@fleetless/sdk 4.3.0 → 4.4.0-next.1

package/dist/index.d.cts

@@ -508,14 +508,23 @@ type SessionTokens = z.infer<typeof sessionTokens>;
  *   `provider_misconfigured`, `provider_disabled` — the provider's or the
  *   developer's to fix, and the app can say so.
  * - `invalid_request` — the start parameters did not hold up.
- * - `quota_exceeded` — the org has as many app users as its `max_end_users`
- *   quota allows, so no account can be created for this identity. Named rather
- *   than folded into `no_access`, for `domain_not_allowed`'s reason: it is not
- *   about the person, the app can say what happened, and the remedy belongs to
- *   the developer rather than to whoever is trying to sign in. It is raised
+ * - `quota_exceeded` — the org is at the protection ceiling: it has as many
+ *   app users as its `max_end_users` quota allows, so no account can be
+ *   created for this identity. This also covers an org still on the beta,
+ *   whose plan is not enforced yet. Named rather than folded into
+ *   `no_access`, for `domain_not_allowed`'s reason: it is not about the
+ *   person, the app can say what happened, and the remedy belongs to the
+ *   developer rather than to whoever is trying to sign in. It is raised
  *   **only where an account would be created** — an identity that already has
  *   one signs in at the quota exactly as it does under it, because refusing a
  *   sign-in would turn a protection limit into an outage.
+ * - `plan_limit` — the org's plan has no room for another app user: it is at
+ *   its plan's `app_users` limit (fleetless/fleetless#103), counted across
+ *   every app of the org with pending invitations included. Checked before
+ *   the protection ceiling, and raised, like `quota_exceeded`, **only where
+ *   an account would be created**. The remedy is a higher plan or an add-on,
+ *   which is why it is not `quota_exceeded`. It is the same code the other
+ *   app-user doors answer as `409 plan_limit`.
  */
 declare const clientOidcErrorCode: z.ZodEnum<{
     no_access: "no_access";
@@ -530,6 +539,7 @@ declare const clientOidcErrorCode: z.ZodEnum<{
     provider_disabled: "provider_disabled";
     invalid_request: "invalid_request";
     quota_exceeded: "quota_exceeded";
+    plan_limit: "plan_limit";
 }>;
 type ClientOidcErrorCode = z.infer<typeof clientOidcErrorCode>;
 /**
@@ -854,7 +864,7 @@ type CancelRejectedDetails = z.infer<typeof cancelRejectedDetails>;
  * list is the shared vocabulary, not a closed set, so a new refusal never
  * needs a contracts release before it can be reported honestly.
  */
-declare const ERROR_CODES: readonly ["not_found", "validation_error", "bad_request", "unknown_datapoint", "invalid_token", "protocol_mismatch", "bridge_too_old", "invalid_frame", "duplicate_slug", "reserved_slug", "unknown_slug", "unknown_field_path", "unknown_type", "unknown_topic", "invalid_rate", "invalid_range", "config_conflict", "no_data", "robot_offline", "bridge_timeout", "unauthorized", "forbidden", "invalid_credentials", "token_expired", "token_revoked", "email_taken", "identifier_taken", "weak_password", "account_blocked", "busy", "parameter_invalid", "cancel_rejected", "job_lost", "job_unknown_to_bridge", "action_server_lost", "action_failed", "goal_rejected", "goal_send_failed", "result_failed", "goal_uncontrollable", "bridge_disconnected", "config_changed", "publisher_busy", "unknown_command", "not_subscribable", "camera_offline", "no_snapshot_yet", "live_unavailable", "wrong_kind", "not_recorded", "not_aggregatable", "quota_exceeded", "credential_in_use", "goal_timeout", "robot_in_use", "robot_deletion_partial", "job_queue_full", "invalid_uuid", "rate_limited", "tier_required", "token_spent", "service_timeout", "asset_missing", "dynamic_registration_disabled", "client_limit_reached", "idp_unavailable", "mcp_disabled", "tool_not_available", "capability_required", "last_owner", "role_name_taken", "role_in_use", "last_role", "target_state_conflict", "signup_closed", "draft_not_a_document", "internal_error", "not_cancellable", "unsupported_media_type", "wrong_browser", "invalid_yaml", "unstorable_yaml", "registration_closed", "domain_not_allowed", "email_unverified", "origin_not_allowed", "template_invalid", "provider_disabled", "provider_misconfigured", "invalid_redirect_uri", "interaction_expired", "invalid_code", "method_not_allowed"];
+declare const ERROR_CODES: readonly ["not_found", "validation_error", "bad_request", "unknown_datapoint", "invalid_token", "protocol_mismatch", "bridge_too_old", "invalid_frame", "duplicate_slug", "reserved_slug", "unknown_slug", "unknown_field_path", "unknown_type", "unknown_topic", "invalid_rate", "invalid_range", "config_conflict", "no_data", "robot_offline", "bridge_timeout", "unauthorized", "forbidden", "invalid_credentials", "token_expired", "token_revoked", "email_taken", "identifier_taken", "weak_password", "account_blocked", "busy", "parameter_invalid", "cancel_rejected", "job_lost", "job_unknown_to_bridge", "action_server_lost", "action_failed", "goal_rejected", "goal_send_failed", "result_failed", "goal_uncontrollable", "bridge_disconnected", "config_changed", "publisher_busy", "unknown_command", "not_subscribable", "camera_offline", "no_snapshot_yet", "live_unavailable", "wrong_kind", "not_recorded", "not_aggregatable", "quota_exceeded", "credential_in_use", "goal_timeout", "robot_in_use", "robot_deletion_partial", "job_queue_full", "invalid_uuid", "rate_limited", "tier_required", "token_spent", "service_timeout", "asset_missing", "dynamic_registration_disabled", "client_limit_reached", "idp_unavailable", "mcp_disabled", "tool_not_available", "capability_required", "last_owner", "role_name_taken", "role_in_use", "last_role", "target_state_conflict", "signup_closed", "draft_not_a_document", "internal_error", "not_cancellable", "unsupported_media_type", "wrong_browser", "invalid_yaml", "unstorable_yaml", "registration_closed", "domain_not_allowed", "email_unverified", "origin_not_allowed", "template_invalid", "provider_disabled", "provider_misconfigured", "invalid_redirect_uri", "interaction_expired", "invalid_code", "method_not_allowed", "plan_limit", "plan_required", "org_locked", "file_too_large"];
 type ErrorCode = (typeof ERROR_CODES)[number];
 
 /**

package/dist/index.d.ts

@@ -508,14 +508,23 @@ type SessionTokens = z.infer<typeof sessionTokens>;
  *   `provider_misconfigured`, `provider_disabled` — the provider's or the
  *   developer's to fix, and the app can say so.
  * - `invalid_request` — the start parameters did not hold up.
- * - `quota_exceeded` — the org has as many app users as its `max_end_users`
- *   quota allows, so no account can be created for this identity. Named rather
- *   than folded into `no_access`, for `domain_not_allowed`'s reason: it is not
- *   about the person, the app can say what happened, and the remedy belongs to
- *   the developer rather than to whoever is trying to sign in. It is raised
+ * - `quota_exceeded` — the org is at the protection ceiling: it has as many
+ *   app users as its `max_end_users` quota allows, so no account can be
+ *   created for this identity. This also covers an org still on the beta,
+ *   whose plan is not enforced yet. Named rather than folded into
+ *   `no_access`, for `domain_not_allowed`'s reason: it is not about the
+ *   person, the app can say what happened, and the remedy belongs to the
+ *   developer rather than to whoever is trying to sign in. It is raised
  *   **only where an account would be created** — an identity that already has
  *   one signs in at the quota exactly as it does under it, because refusing a
  *   sign-in would turn a protection limit into an outage.
+ * - `plan_limit` — the org's plan has no room for another app user: it is at
+ *   its plan's `app_users` limit (fleetless/fleetless#103), counted across
+ *   every app of the org with pending invitations included. Checked before
+ *   the protection ceiling, and raised, like `quota_exceeded`, **only where
+ *   an account would be created**. The remedy is a higher plan or an add-on,
+ *   which is why it is not `quota_exceeded`. It is the same code the other
+ *   app-user doors answer as `409 plan_limit`.
  */
 declare const clientOidcErrorCode: z.ZodEnum<{
     no_access: "no_access";
@@ -530,6 +539,7 @@ declare const clientOidcErrorCode: z.ZodEnum<{
     provider_disabled: "provider_disabled";
     invalid_request: "invalid_request";
     quota_exceeded: "quota_exceeded";
+    plan_limit: "plan_limit";
 }>;
 type ClientOidcErrorCode = z.infer<typeof clientOidcErrorCode>;
 /**
@@ -854,7 +864,7 @@ type CancelRejectedDetails = z.infer<typeof cancelRejectedDetails>;
  * list is the shared vocabulary, not a closed set, so a new refusal never
  * needs a contracts release before it can be reported honestly.
  */
-declare const ERROR_CODES: readonly ["not_found", "validation_error", "bad_request", "unknown_datapoint", "invalid_token", "protocol_mismatch", "bridge_too_old", "invalid_frame", "duplicate_slug", "reserved_slug", "unknown_slug", "unknown_field_path", "unknown_type", "unknown_topic", "invalid_rate", "invalid_range", "config_conflict", "no_data", "robot_offline", "bridge_timeout", "unauthorized", "forbidden", "invalid_credentials", "token_expired", "token_revoked", "email_taken", "identifier_taken", "weak_password", "account_blocked", "busy", "parameter_invalid", "cancel_rejected", "job_lost", "job_unknown_to_bridge", "action_server_lost", "action_failed", "goal_rejected", "goal_send_failed", "result_failed", "goal_uncontrollable", "bridge_disconnected", "config_changed", "publisher_busy", "unknown_command", "not_subscribable", "camera_offline", "no_snapshot_yet", "live_unavailable", "wrong_kind", "not_recorded", "not_aggregatable", "quota_exceeded", "credential_in_use", "goal_timeout", "robot_in_use", "robot_deletion_partial", "job_queue_full", "invalid_uuid", "rate_limited", "tier_required", "token_spent", "service_timeout", "asset_missing", "dynamic_registration_disabled", "client_limit_reached", "idp_unavailable", "mcp_disabled", "tool_not_available", "capability_required", "last_owner", "role_name_taken", "role_in_use", "last_role", "target_state_conflict", "signup_closed", "draft_not_a_document", "internal_error", "not_cancellable", "unsupported_media_type", "wrong_browser", "invalid_yaml", "unstorable_yaml", "registration_closed", "domain_not_allowed", "email_unverified", "origin_not_allowed", "template_invalid", "provider_disabled", "provider_misconfigured", "invalid_redirect_uri", "interaction_expired", "invalid_code", "method_not_allowed"];
+declare const ERROR_CODES: readonly ["not_found", "validation_error", "bad_request", "unknown_datapoint", "invalid_token", "protocol_mismatch", "bridge_too_old", "invalid_frame", "duplicate_slug", "reserved_slug", "unknown_slug", "unknown_field_path", "unknown_type", "unknown_topic", "invalid_rate", "invalid_range", "config_conflict", "no_data", "robot_offline", "bridge_timeout", "unauthorized", "forbidden", "invalid_credentials", "token_expired", "token_revoked", "email_taken", "identifier_taken", "weak_password", "account_blocked", "busy", "parameter_invalid", "cancel_rejected", "job_lost", "job_unknown_to_bridge", "action_server_lost", "action_failed", "goal_rejected", "goal_send_failed", "result_failed", "goal_uncontrollable", "bridge_disconnected", "config_changed", "publisher_busy", "unknown_command", "not_subscribable", "camera_offline", "no_snapshot_yet", "live_unavailable", "wrong_kind", "not_recorded", "not_aggregatable", "quota_exceeded", "credential_in_use", "goal_timeout", "robot_in_use", "robot_deletion_partial", "job_queue_full", "invalid_uuid", "rate_limited", "tier_required", "token_spent", "service_timeout", "asset_missing", "dynamic_registration_disabled", "client_limit_reached", "idp_unavailable", "mcp_disabled", "tool_not_available", "capability_required", "last_owner", "role_name_taken", "role_in_use", "last_role", "target_state_conflict", "signup_closed", "draft_not_a_document", "internal_error", "not_cancellable", "unsupported_media_type", "wrong_browser", "invalid_yaml", "unstorable_yaml", "registration_closed", "domain_not_allowed", "email_unverified", "origin_not_allowed", "template_invalid", "provider_disabled", "provider_misconfigured", "invalid_redirect_uri", "interaction_expired", "invalid_code", "method_not_allowed", "plan_limit", "plan_required", "org_locked", "file_too_large"];
 type ErrorCode = (typeof ERROR_CODES)[number];
 
 /**