@naturali/sdk 0.211.5 → 0.211.6

package/dist/index.cjs

@@ -922,7 +922,10 @@ var Channels = class {
 	* **Discord** (`channel: discord`) — supply `application_id` and `bot_token`, plus the `modes` selecting which Gateway flows to serve (direct messages, and/or @mention-opens-a-thread). The token is checked with Discord first: `400 invalid_bot_token` when Discord rejects it, `400 application_mismatch` when it belongs to another application. Returns `501` when this deployment does not enable Discord channels.
 	* **WhatsApp** (default) — one of two credential paths, both filling the same write-only secret:
 	* * **BYOT** (`credential_source: byot`, default) — supply
-	* `phone_number_id` and `access_token` from your own Meta app.
+	* `phone_number_id` and `access_token` from your own Meta app. The
+	* number is read with the token first: `400 invalid_access_token` when
+	* Meta rejects the token, `400 phone_number_not_accessible` when it
+	* cannot reach that number, `502 meta_unavailable` when Meta fails.
 	*
 	* * **Embedded signup** (`credential_source: embedded_signup`) — supply
 	* `code` and `waba_id` from the Meta popup; naturali exchanges the
@@ -948,11 +951,11 @@ var Channels = class {
 	/**
 	* Create a WhatsApp signup link
 	*
-	* A Meta Embedded Signup URL for this project, to hand to the person who owns the WhatsApp number. They sign in with Meta, pick or create the business account and number, and the number is linked to the project as a channel with `credential_source: embedded_signup` when they finish. No popup or naturali session is needed to follow it.
+	* A Meta Embedded Signup URL for this project, to hand to the person who owns the WhatsApp number. They sign in with Meta and pick or create the business account and number; no popup is needed. The dialog ends on naturali's app, where a signed-in member of this project confirms the number, and it is linked as a channel with `credential_source: embedded_signup` (`POST /v1/channels/whatsapp/signup/complete`).
 	*
 	* The link only links the number: the channel starts with `default: { action: silence }`, so it answers nothing until an agent is bound to it with `PATCH /v1/projects/{project_id}/channels/{channel_id}` or a route.
 	*
-	* The link is good for 30 minutes and acts for whoever created it: it stops working if they leave the project. A number not yet registered for sending is registered with a two-step verification PIN naturali generates and does not keep; the owner can reset it in WhatsApp Manager. Returns `501` on deployments where Meta signup is not configured.
+	* The link is good for 30 minutes. A number not yet registered for sending is registered with a two-step verification PIN naturali generates and does not keep; the owner can reset it in WhatsApp Manager. Returns `501` on deployments where Meta signup is not configured.
 	*
 	*/
 	static createWhatsappSignupLink(options) {
@@ -964,7 +967,7 @@ var Channels = class {
 	/**
 	* Complete a WhatsApp signup
 	*
-	* Finish a signup link whose Meta dialog granted more than one number: the app's result page receives `pending` and the numbers to choose from, and sends back the one chosen. `pending` is the authorization, so no bearer token is needed; it expires 10 minutes after the dialog returns (`400 link_expired`).
+	* Finish a signup link: the app's result page receives `pending` and the numbers Meta granted, and sends back the one to connect. The caller must be a member of the project the link was created for (`404` otherwise), so a link opened by anyone else connects nothing. `pending` expires 10 minutes after the dialog returns (`400 link_expired`).
 	*
 	*/
 	static completeWhatsappSignup(options) {
@@ -5005,7 +5008,7 @@ var Projects = class {
 	*
 	* An `owner` may grant `admin` or `member`; an `admin` may grant `member` only, so administration cannot hand out its own authority. `role: owner` is refused — that is the billing owner, and ownership moves only through a transfer the new owner accepts (`PUT /v1/projects/{project_id}/transfer`).
 	*
-	* The invitation email is a courtesy, not the grant: if it cannot be sent the membership still stands, and the response still says `pending`. Requires an account-wide credential — a project-scoped key cannot grant access that would outlive its own revocation.
+	* The invitation email is a courtesy, not the grant: if it cannot be sent the membership still stands, and the response still says `pending`. Requires an account-wide credential and is refused to a connected app: neither may grant access that would outlive its own revocation.
 	*
 	*/
 	static addProjectMember(options) {
@@ -5041,6 +5044,8 @@ var Projects = class {
 	*
 	* The owner's own row is refused in either direction — it names who pays, so changing it is a transfer (`PUT /v1/projects/{project_id}/transfer`) rather than a role change.
 	*
+	* Requires an account-wide credential and is refused to a connected app.
+	*
 	*/
 	static updateProjectMember(options) {
 		return (options.client ?? client).patch({

package/dist/index.d.cts

@@ -14508,6 +14508,10 @@ type CompleteWhatsappSignupErrors = {
    * The request was malformed or failed validation.
    */
   400: ErrorResponse;
+  /**
+   * Missing or invalid credentials.
+   */
+  401: ErrorResponse;
   /**
    * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
@@ -27233,7 +27237,7 @@ type AddProjectMemberErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller is a `member`, an `admin` granting `admin`, or a project-scoped credential.
+   * The caller is a `member`, an `admin` granting `admin`, a project-scoped credential, or a connected app.
    *
    */
   403: ErrorResponse;
@@ -32648,7 +32652,10 @@ export declare class Channels {
    * **Discord** (`channel: discord`) — supply `application_id` and `bot_token`, plus the `modes` selecting which Gateway flows to serve (direct messages, and/or @mention-opens-a-thread). The token is checked with Discord first: `400 invalid_bot_token` when Discord rejects it, `400 application_mismatch` when it belongs to another application. Returns `501` when this deployment does not enable Discord channels.
    * **WhatsApp** (default) — one of two credential paths, both filling the same write-only secret:
    * * **BYOT** (`credential_source: byot`, default) — supply
-   * `phone_number_id` and `access_token` from your own Meta app.
+   * `phone_number_id` and `access_token` from your own Meta app. The
+   * number is read with the token first: `400 invalid_access_token` when
+   * Meta rejects the token, `400 phone_number_not_accessible` when it
+   * cannot reach that number, `502 meta_unavailable` when Meta fails.
    *
    * * **Embedded signup** (`credential_source: embedded_signup`) — supply
    * `code` and `waba_id` from the Meta popup; naturali exchanges the
@@ -32665,18 +32672,18 @@ export declare class Channels {
   /**
    * Create a WhatsApp signup link
    *
-   * A Meta Embedded Signup URL for this project, to hand to the person who owns the WhatsApp number. They sign in with Meta, pick or create the business account and number, and the number is linked to the project as a channel with `credential_source: embedded_signup` when they finish. No popup or naturali session is needed to follow it.
+   * A Meta Embedded Signup URL for this project, to hand to the person who owns the WhatsApp number. They sign in with Meta and pick or create the business account and number; no popup is needed. The dialog ends on naturali's app, where a signed-in member of this project confirms the number, and it is linked as a channel with `credential_source: embedded_signup` (`POST /v1/channels/whatsapp/signup/complete`).
    *
    * The link only links the number: the channel starts with `default: { action: silence }`, so it answers nothing until an agent is bound to it with `PATCH /v1/projects/{project_id}/channels/{channel_id}` or a route.
    *
-   * The link is good for 30 minutes and acts for whoever created it: it stops working if they leave the project. A number not yet registered for sending is registered with a two-step verification PIN naturali generates and does not keep; the owner can reset it in WhatsApp Manager. Returns `501` on deployments where Meta signup is not configured.
+   * The link is good for 30 minutes. A number not yet registered for sending is registered with a two-step verification PIN naturali generates and does not keep; the owner can reset it in WhatsApp Manager. Returns `501` on deployments where Meta signup is not configured.
    *
    */
   static createWhatsappSignupLink<ThrowOnError extends boolean = false>(options: Options<CreateWhatsappSignupLinkData, ThrowOnError>): RequestResult<CreateWhatsappSignupLinkResponses, CreateWhatsappSignupLinkErrors, ThrowOnError>;
   /**
    * Complete a WhatsApp signup
    *
-   * Finish a signup link whose Meta dialog granted more than one number: the app's result page receives `pending` and the numbers to choose from, and sends back the one chosen. `pending` is the authorization, so no bearer token is needed; it expires 10 minutes after the dialog returns (`400 link_expired`).
+   * Finish a signup link: the app's result page receives `pending` and the numbers Meta granted, and sends back the one to connect. The caller must be a member of the project the link was created for (`404` otherwise), so a link opened by anyone else connects nothing. `pending` expires 10 minutes after the dialog returns (`400 link_expired`).
    *
    */
   static completeWhatsappSignup<ThrowOnError extends boolean = false>(options: Options<CompleteWhatsappSignupData, ThrowOnError>): RequestResult<CompleteWhatsappSignupResponses, CompleteWhatsappSignupErrors, ThrowOnError>;
@@ -34784,7 +34791,7 @@ export declare class Projects {
    *
    * An `owner` may grant `admin` or `member`; an `admin` may grant `member` only, so administration cannot hand out its own authority. `role: owner` is refused — that is the billing owner, and ownership moves only through a transfer the new owner accepts (`PUT /v1/projects/{project_id}/transfer`).
    *
-   * The invitation email is a courtesy, not the grant: if it cannot be sent the membership still stands, and the response still says `pending`. Requires an account-wide credential — a project-scoped key cannot grant access that would outlive its own revocation.
+   * The invitation email is a courtesy, not the grant: if it cannot be sent the membership still stands, and the response still says `pending`. Requires an account-wide credential and is refused to a connected app: neither may grant access that would outlive its own revocation.
    *
    */
   static addProjectMember<ThrowOnError extends boolean = false>(options: Options<AddProjectMemberData, ThrowOnError>): RequestResult<AddProjectMemberResponses, AddProjectMemberErrors, ThrowOnError>;
@@ -34806,6 +34813,8 @@ export declare class Projects {
    *
    * The owner's own row is refused in either direction — it names who pays, so changing it is a transfer (`PUT /v1/projects/{project_id}/transfer`) rather than a role change.
    *
+   * Requires an account-wide credential and is refused to a connected app.
+   *
    */
   static updateProjectMember<ThrowOnError extends boolean = false>(options: Options<UpdateProjectMemberData, ThrowOnError>): RequestResult<UpdateProjectMemberResponses, UpdateProjectMemberErrors, ThrowOnError>;
   /**

package/dist/index.d.mts

@@ -14508,6 +14508,10 @@ type CompleteWhatsappSignupErrors = {
    * The request was malformed or failed validation.
    */
   400: ErrorResponse;
+  /**
+   * Missing or invalid credentials.
+   */
+  401: ErrorResponse;
   /**
    * The credential is scoped to a different project, or the caller's role in the project does not carry this action.
    */
@@ -27233,7 +27237,7 @@ type AddProjectMemberErrors = {
    */
   401: ErrorResponse;
   /**
-   * The caller is a `member`, an `admin` granting `admin`, or a project-scoped credential.
+   * The caller is a `member`, an `admin` granting `admin`, a project-scoped credential, or a connected app.
    *
    */
   403: ErrorResponse;
@@ -32648,7 +32652,10 @@ export declare class Channels {
    * **Discord** (`channel: discord`) — supply `application_id` and `bot_token`, plus the `modes` selecting which Gateway flows to serve (direct messages, and/or @mention-opens-a-thread). The token is checked with Discord first: `400 invalid_bot_token` when Discord rejects it, `400 application_mismatch` when it belongs to another application. Returns `501` when this deployment does not enable Discord channels.
    * **WhatsApp** (default) — one of two credential paths, both filling the same write-only secret:
    * * **BYOT** (`credential_source: byot`, default) — supply
-   * `phone_number_id` and `access_token` from your own Meta app.
+   * `phone_number_id` and `access_token` from your own Meta app. The
+   * number is read with the token first: `400 invalid_access_token` when
+   * Meta rejects the token, `400 phone_number_not_accessible` when it
+   * cannot reach that number, `502 meta_unavailable` when Meta fails.
    *
    * * **Embedded signup** (`credential_source: embedded_signup`) — supply
    * `code` and `waba_id` from the Meta popup; naturali exchanges the
@@ -32665,18 +32672,18 @@ export declare class Channels {
   /**
    * Create a WhatsApp signup link
    *
-   * A Meta Embedded Signup URL for this project, to hand to the person who owns the WhatsApp number. They sign in with Meta, pick or create the business account and number, and the number is linked to the project as a channel with `credential_source: embedded_signup` when they finish. No popup or naturali session is needed to follow it.
+   * A Meta Embedded Signup URL for this project, to hand to the person who owns the WhatsApp number. They sign in with Meta and pick or create the business account and number; no popup is needed. The dialog ends on naturali's app, where a signed-in member of this project confirms the number, and it is linked as a channel with `credential_source: embedded_signup` (`POST /v1/channels/whatsapp/signup/complete`).
    *
    * The link only links the number: the channel starts with `default: { action: silence }`, so it answers nothing until an agent is bound to it with `PATCH /v1/projects/{project_id}/channels/{channel_id}` or a route.
    *
-   * The link is good for 30 minutes and acts for whoever created it: it stops working if they leave the project. A number not yet registered for sending is registered with a two-step verification PIN naturali generates and does not keep; the owner can reset it in WhatsApp Manager. Returns `501` on deployments where Meta signup is not configured.
+   * The link is good for 30 minutes. A number not yet registered for sending is registered with a two-step verification PIN naturali generates and does not keep; the owner can reset it in WhatsApp Manager. Returns `501` on deployments where Meta signup is not configured.
    *
    */
   static createWhatsappSignupLink<ThrowOnError extends boolean = false>(options: Options<CreateWhatsappSignupLinkData, ThrowOnError>): RequestResult<CreateWhatsappSignupLinkResponses, CreateWhatsappSignupLinkErrors, ThrowOnError>;
   /**
    * Complete a WhatsApp signup
    *
-   * Finish a signup link whose Meta dialog granted more than one number: the app's result page receives `pending` and the numbers to choose from, and sends back the one chosen. `pending` is the authorization, so no bearer token is needed; it expires 10 minutes after the dialog returns (`400 link_expired`).
+   * Finish a signup link: the app's result page receives `pending` and the numbers Meta granted, and sends back the one to connect. The caller must be a member of the project the link was created for (`404` otherwise), so a link opened by anyone else connects nothing. `pending` expires 10 minutes after the dialog returns (`400 link_expired`).
    *
    */
   static completeWhatsappSignup<ThrowOnError extends boolean = false>(options: Options<CompleteWhatsappSignupData, ThrowOnError>): RequestResult<CompleteWhatsappSignupResponses, CompleteWhatsappSignupErrors, ThrowOnError>;
@@ -34784,7 +34791,7 @@ export declare class Projects {
    *
    * An `owner` may grant `admin` or `member`; an `admin` may grant `member` only, so administration cannot hand out its own authority. `role: owner` is refused — that is the billing owner, and ownership moves only through a transfer the new owner accepts (`PUT /v1/projects/{project_id}/transfer`).
    *
-   * The invitation email is a courtesy, not the grant: if it cannot be sent the membership still stands, and the response still says `pending`. Requires an account-wide credential — a project-scoped key cannot grant access that would outlive its own revocation.
+   * The invitation email is a courtesy, not the grant: if it cannot be sent the membership still stands, and the response still says `pending`. Requires an account-wide credential and is refused to a connected app: neither may grant access that would outlive its own revocation.
    *
    */
   static addProjectMember<ThrowOnError extends boolean = false>(options: Options<AddProjectMemberData, ThrowOnError>): RequestResult<AddProjectMemberResponses, AddProjectMemberErrors, ThrowOnError>;
@@ -34806,6 +34813,8 @@ export declare class Projects {
    *
    * The owner's own row is refused in either direction — it names who pays, so changing it is a transfer (`PUT /v1/projects/{project_id}/transfer`) rather than a role change.
    *
+   * Requires an account-wide credential and is refused to a connected app.
+   *
    */
   static updateProjectMember<ThrowOnError extends boolean = false>(options: Options<UpdateProjectMemberData, ThrowOnError>): RequestResult<UpdateProjectMemberResponses, UpdateProjectMemberErrors, ThrowOnError>;
   /**

package/dist/index.mjs

@@ -921,7 +921,10 @@ var Channels = class {
 	* **Discord** (`channel: discord`) — supply `application_id` and `bot_token`, plus the `modes` selecting which Gateway flows to serve (direct messages, and/or @mention-opens-a-thread). The token is checked with Discord first: `400 invalid_bot_token` when Discord rejects it, `400 application_mismatch` when it belongs to another application. Returns `501` when this deployment does not enable Discord channels.
 	* **WhatsApp** (default) — one of two credential paths, both filling the same write-only secret:
 	* * **BYOT** (`credential_source: byot`, default) — supply
-	* `phone_number_id` and `access_token` from your own Meta app.
+	* `phone_number_id` and `access_token` from your own Meta app. The
+	* number is read with the token first: `400 invalid_access_token` when
+	* Meta rejects the token, `400 phone_number_not_accessible` when it
+	* cannot reach that number, `502 meta_unavailable` when Meta fails.
 	*
 	* * **Embedded signup** (`credential_source: embedded_signup`) — supply
 	* `code` and `waba_id` from the Meta popup; naturali exchanges the
@@ -947,11 +950,11 @@ var Channels = class {
 	/**
 	* Create a WhatsApp signup link
 	*
-	* A Meta Embedded Signup URL for this project, to hand to the person who owns the WhatsApp number. They sign in with Meta, pick or create the business account and number, and the number is linked to the project as a channel with `credential_source: embedded_signup` when they finish. No popup or naturali session is needed to follow it.
+	* A Meta Embedded Signup URL for this project, to hand to the person who owns the WhatsApp number. They sign in with Meta and pick or create the business account and number; no popup is needed. The dialog ends on naturali's app, where a signed-in member of this project confirms the number, and it is linked as a channel with `credential_source: embedded_signup` (`POST /v1/channels/whatsapp/signup/complete`).
 	*
 	* The link only links the number: the channel starts with `default: { action: silence }`, so it answers nothing until an agent is bound to it with `PATCH /v1/projects/{project_id}/channels/{channel_id}` or a route.
 	*
-	* The link is good for 30 minutes and acts for whoever created it: it stops working if they leave the project. A number not yet registered for sending is registered with a two-step verification PIN naturali generates and does not keep; the owner can reset it in WhatsApp Manager. Returns `501` on deployments where Meta signup is not configured.
+	* The link is good for 30 minutes. A number not yet registered for sending is registered with a two-step verification PIN naturali generates and does not keep; the owner can reset it in WhatsApp Manager. Returns `501` on deployments where Meta signup is not configured.
 	*
 	*/
 	static createWhatsappSignupLink(options) {
@@ -963,7 +966,7 @@ var Channels = class {
 	/**
 	* Complete a WhatsApp signup
 	*
-	* Finish a signup link whose Meta dialog granted more than one number: the app's result page receives `pending` and the numbers to choose from, and sends back the one chosen. `pending` is the authorization, so no bearer token is needed; it expires 10 minutes after the dialog returns (`400 link_expired`).
+	* Finish a signup link: the app's result page receives `pending` and the numbers Meta granted, and sends back the one to connect. The caller must be a member of the project the link was created for (`404` otherwise), so a link opened by anyone else connects nothing. `pending` expires 10 minutes after the dialog returns (`400 link_expired`).
 	*
 	*/
 	static completeWhatsappSignup(options) {
@@ -5004,7 +5007,7 @@ var Projects = class {
 	*
 	* An `owner` may grant `admin` or `member`; an `admin` may grant `member` only, so administration cannot hand out its own authority. `role: owner` is refused — that is the billing owner, and ownership moves only through a transfer the new owner accepts (`PUT /v1/projects/{project_id}/transfer`).
 	*
-	* The invitation email is a courtesy, not the grant: if it cannot be sent the membership still stands, and the response still says `pending`. Requires an account-wide credential — a project-scoped key cannot grant access that would outlive its own revocation.
+	* The invitation email is a courtesy, not the grant: if it cannot be sent the membership still stands, and the response still says `pending`. Requires an account-wide credential and is refused to a connected app: neither may grant access that would outlive its own revocation.
 	*
 	*/
 	static addProjectMember(options) {
@@ -5040,6 +5043,8 @@ var Projects = class {
 	*
 	* The owner's own row is refused in either direction — it names who pays, so changing it is a transfer (`PUT /v1/projects/{project_id}/transfer`) rather than a role change.
 	*
+	* Requires an account-wide credential and is refused to a connected app.
+	*
 	*/
 	static updateProjectMember(options) {
 		return (options.client ?? client).patch({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@naturali/sdk",
-  "version": "0.211.5",
+  "version": "0.211.6",
   "description": "TypeScript SDK for the naturali.ai API, generated from its OpenAPI specs",
   "keywords": [
     "naturali",
@@ -38,7 +38,7 @@
   },
   "devDependencies": {
     "@hey-api/openapi-ts": "^0.99.0",
-    "@naturali/api": "0.211.5",
+    "@naturali/api": "0.211.6",
     "@ttoss/openapi-codegen": "^0.10.0",
     "@types/node": "^26.5.1",
     "tsdown": "^0.23.0",