@isnap/sdk 1.3.0-next.17 → 1.3.0-next.170

package/dist/generated/openapi.d.ts

@@ -387,7 +387,7 @@ export interface paths {
         };
         /**
          * List available lines (public marketplace)
-         * @description Browse the marketplace inventory of unassigned lines. Filter by billing tier, area code, country code, status. Returns only `status: available` and never the iSnap-internal `shared_pool` tier. Unauthenticated — partners use this in prospecting / quote flows.
+         * @description Browse the marketplace inventory of unassigned lines. Filter by billing tier, area code, country code, state, country. Returns only `status: available` and never the iSnap-internal `shared_pool` tier — `?status=` therefore accepts `available` alone and refuses any other status with a 400, rather than answering with a list you did not ask for (WHA-2777). Unauthenticated — partners use this in prospecting / quote flows.
          */
         get: {
             parameters: {
@@ -399,6 +399,7 @@ export interface paths {
                     state?: string;
                     /** @description Country filter — ISO alpha-2 code or country name. */
                     country?: string;
+                    /** @description Comma-separated set of statuses to filter on. Every member must be one of: available — anything else is a 400, never an empty list. Omitted or blank means no status filter. */
                     status?: string;
                     page?: number;
                     limit?: number;
@@ -551,7 +552,7 @@ export interface paths {
         };
         /**
          * Get line details (public marketplace)
-         * @description Fetch a single line by its `line_<base62>` id. Available unauthenticated for the marketplace browsing flow; partner-private metadata still requires API key access via `GET /v1/lines/my`.
+         * @description Fetch a single line by its `line_<base62>` id. Available unauthenticated for the marketplace browsing flow, where the `phone_number` is masked so the inventory cannot be scraped. Authenticate with your API key (or dashboard JWT) and, when you own the line, the `phone_number` comes back unmasked — the same full number `GET /v1/lines/my` returns (WHA-3030). A credential that does not own the line, or none at all, still gets the masked number.
          */
         get: {
             parameters: {
@@ -1059,7 +1060,7 @@ export interface paths {
         put?: never;
         /**
          * Activate a reserved line
-         * @description Commit a `reserved` line to `active`. Wholesale partners (no Stripe checkout surface) use this as the second phase of reserve→activate — they reserve, bill their own end-user, then activate within the 15-minute window with no per-line Stripe sub (EOM-metered), and may pick the inbound-only rental variant via `inbound_only`. Direct callers get the test/dev mock-sub shortcut (production direct activation happens via the Stripe webhook on `checkout.session.completed`); `inbound_only` is ignored for them (theirs comes from the checkout price).
+         * @description Commit a `reserved` line to `active`. **Wholesale partners only** (no Stripe checkout surface): this is the second phase of reserve→activate — they reserve, bill their own end-user, then activate within the 15-minute window with no per-line Stripe sub (EOM-metered), and may pick the INBOUND product via `inbound_only` (a line that cannot initiate — the contact must message first, after which the exchange is unrestricted; not receive-only). Direct customers get `402 checkout_required`: their line is activated by the `checkout.session.completed` webhook once `POST /v1/billing/checkout` is paid, which is what mints the Stripe subscription that bills them (§2.5 Flow A). `inbound_only` is meaningless for them — theirs comes from the checkout price.
          */
         post: {
             parameters: {
@@ -1109,6 +1110,15 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
+                /** @description Payment required — no billing relationship entitles this call */
+                402: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
                 /** @description Forbidden — caller authenticated but not allowed */
                 403: {
                     headers: {
@@ -1496,7 +1506,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/lines/{id}/release": {
+    "/v1/lines/{id}/terminate": {
         parameters: {
             query?: never;
             header?: never;
@@ -1506,8 +1516,8 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * Release a line back to the marketplace
-         * @description Cancel the line's ownership and return it to `available`. Cancels the underlying Stripe subscription at period end. The caller must own the line. See `/concepts/billing` for the proration rules.
+         * Terminate a line you own
+         * @description Permanently END an active line the caller owns — the self-serve counterpart to the admin terminate. Use this when your own customer cancels: `/release` only returns a *reserved* marketplace line to the shelf, while this ends a live `rental` line or a virtual `shared` line for good. The line flips to the terminal `cancelled` status and keeps its owner (who held it when it died is history, not a shelf return); queued messages fail with `carrier_terminated`, shared-fleet bindings are released (`binding.released`), device sessions are revoked, and `line.disconnected` fires with `reason: customer_initiated`. Billing stops in both shapes: a per-line Stripe subscription is cancelled immediately (not at period end), and a wholesale partner's end-of-month active-line count drops the line in the same breath. Dedicated hardware goes back to iSnap stock — the eSIM and Apple ID are recycled, never scrapped, because a customer ending a rental says nothing about whether the carrier plan is still good. **Idempotent**: terminating an already-terminated line returns 200 with the line unchanged and fires nothing a second time. Only an `active` or `suspended` line — the ones you are actually being billed for — is terminable: a merely `reserved` line is a 15-minute hold you give back with `/release`, and a `provisioning` pre-order line is cancelled through `/v1/pre-orders/{id}/cancel`. BYOD lines are refused (400) — that hardware is yours and is billed per device slot by `/v1/byod/*`; owned test lines are refused (403) until converted back with `/convert-from-test`.
          */
         post: {
             parameters: {
@@ -1518,9 +1528,13 @@ export interface paths {
                 };
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["TerminateLine"];
+                };
+            };
             responses: {
-                /** @description Line released */
+                /** @description Line terminated (or already terminated — the call is idempotent). Returns the line at its terminal `cancelled` status. */
                 200: {
                     headers: {
                         [name: string]: unknown;
@@ -1571,6 +1585,15 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
+                /** @description Conflict — concurrent or terminal state */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
                 /** @description Too many requests — rate limit exceeded */
                 429: {
                     headers: {
@@ -1597,18 +1620,20 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/lines/{id}/quota": {
+    "/v1/lines/{id}/cancel": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
+        get?: never;
+        put?: never;
         /**
-         * Get a line's quota snapshot
-         * @description Five-bucket quota snapshot: new-contacts, known-contacts, total daily messages, hourly, and minute counters with their effective limits plus 80%-warning flags. Drives the dashboard usage panel and partner self-service throttle decisions.
+         * Cancel a line at its next billing anniversary
+         * @description Schedule the END of a line you own for its next billing anniversary, and keep using it until then. This is the verb for "my own customer cancelled": the month is already paid for and iSnap never prorates, so terminating on the spot would destroy days you have bought. The line stays fully `active` — it sends, receives and bills exactly as before — and iSnap terminates it itself when `cancel_at` arrives, firing `line.terminated` with `origin: scheduled_cancellation`. The date is the next occurrence of `anniversary_at` strictly after now, clamped to the last day of a shorter month (a line taken on the 31st renews on the 28th in February and on the 31st again in March — the clamp never sticks). **Idempotent**: cancelling an already-cancelled line returns the SAME `cancel_at`, never a recomputed one, so a retry that happens to cross the anniversary cannot push your own cancellation a month into the future. Undo it with `/uncancel` any time before the date. Refused with 409 `line_has_no_anniversary` on a line that has none — state it with `/anniversary`, or end the line now with `/terminate`.
          */
-        get: {
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -1619,13 +1644,19 @@ export interface paths {
             };
             requestBody?: never;
             responses: {
-                /** @description 5-bucket quota snapshot */
+                /** @description Cancellation scheduled (or already scheduled — the call is idempotent). Returns the line, still `active`, with `cancel_at` set. */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["QuotaEnvelope"];
+                        "application/json": {
+                            /** @enum {boolean} */
+                            success: true;
+                            data: components["schemas"]["Line"];
+                            trace_id: string;
+                            request_id: string;
+                        };
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -1664,6 +1695,15 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
+                /** @description Conflict — concurrent or terminal state */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
                 /** @description Too many requests — rate limit exceeded */
                 429: {
                     headers: {
@@ -1684,32 +1724,28 @@ export interface paths {
                 };
             };
         };
-        put?: never;
-        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/v1/lines/{id}/queue": {
+    "/v1/lines/{id}/uncancel": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
+        get?: never;
+        put?: never;
         /**
-         * Inspect a line's queued and scheduled messages
-         * @description Cursor-paginated queue snapshot: per-row `to` / `body` / `status` (`queued` / `scheduled` / `delivered_to_device`) + the schedule reason and the activity-curve hour. Companion to `GET /v1/lines/{id}/quota` for partners debugging delivery delays.
+         * Undo a scheduled cancellation
+         * @description Clear a pending cancellation: `cancel_at` goes back to `null` and the line resumes renewing at its anniversary like any other. Nothing about the line changed while it was cancelled — it never stopped working — so there is nothing to restore. **A no-op on a line that is not cancelled**: 200 with the line and `cancel_at: null`, which is the honest answer to "make sure this line is not cancelled" and lets a reconciliation loop run without treating its own success as an error. Refused with 409 `line_already_terminated` once the anniversary has passed and iSnap has ended the line — that cannot be undone; order a new line instead.
          */
-        get: {
+        post: {
             parameters: {
-                query?: {
-                    limit?: number;
-                    cursor?: string;
-                    status?: "queued" | "scheduled" | "delivered_to_device";
-                };
+                query?: never;
                 header?: never;
                 path: {
                     id: string;
@@ -1718,13 +1754,19 @@ export interface paths {
             };
             requestBody?: never;
             responses: {
-                /** @description Queue inspection — summary + paginated items */
+                /** @description Cancellation cleared, or the line was not cancelled. Returns the line with `cancel_at: null`. */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["QueueEnvelope"];
+                        "application/json": {
+                            /** @enum {boolean} */
+                            success: true;
+                            data: components["schemas"]["Line"];
+                            trace_id: string;
+                            request_id: string;
+                        };
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -1763,6 +1805,15 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
+                /** @description Conflict — concurrent or terminal state */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
                 /** @description Too many requests — rate limit exceeded */
                 429: {
                     headers: {
@@ -1783,26 +1834,26 @@ export interface paths {
                 };
             };
         };
-        put?: never;
-        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/v1/lines/{id}/health": {
+    "/v1/lines/{id}/anniversary": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
+        get?: never;
+        put?: never;
         /**
-         * Get a BYOD line's health snapshot
-         * @description BYOD-only health rollup. `state` (`active` / `degraded` / `offline`) is derived from the device's fundamental capabilities — min(send_text, imessage) — with offline (no heartbeat) taking precedence. Also returns `runtime_capabilities` (the per-key tri-valued descriptor the device last reported), last heartbeat timestamp, daily quota headroom, Apple-ID-flagged flag, last-error string, bridge version. Rental tiers receive 403 `rental_health_not_exposed` — they don't own the hardware and surfacing transient state creates support-ticket noise.
+         * State the day you took this line
+         * @description Record the instant you took this line, which becomes the day of the month it renews on and the date `/cancel` waits for. **This is for lines migrated from your own system**, whose real start date iSnap cannot know: a line taken through the iSnap API is stamped automatically at activation and needs no call. A BYOD line is accepted here even though `/cancel` refuses it: it is on the same monthly meter and carries an anniversary, iSnap simply has no way to end it for you at that date yet. Overwrites an existing anniversary — a date somebody states beats a date iSnap inferred — but is refused with 409 `line_cancellation_pending` while a cancellation is scheduled, because that `cancel_at` was computed from the anniversary you are replacing and would otherwise end the line on a day nothing explains: uncancel, set the date, cancel again. Audited as `line.anniversary_set` with the previous value.
          */
-        get: {
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -1811,15 +1862,25 @@ export interface paths {
                 };
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["SetLineAnniversary"];
+                };
+            };
             responses: {
-                /** @description BYOD line health snapshot */
+                /** @description Anniversary recorded. Returns the line with the new `anniversary_at`. */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["LineHealthEnvelope"];
+                        "application/json": {
+                            /** @enum {boolean} */
+                            success: true;
+                            data: components["schemas"]["Line"];
+                            trace_id: string;
+                            request_id: string;
+                        };
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -1858,6 +1919,15 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
+                /** @description Conflict — concurrent or terminal state */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
                 /** @description Too many requests — rate limit exceeded */
                 429: {
                     headers: {
@@ -1878,26 +1948,26 @@ export interface paths {
                 };
             };
         };
-        put?: never;
-        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/v1/lines/{id}/config": {
+    "/v1/lines/{id}/release": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
+        get?: never;
+        put?: never;
         /**
-         * Get a line's effective send configuration
-         * @description Return the resolved send configuration for this line — tier defaults merged with per-line overrides. Surfaces effective quota caps, timezone, activity-curve target hour, and the `overridden_keys` list so partners can see which fields they've customised.
+         * Release a line back to the marketplace
+         * @description Cancel the line's ownership and return it to `available`. Cancels the underlying Stripe subscription at period end. The caller must own the line. See `/concepts/billing` for the proration rules.
          */
-        get: {
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -1908,13 +1978,19 @@ export interface paths {
             };
             requestBody?: never;
             responses: {
-                /** @description Effective config (tier defaults + per-line overrides) */
+                /** @description Line released */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["LineConfigEnvelope"];
+                        "application/json": {
+                            /** @enum {boolean} */
+                            success: true;
+                            data: components["schemas"]["Line"];
+                            trace_id: string;
+                            request_id: string;
+                        };
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -1973,16 +2049,24 @@ export interface paths {
                 };
             };
         };
-        put?: never;
-        post?: never;
         delete?: never;
         options?: never;
         head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/lines/{id}/quota": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
         /**
-         * Update a line's send configuration
-         * @description Merge-patch the line's per-line config overrides (quota caps, timezone, activity curve). Pass `null` for a key to revert it to the tier default. Validates the activity curve sums to 1.0 and rejects an unknown timezone with 400.
+         * Get a line's quota snapshot
+         * @description Five-bucket quota snapshot: new-contacts, known-contacts, total daily messages, hourly, and minute counters with their effective limits plus 80%-warning flags. Drives the dashboard usage panel and partner self-service throttle decisions.
          */
-        patch: {
+        get: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -1991,19 +2075,15 @@ export interface paths {
                 };
                 cookie?: never;
             };
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["LineConfigPatch"];
-                };
-            };
+            requestBody?: never;
             responses: {
-                /** @description Updated effective config (merged) + overridden_keys */
+                /** @description 5-bucket quota snapshot */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["LineConfigEnvelope"];
+                        "application/json": components["schemas"]["QuotaEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -2062,9 +2142,15 @@ export interface paths {
                 };
             };
         };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
         trace?: never;
     };
-    "/v1/pre-orders": {
+    "/v1/lines/{id}/queue": {
         parameters: {
             query?: never;
             header?: never;
@@ -2072,29 +2158,31 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * List pre-orders
-         * @description Cursor-paginated list of the caller's pre-orders. Filter by status (`pending`, `provisioning`, `ready`, `fulfilled`, `cancelled`, `refunded`) to surface only the ones the dashboard needs.
+         * Inspect a line's queued and scheduled messages
+         * @description Cursor-paginated queue snapshot: per-row `to` / `body` / `status` (`queued` / `scheduled` / `delivered_to_device`) + the schedule reason and the activity-curve hour. Companion to `GET /v1/lines/{id}/quota` for partners debugging delivery delays.
          */
         get: {
             parameters: {
                 query?: {
-                    status?: "draft" | "pending" | "provisioning" | "ready" | "fulfilled" | "cancelled" | "refunded";
-                    cursor?: string;
                     limit?: number;
+                    cursor?: string;
+                    status?: "queued" | "scheduled" | "delivered_to_device";
                 };
                 header?: never;
-                path?: never;
+                path: {
+                    id: string;
+                };
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description Pre-order list */
+                /** @description Queue inspection — summary + paginated items */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PreOrderList"];
+                        "application/json": components["schemas"]["QueueEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -2115,6 +2203,24 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden — caller authenticated but not allowed */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
                 /** @description Too many requests — rate limit exceeded */
                 429: {
                     headers: {
@@ -2136,43 +2242,42 @@ export interface paths {
             };
         };
         put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/lines/{id}/health": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
         /**
-         * Create a pre-order (draft)
-         * @description Place a pre-order as a `draft` (WHA-1155). A draft has NO side effects — no provisioning line, no procurement, no Stripe charge — so the partner can hold intent / bill its own end-user first. Call `POST /v1/pre-orders/{id}/confirm` to engage the month and start procurement. `inbound_only` is remembered for confirm.
+         * Get a BYOD line's health snapshot
+         * @description BYOD-only health rollup. `state` (`active` / `degraded` / `offline`) is derived from the device's fundamental capabilities — min(send_text, imessage) — with offline (no heartbeat) taking precedence. Also returns `runtime_capabilities` (the per-key tri-valued descriptor the device last reported), last heartbeat timestamp, daily quota headroom, Apple-ID-flagged flag, last-error string, bridge version. Rental tiers receive 403 `rental_health_not_exposed` — they don't own the hardware and surfacing transient state creates support-ticket noise.
          */
-        post: {
+        get: {
             parameters: {
                 query?: never;
                 header?: never;
-                path?: never;
-                cookie?: never;
-            };
-            requestBody?: {
-                content: {
-                    "application/json": {
-                        /** @enum {string} */
-                        billing_tier: "rental_iphone" | "rental_android";
-                        /** @default [] */
-                        preferred_area_codes?: string[];
-                        /** @default false */
-                        inbound_only?: boolean;
-                    };
+                path: {
+                    id: string;
                 };
+                cookie?: never;
             };
+            requestBody?: never;
             responses: {
-                /** @description Pre-order draft created */
-                201: {
+                /** @description BYOD line health snapshot */
+                200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": {
-                            /** @enum {boolean} */
-                            success: true;
-                            data: components["schemas"]["PreOrder"];
-                            trace_id: string;
-                            request_id: string;
-                        };
+                        "application/json": components["schemas"]["LineHealthEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -2193,8 +2298,26 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Too many requests — rate limit exceeded */
-                429: {
+                /** @description Forbidden — caller authenticated but not allowed */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Too many requests — rate limit exceeded */
+                429: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -2213,26 +2336,26 @@ export interface paths {
                 };
             };
         };
+        put?: never;
+        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/v1/pre-orders/{id}/confirm": {
+    "/v1/lines/{id}/config": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        get?: never;
-        put?: never;
         /**
-         * Confirm a pre-order draft
-         * @description Confirm a `draft` pre-order (WHA-1155). The binding step: engages the one-month commitment (full month, no proration) and triggers procurement — mints the `provisioning` line + fulfillment task, notifies ops, and (for direct customers) creates the first-month Stripe payment intent, returned as `stripe_client_secret`. Only a draft can be confirmed.
+         * Get a line's effective send configuration
+         * @description Return the resolved send configuration for this line — tier defaults merged with per-line overrides. Surfaces effective quota caps, timezone, activity-curve target hour, and the `overridden_keys` list so partners can see which fields they've customised.
          */
-        post: {
+        get: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -2243,19 +2366,13 @@ export interface paths {
             };
             requestBody?: never;
             responses: {
-                /** @description Pre-order confirmed (now provisioning) */
+                /** @description Effective config (tier defaults + per-line overrides) */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": {
-                            /** @enum {boolean} */
-                            success: true;
-                            data: components["schemas"]["PreOrder"];
-                            trace_id: string;
-                            request_id: string;
-                        };
+                        "application/json": components["schemas"]["LineConfigEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -2276,6 +2393,15 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden — caller authenticated but not allowed */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
                 /** @description Not found */
                 404: {
                     headers: {
@@ -2305,24 +2431,16 @@ export interface paths {
                 };
             };
         };
+        put?: never;
+        post?: never;
         delete?: never;
         options?: never;
         head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/v1/pre-orders/{id}": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
         /**
-         * Get a pre-order
-         * @description Fetch a single pre-order, including its current status, the linked Stripe payment intent, and the fulfilled-line reference if the procurement has completed.
+         * Update a line's send configuration
+         * @description Merge-patch the line's per-line config overrides (quota caps, timezone, activity curve). Pass `null` for a key to revert it to the tier default. Validates the activity curve sums to 1.0 and rejects an unknown timezone with 400.
          */
-        get: {
+        patch: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -2331,21 +2449,19 @@ export interface paths {
                 };
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["LineConfigPatch"];
+                };
+            };
             responses: {
-                /** @description Pre-order */
+                /** @description Updated effective config (merged) + overridden_keys */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": {
-                            /** @enum {boolean} */
-                            success: true;
-                            data: components["schemas"]["PreOrder"];
-                            trace_id: string;
-                            request_id: string;
-                        };
+                        "application/json": components["schemas"]["LineConfigEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -2366,6 +2482,15 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden — caller authenticated but not allowed */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
                 /** @description Not found */
                 404: {
                     headers: {
@@ -2395,51 +2520,39 @@ export interface paths {
                 };
             };
         };
-        put?: never;
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
         trace?: never;
     };
-    "/v1/pre-orders/{id}/cancel": {
+    "/v1/pre-orders": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        get?: never;
-        put?: never;
         /**
-         * Cancel a pre-order draft
-         * @description Cancel an unconfirmed `draft` pre-order (WHA-1155) — free, nothing was provisioned or charged. A CONFIRMED pre-order cannot be cancelled here (the month is committed, full month no proration); release its provisioned line through the standard line endpoint `POST /v1/lines/{id}/release` instead.
+         * List pre-orders
+         * @description Cursor-paginated list of the caller's pre-orders. Filter by status (`draft`, `provisioning`, `fulfilled`, `cancelled`) to surface only the ones the dashboard needs.
          */
-        post: {
+        get: {
             parameters: {
-                query?: never;
-                header?: never;
-                path: {
-                    id: string;
+                query?: {
+                    status?: "draft" | "provisioning" | "fulfilled" | "cancelled";
+                    cursor?: string;
+                    limit?: number;
                 };
+                header?: never;
+                path?: never;
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description Pre-order cancelled */
+                /** @description Pre-order list */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": {
-                            /** @enum {boolean} */
-                            success: true;
-                            data: components["schemas"]["PreOrder"];
-                            trace_id: string;
-                            request_id: string;
-                        };
+                        "application/json": components["schemas"]["PreOrderList"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -2460,24 +2573,6 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Not found */
-                404: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["ErrorEnvelope"];
-                    };
-                };
-                /** @description Conflict — concurrent or terminal state */
-                409: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["ErrorEnvelope"];
-                    };
-                };
                 /** @description Too many requests — rate limit exceeded */
                 429: {
                     headers: {
@@ -2498,24 +2593,10 @@ export interface paths {
                 };
             };
         };
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/v1/billing/checkout": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
         put?: never;
         /**
-         * Start a Stripe Checkout for a reserved line
-         * @description Create a Stripe Checkout Session for the line previously reserved by `POST /v1/lines/{id}/reserve`. Returns the hosted checkout URL — redirect the customer there. The webhook handler activates the line once the session completes.
+         * Create a pre-order (draft)
+         * @description Place a pre-order as a `draft` (WHA-1155). A draft has NO side effects — no provisioning line, no procurement, no Stripe charge — so the partner can hold intent / bill its own end-user first. Call `POST /v1/pre-orders/{id}/confirm` to engage the month and start procurement. A pre-order carries the area codes you would accept, in order of preference, the plan (`inbound_only`), which is remembered for confirm and read back on every response, and optionally the SKU (`billing_tier`). The tier and the plan are ORTHOGONAL — `rental_iphone` covers both the outbound and the inbound product, which is what `inbound_only` selects — so naming both is never a contradiction. `billing_tier` is optional because a pre-order that omits it is still `rental_iphone`, the only tier this flow mints; when named it is ANSWERED, never discarded: `rental_android` is `400 android_rental_not_purchasable` (no Android product exists in the Stripe catalogue, WHA-2474) and a tier no pre-order can procure — BYOD, virtual shared, pool — is `400 tier_not_pre_orderable`, naming the endpoint to call instead (WHA-2949). The body is otherwise STRICT (WHA-2644) — any other property is a `400`, including `quantity` and `metadata`, which earlier revisions of this contract documented and the server silently discarded.
          */
         post: {
             parameters: {
@@ -2527,27 +2608,29 @@ export interface paths {
             requestBody?: {
                 content: {
                     "application/json": {
-                        /**
-                         * @description Line to check out. Send the `line_<base62>` public ID returned by `POST /v1/lines/{id}/reserve`; the internal UUID is also accepted for backward compatibility. Must be status `reserved`.
-                         * @example line_2k9Qp7RtY4mNb8VcXs3Wd6Lf1
-                         */
-                        line_id: string;
-                        /**
-                         * @description Pick the inbound-only rental price variant (WHA-1153). Rental tiers only; the chosen Stripe price is the source of truth — `lines.inbound_only` is re-derived from its lookup_key on `customer.subscription.created/updated`.
-                         * @default false
-                         */
+                        /** @default [] */
+                        preferred_area_codes?: string[];
+                        /** @default false */
                         inbound_only?: boolean;
+                        /** @enum {string} */
+                        billing_tier?: "rental_iphone" | "rental_android" | "byod_imessage" | "byod_android" | "shared_pool" | "shared_imessage";
                     };
                 };
             };
             responses: {
-                /** @description Checkout session */
-                200: {
+                /** @description Pre-order draft created */
+                201: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["Checkout"];
+                        "application/json": {
+                            /** @enum {boolean} */
+                            success: true;
+                            data: components["schemas"]["PreOrder"];
+                            trace_id: string;
+                            request_id: string;
+                        };
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -2568,15 +2651,6 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Not found */
-                404: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["ErrorEnvelope"];
-                    };
-                };
                 /** @description Too many requests — rate limit exceeded */
                 429: {
                     headers: {
@@ -2603,7 +2677,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/billing/byod-checkout": {
+    "/v1/pre-orders/{id}/confirm": {
         parameters: {
             query?: never;
             header?: never;
@@ -2613,29 +2687,33 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * Start a Stripe Checkout for BYOD slots
-         * @description Create a Stripe Checkout Session for the BYOD subscription product (`$15/mo` or `$150/yr` per slot, `device_count` slots). The completed session writes a `byod_subscriptions` row that `POST /v1/byod/pair` reads to enforce slot capacity.
+         * Confirm a pre-order draft
+         * @description Confirm a `draft` pre-order (WHA-1155). The binding step: engages the one-month commitment (full month, no proration) and triggers procurement — mints the `provisioning` line + fulfillment task, notifies ops, and (for direct customers) creates the first-month Stripe payment intent, returned as `stripe_client_secret`. Only a draft can be confirmed.
          */
         post: {
             parameters: {
                 query?: never;
                 header?: never;
-                path?: never;
-                cookie?: never;
-            };
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["ByodCheckoutBody"];
+                path: {
+                    id: string;
                 };
+                cookie?: never;
             };
+            requestBody?: never;
             responses: {
-                /** @description BYOD checkout session */
+                /** @description Pre-order confirmed (now provisioning) */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ByodCheckoutEnvelope"];
+                        "application/json": {
+                            /** @enum {boolean} */
+                            success: true;
+                            data: components["schemas"]["PreOrder"];
+                            trace_id: string;
+                            request_id: string;
+                        };
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -2656,6 +2734,15 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
                 /** @description Too many requests — rate limit exceeded */
                 429: {
                     headers: {
@@ -2682,7 +2769,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/billing/subscriptions": {
+    "/v1/pre-orders/{id}": {
         parameters: {
             query?: never;
             header?: never;
@@ -2690,25 +2777,33 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * List Stripe subscriptions
-         * @description Return every active Stripe subscription on the authenticated user's customer record — both per-line rental subs and BYOD slot subs. Period boundaries, line link, price ID, and cancellation flag are surfaced verbatim from Stripe.
+         * Get a pre-order
+         * @description Fetch a single pre-order, including its current status, the linked Stripe payment intent, and the fulfilled-line reference if the procurement has completed.
          */
         get: {
             parameters: {
                 query?: never;
                 header?: never;
-                path?: never;
+                path: {
+                    id: string;
+                };
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description Subscription list */
+                /** @description Pre-order */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["SubscriptionListEnvelope"];
+                        "application/json": {
+                            /** @enum {boolean} */
+                            success: true;
+                            data: components["schemas"]["PreOrder"];
+                            trace_id: string;
+                            request_id: string;
+                        };
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -2729,8 +2824,8 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Too many requests — rate limit exceeded */
-                429: {
+                /** @description Not found */
+                404: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -2738,8 +2833,17 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Internal server error */
-                500: {
+                /** @description Too many requests — rate limit exceeded */
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -2757,33 +2861,43 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/billing/invoices": {
+    "/v1/pre-orders/{id}/cancel": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
+        get?: never;
+        put?: never;
         /**
-         * List Stripe invoices
-         * @description List the authenticated user's Stripe invoices in reverse-chronological order. Each invoice exposes the period boundaries (unix seconds), the integer-cent amounts, the hosted invoice URL, and the PDF link.
+         * Cancel a pre-order draft
+         * @description Cancel an unconfirmed `draft` pre-order (WHA-1155) — free, nothing was provisioned or charged. A CONFIRMED pre-order cannot be cancelled here (the month is committed, full month no proration); release its provisioned line through the standard line endpoint `POST /v1/lines/{id}/release` instead.
          */
-        get: {
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
-                path?: never;
+                path: {
+                    id: string;
+                };
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description Invoice list */
+                /** @description Pre-order cancelled */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["InvoiceListEnvelope"];
+                        "application/json": {
+                            /** @enum {boolean} */
+                            success: true;
+                            data: components["schemas"]["PreOrder"];
+                            trace_id: string;
+                            request_id: string;
+                        };
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -2804,6 +2918,24 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Conflict — concurrent or terminal state */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
                 /** @description Too many requests — rate limit exceeded */
                 429: {
                     headers: {
@@ -2824,15 +2956,13 @@ export interface paths {
                 };
             };
         };
-        put?: never;
-        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/v1/billing/subscriptions/{id}": {
+    "/v1/billing/checkout": {
         parameters: {
             query?: never;
             header?: never;
@@ -2841,29 +2971,41 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        post?: never;
         /**
-         * Cancel a subscription
-         * @description Schedule the subscription to cancel at the end of the current billing period. The line remains active until the period rolls over; the partner sees the `cancel_at_period_end: true` flag in `GET /v1/billing/subscriptions` until then.
+         * Start a Stripe Checkout for a reserved line
+         * @description Create a Stripe Checkout Session for the line previously reserved by `POST /v1/lines/{id}/reserve`. Returns the hosted checkout URL — redirect the customer there. The webhook handler activates the line once the session completes.
          */
-        delete: {
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
-                path: {
-                    id: string;
-                };
+                path?: never;
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": {
+                        /**
+                         * @description Line to check out. Send the `line_<base62>` public ID returned by `POST /v1/lines/{id}/reserve`; the internal UUID is also accepted for backward compatibility. Must be status `reserved`.
+                         * @example line_2k9Qp7RtY4mNb8VcXs3Wd6Lf1
+                         */
+                        line_id: string;
+                        /**
+                         * @description Buy the INBOUND rental product instead of the outbound one. An inbound line cannot INITIATE a conversation — the contact must message first, after which the exchange is unrestricted; it is NOT receive-only. Rental tiers only. The chosen Stripe price is the source of truth: `lines.inbound_only` is re-derived from its lookup_key on `customer.subscription.created/updated`.
+                         * @default false
+                         */
+                        inbound_only?: boolean;
+                    };
+                };
+            };
             responses: {
-                /** @description Subscription cancelled */
+                /** @description Checkout session */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["BillingMessage"];
+                        "application/json": components["schemas"]["Checkout"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -2893,15 +3035,6 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Conflict — concurrent or terminal state */
-                409: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["ErrorEnvelope"];
-                    };
-                };
                 /** @description Too many requests — rate limit exceeded */
                 429: {
                     headers: {
@@ -2922,38 +3055,45 @@ export interface paths {
                 };
             };
         };
+        delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/v1/billing/payment-methods": {
+    "/v1/billing/byod-checkout": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
+        get?: never;
+        put?: never;
         /**
-         * List payment methods
-         * @description List the saved payment methods on the authenticated user's Stripe customer. Each entry exposes the brand (`visa`, `mastercard`, etc.), the last four digits, and the default-method flag — never the PAN.
+         * Start a Stripe Checkout for BYOD slots
+         * @description Create a Stripe Checkout Session for the BYOD subscription product (`$15/mo`, `$40.50/quarter` or `$150/yr` per slot, `device_count` slots). All three cadences the BYOP catalogue carries are sellable — `GET /pricing` publishes the amount of each. The completed session writes a `byod_subscriptions` row that `POST /v1/byod/pair` reads to enforce slot capacity.
          */
-        get: {
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
                 path?: never;
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["ByodCheckoutBody"];
+                };
+            };
             responses: {
-                /** @description Payment methods */
+                /** @description BYOD checkout session */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["PaymentMethodListEnvelope"];
+                        "application/json": components["schemas"]["ByodCheckoutEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -2994,10 +3134,24 @@ export interface paths {
                 };
             };
         };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/billing/mac-checkout": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
         put?: never;
         /**
-         * Start adding a payment method
-         * @description Create a Stripe SetupIntent so the customer can save a new card. The returned `client_secret` feeds directly into Stripe Elements / PaymentSheet on the partner UI; the resulting payment method is attached to the customer record on completion.
+         * Start a Stripe Checkout for hosted macOS sessions
+         * @description Create a Stripe Checkout Session for `quantity` rented macOS sessions, priced on a graduated ladder ($35/$30/$25/$20 per session across the 1–10 / 11–30 / 31–50 / 51+ bands). Two rules are enforced here and nowhere else: the quantity must be a whole number of packs at or above the one-pack minimum (`422 mac_quantity_not_a_pack`, the divisor echoed as `issues[0].min`), and a rented session hosts the bridge for one BYOP iPhone so sessions may not exceed the account’s BYOP lines (`422 mac_sessions_exceed_byop_lines`). Stripe’s hosted UI cannot change the quantity afterwards — use `PATCH /v1/billing/subscriptions/{id}`, which applies the same two rules.
          */
         post: {
             parameters: {
@@ -3006,15 +3160,19 @@ export interface paths {
                 path?: never;
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["MacCheckoutBody"];
+                };
+            };
             responses: {
-                /** @description Setup intent */
+                /** @description macOS session checkout */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["SetupIntent"];
+                        "application/json": components["schemas"]["MacCheckoutEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -3035,6 +3193,24 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Unprocessable — domain rule violation */
+                422: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
                 /** @description Too many requests — rate limit exceeded */
                 429: {
                     headers: {
@@ -3061,7 +3237,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/billing/payment-methods/{id}": {
+    "/v1/billing/subscriptions/{id}": {
         parameters: {
             query?: never;
             header?: never;
@@ -3072,8 +3248,8 @@ export interface paths {
         put?: never;
         post?: never;
         /**
-         * Remove a payment method
-         * @description Detach the payment method from the Stripe customer. Active subscriptions paying with this method will retry against the new default; ensure another method is set as default first.
+         * Cancel a subscription
+         * @description Schedule the subscription to cancel at the end of the current billing period. The line remains active until the period rolls over; the partner sees the `cancel_at_period_end: true` flag in `GET /v1/billing/subscriptions` until then.
          */
         delete: {
             parameters: {
@@ -3086,7 +3262,7 @@ export interface paths {
             };
             requestBody?: never;
             responses: {
-                /** @description Payment method removed */
+                /** @description Subscription cancelled */
                 200: {
                     headers: {
                         [name: string]: unknown;
@@ -3122,6 +3298,15 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
+                /** @description Conflict — concurrent or terminal state */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
                 /** @description Too many requests — rate limit exceeded */
                 429: {
                     headers: {
@@ -3144,23 +3329,11 @@ export interface paths {
         };
         options?: never;
         head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/v1/billing/payment-methods/{id}/default": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        get?: never;
-        put?: never;
         /**
-         * Set default payment method
-         * @description Mark the payment method as the default for invoice charges. Future invoices on existing subscriptions automatically draw from this card.
+         * Change a subscription’s quantity
+         * @description Set the quantity on the subscription’s single quantity-adjustable item — hosted macOS sessions, or BYOP slots. Both directions of the 1:1 rule are enforced: raising sessions above the account’s BYOP lines is `422 mac_sessions_exceed_byop_lines`, and lowering BYOP below the macOS sessions already rented is `422 byop_reduction_strands_mac_sessions`. A macOS quantity must additionally be a whole pack (`422 mac_quantity_not_a_pack`). A subscription that does not carry exactly one adjustable item — a per-line rental, or a wholesale master subscription whose quantities are pushed by metering — is refused `409 subscription_not_quantity_adjustable`.
          */
-        post: {
+        patch: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -3169,15 +3342,19 @@ export interface paths {
                 };
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["SubscriptionQuantityBody"];
+                };
+            };
             responses: {
-                /** @description Default payment method updated */
+                /** @description Quantity updated */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["BillingMessage"];
+                        "application/json": components["schemas"]["SubscriptionQuantityEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -3198,6 +3375,15 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden — caller authenticated but not allowed */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
                 /** @description Not found */
                 404: {
                     headers: {
@@ -3207,6 +3393,24 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
+                /** @description Conflict — concurrent or terminal state */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Unprocessable — domain rule violation */
+                422: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
                 /** @description Too many requests — rate limit exceeded */
                 429: {
                     headers: {
@@ -3227,13 +3431,9 @@ export interface paths {
                 };
             };
         };
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
         trace?: never;
     };
-    "/v1/messages": {
+    "/v1/billing/subscriptions": {
         parameters: {
             query?: never;
             header?: never;
@@ -3241,32 +3441,25 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * List messages
-         * @description Cursor-paginated list of messages, newest first. Each item carries the full `MessageV1` shape — partners can write a uniform handler over both `GET /v1/messages` and `GET /v1/messages/{id}`. Filter by `line_id`, `status`, `direction`, or `kind` (`message` drops the separate reaction/voice rows for a clean feed; `reaction`/`voice` fetch only those; omit for all kinds); pass an opaque `cursor` from the previous page's `next_cursor` to advance.
+         * List Stripe subscriptions
+         * @description Return every active Stripe subscription on the authenticated user's customer record — both per-line rental subs and BYOD slot subs. Period boundaries, line link, price ID, and cancellation flag are surfaced verbatim from Stripe.
          */
         get: {
             parameters: {
-                query?: {
-                    line_id?: string;
-                    status?: "queued" | "sent" | "delivered" | "read" | "failed";
-                    direction?: "outbound" | "inbound";
-                    kind?: "message" | "voice" | "reaction";
-                    cursor?: string;
-                    limit?: number;
-                };
+                query?: never;
                 header?: never;
                 path?: never;
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description Cursored message list */
+                /** @description Subscription list */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["CursoredMessagesEnvelope"];
+                        "application/json": components["schemas"]["SubscriptionListEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -3308,15 +3501,478 @@ export interface paths {
             };
         };
         put?: never;
-        /**
-         * Send a message
-         * @description Queue an outbound iMessage / SMS / RCS message on the specified line. The device picks the actual transport at delivery time (`channel: "auto"` is the only supported value in v1). Returns `202` with the queued message envelope; the message progresses through `queued → sent → delivered → read` (or `failed`) reflected via webhooks. Quota-deferred sends return `status: "scheduled"` with a future `scheduled_for`.
-         */
-        post: {
-            parameters: {
-                query?: never;
-                header?: never;
-                path?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/billing/invoices": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List Stripe invoices
+         * @description List the authenticated user's Stripe invoices in reverse-chronological order. Each invoice exposes the period boundaries (unix seconds), the integer-cent amounts, the hosted invoice URL, and the PDF link.
+         */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Invoice list */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["InvoiceListEnvelope"];
+                    };
+                };
+                /** @description Bad request — validation failed */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Unauthenticated — missing or invalid bearer token */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Too many requests — rate limit exceeded */
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/billing/payment-methods": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List payment methods
+         * @description List the saved payment methods on the authenticated user's Stripe customer. Each entry exposes the brand (`visa`, `mastercard`, etc.), the last four digits, and the default-method flag — never the PAN.
+         */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Payment methods */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["PaymentMethodListEnvelope"];
+                    };
+                };
+                /** @description Bad request — validation failed */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Unauthenticated — missing or invalid bearer token */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Too many requests — rate limit exceeded */
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        /**
+         * Start adding a payment method
+         * @description Create a Stripe SetupIntent so the customer can save a new card. The returned `client_secret` feeds directly into Stripe Elements / PaymentSheet on the partner UI; the resulting payment method is attached to the customer record on completion.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Setup intent */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["SetupIntent"];
+                    };
+                };
+                /** @description Bad request — validation failed */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Unauthenticated — missing or invalid bearer token */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Too many requests — rate limit exceeded */
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/billing/payment-methods/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        post?: never;
+        /**
+         * Remove a payment method
+         * @description Detach the payment method from the Stripe customer. Active subscriptions paying with this method will retry against the new default; ensure another method is set as default first.
+         */
+        delete: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Payment method removed */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["BillingMessage"];
+                    };
+                };
+                /** @description Bad request — validation failed */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Unauthenticated — missing or invalid bearer token */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Too many requests — rate limit exceeded */
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/billing/payment-methods/{id}/default": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Set default payment method
+         * @description Mark the payment method as the default for invoice charges. Future invoices on existing subscriptions automatically draw from this card.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Default payment method updated */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["BillingMessage"];
+                    };
+                };
+                /** @description Bad request — validation failed */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Unauthenticated — missing or invalid bearer token */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Too many requests — rate limit exceeded */
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/messages": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * List messages
+         * @description Cursor-paginated list of messages, newest first. Each item carries the full `MessageV1` shape — partners can write a uniform handler over both `GET /v1/messages` and `GET /v1/messages/{id}`. Filter by `line_id`, `status`, `direction`, or `kind` (`message` drops the separate reaction/voice rows for a clean feed; `reaction`/`voice` fetch only those; omit for all kinds); pass an opaque `cursor` from the previous page's `next_cursor` to advance.
+         */
+        get: {
+            parameters: {
+                query?: {
+                    line_id?: string;
+                    status?: "queued" | "sent" | "delivered" | "read" | "failed";
+                    direction?: "outbound" | "inbound";
+                    kind?: "message" | "voice" | "reaction";
+                    cursor?: string;
+                    limit?: number;
+                };
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Cursored message list */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["CursoredMessagesEnvelope"];
+                    };
+                };
+                /** @description Bad request — validation failed */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Unauthenticated — missing or invalid bearer token */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Too many requests — rate limit exceeded */
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        /**
+         * Send a message
+         * @description Queue an outbound iMessage / SMS / RCS message on the specified line. The device picks the actual transport at delivery time (`channel: "auto"` is the only supported value in v1). Returns `202` with the queued message envelope; the message progresses through `queued → sent → delivered → read` (or `failed`) reflected via webhooks. Quota-deferred sends return `status: "scheduled"` with a future `scheduled_for`.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
                 cookie?: never;
             };
             requestBody?: {
@@ -3392,8 +4048,196 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Not found */
-                404: {
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Conflict — concurrent or terminal state */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Unprocessable — domain rule violation */
+                422: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Too many requests — rate limit exceeded */
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/messages/{id}/reactions": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
+        /**
+         * Add or replace a tapback
+         * @description Add an iMessage tapback (love / like / dislike / laugh / emphasize / question) on a prior message you sent. Replace-on-add semantics: posting a different `type` against the same parent updates the existing reaction in place — switching from `like` to `love` is a single POST, no DELETE-then-POST dance. Reactions require iMessage; SMS / RCS parents are rejected with 422.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["SendReactionRequest"];
+                };
+            };
+            responses: {
+                /** @description Reaction queued (added or replaced) */
+                202: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ReactionEnvelope"];
+                    };
+                };
+                /** @description Bad request — validation failed */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Unauthenticated — missing or invalid bearer token */
+                401: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Forbidden — caller authenticated but not allowed */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Unprocessable — domain rule violation */
+                422: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Too many requests — rate limit exceeded */
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        /**
+         * Remove a tapback
+         * @description Remove the caller's tapback on a prior message. Idempotent — `removed: false` is a 200, not a 404, so partners can fire-and-forget without first checking whether a reaction was set. The response reports the type that was removed when applicable.
+         */
+        delete: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Reaction removed (idempotent — no-op when nothing to remove) */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ReactionRemovalEnvelope"];
+                    };
+                };
+                /** @description Bad request — validation failed */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Unauthenticated — missing or invalid bearer token */
+                401: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -3401,8 +4245,8 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Conflict — concurrent or terminal state */
-                409: {
+                /** @description Forbidden — caller authenticated but not allowed */
+                403: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -3410,8 +4254,8 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Unprocessable — domain rule violation */
-                422: {
+                /** @description Not found */
+                404: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -3439,26 +4283,23 @@ export interface paths {
                 };
             };
         };
-        delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/v1/messages/{id}/reactions": {
+    "/v1/messages/{id}": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        get?: never;
-        put?: never;
         /**
-         * Add or replace a tapback
-         * @description Add an iMessage tapback (love / like / dislike / laugh / emphasize / question) on a prior message you sent. Replace-on-add semantics: posting a different `type` against the same parent updates the existing reaction in place — switching from `like` to `love` is a single POST, no DELETE-then-POST dance. Reactions require iMessage; SMS / RCS parents are rejected with 422.
+         * Get a message
+         * @description Retrieve a single message by its `msg_<base62>` publicId. Returns the full message envelope with the current lifecycle status (`queued | scheduled | sent | delivered | read | failed | cancelled | received`). The `queue_info` field is always `null` on GET reads — that snapshot is populated only on the POST response at send time.
          */
-        post: {
+        get: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -3467,19 +4308,15 @@ export interface paths {
                 };
                 cookie?: never;
             };
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["SendReactionRequest"];
-                };
-            };
+            requestBody?: never;
             responses: {
-                /** @description Reaction queued (added or replaced) */
-                202: {
+                /** @description Message */
+                200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ReactionEnvelope"];
+                        "application/json": components["schemas"]["MessageV1Envelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -3518,15 +4355,6 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Unprocessable — domain rule violation */
-                422: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["ErrorEnvelope"];
-                    };
-                };
                 /** @description Too many requests — rate limit exceeded */
                 429: {
                     headers: {
@@ -3547,9 +4375,11 @@ export interface paths {
                 };
             };
         };
+        put?: never;
+        post?: never;
         /**
-         * Remove a tapback
-         * @description Remove the caller's tapback on a prior message. Idempotent — `removed: false` is a 200, not a 404, so partners can fire-and-forget without first checking whether a reaction was set. The response reports the type that was removed when applicable.
+         * Cancel a queued or scheduled message
+         * @description Cancel a message before it leaves iSnap. Cancellable while the row is still `queued` or `scheduled` (and has not been pushed to a device); returns `409 too_late_to_cancel` once the device has picked it up. Decrements the daily quota when the row had been counted at send time.
          */
         delete: {
             parameters: {
@@ -3562,13 +4392,13 @@ export interface paths {
             };
             requestBody?: never;
             responses: {
-                /** @description Reaction removed (idempotent — no-op when nothing to remove) */
+                /** @description Message cancelled */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ReactionRemovalEnvelope"];
+                        "application/json": components["schemas"]["MessageV1Envelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -3607,6 +4437,15 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
+                /** @description Conflict — concurrent or terminal state */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
                 /** @description Too many requests — rate limit exceeded */
                 429: {
                     headers: {
@@ -3632,7 +4471,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/messages/{id}": {
+    "/v1/webhooks": {
         parameters: {
             query?: never;
             header?: never;
@@ -3640,27 +4479,31 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * Get a message
-         * @description Retrieve a single message by its `msg_<base62>` publicId. Returns the full message envelope with the current lifecycle status (`queued | scheduled | sent | delivered | read | failed | cancelled | received`). The `queue_info` field is always `null` on GET reads — that snapshot is populated only on the POST response at send time.
+         * List webhook subscriptions
+         * @description Return every webhook subscription owned by the authenticated user. Each entry surfaces the URL, the subscribed event list, the line allowlist, the active flag, the failure counter, and the last success / failure timestamps. Accepts an API key (`isnap_*`) or a dashboard JWT.
          */
         get: {
             parameters: {
                 query?: never;
                 header?: never;
-                path: {
-                    id: string;
-                };
+                path?: never;
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description Message */
+                /** @description Webhook list */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["MessageV1Envelope"];
+                        "application/json": {
+                            /** @enum {boolean} */
+                            success: true;
+                            data: components["schemas"]["WebhookList"];
+                            trace_id: string;
+                            request_id: string;
+                        };
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -3681,8 +4524,8 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Forbidden — caller authenticated but not allowed */
-                403: {
+                /** @description Too many requests — rate limit exceeded */
+                429: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -3690,8 +4533,66 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Not found */
-                404: {
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        /**
+         * Register a webhook subscription
+         * @description Subscribe a URL to a list of event types and (optionally) a line allowlist. The server signs deliveries with an HMAC-SHA256 secret returned once here. Retries follow exponential backoff; 10 consecutive failures auto-disable the subscription. Accepts an API key (`isnap_*`) or a dashboard JWT.
+         */
+        post: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: {
+                content: {
+                    "application/json": {
+                        /** Format: uri */
+                        url: string;
+                        events: components["schemas"]["WebhookEventName"][];
+                        line_ids?: string[];
+                    };
+                };
+            };
+            responses: {
+                /** @description Webhook created */
+                201: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": {
+                            /** @enum {boolean} */
+                            success: true;
+                            data: components["schemas"]["Webhook"];
+                            trace_id: string;
+                            request_id: string;
+                        };
+                    };
+                };
+                /** @description Bad request — validation failed */
+                400: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Unauthenticated — missing or invalid bearer token */
+                401: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -3719,13 +4620,24 @@ export interface paths {
                 };
             };
         };
-        put?: never;
-        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/webhooks/{id}": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
         /**
-         * Cancel a queued or scheduled message
-         * @description Cancel a message before it leaves iSnap. Cancellable while the row is still `queued` or `scheduled` (and has not been pushed to a device); returns `409 too_late_to_cancel` once the device has picked it up. Decrements the daily quota when the row had been counted at send time.
+         * Get a webhook subscription
+         * @description Fetch a single webhook subscription by its `wh_<base62>` id. Returns the URL, the event list, the line allowlist, the active flag, and the metadata — never the secret (rotate via the dedicated endpoint to mint a new one).
          */
-        delete: {
+        get: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -3736,13 +4648,13 @@ export interface paths {
             };
             requestBody?: never;
             responses: {
-                /** @description Message cancelled */
+                /** @description Webhook */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["MessageV1Envelope"];
+                        "application/json": components["schemas"]["WebhookV1Envelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -3763,8 +4675,8 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Forbidden — caller authenticated but not allowed */
-                403: {
+                /** @description Not found */
+                404: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -3772,8 +4684,8 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Not found */
-                404: {
+                /** @description Too many requests — rate limit exceeded */
+                429: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -3781,8 +4693,8 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Conflict — concurrent or terminal state */
-                409: {
+                /** @description Internal server error */
+                500: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -3790,8 +4702,34 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Too many requests — rate limit exceeded */
-                429: {
+            };
+        };
+        put?: never;
+        post?: never;
+        /**
+         * Delete a webhook subscription
+         * @description Permanently delete the webhook subscription. In-flight deliveries already enqueued will still attempt — the deletion only stops new event matching. Accepts an API key (`isnap_*`) or a dashboard JWT.
+         */
+        delete: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path: {
+                    id: string;
+                };
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Webhook deleted */
+                204: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content?: never;
+                };
+                /** @description Bad request — validation failed */
+                400: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -3799,8 +4737,8 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Internal server error */
-                500: {
+                /** @description Unauthenticated — missing or invalid bearer token */
+                401: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -3808,46 +4746,70 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-            };
-        };
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/v1/webhooks": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Too many requests — rate limit exceeded */
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+            };
         };
+        options?: never;
+        head?: never;
         /**
-         * List webhook subscriptions
-         * @description Return every webhook subscription owned by the authenticated user. Each entry surfaces the URL, the subscribed event list, the line allowlist, the active flag, the failure counter, and the last success / failure timestamps. Accepts an API key (`isnap_*`) or a dashboard JWT.
+         * Update a webhook subscription
+         * @description Partial update of a webhook subscription. Any subset of `url`, `events`, `line_ids`, `description`, and `active` is accepted; at least one field is required. Event names are validated against the shared `WebhookEventName` enum so typos reject at 400.
          */
-        get: {
+        patch: {
             parameters: {
                 query?: never;
                 header?: never;
-                path?: never;
+                path: {
+                    id: string;
+                };
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": {
+                        /** Format: uri */
+                        url?: string;
+                        events?: components["schemas"]["WebhookEventName"][];
+                        line_ids?: string[] | null;
+                        description?: string | null;
+                        active?: boolean;
+                    };
+                };
+            };
             responses: {
-                /** @description Webhook list */
+                /** @description Webhook updated */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": {
-                            /** @enum {boolean} */
-                            success: true;
-                            data: components["schemas"]["WebhookList"];
-                            trace_id: string;
-                            request_id: string;
-                        };
+                        "application/json": components["schemas"]["WebhookV1Envelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -3868,6 +4830,15 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
                 /** @description Too many requests — rate limit exceeded */
                 429: {
                     headers: {
@@ -3888,42 +4859,43 @@ export interface paths {
                 };
             };
         };
-        put?: never;
+        trace?: never;
+    };
+    "/v1/webhooks/events": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
         /**
-         * Register a webhook subscription
-         * @description Subscribe a URL to a list of event types and (optionally) a line allowlist. The server signs deliveries with an HMAC-SHA256 secret returned once here. Retries follow exponential backoff; 10 consecutive failures auto-disable the subscription. Accepts an API key (`isnap_*`) or a dashboard JWT.
+         * Replay webhook events within the retention window
+         * @description Pull events fired in the last 72h (the retention window) so a partner whose receiver was down can reconcile. Cursor-paginated on `(created_at DESC, event_id DESC)`. Each item is the same `§4.1` envelope the live webhook delivery carried — partners deduplicate by `event_id`.
          */
-        post: {
+        get: {
             parameters: {
-                query?: never;
+                query: {
+                    since: string;
+                    until?: string;
+                    /** @description A concrete event type (e.g. `message.received`), a family wildcard (`line.*`), or the catch-all `*`. */
+                    event?: components["schemas"]["WebhookEventName"];
+                    line_id?: string;
+                    limit?: number;
+                    cursor?: string;
+                };
                 header?: never;
                 path?: never;
                 cookie?: never;
             };
-            requestBody?: {
-                content: {
-                    "application/json": {
-                        /** Format: uri */
-                        url: string;
-                        events: components["schemas"]["WebhookEventName"][];
-                        line_ids?: string[];
-                    };
-                };
-            };
+            requestBody?: never;
             responses: {
-                /** @description Webhook created */
-                201: {
+                /** @description Webhook events (paginated, §4.1 envelope items) */
+                200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": {
-                            /** @enum {boolean} */
-                            success: true;
-                            data: components["schemas"]["Webhook"];
-                            trace_id: string;
-                            request_id: string;
-                        };
+                        "application/json": components["schemas"]["WebhookEventsEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -3964,24 +4936,28 @@ export interface paths {
                 };
             };
         };
+        put?: never;
+        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/v1/webhooks/{id}": {
+    "/v1/webhooks/{id}/rotate-secret": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
+        get?: never;
+        put?: never;
         /**
-         * Get a webhook subscription
-         * @description Fetch a single webhook subscription by its `wh_<base62>` id. Returns the URL, the event list, the line allowlist, the active flag, and the metadata — never the secret (rotate via the dedicated endpoint to mint a new one).
+         * Rotate the signing secret
+         * @description Generate a new HMAC signing secret. The returned plaintext is shown once — update your verifier promptly. The old secret remains valid for a short grace window (`old_secret_expires_at`) so in-flight deliveries verify against either secret.
          */
-        get: {
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -3992,13 +4968,13 @@ export interface paths {
             };
             requestBody?: never;
             responses: {
-                /** @description Webhook */
+                /** @description Secret rotated — plaintext shown once */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["WebhookV1Envelope"];
+                        "application/json": components["schemas"]["WebhookRotateSecretEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -4048,15 +5024,33 @@ export interface paths {
                 };
             };
         };
-        put?: never;
-        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/webhooks/{id}/deliveries": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
         /**
-         * Delete a webhook subscription
-         * @description Permanently delete the webhook subscription. In-flight deliveries already enqueued will still attempt — the deletion only stops new event matching. Accepts an API key (`isnap_*`) or a dashboard JWT.
+         * List delivery attempts for a webhook
+         * @description Inspect delivery attempts for a webhook subscription. Cursor-paginated on `(createdAt DESC, id DESC)`; filter by status (`pending` / `success` / `failed`), event type, or time window. Each row carries the request snippet, the response status + body snippet, and the next-retry timestamp.
          */
-        delete: {
+        get: {
             parameters: {
-                query?: never;
+                query?: {
+                    limit?: number;
+                    cursor?: string;
+                    status?: "pending" | "success" | "failed";
+                    event?: string;
+                    since?: string;
+                    until?: string;
+                };
                 header?: never;
                 path: {
                     id: string;
@@ -4065,12 +5059,14 @@ export interface paths {
             };
             requestBody?: never;
             responses: {
-                /** @description Webhook deleted */
-                204: {
+                /** @description Delivery list (cursor paginated) */
+                200: {
                     headers: {
                         [name: string]: unknown;
                     };
-                    content?: never;
+                    content: {
+                        "application/json": components["schemas"]["WebhookDeliveryListEnvelope"];
+                    };
                 };
                 /** @description Bad request — validation failed */
                 400: {
@@ -4119,41 +5115,46 @@ export interface paths {
                 };
             };
         };
+        put?: never;
+        post?: never;
+        delete?: never;
         options?: never;
         head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/webhooks/{id}/deliveries/{delivery_id}/replay": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        get?: never;
+        put?: never;
         /**
-         * Update a webhook subscription
-         * @description Partial update of a webhook subscription. Any subset of `url`, `events`, `line_ids`, `description`, and `active` is accepted; at least one field is required. Event names are validated against the shared `WebhookEventName` enum so typos reject at 400.
+         * Replay a delivery attempt
+         * @description Re-enqueue a prior delivery attempt. Mints a new `whd_` delivery row referencing the original via `replay_of` but keeps the same `event_id` so partner-side dedup collapses both into the same logical event.
          */
-        patch: {
+        post: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
                     id: string;
+                    delivery_id: string;
                 };
                 cookie?: never;
             };
-            requestBody?: {
-                content: {
-                    "application/json": {
-                        /** Format: uri */
-                        url?: string;
-                        events?: components["schemas"]["WebhookEventName"][];
-                        line_ids?: string[] | null;
-                        description?: string | null;
-                        active?: boolean;
-                    };
-                };
-            };
+            requestBody?: never;
             responses: {
-                /** @description Webhook updated */
-                200: {
+                /** @description Replay queued */
+                202: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["WebhookV1Envelope"];
+                        "application/json": components["schemas"]["WebhookDeliveryReplayEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -4203,43 +5204,51 @@ export interface paths {
                 };
             };
         };
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
         trace?: never;
     };
-    "/v1/webhooks/events": {
+    "/v1/attachments": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
+        get?: never;
+        put?: never;
         /**
-         * Replay webhook events within the retention window
-         * @description Pull events fired in the last 72h (the retention window) so a partner whose receiver was down can reconcile. Cursor-paginated on `(created_at DESC, event_id DESC)`. Each item is the same `§4.1` envelope the live webhook delivery carried — partners deduplicate by `event_id`.
+         * Create an attachment + receive a signed upload URL
+         * @description Mint a new attachment record and receive a presigned R2 PUT URL valid for 15 minutes. The client uploads the bytes directly to R2 (the server never proxies them) and then references the returned `id` in the `attachment_ids` array on `POST /v1/messages`. Hard cap: 5 GB (R2 single-PUT ceiling). Attachments larger than 100 MB return a non-blocking `large_attachment_may_delay_delivery` warning.
          */
-        get: {
+        post: {
             parameters: {
-                query: {
-                    since: string;
-                    until?: string;
-                    /** @description A concrete event type (e.g. `message.received`), a family wildcard (`line.*`), or the catch-all `*`. */
-                    event?: components["schemas"]["WebhookEventName"];
-                    line_id?: string;
-                    limit?: number;
-                    cursor?: string;
-                };
+                query?: never;
                 header?: never;
                 path?: never;
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["CreateAttachment"];
+                };
+            };
             responses: {
-                /** @description Webhook events (paginated, §4.1 envelope items) */
-                200: {
+                /** @description Attachment row created, upload pending */
+                201: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["WebhookEventsEnvelope"];
+                        "application/json": {
+                            /** @enum {boolean} */
+                            success: true;
+                            data: components["schemas"]["CreateAttachmentResponse"];
+                            trace_id: string;
+                            request_id: string;
+                        };
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -4280,28 +5289,24 @@ export interface paths {
                 };
             };
         };
-        put?: never;
-        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/v1/webhooks/{id}/rotate-secret": {
+    "/v1/attachments/{id}": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        get?: never;
-        put?: never;
         /**
-         * Rotate the signing secret
-         * @description Generate a new HMAC signing secret. The returned plaintext is shown once — update your verifier promptly. The old secret remains valid for a short grace window (`old_secret_expires_at`) so in-flight deliveries verify against either secret.
+         * Get an attachment + signed download URL
+         * @description Fetch an attachment record by its `att_<base62>` id. The response includes a short-TTL signed R2 download URL — re-call this endpoint to refresh the URL when the previous one expires.
          */
-        post: {
+        get: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -4312,13 +5317,19 @@ export interface paths {
             };
             requestBody?: never;
             responses: {
-                /** @description Secret rotated — plaintext shown once */
+                /** @description Attachment record + fresh signed download URL */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["WebhookRotateSecretEnvelope"];
+                        "application/json": {
+                            /** @enum {boolean} */
+                            success: true;
+                            data: components["schemas"]["Attachment"];
+                            trace_id: string;
+                            request_id: string;
+                        };
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -4368,61 +5379,60 @@ export interface paths {
                 };
             };
         };
+        put?: never;
+        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/v1/webhooks/{id}/deliveries": {
+    "/v1/lookup": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
+        get?: never;
+        put?: never;
         /**
-         * List delivery attempts for a webhook
-         * @description Inspect delivery attempts for a webhook subscription. Cursor-paginated on `(createdAt DESC, id DESC)`; filter by status (`pending` / `success` / `failed`), event type, or time window. Each row carries the request snippet, the response status + body snippet, and the next-retry timestamp.
+         * Look up a recipient capability
+         * @description Check whether a phone number or email is iMessage-capable. Returns `imessage: true | false | null`; `null` means we have no cached probe result yet and the caller should fall back to SMS-safe behaviour. Rate-limited per line and per account.
          */
-        get: {
+        post: {
             parameters: {
-                query?: {
-                    limit?: number;
-                    cursor?: string;
-                    status?: "pending" | "success" | "failed";
-                    event?: string;
-                    since?: string;
-                    until?: string;
-                };
+                query?: never;
                 header?: never;
-                path: {
-                    id: string;
-                };
+                path?: never;
                 cookie?: never;
             };
-            requestBody?: never;
+            requestBody?: {
+                content: {
+                    "application/json": components["schemas"]["LookupRequest"];
+                };
+            };
             responses: {
-                /** @description Delivery list (cursor paginated) */
+                /** @description Lookup result — cache hit, fast probe, or an un-probed miss */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["WebhookDeliveryListEnvelope"];
+                        "application/json": components["schemas"]["LookupEnvelope"];
                     };
                 };
-                /** @description Bad request — validation failed */
-                400: {
+                /** @description Lookup pending — a device probe was dispatched but had not answered within the wait budget; re-poll the same request after `retry_after` seconds */
+                202: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ErrorEnvelope"];
+                        "application/json": components["schemas"]["LookupEnvelope"];
                     };
                 };
-                /** @description Unauthenticated — missing or invalid bearer token */
-                401: {
+                /** @description Bad request — validation failed */
+                400: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -4430,8 +5440,8 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Not found */
-                404: {
+                /** @description Unauthenticated — missing or invalid bearer token */
+                401: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -4459,46 +5469,42 @@ export interface paths {
                 };
             };
         };
-        put?: never;
-        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/v1/webhooks/{id}/deliveries/{delivery_id}/replay": {
+    "/v1/area-codes": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        get?: never;
-        put?: never;
         /**
-         * Replay a delivery attempt
-         * @description Re-enqueue a prior delivery attempt. Mints a new `whd_` delivery row referencing the original via `replay_of` but keeps the same `event_id` so partner-side dedup collapses both into the same logical event.
+         * List selectable area codes (public)
+         * @description Enumerate the area codes a customer can request as `preferred_area_codes` on `POST /v1/pre-orders`, for rendering a pre-order area-code picker. Optional `?country=US` filters the list. Also returns the selectable countries so the same response can drive a country dropdown. Unauthenticated — mirrors `GET /v1/lines` and `GET /pricing`. The list is the *selectable* set (a curated subset of NANP), not a guarantee of immediate inventory: pre-orders are precisely for tiers with no in-stock line.
          */
-        post: {
+        get: {
             parameters: {
-                query?: never;
-                header?: never;
-                path: {
-                    id: string;
-                    delivery_id: string;
+                query?: {
+                    /** @description ISO 3166-1 alpha-2 country filter (case-insensitive). Omit for all countries. */
+                    country?: string;
                 };
+                header?: never;
+                path?: never;
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description Replay queued */
-                202: {
+                /** @description Selectable area codes + countries */
+                200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["WebhookDeliveryReplayEnvelope"];
+                        "application/json": components["schemas"]["AreaCodesEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -4510,24 +5516,6 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Unauthenticated — missing or invalid bearer token */
-                401: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["ErrorEnvelope"];
-                    };
-                };
-                /** @description Not found */
-                404: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["ErrorEnvelope"];
-                    };
-                };
                 /** @description Too many requests — rate limit exceeded */
                 429: {
                     headers: {
@@ -4548,51 +5536,47 @@ export interface paths {
                 };
             };
         };
+        put?: never;
+        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/v1/attachments": {
+    "/v1/chats": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        get?: never;
-        put?: never;
         /**
-         * Create an attachment + receive a signed upload URL
-         * @description Mint a new attachment record and receive a presigned R2 PUT URL valid for 15 minutes. The client uploads the bytes directly to R2 (the server never proxies them) and then references the returned `id` in the `attachment_ids` array on `POST /v1/messages`. Hard cap: 5 GB (R2 single-PUT ceiling). Attachments larger than 100 MB return a non-blocking `large_attachment_may_delay_delivery` warning.
+         * List chats
+         * @description Cursor-paginated list of the caller's conversations, newest activity first. Filter by `line_id`. On shared-plan (virtual) lines each chat carries `outbound_number` — the physical number currently serving that contact (null once the binding is released; the next outbound is assigned a fresh number). Non-shared lines always carry `outbound_number: null`. Accepts an API key (`isnap_*`) or a dashboard JWT; line-scoped API keys only see chats of the lines in their allowlist.
          */
-        post: {
+        get: {
             parameters: {
-                query?: never;
+                query?: {
+                    line_id?: string;
+                    limit?: number;
+                    cursor?: string;
+                    since?: string;
+                    until?: string;
+                };
                 header?: never;
                 path?: never;
                 cookie?: never;
             };
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["CreateAttachment"];
-                };
-            };
+            requestBody?: never;
             responses: {
-                /** @description Attachment row created, upload pending */
-                201: {
+                /** @description Chat list */
+                200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": {
-                            /** @enum {boolean} */
-                            success: true;
-                            data: components["schemas"]["CreateAttachmentResponse"];
-                            trace_id: string;
-                            request_id: string;
-                        };
+                        "application/json": components["schemas"]["ChatListEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -4633,13 +5617,15 @@ export interface paths {
                 };
             };
         };
+        put?: never;
+        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/v1/attachments/{id}": {
+    "/v1/chats/{chat_id}": {
         parameters: {
             query?: never;
             header?: never;
@@ -4647,33 +5633,27 @@ export interface paths {
             cookie?: never;
         };
         /**
-         * Get an attachment + signed download URL
-         * @description Fetch an attachment record by its `att_<base62>` id. The response includes a short-TTL signed R2 download URL — re-call this endpoint to refresh the URL when the previous one expires.
+         * Get a chat
+         * @description Fetch a single conversation by its `chat_<base62>` id. Same shape as the list items, including `outbound_number` for shared-plan lines. Cross-account and out-of-scope ids resolve 404 (no existence leak).
          */
         get: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
-                    id: string;
+                    chat_id: string;
                 };
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description Attachment record + fresh signed download URL */
+                /** @description Chat */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": {
-                            /** @enum {boolean} */
-                            success: true;
-                            data: components["schemas"]["Attachment"];
-                            trace_id: string;
-                            request_id: string;
-                        };
+                        "application/json": components["schemas"]["ChatEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -4731,7 +5711,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/lookup": {
+    "/v1/chats/{chat_id}/share-contact-card": {
         parameters: {
             query?: never;
             header?: never;
@@ -4740,43 +5720,50 @@ export interface paths {
         };
         get?: never;
         put?: never;
-        /**
-         * Look up a recipient capability
-         * @description Check whether a phone number or email is iMessage-capable. Returns `imessage: true | false | null`; `null` means we have no cached probe result yet and the caller should fall back to SMS-safe behaviour. Rate-limited per line and per account.
-         */
         post: {
             parameters: {
                 query?: never;
                 header?: never;
-                path?: never;
+                path: {
+                    chat_id: string;
+                };
                 cookie?: never;
             };
             requestBody?: {
                 content: {
-                    "application/json": components["schemas"]["LookupRequest"];
+                    "application/json": {
+                        first_name: string;
+                        last_name?: string;
+                        /** Format: uri */
+                        avatar_url?: string;
+                        phone_numbers?: string[];
+                        emails?: string[];
+                        organization?: string;
+                        note?: string;
+                    };
                 };
             };
             responses: {
-                /** @description Lookup result — cache hit, fast probe, or an un-probed miss */
-                200: {
+                /** @description Contact card queued */
+                202: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["LookupEnvelope"];
+                        "application/json": components["schemas"]["ShareContactCardEnvelope"];
                     };
                 };
-                /** @description Lookup pending — a device probe was dispatched but had not answered within the wait budget; re-poll the same request after `retry_after` seconds */
-                202: {
+                /** @description Bad request — validation failed */
+                400: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["LookupEnvelope"];
+                        "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Bad request — validation failed */
-                400: {
+                /** @description Unauthenticated — missing or invalid bearer token */
+                401: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -4784,8 +5771,26 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Unauthenticated — missing or invalid bearer token */
-                401: {
+                /** @description Forbidden — caller authenticated but not allowed */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Not found */
+                404: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Unprocessable — domain rule violation */
+                422: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -4819,49 +5824,41 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/area-codes": {
+    "/v1/chats/{chat_id}/typing": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
-        /**
-         * List selectable area codes (public)
-         * @description Enumerate the area codes a customer can request as `preferred_area_codes` on `POST /v1/pre-orders`, for rendering a pre-order area-code picker. Optional `?country=US` filters the list. Also returns the selectable countries so the same response can drive a country dropdown. Unauthenticated — mirrors `GET /v1/lines` and `GET /pricing`. The list is the *selectable* set (a curated subset of NANP), not a guarantee of immediate inventory: pre-orders are precisely for tiers with no in-stock line.
-         */
-        get: {
+        get?: never;
+        put?: never;
+        post: {
             parameters: {
-                query?: {
-                    /** @description ISO 3166-1 alpha-2 country filter (case-insensitive). Omit for all countries. */
-                    country?: string;
-                };
+                query?: never;
                 header?: never;
-                path?: never;
+                path: {
+                    chat_id: string;
+                };
                 cookie?: never;
             };
-            requestBody?: never;
-            responses: {
-                /** @description Selectable area codes + countries */
-                200: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["AreaCodesEnvelope"];
-                    };
+            requestBody?: {
+                content: {
+                    "application/json": Record<string, never>;
                 };
-                /** @description Bad request — validation failed */
-                400: {
+            };
+            responses: {
+                /** @description Typing indicator started */
+                202: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ErrorEnvelope"];
+                        "application/json": components["schemas"]["ChatTypingStartEnvelope"];
                     };
-                };
-                /** @description Too many requests — rate limit exceeded */
-                429: {
+                };
+                /** @description Bad request — validation failed */
+                400: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -4869,8 +5866,8 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Internal server error */
-                500: {
+                /** @description Unauthenticated — missing or invalid bearer token */
+                401: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -4878,53 +5875,17 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-            };
-        };
-        put?: never;
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/v1/chats": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /**
-         * List chats
-         * @description Cursor-paginated list of the caller's conversations, newest activity first. Filter by `line_id`. On shared-plan (virtual) lines each chat carries `outbound_number` — the physical number currently serving that contact (null once the binding is released; the next outbound is assigned a fresh number). Non-shared lines always carry `outbound_number: null`. Accepts an API key (`isnap_*`) or a dashboard JWT; line-scoped API keys only see chats of the lines in their allowlist.
-         */
-        get: {
-            parameters: {
-                query?: {
-                    line_id?: string;
-                    limit?: number;
-                    cursor?: string;
-                    since?: string;
-                    until?: string;
-                };
-                header?: never;
-                path?: never;
-                cookie?: never;
-            };
-            requestBody?: never;
-            responses: {
-                /** @description Chat list */
-                200: {
+                /** @description Forbidden — caller authenticated but not allowed */
+                403: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ChatListEnvelope"];
+                        "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Bad request — validation failed */
-                400: {
+                /** @description Not found */
+                404: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -4932,8 +5893,8 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Unauthenticated — missing or invalid bearer token */
-                401: {
+                /** @description Unprocessable — domain rule violation */
+                422: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -4961,26 +5922,7 @@ export interface paths {
                 };
             };
         };
-        put?: never;
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/v1/chats/{chat_id}": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /**
-         * Get a chat
-         * @description Fetch a single conversation by its `chat_<base62>` id. Same shape as the list items, including `outbound_number` for shared-plan lines. Cross-account and out-of-scope ids resolve 404 (no existence leak).
-         */
-        get: {
+        delete: {
             parameters: {
                 query?: never;
                 header?: never;
@@ -4991,13 +5933,13 @@ export interface paths {
             };
             requestBody?: never;
             responses: {
-                /** @description Chat */
+                /** @description Typing indicator stopped */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ChatEnvelope"];
+                        "application/json": components["schemas"]["ChatTypingStopEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -5018,6 +5960,15 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
+                /** @description Forbidden — caller authenticated but not allowed */
+                403: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
                 /** @description Not found */
                 404: {
                     headers: {
@@ -5047,15 +5998,12 @@ export interface paths {
                 };
             };
         };
-        put?: never;
-        post?: never;
-        delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/v1/chats/{chat_id}/share-contact-card": {
+    "/v1/chats/{chat_id}/read": {
         parameters: {
             query?: never;
             header?: never;
@@ -5075,26 +6023,17 @@ export interface paths {
             };
             requestBody?: {
                 content: {
-                    "application/json": {
-                        first_name: string;
-                        last_name?: string;
-                        /** Format: uri */
-                        avatar_url?: string;
-                        phone_numbers?: string[];
-                        emails?: string[];
-                        organization?: string;
-                        note?: string;
-                    };
+                    "application/json": Record<string, never>;
                 };
             };
             responses: {
-                /** @description Contact card queued */
-                202: {
+                /** @description Chat marked read */
+                200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ShareContactCardEnvelope"];
+                        "application/json": components["schemas"]["ChatMarkReadEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -5133,15 +6072,6 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Unprocessable — domain rule violation */
-                422: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["ErrorEnvelope"];
-                    };
-                };
                 /** @description Too many requests — rate limit exceeded */
                 429: {
                     headers: {
@@ -5168,7 +6098,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/chats/{chat_id}/typing": {
+    "/v1/trial/init": {
         parameters: {
             query?: never;
             header?: never;
@@ -5177,28 +6107,30 @@ export interface paths {
         };
         get?: never;
         put?: never;
+        /**
+         * Start a trial session
+         * @description Create a pairing-pending trial session owned by the caller (dashboard JWT for direct self-serve, or an API key for wholesale/SDK). Returns a one-time pairing token the partner embeds in their onboarding UI; the recipient claims it by sending an inbound message that links them to a pool line. Direct accounts may hold only one live trial at a time.
+         */
         post: {
             parameters: {
                 query?: never;
                 header?: never;
-                path: {
-                    chat_id: string;
-                };
+                path?: never;
                 cookie?: never;
             };
             requestBody?: {
                 content: {
-                    "application/json": Record<string, never>;
+                    "application/json": components["schemas"]["TrialInitBody"];
                 };
             };
             responses: {
-                /** @description Typing indicator started */
-                202: {
+                /** @description Trial session created — pairing pending */
+                201: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ChatTypingStartEnvelope"];
+                        "application/json": components["schemas"]["TrialInitEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -5219,26 +6151,8 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Forbidden — caller authenticated but not allowed */
-                403: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["ErrorEnvelope"];
-                    };
-                };
-                /** @description Not found */
-                404: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["ErrorEnvelope"];
-                    };
-                };
-                /** @description Unprocessable — domain rule violation */
-                422: {
+                /** @description Conflict — concurrent or terminal state */
+                409: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -5266,24 +6180,41 @@ export interface paths {
                 };
             };
         };
-        delete: {
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/trial/status": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Check trial pairing status
+         * @description Token-keyed public lookup. Returns the current trial state — `pairing_pending` while waiting for the recipient's first inbound, `paired` once linked, `expired` after the pairing window. On first poll after `paired` the response also reveals the `trial_api_key` (`isnap_test_*`) for the partner to embed.
+         */
+        get: {
             parameters: {
-                query?: never;
-                header?: never;
-                path: {
-                    chat_id: string;
+                query: {
+                    token: string;
                 };
+                header?: never;
+                path?: never;
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description Typing indicator stopped */
+                /** @description Current trial status */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ChatTypingStopEnvelope"];
+                        "application/json": components["schemas"]["TrialStatusEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -5295,8 +6226,8 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Unauthenticated — missing or invalid bearer token */
-                401: {
+                /** @description Not found */
+                404: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -5304,8 +6235,65 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Forbidden — caller authenticated but not allowed */
-                403: {
+                /** @description Too many requests — rate limit exceeded */
+                429: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+                /** @description Internal server error */
+                500: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
+            };
+        };
+        put?: never;
+        post?: never;
+        delete?: never;
+        options?: never;
+        head?: never;
+        patch?: never;
+        trace?: never;
+    };
+    "/v1/trial/activity": {
+        parameters: {
+            query?: never;
+            header?: never;
+            path?: never;
+            cookie?: never;
+        };
+        /**
+         * Get trial activity counters
+         * @description Trial-key-only snapshot of the dormancy and outbound-without-inbound counters. Partner dashboards poll this to render the trial's live state ("3/10 sends since last inbound", dormancy timer remaining).
+         */
+        get: {
+            parameters: {
+                query?: never;
+                header?: never;
+                path?: never;
+                cookie?: never;
+            };
+            requestBody?: never;
+            responses: {
+                /** @description Trial activity snapshot */
+                200: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["TrialActivityEnvelope"];
+                    };
+                };
+                /** @description Bad request — validation failed */
+                400: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -5313,8 +6301,8 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Not found */
-                404: {
+                /** @description Unauthenticated — missing or invalid bearer token */
+                401: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -5342,12 +6330,15 @@ export interface paths {
                 };
             };
         };
+        put?: never;
+        post?: never;
+        delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/v1/chats/{chat_id}/read": {
+    "/v1/trial/{trial_id}/revoke": {
         parameters: {
             query?: never;
             header?: never;
@@ -5356,28 +6347,33 @@ export interface paths {
         };
         get?: never;
         put?: never;
+        /**
+         * Revoke a trial session
+         * @description Terminate a trial owned by the caller, freeing its pool-line slot (the same handle can immediately start a fresh trial) and invalidating its trial API key. Idempotent — revoking an already-revoked trial returns `already_revoked: true` with a 200. A trial the caller does not own returns 404 (no existence leak). Per-partner rebind policy (WHA-1642) applies ONLY to `reason: rebind` (`partner`/`admin` always pass): a partner with rebind disabled gets 403 `rebind_not_allowed`, and one over its daily rebind cap gets 429 `rebind_cap_reached` carrying `retry_at`.
+         */
         post: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
-                    chat_id: string;
+                    /** @description The trl_<base62> public id returned by POST /v1/trial/init. */
+                    trial_id: string;
                 };
                 cookie?: never;
             };
             requestBody?: {
                 content: {
-                    "application/json": Record<string, never>;
+                    "application/json": components["schemas"]["TrialRevokeBody"];
                 };
             };
             responses: {
-                /** @description Chat marked read */
+                /** @description Trial revoked (idempotent) */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ChatMarkReadEnvelope"];
+                        "application/json": components["schemas"]["TrialRevokeEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -5416,6 +6412,15 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
+                /** @description Unprocessable — domain rule violation */
+                422: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
                 /** @description Too many requests — rate limit exceeded */
                 429: {
                     headers: {
@@ -5442,7 +6447,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/trial/init": {
+    "/v1/byod/pair": {
         parameters: {
             query?: never;
             header?: never;
@@ -5452,8 +6457,8 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * Start a trial session
-         * @description Create a pairing-pending trial session owned by the caller (dashboard JWT for direct self-serve, or an API key for wholesale/SDK). Returns a one-time pairing token the partner embeds in their onboarding UI; the recipient claims it by sending an inbound message that links them to a pool line. Direct accounts may hold only one live trial at a time.
+         * Start a BYOD pairing flow
+         * @description Mint a one-time activation code plus the stable per-platform bridge-installer download links for a customer-owned Mac+iPhone or Android device. The customer runs the bridge, enters the code, and the device-side `POST /device/activate` consumes it to mint a `byod_imessage` or `byod_android` line — the platform is derived there from what the bridge reports.
          */
         post: {
             parameters: {
@@ -5464,17 +6469,17 @@ export interface paths {
             };
             requestBody?: {
                 content: {
-                    "application/json": components["schemas"]["TrialInitBody"];
+                    "application/json": components["schemas"]["ByodPairBody"];
                 };
             };
             responses: {
-                /** @description Trial session created — pairing pending */
+                /** @description Activation code + bridge download URL */
                 201: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["TrialInitEnvelope"];
+                        "application/json": components["schemas"]["ByodPairEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -5495,8 +6500,8 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Conflict — concurrent or terminal state */
-                409: {
+                /** @description Not found */
+                404: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -5530,35 +6535,35 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/trial/status": {
+    "/v1/macos-sessions/rent": {
         parameters: {
             query?: never;
             header?: never;
             path?: never;
             cookie?: never;
         };
+        get?: never;
+        put?: never;
         /**
-         * Check trial pairing status
-         * @description Token-keyed public lookup. Returns the current trial state — `pairing_pending` while waiting for the recipient's first inbound, `paired` once linked, `expired` after the pairing window. On first poll after `paired` the response also reveals the `trial_api_key` (`isnap_test_*`) for the partner to embed.
+         * Rent a hosted macOS session
+         * @description Take one hosted macOS session out of iSnap stock on the calling wholesale partner’s account. The tenancy starts immediately and `anniversary_at` is stamped with the day it was taken — that day of the month is what the session bills on, clamped to the last day of shorter months. Returns `409 no_macos_session_in_stock` when no confirmed, unrented session sits on a delivered Mac; iSnap provisions one and attaches it, and no request needs to be repeated. Direct customers do not use this verb — they buy sessions through `POST /v1/billing/mac-checkout` and are refused here with `403 not_a_wholesale_partner`.
          */
-        get: {
+        post: {
             parameters: {
-                query: {
-                    token: string;
-                };
+                query?: never;
                 header?: never;
                 path?: never;
                 cookie?: never;
             };
             requestBody?: never;
             responses: {
-                /** @description Current trial status */
-                200: {
+                /** @description The rented session */
+                201: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["TrialStatusEnvelope"];
+                        "application/json": components["schemas"]["MacosSessionEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -5570,26 +6575,8 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Not found */
-                404: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["ErrorEnvelope"];
-                    };
-                };
-                /** @description Too many requests — rate limit exceeded */
-                429: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["ErrorEnvelope"];
-                    };
-                };
-                /** @description Internal server error */
-                500: {
+                /** @description Unauthenticated — missing or invalid bearer token */
+                401: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -5597,47 +6584,8 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-            };
-        };
-        put?: never;
-        post?: never;
-        delete?: never;
-        options?: never;
-        head?: never;
-        patch?: never;
-        trace?: never;
-    };
-    "/v1/trial/activity": {
-        parameters: {
-            query?: never;
-            header?: never;
-            path?: never;
-            cookie?: never;
-        };
-        /**
-         * Get trial activity counters
-         * @description Trial-key-only snapshot of the dormancy and outbound-without-inbound counters. Partner dashboards poll this to render the trial's live state ("3/10 sends since last inbound", dormancy timer remaining).
-         */
-        get: {
-            parameters: {
-                query?: never;
-                header?: never;
-                path?: never;
-                cookie?: never;
-            };
-            requestBody?: never;
-            responses: {
-                /** @description Trial activity snapshot */
-                200: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["TrialActivityEnvelope"];
-                    };
-                };
-                /** @description Bad request — validation failed */
-                400: {
+                /** @description Forbidden — caller authenticated but not allowed */
+                403: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -5645,8 +6593,8 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Unauthenticated — missing or invalid bearer token */
-                401: {
+                /** @description Conflict — concurrent or terminal state */
+                409: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -5674,15 +6622,13 @@ export interface paths {
                 };
             };
         };
-        put?: never;
-        post?: never;
         delete?: never;
         options?: never;
         head?: never;
         patch?: never;
         trace?: never;
     };
-    "/v1/trial/{trial_id}/revoke": {
+    "/v1/macos-sessions/{id}/cancel": {
         parameters: {
             query?: never;
             header?: never;
@@ -5692,32 +6638,27 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * Revoke a trial session
-         * @description Terminate a trial owned by the caller, freeing its pool-line slot (the same handle can immediately start a fresh trial) and invalidating its trial API key. Idempotent — revoking an already-revoked trial returns `already_revoked: true` with a 200. A trial the caller does not own returns 404 (no existence leak). Per-partner rebind policy (WHA-1642) applies ONLY to `reason: rebind` (`partner`/`admin` always pass): a partner with rebind disabled gets 403 `rebind_not_allowed`, and one over its daily rebind cap gets 429 `rebind_cap_reached` carrying `retry_at`.
+         * Cancel a rented macOS session
+         * @description End the tenancy at its next anniversary. The session stays usable and keeps billing until `cancel_at`, which is the next occurrence of `anniversary_at` strictly after the cancellation — so cancelling ON the anniversary buys the month that starts that day, never zero days. Idempotent: a second call returns the `cancel_at` the first one set rather than pushing it a month further out. Only the renting partner may cancel; every other caller gets `404`.
          */
         post: {
             parameters: {
                 query?: never;
                 header?: never;
                 path: {
-                    /** @description The trl_<base62> public id returned by POST /v1/trial/init. */
-                    trial_id: string;
+                    id: string;
                 };
                 cookie?: never;
             };
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["TrialRevokeBody"];
-                };
-            };
+            requestBody?: never;
             responses: {
-                /** @description Trial revoked (idempotent) */
+                /** @description The cancelled session */
                 200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["TrialRevokeEnvelope"];
+                        "application/json": components["schemas"]["MacosSessionEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -5738,15 +6679,6 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Forbidden — caller authenticated but not allowed */
-                403: {
-                    headers: {
-                        [name: string]: unknown;
-                    };
-                    content: {
-                        "application/json": components["schemas"]["ErrorEnvelope"];
-                    };
-                };
                 /** @description Not found */
                 404: {
                     headers: {
@@ -5756,8 +6688,8 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
-                /** @description Unprocessable — domain rule violation */
-                422: {
+                /** @description Conflict — concurrent or terminal state */
+                409: {
                     headers: {
                         [name: string]: unknown;
                     };
@@ -5791,7 +6723,7 @@ export interface paths {
         patch?: never;
         trace?: never;
     };
-    "/v1/byod/pair": {
+    "/v1/macos-sessions/{id}/uncancel": {
         parameters: {
             query?: never;
             header?: never;
@@ -5801,29 +6733,27 @@ export interface paths {
         get?: never;
         put?: never;
         /**
-         * Start a BYOD pairing flow
-         * @description Mint a one-time activation code plus the stable per-platform bridge-installer download links for a customer-owned Mac+iPhone or Android device. The customer runs the bridge, enters the code, and the device-side `POST /device/activate` consumes it to mint a `byod_imessage` or `byod_android` line — the platform is derived there from what the bridge reports.
+         * Keep a cancelled macOS session
+         * @description Withdraw a pending cancellation, clearing `cancel_at` and leaving `anniversary_at` untouched — the billing day does not move. Idempotent on a session that is not cancelled. Only possible before the release runs: once `cancel_at` has passed the paid month is over and this answers `409 macos_session_cancellation_already_due` — the release is hourly, so there is a window in which the date has passed and the session is still rented, and un-cancelling inside it would hold a seat the monthly tally has already stopped billing. After the release has run the tenancy is gone and this returns `404`; the session must be rented again.
          */
         post: {
             parameters: {
                 query?: never;
                 header?: never;
-                path?: never;
-                cookie?: never;
-            };
-            requestBody?: {
-                content: {
-                    "application/json": components["schemas"]["ByodPairBody"];
+                path: {
+                    id: string;
                 };
+                cookie?: never;
             };
+            requestBody?: never;
             responses: {
-                /** @description Activation code + bridge download URL */
-                201: {
+                /** @description The session, no longer cancelled */
+                200: {
                     headers: {
                         [name: string]: unknown;
                     };
                     content: {
-                        "application/json": components["schemas"]["ByodPairEnvelope"];
+                        "application/json": components["schemas"]["MacosSessionEnvelope"];
                     };
                 };
                 /** @description Bad request — validation failed */
@@ -5853,6 +6783,15 @@ export interface paths {
                         "application/json": components["schemas"]["ErrorEnvelope"];
                     };
                 };
+                /** @description Conflict — concurrent or terminal state */
+                409: {
+                    headers: {
+                        [name: string]: unknown;
+                    };
+                    content: {
+                        "application/json": components["schemas"]["ErrorEnvelope"];
+                    };
+                };
                 /** @description Too many requests — rate limit exceeded */
                 429: {
                     headers: {
@@ -5888,7 +6827,7 @@ export interface paths {
         };
         /**
          * Get the app/bridge download manifest (public)
-         * @description Per-platform installer URL, advertised bridge version, and availability. Requires no pairing and no auth — use it for setup guides, "add a device" flows, reinstalls, and update prompts. The URLs are the same stable 302-redirect endpoints `POST /v1/byod/pair` returns in `download_urls`, and `version` is the same string it returns as `bridge_version`; both surfaces derive from one builder so they cannot drift.
+         * @description Per-platform installer URL, published version, and availability. Requires no pairing and no auth — use it for setup guides, "add a device" flows, reinstalls, and update prompts. The URLs are the same stable 302-redirect endpoints `POST /v1/byod/pair` returns in `download_urls`, built by one shared builder so they cannot drift. `version` is read from the release feed beside the artifact the redirect resolves to, and is `null` when that feed publishes nothing — never a configured placeholder.
          */
         get: {
             parameters: {
@@ -5996,9 +6935,9 @@ export interface components {
             state_name: string | null;
             /** @enum {string} */
             billing_tier: "rental_iphone" | "rental_android" | "byod_imessage" | "byod_android" | "shared_pool" | "shared_imessage";
-            /** @description True when the customer owns the underlying hardware (BYOD billing tiers). BYOD lines expose the full line-health surface (offline/degraded events, GET /v1/lines/{id}/health). Rental lines (false) only emit durable, actionable events to keep customers out of transient infrastructure noise they cannot act on. */
+            /** @description True when the customer owns the underlying hardware (BYOD billing tiers). BYOD lines expose the full line-health surface: GET /v1/lines/{id}/health, the immediate line.offline/line.connected with their diagnostic fields, and the device-health-flux events line.degraded and line.capability_changed. Rental lines (false) are told about DURABLE connectivity changes only, and with NO diagnostic detail by design — line.disconnected always; line.offline once an outage has lasted ≥15 minutes (durable:true, carrying only line_id and detected_at — present it as "line temporarily unavailable, being resolved by the provider"); line.connected on hand-over and on recovery from a surfaced outage — never a transient blip, and never the BYOD-only device-health-flux events they cannot act on. */
             byod: boolean;
-            /** @description True when the line is inbound-only: it may only message a handle that has messaged it first (a recipient who has never contacted the line is rejected with 403 outbound_first_forbidden). Inbound-only is a cheaper rental-tier variant (Bloo parity); always false on BYOD/pool lines. */
+            /** @description True when the line cannot INITIATE a conversation: the contact must send the first message, after which the exchange is unrestricted in both directions. It is NOT receive-only — the line replies, reacts and sends attachments normally once contacted. Messaging a handle that has never contacted the line is rejected with 403 outbound_first_forbidden, per recipient and with no time limit once unlocked. Cheaper than the outbound tier; always false on BYOD/pool lines. */
             inbound_only: boolean;
             capabilities?: unknown;
             status: string;
@@ -6010,6 +6949,10 @@ export interface components {
             stripe_subscription_id: string | null;
             activated_at: string | null;
             expires_at: string | null;
+            /** @description The day you took this line, and therefore the day of the month it renews on: billed once per month at this instant, never prorated. Stamped when the line becomes yours; `null` means the line has no per-line anniversary — a direct customer's line renews on its Stripe subscription's own anchor, and a pool line is billed to nobody. Set it explicitly with POST /v1/lines/{id}/anniversary for a line you migrated from your own system, whose real start date iSnap cannot know. */
+            anniversary_at: string | null;
+            /** @description The anniversary occurrence at which iSnap will END this line, set by POST /v1/lines/{id}/cancel and cleared by POST /v1/lines/{id}/uncancel. The line stays fully active and usable until this instant — the month is already paid for and is never prorated — and iSnap terminates it itself when the date arrives. `null` means the line is not cancelled. It survives the termination it schedules, so a `cancelled` line still says which date ended it. */
+            cancel_at: string | null;
             created_at: string;
             metadata: {
                 [key: string]: unknown;
@@ -6020,8 +6963,30 @@ export interface components {
             shared: boolean;
             fulfillment_status?: string | null;
         };
-        ApiKeyCreate: components["schemas"]["ApiKey"] & {
-            key: string;
+        MacosSession: {
+            /** @example mcs_7Kd2Nq8Rb4Xw1Ty6Ue9Ao3Ph5 */
+            id: string;
+            /** @description Whether this session is currently rented by the calling partner. `false` once it has been released back to iSnap stock. */
+            rented: boolean;
+            /**
+             * Format: date-time
+             * @description The day the session was taken, and the day of the month it bills on. Null once the session is released. A day-of-month past the end of a shorter month bills on that month’s last day.
+             * @example 2026-09-07T14:32:00.000Z
+             */
+            anniversary_at: string | null;
+            /**
+             * Format: date-time
+             * @description When the tenancy ends — always the next occurrence of `anniversary_at` after the cancellation. Null when the session is not cancelled. The session stays usable and keeps billing until this instant.
+             * @example 2026-10-07T14:32:00.000Z
+             */
+            cancel_at: string | null;
+            /**
+             * @description `pending_provisioning` while the Mac hosting the session has not been delivered yet; `created` once it has.
+             * @enum {string}
+             */
+            status: "created" | "pending_provisioning";
+            /** Format: date-time */
+            created_at: string;
         };
         ApiKey: {
             /** Format: uuid */
@@ -6034,6 +6999,9 @@ export interface components {
             created_at: string;
             last_used_at: string | null;
         };
+        ApiKeyCreate: components["schemas"]["ApiKey"] & {
+            key: string;
+        };
         ApiKeyList: {
             api_keys: components["schemas"]["ApiKey"][];
         };
@@ -6072,6 +7040,17 @@ export interface components {
             to_user_id: string;
             preserve_device_session?: boolean;
         };
+        TerminateLine: {
+            reason?: string;
+        };
+        SetLineAnniversary: {
+            /**
+             * Format: date-time
+             * @description The instant you took this line (ISO-8601, UTC). Its day of the month becomes the line’s renewal day and the date a cancellation waits for; the time of day is kept, because the anniversary is an instant and not a calendar day. Use this for a line migrated from your own system, whose real start date iSnap cannot know — for a line taken through the iSnap API it is stamped automatically and does not need stating. A BYOD line carries one too — it is on the same monthly meter — even though iSnap cannot end it for you at that date. Refused (409 `line_cancellation_pending`) while the line carries a `cancel_at`, which was computed from the anniversary you are replacing: uncancel first, set the date, cancel again.
+             * @example 2026-07-02T09:15:00Z
+             */
+            anniversary_at: string;
+        };
         PatchLine: {
             metadata: {
                 [key: string]: unknown;
@@ -6241,20 +7220,17 @@ export interface components {
         PreOrder: {
             /** Format: uuid */
             id: string;
-            /** @enum {string} */
-            billing_tier: "rental_iphone" | "rental_android";
             preferred_area_codes: string[];
+            inbound_only: boolean;
             status: components["schemas"]["PreOrderStatus"];
-            stripe_payment_intent_id: string | null;
             stripe_client_secret: string | null;
-            amount: number;
             estimated_fulfillment: string | null;
             device_status?: components["schemas"]["DeviceFulfillmentStatus"];
             created_at: string;
             updated_at: string;
         };
         /** @enum {string} */
-        PreOrderStatus: "draft" | "pending" | "provisioning" | "ready" | "fulfilled" | "cancelled" | "refunded";
+        PreOrderStatus: "draft" | "provisioning" | "fulfilled" | "cancelled";
         /** @enum {string|null} */
         DeviceFulfillmentStatus: "awaiting_hardware" | "received" | "setup_in_progress" | "ready" | "deployed" | null;
         PreOrderList: {
@@ -6298,11 +7274,71 @@ export interface components {
              */
             device_count: number;
             /**
-             * @description Stripe price cadence. Annual is 10x monthly (2 months free).
+             * @description Stripe price cadence. Quarterly is 2.7x monthly (10% off) and annual is 10x monthly (2 months free).
+             * @example monthly
+             * @enum {string}
+             */
+            billing_cycle: "monthly" | "quarterly" | "annual";
+        };
+        MacCheckoutEnvelope: {
+            /** @enum {boolean} */
+            success: true;
+            data: components["schemas"]["MacCheckoutResponse"];
+            trace_id: string;
+            request_id: string;
+        };
+        MacCheckoutResponse: {
+            /**
+             * Format: uri
+             * @description Hosted Stripe Checkout URL — redirect the customer here.
+             */
+            checkout_url: string;
+            /**
+             * Format: date-time
+             * @description Session expiry (ISO-8601). Stripe default is 24h.
+             */
+            expires_at: string;
+            /** @description Sessions ordered — echoed back as accepted. */
+            quantity: number;
+            /** @description The pack divisor in force, read from the Stripe Price’s `pack_size` metadata. Quantities must be whole multiples of it, at or above it. */
+            pack_size: number;
+            /** @description Recurring total per period in integer cents, from the Price’s graduated tier ladder. Excludes tax, proration and coupons. */
+            estimated_total_cents: number;
+        };
+        MacCheckoutBody: {
+            /**
+             * @description Number of hosted macOS sessions to rent. Must be a whole number of packs at or above the one-pack minimum — the pack size is read from the Stripe Price and echoed as `pack_size` in the response and in the `422` error `issues[0].min`. A quantity that is not a whole pack is refused `422 mac_quantity_not_a_pack`.
+             * @example 5
+             */
+            quantity: number;
+            /**
+             * @description Stripe price cadence for the session subscription.
              * @example monthly
              * @enum {string}
              */
-            billing_cycle: "monthly" | "annual";
+            billing_cycle: "monthly" | "quarterly" | "annual";
+        };
+        SubscriptionQuantityEnvelope: {
+            /** @enum {boolean} */
+            success: true;
+            data: components["schemas"]["SubscriptionQuantityResponse"];
+            trace_id: string;
+            request_id: string;
+        };
+        SubscriptionQuantityResponse: {
+            /** @description The Stripe subscription ID (`sub_*`). */
+            subscription_id: string;
+            /** @description The quantity now set on the adjustable item. */
+            quantity: number;
+            /** @description Recurring total per period in integer cents. `null` when the item’s Price carries no computable per-period total. Excludes tax, proration and coupons. */
+            estimated_total_cents: number | null;
+        };
+        SubscriptionQuantityBody: {
+            /**
+             * @description New quantity for the subscription’s single adjustable item — macOS sessions, or BYOP slots. Both products are subject to the 1:1 rule (see the `422` codes), and the macOS product additionally to the pack rule.
+             * @example 10
+             */
+            quantity: number;
         };
         SubscriptionListEnvelope: {
             /** @enum {boolean} */
@@ -6515,7 +7551,7 @@ export interface components {
          * @description A concrete event type (e.g. `message.received`), a family wildcard (`line.*`), or the catch-all `*`.
          * @enum {string}
          */
-        WebhookEventName: "message.queued" | "message.sent" | "message.delivered" | "message.read" | "message.failed" | "message.received" | "message.scheduled" | "message.cancelled" | "message.fallback_triggered" | "reaction.added" | "reaction.received" | "reaction.removed" | "line.connected" | "line.disconnected" | "line.offline" | "line.degraded" | "line.apple_id_flagged" | "line.quota_warning" | "line.quota_exceeded" | "line.capability_changed" | "typing_indicator.started" | "typing_indicator.stopped" | "trial.linked" | "trial.dormant" | "trial.reactivated" | "trial.bind_conflict" | "trial.revoked" | "binding.released" | "pre_order.fulfilled" | "pre_order.cancelled" | "pre_order.refunded" | "webhook.test" | "*" | "message.*" | "reaction.*" | "line.*" | "typing_indicator.*" | "trial.*" | "binding.*" | "pre_order.*" | "webhook.*";
+        WebhookEventName: "message.queued" | "message.sent" | "message.delivered" | "message.read" | "message.failed" | "message.received" | "message.scheduled" | "message.cancelled" | "message.fallback_triggered" | "reaction.added" | "reaction.received" | "reaction.removed" | "line.connected" | "line.disconnected" | "line.offline" | "line.degraded" | "line.apple_id_flagged" | "line.quota_warning" | "line.quota_exceeded" | "line.capability_changed" | "line.terminated" | "typing_indicator.started" | "typing_indicator.stopped" | "trial.linked" | "trial.dormant" | "trial.reactivated" | "trial.bind_conflict" | "trial.revoked" | "binding.released" | "pre_order.fulfilled" | "pre_order.cancelled" | "macos_session.rented" | "macos_session.released" | "webhook.test" | "*" | "message.*" | "reaction.*" | "line.*" | "typing_indicator.*" | "trial.*" | "binding.*" | "pre_order.*" | "macos_session.*" | "webhook.*";
         WebhookList: {
             webhooks: components["schemas"]["Webhook"][];
         };
@@ -6681,6 +7717,27 @@ export interface components {
             region: string;
             /** @example US */
             country_code: string;
+            /**
+             * @description A ZIP code whose geography this area code serves — the postal address to use at purchase, and the address most likely to have the carrier assign this area code. `null` when no ZIP is on record for this code: choosing the address is then a judgement call for the operator, and this catalogue may not know of an overlay covering the code either, so no regional address can be assumed to yield it.
+             * @example 10019
+             */
+            purchase_zip: string | null;
+            /**
+             * @description Fallback ZIPs in the same geography, to retry with if the carrier rejects the primary. Empty when no ZIP is on record.
+             * @example [
+             *       "10021",
+             *       "10023"
+             *     ]
+             */
+            alt_zips: string[];
+            /**
+             * @description Other area codes IN THIS CATALOGUE that overlay the same geography. Non-empty means NO address can guarantee this specific code — the carrier may assign any code in the complex. An empty list is NOT the converse guarantee: it says only that no code this endpoint can offer is known to overlay this one, and an overlay outside the catalogue may still take the number.
+             * @example [
+             *       "646",
+             *       "917"
+             *     ]
+             */
+            shared_with: string[];
         };
         Country: {
             /** @example US */
@@ -6907,6 +7964,13 @@ export interface components {
                 [key: string]: unknown;
             };
         };
+        MacosSessionEnvelope: {
+            /** @enum {boolean} */
+            success: true;
+            data: components["schemas"]["MacosSession"];
+            trace_id: string;
+            request_id: string;
+        };
         AppManifestEnvelope: {
             /** @enum {boolean} */
             success: true;
@@ -6926,10 +7990,16 @@ export interface components {
              */
             url: string;
             /**
-             * @description Bridge version this deployment advertises — the same string `POST /v1/byod/pair` returns as `bridge_version`. Compare it against an installed version to offer an update.
-             * @example 2.0.1
+             * @description Version currently published for this platform, read from the release feed that sits beside the artifact `url` resolves to — so the number announced and the file served cannot name different releases. `null` when that feed publishes nothing or could not be read; `version_status` says which. Never a configured placeholder: a fabricated version makes a failed install and an uninformed console indistinguishable to whoever is checking. Compare it against an installed version to offer an update.
+             * @example 0.0.211
+             */
+            version: string | null;
+            /**
+             * @description Why `version` holds what it holds. `version` is non-null if and only if this is `published`, so a null is never ambiguous (WHA-2765). `none_published` — the feed answered and publishes no version (a 404, or a feed with no readable item): a real fact about the channel, render "version not published". `unreachable` — the feed could not be read (timeout, DNS failure, a body past the size cap): OUR fault or the update host's, and nobody knows what this channel publishes, so do not tell an operator the version is missing. `misconfigured` — an artifact URL is configured for the platform and no feed URL can be derived from it; someone must fix the deployment. `not_configured` — this deployment ships no artifact for the platform, which is the same fact `available: false` carries. Before this field the last three and the first were one indistinguishable `null`, so a broken appcast URL and a healthy pre-release channel rendered identically.
+             * @example published
+             * @enum {string}
              */
-            version: string;
+            version_status: "published" | "none_published" | "unreachable" | "misconfigured" | "not_configured";
             /**
              * @description False when this deployment has no artifact configured for the platform. The entry is still returned, so a consumer can hide the affordance instead of surfacing a link that 404s on click.
              * @example true