@pipelex/sdk 0.60.0 → 0.62.0

package/README.md

@@ -178,6 +178,18 @@ const copy = await client.copyMethod(
 );
 if (copy.outcome === "copied") console.log(copy.method.copied_from); // the original it names
 
+// The template catalog: the public methods every organization reads, in the platform's order, with
+// the categories that have a template and each card's thumbnails behind short-lived links.
+const templates = await client.listMethodTemplates({ category: "human-resources", limit: 8 });
+for (const tab of templates.categories) console.log(tab.slug, tab.label);
+// Another organization's public method reads in a narrower shape, its latest published version
+// and no draft: `updated_at` is what tells it from one of your own.
+const first = templates.items[0];
+const template = first === undefined ? undefined : await client.getMethod(first.method_id);
+if (template !== undefined && !("updated_at" in template)) {
+  console.log(template.latest_published.categories);
+}
+
 // The organization's files, newest first: uploads, test files and the files runs made. Each row's
 // `uri` goes into a run's inputs as any address does. A filtered page can be empty and still carry
 // a nextCursor; iterateFiles follows it.
@@ -285,7 +297,8 @@ These pages ship inside the published package, so a reader who has only installe
 | [`docs/files.md`](./docs/files.md) | An organization's files: `listFiles` and `iterateFiles`, the row, the whole record and its provenance, the query and its repeated filters, paging through filtered pages, one file and its uses, the records of an address, the rename rule, links that name the file, a zip of files and its caps, a run's files, the copy into a method's draft, and an upload recorded as a method's test file with the refusals that come with it |
 | [`docs/method-examples.md`](./docs/method-examples.md) | A method's saved examples: the create, the paged list and its iterator, the edit that raises the input revision, the latest-run write and its `recorded` or `stale` verdict, the build assistant's save and its `kept` or `created` verdict, how an integer past `Number.MAX_SAFE_INTEGER` in the inputs stays exact, and what is refused before sending |
 | [`docs/method-copy.md`](./docs/method-copy.md) | Copying a method into another organization or duplicating it: what a copy holds and the stored files it copies, the `copied` or `refused` verdict, every refusal, the copy's idempotency key, and `copied_from` |
-| [`docs/organization-branding.md`](./docs/organization-branding.md) | An organization's logos and colours: `getBranding`, which every member and API key reads, `updateOrganizationBranding`, an admin's write that sets, clears or keeps each key, and how a refused logo or colour names its slot in `errors` so a settings screen shows the sentence under it |
+| [`docs/public-methods.md`](./docs/public-methods.md) | Public methods and the template catalog: `listMethodTemplates` and its iterator, the ordering, the categories and the thumbnails' links, another organization's public method read in its narrower shape, the copy of a public method, `visibility` and `categories` on a method, and the refusals a public method's publish adds |
+| [`docs/organization-branding.md`](./docs/organization-branding.md) | An organization's logos, colours, app style and typeface, and its white-label entitlement: `getBranding`, which every member and API key reads, `updateOrganizationBranding`, a write by the `admin` or the `member` role that sets, clears or keeps each key, and how a refused logo, colour, style or typeface names its field so a settings screen shows the sentence under it |
 | [`docs/exact-integers.md`](./docs/exact-integers.md) | Which reads keep an integer past `Number.MAX_SAFE_INTEGER` exact, as a `bigint` (a run's inputs and outputs, an example's inputs), how a request body writes it back with its digits, and `parseExactJson` and `stringifyExactJson` for code showing such data as JSON text |
 | [`docs/crate-routes.md`](./docs/crate-routes.md) | `resolve`, `codegen` and `pipeIo` — the method's tree as the protocol's `files` map, with its dependencies, the normalized crate, the stamped types, and a method's I/O artifacts without a validation — and the offline `runCodegenCheck` that guards a committed tree |
 | [`docs/client-identification.md`](./docs/client-identification.md) | The `User-Agent` every API request carries, and `appInfo`, the option that puts your program's name in front of it |

package/dist/cli/script.d.ts

@@ -15,7 +15,7 @@ import type { CommandIO } from "./io.js";
  * update notice and npm 12's run notices off the script's stderr, which carries the command's
  * own lines, while npm's warnings and errors still print.
  */
-export declare const SCRIPT_RUNNER = "npx --yes --no-update-notifier --loglevel=warn @pipelex/sdk@0.60.0";
+export declare const SCRIPT_RUNNER = "npx --yes --no-update-notifier --loglevel=warn @pipelex/sdk@0.62.0";
 export declare const SCRIPT_WRITER = "@pipelex/sdk";
 export declare const SCRIPT_NEEDS = "Node 22.12 or later";
 /** Run `pipelex-sdk script` and return its exit code. */

package/dist/client.d.ts

@@ -1,7 +1,7 @@
 import type { MTHDSProtocol, ModelCategory, ModelDeck, RunOptions, StartOptions, VersionInfo } from "mthds/protocol";
 import type { CodegenRequest, CodegenResponse, CrateRouteOptions, DictPipeOutput, FormatResponse, LintResponse, ModelCheckCategory, ModelReferenceVerdict, PipeIORequest, PipeIOResponse, PipelexRunResultStart, PipelexValidateSource, PipelexValidationResult, ResolveRequest, ResolveResponse, ValidateMethodSelector } from "./models.js";
 import { type GetRunResultOptions, type RunProgress, type RunRead, type RunResults, type RunResultState, type StartAndWaitForResultOptions, type WaitForResultOptions } from "./runs.js";
-import type { BillingPortalResponse, ChangePlanResponse, CheckoutResponse, DraftFileFromFileInput, DraftFileFromFileResult, FileArchive, FileArchiveRequest, FileDetail, FileLinkTarget, FileLinksResult, FilePage, FileRecord, FileRecordList, FileRenameInput, FileSummary, GetFileQuery, GetFilesByUriOptions, InvoiceView, Membership, MembershipsResponse, OrganizationBranding, OrganizationBrandingUpdate, ListFilesQuery, ListMethodExamplesQuery, ListMethodsQuery, ListMethodVersionsQuery, ListRunFilesQuery, MethodCopyInput, MethodCopyResult, MethodData, MethodDeletionAccepted, MethodDetail, MethodDraftInput, MethodExample, MethodExampleAssistantSaveInput, MethodExampleAssistantSaveResult, MethodExampleCreateInput, MethodExampleLatestRunInput, MethodExampleLatestRunResult, MethodExamplePage, MethodExampleUpdateInput, MethodPage, MethodPublishInput, MethodPublishResult, MethodRenameInput, MethodSummary, MethodVersion, MethodVersionPage, MethodWriteInput, OnboardingSubmission, PipelexApiKeyCreated, PipelexApiKeyList, ListRunsQuery, RunHistoryItem, RunDetail, RunFilesPage, RunPage, PlanView, ResolvedStorageUrl, SavedMethodFile, SubscriptionResponse, UpdateRunInput, UploadGrant, UploadGrantInput, UploadInput, UploadedFile, UserProfile } from "./product-models.js";
+import type { BillingPortalResponse, ChangePlanResponse, CheckoutResponse, DraftFileFromFileInput, DraftFileFromFileResult, FileArchive, FileArchiveRequest, FileDetail, FileLinkTarget, FileLinksResult, FilePage, FileRecord, FileRecordList, FileRenameInput, FileSummary, GetFileQuery, GetFilesByUriOptions, InvoiceView, Membership, MembershipsResponse, OrganizationBranding, OrganizationBrandingUpdate, ListFilesQuery, ListMethodExamplesQuery, ListMethodsQuery, ListMethodTemplatesQuery, ListMethodVersionsQuery, ListRunFilesQuery, MethodCopyInput, MethodCopyResult, MethodData, MethodDeletionAccepted, MethodDetail, MethodDraftInput, MethodExample, MethodExampleAssistantSaveInput, MethodExampleAssistantSaveResult, MethodExampleCreateInput, MethodExampleLatestRunInput, MethodExampleLatestRunResult, MethodExamplePage, MethodExampleUpdateInput, MethodPage, MethodPublishInput, MethodPublishResult, MethodRenameInput, MethodSummary, MethodTemplate, MethodTemplatePage, MethodVersion, MethodVersionPage, MethodWriteInput, OnboardingSubmission, PublicMethodDetail, PipelexApiKeyCreated, PipelexApiKeyList, ListRunsQuery, RunHistoryItem, RunDetail, RunFilesPage, RunPage, PlanView, ResolvedStorageUrl, SavedMethodFile, SubscriptionResponse, UpdateRunInput, UploadGrant, UploadGrantInput, UploadInput, UploadedFile, UserProfile } from "./product-models.js";
 import type { MethodTreeForms, MethodTreeLimits } from "./method-trees.js";
 import type { AppInfo } from "./user-agent.js";
 import type { WebhookDeliveryDetail, WebhookDeliveryList, WebhookReplayAccepted, WebhookReplayOptions, WebhookSecret, WebhookSecretRotateOptions } from "./webhooks.js";
@@ -988,7 +988,49 @@ export declare class PipelexApiClient implements HostedProtocolSurface {
      */
     iterateMethods(query?: Omit<ListMethodsQuery, "cursor">): AsyncGenerator<MethodSummary, void, undefined>;
     /**
-     * Read one method with its draft's files — `GET /v1/methods/{id}`: its identity, its draft
+     * One page of the template catalog — `GET /v1/method-templates`: the public methods of the
+     * organization the deployment names as its templates organization, the same for every caller.
+     *
+     * The templates the ordering lists lead, in its order, and every other template follows by name.
+     * `ordering` names the ordering to serve, such as `default` or an arm of a test; an absent,
+     * unknown or malformed name serves `default`, and the page's `ordering` names the one served,
+     * `null` when there is none. `category` keeps one category's templates, by slug, in the same
+     * order; an unknown slug keeps none. Whatever the filter, the page's `categories` names, with its
+     * label, every category at least one template shows, in the catalog's order, so no tab drawn
+     * from it is ever empty.
+     *
+     * Each `MethodTemplate` carries the method's id and name, its latest published version's number,
+     * description and categories, its organization's display name and each thumbnail with its size
+     * and a link to its bytes valid for about fifteen minutes. A template reads, runs and copies by
+     * its `method_id`, as another organization's public method does (`getMethod`, `copyMethod`).
+     *
+     * Pass the page's `nextCursor` back as `cursor` with the same `ordering` and `category`, which the
+     * cursor does not hold; `null` is the last page. `iterateMethodTemplates` follows it for you.
+     *
+     * Throws `ApiResponseError`: `422` `request.invalid` for a `limit` outside 1 to 200 or a cursor of
+     * another listing, `422` `request.malformed` for a cursor that does not decode, `500`
+     * `runtime.misconfigured` when the templates organization the deployment names has no record or
+     * a link cannot be signed, and `503` `runtime.unavailable`, safe to retry. A page whose `items`
+     * or `categories` is not an array, whose `next_cursor` or `ordering` is neither a string nor
+     * `null`, a template lacking a member a card is drawn from (a string `method_id`, `name` and
+     * `organization_name`, a `description` that is a string or `null`, a positive integer
+     * `latest_version`, an array of string `categories`, and `thumbnails` each with a string `path`,
+     * `media_type`, `sha256`, `url` and `expires_at` and a positive integer `width` and `height`), and a
+     * category without a string `slug` and `label` are an answer the SDK cannot read, thrown as an
+     * `ApiResponseError` too, its links redacted.
+     */
+    listMethodTemplates(query?: ListMethodTemplatesQuery): Promise<MethodTemplatePage>;
+    /**
+     * Every template of the catalog, in the order served — follows `listMethodTemplates`'s cursor
+     * for you, with the same `ordering` and `category` on every page. It stops on a `null` cursor or
+     * on a cursor the server failed to advance, and throws `PagingNotTerminatingError` past a page
+     * ceiling no real catalog reaches. The ordering served and the categories are on each page, so
+     * read one page with `listMethodTemplates` when you need them.
+     */
+    iterateMethodTemplates(query?: Omit<ListMethodTemplatesQuery, "cursor">): AsyncGenerator<MethodTemplate, void, undefined>;
+    /**
+     * Read one method with its files — `GET /v1/methods/{id}`. One of the caller's organization's
+     * methods answers a `MethodDetail`: its identity, its draft
      * (`files`, `input_data`) with the draft's token (`updated_at`) and digest (`draft_digest`),
      * and its latest published version's summary (`latest_version`, `latest_published`), whatever
      * the publish state. A method never published reads with both `null`, never as an error.
@@ -996,6 +1038,11 @@ export declare class PipelexApiClient implements HostedProtocolSurface {
      * link to its bytes valid for about fifteen minutes, and is empty for an empty draft;
      * `writeMethodTree` brings the tree to disk.
      *
+     * **Another organization's public method reads too, in a narrower shape**, a
+     * `PublicMethodDetail`: its latest published version, that version's description, categories
+     * and files, and nothing of its draft or of the owner's people, so no `updated_at` to write or
+     * publish with. Narrow the answer with `"updated_at" in method` before reading the draft.
+     *
      * Takes a bare catalog id: the method routes address the method itself, never a version of
      * it. A caller holding `mt_…@3` strips the suffix with `parseMethodSelector` and reads that
      * version with `getMethodVersion`. Every method route throws `RequestArgumentError` for a
@@ -1003,13 +1050,18 @@ export declare class PipelexApiClient implements HostedProtocolSurface {
      * and for an id that is empty, `.` or `..`, which the URL would resolve into another route's
      * path.
      *
-     * Throws `ApiResponseError`: `404` `pipelex.catalog.not_found` for an unknown or foreign-org
-     * method, `409` `pipelex.catalog.being_deleted` while its erasure runs, and a `500`
-     * `runtime.unexpected` for a method whose draft names a tree the platform holds no record of. An
-     * answer whose `files` is not a listing is an answer the SDK cannot read, thrown as an
-     * `ApiResponseError` too.
+     * Throws `ApiResponseError`: `404` `pipelex.catalog.not_found` for an unknown method, for
+     * another organization's internal one, and for a public one made internal again or being
+     * erased; `409` `pipelex.catalog.being_deleted` while the erasure of the caller's own method
+     * runs; and a `500` `runtime.unexpected` for a method whose tree the platform holds no record
+     * of. An answer whose `files` is not a listing is an answer the SDK cannot read, thrown as an
+     * `ApiResponseError` too, its links redacted, and so is one that lacks `updated_at` while it
+     * carries a member only the owner's read has (`draft_digest`, `created_by_user_id`,
+     * `input_data`, `pipe_output`, `copied_from`, `deletion_state`), which would otherwise pass for
+     * another organization's public method, and a public read without an integer `latest_version`
+     * and a `latest_published` object.
      */
-    getMethod(methodId: string): Promise<MethodDetail>;
+    getMethod(methodId: string): Promise<MethodDetail | PublicMethodDetail>;
     /**
      * Create a method — `POST /v1/methods`. The new method holds its tree as its draft and has no
      * published version, so its bare id answers `409` `pipelex.catalog.not_published` on the run and
@@ -1239,9 +1291,12 @@ export declare class PipelexApiClient implements HostedProtocolSurface {
      *
      * The answer is a `MethodPublishResult` discriminated on `outcome` — branch on it:
      * `published` with the new `version`; `unchanged` with the existing latest `version`;
-     * `refused` with a `reason` (`invalid`, or `not_runnable` for a draft that validates with
-     * pending signatures), a `message` and the runner's `validation` verdict, whose problem items
-     * are read member by member as `validate` reads them. Every arm carries the `method`. A publish
+     * `refused` with a `reason`, a `message` and the runner's `validation` verdict, whose problem
+     * items are read member by member as `validate` reads them. The reason is `invalid`, or
+     * `not_runnable` for a draft that validates with pending signatures, and for a public method
+     * also `thumbnail_missing`, `thumbnail_invalid` or `storage_reference` (see
+     * `MethodPublishRefusalReason`); a reason this SDK does not know is passed through as its raw
+     * string, still a verdict, so show its `message`. Every arm carries the `method`. A publish
      * moves no token.
      *
      * Takes a bare catalog id, as `getMethod` does. Throws `RequestArgumentError` when
@@ -1256,11 +1311,14 @@ export declare class PipelexApiClient implements HostedProtocolSurface {
      * cannot be reached, answers unusably or does not finish within the platform's deadline is a
      * `502` or a `503` with nothing written, so a retry is safe; a runner that refuses the request
      * itself is relayed under its own status. A retry of a publish that landed while its answer was
-     * lost, as on a client timeout, answers `unchanged` with the version it wrote.
+     * lost, as on a client timeout, answers `unchanged` with the version it wrote. A method made
+     * public while its publish ran is a `503` with nothing written, safe to retry, which a retry
+     * judges as a public method's publish.
      *
      * An answer whose `outcome` is not one of the outcomes above, that carries no `method` object,
-     * or a refusal whose `validation` is not a verdict object with a boolean `is_valid`, is an answer
-     * the SDK cannot read, thrown as an `ApiResponseError` too.
+     * or a refusal whose `reason` or `message` is not a string or whose `validation` is not a verdict
+     * object with a boolean `is_valid`, is an answer the SDK cannot read, thrown as an
+     * `ApiResponseError` too.
      */
     publishMethod(methodId: string, input: MethodPublishInput): Promise<MethodPublishResult>;
     /**
@@ -1269,11 +1327,13 @@ export declare class PipelexApiClient implements HostedProtocolSurface {
      *
      * Pass the page's `nextCursor` back as `cursor` to continue; `null` is the last page. A page
      * may be short while `nextCursor` is set, because the platform reads versions whole. A method
-     * never published answers an empty page.
+     * never published answers an empty page. Another organization's public method lists its
+     * versions too, each without its `published_by`.
      *
      * Takes a bare catalog id, as `getMethod` does. Throws `ApiResponseError`: `404`
-     * `pipelex.catalog.not_found` for an unknown method, `409` `pipelex.catalog.being_deleted`, and
-     * `422` `request.invalid` for a cursor the listing did not issue for this method or a `limit`
+     * `pipelex.catalog.not_found` for an unknown method and for another organization's internal
+     * one, `409` `pipelex.catalog.being_deleted` while the erasure of the caller's own method runs,
+     * and `422` `request.invalid` for a cursor the listing did not issue for this method or a `limit`
      * outside 1 to 100. A page whose `items` is not an array or whose `next_cursor` is neither a
      * string nor `null` is an answer the SDK cannot read, thrown as an `ApiResponseError` too.
      */
@@ -1281,12 +1341,15 @@ export declare class PipelexApiClient implements HostedProtocolSurface {
     /**
      * One published version of a method, with its files — `GET /v1/methods/{id}/versions/{n}`.
      * `files` lists the version's tree as `getMethod` lists the draft's, each file with a link to
-     * its bytes valid for about fifteen minutes, which `writeMethodTree` writes to disk.
+     * its bytes valid for about fifteen minutes, which `writeMethodTree` writes to disk. Another
+     * organization's public method reads its versions too, without their `published_by`, the files
+     * linked in the organization that holds it.
      *
      * Takes a bare catalog id, as `getMethod` does, and the version number. Throws
      * `RequestArgumentError` for a `version` that is not a positive integer, before any request.
      * Throws `ApiResponseError`: `404` `pipelex.catalog.not_found` for a version the method never
-     * published and for an unknown method, `409` `pipelex.catalog.being_deleted`, and `500`
+     * published, for an unknown method and for another organization's internal one, `409`
+     * `pipelex.catalog.being_deleted` while the erasure of the caller's own method runs, and `500`
      * `runtime.unexpected` for a version stored before methods were trees and never rewritten as
      * one, which names no tree to serve.
      */
@@ -1303,10 +1366,16 @@ export declare class PipelexApiClient implements HostedProtocolSurface {
      * original stays as it was. The copy takes the draft, never the latest published version; with
      * `expected_draft_updated_at`, it takes exactly the draft the caller last saw.
      *
+     * **Another organization's public method copies too**, a template of the catalog among them,
+     * from its latest published version rather than its draft: that version's tree, description and
+     * categories, and the method's examples, never the owner's form inputs, with `copied_from`
+     * naming the `version`. Leave `expected_draft_updated_at` out then: sent with such a method, it
+     * is refused with a `422` `request.invalid` naming it.
+     *
      * The answer is a `MethodCopyResult` discriminated on `outcome` — branch on it: `copied` with
      * the copy as `method`, `examples_copied` and `stored_files_copied`; `refused` with the
      * `reason` `bundle_names_other_storage`, a `message` and every `references` entry (`{ path, uri
-     * }`) a `.mthds` file of the draft holds that the destination cannot read and, in a duplicate,
+     * }`) a `.mthds` file of the tree holds that the destination cannot read and, in a duplicate,
      * that names a file under the original's run files, which erasing the original would remove,
      * nothing written.
      *
@@ -1325,7 +1394,8 @@ export declare class PipelexApiClient implements HostedProtocolSurface {
      * that is not from a web session, or for a role that may not change methods, in the method's
      * organization or in the destination; `404` `pipelex.org.not_found` for a destination the
      * caller does not belong to, still being set up or unknown, alike; `404`
-     * `pipelex.catalog.not_found` for an unknown method; `409` `pipelex.catalog.being_deleted`;
+     * `pipelex.catalog.not_found` for an unknown method and for another organization's internal
+     * one; `409` `pipelex.catalog.being_deleted` while the erasure of the caller's own method runs;
      * `409` `pipelex.catalog.update_conflict` for a draft that moved since
      * `expected_draft_updated_at`; a `409` whose `domain` is `runtime` and `retry` `no`, for a
      * draft whose tree the method's organization holds no record of or no longer holds every file
@@ -1527,32 +1597,41 @@ export declare class PipelexApiClient implements HostedProtocolSurface {
     }): Promise<Membership>;
     /**
      * The branding of the caller's active organization — `GET /v1/branding`: its name, its light
-     * and dark colour sets and its two logos. Any role reads it, `runner` included, by web session
-     * or API key, so an app scaffolded from the method-app template reads its organization's
-     * branding with its own key. A personal workspace, or a team that set nothing, answers every
-     * colour and logo `null`. A logo's `uri` is a `pipelex-storage://` reference, which
-     * `resolveStorageUrl` turns into a short-lived link to its bytes.
-     *
-     * Throws `ApiResponseError`: `400` when the caller has no active organization, `404` when its
-     * row is missing, and an answer that is not a JSON object, an empty one included.
+     * and dark colour sets, its two logos, its app style and typeface, and whether it holds the
+     * white-label entitlement. Any role reads it, `runner` included, by web session or API key, so
+     * an app scaffolded from the method-app template reads its organization's branding with its own
+     * key. A personal workspace, or a team that set nothing, answers every colour and logo `null`
+     * and no style or typeface. A logo's `uri` is a `pipelex-storage://` reference, which
+     * `resolveStorageUrl` turns into a short-lived link to its bytes. An answer without `style`,
+     * `typeface` or `white_label`, as a platform that predates them sends, reads as `null`, `null`
+     * and `false`.
+     *
+     * Throws `ApiResponseError`: `403` `pipelex.org.required` when the caller has no active
+     * organization, `404` when its row is missing, and an answer that is not a JSON object, an
+     * empty one included.
      */
     getBranding(): Promise<OrganizationBranding>;
     /**
-     * Set or clear an organization's branding — `PATCH /v1/organizations/{org_id}/branding`, an
-     * admin's write to the active organization. Every key of `input` is optional: a value sets it,
-     * `null` clears it, and a key left out keeps its value (`OrganizationBrandingUpdate`), so `{}`
-     * writes nothing. A new logo is the `pipelex-storage://` URI of a file the organization uploaded
-     * on its own, which the platform reads and measures, then copies under `branding/`: the answer's
-     * `uri` is that copy, and sending it back unchanged keeps the logo. The logo a write replaces or
-     * clears is erased. Answers the branding as the write left it.
+     * Set or clear an organization's branding — `PATCH /v1/organizations/{org_id}/branding`, a
+     * write to the active organization by the `admin` or the `member` role, never a `runner`. Every
+     * key of `input` is optional: a value sets it, `null` clears it, and a key left out keeps its
+     * value (`OrganizationBrandingUpdate`), so `{}` writes nothing. A new logo is the
+     * `pipelex-storage://` URI of a file the organization uploaded on its own, which the platform
+     * reads and measures, then copies under `branding/`: the answer's `uri` is that copy, and sending
+     * it back unchanged keeps the logo. The logo a write replaces or clears is erased. A style or a
+     * typeface is an id of the shape `^[a-z0-9-]{1,32}$`, stored whether or not it names one that
+     * exists. Answers the branding as the write left it, read as `getBranding` reads it.
      *
      * Throws `RequestArgumentError` for an organization id that is empty, `.` or `..`, before any
      * request. Throws `ApiResponseError`, refusing every change of the request when it refuses one:
      * `403` `pipelex.org.mismatch` when `orgId` is not the active organization, `403`
-     * `auth.forbidden` for a caller who is not its admin, `404` `pipelex.org.not_found` for a missing
-     * organization, `409` `pipelex.org.not_manageable` for a personal workspace, which has no
-     * branding, and `422` `request.invalid` for a colour that is not `#rrggbb` or a key the body does
-     * not know. A logo's refusal names its slot in its problem's `errors`, each item's
+     * `auth.forbidden` for a runner or a caller with no recognised role, `404`
+     * `pipelex.org.not_found` for a missing organization, `409` `pipelex.org.not_manageable` for a
+     * personal workspace, which has no branding, and `422` `request.invalid` for a colour that is
+     * not `#rrggbb`, a style or a typeface of another shape, or a key the body does not know, which
+     * names the field in `location.field`: the problem's own when it refuses one field alone, each
+     * item's of its `errors` when it refuses several. `white_label` is such a key, since only
+     * Pipelex staff grant it. A logo's refusal names its slot in its problem's `errors`, each item's
      * `location.field` being `square_logo` or `wide_logo` and its `detail` the sentence to show under
      * that slot: `422` `pipelex.storage.uri_invalid` for a URI that is not a storage URI, `403`
      * `pipelex.org.mismatch` for another organization's file, and `422` `request.invalid` with an