@naturali/sdk 0.157.0 → 0.158.0

package/dist/index.d.mts

@@ -402,16 +402,25 @@ type ActorRecord = {
 };
 type ErrorResponse = {
   /**
-   * Structured error. Every error response uses this shape — 401, 403 and the 500 catch-all included — so `code` can be read without first checking the type of `error`.
+   * Structured error. Every error response uses this shape, so `code` can be read without first checking the type of `error`.
    */
   error: {
     /**
-     * A key from the server's ERROR_CODES registry.
+     * Machine-readable error code: lower_snake for an error naturali raises (`access_denied`), UPPER_SNAKE for one the runtime reports (`RESOURCE_NOT_FOUND`).
      */
     code: string;
+    /**
+     * Human-readable explanation.
+     */
     message: string;
     /**
-     * Optional structured context for the error.
+     * Structured context for an error naturali raises, such as the `resource` and `limit` of a `plan_limit_reached`.
+     */
+    details?: {
+      [key: string]: unknown;
+    };
+    /**
+     * Structured context for an error the runtime reports.
      */
     meta?: {
       [key: string]: unknown;
@@ -521,7 +530,7 @@ type User = {
   name?: string | null;
   email_verified: boolean;
   /**
-   * Roles on naturali itself, not on a project. Empty for almost every account; `admin` marks a naturali operator.
+   * Roles on naturali itself, not on a project. Empty for almost every account; `admin` marks a naturali operator. Changed only through `PUT /v1/admin/users/{user_id}/roles`, by a caller holding the role that grants each one.
    */
   roles: Array<'admin'>;
   /**
@@ -532,9 +541,13 @@ type User = {
 };
 type AdminUser = User & {
   /**
-   * The rung of the infra ladder the account is on. `free` for an account with no subscription. It gates the feature lines and the resource counts of the pricing table.
+   * The rung in effect: the highest the account held this month. `free` for an account with no subscription. It gates the feature lines and the resource counts of the pricing table.
    */
   plan: 'free' | 'pro' | 'business' | 'enterprise';
+  /**
+   * The rung the account moves to when the month turns; differs from `plan` only while a downgrade is pending.
+   */
+  next_plan: 'free' | 'pro' | 'business' | 'enterprise';
   /**
    * The longest content-retention window this account's projects may keep content for, in days. On a plan whose window a contract sets, this is the figure recorded with the grant; `null` means nothing bounds it. Resolved the same way the refusal is — the widest window held during the current billing cycle.
    */
@@ -607,9 +620,13 @@ type PlanEvent = {
 type PlanEventPage = {
   data: Array<PlanEvent>;
   /**
-   * The rung the account is on now — its newest line, or `free` when it has no history.
+   * The rung in effect: the highest held this month, or `free` when the account has no history.
    */
   plan: 'free' | 'pro' | 'business' | 'enterprise';
+  /**
+   * The newest line: the rung the account moves to when the month turns.
+   */
+  next_plan: 'free' | 'pro' | 'business' | 'enterprise';
   /**
    * Pass as `cursor` for the next page; null on the last page.
    */
@@ -7762,9 +7779,13 @@ type UserUpdate = {
 };
 type UserBilling = {
   /**
-   * The rung of the infra subscription this account is on. `free` for an account with no subscription, which is also the least-privileged rung. It gates the feature lines and the resource counts of the pricing table.
+   * The rung of the infra subscription in effect for this account: the highest it held this month. `free` for an account with no subscription, which is also the least-privileged rung. It gates the feature lines and the resource counts of the pricing table.
    */
   plan: 'free' | 'pro' | 'business' | 'enterprise';
+  /**
+   * The rung the account moves to when the month turns. It differs from `plan` only while a downgrade is pending: a downgrade takes effect at the end of the month, an upgrade at once.
+   */
+  next_plan: 'free' | 'pro' | 'business' | 'enterprise';
   /**
    * The longest window a project of this account may keep trace and generation content for, in days. A `PATCH` asking for a wider one — `null` included, which keeps content indefinitely — is refused with `403 plan_limit_reached`; anything shorter is always allowed. On a plan whose window a contract sets, this is that contract's figure, and `null` means nothing bounds it. A plan change that shortens the window applies at the end of the billing cycle, so this reads as the widest window held during the current one.
    */
@@ -8914,8 +8935,7 @@ type ListAddressesErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -8953,8 +8973,7 @@ type DeleteAddressErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -8992,8 +9011,7 @@ type GetAddressErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -9035,8 +9053,7 @@ type SetAddressActionErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -9087,8 +9104,7 @@ type ListAddressConversationsErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -9138,8 +9154,7 @@ type ListUsersErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The caller does not hold the `admin` role.
    */
   403: ErrorResponse;
 };
@@ -9169,12 +9184,11 @@ type UpdateUserRolesErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The caller does not hold the `admin` role.
    */
   403: ErrorResponse;
   /**
-   * The resource does not exist (existence is not leaked).
+   * No such user.
    */
   404: ErrorResponse;
 };
@@ -9213,12 +9227,11 @@ type ListUserPlanHistoryErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The caller does not hold the `admin` role.
    */
   403: ErrorResponse;
   /**
-   * The resource does not exist (existence is not leaked).
+   * No such user.
    */
   404: ErrorResponse;
 };
@@ -9248,12 +9261,11 @@ type GrantUserPlanErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The caller does not hold the `admin` role.
    */
   403: ErrorResponse;
   /**
-   * The resource does not exist (existence is not leaked).
+   * No such user.
    */
   404: ErrorResponse;
 };
@@ -9292,12 +9304,11 @@ type ListUserCreditsErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The caller does not hold the `admin` role.
    */
   403: ErrorResponse;
   /**
-   * The resource does not exist (existence is not leaked).
+   * No such user.
    */
   404: ErrorResponse;
 };
@@ -9327,12 +9338,11 @@ type GrantUserCreditErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The caller does not hold the `admin` role.
    */
   403: ErrorResponse;
   /**
-   * The resource does not exist (existence is not leaked).
+   * No such user.
    */
   404: ErrorResponse;
 };
@@ -9356,8 +9366,7 @@ type GetAdminPriceBookErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The caller does not hold the `admin` role.
    */
   403: ErrorResponse;
 };
@@ -9396,12 +9405,11 @@ type ListUserStatementsErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The caller does not hold the `admin` role.
    */
   403: ErrorResponse;
   /**
-   * The resource does not exist (existence is not leaked).
+   * No such user.
    */
   404: ErrorResponse;
 };
@@ -10456,8 +10464,7 @@ type CreateApiKeyErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * Authenticated, but not permitted to act on this key.
    */
   403: ErrorResponse;
 };
@@ -10486,8 +10493,7 @@ type DeleteApiKeyErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * Authenticated, but not permitted to act on this key.
    */
   403: ErrorResponse;
   /**
@@ -10520,8 +10526,7 @@ type GetApiKeyErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * Authenticated, but not permitted to act on this key.
    */
   403: ErrorResponse;
   /**
@@ -10558,8 +10563,7 @@ type UpdateApiKeyErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * Authenticated, but not permitted to act on this key.
    */
   403: ErrorResponse;
   /**
@@ -10592,8 +10596,7 @@ type RotateApiKeyErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * Authenticated, but not permitted to act on this key.
    */
   403: ErrorResponse;
   /**
@@ -11380,8 +11383,7 @@ type ListChannelRoutesErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -11422,8 +11424,7 @@ type CreateChannelRouteErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -11468,8 +11469,7 @@ type DeleteChannelRouteErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -11510,8 +11510,7 @@ type GetChannelRouteErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -11556,8 +11555,7 @@ type UpdateChannelRouteErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -11594,8 +11592,7 @@ type ListProjectChannelRoutesErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -11639,8 +11636,7 @@ type ListChannelsErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -11677,8 +11673,7 @@ type CreateChannelErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -11729,8 +11724,7 @@ type DeleteChannelErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -11772,8 +11766,7 @@ type GetChannelErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -11814,8 +11807,7 @@ type UpdateChannelErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -11875,8 +11867,7 @@ type ListChannelConversationsErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -11922,8 +11913,7 @@ type OpenChannelConversationErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -11973,8 +11963,7 @@ type DeleteChannelConversationErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -12015,8 +12004,7 @@ type GetChannelConversationErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -12070,8 +12058,7 @@ type ListChannelConversationMessagesErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -15342,8 +15329,7 @@ type UploadFileErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -15384,8 +15370,7 @@ type UploadFileBase64Errors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -15493,8 +15478,7 @@ type DownloadFileErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -15544,8 +15528,7 @@ type UpdateFileMetadataErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -15591,8 +15574,7 @@ type DownloadFileBase64Errors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -15646,8 +15628,7 @@ type GetFileTagsErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -15684,8 +15665,7 @@ type MergeFileTagsErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -15722,8 +15702,7 @@ type ReplaceFileTagsErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -19620,8 +19599,7 @@ type CreateProjectErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -19660,8 +19638,7 @@ type DeleteProjectErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -19698,8 +19675,7 @@ type GetProjectErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -19736,8 +19712,7 @@ type UpdateProjectErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -19774,8 +19749,7 @@ type PauseProjectErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -19808,8 +19782,7 @@ type ResumeProjectErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -19846,8 +19819,7 @@ type ListProjectMembersErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -19934,8 +19906,7 @@ type RemoveProjectMemberErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -19976,8 +19947,7 @@ type UpdateProjectMemberErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -20888,8 +20858,7 @@ type ListSessionsErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -20927,8 +20896,7 @@ type CreateSessionErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -20969,8 +20937,7 @@ type DeleteSessionErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -21007,8 +20974,7 @@ type GetSessionErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -21045,8 +21011,7 @@ type UpdateSessionErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -21083,8 +21048,7 @@ type AddSessionMessageErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -21130,8 +21094,7 @@ type GenerateSessionResponseErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -21188,8 +21151,7 @@ type SubmitSessionToolOutputsErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -21230,8 +21192,7 @@ type ForkSessionErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -21271,8 +21232,7 @@ type ListSessionForksErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -21314,8 +21274,7 @@ type GetSessionTagsErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -21352,8 +21311,7 @@ type MergeSessionTagsErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -21390,8 +21348,7 @@ type ReplaceSessionTagsErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller's role in the project does not carry this action, or the credential is scoped to a different project.
-   *
+   * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
   403: ErrorResponse;
   /**
@@ -22635,16 +22592,15 @@ type RestoreCurrentUserStopErrors = {
    */
   401: ErrorResponse;
   /**
-   * The resource does not exist (existence is not leaked).
+   * No such stop on this account, or it was already restored or dismissed.
    */
   404: ErrorResponse;
   /**
-   * The request conflicts with the resource's current state.
+   * The stop cannot be restored now.
    */
   409: ErrorResponse;
   /**
-   * The upstream runtime, or Meta, could not complete the operation.
-   *
+   * The runtime could not turn the item back on; the stop stays listed.
    */
   502: ErrorResponse;
 };
@@ -22673,7 +22629,7 @@ type DismissCurrentUserStopErrors = {
    */
   401: ErrorResponse;
   /**
-   * The resource does not exist (existence is not leaked).
+   * No such stop on this account, or it was already restored or dismissed.
    */
   404: ErrorResponse;
 };
@@ -22819,7 +22775,7 @@ type CreateWebhookErrors = {
    */
   409: ErrorResponse;
   /**
-   * The requested path is not enabled on this deployment (e.g. embedded signup before Meta App credentials are configured, or a Discord channel before `CHANNEL_TOKEN_KEY` is set).
+   * The requested path is not enabled on this deployment — a webhook secret cannot be stored where no credential-sealing key is configured.
    *
    */
   501: ErrorResponse;
@@ -22960,7 +22916,7 @@ type RotateWebhookSecretErrors = {
    */
   404: ErrorResponse;
   /**
-   * The requested path is not enabled on this deployment (e.g. embedded signup before Meta App credentials are configured, or a Discord channel before `CHANNEL_TOKEN_KEY` is set).
+   * The requested path is not enabled on this deployment — a webhook secret cannot be stored where no credential-sealing key is configured.
    *
    */
   501: ErrorResponse;
@@ -23701,7 +23657,7 @@ export declare class Admin {
    *
    * Puts the account on a rung of the infra ladder. Needs the `admin` role.
    * `PUT` because an account is on exactly one rung at a time, but the change is **recorded rather than overwritten**: the plan history is append-only and the newest line is the account's plan. Setting the rung it already holds still writes a line — a re-confirmation is an act worth a record, and the `reason` given with it would otherwise have nowhere to go. Read the history back with `GET` on this path.
-   * The rung is what the feature gate and the resource caps resolve against. Downgrading is the same call with a lower rung; what becomes of resources a lower plan would not hold is a separate mechanism that is not built.
+   * An upgrade takes effect at once. A downgrade is the same call with a lower rung and takes effect when the month turns: until then `plan` stays the rung held and `next_plan` names the new one. At the turn, active channels past the new rung's allowance are disabled, oldest first; an upgrade re-enables them.
    * A rung whose content-retention window a contract sets — `enterprise` — **requires `retention_days`**, since nothing else can answer what that window is and an unanswered one bounds nothing. Every other rung sets its own and refuses the field.
    *
    */