optInImage,
+    request: request2 = request,
+    volume,
+    website
+  }) => {
+    const missing = Object.entries({ accountSid, authToken, businessName, email, numberSid, optInImage, website }).filter(([, value]) => !value).map(([name]) => name);
+    if (missing.length) throw new Error("Toll-free verification submission missing \u2014 " + missing.join(", "));
+    const body = new URLSearchParams();
+    body.append("BusinessName", businessName);
+    body.append("BusinessWebsite", website);
+    body.append("NotificationEmail", email);
+    body.append("UseCaseCategories", "MARKETING");
+    body.append("UseCaseSummary", "Prize-draw entry confirmations, winner notifications and campaign updates to consumers who opted in on this business's Drawbridge-hosted entry form.");
+    body.append("ProductionMessageSample", businessName + "\nThanks for entering! We'll text you here about your entry.\nReply STOP to opt out");
+    body.append("OptInImageUrls", optInImage);
+    body.append("OptInType", "WEB_FORM");
+    body.append("MessageVolume", volume || "1,000");
+    body.append("TollfreePhoneNumberSid", numberSid);
+    const result = await request2({
+      method: "POST",
+      type: "form",
+      url: "https://messaging.twilio.com/v1/Tollfree/Verifications",
+      headers: {
+        "Authorization": "Basic " + Buffer.from(accountSid + ":" + authToken).toString("base64")
+      },
+      body
+    });
+    return {
+      sid: result == null ? void 0 : result.sid,
+      status: result == null ? void 0 : result.status
+    };
+  },
+  fetchVerification: async ({ accountSid, authToken, request: request2 = request, sid }) => {
+    if (!accountSid || !authToken) throw new Error("Twilio credentials missing \u2014 accountSid, authToken");
+    if (!sid) throw new Error("Twilio verification fetch needs the verification sid");
+    const result = await request2({
+      method: "GET",
+      url: "https://messaging.twilio.com/v1/Tollfree/Verifications/" + sid,
+      headers: {
+        "Authorization": "Basic " + Buffer.from(accountSid + ":" + authToken).toString("base64")
+      }
+    });
+    return {
+      // TWILIO_APPROVED → verified, TWILIO_REJECTED → rejected, both
+      // review states → pending.
+      outcome: (result == null ? void 0 : result.status) === "TWILIO_APPROVED" ? "approved" : (result == null ? void 0 : result.status) === "TWILIO_REJECTED" ? "rejected" : "pending",
+      reason: (result == null ? void 0 : result.rejection_reason) || null
+    };
   }
 };
 export {

package/package.json

@@ -215,5 +215,5 @@
     "test": ". \"$HOME/.nvm/nvm.sh\" && nvm use && node --test"
   },
   "types": "dist/index.d.ts",
-  "version": "0.0.132"
+  "version": "0.0.134"
 }