@pouchy_ai/admin-sdk 0.34.0 → 0.38.0

package/CHANGELOG.md

@@ -2,6 +2,80 @@
 
 All notable changes to `@pouchy_ai/admin-sdk` are documented here.
 
+## 0.38.0 — 2026-09-25
+
+- **`ADMIN_ERROR_CODES` gains `subscription_exists`** (409). `POST
+  /v1/projects/{id}/billing/checkout` now refuses when the account already pays
+  through a live Stripe subscription. Before, a second checkout opened a SECOND
+  subscription: both billed, and each one's lifecycle events rewrote the
+  account's plan. Upgrade through `POST /v1/projects/{id}/billing/upgrade`
+  instead, which moves the existing subscription to the new price and charges
+  the prorated difference. Additive: the `AdminErrorCode` type was
+  already open to codes newer than the build.
+
+## 0.37.0 — 2026-09-24
+
+- **`getUsage()` now types the `credits` block** the server has returned since
+  admin API 1.14.0: `{ project, account, limit, scope: 'account', enforcement:
+  { armed, plan, verdict, effect } }` (new exported types `UsageCredits` and
+  `UsageCreditEnforcement`). Additive: `usage` is unchanged, and `credits` is
+  optional because a server older than 1.14.0 does not send it.
+
+  `usage.credits / usage.creditLimit` is NOT a headroom ratio — `usage.credits`
+  is this project's slice and `creditLimit` is the ACCOUNT's pooled allowance,
+  so on a multi-project account it understates consumption. Until now the typed
+  client offered only that ratio (reading `res.credits` did not compile), and
+  this README's quickstart printed it. Read `credits.account / credits.limit`
+  instead; `account` is `null` when the pool could not be read, which means
+  unknown, never zero.
+
+## 0.36.0 — 2026-09-12
+
+- **`deleteChannel` reports what happened to the PROVIDER registration**, and
+  takes `{ deprovision: false }` to suppress it. Admin API 1.13.0. Additive:
+  the option is optional and the response field is new.
+
+  Create has registered telegram/discord connectors with their provider since
+  1.6.0 (`setWebhook` / the slash command). Delete never unregistered — and the
+  asymmetry was worse than an omission, because the delete also destroys the
+  stored bot token, so afterwards nothing on the server side could ever do it.
+  The bot kept pushing every message it could see to a dead inbound URL, which
+  on a fail-closed rate-limited prefix also keeps spending the project's
+  limiter quota.
+
+  Surfaced by an integrator asking whether `DELETE` called `deleteWebhook` —
+  the shape of question that is worth answering by reading the code.
+
+- `ChannelProvisionCode` gains `webhook_deleted`, `command_deleted` and
+  `command_absent`. The union is closed and a published member is never removed,
+  so handle an unknown code as informational. `command_absent` is a **skip**,
+  not an ok: the Discord command was already gone, and "we removed it" versus
+  "there was nothing to remove" are different facts about the provider.
+
+## 0.35.0 — 2026-09-10
+
+### Added
+
+- **Four story-package codes join `ADMIN_ERROR_CODES`**, and two of them were
+  already on the wire without being in it. `has_pins` and `pins_unknown` are
+  the two 409s of `DELETE …/story-packages/{packageId}` (world API 1.35.0):
+  an environment revision has pinned this package, versus the package predates
+  the pin stamp so whether one points at it is UNKNOWN and is not guessed. They
+  shipped through the same VARIABLE indirection that hid
+  `story_contract_v2_write_disabled` — the route forwarded `result.reason` as
+  `code`, so the vocabulary census could not see them; the route spells them
+  out now.
+
+  `story_package_limit` and `story_package_documents_limit` are the two ceiling
+  refusals, newly carrying a code at all. An integrator reported asserting on
+  the refusal SENTENCES because they were the only observation point for the
+  quota — which made a copy edit a breaking change for them and a number change
+  harmless, the exact inversion of what either should cost. The codes retire
+  the prose parsing.
+
+  Distinguishing the two delete refusals matters because their outs differ:
+  `has_pins` sends you to an environment, `pins_unknown` sends you to disable.
+
 ## 0.34.0 — 2026-09-08
 
 ### Fixed

package/README.md

@@ -38,9 +38,15 @@ const { key } = await admin.createKey({ label: 'prod-backend', env: 'live' });
 console.log(key); // the plaintext token — shown ONCE
 
 // Read this month's usage — MAU, tokens, and the credit meter (all typed)
-const { usage } = await admin.getUsage();
+const { usage, credits } = await admin.getUsage();
 console.log(usage.mau, '/', usage.mauLimit, 'MAU');
-console.log(usage.credits, '/', usage.creditLimit, 'credits');
+// Credits pool across the ACCOUNT's projects: `usage.credits` is only this
+// project's slice, so divide the ACCOUNT figure by the limit, never the slice.
+// `account` is null when the pool could not be read — unknown, not zero.
+if (credits) {
+  console.log(credits.project, 'credits here;', credits.account ?? '?', '/', credits.limit, 'account-wide');
+  console.log('next turn:', credits.enforcement.verdict ?? 'unknown', '—', credits.enforcement.effect);
+}
 // Voice is the priciest metered unit — watch its slice, not just the total
 console.log(usage.creditsVoice, 'of those credits were', usage.voiceCalls, 'voice calls');
 
@@ -417,6 +423,7 @@ type), and is append-only:
 | `event_mismatch` | `signalRun` | the run wants a different key; your event is early or wrong |
 | `one_shot_spent` | `updateSchedule` | the one-shot already fired — create a new schedule instead of re-enabling |
 | `ghost_row` | `updateSchedule` | a legacy fieldless row that can never run — delete it, create a new schedule |
+| `subscription_exists` | `POST /v1/projects/{id}/billing/checkout` (console) | the account already pays through a live subscription — upgrade it with `POST …/billing/upgrade` |
 
 `code` is `undefined` on every failure the server did not tag (400s, 404s, the
 429, transport errors), so always keep a `default` branch. The type has a

package/dist/index.d.ts

@@ -1,4 +1,4 @@
-export declare const ADMIN_SDK_VERSION = "0.34.0";
+export declare const ADMIN_SDK_VERSION = "0.38.0";
 export declare const DEFAULT_BASE_URL = "https://pouchy.ai/v1/admin";
 /** Deadline for the routes whose server handler declares `maxDuration: 300` —
  *  the server's own ceiling plus headroom, so a client abort can only ever mean
@@ -60,7 +60,7 @@ export interface AdminClientOptions {
  *  published: on this plane the status line never disambiguates, so two of the
  *  durable-run routes answer 409 for two entirely different reasons each, with
  *  different recoveries. `code` is the only thing that tells them apart. */
-export declare const ADMIN_ERROR_CODES: readonly ["story_contract_v2_write_disabled", "story_contract_v3_write_disabled", "story_contract_v4_write_disabled", "episode_history_incomplete", "episode_ended", "idempotency_key_reused", "stale_deliberation", "deliberation_disabled", "deliberation_uncalibrated", "deliberation_not_enabled", "deliberation_candidates_exceeded", "schedule_limit_reached", "one_shot_spent", "ghost_row", "channel_limit_reached", "webhook_limit_reached", "run_limit_reached", "reembed_required", "run_terminal", "run_not_parked", "stale_token", "run_not_waiting", "event_mismatch"];
+export declare const ADMIN_ERROR_CODES: readonly ["story_contract_v2_write_disabled", "story_contract_v3_write_disabled", "story_contract_v4_write_disabled", "has_pins", "pins_unknown", "story_package_limit", "story_package_documents_limit", "episode_history_incomplete", "episode_ended", "idempotency_key_reused", "stale_deliberation", "deliberation_disabled", "deliberation_uncalibrated", "deliberation_not_enabled", "deliberation_candidates_exceeded", "schedule_limit_reached", "one_shot_spent", "ghost_row", "channel_limit_reached", "webhook_limit_reached", "run_limit_reached", "reembed_required", "run_terminal", "run_not_parked", "stale_token", "run_not_waiting", "event_mismatch", "subscription_exists"];
 /** `AdminApiError.code` values. The `(string & {})` arm keeps the type open for
  *  codes newer than this SDK build while preserving autocomplete — same
  *  doctrine as the companion SDK's `CompanionErrorCodeValue`. */
@@ -312,6 +312,36 @@ export interface MonthUsage {
     creditLimit?: number;
     [k: string]: unknown;
 }
+/** What the credit gate would do on the NEXT turn of this account. */
+export interface UsageCreditEnforcement {
+    /** Whether this deployment has the credit gate switched on at all. While
+     *  false nothing is refused or downgraded at the ceiling. */
+    armed: boolean;
+    plan: string;
+    /** Computed on the ACCOUNT total, exactly as the gate does. `null` when the
+     *  pool could not be read — unknown, not `allow`. */
+    verdict: 'allow' | 'downgrade' | 'deny' | null;
+    /** One line saying what `verdict` does (a paid-plan `downgrade` keeps turns
+     *  running on `standard`; a free-plan ceiling refuses NEW sessions). */
+    effect: string;
+}
+/** The credit meter with both scopes named (admin API 1.14.0+). Read this, not
+ *  `usage.credits / usage.creditLimit`: that divides THIS project's figure by
+ *  the ACCOUNT's allowance and understates consumption on any multi-project
+ *  account. */
+export interface UsageCredits {
+    /** THIS project's consumption — the same number `usage.credits` carries. */
+    project: number;
+    /** The whole ACCOUNT's consumption: the numerator the gate compares to
+     *  `limit`. `null` means it could not be read — never treat it as zero. */
+    account: number | null;
+    /** The ACCOUNT allowance (same value as `usage.creditLimit`). */
+    limit: number;
+    /** Which pool `limit` governs. Credits pool across the owner's projects, so
+     *  a second project does NOT isolate a workload — a second account does. */
+    scope: 'account';
+    enforcement: UsageCreditEnforcement;
+}
 /** One month of the usage-history series. Unlike `MonthUsage` (the current
  *  month's full meter incl. day buckets and the cap), history rows are the
  *  compact per-month rollup the server keeps for every past month. */
@@ -401,13 +431,15 @@ export interface ChannelSecretInput {
     extra?: Record<string, string>;
 }
 /** Outcome class of the provider registration the server performs on create,
- *  and on a rotate / secret replacement. Mirrors the server's `ProvisionStatus`
- *  (`channels/provision.ts`); `admin-sdk-provision.drift.test.ts` binds them. */
+ *  on a rotate / secret replacement, and — from admin API 1.13.0 — the
+ *  UNregistration it performs on delete. Mirrors the server's
+ *  `ProvisionStatus` (`channels/provision.ts`);
+ *  `admin-sdk-provision.drift.test.ts` binds them. */
 export type ChannelProvisionStatus = 'ok' | 'skipped' | 'failed';
 /** Machine-readable reason for a `ChannelProvisionResult`. The server treats
  *  this vocabulary as part of the response contract (the dashboard keys its
  *  copy off it), so branch on `code`, never on `detail`. */
-export type ChannelProvisionCode = 'webhook_set' | 'command_registered' | 'unsupported_type' | 'no_token' | 'no_inbound_url' | 'not_requested' | 'invalid_command_name' | 'app_lookup_failed' | 'upstream_rejected' | 'upstream_unreachable';
+export type ChannelProvisionCode = 'webhook_set' | 'command_registered' | 'unsupported_type' | 'no_token' | 'no_inbound_url' | 'not_requested' | 'invalid_command_name' | 'app_lookup_failed' | 'upstream_rejected' | 'upstream_unreachable' | 'webhook_deleted' | 'command_deleted' | 'command_absent';
 /** What the provider said when the server registered this connector for you.
  *
  *  Registration is an enrichment on top of a durable write: the connector
@@ -1083,8 +1115,24 @@ export interface AdminClient {
          *  transport, when not suppressed with `autoProvision: false`. */
         provision?: ChannelProvisionResult;
     }>;
-    deleteChannel(channelId: string): Promise<{
+    /** Delete a connector — and, for telegram/discord, UNREGISTER it with the
+     *  provider first (admin API 1.13.0).
+     *
+     *  The ordering is the point: the delete also destroys the stored bot token,
+     *  so an unregistration skipped at that moment can never be done afterwards
+     *  from the server side — the bot would keep pushing every message it can see
+     *  to a dead inbound URL, and only whoever holds the token could stop it.
+     *
+     *  Same contract as create-side registration: the connector is removed
+     *  whether or not the provider answers, and a `failed` outcome carries
+     *  `manualCommand`. Pass `deprovision: false` to keep the provider
+     *  registration (for a caller who manages the bot webhook themselves). */
+    deleteChannel(channelId: string, options?: {
+        deprovision?: false;
+    }): Promise<{
         ok: boolean;
+        /** Absent for a transport with no provider registration. */
+        deprovision?: ChannelProvisionResult;
     }>;
     listSchedules(): Promise<{
         schedules: unknown[];
@@ -1344,8 +1392,12 @@ export interface AdminClient {
     testWebhook(webhookId: string): Promise<DeliveryOutcome>;
     /** Manually re-send a recorded delivery's original body, re-signed. */
     redeliverWebhook(deliveryId: string): Promise<DeliveryOutcome>;
+    /** Current-month usage. `credits` (admin API 1.14.0+; absent from an older
+     *  server) is the block to read for headroom — `account / limit` is the
+     *  ratio the gate enforces. */
     getUsage(): Promise<{
         usage: MonthUsage;
+        credits?: UsageCredits;
     }>;
     /** Month-over-month usage series, oldest first; quiet months zero-fill
      *  rather than drop. `scope: 'account'` means the pooled account series —

package/dist/index.js

@@ -8,7 +8,7 @@
 //   import { createAdminClient } from '@pouchy_ai/admin-sdk';
 //   const admin = createAdminClient({ adminKey: process.env.POUCHY_ADMIN_KEY! });
 //   const { agents } = await admin.listAgents();
-export const ADMIN_SDK_VERSION = '0.34.0';
+export const ADMIN_SDK_VERSION = '0.38.0';
 export const DEFAULT_BASE_URL = 'https://pouchy.ai/v1/admin';
 /** Default per-request timeout (ms). A hung upstream otherwise never rejects. */
 const DEFAULT_TIMEOUT_MS = 30_000;
@@ -73,6 +73,10 @@ export const ADMIN_ERROR_CODES = [
     'story_contract_v2_write_disabled',
     'story_contract_v3_write_disabled',
     'story_contract_v4_write_disabled',
+    'has_pins',
+    'pins_unknown',
+    'story_package_limit',
+    'story_package_documents_limit',
     'episode_history_incomplete',
     'episode_ended',
     'idempotency_key_reused',
@@ -92,7 +96,11 @@ export const ADMIN_ERROR_CODES = [
     'run_not_parked',
     'stale_token',
     'run_not_waiting',
-    'event_mismatch'
+    'event_mismatch',
+    // 0.38.0 — checkout on an account that already pays through a live
+    // subscription. Recovery: POST /v1/projects/{id}/billing/upgrade, which moves
+    // that subscription to the new price instead of opening a second one.
+    'subscription_exists'
 ];
 /** Thrown on any non-2xx response AND on a transport failure that never reached
  *  the server (network / DNS / timeout), which carries `status: 0`. `status` is
@@ -330,7 +338,7 @@ export function createAdminClient(opts) {
         createChannel: (input) => request('POST', '/channels', input),
         getChannel: (id) => request('GET', `/channels/${encodeURIComponent(id)}`),
         updateChannel: (id, patch) => request('PATCH', `/channels/${encodeURIComponent(id)}`, patch),
-        deleteChannel: (id) => request('DELETE', `/channels/${encodeURIComponent(id)}`),
+        deleteChannel: (id, options) => request('DELETE', `/channels/${encodeURIComponent(id)}${options?.deprovision === false ? '?deprovision=false' : ''}`),
         listSchedules: () => request('GET', '/schedules'),
         createSchedule: (input) => request('POST', '/schedules', input),
         getSchedule: (id) => request('GET', `/schedules/${encodeURIComponent(id)}`),

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@pouchy_ai/admin-sdk",
-	"version": "0.34.0",
+	"version": "0.38.0",
 	"description": "Typed TypeScript client for the Pouchy Admin API \u2014 manage agents, keys, end users, knowledge, skills, channels, schedules, webhooks and credentials headlessly, with a project Admin key.",
 	"type": "module",
 	"license": "SEE LICENSE IN LICENSE",