@transcodely/sdk 0.3.6 → 0.3.7

package/dist/index.d.ts

@@ -381,6 +381,135 @@ declare enum BillingStanding {
      */
     DELINQUENT = 4
 }
+/**
+ * How AUTOMATION is allowed to treat an organization.
+ *
+ * Orthogonal to BillingStanding, and the distinction is the whole point.
+ * Standing is a derived FACT about payment health. Treatment is a commercial
+ * DECISION about whether a cron may act on that fact — email the customer,
+ * block their creates, suspend them. An account can be in dunning and
+ * untouchable at the same time.
+ *
+ * ASSIGNED, never derived: an operator says what a relationship is, through the
+ * audited admin RPC. Admin surfaces only; a customer does not learn from an API
+ * field how patiently we treat them.
+ *
+ * @generated from enum transcodely.v1.BillingTreatment
+ */
+declare enum BillingTreatment {
+    /**
+     * @generated from enum value: BILLING_TREATMENT_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * The default and the full lifecycle: the dunning ladder, the soft limit,
+     * suspension, every customer email, and the dispute posture.
+     *
+     * @generated from enum value: BILLING_TREATMENT_NORMAL = 1;
+     */
+    NORMAL = 1,
+    /**
+     * Billed COMPLETELY NORMALLY — payment method on file, monthly statements,
+     * real charges — and exempt from every automated interruption. A failed
+     * payment or a dispute on one of these routes to the founder instead of to
+     * the customer, so it becomes a conversation rather than a cutoff.
+     *
+     * Requires a payment method on file: this is a promise not to interrupt
+     * someone who pays, not a way to run an account with no card.
+     *
+     * @generated from enum value: BILLING_TREATMENT_TRUSTED = 2;
+     */
+    TRUSTED = 2,
+    /**
+     * Grandfather / comp semantics: not billed, not enforced. Internal, dogfood
+     * and legacy accounts. Selecting it also maintains payment_method_required
+     * and billing_exempt, in the same transaction, so the standing derivation and
+     * this value can never describe different postures.
+     *
+     * @generated from enum value: BILLING_TREATMENT_EXEMPT = 3;
+     */
+    EXEMPT = 3
+}
+/**
+ * How far the CONSEQUENCES of an unpaid statement have progressed.
+ *
+ * Deliberately NOT a fifth BillingStanding. Standing is payment HEALTH, derived
+ * from facts. This is what we have DONE about it, and it needs states standing
+ * cannot express: "new jobs refused but playback still serving" and "suspended"
+ * are consequences, not healths, and an account can be delinquent for weeks at
+ * any of them.
+ *
+ * Every rung's timing derives from the episode's own start, and the schedule is
+ * a set of Go constants (domain.DunningStage) rather than configuration — the
+ * day counts below are documentation of that policy, not a second copy of it.
+ *
+ * ADMIN SURFACES ONLY in this release. A customer is told what is happening to
+ * their account in the email that accompanies each rung; they do not read the
+ * ladder's internal vocabulary out of an API.
+ *
+ * @generated from enum transcodely.v1.DunningStage
+ */
+declare enum DunningStage {
+    /**
+     * @generated from enum value: DUNNING_STAGE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * The resting state: no episode, or one that a payment closed.
+     *
+     * @generated from enum value: DUNNING_STAGE_NONE = 1;
+     */
+    NONE = 1,
+    /**
+     * Day 0 — the provider's charge failed and it is retrying on its own
+     * schedule. Full service continues; the customer is told, and nothing else
+     * happens.
+     *
+     * @generated from enum value: DUNNING_STAGE_PAST_DUE = 2;
+     */
+    PAST_DUE = 2,
+    /**
+     * Day 3 — still unpaid, and the mail now names the date service will be
+     * limited. Full service continues.
+     *
+     * @generated from enum value: DUNNING_STAGE_WARNED = 3;
+     */
+    WARNED = 3,
+    /**
+     * Day 7 — NEW jobs are refused. Everything already queued or running
+     * finishes, playback keeps serving, and the dashboard stays fully readable.
+     *
+     * @generated from enum value: DUNNING_STAGE_SOFT_LIMITED = 4;
+     */
+    SOFT_LIMITED = 4,
+    /**
+     * Day 14 — the organization is suspended: API keys refused, public playback
+     * stopped. Dashboard reads stay open and Cancel stays allowed, so a suspended
+     * customer can still see what they owe, pay it, and stop their own meter.
+     *
+     * @generated from enum value: DUNNING_STAGE_SUSPENDED = 5;
+     */
+    SUSPENDED = 5,
+    /**
+     * Day 45 — the T-14 notice naming the exact date stored media goes. Nothing
+     * new is enforced here; the mail IS the event.
+     *
+     * @generated from enum value: DUNNING_STAGE_DELETION_WARNED = 6;
+     */
+    DELETION_WARNED = 6,
+    /**
+     * Day 60 — statements marked uncollectible, ledger entries flagged, stored
+     * media eligible for deletion. The organization stays suspended. Terminal for
+     * this episode.
+     *
+     * Also the state an operator's manual write-off produces: the same end state,
+     * reached earlier and by a human. Which of the two happened is answered by
+     * the audit log, not by this field.
+     *
+     * @generated from enum value: DUNNING_STAGE_WRITTEN_OFF = 7;
+     */
+    WRITTEN_OFF = 7
+}
 /**
  * Pagination request parameters.
  *
@@ -1182,6 +1311,14 @@ declare class App extends Message<App> {
      * @generated from field: optional double monthly_spend_limit_eur = 15;
      */
     monthlySpendLimitEur?: number;
+    /**
+     * Player configuration for the app's hosted player and embeds. Unset when
+     * never configured (the player uses its built-in defaults). Update via
+     * AppService.UpdatePlayerConfig.
+     *
+     * @generated from field: optional transcodely.v1.PlayerConfig player_config = 16;
+     */
+    playerConfig?: PlayerConfig;
     constructor(data?: PartialMessage<App>);
     static readonly runtime: typeof proto3;
     static readonly typeName = "transcodely.v1.App";
@@ -1191,6 +1328,122 @@ declare class App extends Message<App> {
     static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): App;
     static equals(a: App | PlainMessage<App> | undefined, b: App | PlainMessage<App> | undefined): boolean;
 }
+/**
+ * Player configuration: how the hosted player and embeds present every video
+ * in the app. All fields are optional; an unset field keeps the player's
+ * built-in default.
+ *
+ * @generated from message transcodely.v1.PlayerConfig
+ */
+declare class PlayerConfig extends Message<PlayerConfig> {
+    /**
+     * Caption (subtitle) rendering style.
+     *
+     * @generated from field: optional transcodely.v1.CaptionStyle captions = 1;
+     */
+    captions?: CaptionStyle;
+    constructor(data?: PartialMessage<PlayerConfig>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.PlayerConfig";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): PlayerConfig;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): PlayerConfig;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): PlayerConfig;
+    static equals(a: PlayerConfig | PlainMessage<PlayerConfig> | undefined, b: PlayerConfig | PlainMessage<PlayerConfig> | undefined): boolean;
+}
+/**
+ * Caption rendering style for the hosted player. Colors are 6-digit hex with
+ * a leading '#' (e.g. "#0a0a0a"). On update: an unset field keeps its stored
+ * value, an empty string clears a color back to the player default, and a
+ * numeric field returns to default when set to the documented default value.
+ *
+ * @generated from message transcodely.v1.CaptionStyle
+ */
+declare class CaptionStyle extends Message<CaptionStyle> {
+    /**
+     * Cue box background color. Player default: "#0a0a0a". Empty string clears.
+     *
+     * @generated from field: optional string background_color = 1;
+     */
+    backgroundColor?: string;
+    /**
+     * Cue box background opacity, 0 (fully transparent) to 1 (solid).
+     * Player default: 0.7.
+     *
+     * @generated from field: optional double background_opacity = 2;
+     */
+    backgroundOpacity?: number;
+    /**
+     * Caption text color. Player default: "#ffffff". Empty string clears.
+     *
+     * @generated from field: optional string text_color = 3;
+     */
+    textColor?: string;
+    /**
+     * Caption text size multiplier applied to the player's responsive base
+     * size: 0.5 (half) to 2 (double). Player default: 1.
+     *
+     * @generated from field: optional double font_scale = 4;
+     */
+    fontScale?: number;
+    constructor(data?: PartialMessage<CaptionStyle>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.CaptionStyle";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): CaptionStyle;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): CaptionStyle;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): CaptionStyle;
+    static equals(a: CaptionStyle | PlainMessage<CaptionStyle> | undefined, b: CaptionStyle | PlainMessage<CaptionStyle> | undefined): boolean;
+}
+/**
+ * Request to update player configuration for an app.
+ *
+ * @generated from message transcodely.v1.UpdatePlayerConfigRequest
+ */
+declare class UpdatePlayerConfigRequest extends Message<UpdatePlayerConfigRequest> {
+    /**
+     * App ID.
+     *
+     * @generated from field: string id = 1;
+     */
+    id: string;
+    /**
+     * Player configuration to merge. Fields present here overwrite the stored
+     * value; absent fields are left unchanged.
+     *
+     * @generated from field: transcodely.v1.PlayerConfig player_config = 2;
+     */
+    playerConfig?: PlayerConfig;
+    constructor(data?: PartialMessage<UpdatePlayerConfigRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.UpdatePlayerConfigRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): UpdatePlayerConfigRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): UpdatePlayerConfigRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): UpdatePlayerConfigRequest;
+    static equals(a: UpdatePlayerConfigRequest | PlainMessage<UpdatePlayerConfigRequest> | undefined, b: UpdatePlayerConfigRequest | PlainMessage<UpdatePlayerConfigRequest> | undefined): boolean;
+}
+/**
+ * Response from updating player configuration.
+ *
+ * @generated from message transcodely.v1.UpdatePlayerConfigResponse
+ */
+declare class UpdatePlayerConfigResponse extends Message<UpdatePlayerConfigResponse> {
+    /**
+     * The updated app with merged player config.
+     *
+     * @generated from field: transcodely.v1.App app = 1;
+     */
+    app?: App;
+    constructor(data?: PartialMessage<UpdatePlayerConfigResponse>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.UpdatePlayerConfigResponse";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): UpdatePlayerConfigResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): UpdatePlayerConfigResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): UpdatePlayerConfigResponse;
+    static equals(a: UpdatePlayerConfigResponse | PlainMessage<UpdatePlayerConfigResponse> | undefined, b: UpdatePlayerConfigResponse | PlainMessage<UpdatePlayerConfigResponse> | undefined): boolean;
+}
 /**
  * Request to create a new app.
  *
@@ -1875,7 +2128,105 @@ declare enum InvoiceLineType {
      *
      * @generated from enum value: INVOICE_LINE_TYPE_ADJUSTMENT = 4;
      */
-    ADJUSTMENT = 4
+    ADJUSTMENT = 4,
+    /**
+     * Metered hosting: managed storage (GB, averaged over the covered days) and
+     * CDN delivery (GB egressed), one line per app and service. dimensions
+     * carries {"app_id", "service": "storage"|"egress", "covered_from",
+     * "covered_through"} — the coverage window rolls with the meter, so the last
+     * day or so of a period appears on the next statement rather than this one.
+     *
+     * @generated from enum value: INVOICE_LINE_TYPE_HOSTING = 5;
+     */
+    HOSTING = 5
+}
+/**
+ * How much unbilled usage an organization's payment history earns it.
+ *
+ * Derived from the number of statements it has paid, never stored, and it only
+ * ever moves upward as payments land. It is not a customer segment, a plan, or
+ * anything anyone is told about beyond the billing page: its single job is to
+ * answer "how much work should we run for this account before asking to be
+ * paid".
+ *
+ * @generated from enum transcodely.v1.TrustTier
+ */
+declare enum TrustTier {
+    /**
+     * @generated from enum value: TRUST_TIER_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * No settled payments yet. Every account starts here, including the ones that
+     * go on to spend thousands.
+     *
+     * @generated from enum value: TRUST_TIER_NEW = 1;
+     */
+    NEW = 1,
+    /**
+     * One or two settled payments.
+     *
+     * @generated from enum value: TRUST_TIER_ESTABLISHED = 2;
+     */
+    ESTABLISHED = 2,
+    /**
+     * Three or more settled payments. The tier imposes NO threshold of its own —
+     * the account falls through to whatever ceiling its plan sets, which for most
+     * accounts is none. This is where the ladder is meant to end up.
+     *
+     * @generated from enum value: TRUST_TIER_PROVEN = 3;
+     */
+    PROVEN = 3
+}
+/**
+ * Which rung supplied an organization's outstanding-balance threshold.
+ *
+ * Same purpose as LimitSource on the usage ladder: "€50" reads very differently
+ * depending on whether changing it means an operator editing this organization,
+ * editing its plan, or the account simply paying an invoice.
+ *
+ * @generated from enum transcodely.v1.ExposureThresholdSource
+ */
+declare enum ExposureThresholdSource {
+    /**
+     * @generated from enum value: EXPOSURE_THRESHOLD_SOURCE_UNSPECIFIED = 0;
+     */
+    UNSPECIFIED = 0,
+    /**
+     * An operator set this organization's threshold by hand. Audited, and the
+     * only rung that can RAISE a threshold above what the tier would give.
+     *
+     * @generated from enum value: EXPOSURE_THRESHOLD_SOURCE_OVERRIDE = 1;
+     */
+    OVERRIDE = 1,
+    /**
+     * The trust tier's own number — the everyday answer.
+     *
+     * @generated from enum value: EXPOSURE_THRESHOLD_SOURCE_TRUST_TIER = 2;
+     */
+    TRUST_TIER = 2,
+    /**
+     * The monthly spend ceiling on the organization's plan. It joins by MINIMUM,
+     * so a plan can only ever tighten what the tier or an operator allowed:
+     * carrying more unbilled usage than an account is permitted to spend in a
+     * month would be extending credit past the amount it may run up at all.
+     *
+     * @generated from enum value: EXPOSURE_THRESHOLD_SOURCE_ORG_PLAN = 3;
+     */
+    ORG_PLAN = 3,
+    /**
+     * The platform-wide default ceiling.
+     *
+     * @generated from enum value: EXPOSURE_THRESHOLD_SOURCE_PLATFORM_DEFAULT = 4;
+     */
+    PLATFORM_DEFAULT = 4,
+    /**
+     * Every rung declined: no threshold applies, no reminders are sent and
+     * admission is never refused for this reason.
+     *
+     * @generated from enum value: EXPOSURE_THRESHOLD_SOURCE_UNBOUNDED = 5;
+     */
+    UNBOUNDED = 5
 }
 /**
  * Whether an organization has a payment method the provider can charge.
@@ -2276,15 +2627,35 @@ declare class BillingPortalSession extends Message<BillingPortalSession> {
      * Where to send the browser. Single-use and short-lived; request a new
      * session rather than storing this.
      *
+     * Points at the portal's settings section, where payment methods are managed,
+     * rather than at its landing page.
+     *
      * @generated from field: string url = 2;
      */
     url: string;
     /**
-     * When the session stops working.
+     * When the session stops working. Applies to url and session_token alike —
+     * they are two ways into the same session.
      *
      * @generated from field: google.protobuf.Timestamp expires_at = 3;
      */
     expiresAt?: Timestamp;
+    /**
+     * Short-lived (~1h), single-customer-scoped token for the provider's embedded
+     * payment-method form, so a card can be added in place instead of by
+     * redirecting to the hosted portal.
+     *
+     * Same trust level as `url`, which reaches the same portal as the same
+     * customer with no further authentication. It is still a bare credential:
+     * hand it to the embed, never log or store it, and request a new session
+     * instead of reusing one.
+     *
+     * Empty when the configured provider exposes no such token; fall back to
+     * opening `url`.
+     *
+     * @generated from field: string session_token = 4;
+     */
+    sessionToken: string;
     constructor(data?: PartialMessage<BillingPortalSession>);
     static readonly runtime: typeof proto3;
     static readonly typeName = "transcodely.v1.BillingPortalSession";
@@ -2294,6 +2665,299 @@ declare class BillingPortalSession extends Message<BillingPortalSession> {
     static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): BillingPortalSession;
     static equals(a: BillingPortalSession | PlainMessage<BillingPortalSession> | undefined, b: BillingPortalSession | PlainMessage<BillingPortalSession> | undefined): boolean;
 }
+/**
+ * An organization's monthly budget and the spend it is measured against.
+ *
+ * A budget is the customer's OWN telemetry: it exists so an account can be told
+ * it is spending more than it meant to. It NEVER enforces anything. Crossing
+ * 100% of a budget sends an email and changes nothing else — no job is
+ * rejected, no video stops playing, no limit is applied.
+ *
+ * It is not the per-app spend LIMIT (App.monthly_spend_limit_eur, set via
+ * AppService.UpdateSpendLimit), which IS a hard cap: at 100% of a spend limit,
+ * new jobs are refused. Limits block; budgets notify. An organization can use
+ * either, both, or neither.
+ *
+ * @generated from message transcodely.v1.Budget
+ */
+declare class Budget extends Message<Budget> {
+    /**
+     * Object type, always "budget".
+     *
+     * @generated from field: string object = 1;
+     */
+    object: string;
+    /**
+     * Organization this budget belongs to.
+     *
+     * @generated from field: string org_id = 2;
+     */
+    orgId: string;
+    /**
+     * The monthly budget in EUR. Absent when no budget is set, which is the
+     * default and means no alerts are sent.
+     *
+     * @generated from field: optional double amount_eur = 3;
+     */
+    amountEur?: number;
+    /**
+     * Spend so far in the current billing period, in EUR.
+     *
+     * This is the same ledger, over the same window, that GetUpcomingInvoice
+     * reports — it covers transcoding AND hosting for every app in the
+     * organization, and it excludes usage that will never be billed. It is
+     * therefore NOT the same number as AppService.GetSpend, which is scoped to
+     * one app, counts estimates for jobs still running, and knows nothing about
+     * hosting.
+     *
+     * @generated from field: double spent_eur = 4;
+     */
+    spentEur: number;
+    /**
+     * spent_eur as a percentage of amount_eur. Absent when no budget is set.
+     * Not capped at 100: an organization at 240% of its budget is shown 240.
+     *
+     * @generated from field: optional double used_percent = 5;
+     */
+    usedPercent?: number;
+    /**
+     * Start of the current billing period (inclusive), UTC.
+     *
+     * @generated from field: google.protobuf.Timestamp period_start = 6;
+     */
+    periodStart?: Timestamp;
+    /**
+     * End of the current billing period (exclusive), UTC. Spend resets here.
+     *
+     * @generated from field: google.protobuf.Timestamp period_end = 7;
+     */
+    periodEnd?: Timestamp;
+    /**
+     * The percentage steps that send an alert email, ascending. Fixed at
+     * 50, 80 and 100 today; new steps may be added.
+     *
+     * @generated from field: repeated int32 alert_steps = 8;
+     */
+    alertSteps: number[];
+    /**
+     * The steps already emailed this billing period, ascending. Fire-once per
+     * period: a step listed here does not send again, and changing the budget
+     * mid-period does not re-arm it. Empty at the start of every period.
+     *
+     * @generated from field: repeated int32 notified_steps = 9;
+     */
+    notifiedSteps: number[];
+    /**
+     * ISO 4217 currency code for every amount here. Always "EUR" today.
+     *
+     * @generated from field: string currency = 10;
+     */
+    currency: string;
+    constructor(data?: PartialMessage<Budget>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.Budget";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): Budget;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): Budget;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): Budget;
+    static equals(a: Budget | PlainMessage<Budget> | undefined, b: Budget | PlainMessage<Budget> | undefined): boolean;
+}
+/**
+ * An organization's unsettled balance and the threshold it is measured against.
+ *
+ * # What the number is
+ *
+ * Usage that has been accrued and NOT yet captured onto a statement —
+ * transcoding and hosting, across every app in the organization. Paying a
+ * statement, or settling mid-cycle, resets it to zero.
+ *
+ * It is a different number from all three of its neighbours, and the
+ * differences matter:
+ *
+ *   - GetUpcomingInvoice shows what THIS PERIOD has accrued. This shows what is
+ *     UNSETTLED, which also carries anything an earlier period left uncaptured.
+ *   - Budget.spent_eur keeps counting after an invoice is issued, because spend
+ *     does not un-happen when it is billed. This drops to zero when it is.
+ *   - App.monthly_spend_limit_eur is a cap the customer sets on one app for
+ *     themselves. This is the platform's own exposure control over the whole
+ *     organization, and no calendar clears it — only payment does.
+ *
+ * # What happens as it climbs
+ *
+ * Nothing, for a long time. Reminder emails go out at 80%, 100%, 125%, 150% and
+ * 175% of the threshold and NOTHING is restricted at any of them: service
+ * continues past the threshold on purpose, so that a busy month never stops a
+ * pipeline without warning. Only at `hard_stop_cents` — twice the threshold —
+ * are new jobs refused, with error code "outstanding_balance_exceeded".
+ *
+ * Even then, work already queued or running finishes, outputs are delivered,
+ * videos keep playing, uploads keep working and jobs can still be canceled.
+ * Paying lifts the block on the very next request.
+ *
+ * @generated from message transcodely.v1.OutstandingBalance
+ */
+declare class OutstandingBalance extends Message<OutstandingBalance> {
+    /**
+     * Object type, always "outstanding_balance".
+     *
+     * @generated from field: string object = 1;
+     */
+    object: string;
+    /**
+     * Organization this balance belongs to.
+     *
+     * @generated from field: string org_id = 2;
+     */
+    orgId: string;
+    /**
+     * The unsettled amount, in integer minor units (cents) of `currency`.
+     * Rendered as a JSON string per the protobuf 64-bit integer mapping.
+     *
+     * @generated from field: int64 outstanding_cents = 3;
+     */
+    outstandingCents: bigint;
+    /**
+     * The trust tier the organization's payment history puts it on, which is what
+     * sets the threshold unless an operator or a plan overrides it.
+     *
+     * @generated from field: transcodely.v1.TrustTier tier = 4;
+     */
+    tier: TrustTier;
+    /**
+     * How many statements this organization has PAID. The input behind `tier`,
+     * surfaced so the path to a higher threshold is visible rather than implied.
+     * A mid-cycle settlement counts once it is paid, like any other statement.
+     *
+     * @generated from field: int64 settled_payments = 5;
+     */
+    settledPayments: bigint;
+    /**
+     * The threshold, in cents. Absent when no threshold applies at all — a
+     * long-standing account with no plan ceiling has none, which is the intended
+     * destination of the whole ladder.
+     *
+     * @generated from field: optional int64 threshold_cents = 6;
+     */
+    thresholdCents?: bigint;
+    /**
+     * Which rung supplied `threshold_cents`.
+     *
+     * @generated from field: transcodely.v1.ExposureThresholdSource threshold_source = 7;
+     */
+    thresholdSource: ExposureThresholdSource;
+    /**
+     * The amount at which new-job admission stops: twice `threshold_cents`.
+     * Absent exactly when `threshold_cents` is.
+     *
+     * @generated from field: optional int64 hard_stop_cents = 8;
+     */
+    hardStopCents?: bigint;
+    /**
+     * Whether new jobs are being refused right now. Reads the same numbers the
+     * admission gate reads, so a card showing false cannot coexist with a create
+     * being rejected for this reason.
+     *
+     * @generated from field: bool blocked = 9;
+     */
+    blocked: boolean;
+    /**
+     * `outstanding_cents` as a percentage of `threshold_cents`. Absent when no
+     * threshold applies. Not capped at 100: an organization at 180% is shown 180.
+     *
+     * @generated from field: optional double used_percent = 10;
+     */
+    usedPercent?: number;
+    /**
+     * The percentage steps that send a reminder email, ascending. 80, 100, 125,
+     * 150, 175 and 200 today; the last one is where admission stops.
+     *
+     * @generated from field: repeated int32 alert_steps = 11;
+     */
+    alertSteps: number[];
+    /**
+     * The steps already emailed for the current accrual window, ascending.
+     * Fire-once: a step listed here does not send again until the balance is
+     * settled or the billing period rolls.
+     *
+     * @generated from field: repeated int32 notified_steps = 12;
+     */
+    notifiedSteps: number[];
+    /**
+     * ISO 4217 currency code for every amount here. Always "EUR" today.
+     *
+     * @generated from field: string currency = 13;
+     */
+    currency: string;
+    /**
+     * Whether SettleOutstandingBalance is available on this deployment. False
+     * while the settlement rail is disabled — a billing page should not render a
+     * "pay now" action that can only fail.
+     *
+     * @generated from field: bool settlement_available = 14;
+     */
+    settlementAvailable: boolean;
+    constructor(data?: PartialMessage<OutstandingBalance>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.OutstandingBalance";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): OutstandingBalance;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): OutstandingBalance;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): OutstandingBalance;
+    static equals(a: OutstandingBalance | PlainMessage<OutstandingBalance> | undefined, b: OutstandingBalance | PlainMessage<OutstandingBalance> | undefined): boolean;
+}
+/**
+ * A statement produced by paying an outstanding balance mid-cycle.
+ *
+ * @generated from message transcodely.v1.Settlement
+ */
+declare class Settlement extends Message<Settlement> {
+    /**
+     * Object type, always "settlement".
+     *
+     * @generated from field: string object = 1;
+     */
+    object: string;
+    /**
+     * The statement the balance was captured onto. It is an ordinary invoice —
+     * readable through GetInvoice, listed by ListInvoices, and paid through the
+     * same provider flow as any other.
+     *
+     * @generated from field: string invoice_id = 2;
+     */
+    invoiceId: string;
+    /**
+     * What it came to, in integer minor units (cents).
+     *
+     * @generated from field: int64 amount_cents = 3;
+     */
+    amountCents: bigint;
+    /**
+     * The window the statement covers, UTC. It starts where the previous
+     * statement ended (or at the period start) and ends at the settlement
+     * instant.
+     *
+     * @generated from field: google.protobuf.Timestamp period_start = 4;
+     */
+    periodStart?: Timestamp;
+    /**
+     * @generated from field: google.protobuf.Timestamp period_end = 5;
+     */
+    periodEnd?: Timestamp;
+    /**
+     * ISO 4217 currency code. Always "EUR" today.
+     *
+     * @generated from field: string currency = 6;
+     */
+    currency: string;
+    constructor(data?: PartialMessage<Settlement>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.Settlement";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): Settlement;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): Settlement;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): Settlement;
+    static equals(a: Settlement | PlainMessage<Settlement> | undefined, b: Settlement | PlainMessage<Settlement> | undefined): boolean;
+}
 /**
  * Request to list the organization's invoices.
  *
@@ -2497,9 +3161,185 @@ declare class CreateBillingPortalSessionResponse extends Message<CreateBillingPo
     static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): CreateBillingPortalSessionResponse;
     static equals(a: CreateBillingPortalSessionResponse | PlainMessage<CreateBillingPortalSessionResponse> | undefined, b: CreateBillingPortalSessionResponse | PlainMessage<CreateBillingPortalSessionResponse> | undefined): boolean;
 }
+/**
+ * Request to read the organization's monthly budget. The organization is taken
+ * from the X-Organization-ID header.
+ *
+ * @generated from message transcodely.v1.GetBudgetRequest
+ */
+declare class GetBudgetRequest extends Message<GetBudgetRequest> {
+    constructor(data?: PartialMessage<GetBudgetRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.GetBudgetRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): GetBudgetRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): GetBudgetRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): GetBudgetRequest;
+    static equals(a: GetBudgetRequest | PlainMessage<GetBudgetRequest> | undefined, b: GetBudgetRequest | PlainMessage<GetBudgetRequest> | undefined): boolean;
+}
+/**
+ * Response carrying the budget and the spend it is measured against.
+ *
+ * @generated from message transcodely.v1.GetBudgetResponse
+ */
+declare class GetBudgetResponse extends Message<GetBudgetResponse> {
+    /**
+     * The budget. Always present: an organization with no budget set gets one
+     * with amount_eur absent and spent_eur still populated, so the current
+     * period's spend can be shown before a budget exists.
+     *
+     * @generated from field: transcodely.v1.Budget budget = 1;
+     */
+    budget?: Budget;
+    constructor(data?: PartialMessage<GetBudgetResponse>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.GetBudgetResponse";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): GetBudgetResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): GetBudgetResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): GetBudgetResponse;
+    static equals(a: GetBudgetResponse | PlainMessage<GetBudgetResponse> | undefined, b: GetBudgetResponse | PlainMessage<GetBudgetResponse> | undefined): boolean;
+}
+/**
+ * Request to set or clear the organization's monthly budget. The organization
+ * is taken from the X-Organization-ID header.
+ *
+ * @generated from message transcodely.v1.UpdateBudgetRequest
+ */
+declare class UpdateBudgetRequest extends Message<UpdateBudgetRequest> {
+    /**
+     * Monthly budget in EUR. When present, sets the budget (must be > 0). When
+     * ABSENT, the budget is cleared and no further alerts are sent — that is the
+     * only way to turn them off. The upper bound matches the NUMERIC(12,2)
+     * storage column.
+     *
+     * @generated from field: optional double amount_eur = 1;
+     */
+    amountEur?: number;
+    constructor(data?: PartialMessage<UpdateBudgetRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.UpdateBudgetRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): UpdateBudgetRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): UpdateBudgetRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): UpdateBudgetRequest;
+    static equals(a: UpdateBudgetRequest | PlainMessage<UpdateBudgetRequest> | undefined, b: UpdateBudgetRequest | PlainMessage<UpdateBudgetRequest> | undefined): boolean;
+}
+/**
+ * Response from setting or clearing a budget.
+ *
+ * @generated from message transcodely.v1.UpdateBudgetResponse
+ */
+declare class UpdateBudgetResponse extends Message<UpdateBudgetResponse> {
+    /**
+     * The budget as it now stands, with current-period spend recomputed, so a
+     * caller that just moved the number can render the new bar without a second
+     * request. amount_eur is absent when the budget was cleared.
+     *
+     * @generated from field: transcodely.v1.Budget budget = 1;
+     */
+    budget?: Budget;
+    constructor(data?: PartialMessage<UpdateBudgetResponse>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.UpdateBudgetResponse";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): UpdateBudgetResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): UpdateBudgetResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): UpdateBudgetResponse;
+    static equals(a: UpdateBudgetResponse | PlainMessage<UpdateBudgetResponse> | undefined, b: UpdateBudgetResponse | PlainMessage<UpdateBudgetResponse> | undefined): boolean;
+}
+/**
+ * Request to read the organization's outstanding balance. The organization is
+ * taken from the X-Organization-ID header.
+ *
+ * @generated from message transcodely.v1.GetOutstandingBalanceRequest
+ */
+declare class GetOutstandingBalanceRequest extends Message<GetOutstandingBalanceRequest> {
+    constructor(data?: PartialMessage<GetOutstandingBalanceRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.GetOutstandingBalanceRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): GetOutstandingBalanceRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): GetOutstandingBalanceRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): GetOutstandingBalanceRequest;
+    static equals(a: GetOutstandingBalanceRequest | PlainMessage<GetOutstandingBalanceRequest> | undefined, b: GetOutstandingBalanceRequest | PlainMessage<GetOutstandingBalanceRequest> | undefined): boolean;
+}
+/**
+ * Response carrying the outstanding balance and its threshold.
+ *
+ * @generated from message transcodely.v1.GetOutstandingBalanceResponse
+ */
+declare class GetOutstandingBalanceResponse extends Message<GetOutstandingBalanceResponse> {
+    /**
+     * Always present. An organization that owes nothing gets one with
+     * outstanding_cents 0 and its threshold still populated, so a card can show
+     * the headroom before anything has been spent.
+     *
+     * @generated from field: transcodely.v1.OutstandingBalance balance = 1;
+     */
+    balance?: OutstandingBalance;
+    constructor(data?: PartialMessage<GetOutstandingBalanceResponse>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.GetOutstandingBalanceResponse";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): GetOutstandingBalanceResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): GetOutstandingBalanceResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): GetOutstandingBalanceResponse;
+    static equals(a: GetOutstandingBalanceResponse | PlainMessage<GetOutstandingBalanceResponse> | undefined, b: GetOutstandingBalanceResponse | PlainMessage<GetOutstandingBalanceResponse> | undefined): boolean;
+}
+/**
+ * Request to settle the outstanding balance now. The organization is taken from
+ * the X-Organization-ID header.
+ *
+ * It carries no amount ON PURPOSE. The figure is whatever the ledger says at the
+ * instant the settlement runs, and letting a caller name its own number would
+ * let a stale page pay less than is owed and leave the difference looking
+ * settled.
+ *
+ * @generated from message transcodely.v1.SettleOutstandingBalanceRequest
+ */
+declare class SettleOutstandingBalanceRequest extends Message<SettleOutstandingBalanceRequest> {
+    constructor(data?: PartialMessage<SettleOutstandingBalanceRequest>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.SettleOutstandingBalanceRequest";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): SettleOutstandingBalanceRequest;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): SettleOutstandingBalanceRequest;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): SettleOutstandingBalanceRequest;
+    static equals(a: SettleOutstandingBalanceRequest | PlainMessage<SettleOutstandingBalanceRequest> | undefined, b: SettleOutstandingBalanceRequest | PlainMessage<SettleOutstandingBalanceRequest> | undefined): boolean;
+}
+/**
+ * Response from settling an outstanding balance.
+ *
+ * @generated from message transcodely.v1.SettleOutstandingBalanceResponse
+ */
+declare class SettleOutstandingBalanceResponse extends Message<SettleOutstandingBalanceResponse> {
+    /**
+     * The statement that was produced.
+     *
+     * @generated from field: transcodely.v1.Settlement settlement = 1;
+     */
+    settlement?: Settlement;
+    /**
+     * The balance as it now stands — zero, with the block lifted and the steps
+     * re-armed — so a caller that just paid can render the new state without a
+     * second request.
+     *
+     * @generated from field: transcodely.v1.OutstandingBalance balance = 2;
+     */
+    balance?: OutstandingBalance;
+    constructor(data?: PartialMessage<SettleOutstandingBalanceResponse>);
+    static readonly runtime: typeof proto3;
+    static readonly typeName = "transcodely.v1.SettleOutstandingBalanceResponse";
+    static readonly fields: FieldList;
+    static fromBinary(bytes: Uint8Array, options?: Partial<BinaryReadOptions>): SettleOutstandingBalanceResponse;
+    static fromJson(jsonValue: JsonValue, options?: Partial<JsonReadOptions>): SettleOutstandingBalanceResponse;
+    static fromJsonString(jsonString: string, options?: Partial<JsonReadOptions>): SettleOutstandingBalanceResponse;
+    static equals(a: SettleOutstandingBalanceResponse | PlainMessage<SettleOutstandingBalanceResponse> | undefined, b: SettleOutstandingBalanceResponse | PlainMessage<SettleOutstandingBalanceResponse> | undefined): boolean;
+}
 
 /**
- * An organization's billing statements — read-only.
+ * An organization's money: statements, budget, and outstanding balance.
  *
  * Unlike every other namespace, billing settles a whole organization rather
  * than a single app, so it is **not** available to API-key callers: a key is
@@ -2518,7 +3358,10 @@ declare class CreateBillingPortalSessionResponse extends Message<CreateBillingPo
  * ```
  *
  * Invoices are generated automatically when a period closes. There is no API to
- * create, edit, or delete one — a statement records what happened.
+ * create, edit, or delete one — a statement records what happened. The two
+ * writes here do not contradict that: {@link updateBudget} moves the customer's
+ * own alert threshold, and {@link settleOutstandingBalance} closes the period
+ * early rather than editing anything already recorded.
  */
 declare class Billing {
     private readonly transport;
@@ -2570,6 +3413,78 @@ declare class Billing {
      * than storing the URL.
      */
     createPortalSession(opts?: CallOptions): Promise<BillingPortalSession>;
+    /**
+     * Retrieve the organization's monthly budget together with the spend it is
+     * measured against — everything a budget card needs, in one call.
+     *
+     * A budget only ever **notifies**: crossing 100% sends an email and changes
+     * nothing else. The hard cap is the per-app spend limit
+     * (`client.apps.setSpendLimit`), which rejects new jobs at 100%.
+     *
+     * Always returns a budget. An organization with none set gets one with
+     * `amountEur` and `usedPercent` absent and `spentEur` still populated, so the
+     * current period's spend renders before a budget exists.
+     */
+    retrieveBudget(opts?: CallOptions): Promise<Budget>;
+    /**
+     * Set or clear the organization's monthly budget. Provide `amountEur` (must
+     * be > 0) to set it; omit it to clear the budget and stop the alert emails.
+     * {@link setBudget} and {@link clearBudget} are the ergonomic shorthands.
+     *
+     * The returned budget has current-period spend recomputed, so a caller that
+     * just moved the number can re-render without a second request.
+     */
+    updateBudget(req?: PartialMessage<UpdateBudgetRequest>, opts?: CallOptions): Promise<Budget>;
+    /**
+     * Set the organization's monthly budget in EUR (must be > 0).
+     *
+     * Alert emails fire once per billing period at each of `budget.alertSteps`
+     * (50%, 80%, 100% today). Raising or lowering the amount mid-period never
+     * re-arms a step already listed in `budget.notifiedSteps`.
+     */
+    setBudget(amountEur: number, opts?: CallOptions): Promise<Budget>;
+    /**
+     * Clear the organization's monthly budget, turning the alert emails off —
+     * omitting the optional amount is the only way to switch them off.
+     */
+    clearBudget(opts?: CallOptions): Promise<Budget>;
+    /**
+     * Retrieve the organization's outstanding balance — usage accrued but not yet
+     * captured onto a statement — together with the threshold it is measured
+     * against.
+     *
+     * Distinct from {@link retrieveUpcoming}, which reports what the **current
+     * period** has accrued: this is what is **unsettled**, so it also carries
+     * anything an earlier period left uncaptured, and it is the number that
+     * decides whether new jobs are admitted.
+     *
+     * Nothing is restricted as it climbs — reminder emails go out at 80%, 100%,
+     * 125%, 150% and 175% and service continues past the threshold on purpose.
+     * Only at `hardStopCents` (twice the threshold) are new jobs refused, with
+     * error code `outstanding_balance_exceeded`; queued and running work still
+     * finishes and playback keeps serving. Branch on `blocked`, which reads the
+     * same numbers the admission gate reads.
+     */
+    retrieveOutstandingBalance(opts?: CallOptions): Promise<OutstandingBalance>;
+    /**
+     * Pay the outstanding balance now, without waiting for the period to end.
+     *
+     * Closes the current period at this instant and produces a real statement —
+     * an ordinary invoice, readable through {@link retrieve} — which the payment
+     * provider then charges. On success the balance is zero and any admission
+     * block is lifted immediately; the response carries the refreshed balance too,
+     * so no follow-up read is needed.
+     *
+     * Takes no amount on purpose: the figure is whatever the ledger says at the
+     * instant it runs, so a stale page cannot underpay and leave the difference
+     * looking settled.
+     *
+     * Throws {@link PreconditionError} with code `settlement_unavailable` when the
+     * deployment has mid-cycle settlement switched off — check
+     * `balance.settlementAvailable` before offering a "pay now" action — and with
+     * `nothing_outstanding` when there is nothing to pay.
+     */
+    settleOutstandingBalance(opts?: CallOptions): Promise<SettleOutstandingBalanceResponse>;
 }
 
 /**
@@ -4688,6 +5603,11 @@ declare class StreamingConfig extends Message<StreamingConfig> {
      * Example: "video_{resolution}" produces "video_1080p.m3u8"
      * Default: "{codec}_{resolution}" produces "h264_1080p.m3u8"
      *
+     * The rendered value becomes a filename and is also carried through the
+     * packager's stream descriptors, so the accepted charset is deliberately
+     * narrow: letters, digits, `_`, `-`, `.` and the `{}` that delimit template
+     * variables. No path separators, no `..`, and none of `, : ; ' " \`.
+     *
      * @generated from field: optional string hls_variant_pattern = 12;
      */
     hlsVariantPattern?: string;
@@ -4779,6 +5699,12 @@ declare class BurnInStyle extends Message<BurnInStyle> {
     /**
      * Font family name. Default: "Arial".
      *
+     * Letters, digits, spaces, `_` and `-` only. The value is embedded in the
+     * renderer's style string, where a quote, comma or semicolon would terminate
+     * it and let whatever follows parse as further styling arguments.
+     *
+     * Example: "DejaVu Sans"
+     *
      * @generated from field: optional string font_family = 1;
      */
     fontFamily?: string;
@@ -7651,6 +8577,11 @@ declare class HLSConfig extends Message<HLSConfig> {
      * Variables: {codec}, {resolution}, {bitrate}, {index}
      * Default: "{codec}_{resolution}"
      *
+     * The rendered value becomes a filename and is also carried through the
+     * packager's stream descriptors, so the accepted charset is deliberately
+     * narrow: letters, digits, `_`, `-`, `.` and the `{}` that delimit template
+     * variables. No path separators, no `..`, and none of `, : ; ' " \`.
+     *
      * @generated from field: optional string variant_pattern = 4;
      */
     variantPattern?: string;
@@ -9846,6 +10777,18 @@ declare class Video extends Message<Video> {
      */
     outputSizeBytes: bigint;
     /**
+     * Total billed by the transcode job that produced this video, in EUR.
+     *
+     * Despite the name this is the job's WHOLE total, not encoding alone: a
+     * job's total already includes every fee billed on it, so for a video
+     * captioned inline (the auto_captions upload flag) the captions fee is part
+     * of this number, as is the flat per-job processing fee. Absent until the
+     * job settles.
+     *
+     * Prefer total_cost. This field covers one job, so it misses the cost of
+     * later jobs run against the video, and adding captions_cost to it
+     * double-counts inline captions.
+     *
      * @generated from field: optional double encoding_cost = 31;
      */
     encodingCost?: number;
@@ -9857,11 +10800,35 @@ declare class Video extends Message<Video> {
      * confirmed only when a caption artifact is actually delivered, so voided
      * and still-estimated fees are never counted. This is a per-feature
      * breakdown of already-billed job totals, not an extra charge on top of
-     * them.
+     * them: it is contained in total_cost, never added to it.
      *
      * @generated from field: optional double captions_cost = 50;
      */
     captionsCost?: number;
+    /**
+     * Everything this video has cost, in EUR: the sum of the settled totals of
+     * every job billed for it — the transcode that produced it plus any later
+     * job that took it as input (retro captions, for example).
+     *
+     * This is the authoritative per-video figure and the one to display. It is
+     * built from the same job totals the billing ledger is written from, so it
+     * reconciles with the invoice; captions_cost is a breakdown inside it.
+     * Absent while no linked job has settled yet.
+     *
+     * @generated from field: optional double total_cost = 52;
+     */
+    totalCost?: number;
+    /**
+     * Why this video failed, in one sentence a customer can act on. Present only
+     * when status is "error"; absent for every other status.
+     *
+     * This is curated copy, never raw failure text — it will not contain
+     * encoder output, storage-provider responses, or internal identifiers. When
+     * the video has a linked job, that job's error_message says the same thing.
+     *
+     * @generated from field: optional string error_message = 51;
+     */
+    errorMessage?: string;
     /**
      * Timestamps.
      *
@@ -12204,10 +13171,14 @@ declare class Organization extends Message<Organization> {
      */
     planName?: string;
     /**
-     * Whether this org must have a payment method on file. NOT ENFORCED: no
-     * create, dispatch or delivery path reads this today. It records intent
-     * ahead of the release that starts requiring one, at which point orgs
-     * already carrying false are the grandfathered population.
+     * Whether this org must have a payment method on file. ENFORCED: with no
+     * usable payment method a required org derives a restricting
+     * billing_standing, and its jobs resolve to the free tier's limits rather
+     * than to its plan.
+     *
+     * Organizations created before the enforcement release carry false and are
+     * the grandfathered population — unaffected until an operator turns it on.
+     * A comped org (billing_exempt) is off the hook whatever this says.
      *
      * @generated from field: bool payment_method_required = 11;
      */
@@ -12226,19 +13197,24 @@ declare class Organization extends Message<Organization> {
      * Derived payment health. Always BILLING_STANDING_ACTIVE when
      * payment_method_required is false, whatever the facts below say.
      *
+     * Filled on admin reads, and on OrganizationService.Get for a member of the
+     * org (JWT/portal actors). Absent on the API-key read path, which gets a
+     * refusal code on the create instead, and on List.
+     *
      * @generated from field: transcodely.v1.BillingStanding billing_standing = 13;
      */
     billingStanding: BillingStanding;
     /**
      * When the current grace window closes, present only while billing_standing
-     * is BILLING_STANDING_GRACE.
+     * is BILLING_STANDING_GRACE. Filled wherever billing_standing is.
      *
      * @generated from field: optional google.protobuf.Timestamp grace_until = 14;
      */
     graceUntil?: Timestamp;
     /**
      * Stable token explaining billing_standing; same vocabulary as
-     * BillingProfile.standing_reason.
+     * BillingProfile.standing_reason. ADMIN reads only — tokens like
+     * card_expired are payment-method detail, which a plain member never sees.
      *
      * @generated from field: string standing_reason = 15;
      */
@@ -12262,6 +13238,20 @@ declare class Organization extends Message<Organization> {
      * @generated from field: int32 consecutive_dunned_cycles = 17;
      */
     consecutiveDunnedCycles: number;
+    /**
+     * How automation may treat this organization — see BillingTreatment.
+     *
+     * ADMIN reads only, like standing_reason above: it is a statement about a
+     * commercial relationship, and a customer does not learn from an API field
+     * that we have decided never to interrupt them.
+     *
+     * Orthogonal to billing_standing. A trusted org can report
+     * BILLING_STANDING_DELINQUENT and still be untouched by every automated
+     * path — the founder gets an email instead.
+     *
+     * @generated from field: transcodely.v1.BillingTreatment billing_treatment = 18;
+     */
+    billingTreatment: BillingTreatment;
     constructor(data?: PartialMessage<Organization>);
     static readonly runtime: typeof proto3;
     static readonly typeName = "transcodely.v1.Organization";
@@ -13549,9 +14539,10 @@ declare enum UserStatus {
     DELETED = 3
 }
 /**
- * User approval status. Until we have a payment gate, every new sign-up is
- * held in PENDING and must be approved by a staff member before they can use
- * the platform.
+ * Dashboard access review status. New sign-ups are approved automatically
+ * unless the platform is operating in manual-review mode, in which case they
+ * stay PENDING until a staff member approves them. Staff can reject a user at
+ * any time to revoke dashboard access.
  *
  * @generated from enum transcodely.v1.UserApprovalStatus
  */
@@ -13641,8 +14632,7 @@ declare class User extends Message<User> {
      */
     updatedAt?: Timestamp;
     /**
-     * Whether this user has been approved by a staff member.
-     * New sign-ups default to PENDING.
+     * Whether this user may use the dashboard.
      *
      * @generated from field: transcodely.v1.UserApprovalStatus approval_status = 11;
      */
@@ -13654,7 +14644,8 @@ declare class User extends Message<User> {
      */
     approvalDecidedAt?: Timestamp;
     /**
-     * The staff member's user_id who decided approval.
+     * The staff member's user_id who decided approval. Absent when the user was
+     * approved automatically rather than by a person.
      *
      * @generated from field: optional string approval_decided_by_user_id = 13;
      */
@@ -14116,7 +15107,7 @@ declare class Transcodely {
 }
 
 /** SDK version. Bumped by release-please from package.json on each tag. */
-declare const SDK_VERSION = "0.3.6";
+declare const SDK_VERSION = "0.3.7";
 /**
  * API version this SDK release is pinned to. Sent on every request as
  * `Transcodely-Version`. Customers can override per-client via the
@@ -14126,4 +15117,4 @@ declare const API_VERSION = "2026-05-03";
 /** Default base URL for the production Transcodely API. */
 declare const DEFAULT_BASE_URL = "https://api.transcodely.com";
 
-export { APIConnectionError, APIError, Event as APIEvent, APIKey, API_VERSION, AV1Options, AbortMultipartUploadRequest, App, AppStatus, ArchiveAppRequest, ArchiveOriginRequest, ArchivePresetRequest, AudioCodec, AudioSettings, AudioStreamInfo, AudioTrackConfig, AuthenticationError, AutoABRConfig, AutoProfileDefaults, BYOKConfig, BillingPaymentMethod, BillingPortalSession, BillingProfile, BillingStanding, BitrateMode, BurnInStyle, type CallOptions, CancelJobRequest, CancelJobResponse, ChapterPoint, ChapterResult, CheckSlugRequest, CheckSlugResponse, ClipConfig, CompleteMultipartUploadRequest, CompleteMultipartUploadResponse, CompleteUploadRequest, CompleteUploadResponse, CompletedPart, ConfirmJobRequest, ConfirmJobResponse, ConflictError, Container, ContentAnalysis, ContentAwareConfig, ContentAwareMode, ContentType, CreateAPIKeyRequest, CreateAPIKeyResponse, CreateAppRequest, CreateAppResponse, CreateBillingPortalSessionRequest, CreateBillingPortalSessionResponse, CreateFromUrlRequest, CreateFromUrlResponse, CreateJobRequest, CreateJobResponse, CreateMultipartUploadRequest, CreateMultipartUploadResponse, CreateOrganizationRequest, CreateOrganizationResponse, CreateOriginRequest, CreateOriginResponse, CreatePresetRequest, CreatePresetResponse, CreateUploadRequest, CreateUploadResponse, CreateWebhookEndpointRequest, CreateWebhookEndpointResponse, DASHConfig, DEFAULT_BASE_URL, DEFAULT_TOLERANCE_SECONDS, DRMConfig, DRMSystem, DailyUsage, DeleteVideoRequest, DeleteWebhookEndpointRequest, DeleteWebhookEndpointResponse, DeliveryFormat, DuplicatePresetRequest, DuplicatePresetResponse, EVENT_ID_HEADER, EnableHostingRequest, EnableHostingResponse, EncryptionScheme, EndpointHealthSummary, ErrorDetails, type EventBase, ExecutionTiming, type FieldViolation, GOPAlignmentMode, GcsCredentials, GcsOriginConfig, GetAPIKeyRequest, GetAPIKeyResponse, GetAppRequest, GetAppResponse, GetBillingProfileRequest, GetBillingProfileResponse, GetEndpointHealthRequest, GetEndpointHealthResponse, GetInvoiceRequest, GetInvoiceResponse, GetJobRequest, GetJobResponse, GetMeRequest, GetMeResponse, GetMembershipRequest, GetMembershipResponse, GetOrganizationRequest, GetOrganizationResponse, GetOriginRequest, GetOriginResponse, GetPresetBySlugRequest, GetPresetBySlugResponse, GetPresetRequest, GetPresetResponse, GetSpendRequest, GetSpendResponse, GetStatsRequest, GetStatsResponse, GetUpcomingInvoiceRequest, GetUpcomingInvoiceResponse, GetUploadPartUrlsRequest, GetUploadPartUrlsResponse, GetUsageRequest, GetUsageResponse, GetUserRequest, GetUserResponse, GetVideoRequest, GetVideoResponse, H264Options, H265Options, HDRConfig, HDRFormat, HDRMode, HLSConfig, HLSPlaylistType, HLSSegmentFormat, HealthBucket, HostingConfig, HttpCredentials, HttpOriginConfig, InputMetadata, InvalidRequestError, Invoice, InvoiceLineItem, InvoiceLineType, InvoiceStatus, Job, JobCostBreakdown, JobCostLine, JobCostLineType, JobFee, JobOutput, JobPriority, JobStatus, KeyServerConfig, type KnownWebhookEvent, ListAPIKeysRequest, ListAPIKeysResponse, ListAppsRequest, ListAppsResponse, ListEventsRequest, ListEventsResponse, ListInvoicesRequest, ListInvoicesResponse, ListJobsRequest, ListJobsResponse, ListMembershipsRequest, ListMembershipsResponse, ListOrganizationsRequest, ListOrganizationsResponse, ListOriginsRequest, ListOriginsResponse, ListPresetsRequest, ListPresetsResponse, ListTopVideosRequest, ListTopVideosResponse, ListUsersRequest, ListUsersResponse, ListVideosRequest, ListVideosResponse, ListWebhookDeliveriesRequest, ListWebhookDeliveriesResponse, ListWebhookEndpointsRequest, ListWebhookEndpointsResponse, type LogEvent, Membership, MembershipRole, MembershipStatus, MembershipWithUser, NotFoundError, Organization, OrganizationStatus, Origin, OriginPermission, OriginProvider, OriginRef, OriginStatus, OutputFormat, OutputSpec, OutputStatus, OutputVariantResult, Page, PaginationRequest, PaginationResponse, PaymentMethodState, PermissionError, PreconditionError, Preset, PresetVariant, PricingSnapshot, QualityTier, R2Jurisdiction, R2OriginConfig, RateLimitError, RemoveMembershipRequest, ResendEventRequest, ResendEventResponse, Resolution, RetrieveEventRequest, RetrieveEventResponse, RetrieveWebhookEndpointRequest, RetrieveWebhookEndpointResponse, RevokeAPIKeyRequest, RotateWebhookSecretRequest, RotateWebhookSecretResponse, S3Credentials, S3OriginConfig, SDK_VERSION, SIGNATURE_HEADER, SegmentConfig, SendTestWebhookRequest, SendTestWebhookResponse, type SpendLimitNotification, StreamingConfig, SubtitleFormat, SubtitleOperation, SubtitleResult, SubtitleStreamInfo, SubtitleTrack, ThumbnailFormat, ThumbnailMode, ThumbnailResult, ThumbnailSpec, ToneMapping, TopVideo, Transcodely, type TranscodelyConfig, TranscodelyError, type UnknownWebhookEvent, UpdateAppRequest, UpdateAppResponse, UpdateHostingConfigRequest, UpdateHostingConfigResponse, UpdateMeRequest, UpdateMeResponse, UpdateMembershipRoleRequest, UpdateMembershipRoleResponse, UpdateOrganizationRequest, UpdateOrganizationResponse, UpdateOriginRequest, UpdateOriginResponse, UpdatePresetRequest, UpdatePresetResponse, UpdateSpendLimitRequest, UpdateSpendLimitResponse, UpdateVideoRequest, UpdateVideoResponse, UpdateWebhookEndpointRequest, UpdateWebhookEndpointResponse, UploadPart, UsageSummary, User, UserApprovalStatus, UserOrganization, UserStatus, UserWithOrganizations, VP9Options, ValidateOriginRequest, ValidateOriginResponse, ValidationResult, VariantPricingSnapshot, type VerifyOptions, Video, VideoCodec, VideoRendition, VideoSettings, VideoStatsDay, VideoStatsTotals, VideoStatus, VideoStreamInfo, VideoTextTrack, VideoVariant, VideoVisibility, WEBHOOK_EVENT_TYPES, WatchEventType, WatchJobRequest, WatchJobResponse, WatchVideoRequest, WatchVideoResponse, WatermarkAnchor, WatermarkConfig, WatermarkPixelPlacement, WebhookDelivery, WebhookEndpoint, WebhookError, type WebhookEvent, type WebhookEventType, WebhookPayloadError, WebhookSignatureError, WebhookTimestampError, Webhooks, constructEvent, isEventType, isKnownEvent, verifySignature };
+export { APIConnectionError, APIError, Event as APIEvent, APIKey, API_VERSION, AV1Options, AbortMultipartUploadRequest, App, AppStatus, ArchiveAppRequest, ArchiveOriginRequest, ArchivePresetRequest, AudioCodec, AudioSettings, AudioStreamInfo, AudioTrackConfig, AuthenticationError, AutoABRConfig, AutoProfileDefaults, BYOKConfig, BillingPaymentMethod, BillingPortalSession, BillingProfile, BillingStanding, BillingTreatment, BitrateMode, Budget, BurnInStyle, type CallOptions, CancelJobRequest, CancelJobResponse, CaptionStyle, ChapterPoint, ChapterResult, CheckSlugRequest, CheckSlugResponse, ClipConfig, CompleteMultipartUploadRequest, CompleteMultipartUploadResponse, CompleteUploadRequest, CompleteUploadResponse, CompletedPart, ConfirmJobRequest, ConfirmJobResponse, ConflictError, Container, ContentAnalysis, ContentAwareConfig, ContentAwareMode, ContentType, CreateAPIKeyRequest, CreateAPIKeyResponse, CreateAppRequest, CreateAppResponse, CreateBillingPortalSessionRequest, CreateBillingPortalSessionResponse, CreateFromUrlRequest, CreateFromUrlResponse, CreateJobRequest, CreateJobResponse, CreateMultipartUploadRequest, CreateMultipartUploadResponse, CreateOrganizationRequest, CreateOrganizationResponse, CreateOriginRequest, CreateOriginResponse, CreatePresetRequest, CreatePresetResponse, CreateUploadRequest, CreateUploadResponse, CreateWebhookEndpointRequest, CreateWebhookEndpointResponse, DASHConfig, DEFAULT_BASE_URL, DEFAULT_TOLERANCE_SECONDS, DRMConfig, DRMSystem, DailyUsage, DeleteVideoRequest, DeleteWebhookEndpointRequest, DeleteWebhookEndpointResponse, DeliveryFormat, DunningStage, DuplicatePresetRequest, DuplicatePresetResponse, EVENT_ID_HEADER, EnableHostingRequest, EnableHostingResponse, EncryptionScheme, EndpointHealthSummary, ErrorDetails, type EventBase, ExecutionTiming, ExposureThresholdSource, type FieldViolation, GOPAlignmentMode, GcsCredentials, GcsOriginConfig, GetAPIKeyRequest, GetAPIKeyResponse, GetAppRequest, GetAppResponse, GetBillingProfileRequest, GetBillingProfileResponse, GetBudgetRequest, GetBudgetResponse, GetEndpointHealthRequest, GetEndpointHealthResponse, GetInvoiceRequest, GetInvoiceResponse, GetJobRequest, GetJobResponse, GetMeRequest, GetMeResponse, GetMembershipRequest, GetMembershipResponse, GetOrganizationRequest, GetOrganizationResponse, GetOriginRequest, GetOriginResponse, GetOutstandingBalanceRequest, GetOutstandingBalanceResponse, GetPresetBySlugRequest, GetPresetBySlugResponse, GetPresetRequest, GetPresetResponse, GetSpendRequest, GetSpendResponse, GetStatsRequest, GetStatsResponse, GetUpcomingInvoiceRequest, GetUpcomingInvoiceResponse, GetUploadPartUrlsRequest, GetUploadPartUrlsResponse, GetUsageRequest, GetUsageResponse, GetUserRequest, GetUserResponse, GetVideoRequest, GetVideoResponse, H264Options, H265Options, HDRConfig, HDRFormat, HDRMode, HLSConfig, HLSPlaylistType, HLSSegmentFormat, HealthBucket, HostingConfig, HttpCredentials, HttpOriginConfig, InputMetadata, InvalidRequestError, Invoice, InvoiceLineItem, InvoiceLineType, InvoiceStatus, Job, JobCostBreakdown, JobCostLine, JobCostLineType, JobFee, JobOutput, JobPriority, JobStatus, KeyServerConfig, type KnownWebhookEvent, ListAPIKeysRequest, ListAPIKeysResponse, ListAppsRequest, ListAppsResponse, ListEventsRequest, ListEventsResponse, ListInvoicesRequest, ListInvoicesResponse, ListJobsRequest, ListJobsResponse, ListMembershipsRequest, ListMembershipsResponse, ListOrganizationsRequest, ListOrganizationsResponse, ListOriginsRequest, ListOriginsResponse, ListPresetsRequest, ListPresetsResponse, ListTopVideosRequest, ListTopVideosResponse, ListUsersRequest, ListUsersResponse, ListVideosRequest, ListVideosResponse, ListWebhookDeliveriesRequest, ListWebhookDeliveriesResponse, ListWebhookEndpointsRequest, ListWebhookEndpointsResponse, type LogEvent, Membership, MembershipRole, MembershipStatus, MembershipWithUser, NotFoundError, Organization, OrganizationStatus, Origin, OriginPermission, OriginProvider, OriginRef, OriginStatus, OutputFormat, OutputSpec, OutputStatus, OutputVariantResult, OutstandingBalance, Page, PaginationRequest, PaginationResponse, PaymentMethodState, PermissionError, PlayerConfig, PreconditionError, Preset, PresetVariant, PricingSnapshot, QualityTier, R2Jurisdiction, R2OriginConfig, RateLimitError, RemoveMembershipRequest, ResendEventRequest, ResendEventResponse, Resolution, RetrieveEventRequest, RetrieveEventResponse, RetrieveWebhookEndpointRequest, RetrieveWebhookEndpointResponse, RevokeAPIKeyRequest, RotateWebhookSecretRequest, RotateWebhookSecretResponse, S3Credentials, S3OriginConfig, SDK_VERSION, SIGNATURE_HEADER, SegmentConfig, SendTestWebhookRequest, SendTestWebhookResponse, SettleOutstandingBalanceRequest, SettleOutstandingBalanceResponse, Settlement, type SpendLimitNotification, StreamingConfig, SubtitleFormat, SubtitleOperation, SubtitleResult, SubtitleStreamInfo, SubtitleTrack, ThumbnailFormat, ThumbnailMode, ThumbnailResult, ThumbnailSpec, ToneMapping, TopVideo, Transcodely, type TranscodelyConfig, TranscodelyError, TrustTier, type UnknownWebhookEvent, UpdateAppRequest, UpdateAppResponse, UpdateBudgetRequest, UpdateBudgetResponse, UpdateHostingConfigRequest, UpdateHostingConfigResponse, UpdateMeRequest, UpdateMeResponse, UpdateMembershipRoleRequest, UpdateMembershipRoleResponse, UpdateOrganizationRequest, UpdateOrganizationResponse, UpdateOriginRequest, UpdateOriginResponse, UpdatePlayerConfigRequest, UpdatePlayerConfigResponse, UpdatePresetRequest, UpdatePresetResponse, UpdateSpendLimitRequest, UpdateSpendLimitResponse, UpdateVideoRequest, UpdateVideoResponse, UpdateWebhookEndpointRequest, UpdateWebhookEndpointResponse, UploadPart, UsageSummary, User, UserApprovalStatus, UserOrganization, UserStatus, UserWithOrganizations, VP9Options, ValidateOriginRequest, ValidateOriginResponse, ValidationResult, VariantPricingSnapshot, type VerifyOptions, Video, VideoCodec, VideoRendition, VideoSettings, VideoStatsDay, VideoStatsTotals, VideoStatus, VideoStreamInfo, VideoTextTrack, VideoVariant, VideoVisibility, WEBHOOK_EVENT_TYPES, WatchEventType, WatchJobRequest, WatchJobResponse, WatchVideoRequest, WatchVideoResponse, WatermarkAnchor, WatermarkConfig, WatermarkPixelPlacement, WebhookDelivery, WebhookEndpoint, WebhookError, type WebhookEvent, type WebhookEventType, WebhookPayloadError, WebhookSignatureError, WebhookTimestampError, Webhooks, constructEvent, isEventType, isKnownEvent, verifySignature };